#1152745 golang-github-anchore-go-sync: Need new version 0.1.2 for golang-github-anchore-stereoscope

#1152745#5
Date:
2026-10-31 23:44:32 UTC
From:
To:
Hello.

While building golang-github-anchore-stereoscope, this error happened:

https://buildd.debian.org/status/fetch.php?pkg=golang-github-anchore-stereoscope&arch=all&ver=0.3.2-1&stamp=1793176899&raw=0

The failing test says this:

func TestImage_Read_panicInAStageBecomesAnError(t *testing.T) {
         // stereoscope reads untrusted images inside long-running services, so a panic in a worker
         // must not take the process down. Before the stages were driven by go-sync the panic
         // happened on a goroutine the caller could not recover from at all.
         //
         // What this pins is containment: no crash, no hang, and the panic reaches the caller as an
         // error. It is deliberately not a regression test for go-sync losing the error it recovered
         // (fixed in v0.1.2) - two layers do not reliably open that window, and go-sync covers it
         // directly in Test_CollectHandlesPanicsConcurrently.


So, apparently, we should probably upgrade src:golang-github-anchore-go-sync to version 0.1.2 to avoid this.

(I would do it myself, but I have nevert worked with packages using this repository layout yet)

Thanks.