#916494 devscripts: [uscan] running uscan multiple times makes ../*.asc grow

Package:
devscripts
Source:
devscripts
Description:
scripts to make the life of a Debian Package maintainer easier
Submitter:
Daniel Kahn Gillmor
Date:
2018-12-15 01:57:05 UTC
Severity:
normal
#916494#5
Date:
2018-12-15 01:53:00 UTC
From:
To:
if i run uscan multiple times in a single source directory, each time
the signature gets *appended* to the appropriate *.asc file, rather
than replacing it.  below is a transcript -- note that the *.asc grows
each time uscan is run:

0 dkg@test:~/src/libgpg-error/libgpg-error$ rm ../*1.33*.asc
rm: remove regular file '../libgpg-error_1.33.orig.tar.bz2.asc'? y
0 dkg@test:~/src/libgpg-error/libgpg-error$ uscan
uscan: Newest version of libgpg-error on remote site is 1.33, local version is 1.32
uscan:    => Newer package available from
https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.33.tar.bz2
gpgv: Signature made Fri 07 Dec 2018 11:17:18 AM EST
gpgv:                using RSA key D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
gpgv: Good signature from "Werner Koch (dist sig)"
Leaving ../libgpg-error_1.33.orig.tar.bz2 where it is.
uupdate: ../libgpg-error-1.33 directory exists.
uupdate: remove ../libgpg-error-1.33 directory.
uupdate: -> Copy to      libgpg-error_1.33-1.debian.tar.xz
0 dkg@test:~/src/libgpg-error/libgpg-error$ ls -la ../*1.33*.asc
-rw-r--r-- 1 dkg dkg 534 Dec 14 20:50 ../libgpg-error_1.33.orig.tar.bz2.asc
0 dkg@test:~/src/libgpg-error/libgpg-error$ uscan
uscan: Newest version of libgpg-error on remote site is 1.33, local version is 1.32
uscan:    => Newer package available from
https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.33.tar.bz2
gpgv: Signature made Fri 07 Dec 2018 11:17:18 AM EST
gpgv:                using RSA key D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
gpgv: Good signature from "Werner Koch (dist sig)"
Leaving ../libgpg-error_1.33.orig.tar.bz2 where it is.
uupdate: ../libgpg-error-1.33 directory exists.
uupdate: remove ../libgpg-error-1.33 directory.
uupdate: -> Copy to      libgpg-error_1.33-1.debian.tar.xz
0 dkg@test:~/src/libgpg-error/libgpg-error$ ls -la ../*1.33*.asc
-rw-r--r-- 1 dkg dkg 1068 Dec 14 20:50 ../libgpg-error_1.33.orig.tar.bz2.asc
0 dkg@test:~/src/libgpg-error/libgpg-error$ uscan
uscan: Newest version of libgpg-error on remote site is 1.33, local version is 1.32
uscan:    => Newer package available from
https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.33.tar.bz2
gpgv: Signature made Fri 07 Dec 2018 11:17:18 AM EST
gpgv:                using RSA key D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
gpgv: Good signature from "Werner Koch (dist sig)"
Leaving ../libgpg-error_1.33.orig.tar.bz2 where it is.
uupdate: ../libgpg-error-1.33 directory exists.
uupdate: remove ../libgpg-error-1.33 directory.
uupdate: -> Copy to      libgpg-error_1.33-1.debian.tar.xz
0 dkg@test:~/src/libgpg-error/libgpg-error$ ls -la ../*1.33*.asc
-rw-r--r-- 1 dkg dkg 1602 Dec 14 20:50 ../libgpg-error_1.33.orig.tar.bz2.asc
0 dkg@test:~/src/libgpg-error/libgpg-error$


The result of the *.asc changing size/content is that a subsequent
upload will be rejected by ftp-master because the *.asc referenced
doesn't match the size/content of the previously uploaded *.asc.
--- /etc/devscripts.conf ---

--- ~/.devscripts ---
DEBSIGN_KEYID=0EE5BE979282D80B9F7540F1CCD2ED94D21739E9