Hello!

I'd like to find new maintainers for some of my packages because I have
had less time for Debian. I'd like to focus the small amount of time
that I have for Debian on other things.

For now, I intend to do my best to keep maintaining this package.
However, I will probably retitle this bug with the 'O:' prefix at some
point, indicating that I have orphaned it.

Feel free to upload a new version of the package and remove me from the
uploaders in debian/control.

Feel free to contact me with any questions. Also note that I always
willing to sponsor uploads!

Cheers,

The Debian NEW review of golang-github-roaringbitmap-roaring-v2 2.29.0-1 has been completed.

Decision: ACCEPTED
Reviewer: Andrew McMillan

Review comment:

Hi,

 in debian/copyright: the License: BSD-3-Clause text is truncated mid-sentence. It ends at:
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
…and jumps straight to License: Apache-2.0, missing the closing clause OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. (compare with the complete text at runcontainer.go:32). The embedded license is incomplete/invalid

1. Stale dependencies

golang-github-glycerine-go-unsnap-stream-dev and golang-github-tinylib-msgp-dev are listed in both Build-Depends and Depends, but nothing in the source tree imports or uses msgp or unsnap-stream anymore. They only appear in control, roaring64/Makefile (dev deps target), and README.md. They should be dropped.

2. Missing build dependency

production amd64 code imports golang.org/x/sys/cpu (bitsetops_avx512_amd64.go, popcnt_avx512_amd64.go, fillbits_vbmi2_amd64.go), but golang-golang-x-sys-dev is absent from both Build-Depends and Depends. With no vendor/ dir and module-aware dh-go, this is a required build dep.

3. Wrong Depends set on the -dev binary

the manually curated Depends mixes test-only/build-only deps with runtime deps:
- golang-github-stretchr-testify-dev and golang-github-google-uuid-dev are used only in _test.go files (e.g. roaring64/bsi64_test.go for uuid), not by library consumers — they shouldn't be runtime Depends.
- Conversely the real runtime dep golang-golang-x-sys-dev is missing.
- Notably the field uses ${misc:Depends} but not ${golang:Depends}, so dh-golang isn't auto-populating the runtime dependency set; the hand-curated list is what ships and it's incorrect/incomplete.


I hope this analysis is useful.

Thanks!

Full review details: https://dfsg-new-queue.debian.org/reviews/golang-github-roaringbitmap-roaring-v2

We believe that the bug you reported is fixed in the latest version of
golang-github-roaringbitmap-roaring-v2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 940416@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrew Lee (李健秋) <ajqlee@debian.org> (supplier of updated golang-github-roaringbitmap-roaring-v2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 27 Sep 2026 12:32:37 +0200
Source: golang-github-roaringbitmap-roaring-v2
Binary: golang-github-roaringbitmap-roaring-v2-dev
Architecture: source all
Version: 2.29.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Andrew Lee (李健秋) <ajqlee@debian.org>
Description:
 golang-github-roaringbitmap-roaring-v2-dev - Roaring bitmaps in Go
Closes: 940416 1123003
Changes:
 golang-github-roaringbitmap-roaring-v2 (2.29.0-1) unstable; urgency=medium
 .
   * debian/watch: Switch to version 5 and pin to major version v2.
   * New upstream version 2.29.0
   * debian/control: rename source/binary and vcs-tags.
   * Drop legacy patches.
   * debian/control: drop Priority: optional (now the default).
   * debian/control: Drop Rules-Requires-Root: no (now the default).
   * debian/control: bump to Standards-version to 4.7.4.
   * debian/control: bump to debhelper 14.
   * debian/control: put myself as Uploaders. (Closes: #940416)
   * debian/rules: patch from Chris Lamb to make package build
     reproducible. (Closes: #1123003)
   * debian/copyright: update.
   * debian/control: switch to Module-Aware builds via dh-go.
   * debian/gbp.conf: switch to Go Team defaults gbp.conf.
   * debian/salsa-ci.yml: switch to Go Team Defaults salsa-ci.yml.
Checksums-Sha1:
 5726752d4b094c0edf5ff100bb405a059bab2720 2596 golang-github-roaringbitmap-roaring-v2_2.29.0-1.dsc
 d81d67635288902cb58d7bcd68b99d8c053c8c25 134336764 golang-github-roaringbitmap-roaring-v2_2.29.0.orig.tar.xz
 521fd93ef74275f71aced6391c123df7f6e66e0c 3540 golang-github-roaringbitmap-roaring-v2_2.29.0-1.debian.tar.xz
 236b453534b94d2f59dc7f0ff4d7ec57fb2542a8 134327456 golang-github-roaringbitmap-roaring-v2-dev_2.29.0-1_all.deb
 607f4773c64ff773fd88d335a9b694df76725090 6971 golang-github-roaringbitmap-roaring-v2_2.29.0-1_amd64.buildinfo
Checksums-Sha256:
 d586f2d711852328a151ad3e43f294d460b290f9346ca1840b483963b27ade32 2596 golang-github-roaringbitmap-roaring-v2_2.29.0-1.dsc
 90933423ac714522e2e9f23991f71ec5cf617fae7fba625ca304d3164b80e14d 134336764 golang-github-roaringbitmap-roaring-v2_2.29.0.orig.tar.xz
 288e0087e0b6af4499eed9e5f6a6b0b51b2eb77dbbda47986e97dc2aa88e5f0b 3540 golang-github-roaringbitmap-roaring-v2_2.29.0-1.debian.tar.xz
 a8b9d16d1d360243b4f35138c0a7b6fa0bb9c398dbb0b0d6f88a26edd75f8f33 134327456 golang-github-roaringbitmap-roaring-v2-dev_2.29.0-1_all.deb
 4cbfaa491a5a1cda90d31716f67498987ebbb019b04d7ebc72483df05ea4f7f3 6971 golang-github-roaringbitmap-roaring-v2_2.29.0-1_amd64.buildinfo
Files:
 29d9f9f1891a579ebf04630de2abfbca 2596 golang optional golang-github-roaringbitmap-roaring-v2_2.29.0-1.dsc
 960664f4b3c62c807fd8629af76bd2c4 134336764 golang optional golang-github-roaringbitmap-roaring-v2_2.29.0.orig.tar.xz
 69ef5da7562ec9b7d5df867c27d4e74e 3540 golang optional golang-github-roaringbitmap-roaring-v2_2.29.0-1.debian.tar.xz
 f1e11f9d452e57742c2ca4fd340905f3 134327456 golang optional golang-github-roaringbitmap-roaring-v2-dev_2.29.0-1_all.deb
 279fd48d76efdb144d9fb3bba74bf21b 6971 golang optional golang-github-roaringbitmap-roaring-v2_2.29.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE703UlH90QYpfEyJV58vhUqwX+XMFAmq49MUACgkQ58vhUqwX
+XMo8BAAgq3f+zs0hvDyIfk/BGfX/n7/MPuuovdmt/x8YQIY47E/I8ePokasvOd7
cHgVHKgryC1WFGlcxLSVJ2A+DwlFGhcoskJpJW98urUn50N6AHzME6K0VAdxJfMD
hVJuGIUGMzLEMtvmmpo77oqOz9juj7a8m+gROp0rUQK26rFCcfTYL9SfilH8oAgT
S3EMGGygo+yZbzNCzp58ZgfbUaOfKMLgRsdNVBjYDaES1yuvCvekGsquAPTzwmMX
uvvJbSouoffrV3+kmLYxD7dpCU8jf8MXbrTYnG1DXbRKsa5X9WW7uawwr9VaVOOr
JtPh6qVGHBnCuqjmFh6BmkjqPg1fQcjGQeqgA3MyHq+QPnVejsKFZmQTNxAy6+iK
mVWY+u1FMuujuWFRDvS6K8FXTi2dKfpikhItu4Rs8AY10IgAKPue0tzjHRj9UPow
yKIoYm2zXmqKJFtt/UZKyuroHAnSPYml6J+EhHEiVqxfreIimzd1FbKhypSKO9Yj
/rvb/bhEXpTl+Pj39gXvVj8//OTiTzbcweRm5bwEMAI0S2te8NTh58DeUHXIIcxs
750j4mtgSeLfKbiUdaVtE9ClRNLgubqSoYaMrWI0o1ZEVBNLzErA8pgrvha0G9V5
mwz4ZuFhxJ8WRNCW/QxrbV5zhZsgB6vZ1HdGh8DKwgb+2ch5SY4=
=j0k1
-----END PGP SIGNATURE-----