diff options
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/changelog | 26870 | ||||
| -rw-r--r-- | debian/control | 172 | ||||
| -rw-r--r-- | debian/copyright | 86 | ||||
| -rw-r--r-- | debian/dirs | 3 | ||||
| -rw-r--r-- | debian/doc-base | 12 | ||||
| -rw-r--r-- | debian/docs | 5 | ||||
| -rw-r--r-- | debian/duck-overrides | 5 | ||||
| -rw-r--r-- | debian/gbp.conf | 6 | ||||
| -rw-r--r-- | debian/lintian.examples | 1 | ||||
| -rw-r--r-- | debian/lintian.install | 10 | ||||
| -rw-r--r-- | debian/lintian.links | 7 | ||||
| -rw-r--r-- | debian/lintian.maintscript | 1 | ||||
| -rw-r--r-- | debian/manpages | 2 | ||||
| -rwxr-xr-x | debian/rules | 71 | ||||
| -rw-r--r-- | debian/salsa-ci.yml | 30 | ||||
| -rw-r--r-- | debian/source/format | 1 | ||||
| -rw-r--r-- | debian/source/lintian-overrides | 3 | ||||
| -rwxr-xr-x | debian/tests/build-and-evaluate-test-packages | 10 | ||||
| -rw-r--r-- | debian/tests/control | 52 |
19 files changed, 27347 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 0000000..32ea5f6 --- /dev/null +++ b/debian/changelog @@ -0,0 +1,26870 @@ +lintian (2.117.0) unstable; urgency=low + + The "One Year Later" Release. + + * Summary of tag changes: + + Removed: + - package-supports-alternative-init-but-no-init.d-script + + [ Multiple developers multiple times ] + * Refresh data. (Re-adds the Loongson 64 architecture, see #1028654) + * Run perltidy + + [ Axel Beckert ] + * Fix "Use of uninitialized value $LINTIAN_CFG" in debug output. + * data/spelling/corrections: Drop valid word "resizeable". + * Salsa CI: add bookworm-backports, drop buster-backports. + * Fix test suite issues caused by usrmerge changes in debhelper. + * Udev+AppstreamMetadata checks: Detect udev rules also under /usr/lib/. + * Add b-d on debhleper ≥ 13.11.8~ if testsuite is run at build time. + * L::C::B::Corrupted::check_elf_issues(): Return immediately if file is + no ELF file. Thanks to Corvin Köhne via MR !486. + * L::Data: Rename one usage of $releases to $stylesheets. (Fixes copy + and paste error.) + * L::Data: lintian.d.o no more exists, so don't fetch files from there. + * Add minimal test for "@recommends@" from !464 to "testsuite-general". + * Salsa CI: Drop backports to bullseye (oldstable): Testsuite requires a + newer debhelper version than available in bullseye-backports. + * private/generate-tag-summary --in-place: Avoid mojibake by not + double-encoding UTF-8. + + [ Andreas Beckmann ] + * dh_dkms is now provided by dh-dkms instead of dkms. (See #1013417) + + [ Simon McVittie ] + * Add test coverage for #1027744. + * Treat man pages as optional for executables in /usr/libexec/. + * Add test asserting that man pages are not required for libexec binaries. + * obsolete-packages: Report gnome-common as obsolete. + * tags: Raise typelib-not-in-multiarch-directory to warning level. + + [ Guido Günther ] + * Add byzantium and octarine as known PureOS distributions. + + [ Hideki Yamane ] + * Disable BLHC and BUILD_PACKAGE_ANY in debian/salsa-ci.yml. + + [ Simon Quigley ] + * Add "mantic" and "noble" as a known Ubuntu distributions. + + [ Nilesh Patra ] + * Make lintian recognize fasttrack as a dist. + * Update known dists and oldstable epoch. + * autopkgtest fix: Update badnocredit.raw for updated Adobe license tag + check. + * Fix rootless-builds.txt location in lintian tags. (Closes: #1051538) + * Don't check for "RECORD" in .dist-info, they are now always excluded. + + [ Bastien Roucariès ] + * Detect embedded yajl and libzstd. + * Add lodash for embedded JavaScript library. + * Add node-pako as embedded library. + * Improve detection of node-pako. + * Add node-jzip-utils for detection of embedded JavaScript. + * Detect node-jzip as embedded JavaScript + * Add a punycode and codemirror JavaScript library. + * Remove "salsaci" suffix for length test. + + [ James Addison ] + * Fix license-problem-font-adobe-copyrighted-fragment-no-credit. + + [ Paul Wise ] + * Add 01.org to the list of obsolete domains. + + [ Shengjing Zhu ] + * Adapt testsuite to groff 1.23 warning message. (Closes: #1042049) + + [ Thompson, Brian ] + * Make SVG graphs more understandable by adding the tag name. + + [ Agathe Porte ] + * Add missing closing parens in invalid-field-for-derivative.tag. + + [ Benjamin Drung ] + * Exclude not-binnmuable-* tags in ubuntu/main profile. (LP: #2026208) + + [ Sebastian Crane ] + * Detect recent versions of the Lua interpreter. + + [ Gioele Barabucci ] + * Remove obsolete tag + "package-supports-alternative-init-but-no-init.d-script". + + [ Louis-Philippe Véronneau ] + * missing-prerequisite-for-pyproject-backend: add support for meson. + * missing-prerequisite-for-pyproject-backend: add support for sipbuild. + + [ Jiajie Chen ] + * arch-regex: Add loong64 support. + + [ Alexandre Detiste ] + * obsolete-packages: Add "pkg-config => pkgconf". + + [ Richard Lewis ] + * Add *~ to ".gitignore". + * Fix exit code when --show-overrides is given and an 'error' tag is + overridden. Also add a test for it. (Closes: #1019690) + * Update testsuite documentation. + + [ Emilio Pozuelo Monfort ] + * Don't emit source-nmu-has-incorrect-version-number for stable updates. + (Closes: #1022759) + + [ Valentin Vidic ] + * Allow @recommends@ as autopkgtest dependency. + + -- Axel Beckert <abe@debian.org> Mon, 05 Feb 2024 21:58:11 +0100 + +lintian (2.116.3) unstable; urgency=medium + + The "FFP3 (Fixing False Positives, Three Small Changes)" Release. + + [ Axel Beckert ] + * Refresh data. (Loong64 removed from two lists, some fonts and dh_cruft + added.) + + [ Simon McVittie ] + * obsolete-packages: libegl1-mesa-dev is not obsolete. + + [ Andreas Beckmann ] + * archive-liberty-mismatch: Add exception for 'non-free-firmware binary + package build from non-free source package'. (Closes: #1030325) + + -- Axel Beckert <abe@debian.org> Sun, 05 Feb 2023 09:10:20 +0100 + +lintian (2.116.2) unstable; urgency=medium + + The "FFP2 (Fixing False Positives, too)" Release. + + [ Axel Beckert ] + * Add private script to automate post release version bump. + * Fix typo in previous debian/changelog entry. Thanks Lintian! ;-) + * Mention that #1024039 got closed by 2.116.1 in its changelog entry. + * [Testsuite] Check tag files and docs with spellintian. Thanks to + Sylvestre Ledru for noticing the typos this check now finds. + * Fix duplicate words and one more typo found by + spellintian-textual-content.t. + * "currectly" can be a misspelling of "correctly" or "currently" + * Fix spellintian false positives found by spellintian-textual-content.t: + + "these package" followed by a plural, e.g. "these package sections", + + Double word with closing parenthesis inbetween. (So far only opening + parentheses were whitelisted.) + * Add testsuite check for missing-pkg-php-tools-addon false positive + with dh-sequence-phpcomposer. (See MR !438.) + * Add testsuite check for a vcs-field-has-unexpected-spaces false + positive. (See #1023155 and MR !422.) + * debian-rules-uses-unnecessary-dh-argument: Also report found and + minimum dh compat level. Additionally also rephrase tag description to + no more say "this debhelper compatibility level". Thanks to Anthony + Fok for making us aware of the issue in MR !451. + + [ Cyril Brulebois ] + * Teach the is_non_free attribute about the non-free-firmware section. + * Stop checking for Standards-Version for installer-only (i.e. udeb) + packages. (Closes: #991533) + + [ Andreas Beckmann ] + * backports-upload-has-incorrect-version-number: Fix salsaci version + regexp again. (Closes: #1024361) + + [ Sylvestre Ledru ] + * Fix some typos in the doc. + + [ William Desportes ] + * missing-pkg-php-tools-addon: Allow dh-sequence-phpcomposer as + alternative to pkg-php-tools-addon. + * Lintian::Check::Files::SourceMissing: Ignore files in + debian/missing-sources/. Fixes false positives in source-is-missing, + source-contains-prebuilt-javascript-object and friends. + + [ Tino Didriksen ] + * vcs-field-has-unexpected-spaces: Allow any order of git branch and + path. (Closes: #1023155) Thanks to Bradford D. Boyle for the bug + report. + + [ Johannes Schauer Marin Rodrigues ] + * Multiarch terminology: Use "qualifier" instead of "acceptor": Update + tag descriptions of rules-require-build-prerequisite and + missing-build-depends-for-clean-target-in-debian-rules. Also rename + method multiarch_acceptor() to multiarch_qualifier() in + Lintian::Relation::Predicate. + + -- Axel Beckert <abe@debian.org> Sun, 29 Jan 2023 09:32:16 +0100 + +lintian (2.116.1) unstable; urgency=medium + + The "No More Neglected Autopkgtest Architectures" Release. + + [ Axel Beckert ] + * bitbucket.org no more supports Mercurial. + * [Testsuite] Fix armhf+i386-only test binaries-missing-lfs. Should fix + autopkgtest on these architectures. + * unknown-section description: Factorize explanations to avoid + repetitions as suggested by Cyril Brulebois. (See also below.) + * Fix remaining i386 testsuite issues due to missing brackets. + * Don't emit inconsistent-appstream-metadata-license with "MIT != + Expat". (Closes: #1029055) + * Update Lintian User's Manual for pointed hints in tags and overrides. + Thanks to Soren Stoutner. (Closes: #1029177) + * Whitelist Autobuild, Go-Import-Path, and Ruby-Versions from + unknown-field. (Closes: #1014885) + * Don't emit spare-manual-page for binaries in /usr/libexec/. + (Closes: #1027744) + * Refresh static data. + * data/java/constants: Default is now Java17, versions available up to + Java21. (Closes: #1024039) + + [ Cyril Brulebois ] + * Add non-free-firmware to known archive areas. + + [ William Desportes ] + * Fix lintian package-contains-documentation-outside-usr-share-doc + matches python files and robots.txt. (Closes: #997987, #976636) + * Add more typo fixes. + + -- Axel Beckert <abe@debian.org> Mon, 23 Jan 2023 03:32:04 +0100 + +lintian (2.116.0) unstable; urgency=medium + + The "Crowd Merging" Release. + + * Summary of tag changes: + + Added: + - dbus-policy-in-etc + - homepage-github-url-ends-with-dot-git + - homepage-gitlab-url-ends-with-dot-git + - homepage-salsa-url-ends-with-dot-git + - uses-pdm-cli + - uses-python-distutils + + Removed: + - init.d-script-needs-depends-on-lsb-base + - old-dpmt-vcs + - old-papt-vcs + - python-teams-merged + + [ Sebastian Ramacher ] + * Revert "Turn embedded-library into a classification tag. (Closes: + #932634)". The tag embedded-library is used by FTP masters for + automatic rejects. So let's revert this change. First, #932634 has + seen no coordination with FTP masters. Second, it confuses developers + when their packages get rejected for tags that are not emitted + locally. + + [ Simon McVittie ] + * obsolete-packages: Add some more transitional packages. + * desktop/dbus: Check for dbus policy files installed into /etc/. + (Closes: #1006631) + * Don't emit very-long-line-length-in-source-file for REUSE licenses. + (Closes: #1013314) + + [ Bastien Roucariès ] + * Run test suite at build time except on Salsa. + * Fix warning: cannot run debian/readme check on + package binary:postgresql-15_15~beta2-2+salsaci_amd64 + (Closes: #1014175) + * Refresh data. + * L…/C…/Files/PrivacyBreach.pm: Run lc in sliding windows block. + + [ Axel Beckert ] + * data/spelling/corrections: Remove valid word "licence". + * Fix typos and add missing changelog items in 2.115.3 release. + * .gitignore: Also ignore debian/*.debhelper files and drop wrong + trailing slash for doc/lintian.html. + * private/refresh-virtual-packages-data: Replace "egrep" with "grep -E". + * Replace "egrep" and "fgrep" in all test suite dummy packages with "grep + -E/-F". + * Add build-dependencies of the test suite. + * Fix test broken by dpatch removal. + * Fix test broken by updating the list of virtual packages. + * Extend spellintian.t to check all listed misspellings against dictionaries. + Add test suite build dependencies on liblist-someutils-perl, wamerican + and wbritish. (Closes: #1019541) + * Make spellintian.t to use the installed corrections list under autopkgtest. + * t/scripts/tags/fields.t: Allow running with just "prove -l". + * Remove spelling corrections which are valid words and now caught by + the new spellintian.t check against English dictionaries. + (Closes: #1019235) + * Remove valid word "tye" from data/spelling/corrections. + * Remove spelling correction for "curren", it's a valid HTML entity. + * Refresh data: Adds Debian Policy 4.6.2 and Loong64 architectures among + other things. + * Declare compliance with Debian Policy 4.6.2. + * Make test for generate-tag-summary more precise and properly cover all + cases. + * out-of-date-/newer-standards-version: Only output the significant + digits of the current policy version. + * Salsa CI: Override the lintian version being used to the just built + version. + * Extend desc-fields.t to only accept known field names, see #1025868. + * Fix singular vs plural field name typo. (Fixes ½ of #1025868) + * debian/copyright: Bump my copyright years to 2023. + * Make "lintian --version" emit versions unique per commit if run from a + git checkout. + * Fix read error with libpath-tiny-perl ≥ 0.142 if debian/templates is a + directory. Thanks to Salvatore Bonaccorso and src:linux. :-) + * Fix arm64 autopkgtest by using a shell script as example instead of a + compiled C binary for testing bin-sbin-mismatch. Also fix that so far + on other architectures there was a bin-sbin-mismatch false negative + accepted by the test suite while the true positive on arm64 hadn't + been accepted by the test suite. (Closes: #1025868) + * inconsistent-appstream-metadata-license: + + Versions with trailing ".0" are equivalent to versions without + (Closes: #1002053) + + Normalize comparison (-or-later/+, -only suffix) + + Tag description: Text improvements; add direct reference to + AppStream metadata_license tag specification. (Closes: #1014956) + * Unpack orig.tar: Ignore warnings about tar ignoring tar ball + peculiarities. (Closes: #1028975) + * Fix error with Path::Tiny ≥ 0.142 when searching for upstream + signatures. (Closes: #1028274) + * license-problem-php-license: Also refer to + https://ftp-master.debian.org/php-license.html + * Delete dangling symlink reporting/harness. (Closes: 1027323) + * spellintian.t: Make sure that no bad spelling is used as good spelling + of another bad spelling. Prompted by #1027399. Add build-dependency on + "libarray-utils-perl <!nocheck>" and autopkgtest dependency for that. + * Fix bad spellings that were used as good spelling for another bad + spelling. (Closes: #1027399) + * Do not emit executable-stack-in-shared-library on MIPS architectures + for now. (Closes: #1025436, see also #1022787) + * run-private-scripts.t: + + Do not run auto-reject-diff as it requires network access. + + Skip generate-tag-summary without git. + Thanks Louis-Philippe Véronneau! + + [ Akbarkhon Variskhanov ] + * debian/control: Bump Standards-Version in Description. + + [ Simon Quigley ] + * Add "lunar" as a known Ubuntu distribution. + + [ billchenchina ] + * README.md: use zless for lintian.txt.gz. + + [ Philip Hands ] + * Accept bpo...+salsaci versions. (Closes: #1024361) + + [ Aurélien COUDERC ] + * Add SingleMainWindow to known-desktop-keys. + + [ Johannes Schauer Marin Rodrigues ] + * transitional-package-not-oldlibs-optional: Developer reference section + 6.7.7 is now 6.8.7. + * Remove init.d-script-needs-depends-on-lsb-base and add lsb-base to + obsolete-packages. (Closes: #1019851) + + [ Louis-Philippe Véronneau ] + * missing-prerequisite-for-pyproject-backend: Add support for + pdm-pep517. + * uses-pdm-cli: Create new tag. + * Fix false-positive for missing-build-dependency-for-dh-addon when + using dh-sequence-python3. (Closes: #1016147) + * Add new tag 'uses-python-distutils' to warn people of the Python + distutils deprecation. + * Remove tag 'python-teams-merged', as this transition has been done and + no package in the archive raises it anymore. + * Remove tags 'old-dpmt/papt-vcs', as this transition has been done and + no package in the archive raises them anymore. + * Rework the 'package-is-team-maintained' tag. + * Mark 'very-long-line-length-in-source-file' as experimental, because + of the high number of false-positives. + * Update known autopkgtest restrictions to add 'needs-sudo'. + * Mark the 'update-debian-copyright' tag as experimental. + (Closes: #1025644) + * Fix false-positive for missing-prerequisite-for-pyproject-backend when + the backend is specified as a Build-Depends-Indep. (Closes: #1025164) + * missing-prerequisite-for-pyproject-backend: Add support for hatchling. + * Add 'autopkgtest-pkg-pybuild' as known autopkgtest testsuite. + * Make sure pybuild-plugin-pyproject is registered as a valid + prerequisite for dh-python3. + + [ Edward Betts ] + * spelling: Add a correction. + * dh-sequence-vim-addon pulls in dh-vim-addon. + * GitHub, GitLab and Salsa URLs shouldn't end with ".git" in Homepage + header. + + [ Fatih Altun ] + * Add "yirmiuc" as a known Pardus distribution. + + [ William Desportes ] + * data: Register .{dbf,shp,shx,sbx,sbn,qix} ESRI file extensions. + * Fix false positive for license-problem-php-license for pear.php.net + source code. + + [ Luca Boccassi ] + * missing-systemd-service-for-init.d-script: Mention future deprecation + of generator. + + [ Christoph Biedl ] + * Lintian::Index::FileTypes: Call "file" with "--raw" to unbreak test + suite with file/libmagic ≥ 5.42. (Closes: #1026920) + + -- Axel Beckert <abe@debian.org> Tue, 17 Jan 2023 01:37:56 +0100 + +lintian (2.115.3) unstable; urgency=medium + + The "RPB (Restore Previous Behavior)" Release. + + [ Gioele Barabucci ] + * experimental-to-unstable-without-comment: Fix regex (Closes: #101387) + + [ Axel Beckert ] + * Recognise many more binary file type suffixes (Closes: #1014156) + + [ Guillem Jover ] + * Add pedantic hint for OpenPGP files named after + specific implementations + * Add more extensions for OpenPGP files + * In the US "cancelation" is a valid spelling of "cancellation" + * Rename debian-watch-does-not-check-gpg-signature + tag to say openpgp + * Fix --fail-on to revert to original default on error + (Closes: #995492) + + [ Francois-Xavier Le Bail ] + * spelling: Add several corrections. + + [ Bastien Roucariès ] + * Restore sliding windows (Closes: #993613) + * Add myself as uploaders + + * Summary of tag changes: + + Added: + - debian-watch-does-not-check-openpgp-signature + - openpgp-file-has-implementation-specific-extension + + Removed: + - debian-watch-does-not-check-gpg-signature + + -- Bastien Roucariès <rouca@debian.org> Sun, 28 Aug 2022 08:31:41 +0000 + +lintian (2.115.2) unstable; urgency=medium + + The "FFP (Fixing False Positives)" Release. + + [ Axel Beckert ] + * Automate importing of Debian archive sections. Thanks to Andrius + Merkys. (Closes: #973308) + * Make more testsuite scripts being able to simply run under "prove -l". + * Move libio-prompt-tiny-perl dependency to debian/tests/control. + Cherry-picked from Ubuntu's patches. (LP: #1959004) + * Recognise Mac OS X icons (.icns), SQLite files (.sqlite and .sqlite3) + and PDF (.pdf) documents as binary files. + * Allow HTML files in /usr/share/gtk-doc/html/. (Closes: #970275) + Thanks to Simon McVittie, Daniel Kahn Gillmor and Unit193! + * Refresh (fonts) data. + * Also check dh level for missing-build-dependency-for-dh-addon, not + just for missing-build-dependency-for-dh_-command. (Closes: #1000610) + * Retroactively mention commit fcaded19 in debian/changelog entry of + 2.115.0 as it was erroneously marked with "Gbp-Dch: Ignore". + + [ Guillem Jover ] + * data/fields/name_section_mappings: Add golang section (Closes: + #880701) + + [ Rafael Laboissière ] + * Ignore files /var/lib/ocaml/lintian/*.info in test for + package-contains-documentation-outside-usr-share-doc (Closes: + #1009679) + + -- Axel Beckert <abe@debian.org> Wed, 29 Jun 2022 02:56:42 +0200 + +lintian (2.115.1) unstable; urgency=medium + + The "Things we never tested" Release. + + [ Axel Beckert ] + * Write a test which catches run-time errors of lightweight private + scripts. Triggered by libconfig-model-dpkg-perl's autopkgtest failure + since it runs private/latest-policy-version and failed. + * Fix private/latest-policy-version: $p…->policy_releases → + $p…->data->policy_releases. Seems to have been forgotten when + policy_releases() moved from Lintian::Profile to Lintian::Data. + Should fix libconfig-model-dpkg-perl's autopkgtest failure. + * Fix documentation of Lintian::Data->new(). + * Switch all GPL URLs in boilerplates and debian/copyright to HTTPS. + * Add a debian/duck-override file with some false positives. Lintian is + now also DUCK-clean! + + [ Simon McVittie ] + * data: Register *.xcf as binary files + + -- Axel Beckert <abe@debian.org> Tue, 21 Jun 2022 20:53:27 +0200 + +lintian (2.115.0) unstable; urgency=medium + + The Lintian Resurrection Release. + + * Summary of tag changes: + + Added: + - alien-tag + - chown-with-dot + - conflicting-test-fields + - declare-python-versions-for-test + - drop-python-version-declaration + - invalid-override-restriction + - missing-prerequisite-for-pyproject-backend + - old-devhelp-standard + - stray-devhelp-documentation + - test-leaves-python-version-untested + - uses-poetry-cli + + Removed: + - crossing-screens + - debhelper-compatibility-level-not-a-number + - debian-tests-control-and-control-autodep8 + - exclusive-runtime-tests-field + - package-contains-devhelp-file-without-symlink + + [ Axel Beckert ] + * Adopting Lintian. (Changes #1012289 from ITA to pure RFH.) + + Remove Chris Lamb from Uploaders (see #1012289) and re-add myself. + * Workarounds until + https://github.com/Perl-Critic/Perl-Critic/issues/925 is fixed: + + Replace all occurrences of "Copyright ©" with "Copyright (C)" again. + + Remove unnecessary usage of UTF-8 from bin/lintian. + + Replace UTF-8 characters in mostly Copyright comments. + + Replace UTF-8 characters in code with \N{…}. + * Remove literal unicode character U+0334 COMBINING TILDE OVERLAY which + likely had been added accidentally. (Triggered by the symptoms of + https://github.com/Perl-Critic/Perl-Critic/issues/925, but permanent.) + * Update copyright years in debian/copyright. + * Run perltidy over lib, bin/lintian, private/refresh-perl-provides, + private/runtests and several files in t/scripts/. + * data/…/perl-provides updated by running "debian/rules + refresh-perl-provides". + * Add Felix Lechner to debian/copyright based on copyright statements + elsewhere. Thanks for all your contributions! + * Update t/recipes/README: "debian/rules runtests" → "private/runtests" + * Follow module renaming: Perl::Critic::Freenode → Perl::…::Community. + * t/s…/h…/tag-coverage.t: Replace "$ENV{'LINTIAN_BASE'}" with + "$ENV{'LINTIAN_BASE'} // '.'" to be able to run it with "prove -l". + * init.d-general check: Avoid relying on line numbers in #DEBHELPER# + replacement code. + * very-long-line-length-in-source-file: Ignore files listed in new data + file binary-file-extensions. (Closes: #1005046) + * Fix false positives for adopted-extended-field with X- prefixed + fields. (Closes: #999768) + + Empty hints files seem to require a Test-Against field in desc. + * Update own source lintian-overrides for "pointed hints". + + Make them work with old and new lintian versions by using wildcards. + * Rename README.developers to have a proper file suffix (.pod). + * Switch syntax marker of README.developers.pod from "perl" to "pod". + * Documentation update: Replace directory "frontend/" with "bin/". + * Fix a bunch of "Use of uninitialized value $_ in concatenation" + warnings when running tests with "prove -l" directly. + * README.developers.pod: Explain the difference between check and test. + * lintian(1): Drop mentioning of never existing --no-overrides option. + * Replace unfitting Text::Glob with more flexible Regexp::Wildcards + (Closes: #1003353) + + Add unit test for Lintian::Util::match_glob. The current testsuite + does not seem to be able to cover such a case. + * Declare compliance with Debian Policy 4.6.1. (No changes needed.) + * Refresh data using private/refresh-data. Skip unreleased policy though + for now. + * Fix "Use of uninitialized value $step in concatenation" in + Lintian::Version which showed up as unrecognized tag (!) when running + the test suite on the git repo already tagged for a release. + * debian/gbp.conf: Declare so far used tag format so that gbp uses it. + * Add lintian override for very-long-line-length-in-source-file in + Lintian::Check::Cruft as well as test-leaves-python-version-untested. + * Use versioned Breaks instead of Conflicts against lzd, see #1001655. + Thanks Lintian for reporting ;-) and Paul Gevers for the sanity check! + + [ Felix Lechner ] + * Refresh manual references. + * Use Text::Glob to match hint contexts with override patterns. Replaces + a trusted homegrown routine. (Closes: #1003272) + * Refresh list of available Debhelper commands. + * Refresh list of installable fonts. + * Generate section references for Lintian manual from repo; point to + website. + * Accept globbing patterns in profiles when enabling and disabling + checks or tags. + * Refresh data sources in parallel. + * Add the New Maintainer's Guide to the list of quotable authorities. + * Eliminate unpredictable output in the check siles/privacy-breach. + * Honor the environment variable NO_COLOR as specified in + https://no-color.org/. + * More attempts to eliminate unpredictable output in the check + files/privacy-breach. + * Drop the tag debian-tests-control-and-control-autodep8. + * Set authority references apart from other data sources. + * Provide rudimentary Emacs integration. (See: #968758) + * Associate Emacs modules with the 'editors' archive section. + * Recognize /usr/bin/raku as a known interpreter for scripts. (Closes: + #1002828) + * Do not depend on any particular Lzip implementation. (Closes: + #1001655) + * Exempt installables designated as documentation from warning about new + Python2 packages. (Closes: #995286) + * Update citations in two tags. (Closes: #1003131) + * Drop version requirement from + skip-systemd-native-flag-missing-pre-depends. (See: #1003271) + * Import new CSS style sheet from the website. + * Recognize dh-sequence-sphinxdoc as a valid prerequisite for + dh_sphinxdoc. (Closes: #999810) + * Tolerate multiarch acceptors in prerequisites for Debhelper commands + and addons. (Closes: #1000234) + * Issue yet more pointed hints. + * Recognize pybuild-plugin-pyproject as a valid prerequisite for the + python3 Debhelper plugin. (Closes: #1003668) + * Exempt bullseye backports from changelog-file-missing-explicit-entry. + (Closes: #941656) + * Mask long source lines in autotools-generated files. (Closes: #996740) + * Turn embedded-library into a classification tag. (Closes: #932634) + * Require the targets build-arch and build-indep in debian/rules. + (Closes: #657390) + * Do not insist on a particular name for unversioned links to a shared + library. (Closes: #963099) + * Exempt the names of Debian folks associated with a package from + spelling checks. (Closes: #989381) + * Require py3version invocation consistent with presence of + X-Python3-Version in d/control. (See: #1001677) + * Exempt CGI scripts from executable-in-usr-lib. (Closes: #1003941) + * CGI scripts can be ELF executables. (See: #1003941) + * Exempt Python's .dist-info and .egg-info folders everywhere from + documentation-outside-usr-share. (Closes: #1003913) + * Flag an outdated Debian copyright just once; use the most recent + year. (Closes: #1003817) + * Implement '--no-show-overrides'; honor it for overrides and masks + alike. (See: #1004240) + * Allow the command-line option '--no-info' to reverse 'info=yes' in the + configuration file. (Closes: #1004240) + * Elide manual references to ancient Lintian versions; use modern + examples. (Closes: #1004231) + * Deprecate --no-tag-display-limit for '--tag-display-limit 0'; update + documentation. (Closes: #1004239) + * Also provide a default output width for + lintian-annotate-hints. (Closes: #1004660) + * Mask examples in tests from + package-does-not-install-examples. (Closes: #1005184) + * Recognize Java 18 in unstable, and Java 19 as otherwise + available. (Closes: #1005762) + * Leave default Java bytecode version at 56. (See: #1005762) + * Adjust documentation reference to manual page for dh_make. (Closes: + #1006390) + * Warn about devhelp index files that use version 1. (Closes: #1006859) + * Store ELF information from readelf in an MLDBM database. (Closes: + #1003456) + * Issue pedantic hint for dot in 'chown user.group' instead of a + colon. (Closes: #1007140) + * Upgrade missing-systemd-timer-for-cron-script to warning; no longer + experimental. (Closes: #1007257) + * Read locale codes directly from /usr/share/locale/json/. Add + dependency on iso-codes for that. + + [ Ryan Finnie ] + * Provide a constant citation for + systemd-service-file-uses-nobody-or-nogroup. (Closes: !385) + + [ Louis-Philippe Véronneau ] + * Check that tests pulling in all Python versions also query which ones + are available. (Closes: !361) + * Add new Python tags for pyproject.toml build backends according to + PEP-517. (Closes: !384) + * Rename 'python3-flit' to 'flit', as there is no 'python3-flit' + package. (Closes: !386) + + [ Daniel Kahn Gillmor ] + * Correct lintian-annotate-hints manpage. + + [ Simon McVittie ] + * Silence a very widespread false positive for detached debug symbols. + (Closes: #1000977, !387) + + [ Simon Quigley ] + * Add "kinetic" as a known Ubuntu distribution. (Closes: !392) + + [ xiao sheng wen(肖盛文) ] + * Add riscv64 support (Closes: #1012090, !394) + + [ Damyan Ivanov ] + * Update releases.json data for Debian policy releases (4.6.1 added; + closes: !393) + + [ Paul Wise ] + * Add more obsolete domains for former source code hosting services. + + -- Axel Beckert <abe@debian.org> Mon, 20 Jun 2022 13:23:02 +0200 + +lintian (2.114.0) unstable; urgency=medium + + [ Felix Lechner ] + * Issue no-code-sections only for entire archives that contain no code + sections at all. (Closes: #1000469) + * Provide better file pointers for defective override files. + (Closes: #1000494) + * In the refresh script fetching font data, use the new Contents-all.gz + file served by the Debian archive. + * Refresh fonts data using new script and record all installables in + which font is shipped. + * Refresh Debhelper add-ons and commands and recognize click and + dh_click from click-dev. + + [ Rafael Laboissière ] + * Stop checking for bash-centric terms after 'exec' in shell scripts. + (Closes: #999756) + + -- Chris Lamb <lamby@debian.org> Sat, 27 Nov 2021 17:20:56 +0000 + +lintian (2.113.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - anticipated-repack-count + - dfsg-version-with-tilde + - dot-before-repack-count + - elf-error + - elf-warning + - no-code-sections + - static-link-time-optimization + + Removed: + - apparently-corrupted-elf-binary + + [ Felix Lechner ] + * Bump the maximum plausible bug number to 1,500,000. (Closes: #1000148) + * Flag static archives without code sections, as can happen with LTO + objects. (Closes: #977596) + * Flag use of link-time-optimization (LTO) in static archives. + (Closes: #963057) + * Exempt Coq's cmxs files from the shared-library-lacks-prerequisites + tag. (Closes: #999602) + * Accommodate dune's file names for the bytecode in OCaml interfaces. + (Closes: #999601) + * Drop 'type' from the list of bash-centric expressions. + (Closes: #999878) + * Fix CI failure on armhf due to a parsing failure of readelf output. + * Adjust refresh script fetching debhelper data for the new + Contents-all.gz served by archive. + * Refresh debhelper data. + + [ Kentaro Hayashi ] + * Add the dfsg-version-with-tilde tag, as opposed to a plus. + * Add a new tag about a possibly unnecessary repack count for upstream + sources. + * Add a tag about source versions with a dot before the repack count. + + -- Chris Lamb <lamby@debian.org> Sat, 20 Nov 2021 16:43:03 +0000 + +lintian (2.112.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - add-component-copyright + - adopted-extended-field + - archive-liberty-mismatch + - build-prerequisite-in-installable-section + - circular-installation-prerequisite + - composer-prerequisite + - control-file-contains-dh-make-vcs-comment + - installable-field-mirrors-source + - invalid-systemd-documentation + - kill-mode-none + - no-source-section + - prefer-uscan-symlink + - redundant-installation-prerequisite + - relative-library-search-path + - rules-do-not-require-root + - rules-require-root-explicitly + - unicode-trojan + - update-debian-copyright + - upstream-metadata + + Removed: + - binary-control-field-duplicates-source + - build-info-in-binary-control-file-section + - control-file-contains-dh_make-vcs-comment + - package-depends-on-itself + - rules-does-not-require-root + - rules-requires-root-explicitly + - section-area-mismatch + - stronger-dependency-implies-weaker + - upstream-metadata-field-present + - xc-package-type-in-debian-control + - xs-testsuite-field-in-debian-control + - xs-vcs-field-in-debian-control + + [ Felix Lechner ] + * Flag potential 'trojan' Unicode codepoints. + * In debian/watch, suggest the use of 'USCAN_SYMLINK=rename' when + 'filenamemangle' is present. + * Add field content to and rename old tag to 'upstream-metadata'. + (Closes: #993813) + * Find invalid URIs for Documentation in systemd .service files. + (Closes: #980447) + * Flag 'KillMode=none' in systemd service files. (Closes: #978048) + * Flag outdated copyright years for debian files relative to latest + changelog entry. (Closes: #949201) + * Flag relative RPATHS separately and use a regular tag for absolute + RPATHS only. (Closes: #732682) + * Flag missing versions in debian/watch only for files with meaningful + content. (Closes: #992569) + * Flag when orig source components are not mentioned by name in + debian/copyright. (Closes: #915384) + * Flag sources declaring a package relationship on the PHP composer. + (Closes: #977150) + * Fix path to external documentation in tag description. + (Closes: #999477) + * Allow the "Description" field in .dsc and in source stanzas of + debian/control. (Closes: #998115) + * Re-enable OSC 8 terminal hyperlinks following GCC's lead. + + [ Stephen Kitt ] + * Calculate game executable permissions correctly. + + [ xiao sheng wen ] + * Update tags/g/groff-message.tag for LC_ALL=C.UTF-8. + + -- Chris Lamb <lamby@debian.org> Sat, 13 Nov 2021 15:25:15 +0000 + +lintian (2.111.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - generated-file + + [ Chris Lamb ] + * Mention that --with=sphinxdoc (or dh_sphinxdoc) is the easiest way to + prevent including Sphinx .doctree files in binary packages. + + [ Felix Lechner ] + * Limit Python dot directories to those starting with a dot. + (Closes: #997662) + * Offer classification tag "generated-file" for source files that look + generated. (Closes: #993662) + + [ Simon Quigley ] + * Add "jammy" as a known Ubuntu distribution. + + -- Chris Lamb <lamby@debian.org> Sat, 30 Oct 2021 09:03:59 +0000 + +lintian (2.110.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - bash-term-in-posix-shell + + [ Felix Lechner ] + * Consider source exemptions for embedded-libraries when no regex is + present. (Closes: #996684) + * Accept nodejs:any as a prerequisite for Node.js scripts. + (Closes: #996710) + * Fix parsing of debian/symbols files for those with multiple sonames. + (Closes: #996688) + * Move the filename-length check to archive/file/name/length. + * Update release epoch for oldstable in a maintainer scripts check. + * Drop mention of 'tempfile' from tag descriptions. (Re: #994275) + * Issue only Lenna-specific tag for known bad Lenna files. (Re: #996093) + * Disregard long text lines in SVG images. + + -- Chris Lamb <lamby@debian.org> Sat, 23 Oct 2021 14:18:51 +0000 + +lintian (2.109.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - redundant-build-prerequisites + - redundant-control-relation + + Removed: + - duplicate-in-relation-field + - package-has-a-duplicate-build-relation + + [ Felix Lechner ] + * Do not complain about library sections that do not exist. + (Closes: #995991) + * Python :any handling: + * In tag descriptions, never ask for :any in Python prerequisites. + (Re: #995498) + * Fix processing of the :any multiarch acceptor in package + relationships. (Closes: #995490, #995498) + * Allow make:any as a prerequisite for using usr/bin/make in scripts. + (Closes: #994902) + * Make the condition of a missing interpreter look less like + a recommendation. + * Fix non-sensical line lengths in hints from cruft check. + (Closes: #996111) + * Add a new Lenna image to the list of banned files. (Closes: #996093) + * Also allow private folders in lib from custom library search path. + (Closes: #996270) + * Clarify in tag descriptions for debian/rules check that hint context is + not a recommendation. (Closes: #995981) + + -- Chris Lamb <lamby@debian.org> Fri, 15 Oct 2021 08:01:45 +0000 + +lintian (2.108.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - odd-static-library-name + - static-library-has-unneeded-sections + + Removed: + - static-library-has-unneeded-section + + [ Felix Lechner ] + * Report static libraries with "_s.a" suffix in the filename. + (Closes: #698398) + * Enable the failing test binaries/binaries-missing-depends-on-numpy-abi + in autopkgtests. + * Fix the missing-dependency-on-numpy-abi tag to work with newer Python 3 + versions. + * Adjust test suite to debhelper reversal of systemd installation paths. + (Re: #992711, #992465) + * Provide full path to init scripts in context. + + [ Simon McVittie ] + * debian/tests: Correct name of python3-all-dev. + + [ David Steele ] + * Revise a statement that sysvinit support is required. + + [ "Unit 193" ] + * Preserve DEB_VENDOR as it's used later to set the profile. + + -- Chris Lamb <lamby@debian.org> Fri, 08 Oct 2021 08:36:47 +0000 + +lintian (2.107.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - architecture-escape + - control-interpreter-without-predepends + - ldconfig-escape + - runtime-test-file-uses-supported-python-versions-without-test-depends + + Removed: + - breakout-link + - preinst-interpreter-without-predepends + - runtime-test-file-uses-supported-python-versions-without-python-all-build-depends + + [ Felix Lechner ] + * Repurpose breakout-link; split into two new tags to find a use. + (Closes: #968525, #971707) + * Do not expect files in sudoers.d to have standard file permissions. + (Closes: #995261) + * Do not flag missing matches for Files-Excluded; uscan already got rid + of them. (Closes: #994271) + * Fix documentation for --fails-on command line option. (Closes: #994414) + * Exempt empty packages so declared from empty-binary-package. + (Closes: #994711) + * Allow maintainer manual pages for executables also so provided. + (Closes: #994689) + * Only create diffstat when the diff.gz is mentioned in the dsc or the + changes. (Closes: #994793) + * Fix minimum version for init-system-helpers in a tag description. + (Closes: #918137) + * Be ambivalent between /lib and /usr/lib for systemd service files. + (See: #992465) + * Adopt latest style from website for the standalone HTML output often + shown in Salsa CI. + * Implement the multiarch selector :any in package relationships. + (Closes: #994902) + + [ Paul Wise ] + * Revert "Upgrade superficial-tests tag to warning". + + -- Chris Lamb <lamby@debian.org> Fri, 01 Oct 2021 08:28:20 +0000 + +lintian (2.106.1) unstable; urgency=medium + + [ Felix Lechner ] + * Add Breaks: libconfig-model-dpkg-perl (<< 2.151) to debian/control. + This avoids blocking testing migration in the Debci infrastructure. + (See: #968000) + * Fix an autopkgtest failure on i386 related to the + shared-libs-non-pic-i386 test. + + -- Chris Lamb <lamby@debian.org> Tue, 14 Sep 2021 14:05:49 +0000 + +lintian (2.106.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - file-included-already + - source-ships-excluded-file + - superfluous-file-pattern + + Removed: + - copyright-excludes-files-in-native-package + - source-includes-file-in-files-excluded + - unused-file-paragraph-in-dep5-copyright + - wildcard-matches-nothing-in-dep5-copyright + + [ Felix Lechner ] + * Drop recommendation to implement usr-merge for individual packages. + (Closes: #993955) + * Use default output width of 80 characters. (Closes: #993908) + * Issue homepage-in-binary-package only when there is none in the source. + (Closes: #993975) + * Implement Files-Included field in DEP-5 copyright files. + (Closes: #993758) + * Parse path to source .dsc using a more robust method. (Closes: #994088) + + [ gregor herrmann ] + * Refresh data/fields/perl-provides. + + -- Chris Lamb <lamby@debian.org> Mon, 13 Sep 2021 09:55:19 +0000 + +lintian (2.105.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - backgrounded-test-command + - crossing-screens + - duplicate-p3dist-override + - elevated-privileges + - illegal-variable + - misplaced-systemd-tmpfiles + - missing-conffile + - no-versioned-debhelper-prerequisite + - nodejs-missing-version-override + - obsolete-vim-addon-manager + - pypi-homepage + - python-traceback-in-manpage + - ruby-interpreter-is-deprecated + - rubygem-homepage + - rules-require-build-prerequisite + - rust-boilerplate + - source-contains-editor-backup-file + - source-contains-patch-failure-file + - source-contains-quilt-control-dir + - superficial-tests + - systemd-service-in-odd-location + - systemd-tmpfile-in-var-run + - unexpected-conffile + - unknown-conffile-instruction + - unmerged-usr + - upstream-metadata-field-unknown + - wrong-team + + Removed: + - ancient-standards-version + - conffile-is-not-in-package + - missing-build-dependency + - missing-python-build-dependency + - octal-permissions + - package-lacks-versioned-build-depends-on-debhelper + - package-needs-versioned-debhelper-build-depends + - setgid-binary + - setuid-binary + - setuid-gid-binary + - systemd-service-file-outside-lib + - systemd-tmpfiles.d-outside-usr-lib + + [ Chris Lamb ] + * Check for Python tracebacks in manual pages, usually caused by failing + help2man calls (and cause reproducibility issues). + * Correct confusion between left and right parens that was leading to + output such as ")2 errors)". + * Bump Standards-Version to 4.6.0.1. + + [ Felix Lechner ] + * Implement usr-merge; flag files shipped in /bin, /sbin or /lib. + * Flag systemd temporary files placed in /var/run. (Closes: #984678) + * Do not repeat tag name when annotating hints. (Closes: #969398) + * Refuse to read installable control data in national encodings. + * Stop shipping modules in system path. (Closes: #968011) + - Provide a dedicated, non-public executable to obtain the latest + policy version from Lintian data. (See: #978672) + * Flag the use of DEB_BUILD_MULTIARCH in some Debian files. + (Closes: #983219) + * For team-maintained packages, flag names in another team's name space. + * Provide a generalized method to grant exemptions to package families + (screens). + - Exempt ELPA packaging scripts for Emacs modules from + executable-in-usr-lib. (Closes: #974175) + - Exempt GNAT's read-only .ali files from non-standard-file-perm. + (Closes: #986400) + * Treat NMU edge cases for non-consecutive-debian-revision. + (Closes: #942013) + * Recommend the newer php-markdown over libmarkdown-php when embedded. + (Closes: #898867) + * Convert possible-gpl-code-linked-with-openssl to a classification tag. + (Closes: #972181) + * Turn maybe-not-arch-all-binnmuable into a classification tag. + * Combine, rename two confusing debhelper tags. (Closes: #977332) + * Warn when trying to issue duplicate hints; provide more context to + disambiguate similar hints. + * Add --output-width; wrap EWI tag descriptions to width of output + terminal otherwise. + * Assume that all interactive terminals are hyperlink-capable, but change + default to off. + * Send all debugging and status information to STDERR. + * Drop support for custom visibility levels in profiles. + * Prefer spaces over commas as field separators in profiles. + * Build test packages automatically when running tests. + (Closes: #927476, #935907) + * Use semantic versioning for the output of '--version'; omit Git hash + from Lintian version strings. + * Refer to new website in output. + * Update manual references for the first time in almost two years. + * Update the JSON data file for Debian policy releases; include all up + to 4.6.0.1. + * Drop UTF-8 PerlIO layers for STDOUT and STDERR from almost all + executables and the test suite. (Closes: #972876, #972878) + * Do not pretend to show hashbang in hint context for unusual + interpreters. (Closes: #982630) + * Treat Testsuite field as a comma-separated list for the teams pkg-perl + and pkg-js. (Closes: #976801) + * Use current program names in help messages and version announcements. + (Closes: #977261) + * Allow tilde in names of installed JAR archives. (Closes: #976681) + * Flag source packages that declare only tests with the 'superficial' + restriction. (Closes: #932870) + * Ignore SIGWINCH in the test suite. (Closes: #974575) + * For manual pages, extract section information correctly from .TH + header. (Closes: #962601) + * Recognize Architecture and Classes as valid fields in d/tests/control. + (Closes: #977976) + * Restructure tags for file permissions; combine tags for setuid/setgid + executables. + * Detect Rust boilerplate in package descriptions. (See: !344) + * Do not fail on dangling symlinks when looking for obsolete, missing or + invalid content. (Closes: #978534) + * Always print full path to patch files. (Closes: #980247) + * Tolerate manual pages for subcommands when main command is documented. + (Closes: #947258) + * Tighten regex for no-op-testsuite to stop false positives. + (Closes: #980824) + * Allow environment prefix when recognizing 'dh' sequencer. + (Closes: #981712) + * Ignore build profiles when requiring dh helper for Python + prerequisites. (Closes: #991242) + * Ignore build profiles when flagging use of py3versions in d/rules. + (Closes: #978144) + * Do not flag Python3 entry point definitions as out-of-place + documentation. (Closes: #981268) + * Flag duplicates in d/py3dist-overrides. (Closes: #980987) + * Flag PyPI homepages in source control files. (Closes: #981932) + * Flag Rubygem homepages in source control files. (Closes: #981935) + * Accept the virtual package dh-sequence-dkms as B-D for 'dh + --with-dkms'. (Closes: #982834) + * Drop reference to archive keyring from package-installs-apt-sources. + (Closes: #983598) + * Read error message from Config::Tiny via the advertised mechanism. + (Closes: #985064) + * Add 'utils.h' to the list of overly generic headers. (Closes: #982322) + * Drop package file names from tag context for unknown-field. + (Closes: #980560) + * Flag backgrounded Test-Commands in autopkgtest declarations. + (Closes: #988591) + * For multi-component sources, always drop common prefixes for + sub-components. (Closes: #976643) + * Accept more than two components in architecture wildcards for package + relationships. (Closes: #981163) + * Add Breaks: lintian-brush (<< 0.88) to debian/control due to failing + autopkgtests. + * Implement two perltidy policies. + * Implement 87 perlcritic policies; disregard four others. + * Ignore special attributes like 'remove-on-upgrade' in DEBIAN/conffiles. + (Closes: #993531, #993711) + * Read checks separately from ./lib and ./checks; forego symbolic link. + (Closes: #993651) + + [ Simon McVittie ] + * Update lists of registered build-profile names + + [ Paul Wise ] + * spelling: Add several corrections + * Upgrade superficial-tests tag to warning + + [ Xavier Guimard ] + * Verify that nodejs module does not use semantic-release + * Fix and simplify search when parsing pkg-js-autopkgtest files. + (Closes: #981279) + + [ Emmanuel Bourg ] + * Detect obsolete Servlet API 3.1. (See: !348) + + [ Alexandre Rossi ] + * Recognize empty and very small files as architecture-independent. + + [ Jelmer Vernooij ] + * Fix typo: valgring => valgrind. + * Fix archive section mapping for rust development packages. + * Check upstream field names in upstream metadata. (Closes: #969762) + + [ gregor herrmann ] + * Add another spelling correction. + + [ Victor Westerhuis ] + * Add --no-rename as a recognized option for dpkg-divert. + + [ Brian Murray ] + * Recognize Ubuntu's next release, named 'impish', among the known-dists. + + [ Louis-Philippe Véronneau ] + * Add check for obsolete installation prerequisite vim-addon-manager. + + [ Fatih Altun ] + * Add profile for Pardus Linux + + [ Antonio Terceiro ] + * Stop suggesting ruby-interpreter as a prerequisite. (See: !365) + * Warn about the outdated prerequisite ruby-interpreter. (See: !365) + + [ Peter Pentchev ] + * Adjust to debhelper's new install location for systemd service files. + (Closes: #992465) + + -- Chris Lamb <lamby@debian.org> Tue, 07 Sep 2021 09:43:56 +0000 + +lintian (2.104.0) unstable; urgency=medium + + [ Baptiste Beauplat ] + Recognize the recently-released Standards-Version 4.5.1 as a valid + policy version. + + [ Sylvestre Ledru ] + * Accept field X-Cargo-Built-Using for installable packages; they are + used by Rust. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Fri, 27 Nov 2020 09:20:48 +0000 + +lintian (2.103.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - duplicate-override-context + + [ Felix Lechner ] + * Merge subindices for "orig" sources with multiple tarball components. + (Closes: #970750, #971597, #972567) + * Do not try to drop a common prefix from indices when a file of that + name already exists (Closes: #974820) + * Ignore dysfunctional output from readelf (for empty archives) and + undefined version strings in readelf output. + * Announce names used by the maintainer when flagging overrides for + renamed tags. (Closes: #972877) + * Turn off CSS generation in Pod::Simple::HTMLBatch for reprotest. + * Accept Build-Depends-Packages (plural) as a valid field in symbols + control files. (Closes: #974971) + * Use Pod::Simple::XHTML to generate docs (instead of Pod::Simple::HTML). + * Fix detection of an unwanted prefix for "orig" component tarballs + without their own folder. + * Rename repeating segments when dropping common path prefixes from + indices. + * Accept renamed tag names in custom profiles. (Closes: #974946) + * Collapse successive slashes in file paths extracted from tar(1). + * Update data/fields/perl-provides. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Sat, 21 Nov 2020 18:22:40 +0000 + +lintian (2.102.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - empty-rust-library-declares-provides + + [ Felix Lechner ] + * Do not flag uninstalled examples unless installation packages are + present. (Closes: #972614) + + [ Sylvestre Ledru ] + * Rust libraries hitherto used empty installation packages with long + Provides lines to deal with peculiarities in Rust packaging. It is no + longer considered acceptable because it strains the archive + infrastructure, so flag empty Rust libraries that declare Provides. + * Provide a tip/clue in case of profile coverage errors. + * Fix a typo in the CONTRIBUTING.md file. + + -- Chris Lamb <lamby@debian.org> Fri, 13 Nov 2020 09:57:52 +0000 + +lintian (2.101.0) unstable; urgency=medium + + * Summary of tag changes: + + Removed: + - debian-watch-file-declares-multiple-versions + - debian-watch-file-missing-version + - debian-watch-file-unknown-version + + Added: + - missing-debian-watch-file-standard + - multiple-debian-watch-file-standards + - obsolete-debian-watch-file-standard + - older-debian-watch-file-standard + - unknown-debian-watch-file-standard + + [ Felix Lechner ] + * Accept postgresql-all as an additional build prerequisite for the pgxs + debhelper addon. (Closes: #973503) + * Declare debian/watch file version 2 obsolete and flag version 3. + (Closes: #973637) + * Show full paths for changelog-related tags in installation packages. + * In lintian-explain-tags, produce valid JSON output for multiple tags. + * Make JSON output reproducible by removing explicit maintainer field. + + -- Chris Lamb <lamby@debian.org> Fri, 06 Nov 2020 09:22:42 +0000 + +lintian (2.100.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - bogus-python-prerequisite + - python2-script-but-no-python2-dep + - python3-script-but-no-python3-dep + + Removed: + - python-script-but-no-python-dep + + [ Felix Lechner ] + * Update guile versions that are considered valid installation + prerequisites. (Closes: #973335) + * Flag bogus Python prerequisites from what-is-python. (Closes: #973011) + * Fix architecture wildcard logic for override declarations. + (Closes: #972595) + * Recognize standard installation path for tcsh as /bin. + (Closes: #973367) + * Do not look into quilt's .pc/ folder during source scans. + (Closes: #971973) + * Provide a tag HTTP reference that does not change over time. + (Closes: #973334) + * Drop unversioned Python references from a number of scripts. + * Mark testsuite-autopkgtest-missing as the old name for + missing-tests-control. (Closes: #972844) + + [ Louis-Philippe Véronneau ] + * Add missing tests for old-dpmt-vcs and old-papt-vcs (and also fix + package-is-team-maintained). + * Refresh debhelper data using private/refresh-debhelper-data. + + [ Andrius Merkys ] + * Update data/fields/archive-sections to + https://metadata.ftp-master.debian.org/sections.822 (as of 2020-10-28). + + [ Simon Quigley ] + * Add "hirsute" as a known Ubuntu distribution. + + -- Chris Lamb <lamby@debian.org> Fri, 30 Oct 2020 08:49:07 +0000 + +lintian (2.99.0) unstable; urgency=medium + + [ Chris Lamb ] + * Update the declares-possibly-conflicting-debhelper-compat-versions tag + as we could be specifying the level in debian/rules or debian/control. + (Closes: #972464) + + [ Louis-Philippe Véronneau ] + * Bump severity of the script-uses-unversioned-python-in-shebang tag and + reword the warning message. + + [ Felix Lechner ] + * Fix prefix detection for single orig tarball components that only have + one directory component. + + [ Paul Wise ] + * Add several spelling corrections and sort the dictionary. + + -- Chris Lamb <lamby@debian.org> Fri, 23 Oct 2020 09:13:20 +0000 + +lintian (2.98.0) unstable; urgency=medium + + * Summary of tag changes: + + Renamed + - missing-depends-line -> undeclared-elf-prerequisites + + [ Chris Lamb ] + * Drop reference to missing manual page. + + [ Felix Lechner ] + * Allow out-of-place documentation for R packages. (Closes: #971740) + * Recognize virtual package dh-sequence-nodejs as an alternative to + pkg-js-tools. (Closes: #971656) + * Reduce read buffer size when duplicating tar stream. (Closes: #971895) + * Issue python-module-in-wrong-location only once for each module. + * Rename missing-depends-line to undeclared-elf-prerequisites. + + -- Chris Lamb <lamby@debian.org> Fri, 16 Oct 2020 11:12:52 +0000 + +lintian (2.97.0) unstable; urgency=medium + + * Summary of tag changes: + + Renamed: + - papt-dmpt-merged -> python-teams-merged + + [ Chris Lamb ] + * Relax checks around looking for the dh(1) sequencer by not looking for + the preceding "target:\n". (Closes: #970920) + * Add prominent and up-to-date information on how to run the + testsuite. (Closes: #923696) + * Drop Colin Watson and Russ Allbery from Uploaders (last upload 10+ + years ago) with sincere thanks for their past efforts. + * Run wrap-and-sort -sa. + + [ Louis-Philippe Véronnea ] + * Rename "papt-dpmt-merged" to "python-teams-merged". + * Document packages needed to run the testsuite. + + [ Felix Lechner ] + * Exempt some SNMP MIB-related files from the + package-contains-documentation-outside-usr-share-doc tag. + (Closes: #971427) + * Amend/update documentation for first contributors. + + [ Xavier Guimard ] + * Update NodeJS checks to accept "dh-sequence-nodejs". + + -- Chris Lamb <lamby@debian.org> Fri, 02 Oct 2020 09:00:30 +0000 + +lintian (2.96.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - old-dpmt-vcs + - old-papt-vcs + - papt-dmpt-merged + + Removed: + - wrong-vcs-location-for-dpmt + - wrong-vcs-location-for-papt + + [ Chris Lamb ] + * Update the expected Vcs-{Browser,Git} location of modules and + applications maintained by the Python module team. (Closes: #970743) + + [ Louis-Philippe Véronneau ] + * Update DPMT and PAPT VCS tags for new Python Team. + * Add a new papt-dmpt-merged tag for Debian Python Team Maintainer. + + [ Felix Lechner ] + * Enforce code style as part of autopkgtest testing. + * Do not install pkg-js-tools as part of running the autopkgtests until + path conflicts are resolved. + + -- Chris Lamb <lamby@debian.org> Fri, 25 Sep 2020 10:35:54 +0000 + +lintian (2.95.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - no-debian-changes + - source-contains-cmake-cache-file + - source-contains-debian-substvars + + Removed: + - empty-debian-diff + - missing-versioned-depends-on-init-system-helpers + + Renamed: + - diff-contains-arch-control-dir -> debian-adds-arch-control-dir + (etc.) + + [ Chris Lamb ] + * Clarify which Vcs-* the vcs-field-not-canonical tag is being emitted + for, and update its long description to remove misleading messages. + (Closes: #970201) + + [ Felix Lechner ] + * Remove the obsolete + scripts-missing-versioned-depends-on-init-system-helpers-without tag. + (Closes: #932378) + * Repurpose diff-contains-* tags to work on all Debian changes in other + formats. + + [ Pino Toscano ] + * Also detect duplicate Debian menu files for games. + + [ Sebastian Ramacher ] + * Mark libavresample-dev from ffmpeg as being obsolete in favour of + libswresample-dev. + + [ Xavier Guimard ] + * Fix the search for pkg-js-tools tests. + + -- Chris Lamb <lamby@debian.org> Fri, 18 Sep 2020 09:46:19 +0000 + +lintian (2.94.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - number-of-patches + - unpack-message-for-deb-control + - unpack-message-for-deb-data + - unpack-message-for-orig + - unpack-message-for-source + + Removed/merged: + - tar-errors-from-control + - tar-errors-from-data + - tar-errors-from-source + + [ Chris Lamb ] + * Don't emit odd-mark-in-description for large numbers such as "300,000". + (Closes: #969528) + * Update all "my $LINTIAN_VERSION" instances in binary scripts, not just + the ones we specify as we had added and removed some. + * Correct a typo in the long description for odd-mark-in-description. + * Don't try and open debian/patches/series if it does not exist. + * Update CONTRIBUTING.md: + - Merge data/README into this file. + - Use the "#" Markdown style for headings. + - Drop recommendation to update debian/changelog manually. + + [ Felix Lechner ] + * Allow namespaced tags in override files; fix parsing inconsistency. + (Closes: #969719) + * Rename two utility programs so their names start with 'lintian'. + * Widen output when looking for groff errors in manual pages. + (Re: #892423) + * Allow new Gitlab-style "includes" in CI pipeline specifications. + * Adjust private/regenerate-profiles to new tag file extension and + regenerate profiles. + * Announce match for sensible utils in context of + missing-depends-on-sensible-utils. + * Move number-of-patches to a separate check file. + + [ Peter Wienemann ] + * Add a new number-of-patches classification tag. + + [ Dominic Hargreaves ] + * Remove obsolete advice regarding alternate depends for dual-lived perl + modules in the package-superseded-by-perl tag. + + [ Simon McVittie ] + * data: Use correct separator for all dh addons and commands + + -- Chris Lamb <lamby@debian.org> Fri, 11 Sep 2020 08:31:01 +0000 + +lintian (2.93.0) unstable; urgency=medium + + [ Felix Lechner ] + * Process display options according to truth value, not presence. + (Closes: #969406) + * Only announce left over processes in debug mode, fixing autopkgtest + failures. + * Clean up profile code and drop {VENDOR} notation in profile names. + * Support newlines in file names. (Re: #929729) + + [ Peter Pentchev ] + * Ignore *.txt files in Python egg-info directories. + + [ Reiner Herrmann ] + * Add PrefersNonDefaultGPU to known-desktop-keys. + + -- Chris Lamb <lamby@debian.org> Thu, 03 Sep 2020 21:54:58 +0000 + +lintian (2.92.0) unstable; urgency=medium + + [ Felix Lechner ] + * Drop obsolete output formats ColonSeparated, FullEWI, LetterQualifier + and XML. + * Provide a Perl-native implementation to index and extract tar files in + parallel. (Closes: #968611) + * Reduce visibility level of redundant-globbing-patterns to pedantic. + (Closes: #967961) + * Reset file_info for TeX Font Metric files incorrectly categorized as gzip. + (Closes: #963589) + * Replace python2 with python3 in debian/tests/control. (Closes: #936952) + * Split bin/lintian-info into separate annotate-lintian-hints and + explain-lintian-tags. + * Drop Lintian version from tag URLs offered in "standalone" HTML mode. + * Use Text::Glob to match globbing patterns to file names in + debian/copyright. + * Remove IO::Async from Depends in debian/control and move to + debian/tests/control. + + * Update tag description files: + - Rename file extensions from *.desc to *.tag. + - For friendlier field names, rename Info: to Explanation: and Ref: to + See-Also: + - Use Text::Markdown::Discount to facilitate Markdown content. + - Also decode HTML5 entities in plain output; add + libhtml-html5-entities-perl to debian/control. + - Replace underscores with the _ HTML5 entity. + + [ Chris Lamb ] + * Don't emit patch-not-forwarded-upstream for README files under + debian/patches. (Closes: #968845) + * Update private/generate-tag-summary to reflect change of tag definition + filename extension change from .desc → .tag. + + [ Dmitry Shachnev ] + * Refresh data/files/fonts using refresh-fonts-data script. + + -- Chris Lamb <lamby@debian.org> Fri, 28 Aug 2020 12:29:46 +0100 + +lintian (2.91.0) unstable; urgency=medium + + [ Felix Lechner ] + * Set most spelling-related tags to info or pedantic level and improve + line references for spelling errors in override files. (Re: #968416) + * Issue the repeated-path-segments tag only directories only. + * For the first time, unpack tarballs in orig index and use centralized + streaming unpacker. + + [ Chris Lamb ] + * Clarify the grammar of the package-uses-old-debhelper-compat-version + tag. + + -- Chris Lamb <lamby@debian.org> Thu, 20 Aug 2020 21:20:00 +0000 + +lintian (2.90.0) unstable; urgency=medium + + [ Felix Lechner ] + * Un-deprecate /etc/lintianrc, remove file on upgrade and ship in + doc/examples. (Closes: #968326) + * Move all executables not meant for shipping to ./private. + * Large number of internal changes to use IPC::Run3 over IO::Async. + + [ Andrius Merkys ] + * Fix a typo in the long description of the breakout-link tag. + + -- Chris Lamb <lamby@debian.org> Fri, 14 Aug 2020 08:55:33 +0000 + +lintian (2.89.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - systemd-service-file-uses-deprecated-syslog-facility + - systemd-service-file-uses-nobody-or-nogroup + + [ Chris Lamb ] + * Check for User=nobody and Group=nogroup in systemd .service files. + (Closes: #966623) + * Check for StandardOutput= and StandardError= that uses the deprecated + "syslog" or "syslog-console" facility. (Closes: #966617) + * Fix a false positive with no-dh-sequencer due to target dependency. + (Closes: #968108) + * Drop an unused $skip_tag argument to "extract_service_file_values" + routine. + + [ Felix Lechner ] + * Prefer settings in configuration files over other defaults and allow + command line to override both. (Closes: #968067) + * Add unzip to Depends in debian/control and drop from + debian/tests/control. Also add lzop to Depends in d/control. + (Closes: 968041) + + -- Chris Lamb <lamby@debian.org> Mon, 10 Aug 2020 09:59:45 +0000 + +lintian (2.88.0) unstable; urgency=medium + + [ Felix Lechner ] + * For DEP-5 copyrights, disregard the debian/ folder in upstream sources. + (Closes: #967226) + * In the files/compressed/lz check, do not stat(2) lzip command for every + file in the index. + * Move executables from ./frontend to ./bin and set indirect links from + /usr/bin. Also move our test executables from t/bin to ./bin. + * Install the Lintian library modules to /usr/share/lintian/lib. + * Use Perl's FindBin to reliably detect the base directory for Lintian. + * Stop installing Test modules in Perl system path. + * Split lintian, lintian-info and spellintian into three independent + scripts. + + -- Chris Lamb <lamby@debian.org> Fri, 07 Aug 2020 12:13:12 +0000 + +lintian (2.87.0) unstable; urgency=medium + + [ Chris Lamb ] + * Add support for clzip as an alternative for lzip. (Closes: #967083) + * Add justification for lzip dependency in previous debian/changelog + entry. (Closes: #966817) + + [ Felix Lechner ] + * Run no tests when building to reduce Build-Depends and drop the nocheck + build profile as a consequence. + * Replace frontend/dplint with a simpler startup script at + frontend/lintian. + + -- Chris Lamb <lamby@debian.org> Tue, 04 Aug 2020 11:53:25 +0000 + +lintian (2.86.0) unstable; urgency=medium + + [ Felix Lechner ] + * Revert running each check in a separate process to prevent some file + descriptor regression. (Closes: #966122, #966368) + * Also consider pseudo-headers allowed by DEP-3 when examining patches. + (Closes: #966024) + * Do not issue the patch-not-forwarded-upstream tag when Origin: is + upstream or backport. (Closes: #966140) + * Analyse matching behavior and relative order of globbing patterns in + debian/copyright. (Closes: #905747) + * Rename two similar tags related to Rules-Requires-Root. + * Flag overrides with mismatched context separately from those that are + not used. + * Wait for each lexgrog and man and convert documentation/manual check to + IPC::Run3. (Closes: #966072) + * Salsa setup: + - Set CCACHE_DISABLE in t/bin/build-test-packages; otherwise standard + Salsa CI pipelines will fail. + - Use the Salsa CI team's standard pipeline instead of Lintian's custom + CI setup. + * Remove three obsolete tags from pkg-perl team checks. + * Add lzip to Depends and Build-Depends. Due to a particularity in the + implementation of safe_qx via IO::Async it was not recognised as a + requirement until now. + + [ Chris Lamb ] + * Avoid false-positives when matching sensible-utils utilities (eg. + "i3-sensible-pager"). (Closes: #966022) + * Rename send-patch to patch-not-forwarded-upstream; tag names should + ideally be descriptions of the world, not instructions. Update regex to + search for released version numbers in a .changes file. + + -- Chris Lamb <lamby@debian.org> Sat, 01 Aug 2020 14:41:32 +0000 + +lintian (2.85.0) unstable; urgency=medium + + [ Felix Lechner ] + * Fix wildcard-matches-nothing-in-dep5-copyright. (Closes: #888001) + * Don't emit send-patch when Applied-Upstream is set. (Closes: #965119) + * Disregard watch files containing only comments. (Closes: #965385) + * Account properly for license identifiers in debian/copyright and split + wildcard matching from license parsing. (Closes: #779676) + * Expect only {S,B,C} to be capitalised when following a leading X in + field names. (Closes: #965966) + * Add test case demonstrating false-positive for + dep5-copyright-license-name-not-unique is fixed. (Closes: #801182) + * Parse lists of distributions in changes files. + * Add a test case for email address with missing closing bracket. + (Re: #965335) + * Move Salsa CI specification to debian/salsa-ci.yml. + + [ gregor herrmann ] + * Add another debian/copyright template. + + [ Axel Beckert ] + * Replace debhelper level 12 with 13 in tag descriptions examples. + * Add correction for a "debhelper" misspelling and correct in some + previous changelog entries. + + [ Chris Lamb ] + * Drop reminders from 26 tags that false-positives should be reported to + Lintian as this is implicit in all ~1,500 tags. + + -- Chris Lamb <lamby@debian.org> Tue, 21 Jul 2020 22:02:39 +0000 + +lintian (2.84.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - arch-any-package-needs-newer-cdbs + - autopkgtest-needs-use-name + - include + - legacy-vendorarch-directory + - missing-tests-control + - module-build-tiny-needs-newer-cdbs + - module-build-tiny-needs-newer-debhelper + - no-git + - no-team-tests + - no-team-url + - no-tests + - no-testsuite-header + - nodejs-bad-buffer-usage + - send-patch + - specification + + Removed: + - inconsistent-testsuite-field + - testsuite-autopkgtest-missing + + [ Felix Lechner ] + * Strip architecture from two filenames in tests, and ignore tags seen + only on some architectures as it causes autopkgtest regressions on + arm64. + * Unconditionally allow /dev/null as a symlink target in source packages. + (Re: #964111) + * Fix national-encoding for DEP-3 patches without quilt notice. + (Closes: #964281) + * Add a reminder to send forwardable DEP-3 patches upstream. + (Closes: #755153) + * Add two classification tags for Salsa CI detection. + * For testsuites, parse debian/control instead of .dsc and drop the + inconsistent-testsuite-field tag. + * Convert program error for missing test fields to a tag and reinstate + old tag under new name. + * Removed debhelper compat 5 and 6 from tests. + * Allow optional, private namespaces for tags. (Re: #943525) + * Merge all checks and tags from pkg-perl and pkg-js. + * For R API version parsing, allow any character that is legal in package + names. (Re: #961709) + + [ Trek ] + * Exclude some more templated (ie. "@") systemd .service files. + + -- Chris Lamb <lamby@debian.org> Wed, 15 Jul 2020 22:15:30 +0000 + +lintian (2.83.0) unstable; urgency=medium + + [ Felix Lechner ] + * Add a new standalone HTML output mode. + * Warn about embedded javascript files provided by sphinx. + (Closes: #964013) + * Exempt links that stay inside /usr/lib from breakout-link. + (Closes: #964073) + * Rename second mention of tag manpage-in-wrong-directory. + (Closes: #964282) + * Extend spell check to all parts of debhelper rule targets. + (Closes: #963765) + * Only check the DEP-3 header for legacy encodings in debian/patches. + (Closes: #964281) + * Restrict top folder for breakout-link to architecture in /usr/lib and + permit links freely within. (Closes: #964073) + * Use the new path to test recipes in autopkgtest. (Closes: #964405) + * Drop a test no longer building due to new restraints on version + strings. (See: #953554) + * Exempt Lintian's own test suite from scans in source files and remove + programmatic conditionals in checks. + * Replace references to 'manpages' with 'manual pages' in tag + descriptions. + + [ Chris Lamb ] + * Correct a reference to "override_dh_" in the long description of the + excessive-debhelper-overrides tag. + + [ Lev Lamberov ] + * Update Debian Emacsen team wiki page link. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Tue, 07 Jul 2020 22:50:19 +0000 + +lintian (2.82.0) unstable; urgency=medium + + [ Felix Lechner ] + * Replace files ignored by dpkg-source in dpkg-source; their absence was + causing a FTBFS on the official buildds. + * Drop two legacy tests that produced architecture-specific tags but were + not needed. + + [ Dmitry Shachnev ] + * Add sphinx as a possible build-dependency for dh_sphinxdoc. + + -- Chris Lamb <lamby@debian.org> Fri, 26 Jun 2020 11:58:12 +0000 + +lintian (2.81.0) unstable; urgency=medium + + [ Felix Lechner ] + * Remove command line option --fail-on from the settings in configuration + files. (Closes: #962157) + * Use UTF-8 codepoint for copyright sign in copyright files. + (Closes: #961975) + * Add tag for architecture-specific paths in debian/not-installed. + (Closes: #961973) + * Rename tag to recursive-privilege-change and explain usage of + runuser(1). (Closes: #895597) + * Do not enable Perl warnings globally to reduce output clutter from + external modules. + * In debian/control, add dh-r to Build-Depends. (See: #961709) + * Add two test cases from Ansgar's 'colorful' test package. + (See: #962277) + * Drop Email::Valid as obsolete and use regex to check emails for fully + qualified hosts. (See: #962277) + * Flag the use of acute accents in manpages. (Closes: #554897) + * Flag ANSI escape characters in all fields of primary packaging control + files. (See: #962277) + * In check menus, title-case the hash keys representing field labels to + make the tag context more human-readable. + * Rename tag for mailing list on Alioth and convert to classification + tag. (Closes: #962448) + * Add a classification tag for field contents in primary package control + files. + * Find the correct section when looking at combined manpages. + (Closes: #962601) + * Read manual references as UTF-8 to show "en" dash correctly. + (Closes: #904885) + * Issue 'required-field' and 'recommended-field' tagsper Debian Policy + section 5 instead of field-specific tags. + * Fix mail host validation in debian/changelog and rename tag for bogus + hosts. + * Do not allow unsafe symlinks in autopkgtests. (Closes: #954860) + * Broaden tag descriptions for lower custom compression settings. + (Closes: #909696) + * Do not impose a umask when running tests as it partially obscured a bug + in Dpkg. (See: #945869 & #796257) + * Emit a classification tags with octal file permissions for all files + sources and installables. (See: #945869, #796257) + * Reset process umask before unpacking source tarballs. (Closes: #945869) + * Use case-sensitive field names in control files, package relations, + debconf templates and autopkgtest files. + * Mark commas not followed by whitespace in package descriptions. + (Closes: #591665) + * Do not use the Bash shell when syntax checking maintainer scripts using + /bin/sh. (Closes: #954459) + * Point out variant spellings of field names in control files. + * Use case-sensitive Deb822 parser for profiles, tags, checks, internal + harness tests,private scripts, and in readelf data within + Processable::Objdump. + * Add new tag breakout-link for such links in /usr/lib. (Closes: #243158) + * Stop exempting files in debian/missing-sources from source-is-missing. + (See: #962583) + * Provide test case with JS sources in subdir of d/missing-sources. + (Closes: #962583) + * Issue tag for repeated path segments in installed files. + (Closes: #950052) + * Restore case-invariant access to control fields, per Debian Policy + section 5.1. + * Add an internal harness test requiring a declared diagnostic value for + tag-related test. (Closes: #962671) + * Parse mail addresses in package control fields in one place and + validate domains using Data::Validate::Domain. + * Add new checks for maintainer-provided manpages and desktop entries. + (Closes: #755161) + * Restore program failure when error tags are found. (Closes: #962158) + * Rename documentation/man to documentation/manual and debian/manpages to + debian/manual-pages. Also rename tags that refer to a 'manpage' to + 'manual-page' or another name. + * Combine various national encoding tags into one and issue all in one + check. + * Rename new item-looping entry points in checks as not all items are + files. + * Provide script diagnostics in the "control index". + * Remove conflict between no-template-description and + untranslatable-debconf-templates. (Closes: #914256) + + [ Chris Lamb ] + * Update data/fields/perl-provides for Perl 5.030003. + + [ Paul Wise ] + * Add several corrections and sort using the UTF-8 locale. + + [ Dylan Aïssi ] + * Add the requires-r-api and ships-r-site-library tags for the R + statistics language. (Closes: #961709) + + [ Mo Zhou ] + * Add a new "linked-with-obsolete-library" tag; marks only libcblas from + the Debian Science team for now. + + [ Rafael Laboissière ] + * Fix false positives in the no-dh-sequencer tag when Makefile command + prefixes (eg. "+") are used. (Closes: #963212) + + -- Chris Lamb <lamby@debian.org> Tue, 23 Jun 2020 09:47:18 +0100 + +lintian (2.80.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - national-encoding-in-text-file + + [ Chris Lamb ] + * Check for execute_after/execute_before spelling mistakes, etc., just + like for override_. + + [ Felix Lechner ] + * Add check for nationally encoded text files in installation packages. + (Closes: #796170) + * Mention discussion about allowing some paths for the + script-not-executable tag. (Closes: #368792) + * Fix regex for Guile bytecode with respect to ELF-related tags. + (Closes: #961961) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Wed, 03 Jun 2020 09:30:24 +0000 + +lintian (2.79.0) unstable; urgency=medium + + [ Felix Lechner ] + * Perform a mass-rename of tags for consistency according to the RFC. + (Closes: #922544) + * Use Email::Address::XS to parse all address components. + (Closes: #961924) + * Replace configuration option LINTIAN_PROFILE with 'profile'. + (Closes: #961855) + * Combine tags for missing native and non-native changelogs in + installation packages. (Closes: #935072) + * Clarify tag names related to shlibs control and shared libraries. + (Closes: #534938) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 01 Jun 2020 09:16:03 +0000 + +lintian (2.78.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - maintainer + - uploader + + Renamed/split: + - changed-by-address-looks-weird & changed-by-address-missing -> + malformed-changed-by-field + - maintainer-address-looks-weird & maintainer-address-missing -> + malformed-maintainer-field + - uploader-address-looks-weird -> malformed-uploaders-field + + [ Felix Lechner ] + * Use settings from configuration files when they were previously + undefined. (Closes: #961802) + * Accept some environmental variables as valid keys in the configuration + file. (Closes: #961800) + * Use Email::Address::XS to parse fields for Maintainer, Uploaders etc. + * Consider renamed tags when ignoring unknown tags obtained from + ftpmaster. + + [ Raul Benencia ] + * Add section numbering to the user manual. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Sat, 30 May 2020 09:15:59 +0000 + +lintian (2.77.1) unstable; urgency=medium + + [ Felix Lechner ] + * Deal gracefully with empty configuration files. (Closes: #961684) + * Amend a tag description with how to add missing upstream signatures to + the archive. (Closes: #954743) + + -- Chris Lamb <lamby@debian.org> Wed, 27 May 2020 22:07:44 +0000 + +lintian (2.77.0) unstable; urgency=medium + + [ Simon Quigley ] + * Add a new --fail-on command-line option for more control over the exit + status. (Closes: #709932) + + [ Felix Lechner ] + * Fix several 'TODO' tests using the "literal" match strategy. + (Closes: #921112) + * Reverse the exit statuses for program errors and policy violations. + (Re: #709932) + * Pin installation of debhelper to -backports in the continuous + integration pipeline for buster. + * Use the Config::Tiny Perl module to parse configuration files. + * Merge two stages of the Gitlab CI pipeline. + + [ Peter Pentchev ] + * Fix a Python 2.x -> 3.x typo in a tag description. + + [ Chris Lamb ] + * Refresh data/fields/perl-provides. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Wed, 27 May 2020 09:13:37 +0000 + +lintian (2.76.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - depends-on-misc-pre-depends + + [ Chris Lamb ] + * Check for packages that include ${misc:Pre-Depends) in the Depends + field. (Closes: #961290) + + [ Raul Benencia ] + * Fix "em" dashes in Lintian manual. + + [ Paul Wise ] + * Add several spelling corrections. + * Capitalise "Verilog" spelling correction. + + [ Felix Lechner ] + * In the CI pipelines, request more detailed output when installing build + prerequisites. + * Ignore unknown tags when generating profiles and disconnect the "main" + profile from "ftp-master-auto-reject" + + [ Simon Quigley ] + * Allow for non-Debian profiles to specify the location of Debian VCSes. + + -- Chris Lamb <lamby@debian.org> Sat, 23 May 2020 09:31:35 +0000 + +lintian (2.75.0) unstable; urgency=medium + + [ Chris Lamb ] + * Clarify the error messge when the file specified to check does not + exist. (Closes: #960970) + + [ Felix Lechner ] + * Strip comments in debian/rules correctly. + + -- Chris Lamb <lamby@debian.org> Tue, 19 May 2020 12:14:01 +0000 + +lintian (2.74.0) unstable; urgency=medium + + [ Chris Lamb ] + * Ignore comments when checking for no-dh-sequencer. (Closes: #960485) + * Allow the stable-bpo and stable-bpo-test-packages Gitlab CI pipelines + on Salsa to pass for now. + + -- Chris Lamb <lamby@debian.org> Sat, 16 May 2020 12:33:09 +0000 + +lintian (2.73.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - desktop-entry-unknown-type + - homepage-refers-to-filesystem-listing + + [ Chris Lamb ] + * Add dh_gnome (and dh_gnome_clean) as an explicit alternative to + dh-sequence-gnome in debhelper/dh_commands-manual. (Closes: #958500) + * Factor out matching Homepage fields to data/fields/bad-homepages. + * Check for Homepage fields that point to filesystem directory listings. + (Closes: #960366) + + [ Kari Pahula ] + * Warn about unknown file types in desktop files. + + -- Chris Lamb <lamby@debian.org> Tue, 12 May 2020 21:57:51 +0000 + +lintian (2.72.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - package-contains-icon-cache-in-generic-dir + + [ Chris Lamb ] + * Check for packages installing /usr/share/icons/hicolor/icon-theme.cache + as they will invariably clash with other packages. (Closes: #959855) + + [ Paul Wise ] + * Add "tigris.org" to the list of obsolete sites. + * Add several spelling corrections + + [ Alex Muntada ] + * Correct the spelling of "XDG_DIR". + + [ Felix Lechner ] + * Use aspcud solver in apt like the experimental buildds in an attempt to + restore Gitlab continuous integration tests. + * Ensure apt-get is non-interactive when installing apt-cudf and use + the cache. + + -- Chris Lamb <lamby@debian.org> Sat, 09 May 2020 13:14:55 +0000 + +lintian (2.71.0) unstable; urgency=medium + + * Mark the debian-rules-uses-as-needed-linker-flag tag as being pedantic + & experimental until (at least) the release of bullseye. Thanks to + Mattia Rizzolo and Christian Kastner. (Closes: #959696) + * Replace "Copyright (C)" with the Unicode copyright symbol in our own + code for consistency and update my copyright years. + + -- Chris Lamb <lamby@debian.org> Tue, 05 May 2020 18:17:01 +0000 + +lintian (2.70.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - non-debug-file-in-debug-package + + [ Chris Lamb ] + * Warn about automatically-generated debug packages that ship files + other than .debug. (Closes: #958945) + + [ Axel Beckert ] + * Fix misleading typo in the long description of the + testsuite-dependency-has-unparsable-elements tag. + + [ Felix Lechner ] + * Exempt udebs from executable-in-usr-lib. (Closes: #959037) + * Fix text and formatting in tag description for + portable-executable-missing-security-features. (Re: #953212) + * Explain ordering of standalone License and Files paragraphs in the + description of missing-license-paragraph-in-dep5-copyright tag. + (Closes: #959067) + * Decouple a Debhelper-related tag description from the currently + recommended level. (Closes: #959126) + + -- Chris Lamb <lamby@debian.org> Sat, 02 May 2020 12:45:14 +0000 + +lintian (2.69.0) unstable; urgency=medium + + * Summary of tag changes: + + Removed: + - pre-depends-directly-on-multiarch-support + + [ Chris Lamb ] + * Ignore build profiles when checking packages for "py3versions -s" + without the corresponding Build-Depends. (Closes: #958794) + * Remove the pre-depends-directly-on-multiarch-support tag; any package + pre-depending on multiarch-support will not be installable in bullseye. + (Closes: #798762) + * Move debhelper itself to compatibility level 13 so it does not emit + package-uses-old-debhelper-compat-version for itself. + + [ Felix Lechner ] + * Bump recommended debhelper compat-level to 13; move experimental to 14. + (Closes: #958932) + * Fix common prefix detection for extracted tar files. (Closes: #958845) + + -- Chris Lamb <lamby@debian.org> Tue, 28 Apr 2020 19:46:15 +0000 + +lintian (2.68.0) unstable; urgency=medium + + [ Chris Lamb ] + * Mark mailing-list-obsolete-in-debian-infrastructure as being + experimental, essentially hiding it. (Closes: #958666) + * Warn about packages --with=systemd with a debhelper compatibility level + of 10 or higher. (Closes: #949844) + + [ Michael Biebl ] + * Stop recommending dh-systemd as a Build-Depends alternative in the long + description of maintainer-script-calls-systemctl. + + [ Simon Quigley ] + * Add "groovy" as a known Ubuntu distribution. + + -- Chris Lamb <lamby@debian.org> Sat, 25 Apr 2020 08:54:19 +0000 + +lintian (2.67.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-uses-as-needed-linker-flag + - mailing-list-obsolete-in-debian-infrastructure + - native-source-file-without-utf8-name + + [ Axel Beckert ] + * Stop correcting "extraversion" to "extroversion" as it causes false + positives. + + [ Chris Lamb ] + * Add a warning regarding lists.alioth.debian.org mailing list addresses. + (Closes: #958182) + * Check for debian/rules files that specify -Wl,--as-needed as this is + now the default linking method from bullseye. (Closes: #956146) + * Detect "dh $*" as using the Debhelper sequencer. (Closes: #930679) + * Also check for "override dh_install" in debian/rules; in 99% of cases + this will be an omission of an underscore. + + [ Felix Lechner ] + * Do not check for circular root references when a file index is empty. + (Closes: #958113) + * Do not prompt for password for encrypted zip members. (Closes: #935292) + * Fix the output for JSON; it is encoded already. + * Dynamically generate file names that are not valid UTF-8 in tests. + * Add new tag for non-UTF-8 file name in the source tree. + + [ Vincent Blut ] + * Add 'needs-internet' to the list of permitted values for the + restrictions field in autopkgtest control files. + + -- Chris Lamb <lamby@debian.org> Thu, 23 Apr 2020 10:21:16 +0000 + +lintian (2.66.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - patched-file-without-utf8-name + - upstream-file-without-utf8-name + + Renamed: + - file-name-is-not-valid-UTF-8 -> + shipped-file-without-utf8-name + + [ Chris Lamb ] + * Build-Depends-Arch and Build-Depends-Indep do not imply each other so + don't warn about "duplicate" dependencies in this case. + (Closes: #956368) + + [ Felix Lechner ] + * Warn about invalid UTF-8 file names in package sources. + (Closes: #956723) + * Downgrade internal uft8 flags on all file system paths delivered by + File::Path. (Re: #956233, #956723) + * Rename shipped-file-without-utf8-name from + file-name-is-not-valid-UTF-8. (Re: #956723) + + [ Sandro Tosi ] + * Switch all checks, tests and tags over to use python3-numpy away from + the legacy Python 2.x version. + + -- Chris Lamb <lamby@debian.org> Fri, 17 Apr 2020 17:35:15 +0000 + +lintian (2.65.0) unstable; urgency=medium + + * Summary of tag changes: + + Renamed: + - description-too-long -> synopsis-too-long + + [ Chris Lamb ] + * Allow python3-all-dev and python3-all-dbg to satisfy the check for + packages that use "py3versions -s". (Closes: #955799, #956134) + * Don't warn about package-relation-with-self if we have specified a + required architecture; assume the maintainer knows what they are doing + in these cases. (Closes: #956227) + + [ Felix Lechner ] + * Parse debian/changelog in source packages as UTF-8. (Closes: #956151) + * Improve line count in the fields/description check, renaming the tag to + synopsis-too-long. + * Speed up indexing for patched files from source packages. + * Significantly speed up parsing of output from md5sums(1). + * Also speed up parsing of magic file-info output from file(1). + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Fri, 10 Apr 2020 10:03:11 +0000 + +lintian (2.64.0) unstable; urgency=medium + + [ Felix Lechner ] + * Do not check for conffiles in udebs. (Closes: #956077) + + -- Chris Lamb <lamby@debian.org> Tue, 07 Apr 2020 07:17:57 +0000 + +lintian (2.63.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - national-encoding-in-debconf-template + + [ Chris Lamb ] + * Do not warn about empty dh_dwz-generated "multifiles". + (Closes: #955752) + + [ Felix Lechner ] + * Assume that all dpkg-style configuration files are encoded in UTF-8. + * Do not strip relative prefixes or extra slashes from wildcards in + debian/copyright files. (Closes: #955538) + * Add an experimental JSON output format. + * Prefer PerlIO layer :encoding(UTF-8) over :utf8 everywhere. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 06 Apr 2020 09:41:12 +0000 + +lintian (2.62.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - broken-{bz2,gz,lz,lzma,lzo,xz,zip} + - named-copyright-for-single-installable + - no-debian-copyright-in-source + - no-newline-at-end + + Removed: + - binary-is-wrong-architecture + - field-name-typo-in-dep5-copyright + - gz-file-not-gzip + - no-debian-copyright + + [ Chris Lamb ] + * Don't emit duplicate-short-description or duplicate-long-description if + they contain substitution variables. (Closes: #947168) + * Drop .travis.yml file; we are using Salsa now. + + [ Felix Lechner ] + * Require Perl 5.20 and use "pragma utf8" throughout. + * Remove the xdeb check. (Closes: #954415) + * Check for broken gz, xz, zip, lz, lzo and lzma files. (Closes: #702545) + * Rename no-debian-copyright to no-debian-copyright-in-source. + * Add a new named-copyright-for-single-installable tag. + * Remove the field-name-typo-in-dep5-copyright tag. + * Add a new no-newline-at-end tag to check specific files for a newline + at EOF. + + [ Paul Wise ] + * Add several spelling corrections. + * Sort the spelling dictionary. + + -- Chris Lamb <lamby@debian.org> Thu, 02 Apr 2020 16:02:11 +0000 + +lintian (2.61.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-uses-installed-python-versions + - debian-rules-uses-supported-python-versions-without-python-all-build-depends + - runtime-test-file-uses-supported-python-versions-without-python-all-build-depends + + [ Axel Beckert ] + * Switch links to http://refspecs.linuxfoundation.org to use HTTPS. + + [ Chris Lamb ] + * Warn when "py3versions -s" is used without a python3-all dependency. + (Closes: #954763, #954868) + * Improve checking for "py3versions -i" in autopkgtests and also check + debian/rules files too. + * Make some cosmetic improvements to CONTRIBUTING.md. + * Correct reference to bug in previous changelog entry. + + [ Felix Lechner ] + * Do not issue any tags for udebs in when checking md5sums. + (Closes: #954803) + * Simplify mechanism when looking for foreign architectures. + (Re: #954415) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 30 Mar 2020 10:33:17 +0000 + +lintian (2.60.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - runtime-test-file-uses-installed-python-versions + - upstream-metadata-not-yaml-mapping + + [ Chris Lamb ] + * Do not check the length of Checksums-Sha256 fields. (Closes: #954798) + * Don't check for an md5sums control files in udebs. (Closes: #954803) + * Expand possible-missing-colon-in-closes to also check for semicolons + used in place of colons. (Closes: #954484) + * Check for calls to py3versions -i in autopkgtests. (Closes: #954763) + + [ Felix Lechner ] + * Do not run the fields/length check on .changes or .buildinfo files. + (Closes: #954798) + * Check for upstream metadata without a YAML mapping at the "document" + level. + + [ Scott Kitterman ] + * Update "old" and "ancient" python-version-field tags descriptions to + suggest also checking for incorrect use of "py3versons -r". + (Closes: #954819) + + -- Chris Lamb <lamby@debian.org> Wed, 25 Mar 2020 10:56:21 +0000 + +lintian (2.59.0) unstable; urgency=medium + + [ Chris Lamb ] + * Remove some <!nocheck> annotations. Thnaks to gregoa for the patch. + (Closes: #954338) + + [ Felix Lechner ] + * Do not check the length of the Installed-Build-Depends field. + (Closes: #954341) + * Disable checks for man pages, copyright and changelog in udebs. + (Closes: #954428) + * Update an expected XML output and regular expression for a reproducible + build. + + -- Chris Lamb <lamby@debian.org> Sun, 22 Mar 2020 20:22:08 +0000 + +lintian (2.58.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - executable-in-usr-lib + + [ Felix Lechner ] + * Fix interaction between two gzip timestamp tags. + (Closes: #954146) + * In terminal output, print overrides in a subdued color. + (Closes: #954224) + * Add tag and check for executables in /usr/lib, which violates the FHS. + (Closes: #954149) + * Use the "Severity" field in tags to determine their display prominence + directly. (Closes: #935706) + * Remove temporary directories for pools when they are no longer needed. + (Closes: #924449) + + -- Chris Lamb <lamby@debian.org> Fri, 20 Mar 2020 09:56:18 +0000 + +lintian (2.57.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - absolute-symbolic-link-target-in-source + - bash-completion-with-hashbang + - binary-is-wrong-architecture + - copyright-excludes-files-in-native-package + - explicit-default-in-package-type + - new-package-uses-date-based-version-number + - upstream-metadata-missing-bug-tracking + - upstream-metadata-missing-repository + + Removed: + - pkg-config-references-unknown-shared-library + + [ Chris Lamb ] + * Check for debian/upstream/metadata files without bug tracking + information and upstream repository locations. + (Closes: #950115, #950117) + * Check for new packages that use a date-based versioning scheme + (eg. YYYYMMDD-1) without a 0~ suffix. (Closes: #953036) + * Don't report about using a newer Standards-Version when uploading to + backports. + * Clarify the error message when tags are not covered in the testsuite. + + [ Felix Lechner ] + * Also analyse Ubuntu's automatic debug packages which have the + non-standard suffix .ddeb. (Closes: #951513, #953857) + * Parse newline escapes correctly in md5sum files. (Closes: #929729) + * Remove tag pkg-config-references-unknown-shared-library; outside of + Lintian's purview. (Closes: #953099) + * Rewrite check for compressed gzip archives; print modification time of + first member. (Re: #762105) + * Add a new tag called bash-completion-with-hashbang. + * Add tag and check for absolute symbolic link targets in source trees. + * Reduce severity and mark PE32+ related tag experimental; set security + features for test binary explicitly. + * Offer to calibrate test results for literal matching strategy. + * Strip leading slashes from absolute paths for file names and hard link + targets. + * Issue a tag when the Excluded-Files field is present in copyright + within native packages. + * Display Lintian's command-line options in the process table (eg. + top(1), etc.) + + [ Paul Wise ] + * Add several spelling corrections. + + [ Xavier Guimard ] + * Extend NodeJS checks to modules that use naming such as "@foo/bar". + + -- Chris Lamb <lamby@debian.org> Mon, 16 Mar 2020 23:21:34 +0000 + +lintian (2.56.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - nodejs-lock-file + + [ Chris Lamb ] + * Check for NO_START and FOO_NO_START etc. in /etc/default scripts. + (Closes: #950238) + * Deprecate debhelper compat level 9. (Closes: #950453) + + [ Felix Lechner ] + * Fix POD markup in man page; indent level caused literal display of + formatting codes. (Closes: #952529) + * Fix the selection of classification tags with -T command line switch. + (Closes: #952539) + * Use JSON::MaybeXS instead of plain JSON in the NodeJS checks. + * Remove and replace the open_gz, open and file_contents subroutines from + File::Path. + * Provide method for all ->descendants in File::Path and use it, retiring + breadth-first recursion. + + [ Xavier Guimard ] + * Check if NodeJS modules install lock files. + + -- Chris Lamb <lamby@debian.org> Wed, 26 Feb 2020 18:30:19 +0000 + +lintian (2.55.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - adduser-with-home-var-run + + [ Chris Lamb ] + * Emit rules-requires-root-explicitly for values other than + "binary-targets". (Closes: #951650) + + [ Felix Lechner ] + * In checks related to debian/copyright DEP-5 parsing, use the 'patched' + to match files. (Closes: #951760) + * Do not sort hard links when printing tag as the order is + predetermined in File::Index. + * For directories, File::Path->basename no longer returns a trailing slash. + * Add libdevel-size-perl to Depends and Build-Depends. + * Correct false positives for missing systemd keys. + + [ Topi Miettinen ] + * Add check for adduser --home /var/run in {pre,post}inst. + + -- Chris Lamb <lamby@debian.org> Sun, 23 Feb 2020 17:43:29 +0000 + +lintian (2.54.0) unstable; urgency=medium + + [ Chris Lamb ] + * Also permit millisecond-resolution timestamps in tar archives. (Closes: #951594) + + [ Felix Lechner ] + * Parse the output of the md5sum utility properly in all circumstances. + (Closes: #951136) + * Parse file indices for .deb files with a new utility in + Lintian::File::Path. (Closes: #929729) + * Revert adding libdata-parsebinary-perl to Depends and Build-Depends + and related functionality; Data::ParseBinary did not function as + required. + + [ Xavier Guimard ] + * Replace the deprecated node-uglify with uglifyjs in build dependencies. + + -- Chris Lamb <lamby@debian.org> Thu, 20 Feb 2020 20:42:40 +0000 + +lintian (2.53.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - nodejs-module-not-declared + + [ Xavier Guimard ] + * Check if Node.js modules installed in the Node.js root directories are + declared in the "Provides:" field. + + [ Felix Lechner ] + * Parse tarball file listings using tar's C quoting style. (Closes: #950589) + + -- Chris Lamb <lamby@debian.org> Sun, 16 Feb 2020 20:08:35 +0000 + +lintian (2.52.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - nodejs-module + - nodejs-module-installed-in-bad-directory + - symlink-target-in-build-tree + - symlink-target-in-tmp + + [ Xavier Guimard ] + * Add classification tags for nodejs modules in order to check if modules + are installed in a directory with another name. + + [ Felix Lechner ] + * Suppress inconsistent-maintainer on derivatives. (LP: #1862787) + * Differentiate dir-or-file-in-build-tree and dir-or-file-in-tmp + into the symlink-target-in-build-tree symlink-target-in-tmp tags. + + -- Chris Lamb <lamby@debian.org> Thu, 13 Feb 2020 12:18:18 +0000 + +lintian (2.51.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-watch-upstream-component + + [ Peter Pentchev ] + * Allow quoted "$@" arguments when checking for no-dh-sequencer. + + [ Xavier Guimard ] + * Add debian-watch-upstream-component classification tag. + + -- Chris Lamb <lamby@debian.org> Mon, 10 Feb 2020 11:53:42 +0000 + +lintian (2.50.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-watch-line-invalid + + [ Felix Lechner ] + * In watch files, allow spaces between options when commas are present. + (Closes: #950250, #950277) + * Add a new "debian-watch-line-invalid" for watch lines that fail to + parse. + + [ Andrius Merkys ] + * Fix '<' and '>' in the long description of + pkg-js-autopkgtest-test-is-missing. + + -- Chris Lamb <lamby@debian.org> Fri, 07 Feb 2020 13:05:25 +0000 + +lintian (2.49.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - upstream-metadata-exists + - upstream-metadata-field-present + - upstream-metadata-in-native-source + + [ Felix Lechner ] + * Issue new classification tags upstream-metadata-exists and + upstream-metadata-field-present. (Closes: #950115, #950117) + * Clarify meaning of 'arch dependent' in tag description for + tags/n/nodejs-module-installed-in-usr-lib.desc. (Closes: #950231) + * Reword tag description for unused-file-paragraph-in-dep5-copyright. + (Closes: #950471) + * Add new upstream-metadata-in-native-source tag. + * Free up lab space unconditionally and as part of regular processing. + (re: #924449) + + -- Chris Lamb <lamby@debian.org> Tue, 04 Feb 2020 16:47:30 +0000 + +lintian (2.48.0) unstable; urgency=medium + + [ Felix Lechner ] + * Return the correct status code for successful collection tasks. + (Closes: #949805) + * Correctly order classification tags in output. (Closes: #949797) + * For one i386-only test package, only build it on i386. + (Closes: #949066) + * Remove data/override/renamed-tags; they are defined in the tag + declarations now. + + -- Chris Lamb <lamby@debian.org> Wed, 29 Jan 2020 10:21:40 +0000 + +lintian (2.47.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - empty-field + - source-contains-prebuilt-yapp-parser + + Removed: + - empty-section-field + - latest-debian-changelog-entry-without-new-version + + Renamed: + - fortran-module-does-not-declare-version -> + gfortran-module-does-not-declare-version + - missing-prerequisite-for-fortran-module -> + - missing-prerequisite-for-gfortran-module + + [ Chris Lamb ] + * Recognise 4.5.0 as the latest Standards-Version. + * Ensure that Lintian itself is "Lintian clean" by not warning about our + Yapp::Parser test fixture. + + [ Felix Lechner ] + * Skip only empty lines when packages to be checked are specified in a + file. (Closes: #949398) + * Add a check for empty fields in binary packages. (Closes: #879809) + * Check for prebuilt Parse::Yapp parser files. (Closes: #921080) + * Remove tag latest-debian-changelog-entry-without-new-version. + (Closes: #935070) + * Look at binaries from entire group when finding unused manpages. + (Closes: #949063) + * Exclude "flang" modules from the check for GFortran modules. + (Closes: #948033) + + -- Chris Lamb <lamby@debian.org> Fri, 24 Jan 2020 11:15:46 +0000 + +lintian (2.46.0) unstable; urgency=medium + + [ Gianfranco Costamagna ] + * Build Lintian with the new "python2" package. (Closes: #949065) + + -- Chris Lamb <lamby@debian.org> Sun, 19 Jan 2020 10:06:28 +0000 + +lintian (2.45.0) unstable; urgency=medium + + * Summary of tag changes: + + Renamed: + - systemd-service-file-pidfile-refers-to-var-run -> + systemd-service-file-refers-to-var-run + + [ Chris Lamb ] + * Check for ListenStream configuration keys in systemd .socket files that + refer to /var/run. (Closes: #948478) + * Prevent false positives in missing-build-dependency-for-dh_-command by + adding entries for dh-sequence-ada and dh-sequence-sphinxdoc. + (Closes: #947836) + * Refresh all "private" debhelper data. + * Create .cache directory in the test runner if it does not exist. + + [ Louis-Philippe Véronneau ] + * Recommend the use of the "+dfsg" version suffix over "-dfsg" in the + repackaged-source-not-advertised tag's long description. + + -- Chris Lamb <lamby@debian.org> Mon, 13 Jan 2020 12:23:40 +0000 + +lintian (2.44.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - manpage-in-udeb + - orphaned-package-maintained-in-private-space + + Renamed: + - obsolete-commands-in-modprobe.d-file -> + obsolete-command-in-modprobe.d-file + - very-long-line-length-in-source-file -> + insane-line-length-in-source-file + + [ Chris Lamb ] + * Adjust certainty of no-dh-sequencer to "possible". (Closes: #948376) + * Replace loaded term in the name of the check for suspiciously-long + lines in source files. + + [ Paul Wise ] + * Add several spelling corrections. + * Correct a couple of misspelled corrections. + + [ Felix Lechner ] + * Avoid Perl undefined array references when checking manpages. + (Closes: #947429, #947682) + * Add a check for orphaned packages maintained privately. (Closes: #947671) + * Change test prerequisite to libcrypt-dev following a recent change to + glibc. + * Reduce the severity of repackaged-source-not-advertised. (Re: #471537) + * Do not warn about explicit targets when looking for dh sequencer. + (Re: #930679) + * Ensure that no new tags are added from Lintian that are not tested. + * Rename obsolete-command-in-modprobe.d-file from its plural equivalent. + * Do not run internal harness tests on partial selections to aid tag + renaming after tag coverage test was tightened. + + [ Topi Miettinen ] + * Update systemd hardening flags to include "PrivateNetwork" and + "ProtectKernelLogs". + + [ Xavier Guimard ] + * Fix debian/watch parsing for "dversionmangle=auto". + + -- Chris Lamb <lamby@debian.org> Wed, 08 Jan 2020 11:41:45 +0000 + +lintian (2.43.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - obsolete-commands-in-modprobe.d-file + - package-name-defined-in-config-h + - unused-entry-in-debian-source-include-binaries + + [ Felix Lechner ] + * Allow curly braces in $@ for the dh-sequencer tag. + (Closes: #947115) + * Fix the tag description of the no-dh-sequencer tag. (Closes: #947269) + * Add a check for PACKAGE_NAME in config.h C/C++ include files. + (Closes: #733598) + * Add add check for unused entries in debian/source/include-binaries. + (Closes: #528001) + * Look for COM (not COFF) binaries when warning against Windows + executables in sources. See #913867 for more info. + + [ Chris Lamb ] + * Add missing tag summaries to older debian/changelog entries and fix the + generate-tag-summary script to match our newer style of changelog entry + placeholder in the future. + + [ Topi Miettinen ] + * Check for obsolete "install" or "remove" commands in modprobe.d files. + + -- Chris Lamb <lamby@debian.org> Fri, 27 Dec 2019 18:28:08 +0000 + +lintian (2.42.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - concatenated-upstream-signatures + - doubly-armored-upstream-signature + - empty-upstream-sources + - explicitly-armored-upstream-signature + - fortran-module-does-not-declare-version + - inconsistent-maintainer + - missing-prerequisite-for-fortran-module + - no-dh-sequencer + - opentype-font-prohibits-installable-embedding + - opentype-font-wrong-filename + - quoted-placeholder-in-mailcap-entry + - repackaged-source-not-advertised + - spurious-fields-in-upstream-signature + - truetype-font-prohibits-installable-embedding + - truetype-font-wrong-filename + - wrong-vcs-location-for-dpmt + - wrong-vcs-location-for-papt + + Removed: + - service-key-has-whitespace + - source-contains-empty-directory + + [ Felix Lechner ] + * Add new checks to identify and notify about issues in upstream + signatures. (Closes: #929429, #929434, #929435, #929436) + * Do not consider manpages from related packages when looking for + manpages without executables. (Closes: #946471) + * Add a new check for unsafe mailcap entries. (Closes: #33486) + * Add new Fortran checks to validate module versions and + prerequisites. (Closes: #796352) + * Add new checks for empty upstream sources and for when repackaged + sources are not properly advertised as such. (Closes: #471537) + * Drop the source-contains-empty-directory tag as it was mostly ignored. + (Closes: #907727) + * Remove the bogus service-key-has-whitespace tag. (Closes: #946763) + * Check TrueType and OpenType fonts for licensing terms. + (Closes: #635068) + * Allow "boolean false" directory components in link targets. + (Closes: #892127) + * Add a new tag for consistent maintainer fields between changes and + source processables. (Closes: #546525) + * Add a new no-dh-sequencer tag to be issued when the debhelper(7) dh(1) + sequencer is not used. + + [ Guido Günther ] + * Update the PureOS distribution names in the "vendor" configuration. + + [ Louis-Philippe Véronneau ] + * Ensure proper VCS location for Debian Python Module Team and Debian + Python Application Team packages. + + -- Chris Lamb <lamby@debian.org> Thu, 19 Dec 2019 12:01:30 +0000 + +lintian (2.41.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-watch-file-standard + - duplicate-packaging-file + - image-file-has-conflicting-name + - image-file-has-unexpected-name + - incorrect-packaging-filename + - manpage-without-executable + - tab-in-license-text + + [ Felix Lechner ] + * Check for tab characters in debian/copyright files. (Closes: #946026) + * Add checks for incorrect/duplicate filenames amongst packaging files, + including files called "TODO" and potentially-misnamed files with + lowercase "debian" (eg. "NEWS.debian"). (Closes: #946126) + * Do not access network when validating XML files by adding XML::LibXML + as a binary dependency and removing XML::Simple. (Closes: #926543) + * When analysing debian/copyright, take files from the unpatched + "orig_index" tree to prevent false-positives with respect to + wildcard-matches-nothing-in-dep5-copyright. (Closes: #844274) + * Warn about out image files with unrelated or conflicting names. + (Closes: #717818) + * Issue a classification tag for the specific uscan(1) standard version + in use. (Closes: #542713) + * Warn with manpage-without-executable when a manpage is not accompanied by + an executable in, for example, /usr/bin. (Closes: #583125) + * Remove references to the obsolete IPv4.php PEAR module. (Closes: #935609) + * Switch templates for tests to use the debhelper-compat virtual package + instead of debian/compat. + * Allow long values for the Package-List field. + * Adjust a test for the new locations of obsolete DES routines in + glibc >= 2.29-5. + + [ Chris Lamb ] + * Move field-to-long exceptions to a list. + * Drop an unused List::MoreUtils "any" import. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 09 Dec 2019 11:24:05 +0000 + +lintian (2.40.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - package-is-co-maintained + - package-is-maintained-by-individual + - package-is-team-maintained + + [ Chris Lamb ] + * Sync data/fields/build-profiles and the long description of + invalid-profile-name-in-build-profiles-field with the latest profiles, + particularly including the new "noinsttest". (Closes: #945891) + * Use "is_executable" over checking for a specific umask for + debian-rules-not-executable and update the long description of + this tag to not imply that (exactly) 0755 permissions are required. + (Closes: #945869) + * Don't rebuild test packages if the test specifications have not + changed; build-test-packages will do the right thing now. + + [ Felix Lechner ] + * Split all test specifications into separate instructions for the + building and the evaluation of test packages. + + [ Peter Wienemann ] + * Add new classification tags for packages maintained by individuals, + groups and teams. + + -- Chris Lamb <lamby@debian.org> Tue, 03 Dec 2019 20:41:17 +0000 + +lintian (2.39.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-not-executable + - package-depends-on-an-x-font-package + + [ Scott Talbert ] + * Add wmem{cpy,move,set} to the list of excluded hardened functions to + avoid many false-positives. (Closes: #921136) + + [ Louis-Philippe Véronneau ] + * Check to ensure debian/rules files are executable. + * Update instructions to download build-dependencies with "apt" instead + of "apt-get". + + [ Chris Lamb ] + * Don't emit debian-rules-not-executable if debian/rules is a symlink; we + warn about this via debian-rules-is-symlink. + + -- Chris Lamb <lamby@debian.org> Thu, 28 Nov 2019 10:34:27 +0000 + +lintian (2.38.0) unstable; urgency=medium + + * Summary of tag changes: + + Removed: + - package-depends-on-an-x-font-package + + [ Felix Lechner ] + * Process all overrides for a particular tag, not just the last one. + (Closes: #945276, #945299) + * For all output types except XML and "universal" impose a tag order when + emitting. (Closes: #944807) + * In checks, use the new attribute accessors from Processable and remove + references to the outdated 'info' attribute. + + [ Stephen Kitt ] + * Drop the package-depends-on-an-x-font-package as packages can now + depend on X fonts directly (see #941803). + + -- Chris Lamb <lamby@debian.org> Fri, 22 Nov 2019 20:09:51 +0000 + +lintian (2.37.0) unstable; urgency=medium + + [ Chris Lamb ] + * Don't emit missing-depends-on-sensible-utils for sensible-utils itself. + (Closes: #944895) + * Correct logic when excluding .path/.timer & .service pairs from + systemd-service-file-missing-install-key. Thanks, Richard Laager + <rlaager@wiktel.com>. (Closes: #944145) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Tue, 19 Nov 2019 16:23:48 +0000 + +lintian (2.36.0) unstable; urgency=medium + + * Don't emit systemd-service-file-missing-install-key for .service files + with corresponding .path or .timer pairs. (Closes: #944145) + + -- Chris Lamb <lamby@debian.org> Fri, 15 Nov 2019 12:18:04 +0000 + +lintian (2.35.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - package-placeholder-in-symbols-file + + [ Chris Lamb ] + * Don't complain about Build-Ids or Description fields that are too long; + there is nothing really actionable for Lintian to complain about. + (Closes: #942493) + * Drop quoting around the field that violates "field-too-long" whilst a + convincing case can certainly be made for quoting the offending field + (eg "'Depends'") it feels too inconsistent with the rest of Lintian. + + [ Felix Lechner ] + * Detect PACKAGE placeholders in debian/symbols files. (Closes: #944047) + * Drop minimum version requirement 8.30 for coreutils; process files + containing newlines separately. (Closes: #944258) + * Associate the multiline-field tag with the fields/multi-line check. + * Provide a new check fields/multi-line to do what Lintian::Processable + did previously in that regard. + * Fix missing module for --version; remove eval shielding error. + + [ Fabrice Bauzac ] + * Update the location of the local HTML documentation. + + [ Adam D. Barratt ] + * Remove myself from uploaders + + -- Chris Lamb <lamby@debian.org> Mon, 11 Nov 2019 13:58:05 +0000 + +lintian (2.34.0) unstable; urgency=medium + + [ Chris Lamb ] + * Don't emit package-supports-alternative-init-but-no-init.d-script when + we have a .path and .service pair, in parallel to allowing .service and + .timer pairs released in Lintian 2.29.0 via #933109. (Closes: #944094) + * Don't emit changelog-file-missing-explicit-entry for stable updates. + (Closes: #944098) + + [ Felix Lechner ] + * Insert 'keys' before hashes for Perl in stretch. (Closes: #943910) + * In text-output, offer hyperlinks to tag descriptions on + <https://lintian.debian.org>. + * Turn the Lintian::Collect package into a Moo common role for all + consumers of collected data. + * Test for POD coverage in all files but allow exceptions via + Pod::Coverage::TrustPod. Add libpod-coverage-trustpod-perl to + Build-Depends. + * In Info::Changelog::Entry, adjust POD to avoid runtime errors. + + [ Peter Wienemann ] + * Simplify the testing of the 'standards-version-classifications' tag. + + -- Chris Lamb <lamby@debian.org> Thu, 07 Nov 2019 18:44:29 +0000 + +lintian (2.33.0) unstable; urgency=medium + + [ Chris Lamb ] + * Suggest switching from debian/compat to debhelper-compat. (Closes: #933304) + * Upgrade the severity of missing-systemd-service-for-init.d-script from + pedantic to a warning. (Closes: #943957) + + [ Felix Lechner ] + * Add 'noguile' to the list of valid build profiles. (Closes: #943947) + * Add libclass-xsaccessor-perl and libnamespace-clean-perl to Depends and + Build-Depends. + * Fix the tag description for the + symbols-file-missing-build-depends-package-field tag. + * In the tests add the newly appearing pedantic tags to the list of + expected tags. + * In Unpacker, eliminate an 'eval' that obscured messages to improve + error handling. + * In Lintian::Collect::{Binary,Source}, read from MLDBM in new facilites + for details on java-info. + + [ Peter Wienemann ] + * Add a "standards-version" classification tag to extend the collection + of plots on <https://trends.debian.net>. + + -- Chris Lamb <lamby@debian.org> Mon, 04 Nov 2019 17:40:59 +0000 + +lintian (2.32.0) unstable; urgency=medium + + [ Chris Lamb ] + * Skip entirely whitespace lines when checking the + override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS tag. + (Closes: #943684) + * Don't build Git tags on salsa. + + [ Felix Lechner ] + * Clarify boolean return value in Collect::Binary->is_pkg_class. + (Closes: #943724) + * In Lintian::Collect::Binary, read from MLDBM in new facilites for + details on scripts. + * In Lintian::Collect::Package, read from BerkeleyDB in new facilites for + details on binary package "control" scripts. + + [ David Prévot ] + * Update a file reference in the long description of the + unnecessary-source-date-epoch-assignment tag. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Thu, 31 Oct 2019 17:09:52 +0000 + +lintian (2.31.0) unstable; urgency=medium + + [ Chris Lamb ] + * Avoid false-positives for missing ${sphinxdoc:Depends} when "dh" calls + include dynamic variables. (Closes: #943711) + * Include more verbose debugging info (eg. concurrency) when running + Lintian's autopkgtests. + + [ Felix Lechner ] + * Rework the warning for overly-long binary package fields. + + -- Chris Lamb <lamby@debian.org> Tue, 29 Oct 2019 12:51:32 +0000 + +lintian (2.30.0) unstable; urgency=medium + + [ Chris Lamb ] + * Warn about packages that use the deprecated $ADTTMP autopkgtest variable. + + [ Sylvestre Ledru ] + * Emit a warning for overly-long binary package fields. (Closes: #942493) + + [ Felix Lechner ] + * Generate the qa-list.txt data file from the Ultimate Debian Database + and update this file in the package. + * Extract the auto-reject tags from the data published by the FTP Master + team and update locally. + * In the cruft check, use the new ->tag subroutine instead of the + Lintian::Tag::tag global. + + -- Chris Lamb <lamby@debian.org> Sat, 26 Oct 2019 18:03:17 +0000 + +lintian (2.29.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - sphinxdoc-but-no-sphinxdoc-depends + + [ Chris Lamb ] + * Warn about missing ${sphinxdoc:Depends} when either "--with sphinxdoc" + or dh_sphinxdoc is used. (Closes: #940999) + * Don't emit package-supports-alternative-init-but-no-init.d-script when + we have a foo.service and foo.timer pair. (Closes: #933109) + * Bump the minimum version required version for debhelper Build-Depends + now that version 10 is satisfied in oldstable. (Closes: #942632) + * Add python2 and python2-minimal as satisfying Build-Depends for Python + packages. (Closes: #942658) + * Improve the test package generation logging output to include a + current/total status. + * Add a trailing ellipsis to the "Prepearing X work directories" to + denote processing is occuring in the background. + + [ Felix Lechner ] + * Migrate all checks to use the new internal ->tag(..) subroutine. + + [ Sylvestre Ledru ] + * Provide more information in the case of a sorting-order.t test failure + to facilitate debugging. + + -- Chris Lamb <lamby@debian.org> Sun, 20 Oct 2019 10:06:13 +0000 + +lintian (2.28.0) unstable; urgency=medium + + [ Felix Lechner ] + * Correctly calculate an appropriate prior changelog version for source + NMUs. (Closes: #942411) + * Split check/files.pm into smaller components; invoke parts through the + old scripts. + + [ Simon Quigley ] + * Add "focal" as a known Ubuntu distribution. + + [ Adam Schmalhofer ] + * Clarify the long description for the + package-contains-python-tests-in-global-namespace tag to specifically + mention "test_foo" directory-based moduiles and not "test_foo.py" + files. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Thu, 17 Oct 2019 18:00:48 +0000 + +lintian (2.27.0) unstable; urgency=medium + + [ Chris Lamb] + * Don't warn about package-supports-alternative-init-but-no-init.d-script + and systemd-service-file-missing-install-key and for units installed in + a subdirectory of (for example) /lib/systemd/system. (Closes: #941419) + * Update data/fields/perl-provides. + + [ Felix Lechner ] + * In the tests, load profiles only from one location, ensuring one is + loaded in pod-syposis.t. (Closes: #942252) + * Make subchecks of 'fields' stand on their own: + - Associate tags with new subchecks for original check 'fields'. + - Add to the debian/main profile the new checks split from 'fields'. + * Add editing aid section to all Perl files that do not have it, except + in tests. + + -- Chris Lamb <lamby@debian.org> Sun, 13 Oct 2019 22:27:26 +0000 + +lintian (2.26.0) unstable; urgency=medium + + [ Chris Lamb ] + * Avoid false-positives in non-consecutive-debian-revision by only + performing the test when Debian revisions (eg. -2, -3, etc.) are whole + integers. (Closes: #941395, #942013) + * Correct/improve the grammar of the non-consecutive-debian-revision + tags long description. + + [ Felix Lechner ] + * Convert all test checks to use instantiated objects. + + -- Chris Lamb <lamby@debian.org> Wed, 09 Oct 2019 23:51:26 +0000 + +lintian (2.25.0) unstable; urgency=medium + + * Fix false positives for templated (eg. "foo@.service") service files + when checking for packages that appear to lack corresponding init + scripts. + * Update the long description of the + init.d-script-depends-on-all-virtual-facility tag and whitelist the + sysvinit package from all such init.d checks. (Closes: #941140) + * Add 4.4.1 as a known Standards-Version. + + -- Chris Lamb <lamby@debian.org> Wed, 02 Oct 2019 08:52:55 +0000 + +lintian (2.24.0) unstable; urgency=medium + + [ Felix Lechner ] + * Do not emit changelog-file-missing-explicit-entry when maintainer + revision is 0 (eg. 1.2.5-0+deb10u1). (Closes: #940994) + * Remove internal support for checking whether binary packages are + "native". + * Various code cleanups, splitting checks/fields.pm into smaller + components, moving numerous tags, etc. + + -- Chris Lamb <lamby@debian.org> Fri, 27 Sep 2019 08:15:59 +0000 + +lintian (2.23.0) unstable; urgency=medium + + * Allow the lowercase version of "UNRELEASED" changelog entries in + various tags. This is a convention used in the Debian ports archive. + (Closes: #940877) + * Drop matching for Source-Version substvars; they are not supported by + dpkg-dev anymore and results in us accidentally matching an incorrect + "Source-:Upstream-Version" variable. (Closes: #940878) + * Bump severity of script-uses-unversioned-python-in-shebang (ie. + "#!/usr/bin/env python") from classification to "pedantic" severity for + now. (Closes: #934853) + + -- Chris Lamb <lamby@debian.org> Tue, 24 Sep 2019 10:31:54 +0000 + +lintian (2.22.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - homepage-refers-to-obsolete-debian-infrastructure + - license-file-listed-in-debian-copyright + - odd-historical-debian-changelog-version + + Removed: + - debian-changelog-version-requires-debian-revision + - hyphen-in-native-debian-changelog-version + - latest-debian-changelog-entry-changed-to-native + - pear-package-feature-requires-newer-pkg-php-tools + + Renamed: + - rules-requires-root-implicitly -> rules-requires-root-missing + + [ Chris Lamb ] + * Check for packages still refering to the deprecated Alioth + service in their Homepage field. (Closes: #933500) + * Quote the package build path to avoid test failures when building in a + directory whose name contains a '+' or other regex metacharacters. + (Closes: #939674) + * Don't emit the missing-build-dependency, + package-uses-debhelper-but-lacks-build-depends or + debhelper-but-no-misc-depends tags for packages that do not use + debhelper but use specific parts of dh-autoreconf. (Closes: #939874) + * Emit missing-build-dependency for packages that do not use debhelper + but use specific parts of dh-autoreconf without build-depending on it. + * Revert merging our two CI pipeline stages. Whilst this avoided an + additional ~5 minute initial setup/teardown time, it meant that the + cache misses attempted to do both the within the 1h timeout. Whilst we + might still timeout overall, at least with a split we are very likely + to have cached the build packages. + * Upgrade and rename classification-level tag + rules-requires-root-implicitly to rules-requires-root-missing. (Closes: + #933240) + * Drop the unnecessary pear-package-feature-requires-newer-pkg-php-tools + tag. Thanks, Antonio Ospite and David Prévot. (Closes: #939698 + * Don't emit latest-debian-changelog-entry-changed-to-native if the + latest changelog entry references "native package". + + [ Felix Lechner ] + * Remove parts related to gzip timestamps from the files-general test. + (Closes: #939673) + * Refocus the 'binaries-missing-lfs' test on the tag + 'binary-file-built-without-LFS-support'. (Closes: #939639) + * Add the changelog-distribution-does-not-match-changes-file tag to the + ftp-master-auto-reject profile + * In Lintian::Collect::Source, use a centralized version parser. + * Add new tag 'license-file-listed-in-debian-copyright' to avoid + unnecessary clutter. + * Fix command-line processing for --check-part so 'all' can also be part + of a list. + * Associate the multiline-field tag with the 'lintian' check. + + [ Xavier ] + * Fix false-postivies when checking for the + pkg-js-autopkgtest-file-does-not-exist tag with regards to comments. + (Closes: #940082) + + [ Rafael Laboissiere ] + * Avoid false positives for library-not-linked-against-libc with Octave + add-ons. (Closes: #940282) + + [ Faidon Liambotis ] + * Use the "build-depends-all" relation to correctly detect binaries built + with Go. + + -- Chris Lamb <lamby@debian.org> Sat, 21 Sep 2019 02:49:05 +0000 + +lintian (2.21.0) unstable; urgency=medium + + * Add 'iIF' to the list of spelling exceptions ignored in binaries. + Thanks to Graham Inggs and Matthias Klose. (Closes: #939637) + * Suggest using libjs-bootstrap over libjs-twitter-bootstrap as the + latter is not available in Debian buster. Thanks to Carsten Schoenert + for the suggestion. (Closes: #939416) + * Merge our two CI pipeline stages, avoiding an additional ~5 minute + initial setup/teardown time as well as avoiding having to parse the + checksums of the yet-to-be-downloaded build dependencies. + + -- Chris Lamb <lamby@debian.org> Sat, 07 Sep 2019 13:44:36 +0000 + +lintian (2.20.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - pkg-js-autopkgtest-test-is-empty + - pkg-js-tools-test-is-empty + + [ Chris Lamb ] + * Ignore Python scripts that are shipped under + /usr/lib/python3/dist-packages as these files aren't supposed to be + called as scripts. (Closes: #933167) + * Avoid a large number of false-positives for + package-does-not-use-debhelper-or-cdbs by actually taking into account + whether the package uses CDBS or not. (Closes: #933902, #933903) + * Avoid package-does-not-use-debhelper-or-cdbs false-positives for + packages using the pkg-kde-tools CDBS routines. (Closes: #933901) + * Don't emit python3-depends-but-no-python3-helper when we build-depend + on dh-sequence-python3, etc. (Closes: #939050) + * Split out building the test packages into a new CI stage, reducing the + test iteration time by approximately 30 minutes in many cases. + (Closes: #930487) + + [ Felix Lechner ] + * Adjust the testing default to run only the declared check to speed up + testing and make said tests more specific. + * Combine the checks changelog-file and source-changelog into a new + "changelog"-type check. + + [ Xavier ] + * Group all Node.js-related tests into a new checks/nodejs.pm package. + * Warn if the debian/tests/pkg-js/test file is empty or otherwise devoid + of meaningful test content. + + -- Chris Lamb <lamby@debian.org> Tue, 03 Sep 2019 07:57:19 +0000 + +lintian (2.19.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - older-source-format + - unreleased-changelog-distribution + + Removed: + - source-field-does-not-match-pkg-name + + [ Chris Lamb ] + * Don't emit the latest-debian-changelog-entry-without-new-version + warning for uploads to the "buster" distribution. (Closes: #934982) + * Also check for "${source:Upstream-Version}" etc. in the + version-substvar-for-external-package tag, not just + "${source:Version}". (Closes: #935138) + * Update the name of the node-html5shiv library for the + privacy-breach-uses-embedded-file-html5shiv and + embedded-javascript-library tags. (Closes: #935083) + + [ Felix Lechner ] + * Emit a wishlist tag for source format 1.0 packages. (Closes: #884498) + * Complain about UNRELEASED distribution in changelogs if the .changes + file is signed. (Closes: #873520) + * Generate the HTML manual from reStructuredText; use latter as plain + text. (Closes: #865847) + * Convert the untestable source-field-does-not-match-pkg-name tag to a + fatal program error. + * In the test suite, use a default 3.0 source format and add default + version numbers. + + [ Niels Thykier ] + * commands/lintian: + - Ensure @serializable is properly created. + - Use wait_all during clean up; we are more interested in getting as + much cleaned up over failing fast. + + [ Simon McVittie ] + * Add /usr/bin/gjs-console as a recognised interpreter/shebang. + (Closes: #934981) + + [ Raphaël Hertzog ] + * Update the Kali Linux profile to make the dir-or-file-in-opt tag + overridable. + + [ Paul Wise ] + * Refer to the HTML version of the Debian Policy Upgrading checklist. + + -- Chris Lamb <lamby@debian.org> Wed, 21 Aug 2019 16:34:36 +0000 + +lintian (2.18.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - nodejs-module-installed-in-usr-lib + + Removed: + - dh-manual-sequence-control-obsolete + + [ Chris Lamb ] + * Don't emit package-name-doesnt-match-sonames for udebs. + (Closes: #934748) + * Remove "busses" as a false-positive plural for "bus". Thanks to Jörg + Frings-Fürst for the report. (Closes: #934452) + * Recommend that maintainers do not override the + "latest-debian-changelog-entry-changed-to-native" tag. + * Don't emit changelog-file-missing-explicit-entry for uploads to the + security archive (Re: #934026). + + [ Felix Lechner ] + * Remove the "dh-manual-sequence-control-obsolete" tag as it cannot + be tested due to debhelper changes. + + [ Xavier ] + * Add a "nodejs-module-installed-in-usr-lib" tag to check if Node.js + modules are installed in the (correct) new location. + * Update the node-package-install-in-nodejs-rootdir test to search in all + Node.js module directories. + + -- Chris Lamb <lamby@debian.org> Wed, 14 Aug 2019 15:56:02 +0000 + +lintian (2.17.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - empty-debian-tests-control + + Removed: + - control-file-duplicate-field + - control-file-syntax-error + - debian-source-dir-unknown-source-format + - debian-tests-control-is-not-a-regular-file + - missing-runtime-tests-field + - syntax-error-in-control-file + - syntax-error-in-debian-tests-control + - testsuite-control-missing-test-field + - testsuite-control-not-file + - testsuite-control-syntax-error + - unknown-source-format + + [ Chris Lamb ] + * Don't emit command-in-sbin-has-manpage-in-incorrect-section for + symlinks; they are invariably provided for legacy/compatibility + reasons. (Closes: #931951) + * Update regex matches against lines in debian/rules correctly identify + debhelper calls starting with environment modification (eg. + "LC_ALL=C.UTF-8"). (Closes: #932128) + * Factor out mangling of fatal error messages in the frontend + configuration and correct the exit code if the specified profile does + not exist. (Closes: #932215) + * Expand the long description of the duplicate-files check to suggest how + to remove them. Thanks to Rebecca Palmer for the suggested text. + (Closes: #932411) + * Downgrade command-in-sbin-has-manpage-in-incorrect-section to pedantic + severity for the time being. (Closes: #570998) + * Downgrade the severity and certainty of the + package-supports-alternative-init-but-no-init.d-script tag for the time + being. (Closes: #931889) + * Correct multiple "gobject-introspection" typos. Thanks to Simon + McVittie (smcv) for the pointer. (Closes: #933394) + * Ignore all initscripts provided by the initscripts binary package + instead of whitelisting issues individually or requiring overrides; + these will never be regular-style initscripts. (Closes: #933383) + + [ Felix Lechner ] + * Do not trigger repack requirement when the Debian revision includes the + "repack" indicator. (Closes: #931846) + * Drop Depends and Build-Depends on libparse-debianchangelog-perl. + (Closes: #933134) + * Quote the spelling corrections that consist of multiple words. + * Use the null character as the line delimiter in collection/md5sums. + * Show logs for tests with parse errors when unattended and show all + parse errors in TAP. + * Always show log when failing to build a test package. + * Store tags is separate, small files under ./tags. + * Remove MatchVars check from PerlCritic configuration. + * In the test runner, add an option to accept all tag changes. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Tue, 06 Aug 2019 16:45:11 +0100 + +lintian (2.16.0) unstable; urgency=medium + + The "post-buster" release. + + * Summary of tag changes: + + Added: + - bin-sbin-mismatch + - command-in-sbin-has-manpage-in-incorrect-section + - directory-in-etc-sv-directory-without-executable-run-script + - package-supports-alternative-init-but-no-init.d-script + + [ Chris Lamb ] + * Add 4.4.0 as a known Standards-Version. + * Post-buster changes: + - Reflect the release, updating dates (etc.) of "oldstable" and so on. + - Bump the recommended debhelper level to 12 (see #918809). + - Bump the old and ancient version numbers for Python 3 checks (see + #903399). + - Drop the deprecated --fail-on-warnings option to help towards fixing + Debian bug #709932. + - Upgrade package-uses-vendor-specific-patch-series to "E:" level + severity (see #904302). + * Warn about files referencing /usr/bin/foo if the binary is actually + installed under /usr/sbin/foo. (Closes: #930702) + * Check that a package that ships a /etc/sv/foo directory then + /etc/sv/foo/run exists and is executable. (Closes: #931426) + * Support suppress-tags-from-file in Lintian configuration file. + (Closes: #930700) + * Don't emit pkg-js-tools-test-is-missing if the "dh" invocation uses + variables in its arguments. (Closes: #928283) + * Fix "mistake||correction" delimiter for a number of entries in + data/spelling/corrections-case. (Closes: #931446) + * Disable the duplicate word checker when analysing patch files. + (Closes: #931183) + * Override dh_dwz in a binaries-general test to avoid testsuite hanging. + (Closes: #931632) + * Avoid false-positives in source-contains-prebuilt-doxygen-documentation + against Doxygen templates. (Closes: #930109) + * Exclude "X Bitmap Graphic" (.xbm) files from being flagged as extra + license files. (Closes: #930211) + * Add an exception for documentation outside of /usr/share/doc for "R" + statistical computing modules; users expect them under + /usr/lib/R/site-library. (Closes: #930311) + * Interpolate $DPKG_MAINTSCRIPT_PACKAGE in debconf(7) template names in + maintainer scripts. (Closes: #930677) + * Check that packages that provide support for alternative init systems + also provide an init.d script. (Closes: #926471) + * Add /lib/runit/invoke-run as a known interpreter to avoid false + positives in checking runit scripts under /etc/sv/*/run. + (Closes: #930701) + * Don't emit latest-debian-changelog-entry-without-new-version for + uploads to (eg.) buster-security to avoid false-positives when + performing "no-change" uploads with a ~debXuY suffix. + + [ Felix Lechner ] + * Bump the minimum perltidy version required to avoid test failures. + * Add runtime dependency on liblist-compare-perl. + * Reduce the complexity of code in Lintian::Unpacker. + + [ Dmitry Bogatov ] + * Check for commands in /sbin or /usr/sbin with manpages in the + incorrect section. (Closes: #570998) + + [ Adam D. Barratt ] + * Lintian::Reporting::Util: Add missing import of Exporter::import. + + [ Axel Beckert ] + * checks/systemd.pm: Fix "systemctl --daemon-reload" vs "systemctl + daemon-reload". + * Fix typo in description of debian-watch-does-not-check-gpg-signature. + + -- Chris Lamb <lamby@debian.org> Mon, 08 Jul 2019 01:24:09 +0000 + +lintian (2.15.0) unstable; urgency=medium + + [ Chris Lamb ] + * t/bin/runtests: Correct equality operator preventing the correct + parsing of --onlyrun="" used when (eg.) executing autopkgtests and + apply a patch from Felix Lechner to specify a missing --work-dir + argument when building test packages. (Closes: #929430) + * Add references to Debian Policy §4.9.2 and §5.6.31 for checks + regarding Rules-Requires-Root. (Closes: #929428) + * Correct more false-positives for missing-systemd-timer-for-cron-script + due to an incorrect regular expression. Thanks again to Francesco Poli + (wintermute) for the patch. (Closes: #927970) + * Remove unnecessary commas from tag long descriptions and + improve grammar in the description of testsuite-autopkgtest-missing. + + [ Vagrant Cascadian ] + * Add Guile 2.0 & 2.2 to and remove "ancient" versions 1.6 & 1.8 from the + list of versioned interpreters. (Closes: #929501) + + [ Paul Wise ] + * spelling: Add several corrections + + -- Chris Lamb <lamby@debian.org> Sun, 26 May 2019 14:12:53 +0000 + +lintian (2.14.0) unstable; urgency=medium + + [ Chris Lamb ] + * Correct false-positives in missing-systemd-timer-for-cron-script due to + an incorrect regular expression. Thanks to Francesco Poli (wintermute) + for the patch. (Closes: #927970) + * Adjust package-contains-python-header-in-incorrect-directory as Python + 3.8 dropped the "m" modifier that was used in Python 3.7 and below (eg. + /usr/include/python3.7m). (Closes: #928617) + + [ Ivo De Decker ] + * Check for sources in the "main" section with only binaries in the + "contrib" section. (Closes: #928126) + + [ Michael Biebl ] + * Consider the now-preferred /usr/share/dbus-1/{system,session}.d + directories (supported since dbus 1.9.18) when checking D-Bus services. + (MR: !187) + + [ Xavier ] + * Fix an error where debian/tests/pkg-js/files contained deep (but valid) + directory. (MR: !199) + + [ Paul Wise ] + * Add/fix several spelling corrections. + * Sort the dictionary + * Prefer American spelling for American typos + + -- Chris Lamb <lamby@debian.org> Wed, 22 May 2019 07:47:56 +0000 + +lintian (2.13.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debhelper-compat-level + - patch-system + - pkg-js-autopkgtest-file-does-not-exist + - pkg-js-autopkgtest-test-is-missing + - pkg-js-tools-test-is-missing + - vcs + - vcs-uri + + [ Niels Thykier ] + * gitlab-ci: Run commands with the time command to get an estimate + for each part. + * Ensure that LINTIAN_CFG is always defined as it is used in debug + output. + * Fix a typo that called the wrong clean-up function with --unpack. + * Extract reporting related utilities into a separate module. + * Remove unused system_env function from Lintian::Util + * Move Deb822 parsing into its own module called Lintian::Deb822Parser. + + [ Felix Lechner ] + * Implement universal output format in Lintian. + * Only run tests in t/bin/runtests but do not build any packages. + + [ Xavier ] + * Test for Node.js packages that don't ship a debian/tests/pkg-js/test + file or ship a debian/tests/pkg-js/files that contains invalid/missing + references. (Closes: #923339) + * Test for Node.js packages that use "--with nodejs" in debian/rules but + do not specify a debian/tests/pkg-js/test file. (Closes: #923331) + + [ Adam D. Barratt ] + * Update private/refresh-locale-codes to work with newer isoquery(1) and + refresh data/files/locale-codes and data/fields/virtual-packages to + match. + + [ Lucas Nussbaum ] + * Emit a classification tag about the current debhelper compat level + in use. (Closes: #926766) + * Emit a classification tag that records the patch system in use. + (Closes: #926767) + * Emit a classification tags about the revision control system used by + the package. (Closes: #926768) + + [ Michael Biebl ] + * Also look in /usr/share/dbus-1/{system,session}.d for dbus + configuration files. (MR: !187) + + [ Simon Quigley ] + * Add "eoan" as a known Ubuntu distribution. (MR: !198) + + [ Chris Lamb ] + * Clarify "Could not determine what you meant by" test harness error + message; it is not always a parse error. + + [ Paul Wise ] + * Add/fix several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 22 Apr 2019 09:01:36 +0000 + +lintian (2.12.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - doc-base-file-references-wrong-path + - systemd-service-file-shutdown-problems + + [ Chris Lamb ] + * Make the argument to --jobs non-optional to prevent a "0" job count + being parsed if the argument is omitted. This resulted in Lintian + getting stuck as it did not have any runners to perform work with. + (Closes: #925970) + * Fix false-positives in the version-substvar-for-external-package tag + when a Provides field contains multiple items and/or with leading + whitespace. (Closes: #833608) + * Don't check for the x86-specific "SafeSEH" hardening feature for code + that is JIT-compiled by the Mono runtime. (Closes: #926334) + * Collapse the rather long-winded explanation regarding typos in the long + description of the version-substvar-for-external-package tag. + * Drop double-spaces in .desc files. + + [ Felix Lechner ] + * Allow symlinks in autopkgtest paths. + + [ Niels Thykier ] + * Restrict the number of parallel clean up jobs to match --jobs + parameter. (Closes: #924714) + + [ Osamu Aoki ] + * Check for files in doc-base control files that list paths pointing + outside of /usr/share/{doc,info}. (Closes: #925200) + + [ Xavier Guimard ] + * Don't emit the debian-watch-file-should-mangle-version tag if + dversionmangle is set to "auto". (Closes: #926166) + + [ Topi Miettinen ] + * Check for systemd service files that use DefaultDependencies=no and + Conflicts=shutdown.target without Before=shutdown.target. (MR: !177) + * Update the systemd hardening flags. (MR: !178) + + [ Balint Reczey ] + * Run autopkgtest tests in parallel, autodetecting CPU count. (MR: !75) + + [ Paul Wise ] + * Add/fix several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Thu, 04 Apr 2019 08:20:06 +0000 + +lintian (2.11.0) unstable; urgency=medium + + [ Chris Lamb ] + * Support dh-sequence-{gir,gnome,python3} etc. virtual packages as + satisfying various build-dependencies. (Closes: #924082) + * Don't detect non-maintainer upload (NMU) versions when checking for + maintainer scripts that support "ancient" package versions. + (Closes: #924501) + * Correct false-positives in when checking for dh-runit packages that + lack a "Breaks" substvar by ensuring that the binary package actually + uses runit. (Closes: #924116) + * Update the long description of the + new-package-should-not-package-python2-module tag to justify further + why a changelog entry is more appropriate than an override. + * Remove errant "#" from the long description of + inconsistent-appstream-metadata-license. + + [ Felix Lechner ] + * Deprecate static labs; all labs are temporary from now on. + * In autopkgtests, allow output to stderr to shorten waiting period. + * Fix the rules-requires-root-implicitly test on stretch. + * For stretch-backports, also Build-Depend on the "XS" version of the + Text::CSV Perl module in addition to the pure Perl version. + + [ Stewart Ferguson ] + * Allow *.pth files in Python directories to avoid false-positives for + unknown-file-in-python-module-directory. (Closes: #924417) + + [ Paul Wise ] + * Add/fix several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 18 Mar 2019 22:20:48 +0000 + +lintian (2.10.0) unstable; urgency=medium + + [ Chris Lamb ] + * Check for placeholder "<project>" strings in debian/watch files as it + can resut in uscan(1) generating a file with shell metacharacters. + (Closes: #923589) + * Add "itialize" to the list of "spelling-error-in-binary" exceptions. + (Closes: #923725) + * Don't emit orig-tarball-missing-upstream-signature if the package uses + the "opts=mode=git,pgpmode=gittag" in debian/watch. (Closes: #920763) + * Use less-clunky "for entries that are too short" in the long + description of debian-changelog-line-too-short. + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Fri, 08 Mar 2019 17:26:37 +0000 + +lintian (2.9.1) unstable; urgency=medium + + [ Felix Lechner ] + * Add missing runtime dependency on libtry-tiny-perl. (Closes: #923262) + + [ Chris Lamb ] + * Add an initial .gitab-ci.yml. + + -- Chris Lamb <lamby@debian.org> Mon, 25 Feb 2019 16:38:19 +0000 + +lintian (2.9.0) unstable; urgency=medium + + [ Felix Lechner ] + * Add missing runtime dependency on libpath-tiny-perl. (Closes: #923229) + + [ Chris Lamb ] + * Add /lib/runit/invoke/run as a known interpreter. (Closes: #923232) + + -- Chris Lamb <lamby@debian.org> Mon, 25 Feb 2019 12:36:32 +0000 + +lintian (2.8.0) unstable; urgency=medium + + [ Chris Lamb ] + * Emit an experimental warning for packages that ship a cron script + without an equivalent systemd .timer file. (Closes: #922862) + * Make orig-tarball-missing-upstream-signature a "dsc" check so it + also appears when running against non-.changes files. (Closes: #922557) + * Check all combinations of processables and binary package names in + order to avoid false-positives or unused override warnings in spelling + checks depending on whether a .deb or .dsc (etc.) is passed to Lintian. + (Closes: #921814) + * Prevent pkg-config-references-unknown-shared-library false positives: + - Ignoring entries such as -lfoo{install_suffix} as they are + interpolated at runtime by Autoconf. (Closes: #922511) + - Create an exception list and populating with shared + objects shipped by libc6-dev and libgcc1. (Closes: #922402) + - Manually add "gcc" as an exception. + * Use the source package name (not the package section) when checking for + uses-dpkg-database-directly exceptions. (Closes: #922530) + * Correct reference to mips64el architecture to ensure we emit + binary-from-other-architecture on this arch. Thanks to Helmut Grohne. + (Closes: #921573) + * Don't emit source-nmu-has-incorrect-version-number for uploads to + backports. (Closes: #923060) + * Ensure libpath-tiny-perl is installed regardless of nocheck build + profile as it is needed to generate the Pod documentation. + * Add dpatch to "nocheck" Build-Depends to avoid skipping tests + and then don't emit build-depends-on-obsolete-package for Lintian + itself as a result. + * Remove "nocheck" Build-Depends restriction for libcapture-tiny-perl and + specify it as a runtime dependency too. + * Don't emit source-contains-prebuilt-java-object against Lintian itself + as we ship a trivial HelloWorld.jar as a test fixture. + * Don't print "Offering to re-calibrate..." message if we aren't actually + about to offer. + + [ Felix Lechner ] + * Ensure unpack loop stops when process succeeds after processable failed + to try and prevent Lintian from occasionally hanging. (Closes: #922737) + * Fix detection of security features in Portable Executable (PE) + binaries. + * Update recommendation in an update-menus long description that will not + trigger a check for full path names in maintainer scripts. (MR: !149) + * Interactively calibrate the expected tags in failing tests (MR: !145) + and use green and red terminal colors when adding or removing tags + during said calibration. (MR: !153) + * t/runtests: + * Split processing between scripts and tag tests. + * Split out test routines to process universal tags. + * Change options and arguments for stand-alone operation. + * Drop obsolete old-format-menu-file tag. + + [ Guillem Jover ] + * Don't hardcode ".gz" in the output of the malformed-deb-archive tag's + extra information. (Closes: #922534) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Sun, 24 Feb 2019 22:13:53 +0000 + +lintian (2.7.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - script-uses-unversioned-python-in-shebang + + [ Chris Lamb ] + * Track static libraries to avoid false-positives in + pkg-config-references-unknown-shared-library. (Closes: #921872) + * Assume that license files themselves do not require coverage in DEP-5 + copyright files. (Closes: #921752) + * Ignore spelling errors in patch author names. (Closes: #922233) + + [ Dmitry Bogatov ] + * Add a classification tag to identify the number of scripts using + unversioned Python shebangs. (Closes: #909510) + + [ Felix Lechner ] + * Demote the Test-Against test metadata field to be a selector for + false-positives only. (MR: !142) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Thu, 14 Feb 2019 08:37:22 +0000 + +lintian (2.6.0) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - package-contains-sass-cache-directory + - package-uses-dh-runit-but-lacks-breaks-substvar + - pkg-config-references-unknown-shared-library + + [ Chris Lamb ] + + * Enhancements: + - Check for pkg-config(1) files that reference unknown shared objects + via (for example) "Libs: -lfoo". (Closes: #920699) + - Check for packages that use dh_runit without specifying a Breaks on + the "${runit:Breaks}" substvar. (Closes: #920299) + - Require that build paths aren't "/" when checking for + file-references-package-build-path. + - Check for packages that ship with .sass-cache directories. + (Closes: #920593) + - Detect accidental ".git.git" (etc.) in Vcs-Git headers. + (Closes: #921084) + + * Bug fixes: + - Fix FTBFS by avoiding "self" false-positives when checking for + file-references-package-build-path in the Lintian test suite. + (Closes: #920536) + - Ignore duplicate .buildinfo files which can be supplied by using + mergechanges(1) from devscripts. (Closes: #920469) + - Rewrite "old" version calculation to prevent false-positives in the + maintainer-script-supports-ancient-package-version tag. + (Closes: #920638) + - Prevent false-positives in the command-with-path-in-maintainer-script + checks for sections automatically added by debhelper. + (Closes: #920568) + - Ignore quilt .pc directories when checking for + inconsistent-appstream-metadata-license. (Closes: #920647) + + * Reporting improvements: + - Include the upload and release dates in the output of the + maintainer-script-supports-ancient-package-version tag. + - Add a reference to the official specification in the long description + of the unnecessary-source-date-epoch-assignment tag. + + * Misc: + - Move to "Semantic Versioning" (https://semver.org/) scheme. + - Print Carp tracebacks in --debug mode. + + [ Felix Lechner ] + * Fix a race condition by stopping loop for collections after a task + fails. (Closes: #920691) + * Remove Test-For from all test specifications. (MR: !138) + * Consolidate scripts in t/scripts; move internal harness tests there. + * Clean up ./t; move helper binaries, including t/runtests, to t/bin. + * Add an empty Test-Against to all tests that do not have one. + * Calculate Test-For and Test-Against from new "Check" parameter in + runner. + * Add an internal self-test for all the fields in "desc" files. + * Move all t/tags/tests addressing a single check into t/tags/checks/. + (MR: !141) + + [ Jeremy Bicha ] + * Drop "GTK" -> "GTK+" correction. (Closes: #911449) + * Set "multimaint-merge" in debian/gbp.conf. (MR: !125) + + [ Xavier Guimard ] + * Update debhelper addon specification now that nodejs-dev has been + replaced by pkg-js-tools. (MR: !135) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Wed, 06 Feb 2019 22:51:14 +0100 + +lintian (2.5.124) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - obsolete-crypt-alias + - obsolete-des-encryption + + [ Chris Lamb ] + * Locate and process .buildinfo files if mentioned in a .changes file; + previously it was only examined if explicitly referenced. Thanks to + James Clarke. (Closes: #920228) + * If the changelog entry is missing a maintainer (eg. " -- <missing>"), + don't assume that it's an NMU. (Closes: #920184) + * Permit "-b" branch specifications in Mercurial Vcs-Hg control fields. + (Closes: #920314) + * Really fix summary generation code to match the "WIP" entry in the + changelog after moving to gbp-dch(1). + * Add "could break" as a spelling correction. + + [ Felix Lechner ] + * Allow tests to be freely organised such as by check. (MR: !132, !134) + + [ Zack Weinberg ] + * Add a check for binaries using obsolete DES encryption. + (Closes: #920376) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Thu, 24 Jan 2019 23:47:53 +0100 + +lintian (2.5.123) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - inconsistent-appstream-metadata-license + - package-contains-python-header-in-incorrect-directory + + Renamed: + - package-contains-usr-unmerged-pathnames -> + package-contains-real-file-outside-usr + + [ Chris Lamb ] + * Group warnings that only differ on the architecture in the HTML + reports. (Closes: #919162) + * Prevent a large number false-positives when checking "new style" init + scripts that use "#!/usr/bin/env /lib/init/init-d-script" as their + shebang. (Closes: #919604) + * Check for packages that ship headers in /usr/include/python3.x. + (Closes: #919979) + * Check for inconsistencies between debian/copyright and the information + embedded/duplicated in AppStream metadata files. Thanks to Daniel Kahn + Gillmor for the idea. (Closes: #907072) + * package-contains-usr-unmerged-pathnames tag: + - Prevent false-positives for leading directories. (Closes: #919839) + - Rename from package-contains-real-file-outside-usr. + - Move to "Classification" severity instead of a pedantic/experimental + combination. + * Use a verb in the debian-changelog-line-too-short tag description. + * Use "state cache" vs "state-cache" consistently between source and + binary packages when printing warnings during report generation. + * Update added/removed tag summary generation code to match "WIP" now we + are using gbp-dch(1). + + [ Niels Thykier ] + * lib/lintian: Do entry removals asynchroniously in temp labs. + * Lintian::Unpacker: + * Migrate to use IO::Async. + * Refactor to extract a "find_next_task"-sub(-generator). + * Add a simple queue to avoid some overhead. + * Support prioritizing unpacking by collections. + + [ Felix Lechner ] + * Template cleanup: (MR: !131) + - Rename tests-watchfile and tests-pedantic. + - Use renamed template sets in skeletons for suite tests. + - Move upstream/metadata from debian-native to debian-extra-non-native. + - Delete unused template set source-arch-independent. + + [ Mike Miller ] + * Reword the description of the description-too-long tag to match the + actual check. (Closes: #919740) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 21 Jan 2019 18:53:24 +0000 + +lintian (2.5.122) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - example-incorrect-path-for-interpreter + - incorrect-path-for-interpreter + - package-contains-real-file-outside-usr + - zero-byte-executable-in-path + + [ Chris Lamb ] + * Add a check for empty executable files in PATH; these files do not do + anything and produce no error message. (Closes: #919458) + * Prevent false-positives in the + maintainer-script-should-not-use-dpkg-maintscript-helper tag by adding + optional support for ignoring sections automatically added by + debhelper. (Closes: #917567) + * Split the wrong-path-for-interpreter tag into "wrong" and "incorrect" + variants, the latter with a reduced severity and capturing incorrect + (but working) shebangs such as "#!/usr/bin/env perl". Thanks to Ivo De + Decker for the report. (Closes: #917790) + * Update Debian Policy regex and manual references since this document + moved to Sphinx. (Closes: #918963) + * Also update the Java policy references as a new version of Docbook + generates different HTML links. + * Tests: + - Tidy "sorry" message in t/runtests. + - Drop changelog-format.t tests now we are trialling using gbp-dch. + - Add a note that using a "maintainer-script-should-not-" tag prefix + ensures that the tag will automatically pass the internal coverage + tests. + * debian/control: + - Clarify some grammar in the package long description. + - Prune Uploaders field to the current members of the "lintian" LDAP + group. With thanks to all who have contributed in the past. + + [ Felix Lechner ] + * Always use the extracted testing code in autopkgtests. (Closes: #919096) + * Exit test runner with error code after parsing errors on the command line. + * Convert test modules to the "Test Anything Protocol" (TAP). + - Run TAP scripts for all tests through TAP::Harness. (MR: !124) + - Add a generic test script for TAP::Harness. + - Add name of the generic TAP script to the default settings. + - Install generic TAP script into work directories during preparation. + * Make harness timestamp calculation more robust for non-existent files. + * Always use the installed "dplint" in autopkgtests. + + [ Josh Triplett ] + * Add a pedantic-level package-contains-real-file-outside-usr tag to + detect files installed to /. (MR: !128) + + [ Paul Wise ] + * Add several spelling corrections. + + -- Chris Lamb <lamby@debian.org> Thu, 17 Jan 2019 15:52:23 +0000 + +lintian (2.5.121) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - maintainer-script-should-not-use-dpkg-maintscript-helper + - maintainer-script-supports-ancient-package-version + + * checks/shared-libs.pm: + + [CL] Fix symbols-file-missing-build-depends-package-field + false-positives when a package contains more than one library. + Thanks to Mike Gabriel for the bug report. (Closes: #918473) + * checks/scripts.{desc,pm}: + + [CL] Check for manual calls to dpkg-maintscript-helper(1) in + maintainer scripts; recommend using dh_installdeb .maintscript + files instead. (Closes: #917567) + + [CL] Check for packages that have maintainer scripts that ship + support code for legacy versions of Debian. (Closes: #917566) + + * data/debhelper/compat-level: + + [CL] Don't emit a pedantic warning for compat level 12 "until + bullseye to avoid having to revert that change in case you need an + unblock for the buster release". (Closes: #918809) + * data/scripts/interpreters: + + [CL] Apply a patch from Mo Zhou to fix the Julia interpreter path. + (MR: !120) + + * t/*: + + [CL] Apply a patch from Felix Lechner to ensure the + debhelper-compat-experimental tag is run after the upgrade to + debhelper compat level 12. (MR: !117) + + [CL] Apply a patch series from Felix Lechner to support adaptive + rebuilding, speeding up the test suite by a factor of 17 (excluding + "scripts" tests). (MR: !118) + + [CL] Apply a patch series from Felix Lechner to add a number of + "internal" tests for the test apparatus itself. (MR: !119) + + [CL] Apply a patch series from Felix Lechner to split the + preparation of tests from the test runner itself. (MR: !122) + + -- Chris Lamb <lamby@debian.org> Thu, 10 Jan 2019 21:16:24 +0000 + +lintian (2.5.120) unstable; urgency=medium + + * Summary of tag changes: + + Removed: + - versioned-dependency-satisfied-by-perl + + * checks/binaries.pm: + + [CL] Guile object files do not objdump/strip correctly so exclude + them from a number of tests. (Closes: #918444) + * checks/fields.{desc,pm}: + + [CL] Drop versioned-dependency-satisfied-by-perl; Perl now provides + its dual-lived module packages with versions. (Closes: #917967) + * checks/{menus,patch-systems}.desc: + + [CL] Clarify that spelling-* tags also correct various grammatical + errors too. + * checks/rules.desc: + + [AB] override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS: Replace + misleading "profile" with "option" in long description. See #889746 + and https://lists.debian.org/debian-devel/2019/01/msg00047.html + * checks/systemd.pm: + + [CL] Apply a patch from Robin Jarry to handle service + templates for missing init scripts. (MR: !115) + * checks/testsuite.pm: + + [CL] Apply a patch from Ondřej Nový fix false-positives in the + unnecessary-testsuite-autopkgtest-field tag with non-"autopkgtest" + values in the Testsuite control field. (Closes: #918621) + + * data/systemd/init-whitelist: + + [CL] Add "brightness" to the list of initscripts that do not need a + corresponding service file. (Closes: #918459) + + * debian/control: + + [AB] Build-conflict with libperl-critic-pulp-perl (except with + nocheck build profile) as it adds additional perlcritic rules which + cause several checks under t/scripts/01-critic/ to fail. + + * lib/Lintian/Util.pm: + + [CL] Add optional support for stripping comments at EOL in + read_dpkg_control via DCTRL_COMMENTS_AT_EOL. (Closes: #917964) + + -- Chris Lamb <lamby@debian.org> Mon, 07 Jan 2019 22:19:07 +0000 + +lintian (2.5.119) unstable; urgency=medium + + * checks/changelog-file.pm: + + [CL] Avoid false-positives in changelog-file-missing-explicit-entry + when uploading updates to updates such as "1.2-3+nmu2" or + "1.2-3deb8u2". + * checks/cruft.pm: + + [BR] Following #916095, tag "invariant sections" modified by upstream + versions as non official. + * checks/debhelper.desc: + + [CL] Include the debhelper-compat method of setting the compatibility + level in a number of tag descriptions. Thanks to Jeremy Bicha for + the idea. (Closes: #917345) + * checks/python.desc: + + [CL] Update the dependency-on-python-version-marked-for-end-of-life + tag's description to mention that a commented override would be + useful in order to document that the package will not ported to + Python 3.x. Thanks to Scott Kitterman. (Closes: #917264) + * checks/shared-libs.desc: + + [CL] Clarify that "Build-Depends-Package" lines should start in + column 1 of the file and not be indented to align with the symbols + themselves. + * checks/upstream-signing-key.pm: + + [CL] Apply a patch from Felix Lechner to provide writable temporary + home directory for GPG. (Closes: #913930) + + * data/debhelper/compat-level: + + [CL] Bump the recommended and experimental debhelper compat levels to + 12 and 13 respectfully. (Closes: #917344) + * data/files/js-libraries: + + [BR] Detect the html5shiv library. This library is the de facto way + to enable the use of HTML5 "sectioning" elements in legacy Internet + Explorer. + + [BR] Detect the mocha testing framework and recommend libjs-mocha. + + [BR] Detect the "chai" testing framework, recommending libjs-chai. + * data/files/privacy-breaker-websites: + + [BR] Suggest using libjs-html5shiv over linking to an external + version. + + [BR] Detect the libjs-chai package. + + [BR] Detect the libjs-expect.js package. + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * debian/control: + + [CL] Move to debhelper compatibility level 12. + + * t/tests/*: + + [CL] Apply a patch eries from Felix Lechner to ensure the tests pass + under groff 1.22.4-1. (Closes: #917752, #917844) + + [CL] Apply a patch series from Felix Lechner to update the Debhelper + compatibility level in tests. The value is now read from + Lintian::Data and no longer hardcoded. (MR: !111) + * t/tests/debhelper-compat-experimental/tags: + + [CL] Apply a patch from Felix Lechner to remove a tag that is no + longer emitted. (MR: !112) + + -- Chris Lamb <lamby@debian.org> Tue, 01 Jan 2019 14:55:01 +0000 + +lintian (2.5.118) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - changelog-file-missing-explicit-entry + - debian-tests-control-and-control-autodep8 + - debian-tests-control-autodep8-is-obsolete + + * checks/*.desc: + + [CL] Consistently use a single space after a full-stop/period. + * checks/changelog-file.{desc,pm}: + + [CL] Check that 1.2-3~debXuY stanzas follow a 1.2-3 one. Thanks to + Andreas Beckmann for the suggestion. (Closes: #916877) + * checks/cruft.pm: + + [CL] Allow some alternatives in the "invariant sections" regular + expressions as some upstream's have modified the official wording. + Thanks to Dmitry Bogatov for the patch. (Closes: #916095) + * checks/files.pm: + + [CL] The package-contains-documentation-outside-usr-share-doc tag + should accept files under "/usr/share/help"; these are being + installed by a number of GNOME packages. Thanks to Jeremy Bicha for + the report. (Closes: #916497) + + [CL] Avoid a number of false-positives in documentation files when + processing the uses-dpkg-database-directly tag as these are + invariably legitimate. + + [CL] Prevent package-contains-no-arch-dependent-files false-positives + regarding files under /usr/lib/<gnu-triplet>. Thanks to Andreas + Beckmann. (Closes: #916901, #917028) + * checks/systemd.pm: + + [CL] Don't emit systemd-service-file-missing-hardening-features for + WantedBy=sleep.target "services" such as autosuspend. + * checks/testsuite.{desc,pm}: + + [CL] Apply a patch series from Paul Gevers to warn about obsolete + debian/tests/control.autodep8 files. (MR: !95) + * checks/version-substvars.pm: + + [CL] Apply a patch from Matt Kraai (via MR !101) to make the + version-substvar-for-external-package tag require versioned provides. + (Closes: #833608) + + * CONTRIBUTING.md: + + [CL] Update a number of references to Salsa, recommending merge + requests, etc. + + * data/output/manual-references: + + [CL] Refresh. + * data/spelling/corrections: + + [PW] Add a number of corrections. + * data/standards-version/release-dates: + + [CL] Add 4.3.0 as a known Standards-Version. + * data/systemd/wantedby-whitelist: + + [CL] Add default, network-online and sleep' to the list of valid + WantedBy systemd targets. + + [PW] Add a number of corrections. + + * debian/{docs,lintian.install}: + + [CL] Order lines. + to Salvo Tomaselli for the report. (Closes: #917120) + + * doc/lintianrc.example: + + [CL] Clarify that spaces are valid in variable assignments. Thanks + + * private/refresh-manual-refs: + + [CL] Update location of the Python policy; it is now shipped in the + "python3" binary package. + + * t/*: + + [CL] Apply a patch series from Felix Lechner to capture log output in + tests using Capture::Tiny as it works better in a multi-threaded + environment. (MR: !102) + + [CL] Apply a patch from Felix Lechner to remove the "diff" directory + and contents for two tests. (MR: !103) + + -- Chris Lamb <lamby@debian.org> Sun, 23 Dec 2018 16:42:08 +0000 + +lintian (2.5.117) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - file-references-package-build-path + + * checks/files.pm: + + [CL] Don't emit uses-dpkg-database-directly for d-i components; they + likely know what they are doing with no alternatives. + + [CL] Use the output from file(1) when determining whether to emit + the package-contains-no-arch-dependent-files tag to catch packages + that ship (for example) just a Python script under /usr/bin in an + architecture-dependent package. This reverts 6f4bd2fee2 in order to + distinguish between "data" and such scripts. Thanks to Dmitry + Bogatov for investigating. (Closes: #916023) + + [CL] Refactor, tidy and optimise various checks for the contents of + files. + + [CL] Check files for references to the build path if specified in a + .buildinfo. (Closes: #916021) + * checks/shared-libs.desc: + + [CL] Clarify that symbols-file-missing-build-depends-package-field is + emitted per-package in its long description, not based on a file. + * checks/systemd.pm: + + [CL] Don't emit systemd-service-file-missing-hardening-features for + Type=oneshot "services" such as mdadm(8). + * checks/watch-file.desc: + + [CL] Correct grammar of the debian-watch-does-not-check-gpg-signature + tag description. + + [CL] Mark debian-watch-does-not-check-gpg-signature as "experimental" + as it is not actionable in the vast majority of cases and is in + danger of diluting the output of Lintian. (Closes: #916207) + + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * t/*: + + [CL] Apply a patch series from Felix Lechner to use "skeletons" as + test templates, fixing a "exec failed: Text file busy" regression + when running tests by tag name. (Closes: #916087) + + [CL] Apply a patch series from Felix Lechner to improve the + "onlyrun=" test selection feature. One can now select all tests + connected to particular Lintian check with "check:foo". (MR: !90) + + [CL] Apply a patch set from Felix Lechner to sign test packages. + when a upstream/private-key.asc is present. (MR: !93) + + -- Chris Lamb <lamby@debian.org> Fri, 14 Dec 2018 17:56:27 +0000 + +lintian (2.5.116) unstable; urgency=medium + + * checks/fields.pm: + + [CL] Apply a patch from Felix Lechner to remove the incorrect line in + the fields-bugs-field-does-not-refer-to-debian-infrastructure tag's + output. (MR: !83) + + * data/fields/perl-provides: + + [CL] Update for Perl 5.028001. + * data/java/constants: + + [CL] Apply a patch from Felix Lechner to fix the "maximum existing + + * debian/rules: + + [CL] Apply a patch from Felix Lechner to remove the "runtests" build + stamp mechanism as it blocks runs that should be allowed such as + when only the test runner itself has changed. (MR: !80) + + * t/*: + + [CL] Apply a patch series from Felix Lechner to make "pedantic" + templates the default for all tests. (MR: !87) + + [CL] Apply a patch from Felix Lechner to allow debian/rules to be + generated from templates in tests. (MR: !81) + + [CL] Apply a patch from Felix Lechner to remove pre-existing metadata + in the upstream-metadata-is-not-a-file test. (MR: !84) + + [CL] Apply a patch series from Felix Lechner to provide a generalised + facility to make any test template set independent of the package + format. (MR: !82) + + [CL] Apply a patch series from Felix Lechner to support + suite-independent test templates. (MR: !88) + + -- Chris Lamb <lamby@debian.org> Fri, 07 Dec 2018 08:59:39 +0000 + +lintian (2.5.115) unstable; urgency=medium + + * Summary of tag changes: + + Removed: + - debian-rules-makemaker-prefix-is-deprecated + + * checks/binaries.pm: + + [CL] Allow packages to define an RPATH under /usr/lib/ghc/ as the + Haskell team have their own scheme for this. (Closes: #914873) + * checks/rules.{desc,pm}: + + [CL] Drop the debian-rules-makemaker-prefix-is-deprecated tag as the + transition was completed in 2015. Thanks to Niko Tyni for the + update. (Closes: #914885) + * checks/patch-systems.desc: + + [CL] Downgrade package-uses-vendor-specific-patch-series from "E:" to + "W:" as they are not RC bugs until the release of buster. + + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * t/*: + + [CL] Apply a patch series from Felix Lechner to implement a universal + test runner with file-based default values. (MR: !76) + * t/runtests: + + [CL] Apply a patch from Felix Lechner to fail tests with outdated + specifications (ie. ./debian/debian exists). (MR: !77) + * t/tests/{binaries-missing-lfs,deb-format-udeb-compression}: + + [CL] Apply a patch from Adam Conrad to fix two typos introduced + when parameterising test architectures. (Closes: #914952) + * t/tests/files-multiarch-foreign-files: + + [CL] Apply a patch from James Clarke to fix this test on non-amd64 + architectures. (MR: !78) + + -- Chris Lamb <lamby@debian.org> Mon, 03 Dec 2018 13:33:49 +0000 + +lintian (2.5.114) unstable; urgency=medium + + * checks/debhelper.pm: + + [CL] Apply a patch from Stephen Kitt to avoid false-positives for the + package-does-not-use-debhelper-or-cdbs tag if the call to dh(1) is + prefixed with "@", "+" or "-". (Closes: #914538) + * checks/*, t/*: + + [CL] Consistently use (eg.) "DEP 5" over "DEP-5" to match the style + used on dep.debian.net. (Closes: #914562) + + * data/files/documentation-file-regex: + + [CL] Prevent false-positives for files called (eg.) readMesh_off.m + for the package-contains-documentation-outside-usr-share-doc tag + which was matching an overly-permissive regex. Thanks to Rafael + Laboissière (rafael) for the report. (Closes: #914500) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * t/*: + + [CL] Apply a patch series from Felix Lechner to make the templating + more flexible in tests, re-using the Skeleton: statements in "desc" + files for more complex templating logic. (MR: !75) + + -- Chris Lamb <lamby@debian.org> Mon, 26 Nov 2018 08:21:31 +0000 + +lintian (2.5.113) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - package-contains-file-in-usr-share-hal + - package-uses-vendor-specific-patch-series + - systemd-service-file-missing-hardening-features + + Merged: + - maintainer-script-should-not-use-dpkg-{database,status}-directly -> + uses-dpkg-database-directly + + Renamed: + - init.d-script-does-not-implement-optional-option -> + init.d-script-does-not-implement-status-option + + * checks/control-file.{desc.pm}: + + [CL] Ensure the "Architecture" field in a changes files contains only + the string "source" rather than checking whether it is defined or + not. This fixes source-only-upload-to-non-free-without-autobuild + false positives. Thanks to Chuan-kai Lin. (Closes: #914163) + * checks/files.{desc,pm}: + + [CL] Unify all dpkg internal database checks into a single new + uses-dpkg-database-directly check, extending it to check all + files shipped in package, not just the maintainer scripts. Thanks to + Guillem Jover for the suggestion. (Closes: #913974) + * checks/files.desc, checks/java.desc: + + [CL] Clarify distinction between the package-installs-java-bytecode + and source-contains-prebuilt-java-object tags. Thanks to Markus + Koschany for the suggestion. (Closes: #879851) + * checks/init.d.{pm,desc}: + + [CL] Rework the init.d-script-does-not-implement-optional-option tag + by renaming it to init.d-script-does-not-implement-status-option + and update the description to make the distinction between the LSB + (where it is required) and Debian Policy (where currently it is not). + Thanks to Andreas Henriksson for the suggestion. (Closes: #913466) + * checks/patch-systems.{desc,pm}: + + [CL] Warn about packages that use vendor-specific patch series files + since the CTTE decision in #904302. + * checks/shared-libs.pm: + + [CL] Apply a patch from James McCoy to fix a regression that was + causing Lintian to incorrectly report the + invalid-template-id-in-symbols-file and syntax-error-in-symbols-file + tags. Thanks! (Closes: #913290) + * checks/systemd.{desc,pm}: + + [CL] Emit an experimental-level warning for .service files that do + not appear to use any security/hardening features. (Closes: #913605) + * checks/watch-file.pm: + + [CL] Avoid debian-watch-file-should-mangle-version false-positives + when the file uses the @DEB_EXT@ or auto dversionmangle features. + Thanks to Sebastian Ramacher and Mattia Rizzolo. (Closes: #913761) + + * collection/java-info: + + [CL] Prevent an "uninitialized value" warning when processing + empty or otherwise truncated .class files. Thanks to Branden + Robinson for the report. (Closes: #913398) + + * data/description/planned-features: + + [AB] Add "is planned" and "is also planned". + * data/fields/name_section_mappings: + + [CL] Tidy file. + * data/files/fnames: + + [CL] Check for packages that install files to /usr/share/hal as the + hal package was removed from Debian in 2014. Thanks to Paul Wise for + the idea. (Closes: #913280) + * data/spelling/corrections: + + [AB] Add "redundant" and a bunch of variants around "conditional". + + [PW] Add a number of corrections. + + * t/*: + + [CL] Apply a patch series from Felix Lechner to parameterise + the debhelper compatibility level in tests. (MR: !73) + + [CL] Apply a patch from Felix Lechner to implement a new file + hierarchy for test specifications. (MR: !74) + * t/scripts/spellintian.t: + + [CL] Make the "No no-op correction present..." test failure messages + include the offending correction to make it easier to correct. + + -- Chris Lamb <lamby@debian.org> Fri, 23 Nov 2018 22:13:47 +0000 + +lintian (2.5.112) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - public-upstream-key-in-native-package + - public-upstream-key-not-minimal + - public-upstream-key-unusable + - public-upstream-keys-in-multiple-locations + - systemd-service-file-pidfile-refers-to-var-run + + * checks/cruft.desc: + + [CL] Bump the severity of the source-contains-prebuilt-windows-binary + tag from "P:" to "W:" and update the description to mention that this + could potentially be a DFSG violation. + * checks/systemd.{desc,pm}: + + [CL] Warn if a PIDFile entry in a .service unit references /var/run. + (Closes: #913078) + * checks/upstream-signing-key.{desc,pm}: + + [CL] Apply a patch series from Felix Lechner to add multiple tests + for upstream GPG keys. Thanks! (MR: !62) + + * data/java/constants: + + [CL] Apply patches from Bas Couwenberg to update the bytecode checks + for OpenJDK 11. (Closes: #912292) + * data/rules/rules-should-not-use: + + [CL] Ensure --dbgsym-migration='quoted with spaces' is correctly + displayed when emitting debug-symbol-migration-possibly-complete. + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * debian/control: + + [CL] Apply a patch from Mathieu Parent to add a dependency on + dpkg-dev to ensure dpkg-architecture is available. Thanks! + (Closes: #912330) + + * t/*: + + [CL] Apply a patch from Adam Conrad to fix two tests on non-amd64 + architectures in Ubuntu. Thanks! (Closes: #913099) + + [CL] Apply a patch series Felix Lechner to parameterise the source + format in all applicable tests. (MR: !64) + + [CL] Apply a patch series from Felix Lechner to parameterise the + package architecture for all tests that build only single binary + package. (MR: !68) + * t/tests/basic-non-native-with-epoch/desc: + + [CL] Apply a patch from Felix Lechner to correct a test "Type" field. + (MR: !63) + * t/tests/watch-file-pgpmode-next/*: + + [CL] Apply a patch series from Felix Lechner to add missing "-I -E" + options to the existing "--pedantic" one. (MR: !67) + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [CL] Add "disco" as a known Ubuntu distribution. + + -- Chris Lamb <lamby@debian.org> Thu, 08 Nov 2018 22:29:31 +0000 + +lintian (2.5.111) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - maintainer-script-should-not-use-piuparts-variable + - source-package-encodes-python-version + + * checks/binaries.pm: + + [CL] Prevent a false-positive when checking statically-linked-binary + when we do not have access to the source package to check for a + Golang build-dependency by falling-back to checking the package name. + Thanks to Jeffrey Cliff for the report. (Closes: #911864) + * checks/changelog-file.desc: + + [CL] Clarify the grammatical logic in the long description of the + epoch-change-without-comment tag. + * checks/cruft.pm: + + [CL] Look for debian/missing-sources/foo for a missing "foo" to + prevent source-is-missing false-positives. Thanks to Daniel Kahn + Gillmor for the report. (Closes: #890468) + * checks/menu-format.desc: + + [CL] Apply a patch from Salvatore Bonaccorso to fix a typo in the + description for the desktop-entry-lacks-icon-entry tag. (MR: !59) + * checks/python.{desc,pm}: + + [CL] Check for packages that encode a version number in their + source package name. + * checks/scripts.desc: + + [CL] Warn about packages that use PIUPARTS_TEST (etc.) in their + maintainer scripts. Thanks to Holger Levsen. (Closes: #912040) + + [CL] Add a note that packages might have added the required + dependency for missing-versioned-depends-on-init-system-helpers to + Build-Depends instead of the binary package (eg. in src:lbcd). + + * data/spelling/corrections: + + [PW] Add a number of corrections. + + [CL] Add a "recognise" connection. (re. MR: !59). + + * data/testsuite/known-restrictions: + + [CL] Apply a patch from intrigeri to add "superficial" to the list + of known restrictions in testsuite definitions. This was added to + autopkgtest in #904979. (MR: !60) + + * reporting/templates/tag.tmpl: + + [CL] Also show the maintainer name on the tag-specific pages such as + <https://lintian.debian.org/tags/ancient-libtool.html>. + + -- Chris Lamb <lamby@debian.org> Mon, 29 Oct 2018 13:51:26 +0000 + +lintian (2.5.110) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - symbols-file-missing-build-depends-package-field + + * checks/debhelper.desc: + + [CL] Tidy a number of references regarding the debhelper-compat + virtual package, in particular clarifying that this does not work for + experimental/beta levels. + + [CL] Update example experimental combination of using compatibility + level 9 with debhelper >= 8.1.3 with using level 12 with + debhelper >= 11.4~. + * checks/fields.pm: + + [CL] Apply a patch series from Felix Lechner to fix a false-negative + in the multi-arch-same-package-has-arch-specific-overrides tag. + (Closes: #911355) + * checks/shared-libs.{desc,pm}: + + [CL] Emit a "I:" warning for packages that do not specify a + Build-Depends-Package field in their symbol files. (Closes: #911451) + + * data/files/js-libraries: + + [CL] Prevent a false-positive in embedded-javascript-library as + jquery-ui.structure.css is not shipped by libjs-jquery-ui. + (Closes: #911311) + * data/scripts/interpreters: + + [CL] Apply a patch from Luca Boccassi to add /lib/init/init-d-script + to the list of known interpreters. (MR: !56) + * data/spelling/*: + + [CL] Move the "needs" entry to the corrections-case file, preventing + false positives in the spelling-error-in-{binary,changelog} tags + that reference Georg Nees, an early pioneer of computer art. + + [PW] Add a number of corrections. + + * t/*: + + [CL] Apply a patch series from Felix Lechner to adjust some + build-dependencies that were discovered when backporting to stretch. + (MR: !51) + + [CL] Apply a patch series from Felix Lechner to move data for + upstream tarballs to "orig" to facilitate the addition of tests + related to upstream signatures. (MR: !52) + + [CL] Apply a patch series from Felix Lechner to use relative paths in + Lintian options; a tight integration between the test runner and + harness is generally undesirable. (MR: !54) + + [CL] Apply a patch series from Felix Lechner to move the templated + changelogs away from template directory. (MR: !57) + + [CL] Apply a patch series from Felix Lechner to remove the + default.upstream placeholder in empty template directories. + (MR: !58) + + -- Chris Lamb <lamby@debian.org> Mon, 22 Oct 2018 01:06:54 +0000 + +lintian (2.5.109) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - maintainer-script-should-not-parse-etc-passwd-or-group + - missing-versioned-depends-on-init-system-helpers + - unknown-file-in-python-module-directory + + * checks/debhelper.pm: + + [CL] Avoid false-positives when using the blends-dev package for the + package-does-not-use-debhelper-or-cdbs tag. (Closes: #910453) + * checks/files.{pm,desc}: + + [CL] Check for packages that ship non-Python files in top-level + Python module directories such as /usr/lib/python3/dist-packages. + * checks/scripts.{desc,pm}: + + [CL] Check for packages missing versioned dependencies on + init-system-helpers. (Closes: #910594) + + [CL] Check for packages that manually parse /etc/passwd or /etc/group + using grep/egrep etc. in their maintainer scripts. Thanks to Rhonda + D'Vine for the bug report. (Closes: #911157) + + * t/tests/*: + + [CL] Apply a patch from Felix Lechner to fix some test descriptions + not parsed correctly due to continuation lines. + + [CL] Apply a set of patches from Felix Lechner to make various tests + architecture independent. + + [CL] Apply a patch from Felix Lechner to require build dependencies + as prerequisites for tests. + + [CL] Apply a patch from Felix Lechner to clarify the substitution + variable name for the test package's Architecture field. + * t/tests/debhelper-dh-nativejava: + + [CL] Apply a patch from Felix Lechner to remove this now-obsolete + test given that -gcj packages are no-longer built. + + -- Chris Lamb <lamby@debian.org> Wed, 17 Oct 2018 02:38:36 +0000 + +lintian (2.5.108) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - maintainer-script-has-invalid-update-inetd-options + + * checks/scripts.{desc,pm}: + + [CL] Check for calls to update-inetd(1) that use "--group" without + "--add" and "--pattern" with "--add". (Closes: #909511) + * checks/testsuite.pm: + + [CL] Avoid testsuite-dependency-has-unparsable-elements false + positives when the "Depends" field starts with a newline. Thanks to + Mattia Rizzolo for the report. (Closes: #910210) + + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * debian/control: + + [NT] Remove myself from the Uploaders field. + + * t/source/*: + + [CL] Apply two patch series from Felix Lechner to rename a test + target to match its name and also to adjust version numbers to match + test targets produced. + + -- Chris Lamb <lamby@debian.org> Fri, 05 Oct 2018 11:07:25 +0000 + +lintian (2.5.107) unstable; urgency=medium + + * checks/changes-file.{desc,pm}: + + [CL] Don't emit changelog-empty-entry if distribution is UNRELEASED. + (Closes: #909674) + * checks/debhelper.desc: + + [CL] Apply patch from Josh Triplett to improve the long description + of excessive-debhelper-overrides. + * checks/scripts.{desc,pm}: + + [CL] Don't emit udevadm-called-without-guard if the package has a + dependency on udev itself. (Closes: #909801) + + * data/rules/rules-should-not-use: + + [CL] Ensure --dbgsym-migration='quoted' is correctly displayed when + emitting the debug-symbol-migration-possibly-complete tag. + * data/spelling/corrections: + + [CL] Add a suggestion from Sven Joachim to add "practical" and + "practically" as spelling corrections for "pratical" and + "pratically". (Closes: #909772) + + [CL] Add "practically" as a correction for "practicaly". + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 01 Oct 2018 13:46:42 +0000 + +lintian (2.5.106) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - excessive-debhelper-overrides + - package-installs-apt-keyring + + * checks/debhelper.{desc,pm}: + + [CL] Warn about packages that use an excessive (currently >= 20) + number of debhelper overrides. + * checks/files.{desc,pm}: + + [CL] Apply a patch from Josh Triplett to check for packages that + install APT keyrings without being called "foo-archive-keyring" or + "foo-apt-source". + + [CL] Apply a patch from Josh Triplett to allow packages such as + "foo-apt-source" to install APT sources. + + * data/binaries/spelling-exceptions: + + [CL] Also add "wiH" (alongside "wIH") to the list of + "spelling-error-in-binary" exceptions. + + * t/*: + + [CL] Apply a patch series from Felix Lechner to support wildcards in + test architecture fields. Thanks! + + [CL] Apply a patch series from Felix Lechner to disable architecture + overrides in the testsuite; see + <https://salsa.debian.org/lintian/lintian/merge_requests/38> for more + information. + + [CL] Apply a patch series from Josh Triplett to add "Test-Depends" to + a few tests. (Closes: #908915) + + -- Chris Lamb <lamby@debian.org> Wed, 26 Sep 2018 15:04:01 +0000 + +lintian (2.5.105) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-should-not-use-custom-compression-settings + - debian-source-options-has-custom-compression-settings + + Removed: + - xz-compression-level-too-high + + * checks/cruft.pm: + + [CL] Do not emit package-does-not-install-examples for example + directories under "vendor" or "third_party". + * checks/debian-source-dir.{desc,pm}: + + [CL] Warn about debian/source/options specifying custom compression + settings. (Closes: #906614) + * checks/rules.{desc,pm}: + + [CL] Expand and rename xz-compression-level-too-high to warn about + all manual adjustments to such settings. (Closes: #906611) + + * commands/lintian.pm: + + [CL] Show the number of unused overrides in the "N: 1 tag overridden + ..." summary line. (Closes: #909319) + + * t/*: + + [CL] Apply a patch series from Felix Lechner to support dynamic test + rebuilding. + + -- Chris Lamb <lamby@debian.org> Mon, 24 Sep 2018 10:04:39 +0000 + +lintian (2.5.104) unstable; urgency=medium + + * checks/description.pm: + + [CL] Check for overly-indented paragraph separators in package long + descriptions. (Closes: #909272) + * checks/fields.pm: + + [CL] Apply patches from Josh Triplett to re-use the metapackage + detection logic from Lintian::Collect::Binary and to allow + metapackages to depend on toolchain packages. + * checks/source-copyright.pm: + + [CL] Fix a number of false-positives when checking for incomplete + Creative Commons licenses. Thanks to Jonathan Dowland (jmtd) for + collecting a corpus of test data. (Closes: #906284) + + [CL] Also check the "Source" field when looking for repack + explanations as per section 6.4 of the machine-readable + debian/copyright file specification. (Closes: #909270) + + [CL] Include the line number in the output of the + incomplete-creative-commons-license tag. + + * private/refresh-ftp-master-tags: + + [CL] Remove any duplicates from FTPmaster's list of supplied tags + when automatically generating the ftp-master-{fatal,nonfatal} data + files. This should be fixed upstream via + <https://salsa.debian.org/ftp-team/dak/merge_requests/101>. + + * profiles/debian/ftp-master-auto-reject.profile: + + [CL] Refresh tags via private/refresh-ftp-master-tags, specifically + allowing dir-or-file-in-etc-opt to be overridable. (Closes: #908911) + + -- Chris Lamb <lamby@debian.org> Fri, 21 Sep 2018 08:13:34 +0000 + +lintian (2.5.103) unstable; urgency=medium + + * private/refresh-manual-refs: + + [CL] Apply a patch series from Joseph Herlant to update some + locations of manual references. + + * t/helpers/bin/create-deb: + + [CL] Apply a patch from Felix Lechner to removed a likely-accidental + slash in a find(1) call. + + -- Chris Lamb <lamby@debian.org> Fri, 14 Sep 2018 17:33:43 +0000 + +lintian (2.5.102) unstable; urgency=medium + + * checks/files.pm: + + [CL] Ensure package-contains-documentation-outside-usr-share-doc also + excludes files in directories called (eg.) "autotools_templates" or + "my-templates.d". (Closes: #907734) + + * data/fields/name_section_mappings: + + [CL] Reclassify xfonts-foo packages as part of the "fonts" section as + nobody was doing this in practice. This reverts the change requested + in #878609 which was released inLintian 2.5.72. Thanks to Russ + Allbery. (Closes: #907725) + + -- Chris Lamb <lamby@debian.org> Tue, 11 Sep 2018 19:33:54 +0000 + +lintian (2.5.101) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - changelog-distribution-does-not-match-changes-file + - package-builds-dbg-and-dbgsym-variants + + * checks/changes-file.{desc,pm}: + + [CL] Check for packages that build both foo-dbg and foo-dbgsym debug + symbol variants. (Closes: #907423) + * checks/changelog-file.{desc,pm}: + + [CL] Check that .changes and debian/changelog distribution are + identical. (Closes: #906610) + * checks/control-files.desc: + + [CL] Clarify that checks/control-files.* relates to the "control" + tarball, not debian/control in the source tarball. + * checks/fields.desc: + + [CL] Clarify that the target of the dbg-package-missing-depends check + cannot be "Architecture: all". + * checks/files.pm: + + [CL] Don't emit package-contains-documentation-outside-usr-share-doc + for files in "templates" directories. (Closes: #907734) + + [CL] Apply a patch from Josh Triplett and Ximin Luo to ignore + false-positive "ancient" files generated by Rust. + * checks/init.d.pm: + + [CL] Avoid false positives in init.d-script-possible-missing-stop + when checking initscripts in "early boot" packages such as udev, etc. + (Closes: #908185) + * checks/scripts.desc: + + [CL] Apply a patch from Adrian Bunk to improve the long description + of the multi-arch-same-package-calls-pycompile tag. + + [CL] Update the long description of wrong-path-for-interpreter to + reflect the weakening of the /usr/bin/perl "should" requirement + and to use "particular" over "special exception". Thanks to David + Bremner. (Closes: #908350) + + * data/changelog-file/invalid-dates: + + [CL] Merge patch from Josh Triplett to display the correct "short" + three-letter dates for June and July. + + * lib/Lintian/Data.pm: + + [CL] Apply a patch series from Josh Triplett to add a "matches_any" + utility function to Lintian::Data instances and ports a number of + applicable instances to use it. Thanks! + + -- Chris Lamb <lamby@debian.org> Sun, 09 Sep 2018 09:34:50 +0000 + +lintian (2.5.100) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - obsolete-runtime-tests-restriction + - package-contains-python-dot-directory + - skip-systemd-native-flag-missing-pre-depends + + Renamed: + - vcs-obsolete-in-debian-infrastructure -> + vcs-deprecated-in-debian-infrastructure + + * checks/control-file.{desc.pm}: + + [CL] Don't check the .dsc for "XS-Autobuild"; check the control file + itself. This fixes source-only-upload-to-non-free-without-autobuild. + (Closes: #907681) + * checks/debhelper.pm: + + [CL] Also check override_dh_systemd_<action>-arch and -indep for + debian-rules-uses-deprecated-systemd-override. (Closes: #907845) + * checks/fields.{desc.pm}: + + [CL] Rename vcs-deprecated-in-debian-infrastructure and update the + documentation to match. (Closes: #907578) + * checks/scripts.{desc.pm}: + + [CL] Check for "invoke-rc.d --skip-systemd-native" without a suitable + Pre-Depends. (Closes: #907836) + * checks/testsuite.{desc,pm}: + + [CL] Don't emit unknown-runtime-tests-feature for autopkgtest + "Features:" entries that use the "test-name=foo" nomenclature. + (Closes: #907620) + + [CL] Apply patch from Paul Gevers to emit warnings for deprecated + test features. + + * data/files/fnames: + + [CL] Check for "dot" directories in Python packaging such as + ".cache", etc; they are usually an error. (Closes: #907870) + * data/spelling/corrections: + + [PW] Add a number of corrections. + * data/testsuite/known-restrictions: + + [CL] Apply patch from Paul Gevers to add hint-testsuite-triggers and + skip-not-installable to the list of known autopkgtest restrictions. + + * lib/Lintian/Output.pm: + + [CL] Escape output if --color=html is used. This prevents browsers + loading images/stylesheets from foreign websites that are part of + warning messages. (Closes: #907667) + + * Miscellaneous: + + [CL] Apply patch Daniele Forsi fixing a large number of typos in the + codebase, documentation, etc. + + [CL] Update tests to support dash 0.5.10.2. + + -- Chris Lamb <lamby@debian.org> Thu, 06 Sep 2018 12:09:56 +0000 + +lintian (2.5.99) unstable; urgency=medium + + * checks/crufts.desc: + + [FL] Improve tag description for 'package-does-not-install-examples'. + * checks/source-copyright.desc: + + [CL] Correct "may be" typo in the long description for the + 'incomplete-creative-commons-license' tag. + + * data/cruft/warn-file-type: + + [CL] Match (for example) foo_o.golden with foo.cc to avoid + source-is-missing false-positives. (Closes: #907475) + + * t/tests/changes: + + [FL] Place all tests for the 'changes' suite into their own + directories. + + -- Chris Lamb <lamby@debian.org> Wed, 29 Aug 2018 14:18:31 +0000 + +lintian (2.5.98) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-passes-version-info-to-dh_shlibdeps + - multi-arch-same-package-calls-pycompile + + * checks/rules.pm: + + [CL] Apply patch from Peter Pentchev to fix false-positives for + missing Build-Depends on debhelper when using debhelper-compat + commands. (Closes: #907261) + * checks/scripts.{desc,pm}: + + [CL] Warn about Multi-Arch: same packages that use pycompile or + py3compile in their maintainer scripts. (Closes: #907276) + + [CL] Expand the description to explain why we emit + wrong-path-for-interpreter for #!/usr/bin/env perl. + * checks/source-changelog.pm: + + [FL] Fix false positives in version parsing, especially + when some components are "0". (Closes: #906957) + + * data/rules/rules-should-not-use: + + [CL] Check for packages that pass -V to dh_shlibdeps instead of + dh_makeshlibs. (Closes: #906722) + * data/standards-version/release-dates: + + [CL] Add 4.2.1 as a known Standards-Version. + + -- Chris Lamb <lamby@debian.org> Sun, 26 Aug 2018 09:00:19 +0000 + +lintian (2.5.97) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-changelog-version-requires-debian-revision + - maintainer-script-needs-depends-on-xfonts-utils + - malformed-debian-changelog-version + - missing-call-to-update-fonts + - upload-has-backports-version-number + + Renamed: + - native-package-with-dash-version -> + hyphen-in-native-debian-changelog-version + - non-native-package-with-native-version -> + hyphen-in-upstream-part-of-debian-changelog-version + + * checks/changes-file.{desc,pm}: + + [CL] Apply patch from Julien Cristau (with test) to warn about + uploads that have a version containing "~bpo" but their target + distribution is not *-backports. (Closes: #906155) + * checks/scripts.{desc,pm}: + + [CL] Check for packages that contain X11 fonts but do not run + update-fonts-* in their postinst or depend on xfonts-utils. + (Closes: #905881) + * checks/source-changelog.{desc.pm}: + + [FL] Rework, centralise and improve version parsing. + (Closes: #886036) + + * data/common/dh_addons: + + [NT] Refresh data. + * data/debhelper/dh_{commands,packages}: + + [NT] Refresh data. + * data/spelling/corrections: + + [PW] Add a number of corrections. + * data/testsuite/known-restrictions: + + [CL] Re-add "allow-stderr" accidentally dropped in 0cb688fb. + (Closes: #905843) + + * private/refresh-debhelper-data: + + [NT] Add debhelper-compat an alternative to debhelper in + the data files. + + * t/scripts/01-critic/runner.pl: + + [CL] Bump perltidy test dependencies to prevent a failing build in + backports, etc. + + -- Chris Lamb <lamby@debian.org> Sat, 18 Aug 2018 08:47:03 +0000 + +lintian (2.5.96) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - incomplete-creative-commons-license + - maintainer-script-should-not-use-dpkg-database-directly + + Removed: + - no-upstream-changelog + + Renamed: + - package-contains-upstream-install-documentation -> + package-contains-upstream-installation-documentation + + * checks/changelog-file.{desc,pm}: + + [CL] Drop no-upstream-changelog; it is rarely actionable and simply + introduces unnecessary noise and/or requiring an override. It had + additionally been disabled in the Ubuntu profile since 2011. + (Closes: #513544, #646192) + * checks/cruft.desc: + + [CL] Tidy the description of the license-problem-cc-by-nc-sa and + license-problem-non-free-img-lenna tags. + * checks/files.{desc,pm}: + + [BR] Improve package-contains-documentation-outside-usr-share-doc + by checking if README includes 'this directory' (Closes: #904852) + + [CL] Rename package-contains-upstream-install-documentation tag to + package-contains-upstream-installation-documentation. + * checks/source-copyright.{desc,pm}: + + [CL] Check for Creative Commons license texts that use the incomplete + "human-readable" summary. (Closes: #903470) + + * data/scripts/maintainer-script-bad-command: + + [CL] Warn about packages that directly query the dpkg database in + their maintainer scripts. Thanks, Guillem Jover! (Closes: #905469) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Thu, 09 Aug 2018 13:44:29 +0000 + +lintian (2.5.95) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debhelper-compat-virtual-relation + - depends-on-python2-and-python3 + - no-op-testsuite + - r-package-not-arch-all + - source-only-upload-to-non-free-without-autobuild + + * checks/debhelper.{desc,pm}: + + [CL] Support "debhelper-compat (= X)" build-dependency as a + replacement for "debhelper (>= X~)". (Closes: #904886) + * checks/changes-file.{desc,pm}: + + [CL] Detect source-only uploads to non-free uploads that will not be + autobuilt by default. (Closes: #905467) + * checks/control-file.desc: + + [AB] Fix duplicate word "the" in tag description. + * checks/cruft.pm: + + [CL] Don't emit mentions-deprecated-usr-lib-perl5-directory for + debian/*.install files as they are used as source directories. + (Closes: #905635) + * checks/fields.{desc.pm}: + + [CL] Warn about R packages incorrectly set to "Architecture: + any". (Closes: #904985) + * checks/files.{desc,pm}: + + [CL] Whitelist files in /usr/share/doc and /usr/share/locale for the + missing-depends-on-sensible-utils tag and update testsuite to match. + (Closes: #904936) + + [CL] Add Suggests and Pre-Depends as potential relations with the + sensible-utils package. Thanks to Guillem Jover for the idea. + * checks/python.{desc,pm}: + + [CL] Check for Python packages that have a relation on both Python 2 + and Python 3. (Closes: #904817) + * checks/testsuite.{desc,pm}: + + [CL] Warn about packages that have a single, no-op autopkgtest. + (Closes: #905030) + + [CL] Move list of known fields, "Restriction" fields and testsuites + to files under data/testsuite/. + + [CL] Improve the long description of the + testsuite-autopkgtest-missing tag; in particular, reference that + autopkgtest results now influence migration from unstable to testing. + + * data/debhelper/filename-config-files: + + [NT] Add mime and sharedmimeinfo as known debhelper config files. + * data/scripts/interpreters: + + [CL] Prevent ruby-script-but-no-ruby-dep false positives by also + accepting ruby:any as a dependency. Thanks to Marc Dequènes for the + bug report. (Closes: #905258) + * data/spelling/corrections: + + [PW] Add a number of corrections. + * data/standards-version/release-dates: + + [CL] Add 4.2.0 as a known Standards-Version. + * data/testsuite/known-restrictions: + + [CL] Add "flaky" and "skippable" to the list of known Restrictions in + testsuite definitions. Thanks to Rebecca N. Palmer. + (Closes: #904623) + + * lib/Lintian/Collect/Package.pm: + + [CL] Don't assume that "tar -tv" output always includes a time. + (Closes: #905423) + + * debian/rules: + + [CL] Apply a patch from Felix Lechner which fixes a typo which was + preventing the 'runtests' target relying on test descriptions. + + -- Chris Lamb <lamby@debian.org> Tue, 07 Aug 2018 13:02:08 +0000 + +lintian (2.5.94) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - spelling-error-in-rules-requires-root + + Renamed: + - missing-depends-on-sensible-utils => + script-needs-depends-on-sensible-utils + + * checks/control-file.desc: + + [CL] Raise the severity of the debian-control-has-empty-field tag + from "P:" to "I:" and explicitly test the "whitespace" cases. + (Closes: #904420) + + [CL] Warn about mispellings of Rules-Requires-Root. Thanks to Axel + Beckert for the idea. (Closes: #904522) + * checks/cruft.{desc,pm}: + + [CL] Correctly warn about packages using sensible-utils without a + relationship by checking all files instead of just maintainer + scripts. Thanks to Guillem Jover. (Closes: #872611) + * checks/scripts.pm: + + [CL] Policy 10.4 states that Perl scripts must use /usr/bin/perl + directly and not via /usr/bin/env, etc. (Closes: #904414) + + * data/scripts/interpreters: + + [CL] Add the Julia language as a known interpreter via + #!/usr/bin/julia. (Closes: #904140) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Wed, 25 Jul 2018 12:11:14 +0000 + +lintian (2.5.93) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - vcs-field-mismatch + + * checks/cruft.pm: + + [CL] Don't emit r-data-without-readme-source by checking that .rda + (etc.) files aren't actually R data files. (Closes: #903435) + * checks/fields.{desc,pm}: + + [CL] Add support and update tests for the "Vcs-Git: uri [subdir]" + syntax. (Closes: #903103) + + [CL] Check for mismatched Vcs-* fields. (Closes: #903690) + * checks/gir.pm: + + [CL] Apply patch from Simon McVittie to don't warn about wrong + section for "oldlibs". + + * data/python/versions: + + [CL] Don't emit old-python-version-field for X-Python3-Version 3.5 + just yet. (Closes: #903399) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * lib/Lintian/Collect/Package.pm: + + [CL] Support parsing the filename component of tar -tvf output when + delimited by multiple spaces (not just a single one) to prevent + source-contains-empty-directory false positives. (Closes: #903307) + + -- Chris Lamb <lamby@debian.org> Mon, 16 Jul 2018 09:39:46 +0000 + +lintian (2.5.92) unstable; urgency=medium + + The "Policy 4.1.5" release. + + * Summary of tag changes: + + Added: + - font-outside-font-dir + - package-contains-documentation-outside-usr-share-doc + - package-contains-eslint-config-file + - package-contains-npm-ignore-file + + * checks/files.{desc,pm}: + + [BR] Detect ESLint config files installed in the tree. ESLint is + pluggable linting utility for JavaScript. This kind of files belong + to source not to installed package. + + [BR] Detect .woff, .woff2 and .eot files as fonts. + + [BR] Detect installed fonts outside /usr/share/fonts. + + [BR] Detect .npmignore files installed in the tree. These files + help npm the Node.js package manager to keep files + out of npm package. + + [BR] Detect documentation files outside /usr/share/doc. + (Closes: #901274) + + [CL] Apply patches from Jonathan Dowland (jmtd) to ignore + rel="edituri" and rel="copyright" URIs when checking external URIs + embedded in HTML files. (Closes: #902919) + + [CL] Policy 4.1.5 adopts FHS 3.0 so permit files/dirs in + /usr/libexec. (Closes: #834607) + + * data/files/{js-libraries,privacy-breaker-websites}: + + [CL] Replace references to an unknown "libjs-normalize.css" package + with node-normalize.css package. Thanks to Lumin for the report. + (Closes: #902926) + * data/spelling/corrections: + + [CL] Drop non-hyphenated versions of "re-enable" and "re-enabled"; + these are seemingly legitimate. See + <https://github.com/systemd/systemd/pull/9321> for the background and + further discussion. + + [PW] Add a number of corrections. + * data/standards-version/release-dates: + + [CL] Add 4.1.5 as a known Standards-Version. + + * debian/rules: + + [CL] Don't install /usr/share/lintian/data/README; it's not very + useful at runtime and avoids a + package-contains-documentation-outside-usr-share-doc warning. + + * t/scripts/spellintian.t: + + [PW] Differentiate between no-op corrections and case sensitive + corrections. + + [CL] Bump test count. + + -- Chris Lamb <lamby@debian.org> Wed, 04 Jul 2018 15:31:11 +0000 + +lintian (2.5.91) unstable; urgency=medium + + * checks/rules.desc: + + [CL] Replace DH_BUILD_MAINT_OPTIONS with DEB_BUILD_MAINT_OPTIONS + in tag description. Thanks to Drew Parsons for the report. + (Closes: #901581) + * checks/rules.{pm,desc}, data/*: + + [CL] Also permit "python2" and suffixed variants as substitutes for + "python" (etc.) to avoid false-positives in the + missing-dep-for-interpreter, missing-build-dependency-for-dh-addon + and missing-python-build-dependency tags. (Closes: #901075) + + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Sat, 16 Jun 2018 17:59:35 +0000 + +lintian (2.5.90) unstable; urgency=medium + + * checks/binaries.pm: + + [CL] Ignore .debuginfo files under /usr/lib/jvm to prevent false- + positives in shared-lib-without-dependency-information. + (Closes: #900268) + * checks/cruft.pm: + + [BR] Ignore HTML bold tags (eg. <b>) during license checking. + * checks/fields.{desc,pm}: + + [CL] Move invalid-version-number-for-derivative to a "source" type + check so we have access to $info->native to prevent false-positives + when checking derivative versions. + * checks/systemd.pm: + + [CL] Don't use potentially-undefined value in invalid .service files. + * checks/version-substvars.pm: + + [CL] Fix a false-positives in version-substvar-for-external-package + when the "external" package is actually a "Provides" in the current + source package. (Closes: #833608) + + * data/*: + + [CL] Update and expand the documentation of + derivative-{changed-by,versions} to match the implementation. + * data/fields/obsolete-packages: + + [BR] Detect obsolete Adobe Flash packages. + * data/files/js-libraries: + + [BR] Detect libjs-jquery-ui, a set of user interface interactions, + effects, widgets, and themes built on top of the jQuery Javascript + library. + * data/scripts/interpreters: + + [CL] Avoid #!/usr/bin/r false-positives when checking the + missing-dep-for-interpreter tag as r-cran-littler also "Provides" + this package. (Closes: #901228) + * data/spelling/corrections: + + [PW] Add a number of corrections. + * data/spelling/corrections-multiword: + + [CL] Drop "some system" from the list of multiword spelling + corrections. (Closes: #900670) + + * helpers/coll/objdump-info-helper: + + [CL] Ignore low ASCII characters in ELF headers such as RPATH and + SONAME to avoid false-positives in, for example, Go libraries. + (Closes: #898809) + + * vendors/pureos/main/data/fields/derivative-fields: + + [CL] Update the Vcs-* checks for PureOS now that repo structure has + introduced sub-groups. + + -- Chris Lamb <lamby@debian.org> Wed, 13 Jun 2018 18:58:43 +0000 + +lintian (2.5.89) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - embedded-script-includes-copyright-statement + - source-contains-browserified-javascript + + * checks/cruft.pm: + + [BR] Detect minified Javascript in HTML files. + + [BR] Detect browserified Javascript. + + [BR] Detect scripts in HTML files that include copyright statements. + * checks/debhelper.pm: + + [CL] Specifically check for missing "auto" in (for example) + "override_dh_build". Thanks to Mattia Rizzolo for the idea. + (Closes: #900213) + * checks/files.pm: + + [BR] Detect privacy breaches in HTML5 files. + * checks/group-checks.pm: + + [CL] Prevent false-positives when checking debug-package-for-multi- + arch-same-pkg-not-coinstallable by ignoring Python "debug" packages. + (Closes: #900122) + * checks/source-copyright.pm: + + [CL] Update references from <https://dep.debian.net> to + <https://dep-team.pages.debian.net>. + + * data/obsolete-sites/obsolete-sites: + + [PW] Add search.cpan.org to the list of obsolete sites; it has been + replaced by metacpan.org. + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * vendors/pureos/main/data/fields/derivative-fields: + + [CL] Update the Vcs-* checks for PureOS now that code has moved to a + GitLab instance. + + -- Chris Lamb <lamby@debian.org> Fri, 01 Jun 2018 10:22:09 +0000 + +lintian (2.5.88) unstable; urgency=medium + + * checks/application-not-library.desc: + + [CL] Update references to pkg-perl's homepages since the Salsa + migration. + * checks/control-file.desc: + + [CL] Update references to Go team's homepages for the Salsa move. + * checks/elpa.desc: + + [CL] Apply patch from Sean Whitton to update references to + emacsen-team's website since the move from Alioth to Salsa. + Thank! (Closes: #899214) + * checks/fields.pm: + + [CL] Really don't warn about binary packages "depending" on toolchain + packages via Conflicts/Breaks relations. Thanks to Guillem Jover. + (Closes: #896133) + * checks/files.pm: + + [CL] Only warn about (eg.) "/usr/include/util.h" and + "/usr/include/<multiarch-dir>/util.h" when checking for overly + generic header names. (Closes: #899192) + + * data/spelling/corrections: + + [PW] Add a number of corrections. + + [EB] Add some more corrections. + + -- Chris Lamb <lamby@debian.org> Tue, 22 May 2018 08:57:28 +0000 + +lintian (2.5.87) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-pyversions-is-obsolete + - debug-symbol-migration-possibly-complete + - header-has-overly-generic-name + + * checks/cruft.{desc,pm}: + + [CL] Apply patch from Joseph Herlant to warn about use of obsolete + debian/pyversion files. Thanks! (Closes: #898592) + * checks/debhelper.pm: + + [CL] Prevent false-positives with comments and newlines when checking + debhelper-compat-file-contains-multiple-levels. (Closes: #898799) + * checks/fields.{desc,pm}: + + [BR] Detect privacy breaches in Internet Explorer "<!--[if IE 8]>" + conditional comments. + + [CL] Rename python-generic-modules data file to + generic-python-modules. + + [CL] Warn about packages that install files under /usr/include with + overly-generic filenames. Thanks to Andreas Beckmann for the report. + (Closes: #898377) + + [CL] Apply patch from Ian Jackson to not detect + https://browse.dgit.debian.org/example.git as a VCS deprecated in the + Debian infrastucture. (Closes: #898708) + * checks/files.pm: + + [BR] Add "umd" as a possible suffix for minified Javascript. + (alongside "lite", "min", "pack", etc.) + * checks/menu-format.{desc,pm}: + + [CL] Apply patch from Ross Vandegrift to update specification URIs. + (Closes: #899134) + * checks/upstream-metadata.desc: + + [CL] Correct a "non-file directory entry" grammatical error in the + description of the upstream-metadata-is-not-a-file tag. + + * data/files/js-libraries: + + [BR] Detect uses of the libjs-normalize.css CSS "style reset" helper. + * data/files/privacy-breaker-websites: + + [BR] Detect uses of the "libjs-rx" API for asynchronous programming. + * data/rules/rules-should-not-use: + + [CL] Add a pedantic-level warning about possibly complete automatic + debug symbol migrations. Thanks to Graham Inggs for the report. + (Closes: #897608) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * lib/Lintian/Collect/Package.pm: + + [CL] Support parsing tar(1) archives with high-resolution timestamps + (eg. "21:47:29.12396808"). Based on a patch by Stephen Kitt; thanks! + (Closes: #898715) + + -- Chris Lamb <lamby@debian.org> Sat, 19 May 2018 19:30:19 +0000 + +lintian (2.5.86) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - epoch-changed-but-upstream-version-did-not-go-backwards + - latest-debian-changelog-entry-reuses-existing-version + + Removed: + - depends-on-mail-transport-agent-without-alternatives + + * checks/changelog-file.{desc,pm}: + + [CL] Emit an error when a package bumps the epoch but the upstream + version did not go "backwards". Thanks to Raphael Hertzog for the + idea. (Closes: #889816) + + [CL] Correctly warn about packages that re-use a previous version + number. Thanks to Raphael Hertzog for spotting this issue and the + follow-ups. (Closes: #889991) + * checks/fields.pm: + + [CL] Move homepage-field-uses-insecure-uri regex into a separate data + file now it is getting unwieldy. + + [CL] Drop depends-on-mail-transport-agent-without-alternatives as it + only consists of false-positives. Thanks to Paul Wise and Russ + Allbery. (Closes: #898136) + + * data/debhelper/dh_addons-manual: + + [CL] Also permit python-scour to satisfy the requirement for the + scour addon. (Closes: #898077) + * data/fields/insecure-homepage-uris: + + [CL] Add non-HTTPS gnu.org to the list of sites we should warn about + for homepage-field-uses-insecure-uri. Thanks to Mattia Rizzolo for + the report. (Closes: #898160) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Tue, 08 May 2018 22:09:58 -0700 + +lintian (2.5.85) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - ancient-python-version-field + - changed-by-invalid-for-derivative + - old-python-version-field + - package-does-not-use-debhelper-or-cdbs + + * checks/{binaries,shared-libs.pm}: + + [CL] Update shared object detection for file >= 5.33 as this version + will identify shared objects as a "pie executable" or "shared object" + depending on the file's executable bit. Thanks to Paul Gevers, Doug + Freed, Christoph Biedl & Mattia Rizzolo. (Closes: #896840) + * checks/changelog-file.pm: + + [CL] Prevent false-positives in the non-consecutive-debian-revision + and possible-new-upstream-release-without-new-version tags by + skipping them if the source package was renamed. Thanks to Andreas + Beckmann for the report. (Closes: #896675) + + [CL] Include the offending version numbers in the output of the + non-consecutive-debian-revision tag. + * checks/cruft.pm: + + [CL] Make the file-contains-trailing-whitespace tag also emit for + whitespace at end of files. + + [CL] Drop now-misleading comment regarding trailing whitespace + filenames being relative. + + [CL] Also allow /usr/share/doc/$pkg/examples to be a symlink when + checking for packages that ship examples. Thanks to Rafael + Laboissière for the report. (Closes: #897157) + * checks/copyright-file.pm: + + [CL] Disable the duplicate word "spelling" detection in copyright + files to their extensive use of headings and other structures causing + false positives. Thanks, Stuart Prescott. (Closes: #897402) + * checks/debhelper.{pm,desc}: + + [CL] Don't use $. out-of-context when reporting on dh --parallel. + + [CL] Add a pedantic warning for packages that do not use debhelper or + CDBS. (Closes: #884499) + * checks/description.pm: + + [CL] Rework the description-synopsis-might-not-be-phrased-properly + tag to ensure we do not cause false-positives for literal "e.g.", + "eg.", ellipsis ("..."), "etc.", splitting out the tests to make + it clearer and to catch some other corner cases. Thanks to Andreas + Beckmann for the detailed report. (Closes: #896671) + + [CL] Include the synopsis itself for context, etc. when emitting the + description-synopsis-might-not-be-phrased-properly tag. + * checks/fields.pm: + + [CL] Correct a default-mta-dependency-not-listed-first false- + positive where we incorrect emitted the tag for, e.g. + "Depends: a, default-mta | b". (Closes: #897166) + + [CL] Fix orphaned-package-not-maintained-in-debian-infrastructure + false positives for https://git.dgit.debian.org Vcs-* fields. + Thanks to Thorsten Alteholz for the report. (Closes: #897915) + * checks/menus.pm: + + [CL] Also look in a package's dependencies for files listed in a + doc-base control file. (Closes: #897244) + * checks/patch-systems.pm: + + [CL] Ignore templated ".in" files in debian/patches for the + patch-file-present-but-not-mentioned-in-series tag. + * checks/python.{desc,pm}: + + [CL] Mark dependency-on-python-version-marked-for-end-of-life as + "experimental" and with a "pedantic" severity, thus essentially + hiding it from all Lintian users yet allowing us to continue to + continue collect statistics and making it easier to re-introduce + after the release of buster. (Closes: #897213) + + [CL] Migrate the malformed-python-version and + python-version-current-is-deprecated tags from fields.pm, refactor + to use $info->source_field over $info->field, include the + offending field name in the output, and also warn about the Python + 3.x variant of this field. + + [CL] Warn about ancient and old X-Python{,3}-Version fields. Thanks + to Scott Kitterman. (Closes: #892304) + * checks/watch-file.desc: + + [CL] Update description of debian-watch-uses-insecure-uri to clarify + what to do if there is currently no secure URI. Thanks to Andreas + Tille for the report. (Closes: #897082) + + * collection/src-orig-index: + + [CL] Pass --full-date to tar(1) to ensure that we get a consistent + output in the presence of spaces in other fields. (Closes: #897248) + + [CL] Pass --utc to tar(1) to ensure reproducible date parsing. + + * data/java/constants: + + [CL] Apply patches from Bas Couwenberg to update the bytecode checks + for OpenJDK 10 add bytecode number for OpenJDK 11. (Closes: #897424) + * data/fields/perl-provides: + + [CL] Update for Perl 5.026002. + * data/files/python-generic-modules: + + [CL] Add "scripts" and "script" to the list of overly generic Python + module names. Thanks, Andreas Beckmann. (Closes: #897692) + * data/spelling/corrections: + + [CL] Add a "CBDS" → "CDBS" correction. + + [CL] Add a "DSFG" → "DFSG" correction. + + [PW] Add a number of corrections. + + * doc/releases.md: + + [CL] Clarify that we should add an extra bit of whitespace for + annotated release tags. + + * lib/Lintian/Check.pm: + + [CL] Add support for derivative-specific "Changed-By" validation to + enforce additional restrictions on the uploader. + * lib/Lintian/Collect/Package.pm: + + [CL] croak() a meaningful message we cannot parse an index data line. + + * t/tests/*: + + [CL] Apply patch from Adam Conrad adding "-Wl,--no-as-needed" to fix + testsuite failures with Ubuntu's ld(1). (Closes: #897639) + + [CL] Correct the "files-" (should be "fields-") prefix of the + files-orphaned-package-not-maintained-in-debian-infrastructure test. + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [CL] Apply patch from Adam Conrad to add cosmic as a known Ubuntu + distribution. (Closes: #897638) + + -- Chris Lamb <lamby@debian.org> Sat, 05 May 2018 23:31:53 +0000 + +lintian (2.5.84) unstable; urgency=medium + + * checks/binaries.pm: + + [CL] Apply patch from Steve McIntyre to fix profiling detection on + armhf which was causing test failures in Ubuntu on that architecture. + (Closes: #895574) + * checks/fields.pm: + + [CL] Don't warn about binary-package-depends-on-toolchain-package for + Conflicts/Breaks relations. Thanks to Guillem Jover for the report. + (Closes: #896133) + * checks/{files.desc,menu-format.*}, data/menu-format/known-desktop-keys: + + [PW] Link to the latest version for all FreeDesktop standards + * checks/python.desc: + + [CL] Replace all instances of "specifies a dependency on Python 2.x + which not be maintained past 2020" with a clarification that this + refers to upstream's policy followed by a suggestion that it may be + dropped after the release of Debian "buster". Thanks to Adrian Bunk + for the suggestion. (Closes: #896079) + * checks/source-copyright.pm: + + [CL] Add the offending license name to the output of the + "dep5-copyright-license-name-not-unique" tag. + + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * lib/Lintian/Collect/Package.pm: + + [CL] Ensure directory names always end in a trailing "/" to prevent + them being added multiple times to our index. This was resulting in + false-positives for the source-contains-empty-directory tag. Thanks + to James McCoy for the report. (Closes: #896010) + + [CL] Correct "as_anchored_root_dir" -> "has_anchored_root_dir" typo + introduced in e0c833b3 and disable "anchored roots", otherwise + resolve_path breaks (eg. systemd-complex-service-file). + + * profiles/pureos/main.profile: + + [CL] Also disable the "changelog-should-mention-nmu" and + "source-nmu-has-incorrect-version-number" tags. + + -- Chris Lamb <lamby@debian.org> Mon, 23 Apr 2018 11:50:51 +0000 + +lintian (2.5.83) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-should-not-use-sanitize-all-buildflag + + * checks/fields.desc: + + [ADB] Add missing URL in vcs-deprecated-in-debian-infrastructure's + description, which was accidentally lost in lintian 2.5.80. + * checks/version-substvars.desc: + + [CL] Correct confusing not-binnmuable-any-depends-all tag + description caused by blind replacement of ${Source-Version} to + ${source:Version} in 4fd0fa4bc3. (Closes: #895656) + + [CL] Correct classification of the maybe-not-arch-all-binnmuable + tag by marking it as "experimental", downgrading the certainty to + "wild guess" and re-adding a note recommending against making any + changes at this point. Thanks, Jeremy Bicha! (Closes: #895674) + + * data/binaries/spelling-exceptions: + + [CL] Add "selectOn" to the list of spelling-error-in-binary + exceptions; it exists in the source as part of a "void + ToolBoxWidget::selectOn()" method signature, etc. (Closes: #895818) + + [CL] Add "wIH" to the list of exceptions. (Closes: #895841) + * data/rules/should-not-use: + + [CL] Detect debian/rules files that specify the sanitize=+all build + flag. (Closes: #895831) + * data/spelling/corrections: + + [CL] Add "toogle" → "toggle" correction. Thanks to Thorsten Glaser + for the report. (Closes: #895573) + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Wed, 18 Apr 2018 10:59:00 +0000 + +lintian (2.5.82) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - invalid-field-for-derivative + - invalid-version-number-for-derivative + + * checks/changes-file.{desc,pm}: + + [CL] Add support for derivative-specific version validation to permit + enforcement of additional restrictions on the version number such as + being suffixed by "derivativeos1", etc. + * checks/debhelper.pm: + + [CL] Add a special case for the python3 addon as it needs a + dependency on dh-python unless the -dev packages are used. + Thanks to Julian Andres Klode for the report. (Closes: #895284) + * checks/fields.{desc,pm}: + + [CL] Add support for derivative-specific field parsing to allow + enforcement of additional restrictions (eg. updating Vcs-Git, etc.) + * checks/python.pm: + + [CL] Apply patch from Pierre-Elliott Bécue to loosen the changelog + parsing of the new-package-should-not-package-python2-module tag to + allow (for example) "Python 2 variant" as well as "Python2 + variant". Thanks! (Closes: #895128) + + * commands/reporting-sync-state.pm: + + [CL] Add support for blacklisting source packages in order to prevent + some currently-problematic packages such as gcc-8-cross-ports + preventing the update of https://lintian.debian.org/. (See #890873) + * debian/*, commands/*, CONTRIBUTING.md, etc.: + + [CL] Move canonical source repository from Alioth to salsa. + * lib/Lintian/Collect/Package.pm: + + [CL] Allow spaces within the ownership field of tar -tvf output + whilst still allowing spaces in filenames. (Closes: #895175) + + * data/scripts/maintainer-script-bad-command: + + [CL] Also check for find(1) calls when checking for maintainer + scripts that use a recursive chmod or chown. Thanks to Daniel Kahn + Gillmor for the report. (Closes: #895370) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * vendors/pureos/main/data/changes-file/derivative-versions: + + [CL] Ensure that PureOS packages always end with (eg. pureosX). + * vendors/pureos/main/data/fields/derivative-fields: + + [CL] Add PureOS-specific field name validation, such as ensuring the + Maintainer field is updated to the mailing list. + + -- Chris Lamb <lamby@debian.org> Thu, 12 Apr 2018 10:18:25 +0000 + +lintian (2.5.81) unstable; urgency=medium + + The "Policy 4.1.4" release. + + * Summary of tag changes: + + Added: + - debian-rules-contains-unnecessary-get-orig-source-target + - source-contains-empty-directory + + Removed: + - debian-rules-missing-good-practice-target-dfsg + + * checks/control-file.desc: + + [CL] Correct location of "AutomaticDebugPackages" wiki page in the + description of the debian-control-has-obsolete-dbg-package tag. + Thanks to Antonio Ospite for the report. (Closes: #893480) + * checks/cruft.{desc,pm}: + + [CL] Add a pedantic warning for upstream tarballs that contain empty + directories as these can cause problems with git-buildpackage. + Thanks to Balint Reczey for the idea! (Closes: #894368) + * checks/gir.{desc,pm}: + + [CL] Apply a patch series from Simon McVittie to match the Gobject + Introspection policy and fixing a series of false-positives. Thanks! + (Closes: #881491) + * checks/java.{desc,pm}: + + [CL] Apply patch from Bas Couwenberg to bump the maximum permissible + bytecode version number now that openjdk-9 is now the default-jdk. + (Closes: #894397) + + [CL] Apply patch from Bas Couwenberg to update the description of + the unknown-java-class-version tag for openjdk-9. (Closes: #894397) + * checks/files.pm: + + [CL] Add .ogg files to the list of non-license file extensions to + avoid a false-positive in extra-license-file. Thanks to Innocent De + Marchi for the report. (Closes: #894139) + + [CL] Avoid false-positives in Mallard XML files; <link href="..."> + tags are anchor element and not followed automatically. Thanks to + Simon McVittie for the report. (Closes: #894690) + * checks/rules.{desc,pm}: + + [CL] Stop recommending that packages with repacked tarballs specify a + get-orig-source target; this was removed in Debian Policy 4.1.4 in + favour of uscan(1) and debian/watch. + + [CL] Warn about packages that have apparently unnecessary + "get-orig-source" targets such as single-line calls to uscan(1). + Thanks to Mattia Rizzolo for the idea. (Closes: #895036) + * checks/scripts.pm: + + [CL] Also include the offending/unknown shebang in the output of + missing (unversioned) interpreters. + * checks/source-copyright.desc: + + [CL] Change the severity from pedantic ("P:") to info ("I:") for the + missing-explanation-for-repacked-upstream-tarball tag. + * checks/testsuite.{desc,pm}: + + [CL] Apply patch from Georg Faerber to add missing "needs-reboot" to + the list of known autopkgtest restrictions. (Closes: #894817) + + [CL] Apply patch from Georg Faerber to adjust the autopkgtest + URIs from Alioth to salsa.debian.org. (Closes: #894820) + * checks/udev.pm: + + [CL] Apply patch from Thomas Dallmair to avoid false positives in the + udev-rule-missing-subsystem tag when SUBSYSTEM GOTO is not the last + "GOTO" statement. Thanks! (Closes: #894356) + * checks/upstream-metadata.pm: + + [CL] Re-enable YAML parsing of upstream metadata which was disabled + in 2.5.51 (via #861958) to close CVE-2017-8829 as we can now use the + $LoadBlessed option of YAML::XS if we have version 0.69 or above + Thanks to Dylan Aïssi for the report. (Closes: #894747) + + * commands/lintian.pm, checks/{fields,patch-systems,python}, ...: + + [CL] Apply patch from Ville Skyttä correcting many spelling mistakes + in Lintian itself. Thanks! (Closes: #894834) + + * data/standards-version/release-dates: + + [CL] Add 4.1.4 as a known Standards-Version. + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * lib/Lintian/Check.pm: + + [CL] Avoid false positives in spelling detection by allowing "(s)" + suffixes instead of universally stripping all parenthesis. This + prevents, for example, "directory(s)" from triggering false-positive + whilst still warning about "directorys". Thanks to Patrick Matthäi + for the report. (Closes: #894077) + * lib/Lintian/Util.pm: + + [NT] Fix a bug in do_fork that could cause lintian to fork bomb. + (See #890873) + + -- Chris Lamb <lamby@debian.org> Sat, 07 Apr 2018 08:17:26 +0000 + +lintian (2.5.80) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - build-depends-on-build-essential-package-without-using-version + + Removed: + - apache2-module-depends-on-real-apache2-package + - depends-on-build-essential-package-without-using-version + + * checks/apache2.{desc,pm}: + + [CL] Drop apache2-module-depends-on-real-apache2-package tag as there + are separate tags for missing apache2-api-* dependencies. Thanks to + Thijs Kinkhorst et al. (Closes: #796285) + * checks/cruft.{desc,pm}: + + [CL] Strip \par elements from files prior to license checks to + avoid false-positives when checking .rtf files. Thanks to Adam + Borowski for the report and testcase. (Closes: #892967) + + [CL] Look under all of /usr/share/doc (not just /usr/share/doc/$pkg) + when looking for installed examples and update tag description to + match. Thanks to Ferenc Wágner for the report. (Closes: #892905) + * checks/java.{desc,pm}: + + [CL] Only emit source-contains-prebuilt-java-object reported for .jar + files that contain classes. Thanks to Emmanuel Bourg for the report. + (Closes: #789802) + * checks/fields.{desc,pm}: + + [CL] Upgrade vcs-deprecated-in-debian-infrastructure to "W:" from "P" + due to Alioth becoming read-only from May 1st, as well as + additionally checking Vcs-Browser fields hosted on Alioth and + updating the tag description with more details. Thanks to Stuart + Prescott for his input. (Closes: #886096) + + [CL] Only check dependency fields in binary packages for + mail-transport-agent-dependency-does-not-specify-default-mta etc. + (Closes: #892550) + * checks/rules.pm: + + [CL] Don't emit unnecessary-source-date-epoch-assignment if the + package has explicit Build-Depends on dpkg-dev (>= 1.18.8) or + debhelper (>= 10.10). Thanks to Andreas Metzler for the report. + (Closes: #892549) + * checks/script.pm: + + [BR] Fix FP with sensible-utils need to depends on sensible-utils. + * checks/fields.{desc,pm}: + + [CL] Clarify the meaning of the + depends-on-build-essential-package-without-using-version tag by + prefixing it with "build-". Thanks to Sven Joachim and Laurent + Bigonville. (Closes: #892597) + + * data/debhelper/*, data/common/dh_addons: + + [CL] Refresh all debhelper data, correcting the entry for dh-scour. + (Closes: #889016) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 19 Mar 2018 02:25:40 +0000 + +lintian (2.5.79) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - default-mta-dependency-does-not-specify-mail-transport-agent + - default-mta-dependency-not-listed-first + - depends-on-mail-transport-agent-without-alternatives + - mail-transport-agent-dependency-does-not-specify-default-mta + + * checks/changelog-file.{desc,pm}: + + [CL] Ignore entries that end with ":" to avoid false-positives in the + debian-changelog-line-too-short. Thanks to Mattia Rizollo for the + report. (Closes: #892197) + + [CL] Update the description of improbable-bug-number-in-closes + removing the specific number as it can get out of sync with the + actual check. + * checks/changes-file.pm: + + [CL] Don't emit orig-tarball-missing-upstream-signature when the + package provides a "foo.tar.asc" for a "foo.tar.gz". We previously + only checked for a "foo.tar.gz.asc". Thanks to Uwe Kleine-König for + the report. (Closes: #892255) + * checks/cruft.pm: + + [CL] Check all subdirectories under /usr/share/doc/foo to test + whether we ship example files, not just /usr/share/doc/foo/examples/. + * checks/fields.{desc,pm}: + + [CL] Warn about packages that have either have dependency on + default-mta but do not specify mail-transport-agent, have a + mail-transport-agent dependency but do not specify default-mta and + packages that do not specify default-mta first in their alternatives. + Thanks to Paul Wise for the report. (Closes: #892143) + + [CL] Warn about packages that have a relationship with a + mail-transport-agent but do not specify default-mta and + mail-transport-agent as alternatives. (Closes: #892144) + * checks/obsolete-sites.pm: + + [CL] Emit a warning if a package uses a deprecated FTP package + download location. (Closes: #892249) + + * data/fields/obsolete-packages: + + [PW] Add exim and apache, replaced by exim4 and apache2 + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Sat, 10 Mar 2018 06:40:34 +0000 + +lintian (2.5.78) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - missing-vcs-browser-field + + * checks/fields.{desc,pm}: + + [CL] Warn about packages that are missing a Vcs-Browser header when + we know that they have at least one Vcs-* header that has a + browser-based interface. Thanks to Paul Wise for the report. + (Closes: #891688) + + * data/spelling/corrections: + + [CL] Drop the rouge → rogue correction; it's an (admittedly) + old-fashioned word for red cheek makeup as well as being a + fairly-common French word. It was causing a false-positive in the + spelling-error-in-binary tag for osmocom-analog. Thorsten Alteholz + for the report. (Closes: #891794) + + [CL] Drop the wil → will correction as Wil is "a rather common + name in the Netherlands". Thanks to Paul Gevers for the report. + (Closes: #891935) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Mon, 05 Mar 2018 09:05:57 +0000 + +lintian (2.5.77) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - built-using-field-on-arch-all-package + - missing-built-using-field-for-golang-package + - missing-xs-go-import-path-for-golang-package + + * checks/control-file.{desc,pm}: + + [CL] Apply a patch from Michael Stapelberg to detect Golang packages + with invalid or missing Built-Using headers. (Closes: #891072) + + [CL] Apply patch from Michael Stapelberg to warn when packages do not + specify a XS-Go-Import-Path. (Closes: #891184) + * checks/rules.pm: + + [CL] Allow rel="generator" and others; they do not cause internet + access by default. Thanks to Raphaël Hertzog for the report. + (Closes: #891301) + * checks/version-substvars.pm: + + [CL] Fix a bug in version-substvar-for-external-package parsing to + prevent false-positives when the LHS of the binary relation contains + a substvar. Thanks to Andreas Beckmann. (Closes: #726589) + + * data/common/architectures, etc.: + + [CL] Update architecture lists to ensure the inclusion of riscv64. + This will change everything. (Closes: #891387) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Tue, 27 Feb 2018 13:41:26 +0000 + +lintian (2.5.76) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debhelper-compat-file-contains-multiple-levels + - debian-changelog-line-too-short + - unnecessary-source-date-epoch-assignment + - upstream-metadata-file-is-missing + + Renamed: + - co-maintained-package-with-no-vcs-headers -> + co-maintained-package-with-no-vcs-fields. + - desktop-contains-deprecated-header -> + desktop-contains-deprecated-key. + - xs-testsuite-header-in-debian-control -> + xs-testsuite-field-in-debian-control. + - unnecessary-testsuite-autopkgtest-header -> + unnecessary-testsuite-autopkgtest-field. + - xs-vcs-header-in-debian-control -> + xs-vcs-field-in-debian-control. + + * General: + + [CL] Apply a patch series from Ben Finney to correct inconsistent use + of "header" terminology (versus "field", etc.) in descriptions and + tag names. Thanks! (Closes: #890959) + + * checks/changelog-file.{desc,pm}: + + [CL] Warn about changelog files that are too short. Thanks to Adrian + Bunk for the suggestion. (Closes: #890920) + * checks/cruft.pm: + + [CL] Avoid false-positives in Jush's syntax highlighting definition + files. + + [CL] Avoid a false-positive when matching the fake Lena Söderberg + image in libplacebo. Thanks to Thorsten Alteholz for the report. + (Closes: #890943) + * checks/debhelper.{desc,pm}: + + [CL] Warn if packages define multiple compatibility levels in the + "compat" file, typically via "echo 11 >> debian/compat" (instead of + ">"). + * checks/fields.desc: + + [CL] Correct a grammatical error and tighten up the language of the + "binary-package-depends-on-toolchain-package" tag's description. + Thanks to Gregor Herrmann for the report. (Closes: #890530) + * checks/init.d.pm: + + [CL] Also check for "RUN=" and "DAEMONRUN=" when evalating lines in + /etc/default for "init.d-script-should-always-start-service" + violations. Thanks to Laurent Bigonville. (Closes: #890916) + * checks/rules.{desc,pm}: + + [CL] Update override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS + to fix a number of false positives. Thanks to Gregor Herrmann for + the report. (Closes: #890537) + + [CL] Also check, for example, "override_dh_fixperms-indep" and + "override_dh_fixperms-arch" targets for + "override_dh_fixperms-does-not-call-dh_fixperms", etc. + + [CL] Prevent a large number of false-positives when checking the + debian-rules-is-dh_make-template tag. Thanks to Evgeni Golov for + the report. (Closes: #890660) + + [CL] Check for unnecessary SOURCE_DATE_EPOCH assignments; it is + either exported by dpkg >= 1.18.8 or one can include pkg-info.pk, + etc. (Closes: #832099) + * checks/scripts.pm: + + [CL] Prevent some false-positives in udevadm-called-without-guard. + * checks/upstream-metadata.{desc,pm}: + + [CL] Apply patch from Dylan Aïssi to suggest maintainers add a + debian/upstream/metadata file, although downgrade the check to + "experimental" level for the time being. (Closes: #833007) + * checks/watch-file.pm: + + [CL] Use our new $PKGREPACK_REGEX to match and capture the suffix + when looking at potential debian/watch mangling issues. + + * commands/reporting-html-reports.pm: + + [NT] Stop including the uncompressed lintian log in the website + as it consumes considerable space for no reason. Consumers + should migrate to the compressed variant, which has been around + for years and only consumes ~1/20th of the space. + + * data/files/python-generic-modules: + + [CL] Detect "core" as an overly-generic module name. Thanks to + Andreas Beckmann for the report. (Closes: #891027) + * data/scripts/interpreters: + + [CL] Add cwl-runner (to cwltool) as an interpreter for CWL scripts. + Thanks to Michael Crusoe for the report. (Closes: #890667) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * debian/source/lintian-overrides: + + [CL] Drop all the overrides for Lintian itself now that we use the + <!nocheck> build profile for the previously-spurious warnings. + + * lib/Lintian/Util.pm: + + [CL] Factor out the regex that matches "repacked" tarballs based on + their filename. + * lib/Lintian/Collect/{Changes,Sources}.pm: + + [CL] Add repacked subroutines to check whether a package has been + repacked or not. + + * reporting/templates/maintainer.tmpl: + + [CL] Link package entries directly to sources.debian.org. + + * t/scripts/changelog-format.t: + + [CL] Provide some possibly-helpful advice when violating the "entry + header" changelog test. + * t/tests/cruft-upstream-binaries: + + [CL] Add a testcase to check that symlinked missing-sources do the + right thing (re. #890468). + + -- Chris Lamb <lamby@debian.org> Wed, 21 Feb 2018 18:42:26 +0000 + +lintian (2.5.75) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-uses-unnecessary-dh-argument + - missing-explanation-for-repacked-upstream-tarball + - udevadm-called-without-guard + + * checks/changelog-file.desc: + + [CL] When checking latest-debian-changelog-entry-without-new-version + ignore any change of epoch. (Closes: #889991) + * checks/debhelper.{desc,pm}: + + [CL] Warn when specifying --parallel to dh(1) in compat levels >= 10. + Thanks to Nicolas Braud-Santoni for the idea. (Closes: #890358) + + [CL] Add a missing verb to the long description of the + dh-quilt-addon-but-quilt-source-format tag. + * checks/files.pm: + + [CL] Tidy logic for detecting allowed rel="" values in <link/> + HTML tags. + + [CL] Allow rel="canonical" in <link/> HTML tags; they are used by + search engines (etc.) and do not cause internet access. + (Closes: #762753) + * checks/init.desc: + + [CL] Improve various parts of the long description for + init.d-script-should-always-start-service. + * checks/patch-systems.{desc,pm}: + + [CL] Avoid false positives when checking for typos by ignoring files + or patch descriptions that contain the words "typo" or "spelling". + Thanks to Bas Couwenberg for the report. (Closes: #889964) + + [CL] Check the first line of the description separately for spelling + errors to avoid false-positive duplicate checks across a patch + description's synopsis and its body. (Closes: #890100) + * checks/python.desc: + + [CL] Underline that maintainers do not need to override the + new-package-should-not-package-python2-module tag but rather leave a + comment in debian/changelog. + * checks/scripts.{desc,pm}: + + [CL] Check for maintainer scripts that call udevadm without a guard + as it can fail within a chroot. (Closes: #890298) + * checks/source-copyright.{desc,pm}: + + [CL] Emit a pendatic warning for packages with repacked upstream + tarballs that lack a Files-Excluded or Comment header in + debian/copyright. + + * collection/override-file: + + [CL] Actually pick the first out of debian/source/lintian-overrides + and debian/source.lintian-overrides. Thanks to Thorsten Glaser for + the report. (Closes: #890361) + + * commands/reporting-html-reports.html: + + [NT] Minimize generated SVG files if scour is installed and + available in PATH. + + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Wed, 14 Feb 2018 14:24:49 +0000 + +lintian (2.5.74) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - control-tarball-compression-format + - data-tarball-compression-format + - debian-rules-is-dh_make-template + - init.d-script-should-always-start-service + - jar-contains-source + - missing-systemd-service-for-init.d-script + - source-contains-prebuilt-wasm-binary + - spelling-error-in-patch-description + - systemd-service-file-refers-to-unusual-wantedby-target + + Renamed: + - systemd-no-service-for-init-script -> + omitted-systemd-service-for-init.d-script + - systemd-no-service-for-init-rcS-script -> + missing-systemd-service-for-init.d-rcS-script + - override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES -> + override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS + + * checks/changelog-file.desc: + + [CL] Improve the long description of epoch-change-without-comment. + Based on suggestions by Raphael Hertzog and Ian Jackson - thanks! + (Closes: #889814) + * checks/cruft.desc: + + [BR] Check for wasm files. (Closes: #889102) + + [CL] Factor out call to _ships_examples to avoid excessive looping + over $sorted_index. + + [CL] Do not emit package-does-not-install-examples if we don't have + any binary packages in our laboratory. (Closes: #889591) + + [CL] Improve the description of package-does-not-install-examples to + give more debhelper advice. + + [CL] Assume that if a source package generates a binary ending in + "-examples" then it does ship examples. + * checks/deb-format.{desc,pm}: + + [CL] Add a classification tag for the .deb data tarball compression + format. (Closes: #738442) + + [CL] Add a classification tag for the control tarball compression + format. (Closes: #889856) + * checks/fields.pm: + + [CL] Avoid false positives when checking binary packages depending on + toolchain packages by ignoring packages starting with "dh-" or ending + with "-source". Thanks to Josh Triplett for the report. + (Closes: #889486) + * checks/files.pm: + + [BR] Add context for privacy breach in order to improve debugging. + * checks/fields.desc: + + [CL] Downgrade severity of build-depends-on-obsolete-package from + error to warning. (Closes: #889638) + * checks/java.{desc,pm}: + + [CL] Only warn about bad-jar-name for "public" .jar files. + (Closes: #889628) + + [CL] Check for .jar files that embed Foo.java alongside a Foo.class + file. (Closes: #762113) + * checks/init.d.{desc,pm}: + + [CL] Warn about packages that use ENABLED="true" (etc.) in + /etc/default files. + * checks/patch-systems.{desc,pm}: + + [CL] Avoid emitting "Can't use an undefined value as an ARRAY + reference" warnings when debian/patches is a file, not a directory. + (Closes: #889535) + + [CL] Check spelling of patch headers. (Closes: #756130) + * checks/rules.{desc,pm}: + + [CL] Fix a number of false-positives when checking the + "override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES" tag + (Closes: #889592) + + [CL] Make a large number of changes suggested by Mattia Rizzolo to + the override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES tag, + renaming it to reference DEB_BUILD_OPTIONS throughout, add Debian + Policy 4.9.1 to the tag's Ref, lower "Certanty" to "wild-guess" and + mark the tag as experimental, updating the tests to match. + (Closes: #889746) + + [CL] Check for debian/rules files that are dh_make templates. + (Closes: #679124) + * checks/scripts.desc: + + [CL] Improve, elaborate and tidy the long description of the + maintainer-script-should-not-use-recursive-chown-or-chmod tag. + Heavily based on a patch by Daniel Kahn Gillmor - thanks! + (Closes: #889489) + * checks/source-copyright.pm: + + [CL] Prevent false positives when checking for missing NOTICE.txt + files by looking inside .jar archives. (Closes: #889760) + * checks/systemd.{desc,pm}: + + [CL] Warn about unit files that install to unusual WantedBy= targets. + Thanks to Sam Morris for the initial patch. (Closes: #817170) + + [CL] Rework the no service detection, improving the (rarely + overridden) tag names to better match what they detect as well as + adding a new "missing-systemd-service-for-init.d-script" pedantic tag + where we do not have an equivalent unit as this implies missing + bespoke security hardening support, etc. Thanks to Lucas Nussbaum for + his input. (Closes: #858588) + * checks/udev.pm: + + [CL] Add simple GOTO parsing to avoid false positives when checking + for udev rules for SUBSYSTEM specifiers. (Closes: #869547, #889639) + + * commands/reporting-{html-reports,lintian-harness}.pm: + + [NT] Register packages that fail during archive wide processing. + + * data/files/privacy-breaker-fragments: + + [BR] Detect new fragments for Google CSE. + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * lib/Lintian/Util.pm: + + [NT] Give lower processing priority to packages that repeatedly + trigger errors during archive-wide processing. + + * reporting/templates/index.tmpl: + + [NT] Display summary of how many groups had errors during their + last processing. + * reporting/templates/{lintian.css,maintainer}.tmpl: + + [NT] Use a distinct error status instead of "Outdated" for + packages with errors during their last processing. + + -- Chris Lamb <lamby@debian.org> Thu, 08 Feb 2018 17:41:55 +0000 + +lintian (2.5.73) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - bad-jar-name + - binary-package-depends-on-toolchain-package + - checksum-count-mismatch-in-changes-file + - co-maintained-package-with-no-vcs-headers + - description-mentions-planned-features + - files-excluded-without-copyright-format-1.0 + - global-files-wildcard-not-first-paragraph-in-dep5-copyright + - maintainer-script-should-not-use-recursive-chown-or-chmod + - missing-explanation-for-contrib-or-non-free-package + - multi-arch-same-package-has-arch-specific-overrides + - override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES + - package-does-not-install-examples + - package-uses-deprecated-dpatch-patch-system + - package-uses-deprecated-source-override-location + - unusual-documentation-package-name + + * checks/cruft.{desc,pm}: + + [CL] When looking for the source of "build/foo/bar.min.js", also + check "src/foo/bar.js". (Closes: #832027) + + [CL] Check for upstream tarballs that ship examples but none is + installed in any binary package. (Closes: #539326) + * checks/debian-source-dir.desc: + + [CL] Upgrade severity of missing-debian-source-format from wishlist + ("I") to normal ("W"). (Closes: #702671) + * checks/description.{desc.pm}: + + [CL] Check for packages that mention planned/upcoming features in + their long description. (Closes: #782990) + + [CL] Improve the description-synopsis-might-not-be-phrased-properly + tag also detect multiple sentences and improve the tag description. + (Closes: #778427) + * checks/changes-file.{desc.pm}: + + [CL] Fix an issue where the bad-section-in-changes-file, + file-size-mismatch-in-changes-file and + checksum-mismatch-in-changes-file tags were not being checked if a + package contained an upstream signature. + + [CL] Check for inconsistencies between "Files" and Checksums-* + sections in .changes files. (Closes: #658542) + * checks/cruft.{desc.pm}: + + [CL] Add pedantic warning for packages using source.lintian-overrides + instead of debian/source/lintian-overrides. + * checks/fields.{desc,pm}: + + [CL] Add a pedantic warning for co-maintained packages that are not + managed in a revision control system. (Closes: #884497) + + [CL] Warn about Multi-Arch: same packages that ship + architecture-specific Lintian overrides. Thanks to Sebastian + Ramacher for the report. (Closes: #787469) + + [CL] Check for packages that specify binary dependencies on toolchain + packages such as cdbs or debhelper. (Closes: #700953) + + [CL] Emit a warning about documentation packages that end with -docs. + (Closes: #664520) + + [CL] Ensure salsa.debian.org Vcs-Git and Vcs-Browser URIs are + canonical and do not redirect. (Closes: #888809) + * checks/files.pm: + + [CL] Support scanning contents of (eg.) data/files/js-libraries. + * checks/java.{desc,pm}: + + [CL] Check for .jar files that do not match the Debian Java policy. + (Closes: #791552) + * checks/patch-systems.{desc,pm}: + + [CL] Emit a pedantic warning for packages that are using the dpatch + patch system. (Closes: #884500) + * checks/rules.pm: + + [CL] Check for override_dh_auto_test targets that do not check + DEB_BUILD_OPTIONS for "nocheck". (Closes: #712394) + * checks/scripts.desc: + + [CL] Update the maintainer-script-should-not-use-service tag to + include advice and Debian Policy reference. (Closes: #889154) + * checks/source-copyright.{desc,pm}: + + [CL] Warn about packages that specify a Files-Excluded header without + a valid Format header as the former will be ignored by uscan(1). + Thanks to Gunnar Wolf for the initial patch. (Closes: #745743) + + [CL] Warn when a "Files: *" DEP-5 paragraph exists but it is not the + first paragraph. Thank to Christoph Biedl for the report and idea. + (Closes: #879235) + + [CL] Ask maintainers to add a comment header to debian/copyright if + their package is in contrib or non-free. (Closes: #773562) + + * commands/reporting-html-reports.pm: + + [NT] Add a limit to how many instances of a tag is deplayed on a tag + page as 151 000 instances of unstripped-static-library is hardly + human readable. + + * data/spelling/corrections: + + [PW] Add a number of corrections. + * data/common/dh_addons: + + [CL] Move/create from data/debhelper/dh_addons as we plan to use + it elsewhere. + * data/debhelper/dh_commands: + + [CL] Update requirement for dh_scour (again!) from python3-scour to + scour. (Closes: #889016) + * data/debhelper/dh_commands-manual: + + [NT] Remove dh_systemd* entries. Debian stable have a recent + enough version of debhelper that this entry no longer matters. + * data/files/fnames: + + [CL] Ensure package-contains-python-doctree-file also warns about + compressed .doctree files. + * data/files/js-libraries: + + [CL] Avoid false-positives when detecting Twitter's bootstrap + library. (Closes: #888972) + * data/files/python-generic-modules: + + [CL] Detect "backports" (and "backport") as overly generic Python + module names. (Closes: #888559) + * data/scripts/maintainer-script-bad-command: + + [CL] Warn if the maintainer scripts include "chown -R" or "chmod -R" + to prevent hardlink attacks on kernels that do not have + fs.protected_hardlinks=1. (Closes: #889066) + + * doc/lintian.xml: + + [CL] Use the debian/source/lintian-overrides location in override + example. + + * lib/Lintian/*: + + [CL] Add support for passing .buildinfo files to Lintian. + (Closes: #853274) + + * reporting/templates/tag.tmpl: + + [NT] Update template to mention tag limit when not all instances + are shown. + + -- Chris Lamb <lamby@debian.org> Sat, 03 Feb 2018 10:25:40 +0000 + +lintian (2.5.72) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-uses-deprecated-systemd-override + - debian-watch-does-not-check-gpg-signature + + Removed: + - debian-watch-may-check-gpg-signature + + * checks/binaries.pm: + + [CL] Avoid a false positive for spelling-error-in-binary that was + causing a FTBFS on armhf. (Closes: #888074) + + [CL] Drop a duplicate line in spelling-error-in-binary exceptions. + + [CL] Move spelling-error-in-binary exceptions to a data file. + + [CL] Support binutils 2.29.90.20180122 (vs. 2.29.1) when parsing ELF + files for errors as the newer version modified the readelf output. + This was causing a testsuite failure when checking the + apparently-corrupted-elf-binary tag. (Closes: #888456) + * checks/cruft.{desc,pm}: + + [CL] Do not emit "license-problem-php-license" when the source comes + from pecl.php.net: "The last agreement with FTP Masters was that PHP + license is OK when the sources some from PECL repository." + (Closes: #810780) + + [CL] Allow, for example, debian/missing-sources/foo.js directories to + represent the source for foo.js. This is useful when foo.js is the + result of concatenating multiple files. (Closes: #836771) + * checks/debhelper.{desc,pm}: + + [CL] Warn about packages that use about dh_systemd_enable or + dh_systemd_start overrides whilst using debhelper compat level 11 as + they are no longer being called. (Closes: #887899) + + [CL] Include the offending context and line when emitting the + brace-expansion-in-debhelper-config-file tag. + + [CL] Avoid false positives and remove an existing (incorrect) test + for apparent brace expansions in config files that do not include a + comma. (Closes: #888304) + * checks/fields.pm: + + [CL] Also check xfonts-foo for font-package-not-multi-arch-foreign. + * checks/files.desc: + + [CL] Downgrade extra-license-file from "W" to "I". (Closes: #740118) + * checks/patch-systems.{desc,pm}: + + [CL] Ignore files called "README" or "README.patches" when checking + packages for patch-file-present-but-not-mentioned-in-series. + (Closes: #888413) + + [CL] Ignore commented-out patches in series files when checking the + patch-file-present-but-not-mentioned-in-series tag. + + [CL] Check "$vendor.series" (not "series.$vendor") when checking for + the patch-file-present-but-not-mentioned-in-series tag. + * checks/source-copyright.desc: + + [CL] Clarify that paragraph ordering matters in the description of + the unused-file-paragraph-in-dep5-copyright tag. (Closes: #762261) + * checks/watch-file.{desc,pm}: + + [CL] Rename the debian-watch-may-check-gpg-signature tag to + debian-watch-does-not-check-gpg-signature to avoid confusion around + the "may check" implying that the package in question does such + checking and we disapprove of it. Thanks to Andreas Beckmann for the + suggestion. (Closes: #735040) + + * data/fields/name_section_mappings: + + [CL] Ensure xfonts-foo are recognised as part of the "x11" section to + match the definition on https://packages.debian.org/en/sid/. + (Closes: #878609) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * debian/control: + + [CL] docbook-xml is required to build the documentation, so drop + "<!nocheck>" build restriction. + * debian/copyright: + + [CL] Add missing initials for Gergely Nagy, Sylvestre Ledru and Steve + Langasek. (Closes: #831729) + + * lib/Lintian/Check.pm: + + [CL] Avoid false positives in the spelling-error-in-description + (etc.) tags where the repetition is part of an acronym expansion such + as "ORA (ORA Recursive Acronym)". (Closes: #883719) + + -- Chris Lamb <lamby@debian.org> Fri, 26 Jan 2018 05:17:01 +0000 + +lintian (2.5.71) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - patch-file-present-but-not-mentioned-in-series + + * checks/files.pm: + + [CL] Ignore Rust .rs files in extra-license-file. (Closes: #887715) + * checks/patch-systems.{desc,pm}: + + [CL] Check for patch files under the debian/patches that are not + mentioned in any series file. Thanks to Paul Wise for the idea. + (Closes: #887817) + * checks/python.{desc,pm}: + + [CL] Don't emit "python-package-missing-depends-on-python" for debug + packages + + [CL] Include possibility that the file should not even be installed + in the description of python-package-missing-depends-on-python. + + * data/spelling/corrections: + + [PW] Add a number of corrections. + * data/rules/rules-should-not-use: + + [CL] Add more context to xz-compression-level-too-high tag output. + + * lib/Lintian/Collect/Package.pm: + + [CL] Fix "Use of uninitialized value in string ne" warnings that + would have appeared as part of the src-orig-index handling in 2.5.66. + (Closes: #887428) + + * t/tests/files-multiarch-foreign-files: + + [CL] Only run on amd64. (Closes: #886163) + + -- Chris Lamb <lamby@debian.org> Sun, 21 Jan 2018 05:24:47 +0000 + +lintian (2.5.70) unstable; urgency=medium + + * checks/python.pm: + + [CL] Fix false positives in python-package-missing-depends-on-python + for Python 3 packages; we were not checking python3:any or + python3-minimal:any. + + * data/spelling/corrections: + + [PW] Add bumpded -> bumped correction. + + -- Chris Lamb <lamby@debian.org> Tue, 16 Jan 2018 06:44:46 +0000 + +lintian (2.5.69) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - insecure-copyright-format-uri + - package-contains-file-in-etc-skel + - package-contains-python-tests-in-global-namespace + - python-package-missing-depends-on-python + - xz-compression-level-too-high + + * checks/cruft.pm: + + [CL] Ignore TeX \section (etc.) titles when checking for GFDL + license. Thanks, Norbert Preining for the report. (Closes: #863384) + * checks/fields.{pm,desc}: + + [CL] Downgrade severity of wrong-section-according-to-package-name + from "W:" to "I:". (Closes: #883772) + + [CL] Thanks to Niels Thykier, update the description of the + orphaned-package-not-maintained-in-debian-infrastructure tag. + + [CL] Include the offending uri in the output of the + vcs-deprecated-in-debian-infrastructure tag. + * checks/python.{pm,desc}: + + [CL] Don't emit new-package-should-not-package-python2-module if + the maintainer justifies its inclusion in the changelog entry. + + [CL] Improve the description and reasoning for the + new-package-should-not-package-python2-module tag. + + [CL] Include the offending package name when warning about + new-package-should-not-package-python2-module. + + [CL] Warn about packages that ship Python modules but are missing + dependencies on any Python interpreter. (Closes: #887083) + + [CL] Remark that new-package-should-not-package-python2-module's + appearance on https://lintian.debian.org/ can be ignored. + (Closes: #887124) + * checks/rules.pm: + + [CL] Allow rules-not-should-not-use data-based tags to capture + variables and include them in the emitted tag. + * checks/source-copyright.{desc,pm}: + + [CL] Warn about insecure "Format:" URIs that reference debian.org. + Based on a patch by Nicolas Braud-Santoni. (Closes: #886930) + * checks/standards-version.pm: + + [CL] Include the date the Standards-Version was actually released in + the output of the ancient-standards-version and the + out-of-date-standards-version tags. + + * data/debhelper/*: + + [ADB] Refresh. + * data/files/fnames: + + [CL] Warn about packages that ship (eg.) test_foo.py files in the + global Python module namespace. + + [CL] Emit an error if packages ship files in /etc/skel. Thanks to + Paul Wise for the suggestion. (Closes: #887120) + * data/files/fonts: + + [ADB] Refresh. + * data/fields/name_section_mappings: + + [CL] Ensure that NSS (Name Services Switch) modules are placed in the + "admin" section. Thanks to Mathieu Parent (sathieu) for the patch. + (Closes: #886961) + * data/rules/rules-should-not-use: + + [CL] Include the assigned value in the Lintian output for the + debian-rules-should-not-use-DH_EXTRA_ADDONS tag. + + [CL] Detect overly-compressed xz packages. (Closes: #829100) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + -- Chris Lamb <lamby@debian.org> Tue, 16 Jan 2018 00:41:30 +0000 + +lintian (2.5.68) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - dh-quilt-addon-but-quilt-source-format + - orphaned-package-not-maintained-in-debian-infrastructure + - package-contains-python-hypothesis-example + - should-specify-rules-requires-root + - vcs-deprecated-in-debian-infrastructure + + * checks/changelog-file.pm: + + [FL] Fix version parsing for hyphen in upstream versions. + * checks/cruft.pm: + + [CL] Avoid a false-positive reported by Theppitak Karoonboonyanan + when matching autotools-pkg-config-macro-not-cross-compilation-safe + by skipping comment lines. (Closes: #886297) + + [FL] Fix version parsing for native packages. + * checks/control-file.{desc.pm}: + + [CL] Check for packages that should specify Rules-Require-Root. + (Closes: #886479) + * checks/debconf.pm: + + [CL] Don't warn about unknown template type "entropy" when a package + depends on cdebconf. (Closes: #677870) + * checks/debhelper.{desc,pm}: + + [CL] Add a check for packages that specify "dh --with quilt" but use + the "3.0 (quilt)" source format. Thanks to Mattia Rizzolo for the + idea. (Closes: #886566) + * checks/fields.pm: + + [CL] Warn about orphaned packages that are not maintained in the + Debian infrastucture. (Closes: #886057) + + [CL] Emit pedantic warnings for packages that refer to a non-Git + version control systems hosted in the Debian infrastructure for the + upcoming salsa.debian.org migration. (Closes: #885974) + + [CL] Include the offending "Bugs" field value in the output of the + bugs-field-does-not-refer-to-debian-infrastructure tag. + + [CL] Ensure that bugs-field-does-not-refer-to-debian-infrastructure + can be overridden by not emitting them for -dbgsym packages. Thanks + to Thorsten Glaser for the report. (Closes: #886426) + * checks/huge-usr-share.pm: + + [CL] Bump arch-dep-package-has-big-usr-share thresholds; they were + last set in 2004. (Closes: #648755) + * checks/pe.pm: + + [CL] Apply a patch from Stephen Kitt to avoid false-positives when + checking PE32+ Windows Portable Executable files, additionally + dropping the now-unnecessary magic number parsing. (Closes: #886555) + * checks/python.{pm,desc}: + + [CL] Don't warn about django-package-does-not-depend-on-django for + -doc packages, etc. + + [CL] Lower the severity of the + "dependency-on-python-version-marked-for-end-of-life" tag from normal + ("W:") to wishlist ("I:") as it is not necessarily actionable by the + maintainer. This reverts bug #883581. (Closes: #886259) + + [CL] When checking for a Python 3 variant of a Python 2.x package + also consider any package that declares a binary dependency on the + ${python3:Depends} substvar to catch packages that have been renamed. + Thanks to Scott Kitterman for the report. (Closes: #886303) + * checks/rules.pm: + + [CL] Also allow $(overridden_command) when checking for the + override_dh_fixperms-does-not-call-dh_fixperms etc. tags. + * checks/scripts.desc: + + [CL] Also mention Recommends and Suggests in the opening paragraph of + python-script-but-no-python-dep. (Closes: #687141) + * checks/shared-libs.pm: + + [CL] Skip Objective-C libraries for the no-symbols-control-file tag + as instance/class methods do not appear in the symbol table. Thanks + to Yavor Doganov for the report and help. (Closes: #749202) + * checks/source-copyright.desc: + + [CL] Avoid false positives for missing-notice-file-for-apache-license + by also looking for files with a .txt extension in binary packages. + Thanks to Ferenc Wágner for the report. (Closes: #886343) + * checks/standards-version.desc: + + [CL] Downgrade severity of out-of-date-standards-version from normal + ("W:") to wishlist ("I:"). (Closes: #886210) + * checks/watch-file.pm: + + [CL] Apply patch from Carlos Maddela <e7appew@gmail.com> to prevent + false-positives when options contain escaped quotation marks. + (Closes: #886574) + + * collection/src-orig-index: + + [CL] Return the replaced string after injecting any tarball prefix + (ie. "foo/bar\n"), not Perl's result of the replacement (ie. "1"). + (Closes: #886586) + + * data/common/dbg-pkg: + + [CL] Identify both python-foo-dbg and python3-foo-dbg as known debug + packages to avoid a false-positive for the former when checking for + debian-control-has-obsolete-dbg-package. (Closes: #886271) + * data/files/fnames: + + [CL] Warn about packages that ship (non-reproducible) Python + Hypothesis examples. (Closes: #886101) + + [CL] Only test for packages shipping gschemas.compiled files in + usr/share/glib-*/schemas as it is valid for packages to generate + schemas at build time. Thanks to Jonathan Carter (highvoltage) for + the followup. (Closes: #884142) + * data/spelling/corrections: + + [PW] Add a number of corrections. + * data/standards-version/ancient-date: + + [CL] Change the policy of "ancient-standards-version" to "a release + of Policy from the previous stable release cycle" and update the + value to match. (Closes: #886219) + + * reporting/templates/maintainer.tmpl: + + [CL] Make the previously-hidden package anchor links visible so that + one can right-click and copy the URL instead of constructing it + manually. + + * t/tests/files-multiarch-foreign-files: + + [CL] Ensure that we install to a multiarch directory on all + architectures to prevent a FTBFS on, for example, i386. + (Closes: #886163) + + -- Chris Lamb <lamby@debian.org> Tue, 09 Jan 2018 14:33:30 +0000 + +lintian (2.5.67) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-should-not-use-DH_EXTRA_ADDONS + - debian-watch-could-verify-download + - invalid-date-in-debian-changelog + - override_dh_fixperms-does-not-call-dh_fixperms + + * checks/apache2.{desc,pm}: + + [CL] Include the offending filename and line number in the output of + apache2-deprecated-auth-config and apache2-unparsable-dependency. + + [CL] Avoid false positives in apache2-deprecated-auth-config where + the offending lines are wrapped in suitable "IfModule" or "IfVersion" + directives. (Closes: #788991, #710656) + * checks/changelog-file.{desc,pm}: + + [CL] Warn about changelog entries that have incorrectly formatted + dates. (Closes: #793406) + * checks/files.pm: + + [CL] Split out python-module-has-overly-generic-name regular + expression into a data file. + + [CL] Don't warn about extra license files installed via Sphinx. + Thanks, Stuart Prescott! (Closes: #885968) + * checks/python.pm: + + [CL] Prevent false positives when checking for Python {2,3} packages + that depend on Python {3,2} packages when the package being depended + on ends with -doc. We were previously only catching the case for + dependencies *from* packages with such names. (Closes: #885693) + + [CL] Also ignore -doc, -docs, -dev, -common and -tools packages for + intra-Python variant dependency checking, python-but-no-python3, etc. + + [CL] Drop parens in depends-on-package-from-other-python-variant + output. + + [CL] Refactor django-package-does-not-depend-on-django check to + correctly check Django packages called python2-django-foo. + * checks/rules.{desc.pm}: + + [CL] Suggest using /usr/share/dpkg/architecture.mk as a solution to + debian-rules-sets-dpkg-architecture-variable rather than simply + replacing assignments with ?=. Thanks to Helmut Grohne for the + suggestion. + + [CL] Include the line number when warning about instances of + override_dh_clean targets that are missing calls to dh_clean. + + [CL] Apply patch from Paul Tagliamonte to check for files + that use DH_EXTRA_ADDONS. Thanks! (Closes: #885790) + + [CL] Update $PYTHON3X_DEPEND to prevent false positives in + missing-python-build-dependency. (Closes: #750537) + + [CL] Refactor check for override_dh_clean-does-not-call-dh_clean + tag into a loop. + + [CL] Check for override_dh_fixperms targets that are missing calls + to dh_fixperms. (Closes: #885910) + * checks/scripts.pm: + + [CL] Include the offending/unknown shebang in the output of various + interpreter-related tags. (Closes: #673734) + * checks/source-copyright.desc: + + [CL] Also mention that we check for NOTICE.gz files when looking for + Apache 2.0 packages that do not distribute their accompanying NOTICE + file. + * checks/watch-file.{desc,pm}: + + [CL] Apply patch from Felix Lechner <felix.lechner@lease-up.com> to + check for packages where an upstream signature exists but is not + being used. (Closes: #885621) + + * data/fields/name_section_mappings: + + [CL] Ensure that PAM modules are placed in the "admin" section, + additionally preventing a false positive for libpam-krb5 which was + being caught by a "libfoo1" => "libs" entry. (Closes: #885899) + * data/files/python-generic-modules: + + [CL] Add "examples". + * data/spelling/corrections: + + [PW] Add a number of corrections. + * data/standards-version/release-dates: + + [CL] Correct date(1) invocation example in comment. + + [CL] Add 4.1.3 as a known standards version. + + * debian/control: + + [CL] Declare compliance with Debian Policy 4.1.3. + + [CL] Mention Debian Policy 4.1.3 in long package description. + + -- Chris Lamb <lamby@debian.org> Mon, 01 Jan 2018 14:58:24 +0000 + +lintian (2.5.66) unstable; urgency=medium + + Merry Christmas! + + * Summary of tag changes: + + Added: + - autotools-pkg-config-macro-not-cross-compilation-safe + - bugs-field-does-not-refer-to-debian-infrastructure + - mismatched-python-substvar + - missing-notice-file-for-apache-license + - override_dh_clean-does-not-call-dh_clean + - package-contains-python-doctree-file + - pkg-config-unavailable-for-cross-compilation + - portable-executable-missing-security-features + - python-package-depends-on-package-from-other-python-variant + - vcs-fields-use-more-than-one-vcs + + * checks/*.desc: + + [CL] Standardise on capital-L "Lintian" in tag descriptions. + Thanks to Adam D. Barratt for the suggestion. + * checks/cruft.{pm,desc}: + + [CL] Check for packages that invoke AC_PATH_PROG without considering + cross-compilation. Thanks to Helmut Grohne for the idea and + proof-of-concept implementation. (Closes: #884798) + * checks/fields.{pm,desc}: + + [CL] Emit a wishlist warning for packages that mix-and-match more + than one version control system in Vcs-* headers. (Closes: #884503) + + [CL] Warn when packages specify a "Bugs" field in debian/control that + does not refer to official Debian infrastructure as this can make + reportbug unable to report bugs. (Closes: #741071) + * checks/files.{pm,desc}: + + [CL] Warn maintainers about packages that ship pkg-config files under + /usr/lib/pkgconfig as they are unavailable under cross-compilation. + Thanks to Helmut Grohne for the idea. (Closes: #885096) + + [CL] Warn about packages that ship non-reproducible Python .doctree + files. (Closes: #885327) + + [CL] Factor out simple filename checks into a Lintian::Data variable. + * checks/init.d.{pm,desc}: + + [CL] Don't emit init.d-script-needs-depends-on-lsb-base if the + package ships a Systemd service file. (Closes: #864999) + * checks/lintian.desc: + + [CL] Also note that unused-override can be triggered if Lintian + adds/modifies supplementary tag metadata. + * checks/obsolete-sites.pm: + + [CL] Ignore commented-out lines to avoid false-positives where the + maintainer references the old location. (Closes: #806237) + * checks/pe.{pm,desc}: + + [CL] Check for Microsoft Windows Portable Executable (PE) files that + are missing security hardening features. Thanks to Petter + Reinholdtsen for the report. (Closes: #837548) + * checks/python.{pm,desc}: + + [CL] Warn about Python 2.x packages using ${python3:Depends} and + Python 3.x packages using ${python:Depends}. Thanks to Mattia + Rizzolo for the idea. (Closes: #884676) + + [CL] Factor out definition of dependency fields. + + [CL] Warn about Python 3 packages that depend on Python 2 packages + and vice versa. (Closes: #782277) + * checks/rules.{desc,pm}: + + [CL] Check for override_dh_clean targets that are missing calls to + dh_clean. Thanks to Andreas Beckmann for the idea. (Closes: #884817) + * checks/standards-version.pm: + + [CL] Avoid misleading tag descriptions when emitting valid + timewarp-standards-version warnings if the date parts are identical + (ie. "2017-11-30 < 2017-11-30"). Thanks to Andrea Bolognani + eof@kiyuko.org> for the report. (Closes: #884785) + * checks/scripts.pm: + + [CL] Prevent a false positive in the + possibly-insecure-handling-of-tmp-files-in-maintainer-script tag by + detecting XXX-like mktemp(1) templates. (Closes: #601323) + * checks/source-copyright.{desc,pm}: + + [CL] Check for Apache 2.0 packages that do not distribute their + accompanying "NOTICE" files. (Closes: #885042) + + [CL] Use the list of files in the orig tarball (rather than in the + regular index) to prevent false positives when checking for the + source-includes-file-in-files-excluded tag when a patch system + re-adds files that were removed. (Closes: #884848) + + * collection/src-orig-index: + + [CL] Correct references to generated filename. + + [CL] Update bitrotted calls to Lintian::Command:spawn. + + * data/debhelper/compat-level: + + [MR] Bump the experimental debhelper compat level to 12. + (Closes: #884678) + + [CL] Bump the recommended debhelper compat level to 11, emitting a + pedantic warning when using lower level. (Closes: #884699) + * data/debhelper/dh_commands: + + [CL] dh_scour is now provided by python3-scour, not python-scour. + Thanks to Jeremy Bicha. (Closes: #885106) + * data/files/js-libraries: + + [CL] Detect embedded jQuery libraries with version number in their + filenames (eg. jquery-1.10.2.min.js). (Closes: #833613) + + [CL] Also emit embedded-javascript-library for Twitter Bootstrap and + "mustache". + * data/files/php-libraries: + + [CL] Avoid a embedded-php-library false positive for streams.php. + (Closes: #637473) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * debian/compat: + + [NT] Bump debhelper compat level to 11. + * debian/control: + + [CL] Tag relevant build-dependencies with <!nocheck>. + + [NT] Bump versioned Build-Dependency on debhelper to 11~. + + * lib/Lintian/Collect/{Package,Source}.pm: + + [CL] Don't require that src-orig-index.gz actually contains any files + rather than faking an entry. + + * reporting/templates/maintainer.tmpl: + + [CL] Correct invalid "else if" syntax with "elsif". Thanks to Uwe + Kleine-König for the report. + + * t/tests/fields-malformed-vcs-fields-unrel: + + [CL] Add a regression test for a potential false positive in the + "vcs-field-has-unexpected-spaces" tag. (Ref: #884870) + * t/tests/files-multiarch-foreign-files: + + [CL] Don't hardcode architecture triplet to fix FTBFS on non-amd64 + architectures. (Closes: #884683) + * t/scripts/implemented-tags.t: + + [CL] Exclude some tests in this coverage check now that they are + specified in a data file rather than in the code itself. + + -- Chris Lamb <lamby@debian.org> Tue, 26 Dec 2017 14:59:29 +0000 + +lintian (2.5.65) unstable; urgency=medium + + * t/tests/files-pkgconfig: + + [CL] Update tests to reflect change in Multi-Arch foreign detection. + + -- Chris Lamb <lamby@debian.org> Mon, 18 Dec 2017 10:04:30 +0000 + +lintian (2.5.64) unstable; urgency=medium + + * checks/files.pm: + + [CL] Apply patch from Sven Joachim to prevent false-positives + multiarch-foreign-static-library for non-multiarch packages. + (Closes: #884655) + + * reporting/templates/maintainer.tmpl: + + [CL] Don't link full report entries to themselves. (Closes: #884572) + + [CL] Link to the package's short report entry from the "full" version + if it isn't empty. + + -- Chris Lamb <lamby@debian.org> Mon, 18 Dec 2017 09:31:48 +0000 + +lintian (2.5.63) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - development-package-ships-elf-binary-in-path + - excessive-priority-for-library-package + - multiarch-foreign-cmake-file + - multiarch-foreign-pkgconfig + - multiarch-foreign-static-library + - package-contains-compiled-font-file + - package-contains-compiled-glib-schema + + * checks/binaries.{pm,desc}: + + [CL] Add an experimental check for development packages that ship + ELF binaries in $PATH. Host architecture binaries are generally not + executable so such files are useless for cross builds. + (Closes: #794295) + * checks/cruft.desc: + + [CL] Add debian/changelog to the file-contains-trailing-whitespace + example to make it even easier to copy-paste. + * checks/fields.{pm,desc}: + + [CL] Warn about library packages with excessive priority. Thanks to + Josh Triplett for the report. (Closes: #834290) + * checks/files.{pm,desc}: + + [CL] Warn about Multi-Arch: foreign packages that ship CMake, + pkg-config or static libraries in public, architecture-dependent + search paths. Thanks to Helmut Grohne for the initial patch and + report. (Closes: #882684) + + [CL] Raise the certainty of multiarch-foreign-shared-library from + "wild guess" to "possible" on the suggestion of Helmut Grohne. + + [CL] Test for packages shipping "gschemas.compiled" files. Thanks + to Andreas Beckmann for the idea. (Closes: #884142) + + [CL] Warn if a package ships compiled font files. Thank you to + Andreas Beckmann for the report. (Closes: #884165) + * checks/python.pm: + + [CL] Also check for packages installing modules called "site" or + "docs" into the global namespace. (Closes: #769365) + * checks/scripts.desc: + + [CL] Update description of python-script-but-no-python-dep to refer + to ${python3:Depends}. Thanks to Mattia Rizzolo. (Closes: #660718) + + [CL] Prevent a false-positive in missing-dep-for-interpreter by + matching ABI-versioned virtual packages for Erlang. Thanks to + Jean Parpaillon for the report. (Closes: #810204) + * checks/source-copyright.desc: + + [CL] Update description of source-includes-file-in-files-excluded + to clarify the potential problem and to reference the relevant + wishlist bug against git-buildpackage. + * checks/python.pm: + + [CL] Clarify that new-package-should-not-package-python2-module + triggers when there is a single changelog entry as well as providing + general guidance where upstreams have not ported to Python 3 yet. + + * commands/lintian.pm: + + [CL] Correct parsing of "jobs=42" in lintianrc. If specified, it + would be coerced to a boolean resulting in a value of 1. + + [CL] Allow the tag display limit to be configured via the + "--tag-display-limit" command-line argument or "tag-display-limit" + in lintianrc. (Closes: #813525) + + [CL] Make -v imply --no-tag-display-limit. (Closes: #812756) + + * data/files/privacy-breaker-fragments: + + [CL] Don't match, for example, "FB.login()" when used as a + documentation example. (Closes: #884296) + * data/spelling/corrections: + + [PW] Add a number of corrections. + + * doc/lintianrc.example: + + [CL] Add missing "jobs" entry. + + * profiles/pureos/main.profile: + + [CL] Add a profile for Purism's PureOS. (Closes: #884408) + + * reporting/images/*.png: + + [CL] Apply patch from Ville Skyttä that runs the .PNG files through + the "zopflipng" minimiser tool to save space. (Closes: #884559) + + * reporting/templates/maintainer.tmpl: + + [CL] Add links from each maintainer page (which does not include + pedantic tags, etc.) to the corresponding package on the full report. + Thanks to Paul Wise for the idea and report. (Closes: #884572) + + * vendors/pureos/main/data/changes-file/known-dists: + + [CL] Add data file for PureOS. + + -- Chris Lamb <lamby@debian.org> Sun, 17 Dec 2017 20:19:20 +0000 + +lintian (2.5.62) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - invalid-potfiles-in + + * checks/changelog-file.pm: + + [CL] Correct operator precedence in "epoch-change-without-comment" + to prevent a false positive when an epoch is present but is unchanged + between versions. + + [CL] Improve output of epoch-change-without-comment to include the + actual version change. + * checks/python.desc: + + [CL] Also match, for example, "python2.7:any" when checking the + "dependency-on-python-version-marked-for-end-of-life" tag, not just + "python2.7". (Closes: #883053) + + [CL] Detect an invalid debian/po/POTFILES.in instead of bailing out. + (Closes: #883653) + * checks/scripts.desc: + + [AB] command-with-path-in-maintainer-script: Add more references, + especially the reason why "if [ -x /usr/bin/<command> ]; …" is + indeed bad (#769845 and the mail referred to in there). Rewrite + recommendations, explain what conditions should be given if someone + intents to override this tag. (Closes: #807695) + * checks/source-copyright.pm: + + [CL] Correct false positives in the + "source-includes-file-in-files-excluded" tag where a Files-Excluded + of "lib/*" would be triggered for "foolib/filename". + + [CL] Correct another false positive in the + "source-includes-file-in-files-excluded" tag where we would warn when + the maintainer has removed upstream's debian/ directory and then we + would trigger it on the maintainer's replacement files. + + [CL] List all files violating source-includes-file-in-files-excluded, + not just the first one we encounter per "Files-Excluded" entry. + + [CL] Ignore .pc dirs for source-includes-file-in-files-excluded, + + * data/spelling/corrections: + + [AB] Remove "publically". It's a seldom, but valid English word + (c.f. https://en.wiktionary.org/wiki/publically) and causes false + positives in the OpenSSL license. + + * t/scripts/spellintian.t: + + [AB] Ensure that "publically" is not re-added as spelling correction + in the future again to avoid hundreds of false positives in the + OpenSSL license. + + -- Chris Lamb <lamby@debian.org> Thu, 07 Dec 2017 16:28:15 +0000 + +lintian (2.5.61) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - epoch-change-without-comment + - source-includes-file-in-files-excluded + - unnecessary-team-upload + + * checks/changelog-file.{desc,pm}: + + [CL] Warn about packages that modify the epoch and there's no comment + about the change. This was motivated by the accidental bumping of the + epoch in my python-django 2:2.0-1 upload. + * checks/elpa.desc: + + [CL] Correct reference to dh_elpa(1) manpage. Thanks to Paul Gevers + for the report. (Closes: #883356) + * checks/fields.pm: + + [CL] Apply patch from Dylan Aïssi to add R CRAN & Bioconductor + repositories to the list of known insecure URIs. (Closes: #883121) + * checks/nmu.{desc,pm}: + + [CL] Warn if a "Team upload" (ie. that string is present in the + changelog) but the uploader is among the Maintainer/Uploaders. + (Closes: #882954) + * checks/python.desc: + + [CL] Raise the severity of the + "dependency-on-python-version-marked-for-end-of-life" and + "python-foo-but-no-python3-foo" Python 2.x deprecation tags to + regular warnings. (Closes: #883581) + * checks/source-copyright.{desc,pm}: + + [CL] Warn when files specified in Files-Excluded exist in the source + tree. (Closes: #871454) + + * data/spelling/corrections: + + [PW] Add a number of corrections. + + [CL] Remove "german|German" and "russian|Russian" entries - they are + covered by data/spelling/corrections-case. (Closes: #883041) + + * data/standards-version/release-dates: + + [AB] Add 4.1.2 as known standards version. + + [AB] Suggest "date +%s -s …" instead of libtimedate-perl. + + * debian/control: + + [AB] Declare compliance with Debian Policy 4.1.2. + + [AB] Mention Debian Policy 4.1.2 in long package description. + + * t/runtests: + + [AB] Use standards version 4.1.2 in tests. + * t/scripts/spellintian.t: + + [AB] Add two checks for common mistakes in d…/spelling/corrections: + "iff" is a valid word (c.f. #865055) and case-only misspellings + belong into data/spelling/corrections-case. + + -- Chris Lamb <lamby@debian.org> Tue, 05 Dec 2017 14:41:02 +0000 + +lintian (2.5.60) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - homepage-field-uses-insecure-uri + - hyphen-file + - rules-does-not-require-root + - rules-requires-root-explicitly + + * checks/control-file.{desc,pm}: + + [AB] Add classification tags for R³. + + [CL] Remove the "Experimental: yes" flag from the + debian-control-has-obsolete-dbg-package tag. (Closes: #882154) + + [AB] Change reference for debian-control-has-obsolete-dbg-package + from https://wiki.debian.org/DebugPackage to + https://wiki.debian.org/AutomaticDebugPackages + * checks/cruft.desc: + + [CL] Add suggested [[:space:]]-based sed call for + file-contains-trailing-whitespace. Thanks to Stuart Prescott. + (Closes: #881389) + + [AB] Also mention Emacs' "M-x wh-cl" (whitespace-cleanup) for + file-contains-trailing-whitespace. + * checks/fields.desc: + + [CL] Warn for Homepage files using well-known insecure URIs. + (Closes: #849514) + * checks/files.pm: + + [NT] Add missing slash for usr/sbin that caused lintian to report + false-positive multiarch-foreign-shared-library when a package + only had executables in usr/sbin. Thanks to Helmut Grohne for + reporting the issue. + + [CL] Warn on files called "-" (hyphen symbol). See #882638 for an + example. + * checks/version-substvars.desc: + + [CL] Don't recommend "Source-Version" in tag descriptions. + + * data/fields/*: + + [CL] Revert patch from Guillem Jover to add a "golang" archive + section; it has not ben added to the archive yet. + * data/spelling/corrections: + + [PW] Add several corrections. + + * lib/Test/Lintian/Harness.pm, t/runtests, t/tests/README: + + [AB] Add support for a "Test-Conflicts" field. + + * t/tests/rules-including-deprecated-makefiles/desc: + + [AB] Add "Test-Conflict: dh-buildinfo". Having dh-buildinfo + installed causes that test to fail. + + * .gitignore: + + [AB] Ignore /debian/.debhelper/ directory. + + -- Chris Lamb <lamby@debian.org> Sun, 26 Nov 2017 11:13:58 +0900 + +lintian (2.5.59) unstable; urgency=medium + + * lib/Lintian/Check.pm: + + [CL] Don't warn about duplicate words when separated by punctuation. + (Closes: #822504) + + * data/fields/*: + + [CL] Apply patch from Guillem Jover to add a "golang" archive + section. (Closes: #880701) + + -- Chris Lamb <lamby@debian.org> Thu, 09 Nov 2017 08:48:00 +0000 + +lintian (2.5.58) unstable; urgency=medium + + * checks/cruft.pm: + + [CL] Rewrite file-contains-trailing-whitespace tag to be a hash from + the filename to the regex we should match. + + [CL] Allow trailing tabs in debian/rules files; they are a very + common idiom in Makefiles. + * checks/fields.desc: + + [SL] Update of the documentation for the change introduced in 2.5.53: + Transitional packages should now be "oldlibs/optional" rather + than "oldlibs/extra". + * checks/python.pm: + + [CL] Don't count python-django and python3-django as Django modules. + This avoids a warning where Django itself triggers + "django-package-does-not-depend-on-django". + + * data/fields/name_section_mappings: + + [CL] Apply patch from Simon McVittie to prevent a misdetection of + libcanberra-gstreamer as a GNU Smalltalk library. (Closes: #880140) + * data/spelling/corrections: + + [AB] Add more misspellings of the word "dependency". + + * doc/lintian.xml: + + [CL] Improve overrides docs using source-is-missing as an example. + (Closes: #838807) + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [CL] Add bionic as a known Ubuntu distribution. Thanks Jeremy Bicha! + (Closes: #880115) + + -- Chris Lamb <lamby@debian.org> Fri, 03 Nov 2017 08:46:02 +0100 + +lintian (2.5.57) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-rules-should-not-set-CFLAGS-from-noopt + + * checks/control-file.pm: + + [CL] Avoid false positives in debian-control-has-empty-field when the + field is wrapped onto a new line. Thanks to Mattia Rizzolo for the + report. (Closes: #879977) + * checks/cruft.desc: + + [CL] Add example on how to remove trailing whitespace with sed. + + [CL] Drop README.source from files to check against the + file-contains-trailing-whitespace tag as it can include quotes + from upstream that would be ideally left intact. + * checks/debhelper.pm: + + [NT] Remove code handling named compat levels. + * checks/files.desc: + + [CL] Ignore embedded jQuery libraries for Doxygen. (Closes: #736360) + * checks/rules.desc: + + [CL] Warn if packages set CFLAGS if the value of DEB_BUILD_OPTIONS + contains noopt. (Closes: #718640) + + * commands/lintian.pm: + + [NT] Have lintian resignal between various stages of the + processing. Previously, ill-timed signals would be caught and + "semi-ignored" with lintian happily continuing to process the + next package. (Closes: #878575) + + * data/debhelper/named-compat-levels: + + [NT] Removed; no longer used. + + -- Chris Lamb <lamby@debian.org> Sun, 29 Oct 2017 12:14:30 +0000 + +lintian (2.5.56) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - appstream-metadata-invalid + - debhelper-tools-from-autotools-dev-are-deprecated + - debian-control-has-empty-field + - debian-rules-sets-dpkg-architecture-variable + - empty-section-field + - file-contains-trailing-whitespace + - init.d-script-contains-skeleton-template-content + - latest-changelog-entry-without-new-date + + * checks/appstream-metadata.{pm,desc}: + + [CL] Don't error out when AppStream metadata is invalid and emit new + appstream-metadata-invalid tag instead. (Closes: #879661) + * checks/binaries.desc: + + [CL] Apply patch from Adrian Bunk to mention the lack of the "-g" + flag as a common cause for the debug-file-with-no-debug-symbols tag. + (Closes: #878806) + + [CL] Apply patch from Guillem Jover to strongly discourage the use + of the getconf(1) interface for LFS support. (Closes: #879935) + * checks/changes-file.desc: + + [CL] Add a note to orig-tarball-missing-upstream-signature regarding + support in pristine-tar and git-buildpackage. + * checks/conffiles.pm, checks/{debconf,files,scripts}.desc: + + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to fix a + number of spelling mistakes. (Closes: #878446) + + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to update + a number of manual references. (Closes: #878517) + * checks/control-file.{pm,desc}: + + [CL] Warn about empty fields in debian/control. (Closes: #744388) + * checks/cruft.{pm,desc}: + + [CL] Warn about certain files under debian/* that contain trailing + whitespace characters. (Closes: #748405) + * checks/debconf.desc: + + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to update + the debconf-spec refs. (Closes: #878449) + * checks/debhelper.{desc,pm}: + + [NT] Add a check for packages using the debhelper tooling from the + autotools-dev package. These have been replaced by the changes + inside debhelper itself. + + [NT] Avoid useless-autoreconf-build-depends for autotools-dev when + the autotools-dev tooling is used in debian/rules. + (Closes: #871711) + * checks/fields.pm: + + [CL] Apply patch from Nicolas Boulenguez to accept and recommend the + new vcs-mtn mtn:// uri format. (Closes: #878798) + + [CL] Emit new empty-section-field tag instead of uninitialized value + warnings on an empty "Section:" field. (Closes: #878515) + * checks/files.pm: + + [CL] Lower the severity of package-installs-java-bytecode from + "error" to "warning". (Closes: #879862) + + [CL] Do not trigger package-installs-java-bytecode if the path + contains "WEB-INF", "demo", "doc" etc. (Closes: #879860) + + [CL] Verify files triggering package-installs-java-bytecode files + really are Java class files. (Closes: #879861) + * checks/init.d.pm: + + [CL] Check for files that use content from the /etc/init.d/skeleton + template. Thanks to Christoph Biedl for the idea. (Closes: #879152) + * checks/md5sums.pm: + + [CL] Allow empty md5sums files. (Closes: #781372) + * checks/rules.{pm,desc}: + + [CL] Warn on packages unnecessararily setting dpkg-architecture(1) + variables. (Closes: #793554) + * checks/scripts.desc: + + [CL] Check the "Recommends" field as well when testing scripts for + script-needs-depends-on-sensible-utils. (Closes: #879953) + * checks/source-changelog.{desc.pm}: + + [CL] Move latest-debian-changelog-entry-without-new-date tag into a + new check of type "source". (Closes: #873612) + * checks/watch-file.pm: + + [CL] Include the offending URI in debian-watch-uses-insecure-uri + output, not the line number. + + [CL] Ignore the magic http://sf.net/ redirector URI for the + debian-watch-uses-insecure-uri tag. (Closes: #879206) + + * data/common/source-fields: + + [NT] Add "Rules-Requires-Root". + * data/fields/essential: + + [CL] Apply patch from Helmut Grohne <helmut@subdivi.de> to treat + e2fsprogs as non-essential. (Closes: #878518) + * data/fields/perl-provides: + + [CL] Update for Perl 5.026001. + * data/scripts/interpreters: + + [CL] Add cwl-runner to the list of interpreters. (Closes: #851126) + * data/spelling/corrections: + + [CL] Revert addition of "none were" -> "none was" multiword spelling + correction as it is "acceptable beyond serious criticism". + (Closes: #878457) + + * debian/control: + + [NT] Set R³ to "no". Lintian builds fine without root and + Build-Depends on fakeroot for the tests that still require + fakeroot. + + * doc/lintian.xml, checks/{fields,files,menu-format}.desc, etc.: + + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to update + a large number of errors in links. (Closes: #878521) + + * private/refresh-manual-refs: + + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to update + the Debconf reference mapping. Many thanks! (Closes: #878449) + + [CL] Apply a patch series from Ville Skyttä <ville.skytta@iki.fi> + to a number of issues in the Menu, Perl, Python and Debian + Policy parsing. + + * t/scripts/pod-synopsis.t: + + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to skip all + POD synopsis tests if Test::Pod is not available. (Closes: #878522) + * t/tests/debconf-config-*, t/tests/legacy-maintainer-scripts: + + [CL] Split out checks for debconf-config-not-executable into a + separate test protected by a Test-Depends now that dpkg >= 1.19.0 + will bail out on that condition. + + -- Chris Lamb <lamby@debian.org> Fri, 27 Oct 2017 18:29:35 +0000 + +lintian (2.5.55) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-watch-uses-insecure-uri + - django-package-does-not-depend-on-django + - example-script-uses-deprecated-nodejs-location + - priority-extra-is-replaced-by-priority-optional + - python-module-has-overly-generic-name + - systemd-service-file-wraps-init-script + + Removed: + - copyright-year-in-future + + * checks/copyright-file.pm: + + [CL] Drop copyright-year-in-future after all; it's just too error + prone and time-consuming to maintain given the severity of the issues + it can find. (Closes: #877766) + * checks/cruft.pm: + + [CL] Exempt debian/copyright from license-problem-non-free-RFC tag + to avoid false-positives on meta-references. (Closes: #877999) + * checks/debhelper.pm: + + [AB] Also recognize dh-exec's "=>" arrow if surrounded by tabs. + (Closes: #877905) + * checks/fields.{desc,pm}: + + [NT] Add an info tag for packages that use "Priority: extra". Thanks + to Mattia Rizzolo for the suggestion. (Closes: #870898) + * checks/files.pm: + + [CL] Ignore privacy breach violations in comments. (Closes: #877421) + + [CL] Check for Python modules with overly generic names such as + "tests" or "test". (Closes: #875964) + * checks/{files,manpages,menu-format}.{desc,pm}: + + [NT] Stop considering usr/man, usr/X11R6/bin and usr/X11R6/man as + manpage directories / PATH directories to simplify some code paths. + Nothing ships manpages in these directories and lintian emits tags + to strongly discourage people from doing so. + * checks/init.d.pm: + + [CL] Avoid warning for init.d-script-not-marked-as-conffile when + the init.d script does not exist; we will already be alerted via + the init.d-script-not-included-in-package error. + * checks/python.pm: + + [CL] Move to "Type: source, binary" check type. + + [CL] Also match packages named "python2-*" as relating to Python 2.x. + + [CL] Warn about Django libraries that do not depend on Django itself. + (Closes: #877292) + + [CL] Do not emit python-foo-but-no-python3-foo for -common packages. + * checks/scripts.desc: + + [CL] Add missing example-script-uses-deprecated-nodejs-location tag. + (Closes: #877142) + + [NT] Apply patch from Mattia Rizzolo to improve the tag description + for script-uses-deprecated-nodejs-location. + + [CL] Actually check for a dependency on sensible-utils before + emitting script-needs-depends-on-sensible-utils. Thanks to Daniel + Reichelt for the detailed bug report. (Closes: #877439) + * checks/standards-version.desc: + + [CL] Correct invalid link to upgrading-checklist. Thanks to Dann + Frazier for the report. (Closes: #878184) + * checks/systemd.{desc,pm}: + + [CL] Warn if native systemd service files only wrap existing SysV/LSB + init scripts. (Closes: #870704) + * checks/watch-file.{pm,desc}: + + [CL] Warn for debian/watch files using insecure URIs such as HTTP or + FTP, similar to vcs-field-uses-insecure-uri. (Closes: #849515) + + * data/{common => fields}/priorities: + + [NT] Rename file. + * data/fields/essential: + + [MR] Remove 'mount' from the essential packages. Starting with + util-linux version 2.29.2-3 the Essential flag has been removed. + (Closes: #877511) + * data/fields/priorities: + + [NT] Remove "extra". + * data/files/privacy-breaker-websites: + + [CL] Replace (eg.) "You may use libjs-prototype package" with "You + may use the libjs-prototype package". + + * commands/lintian.pm: + + [NT] Simplify handling of uncaught exceptions. + + * doc/lintian.xml: + + [NT] Document that the XDG_DATA_HOME directory can be used for + user profiles and data files. This has been supported for quite + a while but the documentation incorrectly listed "$HOME/.lintian" + instead (which in fact did not work for this purpose). + (Closes: #701477) + + * frontend/dplint: + + [NT] Restore "$HOME/.lintian" as a directory that is used for + user profiles and data files. It was advertised as such in the + documentation but the code actually only used the XDG_DATA_HOME + path. Thanks to Daniel Kauffman for the report. (Closes: #875636) + + [NT] Correct the order of restricted search paths (user directories + and /etc/lintian). It incorrectly used /etc/lintian before the + user directory. + + * lib/Lintian/Util.pm: + + [NT] Rename the "fail" subroutine to "internal_error" to better + reflect its purpose. + + * t/tests/binaries-from-other-arch: + + [NT] Make test architecture specific as it fails on certain + architectures. (Closes: #877147) + * t/tests/python-new-python2-package/*: + + [CL] Correct Depends of python2.7 → python3 in Python 3 test + package. + * t/tests/python-python2-no-python3-unrel/debian/debian/control.in: + + [CL] Add test for ignoring python-foo-doc packages. + + [CL] Correct short descriptions of binary packages. + + -- Chris Lamb <lamby@debian.org> Thu, 12 Oct 2017 11:50:41 -0400 + +lintian (2.5.54) unstable; urgency=medium + + * checks/copyright-file.pm: + + [CL] Prevent false positives in copyright-year-in-future when + matching URLs. + + [CL] Prevent false positives in copyright-year-in-future when + matching the Tcl license (eg. postgresql-10). (Closes: #876360) + * checks/debhelper.pm: + + [CL] Ensure that "missing-build-dependency-for-dh_-command" is not + emitted for dh-strip-nondeterminism at Debhelper compat levels >= + 10. (Closes: #876443) + * checks/files.desc: + + [CL] Correct grammar and punctuation in description of + node-package-install-in-nodejs-rootdir. + * checks/changelog-file.pm: + + [CL] Also ignore lines that (meta) reference "typo" when checking + for "spelling-error-in-changelog". + + * data/standards-version/release-dates: + + [CL] Add 4.1.1 as a known standards version. + + * debian/control: + + [CL] Mention Debian Policy v4.1.1 in the description. + + * t/tests/binaries-from-other-arch/debian/debian/dumpobj: + + [CL] Apply patch from Jakub Wilk to prevent test failures on + armhf/arm64, etc. (Closes: #877147) + * t/tests/fields-perl-provides/{desc,tags}: + + [CL] Apply patch from Gianfranco Costamagna (locutusofborg) to fix + failing test on 32-bit architectures and add a suitable Test-Against + stanza to make this easier to catch in future. Thanks to Matthias + Klose (doko) for the report. (Closes: #876343) + + -- Chris Lamb <lamby@debian.org> Fri, 29 Sep 2017 16:57:39 +0100 + +lintian (2.5.53) unstable; urgency=medium + + The "we are all Perl developers now" release. + + * Summary of tag changes: + + Added: + - alternatively-build-depends-on-python-sphinx-and-python3-sphinx + - build-depends-on-python-sphinx-only + - dependency-on-python-version-marked-for-end-of-life + - maintainer-script-interpreter + - missing-call-to-dpkg-maintscript-helper + - node-package-install-in-nodejs-rootdir + - override-file-in-wrong-package + - package-installs-java-bytecode + - python-foo-but-no-python3-foo + - script-needs-depends-on-sensible-utils + - script-uses-deprecated-nodejs-location + - transitional-package-should-be-oldlibs-optional + - unnecessary-testsuite-autopkgtest-header + - vcs-browser-links-to-empty-view + + Removed: + - debug-package-should-be-priority-extra + - missing-classpath + - transitional-package-should-be-oldlibs-extra + + * checks/apache2.pm: + + [CL] Fix an apache2-unparsable-dependency false positive by allowing + periods (".") in dependency names. (Closes: #873701) + * checks/binaries.pm: + + [CL] Apply patches from Guillem Jover & Boud Roukema to improve the + description of the binary-file-built-without-LFS-support tag. + (Closes: #874078) + * checks/changelog-file.desc: + + [CL] Upgrade latest-debian-changelog-entry-without-new-date from + a warning to an error. (Closes: #873490) + * checks/changes.{pm,desc}: + + [CL] Ignore DFSG-repacked packages when checking for upstream + source tarball signatures as they will never match by definition. + (Closes: #871957) + + [CL] Downgrade severity of orig-tarball-missing-upstream-signature + from "E:" to "W:" as many common tools do not make including the + signatures easy enough right now. (Closes: #870722, #870069) + + [CL] Expand the explanation of the + orig-tarball-missing-upstream-signature tag to include the location + of where dpkg-source will look. Thanks to Theodore Ts'o for the + suggestion. + * checks/copyright-file.pm: + + [CL] Address a number of issues in copyright-year-in-future: + - Prevent false positives in port numbers, email addresses, ISO + standard numbers and matching specific and general street + addresses. (Closes: #869788) + - Match all violating years in a line, not just the first (eg. + "2000-2107"). + - Ignore meta copyright statements such as "Original Author". Thanks + to Thorsten Alteholz for the bug report. (Closes: #873323) + - Expand testsuite. + * checks/cruft.{pm,desc}: + + [CL] Downgrade severity of file-contains-fixme-placeholder + tag from "important" (ie. "E:") to "wishlist" (ie. "I:"). + Thanks to Gregor Herrmann for the suggestion. + + [CL] Apply patch from Alex Muntada (alexm) to use "substr" instead + of "substring" in mentions-deprecated-usr-lib-perl5-directory's + description. (Closes: #871767) + + [CL] Don't check copyright_hints file for FIXME placeholders. + (Closes: #872843) + + [CL] Don't match quoted "FIXME" variants as they are almost always + deliberate. Thanks to Adrian Bunk for the report. (Closes: #870199) + + [CL] Avoid false positives in missing source checks for "CSS Browser + Selector". (Closes: #874381) + * checks/debhelper.pm: + + [CL] Prevent a false positive of + missing-build-dependency-for-dh_-command that can be exposed by + following the advice for the recently added + useless-autoreconf-build-depends tag. (Closes: #869541) + * checks/debian-readme.{pm,desc}: + + [CL] Ensure readme-debian-contains-debmake-template also checks + for templates "Automatically generated by debmake". + * checks/description.{desc,pm}: + + [CL] Clarify explanation of description-starts-with-leading-spaces + tag. Thanks to Taylor Kline <taylor.kline@utexas.edu> for the report + and patch. (Closes: #849622) + + [NT] Skip capitalization-error-in-description-synopsis for + auto-generated packages (such as dbgsym packages). + * checks/fields.{desc,pm}: + + [CL] Ensure that python3-foo packages have "Section: python", not + just python2-foo. (Closes: #870272) + + [RG] Do no longer require debug packages to be priority extra. + + [BR] Use Lintian::Data for name/section mapping + + [CL] Check for packages including "?rev=0&sc=0" in Vcs-Browser. + (Closes: #681713) + + [NT] Transitional packages should now be "oldlibs/optional" rather + than "oldlibs/extra". The related tag has been renamed accordingly. + * checks/filename-length.pm: + + [NT] Skip the check on auto-generated binary packages (such as + dbgsym packages). + * checks/files.{pm,desc}: + + [BR] Avoid privacy-breach-generic false positives for legal.xml. + + [BR] Detect install of node package under /usr/lib/nodejs/[^/]*$ + + [CL] Check for packages shipping compiled Java class files. Thanks + Carnë Draug <carandraug+dev@gmail.com>. (Closes: #873211) + + [BR] Privacy breach is no longer experimental. + + [CL] Check for Lintian overrides installed in the wrong package. + (Closes: #792198) + * checks/init.d.desc: + + [RG] Do not recommend a versioned dependency on lsb-base in + init.d-script-needs-depends-on-lsb-base. (Closes: #847144) + * checks/java.pm: + + [CL] Additionally consider .cljc files as code to avoid false- + positive codeless-jar warnings. (Closes: #870649) + + [CL] Drop problematic missing-classpath check. (Closes: #857123) + * checks/menu-format.desc: + + [CL] Prevent false positives in desktop-entry-lacks-keywords-entry + for "Link" and "Directory" .desktop files. (Closes: #873702) + + [CL] Add reference to Policy 9.6 for the + command-in-menu-file-and-desktop-file tag. (Closes: #871008) + * checks/python.{pm,desc}: + + [CL] Split out Python checks from "scripts" check to a new, source + check of type "source". + + [CL] Check for python-foo without corresponding python3-foo packages + to assist in Python 2.x deprecation. (Closes: #870681) + + [CL] Check for packages that Build-Depend on python-sphinx only. + (Closes: #870730) + + [CL] Check for packages that alternatively Build-Depend on the + Python 2 and Python 3 versions of Sphinx. (Closes: #870758) + + [CL] Check for binary packages that depend on Python 2.x. + (Closes: #870822) + * checks/scripts.pm: + + [CL] Correct false positives in + unconditional-use-of-dpkg-statoverride by detecting "if !" as a + valid shell prefix. (Closes: #869587) + + [CL] Check for missing calls to dpkg-maintscript-helper(1) in + maintainer scripts. (Closes: #872042) + + [CL] Check for packages using sensible-utils without declaring a + dependency after its split from debianutils. (Closes: #872611) + + [CL] Warn about scripts using "nodejs" as an interpreter now that + nodejs provides /usr/bin/node. (Closes: #873096) + + [BR] Add a statistic tag giving interpreter. + * checks/testsuite.{desc,pm}: + + [CL] Remove recommendations to add a "Testsuite: autopkgtest" field + to debian/control as it is added when needed by dpkg-source(1) + since dpkg 1.17.1. (Closes: #865531) + + [CL] Warn if we see an unnecessary "Testsuite: autopkgtest" header + in debian/control. + + [NT] Recognise "autopkgtest-pkg-go" as a valid test suite. + + [CL] Recognise "autopkgtest-pkg-elpa" as a valid test suite. + (Closes: #873458) + + [CL] Recognise "autopkgtest-pkg-octave" as a valid test suite. + (Closes: #875985) + + [CL] Update the description of unknown-testsuite to reflect that + "autopkgtest" is not the only valid value; the referenced URL + is out-of-date (filed as #876008). (Closes: #876003) + + * data/binaries/embedded-libs: + + [RG] Detect embedded copies of heimdal, libgxps, libquicktime, + libsass, libytnef, and taglib. + + [RG] Use an additional string to detect embedded copies of + openjpeg2. (Closes: #762956) + * data/fields/name_section_mappings: + + [BR] node- package section is javascript. + + [CL] Apply patch from Guillem Jover to add more section mappings. + (Closes: #874121) + * data/fields/obsolete-packages: + + [MR] Add dh-systemd. (Closes: #872076) + * data/fields/perl-provides: + + [CL] Refresh perl provides. + * data/fields/virtual-packages: + + [CL] Update data file from archive. This fixes a false positive for + "bacula-director". (Closes: #835120) + * data/files/obsolete-paths: + + [CL] Add note to /etc/bash_completion.d entry regarding stricter + filename requirements. (Closes: #814599) + * data/files/privacy-breaker-websites: + + [BR] Detect custom donation logos like apache. + + [BR] Detect generic counter website. + * data/scripts/interpreters: + + [CL] Add node as a known interpreter. Thanks to Julien Puydt for the + bug report. (Closes: #872699) + * data/spelling/corrections: + + [CL] Avoid false positives in spelling-error-in-{binary,manpage} for + "CAs" which was annoying for cryptographic software. (Closes: #871791) + * data/standards-version/release-dates: + + [CL] Add 4.0.1 and 4.1.0 as known standards versions. + (Closes: #875509) + + * debian/control: + + [CL] Mention Debian Policy v4.1.0 in the description. + + [CL] Add myself to Uploaders. + + [CL] Drop unnecessary "Testsuite: autopkgtest"; this is implied from + debian/tests/control existing. + + * commands/info.pm: + + [CL] Add a --list-tags option to print all tags Lintian knows about. + Thanks to Rajendra Gokhale for the suggestion. (Closes: #779675) + * commands/lintian.pm: + + [CL] Apply patch from Maia Everett to avoid British spelling when + using en_US locale. (Closes: #868897) + + * lib/Lintian/Check.pm: + + [CL] Stop emitting {maintainer,uploader}-address-causes-mail-loops + for @packages.debian.org addresses. (Closes: #871575) + * lib/Lintian/Collect/Binary.pm: + + [NT] Introduce an "auto-generated" argument for "is_pkg_class". + * lib/Lintian/Data.pm: + + [CL] Modify Lintian::Data's "all" to always return keys in insertion + order, dropping dependency on libtie-ixhash-perl. + + * helpers/coll/objdump-info-helper: + + [CL] Apply patch from Steve Langasek to accommodate binutils 2.29 + outputting symbols in a different format on ppc64el. + (Closes: #869750) + + * t/tests/fields-perl-provides/tags: + + [CL] Update expected output to match new Perl provides. + * t/tests/files-privacybreach/*: + + [CL] Add explicit test for packages including external fonts via + the Google Font API. Thanks to Ian Jackson for the report. + (Closes: #873434) + + [CL] Add explicit test for packages including external fonts via + the Typekit API via <script/> HTML tags. + * t/tests/*/desc: + + [CL] Add missing entries in "Test-For" fields to make + development/testing workflow less error-prone. + + * private/generate-tag-summary: + + [CL] git-describe(1) will usually emit 7 hexadecimal digits as the + abbreviated object name. However, as this can be user-dependent, + pass --abbrev=0 to ensure it does not vary between systems. This + also means we do not need to strip it ourselves. + * private/refresh-*: + + [CL] Use deb.debian.org as the default mirror. + + [CL] Update locations of Contents-<arch> files; they are now + namespaced by distribution (eg. "main"). + + -- Chris Lamb <lamby@debian.org> Wed, 20 Sep 2017 09:25:06 +0100 + +lintian (2.5.52) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - appstream-metadata-in-legacy-location + - appstream-metadata-legacy-format + - appstream-metadata-malformed-modalias-provide + - appstream-metadata-missing-modalias-provide + - copyright-contains-automatically-extracted-boilerplate + - copyright-year-in-future + - debian-rules-sets-DEB_BUILD_OPTIONS + - elf-maintainer-script + - emacsen-common-without-dh-elpa + - file-contains-fixme-placeholder + - gobject-introspection-package-missing-depends-on-gir-depends + - manpage-has-overly-generic-name + - orig-tarball-missing-upstream-signature + - package-installs-deprecated-upstart-configuration + - udev-rule-missing-subsystem + - udev-rule-missing-uaccess + - udev-rule-unreadable + - unconditional-use-of-dpkg-statoverride + - useless-autoreconf-build-depends + + Removed: + - copyright-contains-dh-make-perl-boilerplate + - package-depends-on-multiple-tkx-versions + - restriction-formula-with-debhelper-without-debhelper-version + - restriction-formula-without-versioned-dpkg-dev-dependency + + * checks/appstream-metadata.{desc,pm}: + + [NT] New check by Petter Reinholdtsen. + * checks/changelog-file.desc: + + [AB] Fix typo "%gt;" vs ">". + + [CL] Expand the rationale for the + latest-debian-changelog-entry-without-new-date tag to mention + possible implications for SOURCE_DATE_EPOCH/reproducible builds. + * checks/control-file.pm: + + [NT] Remove check for missing versioned build-depends for dpkg + and debhelper when using Build-Profiles. The necessary versions + are now in oldstable. + + [CL] Add check for GObject Introspection packages that are missing + binary dependencies on ${gir:Depends}. (Closes: #860801) + * checks/changes-file.{desc,pm}: + + [CL] Check for the presence of an .asc signature if an upstream + signing key is present. (Closes: #833585) + * checks/copyright-file.{desc,pm}: + + [CL] Rename copyright-contains-dh-make-perl-boilerplate to + copyright-contains-automatically-extracted-boilerplate as it can + be generated by other tools such as dh-make-elpa. Thanks to Sean + Whitton for the report. (Closes: #841832) + + [CL] Check for years that are later than the last entry added to + debian/changelog. (Closes: #807461) + * checks/cruft.{desc,pm}: + + [CL] Clarify language of source-contains-prebuilt-ms-help-file + description; there exists free software to generate .chm files. + + [CL] Don't emit source-contains-prebuilt-ms-help-file for files + generated by Halibut. (Closes: #867673) + + [CL] Move r-data-without-readme-source to check the source package, + no the binary; the expected README.source files are not installed + in binary packages. (Closes: #866322) + + [CL] Apply patch from Dylan Aïssi to also check for .RData files + (not just .Rdata) files in r-data-without-readme-source. + (Closes: #868178) + + [CL] Check for "FIXME" and similar placeholders in various files + under debian/. (Closes: #846009) + * checks/debhelper.{desc,pm}: + + [CL] Check for useless build-dependencies on dh-autoreconf or + autotools-dev under compat levels 10 or higher. (Closes: #844191) + * checks/elpa.{desc,pm}: + + [NT] Apply patch from Sean Whitton to add elpa related checks. + (Closes: #867042) + * checks/fields.{desc,pm}: + + [NT] Remove check for missing versioned build-depends for dpkg + and debhelper when using Build-Profiles. The necessary versions + are now in oldstable. + + [NT] Drop check for depending on multiple versions of tkx as + tkx does not seem to be in Debian any longer. + * checks/files.pm: + + [CL] Add .yml to the list of file extensions to avoid false + positives when emitting extra-license-file, with testcase. Thanks + to Rene Engelhard for the report. (Closes: #856137) + + [CL] Check for packages containing upstart configuration under + /etc/init. Thanks to Paul Wise for the report. (Closes: #825348) + * checks/init.d.desc: + + [CL] Add an example snippet to explain how to prevent emission + of init.d-script-sourcing-without-test. + * checks/manpages.{desc,pm}: + + [CL] Check for overly-generic filenames such as README.3pm.gz. + (Closes: #792846) + * checks/menu-format.desc: + + [ADB] Fix formatting of desktop-entry-lacks-icon-entry + * checks/scripts.desc: + + [CL] Upgrade new-package-should-not-package-python2-module from + I: to W:. See #829744 for more info. + + [CL] Clarify wording in new-package-should-not-package-python2-module + to make the justification clearer. + + [CL] Check for calls to dpkg-statoverride --add without a + corresponding --list. (Closes: #652963) + + [CL] Add missing "contains" verb to the description of the + debhelper-autoscript-in-maintainer-scripts tag. + + [CL] Emit new "elf-maintainer-script" classification tag if + debian/postinst (etc.) is an ELF binary. + * checks/rules.desc: + + [CL] Clarify wording in debian-rules-parses-dpkg-parsechangelog to + make the justification clearer. (Closes: #865882) + + [CL] Check for files setting DEB_BUILD_OPTIONS instead of + DH_BUILD_MAINT_OPTIONS. (Closes: #833691) + * checks/udev.{desc,pm}: + + [NT] New check by Petter Reinholdtsen. + * checks/watch-file.pm: + + [CL] Factor out hard-coded list of possible upstream key locations + to the "common/signing-key-filenames" Lintian::Data resource. + + [CL] Add "repack" (along with "dfsg" etc.) to identify a repacked + upstream tarball. (Closes: #871957) + + * collection/scripts: + + [CL] Check that non-ELF maintainer scripts start with #!. + (Closes: #843428) + + * commands/lintian.pm: + + [NT] Attempt to clean up on SIGTERM (like with SIGINT). + + [CL] Allow the use of suppress-tags=<tag>[,<tag>[,<tag>]] in + lintianrc. (Closes: #764486) + * commands/reporting-html-reports: + + [NT] Enable re-use of the memory for the maintainer mapping once the + log file as been parsed. + + [CL] Consistently use the same "Debian style" RFC 822 date format for + both "Mirror timestamp" and "Last updated" on the index page. + (Closes: #828720) + * commands/reporting-sync-state: + + [NT] Re-encode checksums into base64 encoded strings (from hex). + This reduces size per checksum by about ~30% (disk and memory). This + reduction is also applicable to other reporting tools that loads the + harness cache. + + * data/cruft/non-free-files: + + [CL] Match more Lena Söderberg images. Thanks to Lumin + <cdluminate@gmail.com> and Dylan Aïssi <bob.dybian@gmail.com>. + (Closes: #827941) + * data/fields/build-profiles: + + [NT] Add patch from Mattia Rizzolo to update the list of known build + profiles, adding «nolua» and «noruby». + * data/spelling/corrections: + + [AB] Remove "iff". It's a valid English word. (Closes: #865055) + + * debian/control: + + [NT] Add (Build-)Depends on libxml-simple-perl for the new + appstream-metadata check. + + [NT] Apply patch from Sean Whitton to add a Build-Depends on dh-elpa + for a test. + + [NT] Prefer default-jdk-headless to default-jdk when available. + * debian/rules: + + [JW, NT] Post process HTML docmentation to set the charset to UTF-8, + which fixes mojibake in the Debian Policy Manual links. Thanks to + Paul Hardy for finding a solution to the problem. + (Closes: #802721) + + [NT] Override dh_autoreconf tools as they are not used (but need to + scan over all files in the source package). + + * lib/Lintian/Collect/Source.pm: + + [CL] Improve support for "3.0 (git)" packages. They are still marked + as unsupported-source-format as they are not accepted by the Debian + archive. (Closes: #605999) + * lib/Lintian/Util.pm: + + [NT] Fix uninitialized warning if a fork call fails. + + * profiles/debian/main.profile: + + [NT] Enable appstream-metadata + udev check by default. + (Closes: #841670) + + * t/tests/spelling-general/debian/debian/copyright: + + [CL] Add regression test for #844166. + + -- Niels Thykier <niels@thykier.net> Sun, 23 Jul 2017 07:18:06 +0000 + +lintian (2.5.51) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-control-has-dbgsym-package + - debian-control-has-obsolete-dbg-package + - debian-rules-parses-dpkg-parsechangelog + - desktop-entry-lacks-icon-entry + - distribution-and-changes-mismatch + - distribution-and-experimental-mismatch + - gir-in-arch-all-package + - gir-missing-typelib-dependency + - gir-section-not-libdevel + - multiarch-foreign-shared-library + - r-data-without-readme-source + - readme-source-is-dh_make-template + - repeated-trigger-name + - systemd-service-file-refers-to-obsolete-bindto + - testsuite-autopkgtest-missing + - typelib-in-arch-all-package + - typelib-missing-gir-depends + - typelib-not-in-multiarch-directory + - typelib-package-name-does-not-match + - typelib-section-not-introspection + - unknown-trigger + - unreleased-changes + - uses-implicit-await-trigger + + Removed: + - ancient-autotools-helper-file + - init.d-script-missing-dependency-on-remote_fs + - maintainer-script-should-not-use-ancient-dpkg-epoch-check + - maintainer-script-should-not-use-ancient-dpkg-multi-conrep-check + - outdated-autotools-helper-file + - package-would-benefit-from-build-arch-targets + - suidregister-used-in-maintainer-script + + * checks/binaries.{desc,pm}: + + [NT] Apply patch from Adrian Bunk to bump severity of the + hardening-no-pie to a W-tag and improve the tag description. + (Closes: #856155) + + [NT] Apply patches from Michael Stapelberg to improve handling + of golang binaries. (Closes: #857654, #857655, #857656) + * checks/changelog-file.pm: + + [BR] Check also bug over 1000000 as improbable. Bug below + 50004 are not archived and are thus improbable. + * checks/changes-file.{desc,pm}: + + [BR] Apply patch by Simon McVittie to detect unreleased package + uploaded to unstable and mismatched .changes and + Changes: distribution. (Closes: #540294). + * checks/control.{desc,pm}: + + [BR] Detect dbgsym package in control file. (Closes: #858117). + + [BR] Warn about obsolete -dbg package. + * checks/cruft.{desc,pm}: + + [BR] Document long line tagged source-is-missing as a feature + not a bug. (Closes: #849470). + + [BR] Correct a typo in description of tag + license-problem-convert-utf-code. + + [BR] Avoid a false positive in gfdl file detection. + + [NT] Drop tags about outdated autotools config.guess and + config.sub files. These days debhelper automatically updates + them when people use the dh-sequencer and the check is not + geared for more thorough analysis. (Closes: #848878) + + [CL] Check that README.source is not the dh_make template. + (Closes: #633850) + * checks/debian-readme.{desc,pm}: + + [NT] Locate the README.Debian using the index rather than relying + on a collection. + * checks/fields.pm: + + [BR] Enforce naming convention for debug package. (Closes: #645455). + + [NT] Avoid proposing "/git/git/" as a part of the canonical URL for + anonscm.debian.org. Thanks to Andreas Beckmann for spotting the + bug. (Closes: #851215) + + [NT] Apply patch from Dylan Aïssi to recommend "javascript" section + for libjs packages. Previously, lintian would recommend "web". + (Closes: #863386) + * checks/files.pm: + + [BR] Do not report duplicates for package-installs-apt-preferences + and package-installs-apt-sources. (Closes: #814521). + + [NT] Apply patch from Helmut Grohne to detect some possible invalid + uses of "Multi-Arch: foreign". (Closes: #856975) + + [NT] Improve the empty-binary-package tag by adding more common + files that should be ignored. Thanks to Helmut Grohne for all the + research behind it. (Closes: #856857) + + [BR] Detect symlink pointing to builddir. (Closes: #860419) + + [CL] Detect RData without README.source. (Closes: #815233) + + [NT] Remove work around for segmentation faults in t1disasm from + t1utils (<< 1.38-4~). Given Jessie is the minimum supported Debian + version, we can now assume t1utils to be (>= 1.38-4). + * checks/gir.{desc,pm}: + + [NT] Add check for gir packages written by Simon McVittie. + (Closes: #695345) + * checks/init.d.{desc,pm}: + + [NT] Remove check for init.d scripts accessing /usr without a + $remote_fs dependency as /usr must now be mounted by the initramfs. + (Closes: #829649) + * checks/menu-format.{desc,pm}: + + [NT] Update the reference to Desktop Entry Specification to point + to version 1.1. + + [NT] Apply patch from Laurent Bigonville to check desktop files + for missing "Icon" field. (Closes: #854132) + * checks/rules.{desc,pm}: + + [NT] Drop "package-would-benefit-from-build-arch-targets". The + dpkg-buildpackage refuses to build packages that trigger this tag. + Also, the tag implies two other "W" tags so contributors are still + notified of a potential problem. + + [CL] Check for manual parsing of dpkg-parsechangelog output now that + we have /usr/share/dpkg/pkg-info.mk. + * checks/scripts.{desc,pm}: + + [NT] Apply patch from Christopher Hoskin to except -doc packages + from the "new-package-should-not-package-python2-module" tag. + (Closes: #855243) + + [NT] Remove references to tags about calling suidregister, + dpkg --assert-working-epoch, and dpkg --assert-multi-conrep from + maintainer scripts. + * checks/systemd.{desc,pm}: + + [NT] Apply patch from Michael Biebl to warn about deprecated + "BindTo" option in systemd service files. (Closes: #857194) + * checks/testsuite.{desc,pm}: + + [NT] Apply patch from Lucas Kanashiro to add a tag for recommending + packagers to create an autopkgtest for their package. + (Closes: #859467) + + [NT] Fix false-positive "missing-runtime-test-file" when the + "Tests-Directory" field is set to a single dot. Thanks to + Ian Jackson for reporting the issue. (Closes: #849880) + * checks/triggers.{desc,pm}: + + [NT] New check. (Closes: #698723) + * checks/upstream-metadata.pm: + + [JW, NT] Disable YAML parsing of upstream metadata file as the YAML + parser executes code. (Closes: #861958, CVE-2017-8829) + * checks/watch-file.pm: + + [NT] Apply patch from Alexander Kulak to handle whitespace correctly + in the options in v4 watch files. (Closes: #861599) + + * coll/debian-readme{,desc}: + + [NT] Remove. Merge what little functionality it offers into the + debian-readme check. + + * commands/{lintian => lintian.pm}: + + [NT] Turn the lintian frontend into a dplint command module to avoid + code duplication. + * commands/reporting-*: + + [NT] Rewrite the config file handling. The reporting framework now + uses a YAML configuration file instead of a perl script. + + [NT] Support processing packages from multiple archives and different + suites in these archives. This enables lintian.d.o to also process + dbgsym packages. (Closes: #856312) + + * data/changes-file/known-dists: + + [NT] Add buster and remove squeeze. + * data/common/source-fields: + + [NT] Add new "Testsuite-Restrictions" field. + * data/files/privacy-breaker-websites: + + [BR] Add digit.com as tracker. + + [BR] Add static.ak.fbcdn.net as facebook. + + [BR] Add forkme as logo. + * data/files/standard-files: + + [NT] Add more common files based on feedback from Helmut Grohne. + * data/obsolete-sites/obsolete-sites: + + [BR] Apply patch from Hideki Yamane in order to warn about + fedorahosted. (Closes: #856954). + + [NT] Apply patch from Hideki Yamane to warn about codeplex.com + closing down. (Closes: #859412). + * data/scripts/interpreters: + + [NT] Add stap as a known interpreter. Thanks to gustavo panizzo + for the suggestion. (Closes: #858326) + * data/scripts/maintainer-script-bad-command: + + [NT] Remove check for suidregister, dpkg --assert-working-epoch, and + dpkg --assert-multi-conrep. None of these trigger any tags in the + archive any longer and the (new) features have been available for + 8+ years. + * data/spelling/corrections: + + [NT] Apply patches from Edward Betts to fix bugs in the correction + word lists. (Closes: #852005, #852084) + + [NT] Apply patch from Edward Betts to remove corrections for + "targetted" and "targetting" as they are valid alternative + spellings in AU. (Closes: #852145) + + [EB] Add some more spelling corrections. (Closes: #852369, #852404, + #852407, #852409, #852410, #852411, #852413, #852414, #852416, + #852419, #852421, #852426) + + [CL] Add "none were" -> "none was" multiword spelling correction. + (Closes: 860558) + * data/standards-version/release-dates: + + [NT] Add 4.0.0 as a known standards version along with its release + date. + + * debian/control: + + [NT] Add explicit (Build-)Depends on dpkg (>= 1.17.14) to make it + explicit that we no longer support Wheezy or older. + + [NT] Drop versioned dependencies that are there to assist to + Wheezy. + + [NT] Mention Debian Policy v4.0.0 in the description. + + [NT] Bump Standards-Version to 4.0.0 - no changes required. + * debian/copyright: + + [EB] Add Edward Betts. + + * frontend/dplint: + + [NT] Ensure all include directories are absolute before passing + them on to the actual command. + + [NT] Work around a "Bizarre Copy" bug in perl that could trigger + on errors. + + * lib/Lintian/CheckScript.pm: + + [NT] Remove fallback code for "old" style "pm"-less checks. + * lib/Lintian/Util.pm: + + [NT] Drop dpkg_deb_has_ctrl_tarfile. Lintian now assumes that + dpkg 1.17.14 is available (provided by Debian jessie or later). + + * reporting/{config => config.yaml}: + + [NT] Rewrite the reporting config template into the new YAML format. + * reporting/graphs/tags.gpi: + + [NT] Tweak tags.gpi so it works with gnuplot 5. + * reporting/templates/{index.tmpl,lintian.css.tmpl}: + + [NT] Update to support multiple archives. + + * t/*: + + [NT] Drop "Test-Depends" from tests where the versions in Debian + jessie will satisfy the dependency. + + [NT] Update tests to fix FTBFS caused by dpkg-source now ignoring + debian/files by default. (Closes: #863020) + * t/runtests: + + [NT] Re-sort test output after running the "post_test" sed script + on the output. This prevent test failures caused by the order + changing on different architectures prior to the sed script is run + (assuming the sed script otherwise normalises the differences + correctly). + * t/tests/cruft-general-upstream/pre_upstream: + + [EB] Fix failing tests by making the fake flash object more + convincing. The most recent version of libmagic uses a more precise + definition of the data within a flash file. (Closes: #852891) + * t/tests/java-jars: + + [NT] Provide a more convincing corrupt .zip file that also fools + file 5.30. + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [CW] Add zesty. + + [NT] Apply patch from "Unit 193" to add "devel" as a known Ubuntu + distribution. (Closes: #861509) + + [NT] Add artful. + + -- Niels Thykier <niels@thykier.net> Sun, 18 Jun 2017 07:57:57 +0000 + +lintian (2.5.50) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - invalid-value-in-built-using-field + - license-problem-convert-utf-code + - new-package-should-not-package-python2-module + - php-script-but-no-php-cli-dep + - php-script-with-unusual-interpreter + + Removed: + - php-script-but-no-phpX-cli-dep + + * checks/binaries.{desc,pm}: + + [NT] Handle RUNPATH like we handle RPATH. (Closes: #844903) + + [NT] Update hardening-no-pie description to reflect that + PIE is on by default in Debian. + * checks/cruft.desc: + + [BR] Detect utf convert non free code. + (Closes: #843595) + * checks/deb-format.pm: + + [NT] Permit uncompressed {control,data}.tar members plus xz + compressed control.tar files in deb files. Thanks to + Guillem Jover for the report. (Closes: #834867) + * checks/debhelper.pm: + + [BR] Apply patch from Yann Soubeyrand : + "Allow debhelper "--with" addons to be quoted". + (Closes: #839822) + * checks/files.{desc,pm}: + + [NT] Check for invalid clauses in "Built-Using" fields. Thanks to + Andrey Rahmatullin for the suggestion. (Closes: #847558) + + [NT] Apply patch from Josh Triplett to add new sections to + descriptions. + * checks/files.desc: + + [NT] Document that we no longer accept "virtual packages" + for deliberately empty packages. If your package receives + an "empty-binary-package" tag, please replace the use of + "virtual package". + * checks/{files,scripts}.pm: + + [NT] Apply patch from Josh Triplett to exclude files under + /usr/share/cargo/registry/ from a few checks as that directory + contains unmodified upstream sources. (Closes: #845201) + * checks/manpages.pm: + + [JW, NT] Fix false negative manpage-named-after-build-path + for packages built by sbuild. (Closes: #801760) + * checks/scripts.{desc,pm}: + + [JW, NT] Apply patch from Antonio Ospite that updates the + test for php scripts without a php-cli dependency. Thanks + to Ondřej Surý for the report and Mathieu Parent for the + initial patch. (Closes: #818962) + + [CL, NT] Warn about new source packages providing a python2 + package as EOL for python2 is expected in 2020, which is + before buster's expected EOL. (Closes: #829744) + + * collection/objdump-info.desc: + + [NT] Bump version due to RUNPATH collection. + + * commands/lintian: + + [NT] Deprecate --fail-on-warnings, which will be removed in + Debian/buster. + + * data/binaries/embedded-libs: + + [BR] Allow openssl1.0 as source package. (Closes: #843406). + * data/debhelper/dh_commands-manual: + + [NT] Apply patch from Piotr Ożarowski that ensure that + consumers of dh_python2 Build-Depends on dh-python. + (Closes: #740161) + * data/fields/archive-sections: + + [NT] Apply patch from Josh Triplett to add javascript and + rust sections. (Closes: #847535) + * data/files/privacy-breaker-websites: + + [BR] Detect more logos. + * data/scripts/interpreters: + + [NT] Apply patch from Antonio Ospite to correct a false + positive warning for python scripts using python2 in the + shebang line. Thanks to Per Andersson for the report and + Luca Boccassi for the initial patch for solving this. + (Closes: #743599) + * data/spelling/corrections: + + [PW] Add more corrections. + * data/spelling/corrections-case: + + [EG] Correct spelling of Lua (Closes: #842781) + + * helpers/coll/objdump-info-helper: + + [NT] Extract RUNPATH from binaries as well. + + * lib/Lintian/Collect/Binary.pm: + + [NT] Expose RUNPATH when set in the binary. + + [NT] Remove "virtual package" from the list of phrases + marking a package as a meta-package. Thanks to Stuart + Prescott for the report. (Closes: #685029) + + * profiles/kali/main.profile: + + [NT] Add a profile for Kali Linux. Thanks to Raphaël + Hertzog for the report. (Closes: #847318) + + * vendors/kali/main/data/changes-file/known-dists: + + [NT] Add data file for Kali Linux. + + -- Niels Thykier <niels@thykier.net> Mon, 26 Dec 2016 16:07:20 +0000 + +lintian (2.5.49) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - homepage-for-bioconductor-package-not-canonical + + * checks/debhelper.desc: + + [CL] Drop double leading spaces in includes-maint-script-parameters + paragraph that was causing indentation when rendered on lintian.d.o. + * checks/fields.{pm,desc}: + + [NT] Apply patch from Dylan Aïssi to tag non-canonical uses of + the bioconductor homepage in the Homepage field. (Closes: #839874) + + [JW] Apply patch from Dylan Aïssi to tag r-other packages not in + section "gnu-r". (Closes: #841455) + * checks/init.d.pm: + + [JW] Don't require version constraint for lsb-base dependencies. + The needed version has been available for many stable releases. + * checks/shared-libs.pm: + + [JW] Don't complain about executable bit for ld.so shipped in + multi-arch directories. + + [JW] Don't complain about missing SONAME for position-independent + executables. Thanks to Reuben Thomas for the bug report. + (Closes: #731987) + + [JW] Check for PT_GNU_STACK existence on all architectures. + * checks/source-copyright.pm: + + [RA, JW] Fix handling punctuation characters in license expressions + in machine-readable copyright files. (Closes: #841356) + * checks/watch-file.pm: + + [JW] Assume that watch files containing the pgpmode option (different + than "none") verify upstream signature. Thanks to Robert Luberda for + the bug report. (Closes: #841000) + + * data/cruft/non-distributable-files: + + [BR] Add some rapidjson files. + * data/debhelper/compat-level: + + [NT] Bump the deprecated debhelper compat level to match the one + in debhelper. + * data/files/privacy-breaker-tag-attr: + + [BR] Apply patch from Frederic Bonnard detecting audio tags. + (Closes: #840009) + * data/spelling/corrections*: + + [JW, PW] Add more corrections. + + * lib/Lintian/Unpacker.pm: + + [NT] Use the new "do_fork()" sub to ensure works do not inherit + the default signal handler, which could allow any number of workers + to promote themselves to independent "masters" - effectively + creating a fork-bomb with an ill-timed signal. + * lib/Lintian/Util.pm: + + [NT] Add a "do_fork()" sub to ensure signal handling is + reset for child processes. + + [NT] Add $PKGVERSION_REGEX variable containing a regex matching + valid versions. + + * t/tests/shared-libs-non-pic-i386/debian/Makefile: + + [JW] Pass -fno-PIE and -fno-pie to GCC, so that the test works even + when the compiler enables PIE by default. (Closes: #841442) + + -- Niels Thykier <niels@thykier.net> Sat, 22 Oct 2016 13:42:28 +0000 + +lintian (2.5.48) unstable; urgency=low + + * Summary of tag changes: + + Added: + - file-name-contains-wildcard-character + - homepage-for-cran-package-not-canonical + - init.d-script-needs-depends-on-lsb-base + - maintscript-includes-maint-script-parameters + + Removed: + - hardening-no-stackprotector + + * checks/binaries.{desc,pm}: + + [NT] Rewrite/embed the necessary bits from hardening-check to + implement the default hardening-no-* checks directly in lintian. + This is because hardening-check appears to be losing its + "home" with the coming removal of hardening-wrapper and + hardening-includes. (Closes: #836756) + + [JW] Remove the hardening-no-stackprotector tag. + + [NT] Allow "golang-any" as an alternative to "golang-go" in + Build-Depends for detecting golang binaries. Thanks to + Martín Ferrari for the report and the initial patch. + (Closes: #839228) + * checks/changelog-file.{desc,pm}: + + [JW] Bump threshold for improbable bug number to 2000. + * checks/control-file.{desc,pm}: + + [JW] Add references to tags related to build profiles. + + [JW] Relax Build-Profiles syntax check to allow (almost) any + characters in profile names. Thanks to Ximin Luo for the bug report. + (Closes: #839086) + + [JW] Add support for pkg.<srcpkg>.<anything> build profiles. + * checks/debhelper.pm: + + [JW] Ignore comments in debian/rules. + + [JW] Fix parsing rule targets in lines containing multiple colons. + Thanks to Andreas Beckmann for the bug report. (Closes: #838246) + + [CL] Check for .maintscript files that include + "maint-script-parameters". (Closes: #838195) + + [NT] Fix typo that prevented lintian from detecting uses of the + dhmk build-system. + * checks/fields.{desc,pm}: + + [JW] Fix typo. + + [JW] Add references to tags related to build profiles. + + [JW] Add support for pkg.<srcpkg>.<anything> build profiles. + + [JW] Demote tags for build-depends related to build profiles to + pedantic, as the required packages are available in stable. + Thanks to Helmut Grohne for the bug report. (Closes: #831633) + + [NT] Apply patch from Dylan Aïssi to tag r-bioc packages not in + section "gnu-r". (Closes: #839263) + + [NT] Apply patch from Dylan Aïssi to tag non-canonical uses of + the cran homepage in the Homepage field. (Closes: #839553) + * checks/files.{desc,pm}: + + [CL, NT] Tag usages of shell wildcard characters in file names. + (Closes: #814326) + * checks/init.d.{desc,pm}: + + [CL, NT]: Emit a tag for initscripts that source the + /lib/lsb/init-functions utility functions without declaring the + corresponding dependency on lsb-base (>= 3.0-6). + (Closes: #838997) + * checks/shared-libs.desc: + + [JW] Fix typos. + * checks/testsuite.pm: + + [JW] Apply patch from Sean Whitton to recognise autopkgtest-pkg-elpa + as a valid value for the Testsuite field. (Closes: #837801) + + * collection/hardening-info: + + [NT] Removed. + + * data/fields/build-profiles: + + [JW] Add new profiles: nogolang, nojava, noperl, nopython, noudeb. + * data/fields/obsolete-packages: + + [NT] Apply patch from Otto Kekäläinen to assist with the transition + to the "default-mysql-*" packages. (Closes: #838603) + * data/fields/perl-provides: + + [NT] Refresh perl provides. + * data/files/js-libraries: + + [BR] Apply patch from Jean-Michel Vourgère to add detection of + libjs-jquery-migrate-1. (Closes: #823627) + * data/files/php-libraries: + + [JW] Apply patch from Marcelo Jorge Vieira to update package name + for php-gettext. (Closes: #837502) + * data/spelling/corrections: + + [JW, PW] Add more corrections. + + * debian/control: + + [NT] Drop dependencies on hardening-includes as we no longer need + hardening-check. + * debian/copyright: + + [JW] Add Paul Wise. + + [JW] Remove now-unneeded separate entry for spellintian.t. + + [JW] Update copyright years. + + [CL] Add Chris Lamb. + + * helpers/coll/hardening-info-helper: + + [NT] Removed. + * helpers/coll/objdump-info-helper: + + [NT] Expose a few more bits from readelf needed to implement some + of the hardening checks. + + * lib/Lintian/Collect/Binary.pm: + + [NT] Expose a few more bits from readelf needed to implement some + of the hardening checks. + + * profiles/debian/extra-hardening.profile: + + [NT] Removed - we no longer support the stackprotector tag. + * profiles/debian/ftp-master-auto-reject.profile: + + [JW] Refresh against current rule set. + * profiles/debian/main.profile: + + [JW] Stop disabling the hardening-no-stackprotector tag. + + * t/scripts/spellintian.t: + + [JW] Relicense as GPLv2+, like the rest of Lintian. + + -- Niels Thykier <niels@thykier.net> Tue, 04 Oct 2016 19:37:17 +0000 + +lintian (2.5.47) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - package-contains-python-coverage-file + + * checks/changelog-file.desc: + + [JW] Fix typo. + * checks/copyright-file.pm: + + [JW] Stop using Data::Alias. Thanks to Niko Tyni for the bug report. + (Closes: #834797) + * checks/cruft.desc: + + [JW] Fix typo. + * checks/debhelper.pm: + + [NT] Remove logic for CDBS creating a compat file when it is absent + as debhelper now requires a compat file unconditionally. + + [NT] Support the new named compat levels in debhelper. + + [NT] Apply patch from Chris Lamb to improve the tag for typoed + debhelper override targets. (Closes: #834370) + * checks/duplicate-files.desc: + + [JW] Fix typo. + * checks/fields.{desc,pm}: + + [JW] Fix typos. + + [JW] Escape dots in some regexps. + + [NT] Apply patch from Chris Lamb to check that libjs-* packages + are in the "web" section. (Closes: #798983) + * checks/files.{desc,pm}: + + [JW] Fix typos. + + [NT] Apply patch from Chris Lamb to catch ".coverage" files in + packages. (Closes: #831864) + * checks/java.desc: + + [JW] Fix typo. + * checks/patch-systems.desc: + + [JW] Fix formatting of some filenames. + * checks/phppear.{desc,pm}: + + [JW] Fix typo. + + [NT] Apply patch from Jochen Sprickerhof to skip this check if the + package does not contain any php files. (Closes: #805076) + * checks/rules.desc: + + [JW] Fix typo. + + [JW] Fix tag description formatting. + * checks/shared-libs.desc: + + [JW] Fix typos. + * checks/systemd.{desc,pm}: + + [NT] Apply patches from Chris Lamb to fix some false positives with + systemd-service-file-missing-install-key. (Closes: #837057) + + * data/debhelper/compat-level: + + [NT] Bump debhelper compat versions with the release of debhelper + 10. + * data/debhelper/dh_{addons,commands}-manual: + + [JW] Add dh-autoreconf, which is now a dependency of debhelper. + Thanks to Michael Biebl for the bug report. (Closes: #835449) + * data/debhelper/named-compat-levels: + + [NT] New file. + * data/output/manual-references: + + [JW] Refresh. + * data/scripts/interpreters: + + [JW] Add pypy as a known interpreter. Thanks to Sebastian Ramacher + for the bug report. (Closes: #836017) + * data/spelling/corrections*: + + [JW] Add more corrections. + Thanks to Paul Wise for patches for some of them. + + * debian/control: + + [JW] Drop now-unused libdata-alias-perl from (Build-)Depends. + + * lib/Lintian/Relation/Version.pm: + + [NT] Apply change from Brendan O'Dea to avoid (implicitly) messing + with the global APT "_config" object. (Closes: #833656) + + * private/refresh-manual-refs: + + [JW] Fix path to Debian policy for Java. + + * reporting/templates/head.tmpl: + + [NT] Add subresource integrity fields to all <link> tags. + + [NT] Add Content-Security-Policy header (via <meta http-equiv>). + + -- Niels Thykier <niels@thykier.net> Sun, 11 Sep 2016 14:34:34 +0000 + +lintian (2.5.46) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - systemd-service-file-missing-install-key + - typo-in-debhelper-override-target + + Removed: + - package-depends-on-lower-priority-package + + * checks/cruft.pm: + + [NT] Ignore mentions of /usr/lib/perl5 in patches as they might + be a way of fixing said mentions. Thanks to Robert Luberda + for reporting the bug. (Closes: #802964) + * checks/debhelper.{desc,pm}: + + [JW] Apply patch from Chris Lamb to check for common typos in + debian/rules target names. (Closes: #832096) + + [JW, NT] Add some more (indirect) "dh" build-systems. + (Closes: #828773) + * checks/files.desc: + + [JW] Fix typos. + * checks/group-checks.{desc,pm}: + + [NT] Drop "lower priorities" check as the general consensus seems to + be that priorities changes are mostly busy work. Thanks to Dominic + Hargreaves for the report. (Closes: #823326) + * checks/infofiles.desc: + + [JW] Fix typo. + * checks/java.pm: + + [JW] Don't emit javalib-but-no-public-jars for transitional packages. + Thanks to Jeremy Bicha for the bug report. (Closes: #829047) + * checks/manpages.desc: + + [JW] Fix typos. + * checks/phppear.desc: + + [JW] Fix typos. + * checks/scripts.pm: + + [JW] Fix false positive unusual-interpreter when the script had + "#!/usr/bin/env" shebang and the interpreter was shipped in the same + package. Thanks to Sergio Durigan Junior for the bug report and the + initial patch. (Closes: #828933) + * checks/shared-libs.desc: + + [JW] Fix typo. + * checks/systemd.{desc,pm}: + + [JW] Fix typos. + + [JW, NT] Apply from Chris Lamb to check for a possibly missing + "WantedBy" target in service files. (Closes: #832771) + + [JW, NT] Improve wording about the "systemd" sequence of a tag. + * checks/version-substvars.desc: + + [JW] Make maybe-not-arch-all-binnmuable a classification tag. + * checks/watch-file.desc: + + [JW] Fix typo. + + * collection/*: + + [JW,NT] Remove "." from Perl's search path. (Mitigates: #588017) + + * commands/{info.pm,lintian}: + + [NT] Drop the necessary bits for supporting translated tag + descriptions. + * commands/lintian: + + [NT,JW] Remove "." from Perl's search path. (Mitigates: #588017) + * commands/reporting-html-reports.pm: + + [NT] Fix typo in named parameter that made the raw lintian.log + unavailable on lintian.debian.org. Thanks to Guillem Jover + for reporting the issue. (Closes: #828719) + + [NT] Install the lintian log file as a resource so it can be + handled (e.g. cached) like other resources. + * commands/reporting-lintian-harness.pm: + + [NT] Attempt to terminate the run timely if it overruns the time + limit. + * commands/reporting-sync-state.pm: + + [NT] Remove redundant "area" field from all binary packages in + the harness state cache. + + [NT] Drop existing instances of the "sha1" field from all packages + in the harness state cache. + + * data/common/source-fields: + + [NT] Apply patch from Edward Betts to add Testsuite-Triggers as + a known source field. (Closes: #829545) + * data/debhelper/*: + + [NT] Refresh against unstable. + * data/debhelper/dh_{addons,commands}-manual: + + [JW, NT] Add the systemd sequence and related tools now that + debhelper is taking over the dh-systemd helpers. Thanks to + Christian Hofstaedtler for the report. (Closes: #830930) + * data/fields/essential: + + [JW] Add init-system-helpers; remove sysvinit and mktemp. Thanks to + Felipe Sateler for the bug report. (Closes: #833015) + * data/fields/obsolete-packages: + + [NT] Remove "debmake" as the package is now reintroduced with a + different purpose. Thanks to Paul Wise for the report. + (Closes: #827158) + * data/files/fonts: + + [NT] Refresh against unstable. + * data/java/constants: + + [NT] Bump known java-class versions. Thanks to Hideki Yamane for + the report. (Closes: #829592) + * data/scripts/interpreters: + + [JW] Apply patch from Sergio Durigan Junior to add newLISP as a + known interpreter. (Closes: #828934) + * data/spelling/corrections: + + [JW] Add more corrections. + + * debian/control: + + [NT] Drop now unnecessary po4a Build-Dependency. + * debian/rules: + + [NT] Drop code for handling translations. + + * doc/lintian.xml: + + [JW] Fix typo. + + * frontend/dplint: + + [JW,NT] Remove "." from Perl's search path. (Mitigates: #588017) + + * helpers/coll/*: + + [JW,NT] Remove "." from Perl's search path. (Mitigates: #588017) + + * lib/*.pm: + + [NT] Drop support for translations of tag descriptions. It never + got used. + * lib/Lintian/*.pm: + + [JW] Fix typos. + * lib/Lintian/Tags.pm: + + [JW, NT] Fix mojibake in UTF-8 encoded comments for overrides. + (Closes: #833052) + * lib/Lintian/Util.pm: + + [NT] Shuffle the harness backlog a bit to reduce the risk of a lot + of very large package groups being scheduled in the same run. + + * man/lintian.pod.in: + + [JW] Fix typo. + + [JW] Remove unneeded "file:" in front of a pathname. + + * po4a: + + [NT] Drop as it was not used. + + * t: + + [JW,NT] Update tests to work now that dpkg validates + debian/tests/control. (Closes: #829635) + + [NT] Apply patch from Adam Conrad to make some tests work + when the compiler uses -fPIE by default. + + -- Niels Thykier <niels@thykier.net> Sat, 13 Aug 2016 19:53:23 +0000 + +lintian (2.5.45) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - build-depends-arch-without-arch-dependent-binary + - debhelper-autoscript-in-maintainer-scripts + - no-strong-digests-in-dsc + - testsuite-dependency-has-unparsable-elements + + Removed: + - build-depends-arch-without-arch-dependant-binary + - init.d-script-missing-lsb-description + + * checks/application-not-library.{desc,pm}: + + [JW] Use HTTPS for Alioth URLs. + + [AB] Don't emit application-in-library-section for packages starting + with "cpan", not only "cpanplus" and "cpanminus". + * checks/binaries.{desc,pm}: + + [NT] Rewrite description for hardening-no-bindnow. There + is no references to why bindnow would cause issues. + + [AB] Relax regexp for missing-dependency-on-perlapi to allow letters + inside the API name. Thanks Niko Tyni! (Closes: #823437) + * checks/debhelper.pm: + + [NT] The /usr/share/R/debian/r-cran.mk file implies + /usr/share/cdbs/1/rules/debhelper.mk. + * checks/fields.{desc,pm}: + + [JW] Fix typos. + + [AB] Add new check for weak checksums in source packages: + new tag no-strong-digests-in-dsc (Closes: #824916) + * checks/files.desc: + + [BR] Do not suggest unsupported Multi-arch: no. + (Closes: #816455) + + [JW] Fix typos. + * checks/files.pm: + + [JW] Fix false positive gzip-file-is-not-multi-arch-same-safe when + processing multiple debs. (Closes: #738444) + * checks/info-files.desc: + + [NT] Use "gzip -9n" rather than "gzip -9" in examples. + * checks/init.d.{desc,pm}: + + [JW] Fix typo. + + [NT] Remove tag for missing long LSB description in init scripts. + Thanks to Vincent Bernat for the report. (Closes: #825193) + * checks/manpages.desc: + + [NT] Use "gzip -9n" rather than "gzip -9" in examples. + * checks/patch-systems.pm: + + [NT] Emit a separate tag for each patched file instead of bundling + them all together. This allows individual instances to be + overridden. Thanks to Nathan Summers for the report. + (Closes: #541491) + * checks/scripts.{desc,pm}: + + [NT] Add tracking tag to trace auto-generated shell + snippets in maintainer scripts. + * checks/shared-libs.{desc,pm}: + + [NT] Improve the description for missing ldconfig trigger + to cover that debhelper will generally add it + automatically. Most packages will just need a rebuild. + + [JW] Fix false positive dev-pkg-without-shlib-symlink for GCC runtime + libraries. Thanks to Matthias Klose for the bug report. + (Closes: #823833) + * checks/testsuite.{desc,pm}: + + [NT] Apply patch from Ondřej Nový to add more known + autodep8 test suites. (Closes: #823088) + + [JW] Update autopkgtest specification URL. + Thanks to Mattia Rizzolo for the bug report. + + [NT] Check for broken dependency fields in the autopkgtest control + file. Thanks to Jérémy Bobbio for the suggestion. + (Closes: #795083) + * checks/upstream-metadata.pm: + + [JW] Include YAML validation error in the output. + * checks/usrmerge.desc: + + [JW] Use HTTPS for Alioth URL. + + * collection/*: + + [NT] Always pass "-n" to "gzip". + + * commands/lintian: + + [NT] Add ":utf8" layer to STDOUT. Thanks to Michael + Prokop for reporting the issue. (Closes: #801296) + * commands/reporting-html-reports.pm: + + [NT] Remove "$COPY_DOCS" configuration option. The + html_reports now always copies the documentation. + * commands/reporting-lintian-harness.pm: + + [NT] Re-enable pedantic tags by default. These were + disabled in the previous release by mistake. + + * data/binaries/hardening-tags: + + [JW] Refresh with dpkg-architecture 1.18.7. + * data/common/{architectures,multiarch-dirs}: + + [JW] Refresh with dpkg-architecture 1.18.7. + * data/fields/perl-provides: + + [NT] Refresh against Perl 5.22. + * data/files/triplets: + + [JW] Refresh with dpkg-architecture 1.18.7. + * data/shared-libs/ldconfig-dirs: + + [JW] Refresh with dpkg-architecture 1.18.7. + * data/spelling/corrections: + + [JW] Add more corrections. + Thanks to Paul Wise for patches for some of them. + + * debian/rules: + + [JW] Put "Debian Package Checker" in all manpage headers. + + [JW] Put Lintian version in all manpage footers. + + [JW] Simplify manpage generation. + + [JW] Install Lintian::Tutorial manpages. + + * doc/tutorial/Lintian/Tutorial.pod: + + [JW] Add link to the WritingTests tutorial. + + [JW] Add SEE ALSO section (for the man formatter). + * doc/tutorial/Lintian/Tutorial/WritingTests.pod: + + [JW] Fix formatting error. + + * frontend/dplint: + + [NT] Add ":utf8" layer to STDOUT. + + * lib/Lintian/DepMap.pm: + + [JW] Fix typos. + * lib/Lintian/Tags.pm: + + [JW,NT]: Always report unused overrides for all packages + processed. Thanks to Andreas Beckmann for the report. + (Closes: #792191) + + * man/lintian.pod.in: + + [JW] Fix typo. + + * private/refresh-hwcap: + + [JW] Make the ld.so manpage parser work with the current version. + * private/refresh-perl-provides: + + [NT] Look for a versioned perl-modules package. + + * reporting/config: + + [NT] Remove "$COPY_DOCS" configuration option. The + html_reports now always copies the documentation. + * reporting/harness: + + [NT] Refactored into a "dplint" command and renamed to + "commands/reporting-harness.pm". + * reporting/html_reports: + + [NT] Refactored into a "dplint" command and renamed to + "commands/reporting-html-reports.pm". + * reporting/templates/tags-severity.tmpl: + + [NT] Add sections for "classification" tags. + + -- Niels Thykier <niels@thykier.net> Sun, 19 Jun 2016 19:36:51 +0000 + +lintian (2.5.44) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - build-depends-arch-without-arch-dependant-binary + - changelog-references-temp-security-identifier + - ctrl-script + - debian-build-system + - debian-changelog-has-wrong-day-of-week + - extra-whitespace-around-name-in-changelog-trailer + - invalid-versioned-provides + - maintscript-calls-ldconfig + - no-ctrl-scripts + - package-has-unnecessary-activation-of-ldconfig-trigger + - package-must-activate-ldconfig-trigger + - source-format + + Removed: + - debian-changelog-has-wrong-weekday + - description-contains-duplicated-word + - dh_pysupport-is-obsolete + - missing-dependency-on-python-support + - postinst-has-useless-call-to-ldconfig + - postinst-must-call-ldconfig + - postrm-has-useless-call-to-ldconfig + - postrm-should-call-ldconfig + - postrm-unsafe-ldconfig + - preinst-calls-ldconfig + - prerm-calls-ldconfig + - versioned-provides + + * checks/changelog-file.{desc,pm}: + + [JW,NT] Use "day of week" rather than "weekday". + (Closes: #796093) + + [JW,NT] Flag references to "TEMP" security identifiers. + Thanks to Paul Wise for assisting with the regex. + (Closes: #807892) + * checks/control-files.{desc,pm}: + + [NT] Add classification tags for (absence of) maintscripts. + * checks/debhelper.{desc,pm}: + + [NT] Add tag for classifying the build system. + + [NT] Remove test for dh_pysupport usage. + + [NT] Avoid advertising python-support as possible solution for + python-depends-but-no-python-helper. Thanks to Gunnar Wolf for + the bug report. (Closes: #754315) + + [NT] Apply patch from Gergely Nagy to only emit the + dh-exec-useless-usage check for install and manpages files. + Thanks to Rafael Laboissière for the report. + (Closes: #816341) + * checks/debian-source-dir.{desc,pm}: + + [NT] Add tag for classifying the source format. + (Closes: #612610) + * checks/description.{desc,pm}: + + [NT] Drop duplicate word tag, which is now covered by the + spelling error check. + * checks/fields.{desc,pm}: + + [NT] Add default-jdk-headless and openjdk-X-jdk-headless + to the set of known java providers. + + [JW] Relax build profile dependency checks to allow versions with + trailing tilde. (Closes: #819509) Thanks to Felix Geyer for the bug + report. + + [NT] Expand the vcs-field-uses-insecure-uri check to check other + known insecure protocols (e.g. svn and pserver). Thanks to Paul + "(UTF-8) Snowman" Tagliamonte for the report. (Closes: #812962) + + [NT] Use https URL in the correction for canonical VCS URLs. + (Closes: #813587) + + [NT] Bump known python 3 version to include 3.4 and 3.5. + + [AB] package-relation-with-perl-modules: Remove "experimental" flag. + Asked for by Dominic Hargreaves. + + [NT] Apply patch from Mattia Rizzolo to make lintian know and check + the Build-Depends-Arch field. (Closes: #822281) + + [NT] Stop emitting tags for (valid) versioned provides. Thanks to + Thorsten Glaser for the bug report. (Closes: #800438) + * checks/files.pm: + + [JW] Apply patch from Mathieu Parent to fix directories for PHP INI + files. + + [NT] Remove code related to python-support. + * checks/nmu.{desc,pm}: + + [NT] Create a separate tag for extra whitespace around uploader name + in the changelog. Thanks to Ben Wiederhake for the suggestion. + (Closes: #801647) + * checks/phppear.{desc,pm}: + + [JW] Apply patch from Mathieu Parent to make dh-php* and php*-dev + package names unversioned. + * checks/rules.pm: + + [NT] Add ":any" to all python dependencies. Thanks to Barry Warsaw + for reporting the bug. + + [NT] Bump known python 3 version to include 3.4 and 3.5. + + [NT] Remove check for python-support and python-central. + * checks/scripts.desc: + + [NT] Suggest dh_python2 / dh_python3 instead of dh_pysupport and + dh_pycentral. Thanks to Neil Williams for the report. + (Closes: #818607) + * checks/shared-libs.{desc,pm}: + + [NT] Rename and clarify some ldconfig related tags to better reflect + the use of the ldconfig trigger. Thanks to Rafael Laboissière for + reporting this. (Closes: #809577) + + [NT] Merge and remove some ldconfig related tags. Notably + unconditionally flag all uses of ldconfig in maintainer scripts + (outside glibc) as these should be replaced by a trigger. + * checks/version-substvars.pm: + + [NT] Apply patch from Javier Serrano Polo that makes the check + ignore all multi-arch quantifiers (when determining if the + dependency is for an external package). (Closes: #822269) + + * commands/info.pm: + + [NT] Accept "--tag" as an alias of "--tags". Thanks to Robert + Luberda for the suggestion. (Closes: #816454) + * commands/lintian: + + [NT] Also check DEBRELEASE_DEBS_DIR for .changes files when no + packages are given on the command line. Thanks to Sean Whitton for + the suggestion. (Closes: #812568) + + [NT] Clean up entries in temporarily labs fully once they have been + processed. This avoids accumulating files on the disk for archive- + wide runs done in temporary labs. This mitigates some of the + excessive disk usage for archive-wide runs (See #779228). + * commands/reporting-lintian-harness.pm: + + [NT] Add support for classification tags. + + * data/debhelper/*: + + [JW] Refresh against unstable. Thanks to Mathieu Parent for the bug + report. + * data/debhelper/dh_addons-manual: + + [NT] Add ":any" to the dependencies for the python add-ons. Thanks + to Barry Warsaw for reporting the bug. (Closes: #803164) + + [NT] Remove entry for pysupport. + * data/fields/virtual-packages: + + [NT] Refresh against unstable main (amd64). + * data/files/fonts: + + [NT] Refresh against unstable main (amd64). + * data/menu-format/known-desktop-keys: + + [NT] Accept "DesktopNames" as a known key in desktop files. Thanks + to Yves-Alexis Perez for the suggestion. (Closes: #766099) + * data/spelling/corrections: + + [JW] Add more corrections. + * data/standards-version/release-dates: + + [AB] Add 3.9.8. + + * debian/control: + + [AB] Declare compliance with Debian Policy 3.9.8. (No other changes + required.) + * debian/lintian.install: + + [NT] Install Test::Lintian modules in Perl5 module path and remove + the Lintian::Tutorial files (as they are just POD files). + * debian/{manpages,rules}: + + [JW,NT] Generate and install manpages of Lintian's perl modules. + (Closes: #816862) + + * doc/lintian.xml: + + [NT] Document the new classification tags. + + * lib/Lintian/*{,/*}.pm: + + [NT] Add support for classification tags. + * lib/Lintian/Check.pm: + + [JW,NT] Flag a duplicate word as a spelling error. This affects + several tags plus spellintian. (Closes: #800476) + * lib/Lintian/Collect/Binary.pm: + + [JW] Apply patch from Ben Hutchings to consider source versions when + testing nativeness of binary packages. (Closes: #821902) + * lib/Lintian/Relation.pm: + + [JW,NT] Fix broken implication with "P (<< V)" relations. + (Closes: #819560) + * lib/Lintian/Tag/Info.pm: + + [JW] Use HTTPS for manpages.debian.org URLs. + * lib/Lintian/Unpacker.pm: + + [NT] Name the subprocess after what is processing. + + * private/refresh-debhelper-data: + + [JW] Apply patch from Mathieu Parent to fix path to Contents files. + + * reporting/*: + + [NT] Add support for classification tags. + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [NT] Apply patch from Mattia Rizzolo to add yakkety. + + -- Niels Thykier <niels@thykier.net> Sun, 24 Apr 2016 06:25:53 +0000 + +lintian (2.5.43) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - maybe-not-arch-all-binnmuable + + Removed: + - dh_desktop-is-deprecated + - dh_undocumented-is-obsolete + - restriction-formula-with-debhelper-with-conflicting-version + - restriction-formula-with-versioned-dpkg-dev-conflict + + * checks/{control-file,fields}.{desc,pm}: + + [JW] Remove confusing checks for build-conflicts related to build + profiles. + * checks/debhelper.{desc,pm}: + + [NT] Remove check for dh_undocumented and dh_desktop as debhelper + has dropped the helper. + * checks/systemd.pm: + + [JW] Apply patch from Felipe Sateler to properly remove .sh suffix + when checking systemd-initscript matching. (Closes: #819087) + * checks/version-substvars.{desc,pm}: + + [NT] Add an experimental tag to check for arch:all + binNMUability. This is currently not supported at all + and there is no known fix for the tag. That said, it + is still useful for determining how many packages might + be affected by it in case Debian will support arch:all + binNMUs. + + * commands/reporting-sync-state.pm: + + [NT] Use the sha256 instead of the sha1 checksum field + for finding related files and checking which members + have changed. + + [NT] Support reading Packages.xz and Sources.xz files. + + * data/spelling/corrections: + + [JW] Add more corrections. + Thanks to Mattia Rizzolo for suggesting one of them. + + * frontend/dplint: + + [NT] Put $LINTIAN_VERSION on its own line so the build + time substitution works again. Thanks to Stuart + Prescott for reporting the issue. + + * helpers/coll/objdump-info-helper: + + [JW] Apply patch from Dan Nicholson to keep TEXTREL entries from the + dynamic section. (Closes: #819506) + + * lib/Lintian/Check.pm: + + [JW,ADB] Don't ignore midword punctuation characters when + spell-checking. (Closes: #818003) Thanks to Andreas Beckmann for + the bug report. + + * t/tests/binaries-missing-depends-on-libc/debian/debian/rules: + + [JW] Apply patch from Dan Nicholson to pass --no-as-needed to the + linker. (Closes: #819551) + + -- Niels Thykier <niels@thykier.net> Sun, 03 Apr 2016 09:01:08 +0000 + +lintian (2.5.42.1) unstable; urgency=medium + + * checks/binaries.desc: + + [NT] Remove the experimental marker from the tags about + (partially) unstripped static libraries. + + [NT] Remove the experimental marker from the no-pie and + no-bindnow hardening tags. + * checks/changelog-file.pm: + + [JW] Fix use of uninitialized value when checking incorrectly + formatted changelog entries. + + * commands/reporting-lintian-harness.pm: + + [NT] Add missing close and seek to the end of the new + lintian log file before appending to it. + + * data/binaries/embedded-libs: + + [JW] Apply patch from Sebastian Ramacher to allow ffmpeg as + libpostproc provider. (Closes: #817004) + + * lib/Lintian/Tag/Info.pm: + + [JW] Use manpages.debian.org (instead of manpages.debian.net) for + manual page hyperlinks. + + -- Niels Thykier <niels@thykier.net> Fri, 11 Mar 2016 17:43:28 +0000 + +lintian (2.5.42) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - systemd-service-file-missing-documentation-key + + Removed: + - dh_scrollkeeper-is-deprecated + - dh_suidregister-is-obsolete + + * checks/copyright-file.pm: + + [NT] Apply patch from Rafael Kitover to avoid some + false-positives with the DEP-5 copyright format. + (Closes: #795641) + * checks/debhelper.{desc,pm}: + + [NT] Remove tags for dh_scrollkeeper and dh_suidregister, + which are removed in the next version of debhelper. + * checks/files.desc: + + [JW] Update freedesktop.org specification URL. + * checks/menu-format.desc: + + [JW] Update freedesktop.org specification URLs. + * checks/systemd.{desc,pm}: + + [NT] Apply patch from Chris Lamb to flag systemd units + without the "Documentation" key. (Closes: #799083) + + * data/scripts/interpreters: + + [JW] Add hhvm as a known interpreter. (Closes: #789878) + * data/spelling/corrections: + + [JW] Add more corrections. + + [JW] Remove correction for "homogenous". (Closes: #816599) + Thanks to IOhannes m zmölnig for the bug report. + + * debian/control: + + [NT] Add (Build-)Dependency on libdata-alias-perl due + to patch from Rafael Kitover. + + * doc/lintianrc.example: + + [NT] Remove LINTIAN_LAB - most people will never need it. + + * lib/Lintian/Tag/Info.pm: + + [JW] Allow "." characters in manual page references. + + -- Niels Thykier <niels@thykier.net> Sat, 05 Mar 2016 19:38:32 +0000 + +lintian (2.5.41) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - insane-line-length-in-source-file + - source-contains-prebuilt-pandoc-documentation + - upstream-metadata-is-not-a-file + - upstream-metadata-yaml-invalid + + Removed: + - package-contains-broken-symlink + + * checks/apache2.desc: + + [JW] Remove spurious check name abbreviation. + * checks/binaries.pm: + + [NT] Update match for detecting numpy linking. + * checks/cruft.{desc,pm}: + + [BR] Filter some simple comments for long line in source-is-missing + (Closes: #798900). + + [BR] Detect pandoc docs avoiding source-is-missing warning. + + [BR] Fix other source-is-missing FP. (Closes: #813013). + * checks/fields.pm: + + [NT] Emit "no-homepage-field" only for source packages. + * checks/files.pm: + + [JW] Treat packages without Multi-Arch field as if they had + "Multi-Arch: no". Thanks to Bas Couwenberg for the bug report. + * checks/scripts.desc: + + [JW] Fix typos. + * checks/symlinks.{desc,pm}: + + [NT] Retire package-contains-broken-symlink tag. It was too much + effort compared to the gain. (Closes: #672297, #683059, #763270, + #812723, #661003, #738187) + * checks/testsuite.{desc,pm}: + + [JW, NT] Apply patch from Christian Seiler to accept DEP-8 tests + being symlinks to existing files in the source package. Thanks + to Raphaël Hertzog for suggesting it. (Closes: #809440) + * checks/upstream-metadata.{desc,pm}: + + [NT] Apply patch from Petter Reinholdtsen to check that the + upstream metadata file is valid YAML if present. (Closes: #813904) + + * commands/lab-tool.pm: + + [NT] New utility to handle most laboratory operations. + * commands/lintian: + + [NT] New location for "frontend/lintian". + + [NT] Refactored to use "dplint" to compute the include dirs. + + [NT] Remove -S, -R and -r, which are now supported in the new + lintian-lab-tool command. + + * data/spelling/corrections: + + [JW] Fix some corrections. + + [JW] Add more corrections. + * data/standards-version/release-dates: + + [NT] Add 3.9.7. Thanks to Alf Gaida for the reminder. + (Closes: #814041) + + * debian/control: + + [JW] Switch from libyaml-perl to libyaml-libyaml-perl in + Build-Depends and Suggests. (Lintian has been using the latter + package since 2.5.31.) + + [NT] Add dependency on libyaml-libyaml-perl for the new + upstream-metadata check. + + [NT] Bump Standards-Versions to 3.9.7 - no changes required. + * debian/{lintian.links,manpages,rules}: + + [NT] Update to install the new lab-tool command. + + * frontend/lintian: + + [NT] Move the code to "commands/lintian" and leave a symlink to + dplint to replace it. + + * helper/coll/objdump-info-helper: + + [NT] Avoid collecting unused information. + + * lib/Lintian/Path.pm: + + [NT] Remove the _file_info cache field to avoid paying + for all "file(1)" info twice. + * lib/Lintian/Collect/Binary.pm: + + [NT] Remove unnecessary values on members in the + objdump_info table. + * lib/Lintian/*.pm: + + [JW] Fix typos. + + * man/lintian-lab-tool.pod: + + [NT] New file. + + * private/generate-lintian-pod: + + [JW] Fix formatting pathnames followed by punctuation characters. + + -- Niels Thykier <niels@thykier.net> Fri, 19 Feb 2016 18:35:36 +0000 + +lintian (2.5.40.2) unstable; urgency=medium + + * checks/cruft.pm: + + [BR] Check package testsuite for license problems. + + [BR] Allow multiple full texts for license problems. + + [BR] Detect link copyright tag and warn in case of + cc-by-nc-sa + + * data/spelling/corrections*: + + [JW] Add more corrections. + + * debian/post{inst,rm}: + + [NT] Remove obsolete maintainer scripts. + * debian/tests/testsuite: + + [NT] Remove temporary directory after test. + + * lib/Lintian/Collect/Source.pm: + + [JW] Fix typo. + * lib/Lintian/Lab/Entry.pm: + + [JW] Fix typo. + + * reports/html_reports: + + [NT] Fix uninitialized warnings. + + [NT] Remove ""-quotes covering the full maintainer name. + This makes "Adam" sort under "A" rather than "Other" on the + list of maintainers. + + -- Niels Thykier <niels@thykier.net> Sun, 24 Jan 2016 12:52:18 +0000 + +lintian (2.5.40.1) unstable; urgency=medium + + * debian/rules: + + [NT] Only run tests from the override_dh_auto_test target. + + * t/runtests: + + [NT] Use a whitelist for cleaning up the environment. Fixes + FTBFS / test failures. + + -- Niels Thykier <niels@thykier.net> Sat, 23 Jan 2016 08:28:24 +0000 + +lintian (2.5.40) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - debian-watch-file-uses-deprecated-githubredir + - file-in-root-and-usr + - hardening-no-bindnow + - hardening-no-pie + - library-in-root-and-usr + - old-style-config-script + - old-style-config-script-multiarch-path + - old-style-config-script-multiarch-path-arch-all + - vcs-field-uses-insecure-uri + + Removed: + - debian-watch-file-accesses-pypi-over-http + - debian-watch-file-unsupported-pypi-url + + * checks/binaries.{desc,pm}: + + [JW] Exclude /usr/lib/debug/.build-id/ from foreign-architecture + checks. Thanks to Aurelien Jarno for the bug report. (Closes: + #809262) + + [BR] Detect old style config scripts and detect Multi-arch errors. + + [NT] Add experimental tag for missing "bindnow" and "pie" + hardening. Thanks to intrigeri for the suggestion. + (Closes: #759363) + * checks/changes-file.pm: + + [JW] Use "~bpo7+N" as the suffix for wheezy-backports-sloppy + uploads. Thanks to Vincent Bernat for the bug report. (Closes: + #810028). + + [JW] Use "~bpo8+N" as the suffix for jessie backports. + * checks/changes-file.desc: + + [JW] Fix typo. + * checks/cruft.pm: + + [BR] Pass information about minified javascript down to tag. + (Closes: #804147). + * checks/fields.{desc,pm}: + + [NT] Apply patch from Dr. Tobias Quathamer <toddy@debian.org> to + check for some insecure protocols in Vcs-* fields. + (Closes: #810378) + * checks/files.pm: + + [NT] Fix off-by-one in an "mtime" comparison, which could give + false-positive package-contains-timestamped-gzip warnings. + + [NT] Downgrade image-file-in-usr-lib to pedantic given the + policy has relaxed on this point. (Closes: #415558) + * checks/files.desc: + + [JW] Fix typo. + * checks/source-copyright.{desc,pm}: + + [JW] Apply patch from Mattia Rizzolo to update the machine-readable + copyright format specification URL. (Closes: #809248) + + [BR] Improve description text of tag + dep5-copyright-license-name-not-unique. + * checks/usrmerge.{desc,pm}: + + [BR] Add usrmerge test from Marco d'Itri. (Closes: #767754). + * checks/watch-file.{desc,pm}: + + [BR] Apply patch from Chris Lamb <lamby@debian.org>, + warn if debian/watch uses deprecated + githubredir.debian.net scraper (Closes: #803106). + + [NT] Apply patch from Dmitry Shachnev <mitya57@debian.org> to + remove obsolete check. (Closes: #793149) + + [NT] Apply patch from Sylvestre Ledru <sylvestre@debian.org> to + support version 4 of the debian/watch. (Closes: #811175) + + * data/spelling/corrections*: + + [JW] Add more corrections. + Thanks to Paul Wise for patch for one of them. + + * debian/control: + + [NT] Add ${perl:Depends} to Depends. + + [NT] Use https://anonscm.debian.org/git/lintian/lintian.git in the + Vcs-* fields. + * debian/rules: + + [NT] Convert to dh7 style build. + + * frontend/lintian: + + [NT] Limit the number of instances of the same tag when output is a + TTY. Add --no-tag-display-limit to disable this feature. Thanks + to Thijs Kinkhorst for the report. (Closes: #775667) + + * lib/Lintian/Check.pm: + + [JW] Remove work-around for Email::Valid bug (#663663), which is now + fixed even in oldstable. + + [JW] Apply patch from Justin B Rye to fix an uninitialized value + warning. (Closes: #810649) + + * reporting/html_reports: + + [JW] Add missing "map_maintainer" call, which made the reporting + script omit packages on maintainer's pages. Thanks to Charles + Plessy for the report and to Dr. Tobias Quathamer for finding + the condition for triggering the bug. (Closes: #797178) + + [NT] Share more data for a ~15% memory reduction on an old + dataset. + + * t: + + [NT] Fix test case relying on removed debhelper compat level. + (Closes: #811309) + + -- Niels Thykier <niels@thykier.net> Sun, 27 Dec 2015 09:43:24 +0000 + +lintian (2.5.39.1) unstable; urgency=medium + + * checks/menu-format.desc: + + [NT] Clarify how to handle a command listed both in a menu file + and a desktop file. Thanks to Jörg Frings-Fürst for reporting. + (Closes: #806387) + + * data/binaries/embedded-libs: + + [JW] Fix typo in the string used for detecting copies of OpenJPEG. + (But continue to recognize the misspelled variant, which might be + still present in some copies.) + * data/fields/udeb-fields: + + [NT] Add Auto-Built-Package and Build-Ids fields. Thanks to + Guillem Jover for the report. (Closes: #808566) + * data/scripts/interpreters: + + [JW] Add perl6-m as a known interpreter. Thanks to Dominique Dumont + for the bug report. (Closes: #809057) + * data/spelling/corrections: + + [JW] Add more corrections. + + * man/lintian.pod.in: + + [NT,JW] Document clarify that "-L +=<value>" is valid. + (Closes: #802729) + + [NT] Attempt to document --display-level a bit more extensively. + Thanks to Matt Zagrabelny for the report. (Closes: #802725) + + [NT] Clarify what --default-display-level does and why one might + want to use it. + + * private/refresh-ftp-master-tags: + + [JW] Use HTTPS for the ftp-master.debian.org URL. + + -- Niels Thykier <niels@thykier.net> Sun, 27 Dec 2015 09:37:34 +0000 + +lintian (2.5.39) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - dh-exec-useless-usage + - systemd-service-alias-without-extension + + * checks/binaries.pm: + + [JW] Fix inconsistent parsing of a data file. + * checks/cruft.pm: + + [BR] Relax line length for minified javascript. + * checks/debhelper.{desc,pm}: + + [NT] Apply patches from Gergely Nagy to extend the dh-exec + related checks. (Closes: #794296, #801104) + * checks/files.{desc,pm}: + + [JW] Fix typo. + + [JW] Fix inconsistent parsing of a data file. (Closes: #790739) + * checks/scripts.desc: + + [JW] Fix typo. + * checks/systemd.{desc,pm}: + + [NT] Apply patch from Evgeni Golov to strip ".service" from + aliases before looking for an init.d service of same name. + (Closes: #773087) + + [NT] Apply patch from Evgeni Golov to check that the Alias + field of .service files ends with .service (as required by + the systemd.unit specification). (Closes: #808369) + + * data/binaries/embedded-libs: + + [JW] Apply patch from James Cowgill to rename "polarssl" as + "mbedtls". (Closes: #808050) + * data/binaries/hardening-tags: + + [NT] Refresh with dpkg-architecture 1.18.3. + * data/common/{architectures,multiarch-dirs}: + + [NT] Refresh with dpkg-architecture 1.18.3. + * data/fields/binary-fields: + + [NT] Add "Auto-Built-Package" as known field in binary packages. + It appears in dbgsym packages generated by debhelper. + * data/fields/perl-provides: + + [NT] Refresh against perl 5.22. + * data/files/triplets: + + [NT] Refresh with dpkg-architecture 1.18.3. + * data/scripts/interpreters: + + [JW] Add rake as a known interpreter. Thanks to Cédric Boutillier + and Pirate Praveen for the bug reports. (Closes: #795036) + * data/shared-libs/ldconfig-dirs: + + [NT] Refresh with dpkg-architecture 1.18.3. + * data/spelling/corrections*: + + [JW, AB] Add more corrections. + Thanks to Paul Wise for patch for one of them. + + * doc/examples/profiles/my-vendor/main.profile: + + [JW] Fix typo. + + * doc/lintian.xml: + + [JW] Fix typo. + + * lib/Lintian/Output.pm: + + [JW] Fix typos. + + * lib/Lintian/Profile.pm: + + [JW] Fix typo. + + * lib/Lintian/Tags.pm: + + [JW] Fix typo. + + [JW] Make it possible to override tags containing "+" characters, + such as "missing-dependency-on-libstdc++". Thanks to Andreas + Beckmann for the bug report. (Closes: #806504) + + * lib/Test/Lintian.pm: + + [JW] Fix typo. + + * private/refresh-insserv-data: + + [JW] Fix typo. + + -- Niels Thykier <niels@thykier.net> Sun, 20 Dec 2015 00:56:05 +0000 + +lintian (2.5.38.1) unstable; urgency=medium + + No tags were added or removed + + * checks/binaries.{desc,pm}: + + [NT] Check for ".debug_str" section in addition to the + ".debug_line" section to determine if an ELF file contains + detached debug symbols. + * checks/cruft.pm: + + [BR] Avoid false positive in minified javascript by + detecting line with only one colon. + (Closes: #792365). + * checks/debconf.desc: + + [JW] Fix typo. + * checks/files.pm: + + [BR] Whitelist pbuilder for dir-or-file-in-build-tree. + * checks/scripts.pm: + + [NT] Check the syntax of maintainter scripts with "sh" when + the script is declared with "#!/bin/sh". Thanks to Ron Lee + for spotting this. + * checks/shared-libs.pm: + + [ADB, NT] Fix false-positive instance of the tag + postrm-should-call-ldconfig when the package is using the + ldconfig trigger. (Closes: #804256) + * checks/source-copyright.desc: + + [JW] Use HTTPS for www.debian.org URLs. + + * commands/spellintian.pm: + + [JW,NT] Report non-files as "not a file" rather than + claiming them to be directories. (Closes: #802475) + + * data/cruft/non-free-files: + + [JW] Use HTTPS for bugs.debian.org URLs. + * data/output/manual-references: + + [JW] Refresh. + * data/spelling/corrections*: + + [JW] Add more corrections. + + * doc/lintian.xml: + + [JW] Use HTTPS for www.debian.org and lintian.debian.org URLs. + * doc/README.developers: + + [JW] Use HTTPS for wiki.debian.org URLs. + * doc/README.release: + + [JW] Fix typo. + + * debian/copyright: + + [JW] Use HTTPS for lintian.debian.org URLs. + + * lib/Lintian/DepMap/Properties.pm: + + [JW] Fix typo. + * lib/Lintian/Profile.pm: + + [JW,NT] Correct include path for default profile when include + directories are not given explicitly. (Closes: #802476) + + [JW] Fix typo. + * lib/Lintian/Unpacker.pm: + + [JW] Fix typo. + * lib/Lintian/Util.pm: + + [NT] Whitelist TMPDIR in "clean_env", so that man and msgfmt + will use the user defined TMPDIR (if any). Thanks to Bjarni + Ingi Gislason Bjarni for the bug report. (Closes: #801483) + + * mail-templates/license-problem-non-free-RFC: + + [JW] Use HTTPS for debian.org URLs. + + * man/lintian.pod.in: + + [JW] Fix incorrect claim that "pedantic" and "display-info" can't be + used together in the config file. + + * private/refresh-*: + + [JW] Use httpredir.debian.org as the default mirror. + * private/refresh-manual-refs: + + [JW] Use HTTPS for www.debian.org and lintian.debian.org URLs. + + * reporting/harness: + + [JW] Fix typo. + * reporting/templates/*.tmpl: + + [JW] Use HTTPS for debian.org URLs. + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [JW] Add "wily" and "xenial". + + * README: + + [JW] Use HTTPS for www.debian.org and lintian.debian.org URLs. + + -- Niels Thykier <niels@thykier.net> Mon, 16 Nov 2015 20:45:24 +0100 + +lintian (2.5.38) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - command-in-menu-file-and-desktop-file + - misspelled-closes-bug + + * checks/binaries.desc: + + [NT] Update description of a tag now that debhelper properly + strips static libraries. + + [JW] Relax the regular expression used to used to recognize + architecture-specific paths to avoid false positive + arch-dependent-file-not-in-arch-specific-directory in Python debug + packages. Thanks to Matthias Klose for the bug report. + (Closes: #795275) + * checks/changelog-files.{desc,pm}: + + [BR] Detect misspelled Closes in changelog file (Closes: #798799) + * checks/files.{desc,pm}: + + [AB] Apply patch by Mattia Rizzolo to also check for files in /build + and /tmp/buildd in dir-or-file-in-build-tree. (Closes: #797532) + + [NT] Rewrite the description for dir-or-file-in-build-tree. Thanks + to Chris Lamb and Jakub Wilk for pointing out issues with the + original description. (Closes: #797466) + + [BR] Detect pagead2. + + [BR] Fix false positive privacy-breach-* for alternate link tag + with type application/rdf+xml. (Closes: #799914). + * checks/obsolete-sites.pm: + + [AB] Stop at <>, $, or " when emitting URLs as tag parameter. + * checks/menu-format.{desc,pm}: + + [NT] Check for menu files used to provide a command also listed in + a desktop file. This tag is based on the verdict in + [CTTE #741573]. + * checks/rules.desc: + + [NT,JW] Improve the wording of one of the tags based on feedback + from Chris Lamb. (Closes: #796815) + * checks/scripts.desc: + + [NT] Apply patch from Chris Lamb to fix a grammatical issue in a + tag description. (Closes: #797555) + * checks/shared-libs.pm: + + [JW] Fix false positive dev-pkg-without-shlib-symlink for GCC runtime + libraries. Thanks to Matthias Klose for the bug report. + (Closes: #790739) + * checks/systemd.desc: + + [AB] Apply patch by Chris Lamb to update link to Debian systemd + packaging reference. (Closes: #799082) + * checks/watch-file.desc: + + [JW] Fix typo. + + * data/binaries/embedded-libs: + + [RG] Use a different string to detect the copies of freetype + (Closes: #756722) + + [RG] Allow ffmpeg to provide libav*. + * data/debhelper/dh_{commands,packages}: + + [AB] Apply patch by Stefano Rivera to update the home of + dh_gstscancodecs. (Closes: #799467) + * data/obsolete-sites/obsolete-sites: + + [AB] Add patch by Hideki Yamane to add sourceforge.jp (Closes: + #798736) + + [AB] Sort file alphabetically. + * data/spelling/corrections: + + [JW] Add more corrections. + + * doc/lintian.xml: + + [JW] Fix typo. + + * lib/Lintian/Collect.pm: + + [JW] Fix typo. + * lib/Lintian/Lab.pm: + + [JW] Fix typo. + + * man/lintian.pod.in: + + [JW] Fix typo. + + * private/refresh-debhelper-data: + + [NT] Add a "This file is generated" header to all output files. + + -- Niels Thykier <niels@thykier.net> Mon, 05 Oct 2015 22:10:31 +0200 + +lintian (2.5.37) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - obsolete-url-in-packaging + - renamed-tag + + * checks/application-not-library.{desc,pm}: + + [AB] Downgrade libapp-perl-package-name to certainty possible. + + [AB] Add libapp-options-perl to the package whitelist. + * checks/binaries.pm: + + [NT] Apply patch from Michael Stapelberg to ignore + "no-relro" and "no-fortify-functions" issues in + binaries built by the go compiler, as it does not + support these features. (Closes: #795667) + + [NT] Apply patch from Michael Stapelberg to a + common false positive spelling mistake in "go" + binaries. (Closes: #795614) + + [NT] Apply patch from Guillem Jover to avoid some false + positive shared-lib-without-dependency-information tags. + (Closes: #798063) + * checks/control-file.pm: + + [AB] Apply patch by Christoph Biedl for relaxing dependency checks + to allow versions with tilde. (Closes: #797951) + * checks/copyright.pm: + + [BR] Fix FP for copyright-without-copyright-notice tag + allow public-domain. (Closes: #786867) + * checks/cruft.pm: + + [BR] Fix complex regular subexpression recursion limit. + Strip comments is only done on first 8192 characters. + (Closes: #795955). + + [BR] Performance improvement check if line < 1024 before + stripping comment. Classify to minified if line > 1024. + + [BR] Fix false positive in missing-sources directory + search path. + * checks/debhelper.pm: + + [NT] Unconditionally warn about dh_clean -k usage even when the + debhelper compat is less than 7. + * checks/description.pm: + + [AB] Fix false positives in + perl-module-name-not-mentioned-in-description. (Closes: #795779) + * checks/fields.{desc,pm}: + + [JW] Use "an" (instead of "a") before "HTTP". + + [NT] Assert that -dbgsym packages are in the "debug" section. + Thanks to Jean-Michel Vourgère for reporting the issue. + (Closes: #796896) + + [AB] Also emit package-relation-with-perl-module for build-* + relations. Thanks gregor herrmann! (Closes: #798385) + * checks/obsolete-sites.{desc,pm}: + + [AB] New check with tag obsolete-url-in-packaging to check for URLs + of hosting sites with frozen contents or (soon to be) closed hosting + sites (Google Code, Gitorious, Freshmeat, etc.) inside the + packaging. (Closes: #793503) + * checks/scripts.pm: + + [BR] Fix Unescaped left brace in regex. (Closes: #788926) + * checks/shared-libs.{desc,pm}: + + [NT] Accept an "activate-noawait ldconfig" trigger instead of + explicit calls to "ldconfig". + * checks/testsuite.pm: + + [AB] Split up restrictions, features and tests by comma as well as + space. (Closes: #798359, #792418) + * checks/version-substvars.pm: + + [BR] Fix Unescaped left brace in regex is deprecated line 68. + * checks/watch.desc: + + [BR] Upgrade upstream PGP keys location. (Closes: #796311) + + * data/binaries/embedded-libs: + + [RG] Add another matching string for libidn + * data/common/source-fields: + + [AB] Add patch by Tianon Gravi to add go-import-path as known source + field. (Closes: #798422) + * data/fields/archive-sections: + + [NT] Remove the "debugsym" section as "ddebs" will be put in + the regular "debug" section. + * data/fields/binary-fields: + + [NT] Accept the "Build-Ids" field, which debhelper will start to + include in debug packages. + * data/scripts/maintainer-script-bad-command: + + [AB] Fix maintainer-script-should-not-use-adduser-system-without-home + false positive in cases where --system and --home are ordered + differently than initially expected. (Closes: #797395) + * data/spelling/corrections: + + [JW] Add correction for "bellow". (This is an actual English word, + but in technical texts, it's almost certainly a misspelling of + "below".) + + [JW] Add correction for "positve". + + * debian/control: + + [AB] Update Vcs-Browser header to use https and cgit. + + * lib/Lintian/{Tags.pm,Tag/Override.pm}: + + [BR] Support tag renaming. Warn about renamed + tags. + + * t/runtests: + + [BR] Apply patch from Chris Lamb improving documentation. + (Closes: #796822). + * t/scripts/01-critic/runner.pl: + + [AB] Fix FTBFS in perlcritic runner with Test::Perl::Critic 1.03 + * t/tests/application-not-library/debian/debian/control.in: + + [AB] Add a false positive test for libapp-perl-package-name. + * t/tests/rules-perl-makemaker/debian/debian/rules: + + [NT] Pass DESTDIR to MakeMaker to avoid FTBFS with Perl 5.22. + Thanks to Dominic Hargreaves for the report. (Closes: #797600) + + -- Niels Thykier <niels@thykier.net> Fri, 11 Sep 2015 16:37:10 +0200 + +lintian (2.5.36.1) unstable; urgency=medium + + * checks/application-not-library.pm: + + [NT] Fix invalid import. + + -- Niels Thykier <niels@thykier.net> Sat, 15 Aug 2015 10:47:33 +0200 + +lintian (2.5.36) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - application-in-library-section + - dep5-file-paragraph-references-header-paragraph + - libapp-perl-package-name + - libmodule-build-perl-needs-to-be-in-build-depends + - libmodule-build-tiny-perl-needs-to-be-in-build-depends + - library-package-name-for-application + - maintainer-script-may-use-dir_to_symlink_helper + - mentions-deprecated-usr-lib-perl5-directory + - package-installs-apt-preferences + - package-installs-apt-sources + - package-installs-ieee-data + - package-installs-into-obsolete-dir + - package-relation-with-perl-modules + - perl-module-name-not-mentioned-in-description + - privacy-breach-uses-embedded-file + + Removed: + - dep5-file-paragraph-reference-header-paragraph + - package-install-apt-preferences + - package-install-apt-sources + - package-install-ieee-data + - package-install-into-obsolete-dir + - privacy-breach-may-use-debian-package + + * checks/application-not-library.{desc,pm}: + + [AB] New experimental checks imported from pkg-perl-tools. + * checks/changelog-file.pm: + + [JW] Fix invalid comparison leading to false positive + non-consecutive-debian-revision tags. (Closes: #794995) + * checks/cruft.{desc,pm}: + + [BR] Avoid a false positive for gfdl detection in krusader. + Remove line number before running the detection. + + [BR] Avoid another gfdl false positive in oidentd, sdlbasic, + smbc package. + + [AB] Add new tag mentions-deprecated-usr-lib-perl5-directory based + on pkg-perl-tools' usr-lib-perl5-mentioned (multiple authors). + + [NT] Replace "funny" dash with regular ASCII dash. + + [AB] Fix grammar issue in license-problem-non-free-img-lenna desc. + * checks/description.*: + + [AB] Add new tag perl-module-name-not-mentioned-in-description based + on pkg-perl-tools' no-module-name-in-description by Damyan Ivanov. + * checks/fields.pm: + + [AB] Add emacs23 to list of obsolete Emacs package names. + + [AB] Also check for obsolete emacs package names with common + suffixes (-gtk, -el, -nox, lucid) + + [AB] Add an imaginary future emacs222 package to the test suite's + dummy package to check for depends-on-old-emacs false positives. + + [AB] Add libmodule-build(-tiny)-perl-needs-to-be-in-build-depends + tags from pkg-perl-tools by gregor herrmann. + + [AB] Add new tag package-relation-with-perl-modules based on + pkg-perl-tools' depends-on-perl-modules by Damyan Ivanov. + * checks/files.desc: + + [BR] Correct a few typos. (Closes: #794953) + + [BR] Rename files-privacybreach-may-use-debian-package + to privacy-breach-uses-embedded-file. Thanks to + Guillem Jover for the report. + * checks/scripts.desc: + + [BR] Detect suspicious use of ln -s that could be replaced by + dpkg-maintscript-helper. + * checks/systemd.desc: + + [NT] Replace a wide-character by spelling out "does not". + + * data/files/privacy-breaker-websites: + + [BR] Detect libjs-bootstrap as privacy-breach-uses-embedded-file + + [BR] Improve detection of google plus. + + [BR] Improve detection of jquery modules. + + [BR] Detect doxygen logo. + + [BR] Detect doubleclick.net + * debian/compat: + + [BR] Use compat version 9. + * debian/control: + + [AB] Add myself to Uploaders. + + [AB] Add Breaks against pkg-perl-tools << 0.23 due to some tags + moved over to lintian proper. + + * lib/Lintian/{CheckScript,CollScript,Profile}.pm: + + [NT] Read control files as proper UTF-8 character streams rather + than byte streams. (Closes: #793164) + * lib/Lintian/Collect.pm: + + [AB] Remove outdated note about automatically computed defaults for + "$info->field('source')". + * lib/Lintian/Util.pm: + + [NT] Add read_dpkg_control_utf8 that reads the file as UTF-8 + characters (as it ought to be) rather than a byte stream. + + * private/refresh-fonts-data: + + [NT] Prune some duplicates from the generated font file. + + -- Niels Thykier <niels@thykier.net> Sat, 15 Aug 2015 09:48:22 +0200 + +lintian (2.5.35) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - non-consecutive-debian-revision + - package-uses-experimental-debhelper-compat-version + - package-uses-old-debhelper-compat-version + + * checks/binaries.pm: + + [NT] Apply patch from Sebastian Andrzej Siewior to inhibit + binary-file-built-without-LFS-support tags for binaries + that contains the "offending" LFS symbol. These tend to + come from gnulib and be LFS compliant. Thanks to Guillem + Jover for the report. (Closes: #787853) + * checks/changelog-file.{desc,pm}: + + [BR] Detect non consecutive debian revision. (Closes: #789820) + * checks/control-file.{desc,pm}: + + [BR] In order to ease the multiarch-support removal the + severity of pre-depends-directly-on-multiarch-support tag + is raised to important. Thanks to Helmut Grohne for + the reminder. + + [BR] pre-depends-directly-on-multiarch-support does not need + debhelper for being raised. Suggest to build-depends on + debhelper >= 9. + * checks/debhelper.{desc,pm}: + + [BR] Use data file for pedantic warning on debhelper depends + version. + + [BR] Detect not recommended and experimental debhelper version. + * checks/fields.desc: + + [JW] Fix spelling of the word "indicate". + * checks/scripts.desc: + + [BR] Document why adduser --no-create-home + is a bad idea for system user. (Closes: #793613). + + * data/cruft/warn-file-type: + + [BR] Detect pascal resource file source. (Closes: #793908). + * data/files/fonts: + + [BR] Refresh this file. (Closes: #794196) + * data/scripts/maintainer-script-bad-command: + + [BR] Detect more case of + maintainer-script-should-not-use-adduser-system-without-home. + + [BR] Print offending line for + maintainer-script-should-not-use-adduser-system-without-home. + * data/spelling/corrections*: + + [JW] Fix correction for "acknowldegement". + + [JW] Document that the lists should be sorted. + + [JW] Re-sort the correction lists and remove duplicates. + + [JW] Add more corrections. + + [BR] Add existant||existent correction. + + * mail-templates/license-problem-*: + + [JW] Make the files end with newline character. + + [JW] Fix typo in template. + + * private/refresh-manual-refs: + + [JW] Update the list of required packages. + + * t/scripts/*.t: + + [JW] Make all the scripts executable. + * t/tests/changelog-file-strange-date/*: + + [BR] Create a test with error syntax in changelog date. + Run only with dpkg below 1.18.2. (Closes: #794674). + * t/tests/binaries-general/*: + + [BR] Fix a test suite failure with gcc5 by using compat 9, and + removing gets() that does not exist with C11 (used by default + by gcc5). (Closes: #794505). + * t/tests/legacy-binary/debian/debian/rules: + + [BR] Improve clean rule, thanks to Jakub Wilk. + + -- Bastien Roucariès <roucaries.bastien+debian@gmail.com> Thu, 06 Aug 2015 10:50:49 +0200 + +lintian (2.5.34) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - unstripped-static-library + + * checks/binaries.{desc,pm}: + + [NT] Apply patch from Guillem Jover to improve the tag + description of the LFS tag. (Closes: #792167) + + [NT] Detect unstripped static libraries (as an + experimental tag). + * checks/cruft.pm: + + [NT] Avoid svn-conflict-file tag for ".r0" files, since + there cannot be a conflict involving revision 0. + Thanks to Andreas Beckmann for the report. + (Closes: #793068) + + [BR] Detect pdf, ps, and eps lenna file. + * checks/files.{desc,pm}: + + [BR] Fix detection of sources.list file. (Closes: #792237) + * checks/systemd.pm: + + [NT] Apply patches from Felipe Sateler to ignore known + masked init.d scripts. (Closes: #792501) + + * commands/info -> info.pm: + + [NT] Renamed info to info.pm to remove some boilerplate + code. + + [NT] Forbid late --user-dirs and --include-dir options. + + * frontend/lintian: + + [NT] Forbid late --user-dirs and --include-dir options. + + [NT] Remove the following obsolete command line + options: --root, --all, --binary, --source, --udeb. + They are no longer useful. + + * lib/Lintian/Collect{,/*}.pm: + + [NT] Add a shared memory cache that can be used to + reduce memory consumption a bit for sharable objects. + (Closes: #715035) + * lib/Lintian/Data.pm: + + [NT] Remove references to LINTIAN_ROOT as Lintian::Data + no longer uses it. + * lib/Lintian/Path.pm: + + [NT] Rework some implementation details to reduce memory + consumption slightly. + + [NT] The undocumented "type" and "time" methods have been + removed from the API. + + [NT] The "uid" and "gid" methods now return 0 rather than + undef when numeric ownership is not collected. + + * reporting/templates: + + [NT] Remove (uses of) the "invisible-anchor" css class as + invisible (display: none) elements cannot be used as + anchors. + + -- Niels Thykier <niels@thykier.net> Wed, 22 Jul 2015 21:55:58 +0200 + +lintian (2.5.33) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - systemd-no-service-for-init-rcS-script + - trailing-slash-for-dpkg-maintscript-helper-symlink_to_dir + + Removed: + - binary-file-compressed-with-upx + + * checks/binaries.pm: + + [NT] Ignore "v5" suffixes in package names when matching + SONAMES with package names. The "v5" suffix is the + recommended suffix for packages affected by the GCC-5 + libstc++6 C11 ABI breakage. + + [NT] Drop binary-file-compressed-with-upx as it was not + working. (Closes: #790932) + * checks/cruft.pm: + + [BR] Increase windows size to 16384 bytes. + Gain about 10% in cruft. + * checks/description.desc: + + [NT] Clarify that the empty-line control statement " ." + permits no other characters on the same line. Thanks + to Riley Baird for the report. (Closes: #789577) + * checks/files.desc: + + [JW, NT] Clarify that the ISO 639-1 language codes are + preferred to the ISO 639-2 variant. Thanks to Jonas + Smedegaard for the report. (Closes: #790693) + * checks/infofiles.pm: + + [NT] Fix use of undefined variable in some cases. + * checks/scripts.{desc,pm}: + + [BR] Detects problem with dpkg-maintscript-helper symlink_to_dir. + * checks/systemd.{desc,pm}: + + [NT] Apply patches from Felipe Sateler to refactor the + systemd checks. Notably this also fixes some duplicate + tags. + + [NT] Apply patch from Felipe Sateler to warn about rcS + init scripts without a native systemd unit file. + (Closes: #790323) + * checks/source-copyright.pm: + + [NT] Fix use of undefined variable in some cases. + + [NT] Avoid triggering a tag for a DEP-5 paragraph + referencing the license of the header paragraph + when said paragraph is *the* header paragraph. + (Closes: #769818) + + * data/cruft/non-free-files: + + [BR] Add a few lenna image. Thanks to Norbert + Preining <preining@logic.at> (Closes: #790915). + * data/spelling/corrections-multiword: + + [JW] Correct spelling for "GNU Public Licence". + (Closes: #790369) + + * frontend/lintian: + + [JW, NT] Add "--hide-overrides" option to contrast + the "--show-overrides" option. (Closes: #770643) + + * helpers/coll/objdump-info-helper: + + [NT] Fix use of undefined variable in some cases. + + [JW,NT] Gracefully cope with upstreams storing poems in + valid ar archives with the file extension ".a" and + possibly also corrupt ar files. + (Closes: #790493) + + [NT] Remove slow "head + grep" pipeline on all ELF + binaries, which is no longer used. + * helpers/coll/strings-helper: + + [NT] Avoid an unnecessary overhead in using L::Command's + spawn+reap. In some cases, this can reduce the runtime + of this command by ~50%. + + * lib/Lintian/Check.pm: + + [NT] Optimise out some calls to Lintian::Data, which in + a few cases adds up to a couple of seconds in total + runtime. + + * profiles/debian/ftp-master-auto-reject.profile: + + [NT] Drop binary-file-compressed-with-upx as it no + longer exists. + + * reporting/harness: + + [NT] Add a --[no-]generate-reports option as alias of + the -r mode. The option can now be used together with + "-i", "-f" or "-c" to control whether the reports + should generated at the end of the run. Without any + of these, harness will only generate reports like it + used to do. + * reporting/templates/*.tmpl: + + [NT] Change from XHTML 1.1 to HTML5. + + -- Niels Thykier <niels@thykier.net> Thu, 09 Jul 2015 21:38:57 +0200 + +lintian (2.5.32) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - changelog-empty-entry + - dh-manual-sequence-control-obsolete + - license-problem-non-free-img-lenna + - missing-intermediate-directory + - package-contains-cmake-private-file + - package-contains-mime-file-outside-package-dir + - package-install-apt-preferences + - package-install-apt-sources + - package-install-ieee-data + - service-key-has-whitespace + - source-contains-autogenerated-gperf-data + - source-contains-data-from-ieee-data-oui-db + - static-library-has-unneeded-section + + Removed: + - hyphen-used-as-minus-sign + + * checks/*.pm: + + [NT] Rewrite to handle new check_spelling{,_picky} + * checks/binaries.pm: + + [NT] Also apply the binary-has-unneeded-section check on + static libs. (See #662998) + * checks/cruft.{desc,pm}: + + [BR] Detect non free lenna file based on filename and filetype. + (Closes: #771191). + + [BR] Avoid a false positive for autogenerated index in dx package + for source-is-missing. + * checks/changes-file.{desc,pm}: + + [NT] Downgrade backports-changes-missing to a wishlist (I) tag. + Thanks to Vincent Cheng for the report. (Closes: #785084) + * checks/changelog-file.{desc,pm}: + + [BR] Detect empty changelog entry. (Closes: #763457) + * checks/debhelper.{desc,pm}: + + [NT] Warn about using dh --{until,before,after,remaining} as + these are deprecated and have been since debhelper/8.9.4. + + [NT] Permit the use of dh-exec-install in ".manpages" as well + since dh-exec now advertises this as acceptable. Thanks to + Andreas Henriksson for reporting this. (Closes: #788796) + * checks/fields.pm: + + [BR] Detect double comma in uploaders fields. + (Closes: #783628). + * checks/files.{desc,pm}: + + [NT] Apply patch from Tomasz Buchert to avoid false-positive + package-contains-timestamped-gzip in some cases. + (Closes: #762105) + + [BR] Detects // tricks in privacy breach test. + (Closes: #786362) + + [BR] Apply patch from Lisandro Damián Nicanor Pérez Meyer + for detecting private cmake file. + (Closes: #785329). + + [BR] Detect package shipping apt_preferences(5) file. + (Closes: #786533). + + [BR] Detect package shipping oui or iab ieee database. + (Closes: #785662). + + [NT] Add a check for packages without intermediate + directories. + + [BR] Avoid a false positive in jsom for defaultpresets.xml + from openmapstreet. + + [NT] Tweak the "extra-license-file" check to avoid some + common false-positives. + + [BR] Raise severity of package-contains-timestamped-gzip. + (Closes: #778328). + + [BR] Detect package shipping apt_sources(5) file. + (Closes: #646965). + + [BR] Warn about files installed in /usr/share/mime/ other + than in packages/. (Closes: #761649). + * checks/java.pm: + + [NT] Fix "off-by-one" in the check for the maximum permitted + Java major version. + * checks/manpages.{desc,pm}: + + [NT] Retire the hyphen-used-as-minus-sign tag as upstream now + renders both "-" and "\-" as HYPHEN-MINUS. (Closes: #785353) + * checks/po-debconf.pm: + + [JW] Use TMPDIR rather than TEMPDIR for temporary files. + (Closes: #787930) + * checks/source-copyright.pm: + + [NT] Apply patch from Evgeni Golov to permit multiple + different "public-domain licenses", as they are expected to + describe why the affected files are in public domain. + (Closes: #787248) + * checks/systemd.{desc,pm}: + + [NT] Apply patch from Felipe Sateler to mark service files in + /usr/lib as invalid. (Closes: #788629) + + [NT] Apply patch from Felipe Sateler to detect service files + that use spaces around the = in the key definition. + (Closes: #786421) + + * collection/{debfiles,doc-base-files,init.d,menu-files}{,.desc}: + + [NT] Remove deprecated and unused collections. These were + deprecated in 2.5.28. Note that debfiles was omitted in the + deprecation list by mistake in the original 2.5.28 release. + * collection/objdump-info: + + [NT] Also analyse static libraries. + * collection/unpacked: + + [NT] Apply patch from Tomasz Buchert to extract the full time + in UTC. + + * commands/reporting-sync-state.pm: + + [NT] Read mirror files as UTF-8 files to avoid mojibake in + maintainer names. Once again, thanks to Andreas Rönnquist + for the report. + * commands/spellintian.pm: + + [JW,NT] Import Jakub Wilk's spellintian tool with minor + modifications. + + * data/binaries/embedded-libs: + + [BR] Detect embedded ieee-data package. + * data/cruft/non-free-license: + + [BR] Detect autogenerated gperf data. (Closes: #762179). + + [BR] Detect ieee oui db in source files. + * data/cruft/missing-dir-search-path: + + [BR] Fix a false positive in fspy for source-is-missing. + * data/cruft/warn-file-type: + + [BR] Fix a false positive source-is-missing by checking + -nc.js suffix. + + [BR] Fix a false positive source-is-missing in zivot + package by adding .e as binary suffix. + + [BR] Fix a false positive source-is-missing by adding + yorick source file as source. + + [BR] Fix a false positive source-is-missing in + haskell-pretty-show by adding -src.js suffix. + + [BR] Fix a false positive source-is-missing in + iceweasel by adding -prod.js suffix. + * data/debhelper/*: + + [NT] Refresh against unstable to pick up the rename of + libaqbanking-dev. Thanks to Micha Lenk for the reminder. + (Closes: #787937) + * data/debhelper/filename-config-files: + + [NT] Add "links" file. + * data/fields/archive-sections: + + [NT] Pre-emptively support the "debugsym" section, which is + expected to be used by debhelper for "ddebs". + * data/files/js-libraries: + + [NT] Apply patch from Jean-Michael Vourgère to detect + embedded versions of libjs-raphael. (Closes: #788839) + * data/files/privacy-breaker-websites: + + [BR] Detect mascot as logos. + * data/java/constants: + + [NT] Accept Java7 class files without warning as OpenJDK-7 + is now the default implementation. Thanks to Markus + Koschany for the report. (Closes: #786895) + + * debian/changelog: + + [NT] Add missing list of new / removed tags to the + entry for the previous release. + + [NT] Add missing "debfiles" in the list of collections + deprecated in 2.5.28. It was deprecated in that release + despite the omission. + * debian/copyright: + + [NT] Document new text case being under the Expat license. + * debian/{lintian.links,manpages}: + + [NT] Install spellintian in PATH and install its manpage. + Thanks to Paul Wise for the suggestion. (Closes: #767867) + * debian/rules: + + [NT] Generate the spellintian manpage during build. + + * frontend/spellintian: + + [NT] Add symlink to dplint. + + * helpers/coll/objdump-info-helper: + + [NT] Collect readelf output from static libraries. + + [NT] Fix bug that caused lintian to ignore the up to 10 + valid named sections. + + * lib/Lintian/Check.pm: + + [NT] Rewrite check_spelling{,_picky} with a new interface, + which is better suited for additional purposes than just + emitting Lintian tags. + + [JW, NT] Normalise spaces a bit better in check_spelling to + catch some "multi-word" misspellings, where said words are + not on the same line. (Closes: #763456) + * lib/Lintian/Collect/Binary.pm: + + [JW, NT] Make is_pkg_class case-insensitive to avoid some + false-positive "empty-binary-package" warnings. + (Closes: #789151) + + [NT] Make data from static libraries available. + * lib/Lintian/Collect/Package.pm: + + [NT] Create "faux" Lintian::Path entries for missing + intermediate directories. This avoids a crash and made + some checks work correctly even in the absence of such + immediate directories. (Closes: LP: #1351380) + * lib/Lintian/Path.pm: + + [NT] Apply patch from Tomasz Buchert to add "timestamp" + method. + + [NT] Add "faux" method that returns at truth value for + path entries, which Lintian has created from templates + to fully connect all path entries in the package. + * lib/Lintian/Tag/Info.pm: + + [NT] Expand BTS links using https rather than http. + * lib/Test/Lintian.pm: + + [NT] Output spelling mistakes as "diag()" messages now. + + * mail-templates/source-is-missing: + + [BR] Apply patch from Holger Levsen improving language. + + * profiles/debian/ftp-master-auto-reject.profile: + + [NT] Refresh against current rule set. + + * t/scripts/spellintian.t: + + [JW,NT] Import spellintian test case. + + -- Niels Thykier <niels@thykier.net> Sun, 28 Jun 2015 14:08:29 +0200 + +lintian (2.5.31) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - bad-intended-distribution + - dbus-policy-excessively-broad + - debian-pycompat-is-obsolete + - debian-watch-file-accesses-pypi-over-http + - debian-watch-file-unsupported-pypi-url + - dep5-copyright-license-name-not-unique + - dep5-file-paragraph-reference-header-paragraph + - file-should-not-be-compressed + - multiline-architecture-field + - python-version-current-is-deprecated + - uses-no-compression-for-control-tarball + - uses-no-compression-for-data-tarball + - xs-testsuite-header-in-debian-control + + Removed: + - bad-intended-distibution + - compressed-objects.inv + + * checks/binaries.pm: + + [BR] Do not tag with + library-in-debug-or-profile-should-not-be-stripped + when file add "not stripped, too many notes" to its + output. Thanks to Jakub Wilk. (Closes: #775760). + + [AB] Ignore tEH and tEh for spelling-error-in-binary. (Closes: + #782902; bug report and patch by Tomasz Buchert, thanks!) + * checks/changelog-file.{desc,pm}: + + [BR] Correct a typo on tag name and do not raise + bad-intended-distribution if distribution is still + set to UNRELEASED. (Closes: #765344). + + [NT] Apply patches from Ben Finney to permit quotes around + the distribution name in the "to unstable" entries. + (Closes: #784012) + * checks/control-file.{desc,pm}: + + [BR] Apply patch from Johannes Schauer in order + to detect obsolete XS-Testsuite header. + (Closes: #770068). + + [AB] New check for multiline architecture fields in debian/control. + (Closes: #780474) + + [NT] Apply patch from Guillem Jover to update the description + of the xs-testsuite-header-in-debian-control tag. + (Closes: #781397) + * checks/copyright-file.pm: + + [NT] Permit the use of "pkg:arch" dependencies when packages use + symlinked doc-dirs. + * checks/cruft.{desc,pm}: + + [NT] Import "d/pycompat is deprecated" check from + lintian4python. + * checks/dbus.{desc,pm}: + + [NT] Apply patch series from Simon McVittie to + improve the dbus check. In particular, detect dbus + policy files that exposes CVE-2014-8148 and + CVE-2014-8156. (Closes: #776480) + * checks/deb-format.{desc,pm}: + + [BR] Support all format described in deb(5) + but manually reject until dak is ready. + * checks/debian-source-dir.pm: + + [NT] Fix regression where "missing-debian-source-format" was + not emitted if "debian/source" was missing. Thanks to + Jean-Michel Nirgal Vourgère for finding this bug. + (Closes: #781235) + * checks/description.pm: + + [NT] Allow debug packages without an extended description. + * checks/fields.{desc,pm}: + + [BR] Add reference to build-depends-on-metapackage + (Closes: #767107). + + [BR] Check source version (Closes: #749103). + + [NT] Import check of "Python-version: current" being + deprecated from lintian4python. + + [AB] Remove "dev" from list of suffixes to trigger + rc-version-greater-than-expected-version (Closes: #732246) + + [AB] Recognize user@host:path.git URIs in Vcs-Git (Closes: #778323) + * checks/files.{desc,pm}: + + [BR] Rename compressed-objects.inv to + file-should-not-be-compressed and use it for doxygen + map.gz. (Closes: #751949). + + [NT] Merge patch from Nicolas Boulenguez to remove some + partially redundant code. (Closes: #784277) + + [NT] Allow "-dbgsym" as an alternative name to "-dbg" for + packages containing debug symbols. + * checks/init.d.desc: + + [BR] Add reference to #DEBHELPER# token for + script-in-etc-init.d-not-registered-via-update-rc.d. + (Closes: #775467). + * checks/patch-systems.pm: + + [NT] Avoid crashing on debian/patches being a file. + (Closes: #778556) + * checks/po-debconf.pm: + + [NT] Avoid errors from intltool-update. + (Closes: #778558) + * checks/script.{desc,pm}: + + [BR] Fix some false negatives for + command-with-path-in-maintainer-script tag. + (Closes: #769845). + * checks/shared-libs.{desc,pm}: + + [NT] Apply patch from Guillem Jover to recognise the + "Ignore-Blacklist-Groups" meta field in symbols files. + (Closes: #781396) + * checks/source-copyright.{desc,pm}: + + [BR] Fix a false positive for + missing-license-paragraph-in-dep5-copyright tag. + Emit a new specific tag for references to the header paragraph + as a license paragraph. (Closes: #766118). + + [BR] Detect if license short name are unique. + + [BR] Avoid false positive license-problem-undefined-license + for - in short license. + + [BR] Warn when using reference to header license. + (related to bug #769818). + * checks/symlinks.desc: + + [AB] package-contains-broken-symlink: Mention in the tag description + that only direct dependencies built from the same source package can + be checked by lintian. (Closes: #776535) + * checks/watch-file.{desc,pm}: + + [NT] Check for watch files accessing PyPI over HTTP + instead of HTTPS. This check has been imported from + lintian4python (with a different tag name). + + [AB] Check for watch files accessing unsupported PyPI URLs (Check + written by James McCoy and Ben Finney; Closes: #776267) + + * collection/strings: + + [NT] Pass "-a" to strings to avoid possible security + issues in strings. + + * commands/reporting-{lintian-harness,sync-state}: + + [NT] New files (internal commands for the reporting + framework). + + * data/binaries/arch-regex: + + [NT] Add arm64 and ppc64el regex. + + [NT] Correct armel and armhf regex to cope with + statically linked binaries. (Closes: #768884) + * data/binaries/embedded-libs: + + [RG] Do not warn about libpng1.6 embedding libpng + + [RG] Add a new string to detect embedders of libpng + * data/changes-file/known-dists: + + [ADB] Add "stretch". + * data/cruft/rfc-whitelist: + + [BR] Whitelist dual licensed vorbis rfc5215. + * data/debhelper/dh_addons-manual: + + [BR] Apply patch from Jean-Michel Nirgal Vourgère for + detecting missing-build-dependency-for-dh-addon apache2. + (Closes: #778820). + * data/fields/binary-fields: + + [AB] Add ghc-package (Source: /usr/share/cdbs/1/class/hlibrary.mk) + + [AB] Add gstreamer-* fields as generated by dh_gstscancodecs + + [AB] Add lua-versions as mandated by the Debian Lua Policy + * data/fields/perl-provides: + + [NT] Update perl-provides for perl 5.20.2. + * data/files/js-libraries: + + [AB] Use "tinymce" instead of "tinymce2?" (Closes: #783327) + * data/files/obsolete-paths: + + [BR] Add /etc/bash_completion.d (Closes: #776954). + * data/files/privacy-breaker-websites: + + [BR] Add specific test for privacy breach with modernizr.js + (Closes: #769679). + + [BR] Add /logos/ to privacy-breach-logo. + + [BR] Add specific test for libjs-openlayer. + + [BR] Detect twitter logo. + + [BR] Detect libjs-jquery-flot. + + [BR] Detect libjs-jquery-mobile. + + [BR] Detect beta of libjs-query. + + [BR] Detect libjs-prototype. + * data/spelling/corrections: + + [BR] Add portugese||Portuguese. (Closes: #764015). + * data/spelling/corrections-multiword: + + [BR] Add "allow one to" and "permit one to". (Closes: #756128). + + * debian/control: + + [NT] Recommend dpkg (>= 1.17.14) for the --ctrl-tarfile + option in dpkg-deb. Lintian relies on it to support + (u)deb files without a gzip compressed control.tar file. + + [AB] Promote xz-utils from Suggests to Depends. (Closes: #774729) + * debian/copyright: + + [AB] Update copyright years. + * debian/rules: + + [NT] Add CLEAN_TEST_WORK_DIR to be able to control + whether the test artifact directory should be cleaned + during a call to "debian/rules clean" (defaulting to + do the clean). + + * doc/CREDITS: + + [AB] Add contributors from 2014 and 2015. + + * frontend/lintian: + + [NT] Produce a better error message for lintian detects + that a check has a dependency on an unknown collection. + + * helpers/coll/objdump-info-helper: + + [NT] Apply patch from Matt Kraai that adjusts the regex + used for parsing readelf output. Thanks to Martin Pitt + for reporting the issues. (Closes: #771054) + + * lib/Lintian/Collect/Binary.pm: + + [NT] Add "debug" class for "is_pkg_class". This uses the + package name to guess if the package is expected to + contain debug symbols. + * lib/Lintian/Command.pm: + + [NT] Use croak() rather than L::Util's fail() on errors. + The issues are generally not "internal errors". + * lib/Lintian/Internal/FrontendUtil.pm: + + [NT] Work around a bug in autodie, where an fdopen of a + file-descriptor always failed with "bad file descriptor". + * lib/Lintian/Lab.pm: + + [NT] Null fields extra metadata fields in the lab storage + that are no longer used. These were previously used by + the reporting framework. + + [NT] Automatically correct lab metadata, when the lab + discovers an entry does not exist. Any remains of the + entry will be removed as well. Previously, the lab would + just throw an error and require a manual correction of + the lab. + * lib/Lintian/Reporting/ResourceManager.pm: + + [NT] Only preserve the last extension of the installed + resource. Previously it would keep all "extensions", + including long parts of the original name if it happened + to contain a period. + * lib/Lintian/Util.pm: + + [NT] Prefer dpkg-deb --ctrl-tarfile to "ar p" when dpkg + is recent enough. + + [NT] Stricten the permitted whitespace at the end of GPG + marker lines. This is the same issue as CVE-2015-0840, + except lintian never attempted to validate the signature. + + [NT] Explicitly use YAML::XS for reading and writing + YAML files. YAML::Any does not specify an interface for + reliably read YAML files in UTF-8 encoding leading to + "mojibake" in some cases. Thanks to Andreas Rönnquist + for reporting the issue. (Closes: #784639) + + * profiles/ubuntu/main.profile: + + [BR] Exclude no-human-maintainers (Closes: #769036). + + * reporting/config: + + [NT] Include and briefly document new configuration + options. + * reporting/{harness,html_reports}: + + [NT] Rewrite harness and remove the hard dependency on + a functional permanent laboratory in the reporting + framework. + - The framework now relies on the "harness state cache" + (a YAML file), which can be updated atomically. + - The harness framework now avoids stat(2)ing all + artefacts on the mirror just to check if they are + unchanged. + - The harness frontends use less memory and now + releases most of it before calling html_reports. + This should reduce the peak memory requirements + considerably for the html_reports part of the run. + * reporting/{html_reports,templates/*}: + + [NT] Reorder the datastructures shared with templates + for better data sharing. This reduces the memory + consumption of html_reports by ~25% on lintian.d.o. + * reporting/html_reports: + + [NT] Templates are now always read and (their output) + written in the UTF-8 encoding. + + [NT] Stop reading $statistics_file from the config file. + + * t: + + [NT] Apply patch from Matt Kraai to fix test case on + i386. (Closes: #771113) + * t/scripts/pod-spelling.t: + + [AB] Hardcode aspell as spelling command since Test::Spelling + prefers spell over aspell if installed, too. This avoids having to + add a "Build-Conflicts: spell". + * t/tests/files-embedded/: + + [AB] Add test case for #783327. + + -- Niels Thykier <niels@thykier.net> Thu, 14 May 2015 08:11:27 +0200 + +lintian (2.5.30) unstable; urgency=medium + + The "welcome Axel Beckert!" release. + + * Summary of tag changes: + + Removed: + - deprecated-kdelnk-file + + * checks/menu-format.{desc,pm}: + + [NT] Retire check for "kdelnk" files. + + * collection/unpacked: + + [NT] Correct handling of files with 2 or more consecutive + backslashes. + + * debian/control: + + [AB] Add a Homepage header pointing to https://lintian.debian.org/ + * debian/copyright: + + [AB] Add myself to debian/copyright. + * debian/rules: + + [NT] Ensure that po4a/*.cfg are always up to date during releases + builds. + + * helpers/coll/strings-helper: + + [NT] Filter out duplicate strings. This applies to the + majority of all ELF binaries (except ones with very exotic + file names with glyphs like ":"). + + * lib/Lintian/Internal/FrontendUtil.pm: + + [AB] Don't clean HOME and some XDG_* variables when sanitizing the + environment. (Closes: #766737) + + * t: + + [JW,NT] Apply patch from Johannes Schauer to fix FTBFS with + newer dpkg that have stricter checking of build-profiles. + + -- Niels Thykier <niels@thykier.net> Sat, 25 Oct 2014 17:03:48 +0200 + +lintian (2.5.29) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - dbus-policy-at-console + - dbus-policy-without-send-destination + - dbus-session-service-wrong-name + - dbus-system-service-wrong-name + - invalid-profile-name-in-build-profiles-field + - invalid-profile-name-in-source-relation + - invalid-restriction-formula-in-build-profiles-field + - restriction-formula-with-debhelper-with-conflicting-version + - restriction-formula-with-debhelper-without-debhelper-version + - restriction-formula-with-versioned-dpkg-dev-conflict + - restriction-formula-without-versioned-dpkg-dev-dependency + + Removed: + - invalid-restriction-label-in-source-relation + - invalid-restriction-namespace-in-source-relation + - invalid-restriction-term-in-source-relation + - restriction-list-with-debhelper-with-conflicting-debhelper-version + - restriction-list-with-debhelper-without-debhelper-version + - restriction-list-with-versioned-dpkg-dev-conflict + - restriction-list-without-versioned-dpkg-dev-dependency + - stageX-profile-used-but-no-binary-package-dropped + + * checks/{control-file,fields}.{desc,pm}: + + [NT] Apply patch from Johannes Schauer to support the + new build profile syntax. (Closes: #763773) + * checks/dbus.{desc,pm}: + + [NT] New check by Simon McVittie to discover some dbus + related issues. (Closes: #762609) + * checks/nmu.pm: + + [JW] Avoid chopping off trailing ">" in emails in the + canonicalize subroutine. (Closes: #766468) + * checks/rules.pm: + + [JW,NT] Fix undef warning for packages with empty an + empty d/rules file. (Closes: #766033) + * checks/source-copyright.pm: + + [NT] Apply patch from Johannes Schauer to optimise the + check. + + [NT] Optimise for "dir/*" wildcards in DEP-5 copyright + files. + * checks/watch-file.pm: + + [NT] Fix undef warning with some watch files. Thanks + to Axel Beckert for reporting the bug. + (Closes: #765995) + + * collection/{bin-pkg-control,unpacked}: + + [NT] Pass "-m" to tar to make it avoid "correcting" the + timestamp of the extracted files. Lintian does not need + it for correctness, so it can make tar save a few syscalls + here. + + [NT] Explicitly pass tar options to make it extract files + as the current user and applying the users umask. This is + mostly to be explicit about how things are extracted. + * collection/file-info: + + [NT] Stop collecting file-info for "non-files". The output + is not used and often trivial / predictable from other data + input already available. + * collection/strings: + + [NT] Stop creating "elf-index" file as nothing uses it. + * collection/unpacked: + + [NT] Gracefully handle when symlink targets contains + newlines. Thanks to Faheem Mitha for reporting the bug. + (Closes: #765311) + + * frontend/lintian: + + [NT] Aggressively reset the environment a well-defined + state at start up. Only ENV variables starting with + "LINTIAN_" (and a select few well known variables) are + preserved. + + [NT] Runtime for collections and checks now only requires + a single --debug option. Lintian will now also show + runtime for other things (e.g. total runtimes). + + [NT] Add --perf-debug and --perf-output options to enable + logging for performance data. This is mostly intended + to allow collecting performance data from archive-wide + runs. + + [NT] Hide some options in the default output for --help. + These can now be shown with "--help=extended". + + [NT] Add a new "Developer/special usage options" section + in the --help output for some options (e.g. --debug). + This section is hidden by default. + + * lib/Lintian/Relation.pm: + + [NT] Unparsable entries are now included in relation + objects rather than being silently discarded. + * lib/Lintian/Util.pm: + + [NT] Purge even more ENV variables in clean_env. + + [NT] Add "pipe_tee" subroutine for tee'ing data from one + input file descriptors to one or more output file + descriptors. + + * man/lintian.pod.in: + + [NT] Document the performance logging options. + + [NT] Add a new "Developer/special usage options" section + in the --help output for some options (e.g. --debug). + + * private/generate-html-docs: + + [NT] Add doctype and encoding to generated files. + + * reporting/harness: + + [NT] Add missing import. + * reporting/html_reports: + + [NT] Correct the command line in the creation of the + lintian.log.gz. + * reporting/{html_reports,templates/*}: + + [NT] Correct the generated HTML, which was invalid in + some cases. + * reporting/templates/{head,lintian.css}.tmpl: + + [NT] Define a default "viewport". This slightly improves + the output on some mobile devices. + + [NT] Add some special cases for "smaller" viewports in the + style sheet. + * reporting/templates/maintainer.tmpl: + + [NT] Correct name of variable to avoid using an undefined + variable. + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [NT] Add "vivid" per request of Iain Lane. + + -- Niels Thykier <niels@thykier.net> Fri, 24 Oct 2014 23:15:52 +0200 + +lintian (2.5.28) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - license-problem-cc-by-nc-sa + + * checks/*: + + [NT] Remove all uses of "control", "debfiles" and + "unpacked". + * checks/*: + + [NT] Remove all uses of the "doc-base-files", "init.d" + and "menu-files" collections. + * checks/changes-file.pm: + + [NT] Add "-lts" as common suffix for distribution, + which makes "squeeze-lts" a valid distribution. Thanks + to Holger Levsen for the report. (Closes: #763339) + * checks/description.pm: + + [SL] show the actual description when it is too short. + * checks/files.pm: + + [NT] Only flag the Doxygen generated "md5" file as + useless. Thanks to Mathieu Malaterre for reporting. + (Closes: #762660) + * checks/patch-systems.pm: + + [NT] Rewrite using index rather than debfiles to analyse + the package. A side-effect of that means that Lintian + can now check patches stored in the upstream part of the + packages. (Closes: #563773) + * checks/po-debconf.pm: + + [NT] Avoid writing test.pot to the unpacked package. + (Closes: #699022) + * checks/testsuite.pm: + + [NT] Recognise autopkgtest-pkg-{perl,ruby} values for + the "Testsuite" field. Extended validation is not + implemented though. Thanks to Niko Tyni for reporting + the issue. (Closes: #762177) + + * collection/*: + + [NT] Remove all uses of "debfiles" and "control". + * collection/{debfiles,doc-base-files,init.d,menu-files}{,.desc}: + + [NT] Deprecated, will be removed in a future release. + They will now be now auto-removed at the end of the + processing if they have been collected previously. + + * data/*: + + [NT] Refresh some of the data against unstable. + * data/cruft/non-free-license: + + [BR] Detect cc-by-nc-sa license. (Closes: #749768). + * data/standards-version/release-dates: + + [NT] Add 3.9.6. (Closes: #762460) + + * debian/control: + + [NT] Bump Standards-Versions to 3.9.6 - no changes + required. + * debian/dirs: + + [NT] Stop installing /var/spool/lintian + * debian/lintian.install: + + [NT] Install Lintian::Tutorial POD documents into + /usr/share/perl5. (Closes: #761930) + * debian/postinst: + + [NT] Remove empty Lintian labs in /var/spool/lintian on + upgrade. + * debian/postrm: + + [NT] Remove the "changes" folder when purging the + Lintian lab in /var/spool/lintian. + * debian/source/lintian-overrides: + + [NT] Remove obsolete lintian overrides. + + * doc/tutorial/Lintian/Tutorial/WritingChecks.pod: + + [NT] Mention "safe_qx" as alternative to qx/`` in the + tutorial. + + * lib/Lintian/Collect{,/*}.pm: + + [NT] Deprecate the use of "control", "debfiles" and + "unpacked". Consumers are recommended to use + index_resolved_path and control_index_resolved_path + instead. + + [NT] Remove all uses of debfiles (both the method and + the collection). All methods (except "debfiles") now + depend on "unpacked" instead. + + [NT] Remove all uses of the "control" and the "unpacked" + method. + * lib/Lintian/Command.pm: + + [NT] Add support for running a sub in the child before + it calls exec. + + [NT] Add support for shell-like (e.g. &2) redirects of + stdout and stderr. + + [NT] Add safe_qx sub for replacing qx() that supports + most of the features of spawn(). + * lib/Lintian/Path.pm: + + [NT] Add support for fetching and (where it makes sense) + opening the underlying file system object. It also adds + a few minor safety guards to common issues with symlinks. + (Closes: #698930) + * lib/Lintian/Path/FSInfo.pm: + + [NT] New file. + + * reporting/*: + + [NT] Avoid forking a shell when invoking commands. This + has the side effect of allowing some paths from the + configuration to contain spaces (among other), where it + previously would not work. + * reporting/templates/maintainer.tmpl: + + [NT] Use https:// in links to other resources/sites and + add link to tracker.debian.org. + + -- Niels Thykier <niels@thykier.net> Thu, 02 Oct 2014 19:27:09 +0200 + +lintian (2.5.27) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - bad-exception-format-in-dep5-copyright + - changed-by-address-is-root-user + - exclusive-runtime-tests-field + - maintainer-address-is-root-user + - source-contains-prebuilt-doxygen-documentation + - uploader-address-is-root-user + - useless-autogenerated-doxygen-file + + * checks/cruft.pm: + + [BR] Fix a few false positives is for javascript source-is-missing. + + [BR] Detect prebuilt doxygen documentation. + * checks/fields.pm: + + [JW] Fix incorrectly anchored regexps. (Closes: #760987) + * checks/files.pm: + + [BR] Detect useless doxygen generated file. (Closes: #751945) + * checks/manpages.desc: + + [BR] Improve documentation of manpage-has-errors-from-man. + (Closes: #757068). + * checks/menu-format.pm: + + [BR] Fix a false positive in desktop-mime-but-no-exec-code. + (Closes: #760677). + * checks/source-copyright.pm: + + [BR] Fix false positive for space-in-std-shortname-in-dep5-copyright + with alternative licenses. (Closes: #760642). + + [BR] Fix false positive for with exception syntax. + + [BR] Fix false positive of + wildcard-matches-nothing-in-dep5-copyright. (Closes: 761125) + * checks/testsuite.{desc,pm}: + + [BR] Fix false positive missing-runtime-tests-field. + (Closes: #760714). + + [BR] Print line in case of error. + + * data/fields/metapackages: + + [BR] Add qt4-default and qt5-default as metapackage. + (Closes: #756158). + + * lib/Lintian/Check.pm: + + [BR] Detect package being built as user root. + (Closes: #612583). + + -- Niels Thykier <niels@thykier.net> Sat, 13 Sep 2014 22:48:36 +0200 + +lintian (2.5.26) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - backports-changes-missing + - backports-upload-has-incorrect-version-number + - debian-upstream-obsolete-path + - description-is-pkg-name + - description-too-short + - desktop-mime-but-no-exec-code + - empty-short-license-in-dep5-copyright + - file-without-copyright-information + - invalid-escape-sequence-in-dep5-copyright + - invalid-short-name-in-dep5-copyright + - license-problem-bad-php-license + - license-problem-php-license + - license-problem-undefined-license + - no-dep5-copyright + - package-contains-timestamped-gzip + - pipe-symbol-used-as-license-disjunction + - privacy-breach-may-use-debian-package + - source-contains-autogenerated-visual-c++-file + - space-in-std-shortname-in-dep5-copyright + - unused-file-paragraph-in-dep5-copyright + - wildcard-matches-nothing-in-dep5-copyright + + Removed: + - copyright-refers-to-bad-php-license + - copyright-refers-to-problematic-php-license + + * checks/binaries.{desc,pm}: + + [NT] Apply patch from Damyan Ivanov to handle the new + Perl5 library path location. + * checks/changes-file.{desc,pm}: + + [BR] Add patch from Ivo De Decker, add check for + backports changes file. (Closes: #732225). + + [BR] Apply patch from Tomasz Buchert, add check for + timestamped gzip files. (Closes: #738591). + * checks/cruft.{desc,pm}: + + [BR] Use license checking framework for checking php license. + (Closes: #752540). + + [BR] Add a pedantic tag for autogenerated file made by Visual + C++. + + [BR] Fix another false positive for gfdl invariants in + php-elisp, doc-linux-fr and in clisp. + + [BR] Detect old path for upstream metadata. + * checks/description.{desc,pm}: + + [SL] Check for one word short description. (Closes: #756643). + + [SL] Check if the short description is the same as the + package name. (Closes: #757398). + * checks/fields.pm: + + [NT] Apply patch from Salvatore Bonaccorso to recommend the + new cgit URLs for anonscm.debian.org over the webgit URLs. + (Closes: #756940) + * checks/files.pm: + + [BR] Fix false positive in detection of cross arch pkgconfig. + (Closes: #755902). + + [BR] Detect privacy breach fixable by using existing debian + package. + + [BR] Whitelist <link rel="generator-home"...> in privacy breach + checker. + + [NT] Apply patch from Damyan Ivanov to handle the new + Perl5 library path location. (Closes: #757921) + * checks/init.d.pm: + + [NT] Allow usage of /lib/init/init-d-scripts as alternative to + implementing init.d targets in the script itself. Thanks to + Yaroslav Halchenko for the report. (Closes: #758236) + * checks/menu-format.pm: + + [BR] Add new desktop keys files. Move key list to data. + (Closes: #755266). + + [NT] Apply patch from Niklas Fiekas to check for desktop files + with MimeType-field but no format code in the Exec-field. + (Closes: #757383) + * checks/phppear.pm: + + [BR] Fix a false positive for + missing-pkg-php-tools-addon phpcomposer, thanks to + David Prévot (Closes: #754738). + * checks/source-copyright.{desc,pm}: + + [BR] Add a pedantic warning about non dep-5 debian/copyright. + + [BR] Detect empty required fields. (Closes: #748452, #656801). + + [BR] Detect undefined license. (Closes: #733659). + + [BR] Apply patch from Johannes Schauer in order + to warn if the pipe symbol is used in license. + (Closes: #757583). + + [BR] Apply patch from Johannes Schauer in order to + check if DEP-5 debian/copyright covers all files + in the unpacked sources. (Closes: #757551). + + [BR] Detect bad short name and space in license. + Thanks to Clint Adams and Johannes Schauer. + (Closes: #747248, #757615). + + [BR] Avoid to raise file-without-copyright-information + for .pc directory. + * checks/systemd.pm: + + [NT] Allow usage of /lib/init/init-d-scripts as alternative to + sourcing /lib/lsb/init-functions. + * checks/testsuite.desc: + + [BR] Update ref url. (Closes: #755275). + + * data: + + [NT] Refresh several data files against sid. + * data/cruft/gfdl-license-fragments-checks: + + [BR] Add tla false positive for gfdl license text. + * data/cruft/non-distributable-files: + + [BR] Detect play boy Lenna test image. + * data/cruft/non-free-files: + + [BR] Add non free icc profile HP5000_UVDuraImageGlossMaxQ.icc + from nips2 package. + * data/cruft/warn-file-type: + + [BR] Add debug source suffix for detecting javascript + source-is-missing and improve test suite. Fix a + false positive in mono and in jenkins. + * data/debhelper/dh_commands: + + [BR] Add patch from Piotr Ożarowski, dh-python2 + moved to dh-python package (Closes: #740161). + * data/debhelper/dh_commands-manual: + + [JW] Add dh_apache2 relations to avoid a false-positive. + Thanks to Axel Beckert for reporting the issue. + (Closes: #748688) + + [NT] Add ":any" to all python related dependencies. Thanks + to Matthias Klose for reporting the issue. (Closes: #733733) + * data/debhelper/*: + + [NT] Refresh against sid. Thanks to Christian Marillat for + reporting the out of date data. (Closes: #758891) + * data/fields/obsolete-packages: + + [NT] Add ruby1.9.1, ruby1.9.1-dev and libruby1.9.1 per + request of the Ruby team. + * data/files/js-libraries: + + [BR] Apply patch from Paul Wise for detection of + libjs-excanvas. + * data/files/privacy-breaker-website: + + [BR] Improve detection of sourceforge logos. + + [BR] Detect libjs-jquery use. + + [BR] Detect libjs-mathjax use. + + [BR] Add count.digitalpoint.com to statistics website. + + [BR] Add xoom.com to privacy-breach-donation (used by + freesci-doc package). + + [BR] Detect libjs-jquery-ui use. + + [BR] Detect pledgie.com as a donation website. + * data/source-copyright/bad-short-licenses: + + [BR] Add unspecified and - as bad license. + + [BR] Detect some invalid short name. Thanks to + Johannes Schauer. + + * debian/control: + + [NT] Update recommendation on libautodie-perl to + include perl 5.20 as alternative. + * debian/rules: + + [NT] Gracefully handle the case where there are no + translations of tag descriptions. + + * doc/tutorial/Lintian/Tutorial/WritingChecks.pod: + + [NT] Correct tutorial now that the "index" collection + is gone. + + * lib/Lintian/Internal/FrontendUtil.pm: + + [NT] Ignore set, but empty locale environment variables. + Thanks to Michael Prokop for the report. (Closes: #759726) + + * reporting/{config,html_reports}: + + [NT] Add support for copying the documentation rather than + symlinking to it. Thanks to Nicolas Sévelin-Radiguet for + reporting the issue. (Closes: #756301) + + * t: + + [BR] Fix FTBFS on !amd64. (Closes: #757802). + + -- Niels Thykier <niels@thykier.net> Sat, 06 Sep 2014 10:44:36 +0200 + +lintian (2.5.25) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - capitalization-error-in-description-synopsis + - incorrect-naming-of-pkcs11-module + - package-contains-thumbnails-dir + - pkg-config-bad-directive + - source-contains-prebuilt-ms-help-file + - spelling-error-in-description-synopsis + + * checks/*.desc: + + [NT] Replaced "index" with "unpacked" in Needs-Info. + * checks/cruft.{desc,pm}: + + [BR] Add a forgotten return statement, and avoid + false positive for deployJava.js (Closes: #745152). + + [BR] Fix another false positive in GFDL detection. + + [BR] Use whitelist for know good RFC (Closes: #753970). + + [BR] Detect and warn about *.chm file + (MS Windows HtmlHelp Data). (Closes: #653910). + * checks/description.{desc,pm}: + + [NT] Apply patch from Anders Jonsson to check spelling + of the package synopsis. (Closes: #747266) + * checks/files.{desc,pm}: + + [RG,NT] Check for invalid named p11-kit modules in + /usr/share/p11-kit modules. (Closes: #741346) + + [BR] Detect cross architecture pkg-config file. + (Closes: #539225). + + [BR] Add a sanity check for pkg-config files. + (Closes: #676803, #657699). + + [BR] Detect .thumbnails dir (Closes: #660797). + + * collection/*.desc: + + [NT] Replace "index" with "unpacked" in Needs-Info. + * collection/index{,.desc}: + + [NT] Removed file. + * collection/unpacked{,.desc}: + + [NT] Have unpacked create indices when the package is + being unpacked. This is done using a pipeline to avoid + decompressing the data.tar file multiple times. + + * data/cruft/missing-dir-search-path: + + [BR] Close false positive for mathjax, search under + /unpacked. + + [BR] Fix another false positive for emscripten. + * data/cruft/warn-file-type: + + [BR] add yc suffix for detecting javascript + source-is-missing and improve test suite. Fix a + false positive in libdevel-nytprof-perl. + * data/files/js-libraries: + + [NT] Apply patch from Marcelo Jorge Vieira to correct + a regular expression for finding embedded copies of + libjs-jquery-history. (Closes: #753077) + * data/init.d/virtual_facilities: + + [NT] Apply patch from Guillem Jover to fix a typo. + * data/scripts/interpreters: + + [NT] The texlua binary is now provided by + texlive-binaries (>= 2014.20140512.33982) instead of + luatex. Thanks to Norbert Preining for reporting this. + (Closes: #752611) + * data/symlinks/well-known-symlinks-target: + + [NT] Apply patch from Guillem Jover to fix a typo in + a regex. (Closes: #752229) + + * debian/control: + + [NT] Add Breaks/Replaces for funny-manpages due to a + bug in funny-manpages before 1.3-5.1. Thanks to Adrian + Bunk for reporting. (Closes: #753165) + + * lib/Lintian/Collect{,/*}.pm: + + [NT] Replace "index" with "unpacked" in Needs-Info + requirements. + + * reporting/config: + + [NT] Remove "$statistics_file" from the sample config. + * reporting/harness: + + [NT] Set the state cache to 0644 after creating it. + * reporting/html_reports: + + [NT] Move the statistics file to the harness state cache + dir. It only contains information about the last run and + is re-generated as needed. If the file exists, it will + be moved to its new location if possible. + + -- Niels Thykier <niels@thykier.net> Sun, 13 Jul 2014 20:36:30 +0200 + +lintian (2.5.24) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - uses-deprecated-compression-for-data-tarball + + * checks/file.pm: + + [BR] Speed-up privacy check (Closes: #745877). + + [BR] Fix false positive for detecting minified + javascript (Closes: #745877). + + [BR] Fix false positive due to cpython name + encoded in compiled python file name (Closes: #752218). + + [BR] Add another suffix to source-is-missing for javascript + file. + + [BR] Add url if possible for privacy breach. + * checks/changelog-file.pm: + + [BR] Use lower case for bad intended distribution. + * checks/deb-format.{desc,pm}: + + [NT] Apply patch from Guillem Jover to check for + deprecated compressions on data.tar-members. + (Closes: #745740) + * checks/menu-format.pm: + + [JW] Also validate desktop files in usr/share/xsessions. + (Closes: #746402) + + * data/files/privacy-breaker-{fragments,websites}: + + [BR] Improve detection rules. + + * debian/rules: + + [NT] Extract some tasks from the build-stamp target, + so they can be run independently. + + [NT] Create a "rebuild-lintian.debian.org" target that + only (re-)builds/regenerates the needed parts for the + lintian.debian.org checkout. (Closes: #751926) + + * frontend/{dplint,lintian}: + + [NT] Fix a bug in command-line parsing, where "--" + was interpreted as a literal file-name rather than + the "end of options" marker. Thanks to Luca + Falavigna for spotting it. (Closes: #746790) + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [NT] Add utopic as valid Ubuntu distribution. + + -- Niels Thykier <niels@thykier.net> Sun, 22 Jun 2014 22:04:20 +0200 + +lintian (2.5.23.1) unstable; urgency=medium + + * debian/rules: + + [NT] Avoid regenerating po4a files if not needed. + * debian/source/lintian.overrides: + + [NT] Add overrides for false-positive "evil JSON" license + problem, which is triggered by the current Lintian on the + FTP master host. + + -- Niels Thykier <niels@thykier.net> Wed, 18 Jun 2014 06:39:15 +0200 + +lintian (2.5.23) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - init.d-script-depends-on-all-virtual-facility + - maven-plugin-in-usr-share-java + - needless-suggest-recommend-libservlet-java + - pre-depends-directly-on-multiarch-support + - quilt-series-without-trailing-newline + - source-contains-prebuilt-sphinx-documentation + + * checks/binaries.{desc,pm}: + + [NT] Apply patch from Samuel Bronson to improve the + description of the debug-symbols-directly-in-usr-lib-debug + tag. + + [BR] Extend eglibc whitelist to glibc. (Closes: #748881). + * checks/changelog-file.pm: + + [BR] Allow to sid for experimental to unstable comment. + (Closes: #747407). + * checks/control.{desc,pm}: + + [BR] Apply patch from Helmut Grohne to warn about + Pre-Depends: multiarch-support in debian/control. + (Closes: #747439). + * checks/cruft.{desc,pm}: + + [BR] Detect sphinx generated documentation and avoid + a false positive for minified javascript and missing sources. + (Closes: #742693). + + [BR] Do not remove newline with c++ comments. Fix a false + positive. + + [BR] Fix a GFDL detection false positive in texlive. Thanks + to Norbert Preining. (Closes: #743754). + + [BR] Fix another false positives in GFDL detection. + + [BR] Fix a false positive for source-is-missing for + deployJava.js. (Closes: #745152). + + [BR] Fix a false positive for GFDL detection in + soundjuicer. (Closes: #748375). + + [BR] Fix a false positive for source-is-missing in e2fsprogs. + (Closes: #748421). + * checks/files.pm: + + [BR] Use Lintian::Data for detecting embedded library. + + [BR] Add context in embedded lib tagging. + + [BR] Avoid to warn on bookmark link. (Closes: #746656). + * checks/fields.{desc,pm}: + + [NT] Apply patch from Johannes Schauer to rename "notest" + build-profile to "nocheck". (Closes: #743840) + + [NT] Support giving replacements for obsolete packages. + + [NT] Fix a bug with versioned dependencies on obsolete + packages with non-obsolete alternatives. + * checks/infofiles.desc: + + [NT] Apply patch from Samuel Bronson to improve some of + the examples. + + [NT] Apply patch from Don Armstrong to ignore jpg/jpeg images + beneath /usr/share/info. (Closes: #748167) + * checks/init.d.{desc,pm}: + + [BR] Detect $all virtual dependency in legacy init scripts. + Thanks to Holger Levsen. (Closes: #737867). + * checks/java.{desc,pm}: + + [SL] Do not trigger a warning when a jar is not in + /usr/share/java and the package name matches. (Closes: #746744). + lib.*maven.*plugin.*java. (Closes: #743446). + + [SL] Catch uses of Java8 byte code. (Closes: #743384). + + [SL] Warn that the suggests/recommends on libservlet[\d\.]+-java is + needless (Closes: #743453) + + [SL] missing-classpath should be disabled on Java binaries + + [NT] Exclude some jar files from "codeless-jar" tag based + on the basename of the jar file. This is intended to + reduce the number of codeless jars for source/doc jars in + eclipse(-based) packages. + * checks/patch-systems.{desc,pm}: + + [BR] Warn against trailing newline in debian/patches/series. + (Closes: #746362). + * checks/source-copyright.pm: + + [NT] Permit the use of "https://" in DEP-5 format URIs even + if the policy suggests that they have to use "http://". + (Closes: #744981) + * checks/testsuite.pm: + + [JW] Add new restrictions for DEP-8 tests. (Closes: #746305) + + * data/binary/embedded-libs: + + [RG] Detect embedded copies of lcms, lcms2, libmms, libminiupnpc, + libupnp, and libyaml, polarssl. + + [RG] Don't detect mariadb as embedder of mysql. + + [BR] Detect libidn*, and libsrtp. + + [NT] Apply patch from Samuel Bronson to detect mpfr and gmp. + + [BR] Extend eglibc whitelist to glibc. + * data/cruft/non-distributable-files: + + [BR] Add a file comes from the Novell libc Software Development + Kit. (Closes: #745802) + * data/cruft/non-free-files: + + [BR] Add all profiles from icc-profiles non free package. + + [BR] Add icc profiles from Adobe. + + [BR] Add icc profiles from http://www.color.org/srgbprofiles.xalter. + + [BR] Add Apple icc profile: Color LCD Calibrated, Copyright + Apple Computer, Inc., 2003 + + [BR] Add old srgb profile from HP: IEC 61966-2.1 Default RGB + colour space - sRGB, Copyright (c) 1998 Hewlett-Packard Company + * data/fields/obsolete-packages: + + [NT] Add hardening-includes and hardening-wrapper on request of + Thijs Kinkhorst. (Closes: #711193) + + [NT] Add python-support on request of Luca Falavigna. + (Closes: #746563) + * data/java/constants: + + [SL] introduce this file to specify JDK values + * data/scripts/maintainer-script-bad-command: + + [BR] Avoid a false positive for + maintainer-script-should-not-use-update-alternatives-set. + (Closes: #745568). + + * debian/control: + + [NT] Add Build-Depends on po4a. + * debian/lintian.install: + + [NT] Install translations. + * debian/{lintian.,source/}lintian-overrides: + + [NT] Add overrides for using hardening-includes. + * debian/rules: + + [NT] Add rules for handling translations. + + [NT] Run dh_lintian during binary-indep target. + + * frontend/lintian{,-info}: + + [NT] Use localized version of tag descriptions. + (Closes: #663155) + + * lib/Lintian/{CheckScript,Profile}.pm: + + [NT] Add support for translations of tag descriptions. + + * po4a: + + [NT] New directory for translations. + + * private/private/gen-po4a-conf: + + [NT] New file. + + * README: + + [NT] Document how to make and contribute translations. + + -- Bastien Roucariès <roucaries.bastien+debian@gmail.com> Tue, 17 Jun 2014 21:57:58 +0200 + +lintian (2.5.22.1) unstable; urgency=medium + + * checks/ocaml.{desc,pm}: + + [NT] Replace unnecessary uses of file_info with index. + + * data/binary/embedded-libs: + + [RG] Detect embedded copies of libmpg123. + * data/fields/perl-provides: + + [NT] Refresh against Perl 5.18.2. + * data/spelling/corrections: + + [RG] Add "functiosn" to the list of spelling mistakes. + + * frontend/lintian: + + [NT] Fix a regression that completely broke the + command-line argument "--packages-from-file", when + the file was "-". + + * lib/Lintian/Relation.pm: + + [JW,NT] Fix dependency-testing issues caused by too + greedy regular expressions in the dependency parser. + (Closes: #742989) + + * reporting/templates/tags.tmpl: + + [JW,NT] Fix grammatical error in a template. + (Closes: #742985) + + -- Niels Thykier <niels@thykier.net> Sun, 30 Mar 2014 20:55:52 +0200 + +lintian (2.5.22) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - invalid-restriction-label-in-source-relation + - invalid-restriction-namespace-in-source-relation + - invalid-restriction-term-in-source-relation + - license-problem-gfdl-non-official-text + - license-problem-non-free-RFC-BCP78 + - privacy-breach-google-plus + - privacy-breach-twitter + - restriction-list-with-debhelper-with-conflicting-debhelper-version + - restriction-list-with-debhelper-without-debhelper-version + - restriction-list-with-versioned-dpkg-dev-conflict + - restriction-list-without-versioned-dpkg-dev-dependency + - source-is-missing + - stageX-profile-used-but-no-binary-package-dropped + + * checks/*: + + [NT] Avoid using "I" or "we" in tag descriptions. + + [NT] When looping over the names of binary packages, + prefer the order they are listed in the control file. + Previously they were either sorted by name or ordered + by Perl's hash iterator. + * checks/control-file.{desc,pm}: + + [NT] Apply patch from Johannes Schauer to validate + build-profile usage. + * checks/control-files.pm: + + [NT] Remove special case for udebs on empty control + files. Thanks to Cyril Brulebois for testing it. + * checks/cruft.pm: + + [BR,NT] Optimise the GFDL check considerably in some + cases (e.g. the linux source). (Closes: #738342) + + [BR] Factorize GFDL detection. Detect non official + wordings of GFDL invariant section. (Closes: #717916). + Fix some old false positives. + (Closes: #742260, #741212). + + [BR] Add opentoken non official wording for GFDL + invariant section, thanks to Nicolas Boulenguez. + (Closes: #740183). + + [BR] Detect minified js based on line length. + (Closes: #735348). + + [BR] Detect missing sources for minified javascript, flash project, + flash files, and elf binary. + * checks/fields.{desc,pm}: + + [NT] Apply patch from Johannes Schauer to validate + build-profile usage. (Closes: #740607) + * checks/files.desc: + + [BR] Raise file-name-in-PATH-is-not-ASCII and + file-name-in-PATH-is-not-ASCII to error + (see policy 10.10), thanks to Helmut Grohne. + (Closes: #739347) + + [BR] Improve privacy-breach tags wording, thanks to Paul Wise. + (Closes: #738176) + * checks/menu-format.desc: + + [NT] Apply patch from Charles Plessy to correct an URL + in a tag reference. (Closes: #738454) + * checks/symlinks.pm: + + [BR] Use Lintian::Data for safe symlinks list. Add + /dev/null to this list. (Closes: #740339). + * checks/systemd.pm: + + [BR] Allow spaces around = in service files. + (Closes: #739366). + * checks/watch-file.{desc,pm}: + + [BR] Allow debian/upstream-signing-key.asc, + thanks to Nicolas Boulenguez (Closes: #736711). + + [NT] Apply patch from Daniel Kahn Gillmor to check for + the upstream signing key in debian/upstream. Thanks to + Hideki Yamane for the bug report. (Closes: #738597) + + * collection/java-info: + + [NT] Update the conditional using file(1) to cope with + the new output for JAR files. + + * data: + + [NT] Refresh several architecture data files against + dpkg 1.17.5. Thanks to James Hunt for the reminder. + (Closes: #735266) + + [NT] Refresh several data files with data from sid. + * data/binary/embedded-libs: + + [RG] Detect embedded copies of liblivemedia, libgadu, libssh, + libssh2, freetype, nss, and nspr. + + [RG] Adjust the detection of embedded copies of libmagic. + + [RG] Detect embedded copies of an ancient tinyxml. Thanks to + Andreas Rönnquist for the report. (Closes: #733318) + * data/cruft/non-free-files: + + [BR] "id3v22-tda.mp3 considered non-free", thanks to Charlie + Smotherman (Closes: #736203). + * data/files/privacy*: + + [BR] Improve detection of privacy-breach-google-cse, thanks to + Paul Wise (Closes: #739247). + + [BR] Detect google+, thanks to Paul Wise. + (Closes: #738175). + + [BR] Detect twitter, thanks to Paul Wise. + (Closes: #738174). + * data/scripts/maintainer-script-bad-command: + + [BR] Fix false positive + maintainer-script-should-not-use-adduser-system-without-home + due to quoting, thanks to Andreas Beckmann <anbe@debian.org> + (Closes: #739109). + + * debian/source/lintian-overrides: + + [NT] Override false-positive for license checks. + * debian/tests/control: + + [NT] Use the new @builddeps@ from autopkgtest/2.5.5 + instead of duplicating the values. + + * frontend/lintian: + + [NT] Fix a regression in argument handling after the first + non-option. This problem was introduced in 2.5.18. + + [NT] Let --color default to "auto". + + [NT] Discard STDERR when running git describe to guess the + version of Lintian. Avoids a warning from git tags are + absent from the repository. + + * lib/Lintian/Collect/Source.pm: + + [NT] Apply patch from Mathieu Parent to make "binaries" return + the package name in the same order as they are listed in the + control file. (Closes: #739671) + * lib/Lintian/Reporting/ResourceManager.pm: + + [NT] New file. + * lib/Lintian/Util.pm: + + [NT] Extend the "Continuation line outside a paragraph" parse + error on Deb822 files with a possible suggestion for fixing + the problem. + * lib/Test/Lintian/Harness.pm: + + [NT] New file - mostly for internal use during testing. + + * profiles/debian/ftp-master-auto-reject.profile: + + [BR] Refresh with new tags. + + * reporting/config: + + [NT] Fix typo of HARNESS_STATE_DIR config variable. + * reporting/harness: + + [NT] Avoid writing state-cache during dry-run. + + [NT] Add timestamps to the log output. + * reporting/{html_reports,templates/*.tmpl}: + + [NT] Show the same statistics on the tag page as shown + on the tag index pages. Thanks to Guillem Jover for + the suggestion. (Closes: #738349) + + [NT] Remove the second argument to the "head" sub in + the templates. Its value is now computed automatically + by html_reports based on the name of the output file. + + [NT] Install "lintian.css" and all files in + "reporting/images" and "reporting/resources" into + "HTML_DIR/resources". These will be named after their + content to allow more aggressive public caching. + * reporting/html_reports: + + [NT] Link to the library API docs from the index page. + (Closes: #639974) + + [NT] Optimise the graph generation by only calling + gnuplot twice (rather than once plus once per tag). + + [NT] Show the number of package groups and the size + of the harness backlog on the index page. + * reporting/{lintian.css => templates/lintian.css.tmpl}: + + [NT] Rename file and make it a template. + + * t/runtests: + + [NT] Cache test artifacts and reuse them in subsequent + runs. This removes the majority of the runtime + overhead of running the test suite on subsequent runs. + (Closes: #699083) + + [NT,BR] Fix test suite issues caused by a regression + in tar 1.27. (Closes: #739744) + + -- Bastien Roucariès <roucaries.bastien+debian@gmail.com> Tue, 25 Mar 2014 22:02:50 +0100 + +lintian (2.5.21) unstable; urgency=medium + + * Summary of tag changes: + + Added: + - bad-intended-distibution + - debian-rules-should-not-automatically-update-control + - debian-rules-should-not-use-DEB_BUILD_OPTS + - debian-rules-should-not-use-or-modify-user-only-variable + - debian-rules-should-not-use-pwd + - debian-rules-should-not-use-underscore-variable + - license-problem-md5sum-non-distributable-file + - license-problem-md5sum-non-free-file + - license-problem-non-free-RFC + - maintainer-script-should-not-use-service + - privacy-breach-donation + - privacy-breach-facebook + - privacy-breach-google-cse + - privacy-breach-logo + - privacy-breach-piwik + - privacy-breach-statistics-website + - privacy-breach-w3c-valid-html + - source-contains-prebuilt-flash-object + - source-contains-prebuilt-flash-project + - source-contains-prebuilt-java-object + - source-contains-prebuilt-javascript-object + - source-contains-prebuilt-python-object + - source-contains-prebuilt-silverlight-object + + Removed: + - debian-rules-automatically-updates-control + - debian-rules-uses-DEB_BUILD_OPTS + - debian-rules-uses-or-modifies-user-only-variable + - debian-rules-uses-pwd + + * checks/changelog-file.{desc,pm}: + + [BR] Warn when an upload erroneously targeted at distribution that + is not intended (Closes: #661990). + * checks/cruft.{desc,pm}: + + [BR] Detect non free rfc (Closes: #365213). + + [BR] Check md5sums on source package. + + [BR] Detect prebuilt jar file. + + [BR] Detect prebuilt silverlight file. + + [BR] Detect prebuilt flash file (Closes: #733883). + * checks/fields.{desc,pm}: + + [BR] Increase severity of vcs-field-uses-not-recommended-uri-format + (Closes: #670323). + * checks/files.{desc,pm}: + + [BR] Add xz and zip to duplicated-compressed-file regexp. + + [BR] Use Lintian::Data for compressed file extension. + + [BR] Use Lintian::Data for vcs files list. Add a few more VCS + files (Closes: #731904). + + [BR] Remove long obsolete reference to rc.boot(5) manpage + in package-installs-into-etc-rc.boot description. + Thanks to Jakub Wilk (Closes: #729034). + + [BR] Add a moreinfo field to obsolete path. + + [BR] Fix non-conf-file-in-modprobe.d description + (Closes: #729037). + + [BR] Check privacy breach only in regular file. + + [BR] Add link tag as potential privacy breaker. + + [BR] Add <div data-href="http://website" to potential privacy + breaker. + * checks/md5sums.pm: + + [BR] In case of strange filename, md5sum(1) prefix the md5sum + by backslash and escape the name using backslash encoding. + Handle this case properly. + * checks/rules.{desc,pm}: + + [BR] Use Lintian::Data for forbidden construct in rules + file. + + [BR] Rename debian-rules-automatically-updates-control to + debian-rules-should-not-automatically-update-control. + + [BR] Rename debian-rules-uses-pwd to + debian-rules-should-not-use-pwd. + + [BR] Rename debian-rules-uses-DEB_BUILD_OPTS to + debian-rules-should-not-use-DEB_BUILD_OPTS. + + [BR] Rename debian-rules-uses-or-modifies-user-only-variable + to debian-rules-should-not-use-or-modify-user-only-variable. + * checks/watch.{desc,pm}: + + [BR] Fix the description of debian-watch-may-check-gpg-signature tag. + Thanks to Gregor Herrmann for the bug report and patch + (Closes: #732799). + + * data/cruft/non-free-files: + + [BR] Add sRGB.icm to non-free files (Closes: #699369). + + [BR] Add a few non-free font files (Closes: #298545). + + [BR] Add non-free w3c valid icons. + * data/cruft/warn-file-type: + + [BR] Add this file. + + [BR] Detect minified javascript (by extension). + + [BR] Detect python prebuilt object (Closes: #734280). + * data/fields/obsolete-packages: + + [BR] Apply patch from Jonas Genannt to render obsolete ruby 1.8. + * data/files/obsolete-paths: + + [BR] Add /etc/X11/fonts/X11R7 as obsolete path (Closes: #646872). + * data/files/privacy-breaker-{fragments,websites}: + + [BR] Add w3c website valid x?html icons. + + [BR] Add piwik detection. + + [BR] Add detection of well known statistics websites. + + [BR] Detect facebook. + + [BR] Detect google custom search engine. + * data/rules/rules-should-not-use: + + [BR] Detect use of $(_) variable in debian/rules (Closes: #585495). + * data/scripts/maintainer-script-bad-command: + + [BR] Service is reserved to system admin (Closes: #656229). + + [BR] Fix false positive for + maintainer-script-should-not-use-adduser-system-without-home + by allowing shell variable (Closes: #733595). + + * debian/control: + + [NT] Add relevant relations on libyaml-perl, which is + now used by harness. + + * reporting/harness: + + [NT] Fix typo in --schedule-chunk-size command-line argument. + + [NT] Require a new configuration variable $HARNESS_STATE_DIR. + This variable tells harness where it can store state + information and caches. + + [NT] Track which version of lintian a given package group + was processed by. Using this information, harness will now + slowly reprocess groups processed by another version of + Lintian than the current. + + * t: + + [NT] Apply patch from Adam Conrad to fix issue with a test + when run in an Ubuntu environment. Also thanks to Benjamin + Drung for forwarding the patch to the Debian BTS. + (Closes: #725139) + + -- Bastien Roucariès <roucaries.bastien+debian@gmail.com> Wed, 08 Jan 2014 19:35:22 +0100 + +lintian (2.5.20) unstable; urgency=low + + * Summary of tag changes: + + Added: + - build-depends-on-an-obsolete-java-package + - debian-watch-file-pubkey-file-is-missing + - debian-watch-may-check-gpg-signature + - license-problem-nvidia-intellectual + - maintainer-script-should-not-hide-init-failure + - maintainer-script-should-not-modify-ld-so-conf + - maintainer-script-should-not-modify-netbase-managed-file + - maintainer-script-should-not-use-adduser-system-without-home + - maintainer-script-should-not-use-ancient-dpkg-epoch-check + - maintainer-script-should-not-use-ancient-dpkg-multi-conrep-check + - maintainer-script-should-not-use-deprecated-chown-usage + - maintainer-script-should-not-use-dpkg-status-directly + - maintainer-script-should-not-use-fc-cache + - maintainer-script-should-not-use-gconftool + - maintainer-script-should-not-use-install-sgmlcatalog + - maintainer-script-should-not-use-start-stop-daemon + - maintainer-script-should-not-use-update-alternatives-remove + - maintainer-script-should-not-use-update-alternatives-set + - package-install-into-obsolete-dir + - privacy-breach-generic + - privacy-breach-google-adsense + + Removed: + - ancient-dpkg-epoch-check + - ancient-dpkg-multi-conrep-check + - deprecated-chown-usage + - fc-cache-used-in-maintainer-script + - gconftool-used-in-maintainer-script + - install-sgmlcatalog-deprecated + - maintainer-script-hides-init-failure + - maintainer-script-modifies-ld-so-conf + - maintainer-script-modifies-netbase-managed-file + - maintainer-script-uses-dpkg-status-directly + - start-stop-daemon-in-maintainer-script + - update-alternatives-remove-called-in-postrm + + * checks/cruft.{desc,pm}: + + [BR] Check files for under a non-distributable Nvidia + license. (Closes: #724930) + + [BR] Abstract sliding window algorithm and use it for + license check. (Closes: #720348) + + [BR] Filter (x?ht|x)ml comments for license check. + (Closes: #729226). + * checks/fields.pm: + + [SL] Returns a warning when a package build-deps on java-compiler + instead of default-jdk. (Closes: #730714) + * checks/files.desc: + + [BR] Improve description of pkg-config-multi-arch-wrong-dir + tag. Add debhelper > 9 on non multi-arched package as a likely + cause (Closes: #723886). + + [BR] Add a generic check for obsolete path. + + [BR] Detect privacy breaker html/css files (Closes: #637580) + particularly Google Adsense (Closes: #718427). + * checks/scripts.{desc,pm}: + + [BR] Detect update-alternatives --set in maintainer scripts. + (Closes: #643602). + + [BR] Use Lintian::Data for bad shell construction in maintainer + scripts. + + [BR] Detect use of adduser --system without --home or with + --home inside /home. (Closes: #730456). + + [BR] install-sgmlcatalog is deprecated for a long time. Warn + now in all use case. Rename the tag to + maintainer-script-should-not-use-install-sgmlcatalog + + [BR] Rename gconftool-used-in-maintainer-script to + maintainer-script-should-not-use-gconftool. Add gconf\d package + to exception list. + + [BR] Rename fc-cache-used-in-maintainer-script to + maintainer-script-should-not-use-fc-cache. Add fontconfig + package to exception list. + + [BR] Rename (ancient-dpkg-.*) to maintainer-script-should-not-use-$1. + + [BR] Rename (deprecated-chown-usage) to + maintainer-script-should-not-use-$1. + + [BR] Rename maintainer-script-hides-init-failure to + maintainer-script-should-not-hide-init-failure. + + [BR] Rename maintainer-script-modifies-ld-so-conf to + maintainer-script-should-not-modify-ld-so-conf. + + [BR] Rename maintainer-script-modifies-netbase-managed-file to + maintainer-script-should-not-modify-netbase-managed-file. + + [BR] Rename maintainer-script-uses-dpkg-status-directly to + maintainer-script-should-not-use-dpkg-status-directly. + + [BR] Rename update-alternatives detection in maintainer script to + maintainer-script-should-not-use convention. + + [BR] Rename start-stop-daemon-in-maintainer-script to + maintainer-script-should-not-use-start-stop-daemon + * checks/standards-version: + + [BR] Use Lintian::Data for ancient date check. + * checks/watch.{desc,pm}: + + [BR] Detect lack of uscan support for gpg signature. + (Closes: #711553). + + * data/binary/embedded-libs: + + [RG] Detect embedded copies of poppler/xpdf. (Closes: #724733) + * data/files/obsolete-paths: + + [BR] Add this file to generically check obsolete path. + + [BR] Check obsolete /etc/dhcp3 path. (Closes: #673029) + * data/fields/obsolete-packages: + + [NT] Apply patch from Eric Dorland to mark various versions + of automake as obsolete. + + [SL] Tag openjdk-6-jdk, openjdk-6-jre and openjdk-6-jre-headless + as obsolete (See ##720911). (Closes: #730714) + * data/fields/virtual-packages: + + [NT] Refresh against sid. Thanks to Nicholas Breen for the + reminder. (Closes: #724866) + * data/spelling/corrections: + + [RG] Detect some typos of "establishment" and "contains". + + [SL] Detect some typos of "suppress". + * data/standards-version/ancient-date: + + [BR] Set ancient date to 14 Jan 2012. + * data/standards-version/release-dates: + + [NT] Add release date for 3.9.5. + + * debian/control: + + [NT] Bump Standards-Versions to 3.9.5 - no changes required. + + [BR] Add myself as uploader. + + * lib/Lintian/Collect/Binary.pm: + + [GN] Add support for multi-component RPATHs. (Closes: #727683) + * lib/Lintian/Collect/Package.pm: + + [BR] Globally replace \\ by \ in _dequote_name(). This bug was + masked by old buggy tar (Closes: #727665). + + * t/debs/deb-format-wrong-order/.*: + + [BR] Recent dpkg detect this error and bail out. Do not run with + dpkg >= 1.17.2. See dpkg git commit + cb8ed03bbffe892165620ed1ddf753a6b0c1ee62 + and 547dca4c3ff23df5dfa554f1943b371cd7056ee4. + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [NT] Add "trusty". Thanks to Stéphane Graber for the + reminder. + + -- Bastien Roucariès <roucaries.bastien+debian@gmail.com> Sun, 15 Dec 2013 19:52:24 +0100 + +lintian (2.5.19) unstable; urgency=low + + * Summary of tag changes: + + Added: + - homepage-in-binary-package + + * checks/fields.{desc,pm}: + + [NT] Add check for "Homepage"-field missing in the + source, when one of the binary packages has the + field. Thanks to Ricardo Mones for the bug report. + (Closes: #693117) + * checks/files.pm: + + [NT] Apply patch from Samuel Thibault to fix a + false-positive non-standard-toplevel-dir for the + directories /hurd and /servers. (Closes: #724524) + + [NT] Work around bug #724571 in t1disasm by ignoring + failures caused by segmentation faults and bus errors. + Though, Lintian will emit a warning when such an error + occurs. Thanks to Ansgar Burchardt for the report. + (Closes: #724319) + * checks/testsuite.pm: + + [NT] Allow uppercase letters in the names of DEP-8 + tests, now that the DEP-8 officially "tolerates" them. + (see #711844) + + * lib/Lintian/Util.pm: + + [NT] Add drain_pipe(FD). + + * reporting/{config,harness}: + + [NT] Determine the html_reports command automatically + instead of allowing it to be configurable. + + [NT] Stop allowing config script to name individual + log files. The directory in which they are put is still + configurable. + + [NT] Replace LINTIAN_CFG with passing "--no-cfg" to + lintian. + + [NT] Replace $lintian_cmd config option with a + @EXTRA_LINTIAN_OPTIONS. Also stop forking a shell to + run lintian. + + [NT] Remove LINTIAN_BIN_DIR; it is no longer used to + avoid signature checking. + + [NT] Fix a bug where harness would not remove entries in + the Lintian log for removed packages if no packages were + to be processed. + * reporting/lintian-dummy.cfg: + + [NT] Remove file as it is now obsolete. + + -- Niels Thykier <niels@thykier.net> Thu, 26 Sep 2013 09:06:22 +0200 + +lintian (2.5.18.1) unstable; urgency=low + + * checks/application-not-library.desc: + + [JW] Fix typo. + * checks/files.pm: + + [NT] Only open .pc files if they are regular files. + This fixes a possible DoS introduced in 2.5.17. + * checks/shared-libs.pm: + + [NT] Correct the name of the multiarch-dirs data file, + which was renamed in 2.5.17. + + * lib/{Test/Lintian,Lintian/Data}.pm: + + [NT] Load data files eagerly during tests to ensure + missing or typo'ed data files are spotted earlier. + + * debian/changelog: + + [NT] Mention in the 2.5.17 entry that multiarch-dirs + data file was renamed. + + [NT] Consistently spell "typos" without an "e". + + -- Niels Thykier <niels@thykier.net> Sun, 22 Sep 2013 10:51:29 +0200 + +lintian (2.5.18) unstable; urgency=low + + * Summary of tag changes: + + Added: + - debian-changelog-has-wrong-weekday + - debian-rules-missing-good-practice-target-dfsg + - empty-udeb-package + - file-name-in-PATH-is-not-ASCII + - misplaced-extra-member-in-deb + + * checks/apache2.pm: + + [NT] Fix false-positive warning about non-standard package + name when the Apache2 module contained uppercase letters. + Thanks to Jonas Smedegaard for the report. + (Closes: #723003) + * checks/changelog.{desc,pm}: + + [NT] Check that the weekday of the latest changelog entry + is consistent with the date. Thanks to Raphael Champeimont + for the report. (Closes: #703407) + * checks/cruft.{desc,pm}: + + [BR] Fix false-positive for license-problem-gfdl-invariants. + (Closes: #721252) + + [BR] Extend tag description of the gfdl-invariants tag. + (Closes: #722102) + * checks/deb-format.{desc,pm}: + + [NT] Support (but tag) unofficial members after the + "debian-binary" member where allowed by dpkg. These + members will trigger misplaced-extra-member-in-deb tag. + Thanks to Guillem Jover for the report and the feedback. + (Closes: #718349) + * checks/fields.{desc,pm}: + + [NT] Warn about "?op=log" in svn.d.o browser links. Thanks + to Paul Wise for the report. (Closes: #707700) + + [NT] Fix false-positive dbg-package-missing-depends for + transitional dbg packages. Thanks to Paul Wise for the + report. (Closes: #665694) + + [NT] Remind people that packages named gir1.2-foo-X.Y + should be in the introspection section. Thanks to Michael + Biebl for the report (part of #695345) + * checks/files.{desc,pm}: + + [BR] Fix false-positive dir-or-file-in-build-tree for + the sbuild source package. (Closes: #720910) + + [NT] Add check for empty udeb packages. Thanks to Cyril + Brulebois for the suggestion. (Closes: #672664) + + [NT] Remove exception for "/selinux" top-level directory. + Thanks to Laurent Bigonville for the report. + (Closes: #723730) + + [NT] Add a check for files in PATH being representable + using only ASCII characters. (Closes: #723732) + * checks/menu-format.desc: + + [BR] Rewrite description of the tag for desktop files + without a keywords entry based on a wording from Gaudenz + Steinlin. (Closes: #706966) + + [NT] Apply patch from Lucas Nussbaum to add an additional + reference to the desktop-entry-lacks-keywords-entry tag. + (Closes: #722582) + * checks/rules.{desc,pm}: + + [BR] Refactor the check for known targets in d/rules. + + [BR] Add check for missing for recommended "get-orig-source" + target in d/rules for packages that look like they have been + repacked. (Closes: #460174) + * checks/scripts.desc: + + [NT] Demote the certainty of shell-script-fails-syntax-check + due to "extglob" in bash. Thanks To Trent W. Buck for the + report. (Closes: #699410) + * checks/testsuite.pm: + + [NT] Add "allow-stderr" as known autopkgtest "restriction". + Thanks to Jérémy Bobbio for the report and the initial + patch. (Closes: #721179) + * checks/version-substvars{.desc,.pm}: + + [NT] Mention that version-substvar-for-external-package + can happen if the package name used in the relation has + a typo. Thanks to Joachim Reichel for reporting this. + (Closes: #708576) + + [NT] Ignore ":any" qualifiers in dependencies. Thanks to + Scott Ritchie for the report. (Closes: #658320) + + * commands/info: + + [NT] New file (replacing lintian-info). + + [NT] Emit a deprecation warning for --include-dir + and --[no-]user-dirs when they are not the first + arguments and called as lintian-info. + + * doc/README.in: + + [NT] Replaced by top-level README. + + * data/common/source-fields: + + [NT] Allow the "Dgit" field in source packages. Thanks + to Ian Jackson for the report. (Closes: #721205) + * data/fields/perl-provides: + + [NT] Refresh against perl 5.18. + * data/rules/policy-rules: + + [BR] New file. + * data/scripts/{,versioned-}interpreters: + + [NT] Apply patch from Gunnar Wolf to update which package + is providing "rackup". (Closes: #721268) + * data/scripts/interpreters: + + [NT] Use "python:any | python-minimal:any" as dependency + for python scripts. This fixes a false-positive for + python-script-but-no-python-dep when dh_python2 generates + a dependency of "python:any". Thanks to Francois Gouget + for the report. (Closes: #711988) + * data/scripts/versioned-interpreters: + + [NT] Add python 2.7 and remove 2.4, 2.5 and 2.6. Also + add ":any" the dependency template like with the + unversioned interpreters (see above). + + * debian/docs: + + [NT] Install "README" instead "doc/README" + * debian/lintian.install: + + [NT] Install dplint and commands/*. + * debian/lintian.links: + + [NT] New file. + * debian/rules: + + [NT] Add code for substituting some placeholder values in + dplint and lintian. + + [NT] Invoke dh_link. + + [NT] Remove code for auto-generating README from README.in + * debian/tests/control: + + [NT] Remove reference to testsuite-legacy. + * debian/tests/testsuite-legacy: + + [NT] Removed; no longer useful. + + * doc/README.developers: + + [NT] Update the section on running Lintian from a source + tree to mention that setting LINTIAN_ROOT is no longer + needed. + + [NT] Remove references to the legacy testsuite. + * doc/tutorial/Lintian/Tutorial/TestSuite.pod: + + [NT] Remove references to the legacy testsuite. + + * frontend/dplint: + + [NT] New file. + * frontend/lintian: + + [NT] Automatically determine the LINTIAN_ROOT when run from + the extracted source dir. + + [NT] Deprecate --root and LINTIAN_ROOT. These are largely + obsolete as Lintian can now automatically determine the + proper LINTIAN_ROOT. To avoid surprises, lintian will + now exit with an error if requested to use a different + LINTIAN_ROOT than the one lintian expected to use. + + [NT] Emit a deprecation warning for --include-dir + and --[no-]user-dirs when they are not the first + arguments and called as lintian-info. + * frontend/lintian-info: + + [NT] Replace with symlink to dplint. The implementation of + lintian-info is now handled by commands/info. + + * lib/Lintian/Collect/Package.pm: + + [NT] If the index file does not include a "root" directory, + then create a fake one. + * lib/Lintian/Data.pm: + + [NT] Make a special case to allow "original-maintainer" by + default in all non-"Debian" profiles. Thanks to Nick + Black for the report. (Closes: #697565) + * lib/Lintian/Relation.pm: + + [NT] Allow "pkg" to imply "pkg:any", but without permitting + "pkg:any" to imply "pkg". + + * private/runtests: + + [NT] Remove file; merge the relevant parts into t/runtests. + + * README: + + [NT] New file for basic information about Lintian and + where to find more information. + + * reporting/harness: + + [NT] Fix bug that caused harness to not remove old log + entries on incremental runs. + + [NT] Clear LINTIAN_ROOT environment variable if set. + * reporting/html_reports: + + [NT] Copy (rather than symlink) the lintian.log to the + generated website. + + * t/runtests: + + [NT] Assume dpkg (>= 1.16.1) is present. + + [NT] Work around bug in Perl (#723805) when using "glob" + within threads. Thanks to Brian "hugmeir" Fraser for + finding the underlying cause. + * t/tests/binaries-spelling/{debian/basic.c,tags}: + + [AB] Add subtest which verifies that the additional exception list + (teh vs tEh) for spelling-error-in-binary works. + * t/tests/legacy-debug/debian/debian/control: + + [NT] Mark some packages "arch:any" to avoid test failures + on kfreebsd-amd64. (Closes: #688524) + + * testset/*: + + [NT] All tests moved to t/tests/legacy-* and the test + runner removed. + + * vendors/ubuntu/main/data/{common,fields}/*: + + [NT] Retire now redundant files. + + -- Niels Thykier <niels@thykier.net> Sat, 21 Sep 2013 23:23:10 +0200 + +lintian (2.5.17) unstable; urgency=low + + * Summary of tag changes: + + Added: + - apache2-unparsable-dependency + - deprecated-configure-filename + - doc-base-abstract-field-separator-extra-whitespace + - doc-base-abstract-might-contain-extra-leading-whitespace + - doc-base-file-separator-extra-whitespace + - md5sums-lists-nonexistent-file + - non-multi-arch-lib-dir + - pkg-config-multi-arch-wrong-dir + + Removed: + - apache2-unparseable-dependency + - doc-base-abstract-field-separator-extra-whitespaces + - doc-base-abstract-might-contain-extra-leading-whitespaces + - doc-base-file-separator-extra-whitespaces + - md5sums-lists-nonexisting-file + + * checks/apache2.{desc,pm}: + + [JW,NT] Rename a tag for consistent spelling of + "unparsable" in tag names. The tag has no known + overrides. + * checks/automake.{desc,pm}: + + [NT] Apply patch from Gautier Minster to detect + usage of configure.in with automake. Thanks to + Paul Wise for the report. (Closes: #708482) + * checks/cruft.pm: + + [NT] Avoid given/when which was demoted to an + experimental feature. (Closes: #720835) + * checks/files.{desc,pm}: + + [BR] Add check for architecture pkg-config files using + multi-arch paths but being installed in a non-multi-arch + location. Thanks to Ivo De Decker for the report. + (Closes: #674469) + + [BR] Add check for using the old bi-arch directories + (/usr/lib64) instead of multi-arch dirs. Thanks to + Kurt Roeckx for the report. (Closes: #528975) + + [BR] Remove "emul/" as a recognised top-level directory. + * checks/md5sums.{desc,pm}: + + [JW,NT] Rename a tag due to a typo in the tag name. + The tag has no known overrides. + * checks/menus.{desc,pm}: + + [JW,NT] Rename tags due to a typo in their tag name. + These tags have no known overrides. + * checks/source-copyright.pm: + + [NT] Avoid accidental use of an experimental feature. + + * data/{binaries => common}/multiarch-dirs: + + [BR] Moved multiarch-dirs from binaries to common, since + it is used from multiple checks. + + * debian/control: + + [NT] Add Build-Depends on aspell, aspell-en and + libtest-spelling-perl. + + * lib/Lintian/Tag/TextUtil.pm: + + [NT] Prevent very long URLs from being split into two + lines. Thanks to Jari Aalto for the report. + (Closes: #719769) + * lib/Lintian/Util.pm: + + [NT] Prefer paths without leading slash in the + documentation for normalize_pkg_path. Thanks to + Kevin Ryde for spotting this inconsistency. + + [NT] The first argument of normalize_pkg_path + is now unconditionally normalized. Furthermore, allow + the function to be called with only one argument like + Cwd::realpath. + + * t/*: + + [NT] Adapt several tests to work under perl 5.18. + + -- Niels Thykier <niels@thykier.net> Mon, 26 Aug 2013 07:49:21 +0200 + +lintian (2.5.16) unstable; urgency=low + + * Summary of tag changes: + + Added: + - changelog-is-dh_make-template + - copyright-should-refer-to-common-license-file-for-apache-2 + - debian-control-repeats-field-name-in-value + - info-document-missing-image-file + - license-problem-font-adobe-copyrighted-fragment + - license-problem-font-adobe-copyrighted-fragment-no-credit + - missing-dependency-on-libstdc++ + - quilt-patch-using-template-description + + Removed: + - dh_pycentral-is-obsolete + - dh_python-is-obsolete + - font-adobe-copyrighted-fragment + - font-adobe-copyrighted-fragment-no-credit + - init.d-script-call-internal-API + - missing-dependency-on-python-central + + * checks/apache2.pm: + + [NT] Fix F-P apache2-deprecated-auth-config for + "AllowOverride". Thanks to Jean-Michel Vourgère + for the report and an initial patch. + (Closes: #717621) + * checks/binaries.pm: + + [NT] Apply patch from Michael Stapelberg to exempt + golang-go binaries from statically-linked-binary + tag. (Closes: #718404) + + [NT] Permit shared libraries to not link against + libc as long as they link against libstdc++. This + fixes a lot of false positive warnings for some c++ + libraries when the linker (with --as-needed) + determines that the libc link is superfluous. + Thanks to Maximiliano Curia for the report. + (This is a partial fix for #719806) + + [NT] Add experimental tag for missing dependency + on libstdc++. + * checks/changelog-file.{desc,pm}: + + [BR] Add check for dh-make reminder to insert the + bug number of the ITP bug. (Closes: #690273) + * checks/control-file.{desc,pm}: + + [BR] Add check for field name being duplicated in + the value of the field. (Closes: #711069) + * checks/copyright-file.{desc,pm}: + + [BR] Extend check for "reference to compressed + common-license" to include all current + common-licenses. + + [BR] Add check for use of Apache-2.0 in d/copyright + without references common-licenses. + (Closes: #713012) + * checks/cruft.pm: + + [NT] Skip d/README.Debian and d/README.source when + checking for non-free licenses. Mentions here are + presumably just false-positives. Thanks to + Marcelo Jorge Vieira for the report and the initial + patch. (Closes: #718575) + * checks/deb-format.pm: + + [NT] Apply patch from Guillem Jover to fix a wrong + tag being emitted on lzma compressed udebs. + (Closes: #718337) + * checks/debhelper.{desc,pm}: + + [NT] Remove tag for dh_pycentral and dh_python being + obsolete. Thanks to Luca Falavigna for the report. + (Closes: #720337) + + [BR] Fix false-negative in the brace expansion check + when the comma was next to one of the braces. + (Closes: #708381) + * checks/files.{desc,pm}: + + [NT] Remove tag for missing dependency on + python-central. Thanks to Luca Falavigna for the + report. (Closes: #718690) + + [BR] Rename font-adobe-copyrighted-fragment tags. + (Closes: #718820) + + [NT] Fix false positive warning about embedded + feedparser for python3-feedparser. Thanks to + Etienne Millon for the report. (Closes: #719163) + * checks/infofiles.{desc,pm}: + + [NT] Apply patches from Kevin Ryde to find info files + references non-existent images. (Closes: #719450) + * checks/init.d.{desc,pm}: + + [NT] Revert init.d-script-call-internal-API for now. + Refer to #710559 for more information. + * checks/patch-systems.{desc,pm}: + + [BR] Add tag for DEP-3 template descriptions. + (Closes: #717633) + * checks/phppear.{desc,pm}: + + [NT] Apply patch from Mathieu Parent to fix false + positive missing-pkg-php-tools-addon. Thanks to + Thijs Kinkhorst for the report. (Closes: #718167) + + [NT] Apply patch form Mathieu Parent to reduce the + severity of a "composer package" not using + pkg-php-tools to wishlist. Thanks to Thijs + Kinkhorst for the report. (Closes: #718862) + + [NT] Apply patch from Vincent Bernat to downgrade + severity of not using phppear substvars for + description and synopsis plus explain that they + should not be used blindly. Thanks to Mathieu + Parent for the review of the patch. + (Closes: #719788) + * checks/po-debconf.{desc,pm}: + + [NT] Fix false-positive translated-default-field for + fields preceded by a "true" Deb822 comment. Thanks + to Ron Lee for the report. (Closes: #637881) + * checks/scripts.pm: + + [NT] Stop emitting package-uses-local-diversion for + calls to dpkg-divert without --package as dpkg 1.16.0 + (Wheezy) handles this case correctly. Thanks to + Raphaël Hertzog for the report. (Closes: #679132) + + [NT] Apply patch from Vincent Cheng to fix warning + for executable jar files. Thanks to Matthew Johnson + for the report. (Closes: #539315) + * checks/systemd.pm: + + [NT] Apply patch from Stig Sandbeck Mathisen to allow + systemd files being symlinks to /dev/null. + (Closes: #718563) + + * debian/changelog: + + [NT] Correct some older tag summaries to include some + missing tags in the entry for 2.5.11 and 2.5.12. + * debian/copyright: + + [NT] Add Bastien ROUCARIÈS to maintainers (as BR). + + * frontend/lintian: + + [NT] Move some handling of overrides to Lintian::Tags. + + * lib/Lintian/Processable/Package.pm: + + [NT] Refuse to process .dsc files that are missing the + Source field. This prevents some warnings about using + undefined values. Thanks to Guillem Jover for the + report. (Closes: #718351) + * lib/Lintian/Tags.pm: + + [NT] Take over some handling of overrides from the + frontend. + * lib/Lintian/Util.pm: + + [NT] Fix problem in normalize_pkg_path, where "."-entries + were not properly filtered out. + + * profiles/debian/ftp-master-auto-reject.profile: + + [NT] Refresh with new tags. Thanks to Gregor Herrmann + for the reminder. + + -- Niels Thykier <niels@thykier.net> Wed, 21 Aug 2013 12:30:07 +0200 + +lintian (2.5.15) unstable; urgency=low + + "use less qw(memory);" + + * Summary of tag changes: + + Added: + - composer-package-without-pkg-php-tools-builddep + - init-script-is-not-a-file + - init.d-script-does-not-source-init-functions + - maintainer-script-calls-systemctl + - manpage-named-after-build-path + - missing-pkg-php-tools-addon + - missing-pkg-php-tools-buildsystem + - pear-channel-without-pkg-php-tools-builddep + - pear-package-but-missing-dependency + - pear-package-feature-requires-newer-pkg-php-tools + - pear-package-not-using-substvar + - pear-package-without-pkg-php-tools-builddep + - pecl-package-requires-build-dependency + - service-file-is-not-a-file + - systemd-no-service-for-init-script + - systemd-service-file-outside-lib + - systemd-service-file-refers-to-obsolete-target + - systemd-tmpfiles.d-outside-usr-lib + + * checks/*.pm: + + [NT] Add final return to all subs in checks and ensure + that the "run" sub complies with Lintian's own + recommendation. + * checks/binary.pm: + + [NT] Apply patch from Bastien Roucariès to fix false- + negatives for debug files in usr/lib/debug/.build-id. + (Closes: #714191) + + [NT] Apply patch from Bastien Roucariès to fix false- + positive debug-file-with-no-debug-symbols for files + using compressed debug sections. + * checks/fields.pm: + + [NT] Apply patch from Niko Tyni to fix false-positive + package-superseded-by-perl for packages with epochs. + (Closes: #710919) + * checks/files.pm: + + [NT] Fix some false-negative extra-license-file. + Thanks to Helmut Grohne for the report and the advices. + (Closes: #701177) + * checks/manpages.{desc,pm}: + + [NT] Apply patch from Bastien Roucariès to test for + manpages named after their build path. + (Closes: #713884) + + [NT] Skip some checks on empty manpages. + (Closes: #700502) + * checks/phppear.{desc,pm}: + + [NT] New check based on patches from Mathieu Parent. + (Closes: #708551) + * checks/source-copyright.pm: + + [NT] Some tags now refer to the line number of the field + with an issue instead of the line number of the paragraph. + * checks/systemd.{desc,pm}: + + [NT] New check for systemd related files. Thanks to + Michael Stapelberg for providing the check and the + tests. (Closes: #704197) + + * collection/copyright-file: + + [NT] Avoid creating an empty copyright file when it is + not needed. + * collection/unpacked: + + [NT] Skip signature checking of source packages. + (Closes: #707534) + + * data/binary/embedded-libs: + + [NT] Rename libgd2 to libgd. (Closes: #708367) + * data/fields/virtual-packages: + + [NT] Refresh. Thanks to Laurent Bigonville for the + reminder. (Closes: #712641) + * data/files/{fonts,locale-codes}: + + [NT] Refresh. + * data/menu-format/add-categories: + + [NT] Apply patch from Bastien Roucariès to include newer + categories. Thanks to Yves-Alexis Perez for the report. + (Closes: #712932) + * data/output/manual-references: + + [NT] Refresh. + * data/scripts/interpreters: + + [NT] Apply patch from Bastien Roucariès to include gjs. + Thanks to Andreas Henriksson for the report. + (Closes: #712607) + + * debian/control: + + [NT] Add Build-Depends on pkg-php-tools for a new test. + * debian/dirs: + + [NT] Remove /var/lib/lintian, we no longer use it. + * debian/docs: + + [NT] Add auto-generated API documentation. + * debian/lintian.examples: + + [NT] New file to install examples. (Closes: #707906) + * debian/rules: + + [NT] Generate API documentation during build. + + [NT] Call dh_installexamples. + + * doc/examples/*: + + [NT] New example files. + * doc/lintian.xml: + + [NT] Add small example vendor profile to the user + manual. + + * frontend/lintian: + + [NT] Add information about memory usage with -ddd if + Devel::Size is available. A more detailed breakdown + of the memory usage with -dddd. + + * lib/Lintian/Collect/Package.pm: + + [NT] Share some string values in the file_info and in + the (X_)index methods. This reduces memory usage a bit. + * lib/Lintian/Collect/Source.pm: + + [NT] "binaries" and "binary_field" now only exposes data + about entries in d/control with a valid package name. + + [NT] Document that "binaries" return an unordered list. + + [NT] relation and relation_noarch now recognises + "Build-Depends-Arch". + * lib/Lintian/Path.pm: + + [NT] Fix bug in the overloaded qr// operator. + * lib/Lintian/ProcessablePool.pm: + + [NT] Fix a bug that could cause .changes files to be + silently skipped. This only occurred if a related package + was passed on the command line before the .changes file. + Thanks to Salvo Tomaselli for reporting the bug. + (Closes: #714437) + * lib/Lintian/Relation.pm: + + [NT] Apply some memory optimisations to some common cases. + * lib/Lintian/Tags.pm: + + [NT] Use croak instead of die when a check emits an + unknown tag. This gives the check writer a better chance + of finding where the problem occurred. + * lib/Lintian/Util.pm: + + [NT] Have parse_dpkg_control and visit_dpkg_control + give a more detailed line number information about + paragraphs. + + * reporting/harness: + + [NT] Clear some variables before running Lintian in the + hope it will reduce the memory pressure on "long runs". + + [NT] Remove support for "$LINTIAN_GPG_CHECK" config + variable. Lintian no longer checks any signatures. + + + -- Niels Thykier <niels@thykier.net> Mon, 22 Jul 2013 22:53:25 +0200 + +lintian (2.5.14) unstable; urgency=low + + * Summary of tag changes: + + Removed: + - upstream-version-not-numeric + + * checks/*: + + [NT] Rename all checks to include the extension ".pm". + (Closes: #710405) + + [JW] Fix typos in several files. + * checks/binaries.pm: + + [NT] Also check for the presence of "mcount" to detect + whether a binary was compiled with profiling. + (Closes: #712124) + + [NT] Ignore "teH" when checking for spelling mistakes in + ELF binaries. Thanks to Ryan Kavanagh for the report. + (Closes: #711207) + * checks/cruft.pm: + + [NT] Revise a few tests that relied on file(1) on text files. + + [NT] Apply patches from Bastien Roucariès to fix some false + positives in the GDFL related checks. (Closes: #711119) + + [NT] Show the full path with source-contains-unsafe-symlink + rather than just the "basename". + * checks/fields.{desc,pm}: + + [NT] Fix typo, thanks to Adrien Cunin. + + [NT] Retire upstream-version-not-numeric which can no longer + be emitted. Versions that would previously trigger this tag + will now trigger bad-version-number instead. + + [NT] Properly quote package names used in regular expressions. + Thanks to Mattias Ellert for the report. (Closes: #714427) + * checks/menus.pm: + + [NT] Fix a bug in checking for symlinks that could possibly + make lintian follow an unsafe symlink. (CVE-2013-1429) + + * coll/*: + + [NT] Set "Auto-Remove: yes" on several collections to + reduce the "inode pressure" on lintian.d.o. + + [NT] Reduce the number of inodes used by removing or not + creating some empty files and directories. + * coll/debfiles: + + [NT] Remove test of the presence of unpacked. + * coll/file-info{,.desc}: + + [NT] Disable "ascii" test in file(1). For some packages this + may greatly reduce the overhead of running the file-info + collection. + * coll/hardening-info: + + [NT] Skip files in usr/lib/debug/. + + * data/binaries/embedded-libs: + + [RG] Check for embedded copies of libraw. (Closes: #711090) + * data/fields/obsolete-packages: + + [NT] Add texi2html. Thanks to Ryan Kavanagh for the report. + (Closes: #710466) + * data/scripts/interpreters: + + [NT] Add plackup (libplack-perl) as a known interpreter. Thanks + to Robert James Clay for the report. (Closes: #712405) + + * doc/{lintian.xml,README.in}: + + [JW] Fix typos. + + * lib/Lintian/CheckScript.pm: + + [NT] Prefer loading checks with ".pm", but fall back to loading + checks without the extension (with a deprecation warning). + * lib/Lintian/Collect/Package.pm: + + [NT] sorted_index (etc.) now returns L::Path objects rather than + just file names. + * lib/Lintian/{Path,Util}.pm: + + [NT] Remove deprecated methods. + * lib/Lintian/Path.pm: + + [NT] Overload some operators. + + * man/lintian.pod.in: + + [JW] Fix typos. + + * reporting/config: + + [NT] Replace /org with /srv. + * reporting/harness: + + [NT] Fix bug where harness might schedule the same group + multiple times. (Closes: #710380) + + * t/runtests: + + [NT] Include a summary of all skipped and failed tests. + + -- Niels Thykier <niels@thykier.net> Sat, 29 Jun 2013 14:52:29 +0200 + +lintian (2.5.13) unstable; urgency=low + + Upload to unstable. + + * Summary of tag changes: + + Added: + - conffile-is-not-in-package + - debconf-translation-using-general-list + - dh_pysupport-is-obsolete + - init.d-script-call-internal-API + + Removed: + - debhelper-maintscript-needs-versioned-build-depends + - debhelper-script-needs-versioned-build-depends + - missing-pre-dependency-on-multiarch-support + + * checks/*: + + [NT] Use Lintian::Path objects as arguments to unpacked + and control where these objects are available. + * checks/binaries: + + [RA] Do not complain about kernel modules with no shared + library dependency information. Patch from Guillem Jover. + (Closes: #706242) + + [NT] Demote the certainty of hardening-no-fortify-functions + to "wild-guess". (Closes: #709415) + * checks/changes: + + [NT] Recognise "<dist>-backports-sloppy" as a valid + distribution. Thanks to Romain Francoise for the + report and the patch. (Closes: #705170) + * checks/conffiles: + + [NT] Strip whitespace from conffiles similar to how dpkg + does it. + + [NT] When emitting duplicate-conffile, avoid repeating + other tags related to that conffile. The exception to + this is relative-conffile where the original file might + not have triggered that tag. + + [NT] Test that all paths listed in the "conffiles" control + file is actually in the package being tested. + * checks/cruft{,.desc}: + + [JW] Correct the name of the architecture listed in + description of the tag outdated-autotools-helper-file. + (Closes: #706166) + + [NT] Flag all absolute symlinks in source packages as + "unsafe". (Closes: #697164) + + [NT] Fix false-positive source-contains-unsafe-symlink + for symlinks ascending one or more levels without escaping + the package root. Thanks to Michael Schutte for the + report and the patch. (Closes: #707742) + + [NT] Add a series of patches from Bastien Roucariès to + reduce the number of false positives and negatives in the + GDFL related checks. (Closes: #708957, #708881, #709379, + #709886) + * checks/debhelper{,.desc}: + + [NT] Retire some tags that are no longer relevant in the + Jessie development cycle. + + [NT] Apply patch from Luca Falavigna to detect uses of the + deprecated tool, dh_pysupport. (Closes: #709615) + * checks/description: + + [NT] Skip extended-description-is-probably-too-short + for -dbg packages. Thanks to Paul Wise for the suggestion. + (Closes: #705441) + * checks/fields.desc: + + [NT] Clarify that the "canonical URI" for Vcs fields is + based on an announcement from the Alioth admins. Thanks + to Torquil Sørensen for the report. (Closes: #705835) + + [NT] Clarify in the tag description of some tags related + to "Vcs-*" fields that the tags are based on a data list + (and is not a result of an HTTP request while checking the + package). + * checks/files{,.desc}: + + [JW,NT] Drop missing-pre-dependency-on-multiarch-support + now that multiarch-support is in stable. (Closes: #709121) + + [JW] Fix typo in a tag description. (Closes: #709455) + + [NT] Change the "ancient-file" cut-off date to 1975 from + 1984. Thanks to Ole Streicher and Ansgar Burchardt for the + report. (Closes: #710086) + * checks/group-checks.desc: + + [NT] Add missing semi-colon in tag description. Thanks to + Andrey Rahmatullin for the report. (Closes: #706827) + * checks/init.d{,.desc}: + + [NT] Add missing import of utility function that could cause + Lintian to crash in some cases. + + [NT] Add check for uses of /lib/init in maintainer scripts. + Thanks to Josh Triplett for the report and to Bastien + Roucariès for the patch. (Closes: #670092) + * checks/menu-format: + + [NT] Fix use of uninitialized variable when menu file uses a + section of "/". (Closes: #708755) + * checks/po-debconf{,.desc}: + + [NT] Remove tests for commands that are provided by + Lintian's dependencies. + + [RA] Add new check for a Language-Team field in a translation + pointing to the debian-i18n mailing list. Based on work by + victory. (Closes: #705197) + * checks/rules: + + [NT] Remove check for "dpkg-dev (>= 1.16.1~)" build-dependency, + since this is trivially satisfied in Wheezy and Jessie. + + * collection/*-helper: + + [NT] Move all collection helpers to helpers/coll. + * collection/debfiles: + + [NT] Replace makeshift "is_ancestor_of" check with the + one from L::Util. + * collection/java-info: + + [NT] Update a regex to cope with file(1) now calling JAR files + for "Java Jar file" rather than "Zip archive". + (Closes: #707400) + + * data/changes-file/known-dists: + + [NT] Add jessie and remove lenny. + * data/debhelper/dh_{addons,commands}-manual: + + [NT] Remove entries/versions that are no longer relevant. + * data/fields/perl-provides: + + [NT] Refresh against sid. (Closes: #708178) + * data/spelling/corrections: + + [NT] Add correction for unnecessarily. Thanks to Guillem + Jover for the suggestion. (Closes: #706241) + + * debian/control: + + [NT] Remove irrelevant (versioned) dependencies that are now + trivially satisfied in stable. + + [NT] Recommend libautodie-perl (>= 2.18) and libperlio-gzip-perl + as these can greatly effect performance of Lintian. + * debian/lintian.install: + + [NT] Install "helpers" as /usr/share/lintian/helpers + * debian/{postinst,prerm}: + + [NT] Remove unused maintainer scripts now that stable's + libc-bin provides a C.UTF-8. + * debian/triggers: + + [NT] Remove unused trigger now that stable's libc-bin + provides a C.UTF-8. + + * doc/tutorial/**/*.pod: + + [NT] Fix a number of spelling mistakes in the POD. + * doc/tutorial/Lintian/Tutorial/WritingChecks.pod: + + [NT] Add a section about how to avoid some common ways + of introducing security issues. + + * frontend/lintian: + + [NT] Ignore LINTIAN_ROOT/locale and /var/lib/lintian/locale. + + [NT] Export LINTIAN_INCLUDE_DIRS and LINTIAN_HELPERS_DIR to + subprocesses. These are ":"-separated lists of dirs used by + Lintian. The first being a list of raw include dirs and the + second being a list of helpers dirs in these include dirs. + + [NT] Fix a bug where the exit code from lintian would + sometimes be an undocumented value (>= 3). + + * helpers/coll: + + [NT] New directory containing some helpers that used to be in + directly collection. + + * lib/*: + + [NT] Fix a number of spelling mistakes in the POD. + * lib/Lintian/Collect/{Package,Binary}.pm: + + [NT] Accept Lintian::Path objects to unpacked and control. + * lib/Lintian/Collect/Source.pm: + + [NT] Provide a "source" specific is_non_free method that reads + the "Section"-field from d/control instead of the .dsc. This + fixes false-positives "problematic licenses" for non-free + packages. Thanks to Bastien Roucariès for the report. + (Closes: #709041) + * lib/Lintian/Path.pm: + + [NT] Rename link_resolved to link_normalized. + * lib/Lintian/Unpacker.pm: + + [NT] On platform that support it, change the "name" of the + process running the collection. This makes it easier to + see what collections are currently being run (like in the + versions prior to 2.5.12). For platforms, where it is + not possible to change the name of a running process, the + unpack jobs will simply be named "lintian" like its parent. + * lib/Lintian/Util.pm: + + [NT] Fix a race condition in touch_file. + + [NT] Add sanity check in perm2oct for bad permission + strings and throw errors when they are seen (instead + of returning 0). + + [NT] Require that the input file is present for + read_dpkg_control and get_deb_control. + + [NT] In copy_dir, pass --reflink=auto to cp. + + [NT] Replace resolve_pkg_path with to normalize_pkg_path. + The latter has slightly different return values in some + cases. + + [NT] Avoid the LOCPATH dance to find the path to an UTF-8 + locale now that stable's libc-bin provides C.UTF-8 for us. + + [NT] Add new function, locate_helper_tool, to find helper + tools. + + * private/refresh-perl-provides: + + [NT] Apply patch from Niko Tyni to improve Lintian's + data file about Perl modules provided by perl-base. + + * profiles/debian/extra-apache2.profile: + + [NT] Removed, merged into debian/main.profile. + * profiles/debian/ftp-master-auto-reject.profile: + + [NT] Include md5sums-mismatch and non-standard-toplevel-dir + as an overridable tag. + * profiles/debian/main.profile: + + [NT] Include the apache2 check. Thanks to Arno Töll for + the report. (Closes: #708943) + + * reporting/harness: + + [NT] Stop exporting ENV variables that lintian no longer + cares about. + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [NT] Add "saucy" as known Ubuntu distribution. Thanks to + Iain Lane for the report. + + -- Niels Thykier <niels@thykier.net> Thu, 30 May 2013 08:53:02 +0200 + +lintian (2.5.12) experimental; urgency=medium + + * Summary of tag changes: + + Added: + - ambiguous-paragraph-in-dep5-copyright + - binary-file-built-without-LFS-support + - debian-tests-control-is-not-a-regular-file + - debian-tests-control-uses-national-encoding + - debug-file-with-no-debug-symbols + - desktop-entry-lacks-keywords-entry + - dir-or-file-in-build-tree + - dir-or-file-in-etc-opt + - dir-or-file-in-home + - file-name-is-not-valid-UTF-8 + - font-adobe-copyrighted-fragment-no-credit + - font-package-not-multi-arch-foreign + - illegal-runtime-test-name + - inconsistent-testsuite-field + - license-problem-gfdl-invariants + - license-problem-gfdl-invariants-empty + - menu-icon-uses-relative-path + - missing-runtime-test-file + - missing-runtime-tests-field + - package-contains-broken-symlink-wildcard + - package-contains-unsafe-symlink + - runtime-test-file-is-not-a-regular-file + - source-contains-unsafe-symlink + - syntax-error-in-debian-tests-control + - unknown-runtime-tests-feature + - unknown-runtime-tests-field + - unknown-runtime-tests-restriction + - unknown-testsuite + - vcs-field-bitrotted + - vcs-git-uses-invalid-user-uri + - zip-parse-error + + Removed: + - unneeded-build-dep-on-quilt + + * checks/*: + + [NT] Avoid following unsafe symlinks. (CVE-2013-1429) + * checks/binaries{,.desc}: + + [NT] Accept libx32 as a bi-arch directory. + + [NT] Correct reference policy reference. Thanks to + Samuel Bronson for the correction. (Closes: #698234) + + [NT] Detect debug ELF binaries with no debug symbols. + Thanks to Nelson A. de Oliveira for the report. + (Closes: #668437) + + [NT] Check for binaries built without LFS. This can + only be checked for 32bit binaries as 64bit binaries + have LFS by definition. Thanks to Guillem Jover for + the report and patches. (Closes: #670963) + + [NT] Apply patch from Samuel Bronson to bump severity + (but decrease certainty) of the "not linked against + libc" tags. (Closes: #698720) + * checks/copyright: + + [NT] Apply patch from Evgeni Golov to avoid false + positive tag when the MPL-2.0 license appears in the + copyright file. (See #626454) + * checks/cruft{,.desc}: + + [NT] Do not emit the license-problem-json-evil tag for + non-free packages. + + [NT] Apply patch from Bastien Roucariès to catch GFDL + licenses with invariants (etc.). (Closes: #695967) + + [NT] Correct description of an autotools tag. Thanks + to Alberto Garcia and Timo Juhani Lindfors for the + report and patch. (Closes: #703490) + + [NT] Check for unsafe symlinks (outside common testsuite + paths). + * checks/debconf: + + [NT] Fix several path traversal issues that could leak + information about the host system. (CVE-2013-1429) + * checks/debhelper{,.desc}: + + [JW] Assume the proper python helpers are called if a + (Makefile) variable is used. (Closes: #659335) + + [JW] Promote python-depends-but-no-python-helper and + python3-depends-but-no-python3-helper to non-experimental. + * checks/description: + + [NT] Ignore "extended-description-is-probably-too-short" + for metapackages. Thanks to Axel Beckert for the + report. + * checks/duplicate-files.desc: + + [NT] Demote severity of "duplicate-files" tag to pedantic. + * checks/fields{,.desc}: + + [NT] Apply patch from Samuel Bronson to detect some + broken or poor Vcs URLs. Also thanks to James McCoy for + his report. (Closes: #652595) + + [JW] Reduce severity of b-d-on-python-dev-with-no-arch-any + to minor. + + [NT] Skip "depends-on-packaging-dev" for metapackages. + + [NT] Apply patch from Gregor Herrmann to catch metacpan + homepage links with versions. (Closes: #700110) + + [NT] Apply patch from Vasudev Kamath to detect fonts + packages without a Multi-Arch foreign (or allowed) field. + (Closes: #701061) + * checks/files{,.desc}: + + [NT] Apply patch from Bastien Roucariès to catch paths + in (common) build dirs. (Closes: #678857) + + [NT] Do not suggest the use of "virtual package" as a way + to suppress empty-binary-package. Lintian will still + accept it the phrase for now. + + [NT] Accept libx32 as a bi-arch directory. + + [NT] Ignore gzipped lintian overrides when checking whether + a package is empty. + + [NT] Fix typo of Pre-Depends, thanks to Raúl Benencia for + spotting it. (Closes: #699452) + + [NT] Add patch from Bastien Roucariès to check for another + adobe font license issues. (Closes: #705175) + + [NT] Test for use of file names that are contain invalid + UTF-8 byte sequences. Thanks to Helmut Grohne for the + suggestion. (Closes: #704446) + * checks/init.d: + + [NT] Fix regression where Lintian would not properly match + init.d passed to update-rc.d. Thanks to Michael Meskes for + reporting. (Closes: #698602) + + [NT] Fix possible symlink traversal that could leak + information about the host system. (CVE-2013-1429) + * checks/java{,.desc}: + + [NT] Report possibly broken jar files. + * checks/md5sums: + + [NT] Fix path traversal issue that could leak information + about the host system. + * checks/menu-format{,.desc}: + + [NT] Apply patch from Bastien Roucariès to detect missing + "Keywords" in desktop files. Thanks to Jeremy Bicha for + the report. (Closes: #693918) + + [NT] Apply patch from Matthias Klumpp to add missing + "Science" category. (Closes: #697693) + + [NT] Apply patch from Thomas Preud'homme to detect uses of + relative icons in menu files. (Closes: #697916) + + [NT] Document why only XPM are allowed in the tag description + of menu-icon-not-in-xpm-format. (Closes: 591812) + * checks/menus: + + [NT] Fix path traversal issue that could leak information + about the host system. (CVE-2013-1429) + * checks/patch-systems{,.desc}: + + [NT] Retire unneeded-build-dep-on-quilt, it is only a pedantic + tag and apparently not too accurate. Thanks to Charles Plessy + and Frank Kuester for the reports. (Closes: #615516, #681061) + * checks/po-debconf: + + [NT] Unconditionally set INTLTOOL_EXTRACT. + * checks/rules: + + [NT] Remove ant1.7 as alternative to ant as ant1.7 has been + removed from Wheezy. + * checks/scripts: + + [NT] Treat scripts in /usr/src/ like they were documentation. + * checks/shared-libs: + + [NT] Special case gcc packages when looking for dev symlinks. + gcc stores its dev symlinks in some special directories. + + [NT] Fix path traversal issue that could leak information + about the host system. (CVE-2013-1429) + * checks/source-copyright{,.desc}: + + [JW,NT] Add a separate tag for ambiguous DEP-5 paragraphs, + where Lintian cannot reliably figure out what is intended. + Thanks to Julian Taylor for the report. (Closes: #652380) + + [NT] Add paragraph line number to the "field typo" tag. + * checks/symlinks{,.desc}: + + [NT] Warn about broken symlinks that contains a literal "*" + in their target. This is usually a sign that a wildcard did + not properly expand. Thanks to Bernd Zeimetz for the report. + (Closes: #683737) + + [NT] Demote certainty of package-contains-broken-symlink to + wild-guess. + + [NT] Check for unsafe symlinks in binary packages. + * checks/testsuite{,.desc}: + + [NT] New check written by Nicolas Boulenguez to catch some + mistakes with the new autopkgtest tests. + + * collection/*: + + [NT] Avoid reading files outside the package root. + (CVE-2013-1429) + * collection/{changelog-file,debian-readme}: + + [NT] Ignore files in usr/doc/<pkg>. + + [NT] Skip collection if usr/share/doc/<pkg> is not contained + within the package root. (CVE-2013-1429) + * collection/hardening-info{,-helper,.desc}: + + [NT] Whitelist "memset" and "memmove" as "always safe" + functions. Thanks to Sebastian Ramacher for the suggestion + and Roland Stigge for the report. (Closes: #685299) + + [NT] Remove work around for #677530 + * collection/index{,.desc}: + + [NT] Fix missing trailing slash on dirnames and bump index + version accordingly. Thanks to Nicolas Boulenguez for + noticing. + * collection/java-info: + + [NT] Gracefully handle broken Jar files. Thanks to Paul + Tagliamonte for the report. (Closes: #700543) + * collection/strings: + + [NT] Fix a regression in filtering out "debug" ELF binaries. + + * data/binaries/arch-regex: + + [NT] Recognise x32 as an ELF32 binary. + * data/fields/obsolete-packages: + + [NT] Apply patch from Guillem Jover to add fuse-utils as an + obsolete package. (Closes: #697534) + * data/files/locale-codes: + + [NT] Refresh against sid data files. + * data/menu-format/add-categories: + + [NT] Apply patch from Matthias Klumpp to add missing + subcategories. + * data/output/manual-references: + + [NT] Refresh with Policy 3.9.4. + * data/scripts/interpreter: + + [NT] Add cfagent as a known interpreter. Thanks to Andreas + Mundt for the suggestion. (Closes: #699670) + * data/scripts/versioned-interpreters: + + [NT] Apply patch from Thijs Kinkhorst to add lua5.2 as a + versioned alternative to lua. (Closes: #698704) + * data/shared-libs/ldconfig-dirs: + + [NT] Add libx32 and usr/libx32 used by some gcc x32 bi-arch + packages. + * data/spelling/corrections{,-case}: + + [JW] Add correction for "privileges". (Closes: #700882) + + [NT] Warn about incorrect case of "OpenStreetMap". Thanks + to Paul Wise for the patch. + + * debian/control: + + [NT] Bump dependency on hardening-includes to avoid having + to work around #677530. + + [NT] Add XS-Testsuite for autopkgtest tests. + + [NT] Add Build-Depends on libtest-perl-critic-perl. + + [NT] Add (Build-)Depends on liblist-moreutils-perl and + libfile-basedir-perl. + + [NT] Add versioned (Build)-Depends on perl | libautodie-perl. + * debian/lintian.install: + + [NT] Install Test::Lintian in /usr/share/lintian/lib. + * debian/rules: + + [NT] Include the new Tutorial pods in the "api-doc" target. + * debian/tests/{control,testsuite,testsuite-legacy}: + + [NT] New file. + + * doc/tutorial/Lintian/Tutorial{/WritingChecks}.pod: + + [NT] Add POD tutorial on writing checks. + + * frontend/lintian{,-info}: + + [NT] Add --include-dir command line option. This can be used + to load additional Lintian checks, profiles, libraries or data. + (Closes: #359059) + * frontend/lintian: + + [NT] Remove "make-shift" lab-query support now that + Lintian::Lab supports it. + + [NT] Add new command line option "--[no-]user-dirs" to disable + loading from $HOME/.lintian{rc,/} and /etc/lintian{rc,/}. + + [NT] Error out early if a check cannot be loaded. + + [NT] Make --suppress-tags{,--from-file} do something when used + with --check-part and document that --tags causes the option + to be ignored. + + [NT] Accept the magic token "{VENDOR}" as a part of the value + to --profile. + + [NT] Add new command line option "--ignore-lintian-env" to make + lintian ignore all environment variables starting with LINTIAN_. + + [NT] Add a new command line option --no-display-experimental + and --default-display-level. These options can be used to + override some display options from the config file. + (Closes: #703985) + + [NT] Also search for the lintianrc file in XDG_CONFIG_{HOME,DIRS}. + The default paths are now ~/.config/lintian/lintianrc and + /etc/xdg/lintian/lintianrc. The previous lintianrc paths are + still accepted. + + [NT] Stop looking for lintianrc files in the LINTIAN_ROOT. + + [NT] Stop exporting LINTIAN_LAB to processes run by lintian. + + [NT] Use of --root (or setting LINTIAN_ROOT) will now imply + the option --no-user-dirs by default. + + * lib/*: + + [NT] Use "parent" instead of the "base" pragma. + * lib/Lintian/Collect.pm: + + [NT] Add "is_non_free" method to easily check of a given + package appears to be non-free. + * lib/Lintian/Collect/Binary.pm: + + [NT] Re-instate the "TEXTREL" marker. This fixes a regression + where shared-libs compiled without pic was not reported. + Thanks to Dmitry Shachnev for the assistance in debugging this. + + [NT] Recognise packages in section "metapackages" as a + metapackage. Thanks to Axel Beckert for the report. + (Closes: #698610) + * lib/Lintian/Collect/Package.pm: + + [NT] Ensure the "root" entry of indices do not contain itself. + (Closes: #695866) + + [NT] Add warning to unpacked and debfiles when they are given a + path with leading slash or dot-slash. + + [NT] When a check requests access to a raw file (or dir) in the + package, ensure that the resulting path does not "escape" the + top level directory. This should preemptively guard against some + (but not all) traversal attempts. + * lib/Lintian/Path.pm: + + [NT] Document that link_resolved is not sufficient to test the + "safeness" of a symlink. + * lib/Lintian/Command/Simple.pm: + + [NT] Use constant time lookup access instead of linear scan with + "hashref" wait. + * lib/Lintian/Lab.pm: + + [NT] Add lab_query method to handle lab-queries directly. + + [NT] Fix bitrot of repair_lab and rename it to repair for + consistency. + * lib/Lintian/Lab{,/Manifest}.pm: + + [NT] Add support for grouping of manifests. + * lib/Lintian/Lab/Manifest.pm: + + [NT] Fix an error in visit_all when sufficient keys for an + exact look up was given. + * lib/Lintian/Processable.pm: + + [NT] Fix issue where packages loaded from the lab indices would + sometimes get a wrong source-version. + * lib/Lintian/Relation/Version.pm: + + [NT] Add and export "versions_comparator" that can be used for + sorting purposes. + * lib/Lintian/Tag/Info.pm: + + [NT] Use "&" in the manpage ref URLs to generate proper HTML. + Thanks to Vasudev Kamath for reporting the issue. + + [NT] Produce a more helpful error message when a tag has an + invalid severity or certainty. (Closes: #703978) + * lib/Lintian/Tags.pm: + + [NT] Deal with parsing an ambiguous override a bit better. This + solves false-positive malformed-override, where Lintian misparsed + the tag name as a package name. (Closes: #699628) + * lib/Lintian/Util.pm: + + [NT] Reject partially signed Deb822 files. Most Deb822 files + are not signed at all; but those that are should be completely + covered by a signature. (Closes: #696230) + + [ADB] Fix a typo in the matching of expected delimiters for some + signed messages; thanks Samuel Bronson. + + [NT] Add sub to check if a path is contained within a given dir. + + [NT] Fix bug in resolve_pkg_path that made it resolve some links + incorrectly. + + [NT] Document that resolve_pkg_path is not sufficient to test the + "safeness" of a symlink. + + * man/lintian.pod.in: + + [NT] Document that --pedantic is the same as "-L +=pedantic". + (Closes: #703989) + + [NT] Fix typo of the "override" variable in the config example. + + * private/refresh-locale-codes: + + [JW,NT] Ignore the "zxx" locale code, which means "No + linguistic content". (Closes: #692548) + + * reporting/config: + + [JP] Remove unused $GRAPH_DIR configuration option. + * reporting/graphs/{statistics,tags}.gpi: + + [JP] Tweak graph size to allow longer labels, and force font + family. + * reporting/harness: + + [NT] Add --to-stdout option to emit log information to + stdout as well as the log files. + + [NT] Always schedule packages in groups. Otherwise, binNMU'ed + binaries would not be tested together with their source + package (and architecture independent packages). + + [NT] Schedule groups in chunks (default 512 per chunk). + This makes the Lintian processes shorter and makes memory + reclaimable sooner. (Closes: #695839) + + [NT] Remove "make-shift" lab-query support now that + Lintian::Lab supports it. + * reporting/html_reports: + + [NT] Update xrefs to include source version. + + [NT] Generate a text file suitable for Apache's RewriteMap to + map source packages to the full report for that source. + Thanks to Joerg "Ganneff" Jaspert for the suggestion to use + RewriteMap. (Closes: #696960) + + [JP] Fix version labels glitches. + + [JP] Use global $GRAPHS_RANGE_DAYS. + + [JP] Pass graph variables to index and tag templates. + * reporting/lintian.css: + + [JP] Tweak graph alignment. + * reporting/templates/{packages,maintainer,tag}.tmpl: + + [NT] Properly handle multiple versions of the same source and + add versioned anchors to them. + * reporting/templates/{index,tag}.tmpl: + + [JP] Include history graphs in HTML templates. + * reporting/templates/tag.tmpl: + + [NT] Fix "empty <ul>" tag when tag has no "extra" information. + Thanks to Vasudev Kamath for reporting the issue. + + -- Niels Thykier <niels@thykier.net> Tue, 16 Apr 2013 17:32:09 +0200 + +lintian (2.5.11) experimental; urgency=low + + * Summary of tag changes: + + Added: + - conffile-has-bad-file-type + - debug-package-for-multi-arch-same-pkg-not-coinstallable + - dm-upload-allowed-is-obsolete + - field-name-typo-in-dep5-copyright + - font-adobe-copyrighted-fragment + - license-problem-json-evil + - maintainer-script-has-unexpanded-debhelper-token + - shlibs-uses-obsolete-relation + - untranslatable-debconf-templates + - vcs-field-has-unexpected-spaces + - vcs-field-not-canonical + + Removed: + - apparently-truncated-elf-binary + - data.tar.xz-member-without-dpkg-pre-depends + - debhelper-overrides-need-versioned-build-depends + - no-source-field + - preinst-uses-dpkg-maintscript-helper-without-predepends + + * checks/*: + + [NT] Remove assumption that lintian will chdir into the + lab before calling the check. + + [NT] Be better at avoiding false-positive spelling errors + for references to packages that also happen to be common + spelling mistake. Thanks to Paul Tagliamonte for the + report. (Closes: #687464) + * checks/binaries{,.desc}: + + [NT] Merge apparently-truncated-elf-binary into + apparently-corrupted-elf-binary. + + [NT] Remove some references to objdump in tag descriptions + as Lintian uses readelf. + + [JW,NT] Update the "extract SONAME" shell snippet to properly + handle SONAMEs with uppercase letters. + + [JW] Recognise any path with matching the GNU multi-arch + triplet as a "Multi-arch: same"-safe directory. Thanks to + Matthias Klose for the report. (Closes: #681410) + * checks/changelog-file: + + [NT] Emit "missing changelog" for packages that are missing + their usr/share/doc/<pkg>/ dir and do not have a doc symlink. + Thanks to Faheem Mitha for the report. (Closes: #683224) + * checks/conffiles{,.desc}: + + [NT] Remove leading slash on the filename when emitting + file-in-etc-rc.d-marked-as-conffile. + + [NT] Add check for "non-file" conffiles. Thanks to Guillem + Jover for the report. (Closes: #690910) + * checks/control-file.desc: + + [NT] Bump obsolete-relation-form-in-source to serious as these + forms are now "must not" instead of "should not". + * checks/copyright.desc: + + [NT] Bump debian-copyright-file-uses-obsolete-national-encoding + to serious as copyright files must now be UTF-8 encoded. + * checks/cruft{,.desc}: + + [NT] Detect MS-DOS executables as windows binaries. + + [NT] Bump the version of config.{guess,sub} needed for + triggering the "outdated-autotools-helper-file" tag for arm64 + support. Thanks to Paul Wise for the report and the + investigative work. (Closes: #690014) + + [RA,NT] Extend the description of the tags {outdated,ancient}- + autotools-helper-file to mention that dh-autoreconf might be + helpful tool. + + [NT] Apply patch from Bastien Roucariès to detect file licensed + under the "Good, not Evil"-JSON license. (Closes: #692616) + * checks/deb-format{,.desc}: + + [NT] Retire data.tar.xz tag. (Closes: #680391) + * checks/debhelper{,.desc}: + + [JW,NT] Consider missing versioned build-depends on + debhelper for compat 8 (or less) a pedantic issue. + (Closes: #681894) + + [NT] Retire debhelper-overrides-need-versioned-build-depends. + * checks/fields{,.desc}: + + [NT] Retire no-source-field since Lintian cannot emit it any + more due to dpkg-source refusing to extract such source + packages. + + [NT] Add tag for using the obsolete DMUA field. Thanks to + Ansgar Burchardt for the report. (Closes: #688494) + + [NT] Apply patches from Bernhard R. Link to check for + unintentional whitespace and use of non-canonical URIs in + Vcs-* fields. (Closes: #681769) + + [NT] Fix false-positive caused by insignificant whitespace. + Thanks to Dima Kogan for the report. (Closes: #693589) + * checks/files: + + [RG] Recognise smarty3 as smarty itself. + + [NT] Consider "tasksel tasks" as a meta package. + (Closes: #691489) + + [NT] Add patch from Bastien Roucariès to check for adobe font + license issues. (Closes: #694328) + * checks/group-checks{,.desc}: + + [NT] Detect debug packages not co-installable with itself, + when it provides debug symbols for a Multi-Arch: same package. + Thanks to Carsten Hey for the report. (Closes: #678896) + * checks/infofiles: + + [NT] Use L::Util's gzip decompressor rather than zcat. + * checks/init.d{,.desc}: + + [NT] Move file-in-etc-rc.d-marked-as-conffile to conffiles + check. + + [NT] Use L::Collect's conffile API instead of accessing the + "conffiles" control file directly. + * checks/java.desc: + + [NT] Remove the "experimental" marker of the Java byte-code + check. + * checks/manpages{,.desc}: + + [CW,NT] Manually do redirects and chdir rather than + invoking a shell when calling man and lexgrog. + + [CW,NT] Be stricter with missing roff preprocessors by + setting MANROFFSEQ to the empty string when calling man. + + [CW,NT] Pass -Tutf8 -Z to man to skip an unused part of + the groff pipeline. (Closes: #677874) + + [CW,NT] Use the L::Util gzip decompressor to open gzipped + manpages. + * checks/menu-format{,.desc}: + + [NT] Move a table of categories to a data file. + + [NT] Update description of menu-icon-missing. Lintian is now + sometimes able to find the icon in dependencies (if they are + built from the same source). Thanks to Ryan Kavanagh for the + report and the suggested patch. (Closes: #683516) + * checks/md5sums: + + [NT] Use L::Collect's conffile API instead of accessing the + "conffiles" control file directly. + * checks/po-debconf{,.desc}: + + [NT] Check for untranslatable templates that should be + translatable. Thanks to David Prévot for the report and the + patch. (Closes: #686179) + * checks/scripts{,.desc}: + + [NT] Retire check for dpkg-maintscript-helper in preinst. + (Closes: #685497) + + [NT] Fix false positive "executable-not-elf-or-script" when + the file is an executable hardlink to a script. + + [NT] Check maintainer scripts for unexpanded #DEBHELPER# tokens. + Thanks to Cyril "KiBi" Brulebois for the suggestion. + + [NT] Fix false-positive for removal of device files as /dev/shm + is not a device. Thanks to Steve Langasek for the report and + Roger Leigh for the extra info. (Closes: #693442) + * checks/shared-libs{,.desc}: + + [NT] Clarify the description of dev-pkg-without-shlib-symlink + to mention that the dev symlink is always expected in /usr. + + [NT] Add missing "+" in libtool regex. Thanks to Leo 'costela' + Antunes for the report. + + [RA,NT] Check for use of obsolete "<" and ">" in shlibs control + files. (Closes: #660655) + * checks/source-copyright{,.desc}: + + [NT] Check for possible misspellings of known field + names. (Closes: #678639) + + [NT] Fix typo of paragraph. Thanks to Logan Rosen for spotting + it. (Closes: #693013) + * checks/version-substvars{,.desc}: + + [JW,NT] Extend version-substvar-for-external-package to + all relations. Previously it was only triggered for + strong dependency relations. (Closes: #658474) + + * collection/deb-format.desc: + + [NT] Remove unneeded changelog-file from "Needs-Info". + * collection/objdump-info{,-helper,.desc}: + + [NT] Change the output format for the collection and + bump the version of the collection accordingly. + + [NT] Apply patch from Peter Pentchev to ensure set{u,g}id + ELF binaries are properly processed, even when Lintian is + run as root. (Closes: #686352) + + * data/binaries/embedded-libs: + + [RG] Check for embedded copies of jsoncpp. + * data/fields/archive-sections: + + [NT] Add new "tasks" section. + * data/menu-format/add-categories: + + [NT] New file. + * data/output/ftp-master-{,non}fatal: + + [NT] Removed, not used at run time. + * data/scripts/interpreters: + + [NT] Add nodejs and Rscript as a known interpreter. + Thanks to Marcelo Jorge Vieira and Sébastien Boisvert + for the report. (Closes: #623265, #692232) + * data/spelling/corrections: + + [NT,RG] Add more corrections. + + [RG] Re-sort the corrections. + + * debian/control: + + [NT] Add (Build-)Depends on libtext-levenshtein-perl. + + [NT] Use anonscm.d.o in the Vcs-* fields instead of + git.d.o. + * debian/lintian.install: + + [NT] Install Lintian perl modules in /usr/share/perl5. + * debian/rules: + + [NT] Add target to generate HTML API doc. Currently + this is only run manually. + + * frontend/lintian: + + [NT] Remove chdir calls for checks. + + [NT] Retire depreciated command line and config options. + + [NT] Refactor unpacking into Lintian::Unpacker. + + [NT] Make parameter for --jobs optional. In its absence + Lintian will not limit the number of parallel jobs. + + [JW,NT] During the unpack phase, emit the name of the + group currently being unpacked when --verbose is given. + (Closes: #677890) + + [JW] Fix typo of Parallelization. + + [NT] Fix regression where --suppress-tags{,-from-file} + was ignored if -C or -X was passed. Thanks to Thorsten + Glaser for reporting it. (Closes: #688320) + + * lib/Lintian/Collect{,/Source}.pm: + + [NT] Add optional parameter to field (and X_field) + methods that denotes the default value if a field is + missing. This avoid some boiler plate for callers + of the methods. + * lib/Lintian/Collect/Binary.pm: + + [NT] Bump API for objdump method. + + [NT] Add API for checking if a file is considered a + conffile. + * lib/Lintian/Collect/Package.pm: + + [NT] Strip leading slash off files extracted from tar. + * lib/Lintian/Command.pm: + + [NT] Work around a leak in IPC::Run (see #301774). + * lib/Lintian/Internal/FrontendUtil.pm: + + [NT] Always use Dpkg::Vendor to determine the default + vendor. Previously dpkg-vendor would be preferred if + available. + * lib/Lintian/Lab/Entry.pm: + + [NT] Use the L::Collect during creation instead of + manually reading the dsc for source packages. + * lib/Lintian/Profile.pm: + + [NT] Add support for the new optional "Load-Checks" + field in profiles. + + [NT] Ensure that the "lintian" check is always loaded + as these tags are not emitted by check modules. Also + enable the tags from the check by default. + * lib/Lintian/Tags.pm: + + [NT] Be explicit about the reason when rejecting an + override. Thanks to Yves-Alexis Perez for the report. + (Closes: #673073) + * lib/Lintian/Unpacker.pm: + + [NT] New file. + + * man/lintian.pod.in: + + [NT] Remove documentation about removed options. + + * reporting/graphs/{statistics,tags}.gpi: + + [JP] New file. + * reporting/html_reports: + + [JP,NT] Generate graphs of the collected history data. + (Closes: #672273) + + [NT] Make the mirror name configurable. + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [NT] Add "raring" as known Ubuntu distribution. Thanks to + Dmitry Shachnev. (LP: #1068208) + + -- Niels Thykier <niels@thykier.net> Tue, 11 Dec 2012 22:12:06 +0100 + +lintian (2.5.10.2) unstable; urgency=low + + * checks/po-debconf: + + [NT] Fix dirhandle leak. + * checks/source-copyright{,.desc}: + + [NT] Report the correct line number for the use of commas in + the "Files" field in DEP-5 copyright files. Thanks to Faheem + Mitha for the report. (Closes: #683946) + + [NT] Mention that syntax-error-in-dep5-copyright may hide + other issues as Lintian skips some DEP-5 checks in this case. + Thanks to Faheem Mitha for the report. + + * frontend/lintian: + + [NT] Fix typo of identifier method, which causes Lintian to + crash in case a "coll" cannot be started or it fails. + + * lib/Lintian/Profile.pm: + + [NT] Use "closedir" rather than "close" to close a dir + handle. + + -- Niels Thykier <niels@thykier.net> Mon, 17 Sep 2012 11:56:18 +0200 + +lintian (2.5.10.1) unstable; urgency=low + + * checks/fields.desc: + + [NT] Mention that cme can automate fixing some perl + related tags. Thanks to gregor herrmann for the report + and patch. (Closes: #680446) + * checks/manpages: + + [NT] Ignore wrapping issues on lines containing "file://" as + those are probably also URLs. Thanks to Faheem Mitha for the + report. (Closes: #682701) + + * data/binaries/embedded-libs: + + [NT] Update source-regex for libmysqlclient. Thanks to + Nicholas Bamber for the report. (Closes: #682022) + * data/doc-base/sections: + + [NT] Update section list. (Closes: #678650) + * data/spelling/corrections: + + [NT] Add new corrections. Thanks to Justin B Rye. + (Closes: #681527) + + * debian/changelog: + + [NT] Fix some typos in earlier entries. + + * frontend/lintian: + + [NT] Fix synopsis for --no-cfg option in the help output. + + * lib/Lintian/Architecture.pm: + + [NT] Properly handle cases like "linux-amd64" being an + alias of "amd64". + * lib/Lintian/Path.pm: + + [NT] Always resolve hardlinks relative to the package + root. + * lib/Lintian/Relation.pm: + + [NT] Fix handling of VISIT_OR_CLAUSE_FULL bit mask in a + condition. + * lib/Lintian/Tag/Info.pm: + + [NT] Fix poor error message due to the wrong variable + being unused. Thanks to Christoph Biedl for the report + (Closes: #682941) + + -- Niels Thykier <niels@thykier.net> Fri, 27 Jul 2012 16:32:26 +0200 + +lintian (2.5.10) unstable; urgency=low + + * Summary of tag changes: + + Added: + - incompatible-java-bytecode-format + - unknown-java-class-version + + * checks/changes-file.desc: + + [NT] Fix typo in tag description. Thanks to Luca + Falavigna for spotting it. + * checks/files: + + [NT] Use new gzip decompressor from L::Util. + * checks/java{,.desc}: + + [NT] Catch unknown Java class versions. + + [NT] Catch uses of Java7 byte code as an experimental + check. It lacks the proper checks for cases where + packages have the proper dependencies for Java7 byte + code. (Closes: #673276) + + * collection/*: + + [NT] Add missing load of the FileHandle module. + * collection/java-info{,.desc}: + + [NT] Use Archive::Zip instead of zipinfo + unzip to + extract information from Jar files. + + [NT] Limit java-info to files classified as "Zip Archive" + by file(1). + * collection/objdump-info: + + [NT] Only call readelf once per binary. + + [NT] Use xargs + a new helper to reduce the number of + readelf calls even further. + * collection/objdump-info-helper: + + [NT] New file. + * collection/strings: + + [NT] Optimize for the "common case" file names with a + fall-back to previous behaviour with special file names. + * collection/strings-helper: + + [NT] New file. + + * debian/control: + + [NT] Add (Build-)Dependency on libarchive-zip-perl. + + [NT] Remove runtime dependency on unzip (replaced by + libarchive-zip-perl). + + [NT] Add explicit Build-Dependency on xz-utils instead + of relying on dpkg-dev's dependency on it. + + [NT] Add versioned xz-utils as alternative to xz-lzma + or lzma. (Closes: #678775) + + [NT] Add missing suggests for lzma packages. lzma is + only used for source packages compressed with lzma. + + [NT] Add suggests on libperlio-gzip-perl. + + * frontend/lintian: + + [NT] Check if some collections can be skipped for existing + entries. This is mostly useful for static labs, where + certain checks can be now be rerun without having to run + "unpacked". + + [NT] Emit run times of collections and checks with debug + level 2 (or higher). + + [NT] Load lintian's libraries earlier. + + [NT] Add new option "--jobs" to control the number of + unpacking jobs Lintian will schedule in parallel. + + [NT] Improve Lintian's job scheduler to schedule unpacking + jobs on a group level rather than just a package level. + + * lib/Lintian/Collect/{Binary,Package}.pm: + + [NT] Use new gzip decompressor from L::Util. + * lib/Lintian/CollScript.pm: + + [NT] New file. + * lib/Lintian/Util.pm: + + [NT] Add gzip decompressor preferring libperlio-perl if + available, but with fallback to a "fork+exec" of gzip. + + [NT] Load Digest::SHA immediately like Digest::MD5. + + -- Niels Thykier <niels@thykier.net> Sat, 30 Jun 2012 17:21:27 +0200 + +lintian (2.5.9) unstable; urgency=low + + * Summary of tag changes: + + Added: + - run-parts-cron-filename-contains-illegal-chars + + Removed: + - run-parts-cron-filename-contains-full-stop + + * checks/*: + + [NT] Migrate to new Lintian::Path API. + * checks/fields: + + [NT] Also classify lib*-cli-dev as belonging to the section + cli-mono (rather than libdevel). Thanks to Chow Loong Jin + for the report and the patch. (Closes: #675358) + * checks/files{,.desc}: + + [NT] Rename run-parts-cron-filename-contains-full-stop and + have it catch "+" in the filename as well. Add reference + to policy 9.5.1 in the tag description. + * checks/init.d: + + [NT] Use the proper regex for matching package names rather + than an ad-hoc regex. Thanks to Thorsten Alteholz for the + report and suggested patch. (Closes: #677142) + * checks/shared-libs: + + [NT] Reverse order of two subst expressions to prevent + dev-pkg-without-shlib-symlink false positives. Thanks to + Aurelien Jarno, Yves-Alexis Perez and Stephen M. Webb for + the reports and the patch. + (Closes: #675826, #677310, #675832) + + [NT] Clarify that dev-pkg-without-shlib-symlink is emitted + on library and not "-dev" packages. + + * collection/hardening-info: + + [NT] Process binaries with hardening-check via xargs. This + greatly reduces the processing time for packages with many + binaries (like some of the linux binaries). Thanks to + Bastian Blank for the heads up. + + [NT] Skip kernel modules (.ko files). + * collection/hardening-info-helper: + + [NT] New file. + + * data/*: + + [NT] Refresh with tools/data from sid. + * data/scripts/interpreters: + + [NT] Replace ngp2 with ngraph. Thanks to Koichi Akabe for + the report. (Closes: #675139) + * data/spelling/corrections: + + [NT] Add corrections for usage, invocation(s) and ancient. + + * debian/changelog: + + [NT] raster-image-in-scalable-directory was added in 2.5.7, + not removed. + + * frontend/lintian{,-info}: + + [NT] Remove assumption that $ENV{HOME} is set/defined. If + $ENV{HOME} is not sent, user specific profiles will simply + be ignored. + * frontend/lintian: + + [NT] Attempt to automatically determine what to process, if + no packages are given and debian/changelog exists. Thanks + to Gilles Filippini for the suggestion. (Closes: #676799) + + * lib/Lintian/Collect/Package.pm: + + [NT] sorted_index now returns a list rather than a list ref. + + [NT] Represent files (from index) as Lintian::Path objects. + * lib/Lintian/Collect/Source.pm: + + [NT] Recognise "Package-Type" as an alternative of the "X-" + field of same name. Thanks to Christian Perrier for the + report. (Closes: #677649) + * lib/Lintian/Data.pm: + + [NT] Gracefully handle the absence of $ENV{HOME}. + * lib/Lintian/Path.pm: + + [NT] New file. + * lib/Lintian/Util.pm: + + [NT] Add regex to match valid package names. + + -- Niels Thykier <niels@thykier.net> Fri, 15 Jun 2012 21:29:03 +0200 + +lintian (2.5.8) unstable; urgency=low + + Its like 2.5.7, only with less false positives and no FTBFS. + + * checks/binaries{,.desc}: + + [NT] Fix a too strict regex causing false-positives for + biarch packages. This was a regression introduced in + version 2.5.7. Thanks to Sven Joachim for reporting it. + (Closes: #673106) + + [NT] Demote certainty of hardening-no-stackprotector to + wild-guess and move it to debian/extra-hardening profile. + + [NT] Skip hardening-no-fortify-functions for binaries only + using the unprotected memcpy. This greatly reduces the + number of false positives for binaries compiled with + gcc-4.7 -O2 (or higher optimization). (Closes: #673112) + * checks/files: + + [NT] Properly handle symlinks in icon directories. Thanks + to Nicholas Breen for the report and Felix Geyer for the + patches. (Closes: #673352) + + [NT] Ignore wrong sizes on images in animations as it may + be a method to implement the animation. Thanks to Matthias + Klumpp for the report and Felix Geyer for the patch. + (Closes: #673862) + + [NT] Ignore wrong icon sizes if the size difference is at + most 2px. Thanks to Felix Geyer for the patch. + * checks/scripts: + + [NT] Refactor the %versioned_interpreters into a new + data file. + * checks/shared-libs: + + [NT] Fix false positive "dev-pkg-without-shlib-symlink" + for shared libraries using "libtool -release X.Y". + Thanks to Sven Joachim for the report. (Closes: #673109) + + [NT] Fix false positive "dev-pkg-without-shlib-symlink" + for shared libraries installed in /lib. Lintian now + correctly expects the dev-symlink beneath /usr/lib. + Thanks to Guillem Jover for the report. + * checks/source-copyright: + + [NT] Use the in-memory contents of the copyright file + instead of re-reading the file when parsing it as a + DEP-5 copyright file. + + * collection/objdump-info{,.desc}: + + [NT] Drop -D flag for readelf when looking for symbols. + This makes some checks more reliable in Ubuntu. Thanks + to Marc Deslauriers for the report and the patch. + (Closes: #673451) + + * debian/control: + + [NT] Add versioned Build-Depends on dpkg-dev (>= 1.16.1~) + as the test suite relies on it. Thanks to Luca Falavigna + for reporting it. + + [NT] Update the description to mention that the version + of Lintian is calibrated for version 3.9.3 of the Policy. + * debian/lintian.install: + + [NT] Remove usr/share/lintian/data - Lintian does not + need it and dpkg will not replace the dir with a symlink. + + * data/scripts/interpreters: + + [NT] Add falcon, gbr3, jython and ngp2 as known interpreters. + (Closes: #669911, #671387, #662134, #667895) + * data/scripts/versioned-interpreters: + + [NT] New file. + + [NT] Added python2.7 to the list of known Python 2 interpreters. + * data/spelling/corrections: + + [RA] Remove corrections for "writeable" and "overwriteable". These + spellings are permitted by the OED in UK English. (Closes: #673611) + + [NT] Add correction for "pointer". + + * lib/Lintian/Collect/*.pm: + + [NT] Localize "$_" to avoid truncating caller's variable. + (Closes: #673613) + + * t: + + [NT] Generate empty ".so" files used in the test. This + resolves an issue where dpkg-source would exclude them + causing a FTBFS. (Closes: #673198) + + [NT] Fix test failure in derivatives where some hardening + flags are enabled by default. Thanks to Marc Deslauriers + for the report and the patch. (Closes: #673449) + + -- Niels Thykier <niels@thykier.net> Tue, 29 May 2012 11:49:47 +0200 + +lintian (2.5.7) unstable; urgency=low + + * Summary of tag changes: + + Added: + - apache2-configuration-files-need-conf-suffix + - apache2-deprecated-auth-config + - apache2-module-depends-on-real-apache2-package + - apache2-module-does-not-depend-on-apache2-api + - apache2-module-does-not-ship-load-file + - apache2-reverse-dependency-calls-invoke-rc.d + - apache2-reverse-dependency-calls-wrapper-script + - apache2-reverse-dependency-ships-file-in-not-allowed-directory + - apache2-reverse-dependency-uses-obsolete-directory + - apache2-unparseable-dependency + - apache2-unsupported-dependency + - diff-contains-quilt-control-dir + - hardening-no-fortify-functions + - hardening-no-relro + - hardening-no-stackprotector + - non-standard-apache2-configuration-name + - non-standard-apache2-module-package-name + - raster-image-in-scalable-directory + - rc-version-greater-than-expected-version + - udeb-uses-unsupported-compression-for-data-tarball + - web-application-depends-on-apache2-data-package + - web-application-should-not-depend-unconditionally-on-apache2 + + Removed: + - ancient-dpkg-long-filenames-check + - ancient-dpkg-predepends-check + - bad-ubuntu-distribution-in-changes-file + - binary-nmu-uses-old-version-style + - debian-control-with-duplicate-fields + - doc-base-file-references-usr-doc + - duplicate-fields-in-templates + - manpage-for-non-x11-binary-in-wrong-directory + - manpage-for-x11-binary-in-wrong-directory + - missing-dependency-on-install-info + - obsolete-field + - old-app-defaults-directory + - old-style-copyright-file + - old-style-example-dir + - package-installs-file-to-usr-x11r6-bin + - package-installs-font-to-usr-x11r6 + - package-uses-obsolete-file + - postinst-should-not-set-usr-doc-link + - udeb-uses-non-gzip-data-tarball + - x11-games-should-be-in-usr-games + + * checks/*: + + [NT] Remove some old tags that are no longer useful. + (Closes: #663516) + + [NT] Migrate to sorted_index from sorted_file_info. + + [NT] Explicitly import needed subs from L::Util. + * checks/apache2{,.desc}: + + [NT] New files to check for apache2 related packages. Thanks + to Arno Töll and Stefan Fritsch for the patches. + (Closes: #668546) + + [NT] This check is not enabled by default. It can be used + via the debian/extra-apache2 profile. + * checks/binaries{,.desc}: + + [NT] Move embedded library data to a data file. + + [NT] Add ELF hardening checks. Thanks to Kees Cook for + report and the patches. (Closes: 650536) + + [NT] Replace architecture tables with data files. + + [JW] Check for missing Python3 numpy ABI dependency. + (Closes: #671024) + * checks/changelog-file: + + [NT] Output the correct line number for the "line-too-long" + tag. Thanks to Arno Töll for the report. (Closes: #657402) + * checks/changes-file{,.desc}: + + [NT] Remove Ubuntu specific handling of distribution names. + Instead replace it with a more generalized one that derivatives + can reuse by extending vendor specific data files. Thanks to + Daniel Dehennin for the suggestion. (Closes: #648777) + * checks/control-file: + + [NT] Rewrote parts to use Lintian::Collect for fetching data. + * checks/cruft{,.desc}: + + [NT] Check for quilt control dirs in the debian packaging files. + * checks/deb-format{,.desc}: + + [NT] Replace old udeb compression tag with a more general + one. (Closes: #664600) + + [NT] Remove logic for checking if a deb is meant for + Ubuntu. Instead unconditionally emit the tag and let the + vendor profiles handle it. + * checks/debconf: + + [NT] Special case debconf providers for purge-debconf tag. + Generally they cannot use db_purge in postrm (for obvious + reasons), so the tag will be a false-positive in such + cases. + * checks/fields{,.desc}: + + [NT] Add devref reference. + + [NT] Remove special handling of the Ubuntu specific field, + "original-maintainer". This field is now handled by vendor + specific data files. (Closes: #649852) + + [JW,NT] Check for common mistakes with preview release and + release candidate versions. For non-native packages, this + check is only done on initial uploads of new upstream + releases. Thanks to Stefano Rivera and Julian Taylor for + their additional suggestions. (Closes: #649277) + * checks/filename-length.desc: + + [ADB, NT] Reword description of package-has-long-file-name. + Thanks to Andreas Beckmann for suggestion. + * checks/files{,.desc}: + + [NT] Remove "manual" lazy loads of data files. + + [NT] Remove code for the uses-FHS-doc-dir tag. + + [NT] Extend icon checks to all icon directories and look for + raster images in "scalable" icon directories. Thanks to + Paul Wise for the report and Felix Geyer for the patches. + (Closes: #628189) + * checks/group-checks: + + [NT] Include Provides when checking for conflict relations. + Thanks to Damyan Ivanov for the report. (Closes: #672615) + * checks/java: + + [NT] Ignore "codeless" jars if they appear to be maven + javadoc jars. Thanks to Ludovic Claude for the patch. + (Closes: #660845) + * checks/lintian.desc: + + [NT] Updated the description of the override tags. + * checks/manpages{,.desc}: + + [RA] Detect hyphen used as minus sign following a groff \f[C] font + change. Thanks, Iustin Pop. (Closes: #664471) + * checks/menu-format: + + [NT] Move menu section lists into a data file. + + [NT] If a package is missing a menu icon, check its direct strong + dependencies built from the same source (if any) for the icon. + This fixes false-positives menu-icon-missing in some cases. + * checks/menus{,.desc}: + + [NT] Remove "manual" lazy load of data file. + * checks/nmu: + + [NT] Remove Ubuntu specific code to handle their (lack of) NMUs. + These tags are instead suppressed by the Ubuntu profile. + * checks/rules: + + [NT] Fix false-positive "ignores-make-clean-error" tag caused by + using make with -C and a dir containing the letter "i". Thanks to + Tobias Hansen for the report. (Closes: #671537) + * checks/scripts{,.desc}: + + [NT] Mention devref 6.4 in command-with-path-in-maintainer-script. + Thanks to Arno Töll for the patch. + + [NT] Do not emit unusual-interpreter if the package provides the + interpreter itself. + + [NT] Ignore the lack of exec bit on the debconf shell modules. + * checks/standards-version.desc: + + [NT] Add references to the Policy upgrading checklist. Thanks to + Simon Paillard for the patch. + + * collection/*: + + [NT] Use Lintian::Collect to access the package index. + * collection/bin-pkg-control{,.desc}: + + [NT] Compress control-index file and bump version of + bin-pkg-control. + * collection/copyright-file: + + [NT] Remove code to look for old-style copyright file. + * collection/file-info{,.desc}: + + [NT] Compress file-info output and bump version of file-info. + * collection/hardening-info{,.desc}: + + [NT] New files. Thanks to Kees Cook for the patch. + * collection/index{,.desc}: + + [NT] Compress index output and bump version of index. + * collection/java-info{,.desc}: + + [NT] Compress java-info output and bump version of java-info. + * collection/objdump-info: + + [NT] Use "fail" from Lintian::Util.pm rather than embedding a + copy of it. + + [NT] Use Lintian::Collect to find ELF files. + + [NT] Replace all usage of objdump with readelf. + (Closes: #614034) + + [NT] Compress objdump-info output and bump version of objdump-info. + * collection/strings{,.desc}: + + [NT] Compress strings output and bump version of strings. + + * data: + + [NT] Move to vendors/debian/ftp-master-auto-reject and replace + it with a symlink. + * data/binaries/{arch-{64bit-equivs,regex},hardening-tags}: + + [NT] New file. + * data/binaries/embedded-libs: + + [NT] New file. + + [NT] Add libav libraries. Thanks to Andres Mejia for the + suggestion and the suggested patch. (Closes: #666765) + * data/changes-file/{debian-dists -> known-dists}: + + [NT] Renamed file. + * data/menu-format/menu-sections: + + [NT] New file. + + * debian/changelog: + + [NT] Amend the 2.5.5 to mention that it also added the tag + binaries-have-file-conflict. + + * frontend/lintian: + + [JW] Fix typo in error message. + + [JW,NT] Fix handling of "override" option in the lintianrc file. + (Closes: #666207) + + * lib/Lintian/Architecture.pm: + + [NT] Lazily evaluate the data file. + * lib/Lintian/Collect/Package.pm: + + [NT] Remove an extra level of quoting in index. + + [NT] Remove root dir from sorted_index. + + [NT] Keep trailing slash in dir names for file_info. + * lib/Lintian/Collect/Binary.pm: + + [NT] Remove sorted_file_info as sorted_index now produces + an identical list. + * lib/Lintian/Data.pm: + + [NT] Lazily load data files. + + [NT] Allow pre-process sub to alter existing value for a key + by passing the previous value as third argument. + + [NT] Allow vendor specific data files. They will be loaded + from LINTIAN_ROOT/vendors/$profile/data. + * lib/Lintian/Output{,/*}.pm: + + [NT] Replace non-printables with "?" in output. + * lib/Lintian/Profile.pm: + + [NT] Normalize profile name and replace "parents" with + "profile_list". The latter also includes the current profile + name. + * lib/Lintian/Tag/Info.pm: + + [NT] Use Lintian::Data to load the manual-references data + file instead using an ad-hoc parser. + * lib/{Text_utils => Lintian/Tag/TextUtil}.pm: + + [NT] Renamed module. + * lib/{Util => Lintian/Util}.pm: + + [NT] Renamed Util to Lintian::Util. + + [JW] Consider duplicate fields a syntax error in dctrl files. + Previously, duplicate fields were silently ignored (except + when a separate tag would check for it). (Closes: #664061) + + [NT] Stop exported a majority of all subs by default. + + * profiles/ubuntu/main.profile: + + [NT] Add a number of NMU related tags to the list of disabled + tags. + + * vendors/ubuntu/main/data/changes-file/known-dists: + + [NT] New file based on data/changes-file/ubuntu-dists. + + [ADB] Add "quantal" (Quetzal) + * vendors/ubuntu/main/data/common/source-fields: + + [NT] New file. + * vendors/ubuntu/main/data/fields/{binary,udeb}-fields: + + [NT] New files. + + -- Niels Thykier <niels@thykier.net> Mon, 14 May 2012 23:45:08 +0200 + +lintian (2.5.6) unstable; urgency=low + + * checks/*: + + [NT] Simplified some bit operations done on file permissions. + * checks/binaries: + + [NT] Fix false-negative missing-dependency-on-phpapi when the + binary included a "SOVERSION" in its name. Thanks to Ondřej + Surý for the report. (Closes: #662936) + * checks/changelog-file: + + [NT] Do not emit "no-upstream-changelog" for transitional + packages. Thanks to Paul Wise for the report. + (Closes: #660076) + * checks/cruft: + + [NT] Added missing "unless" in the code. Fixes false + positive "source-contains-waf-binary". Thanks to + Dmitrijs Ledkovs for the report. (Closes: #661561) + * checks/debhelper: + + [NT] Fix FP executable-debhelper-file-without-being-executable + emitted for directories. Thanks to Felix Geyer for the report + and the patch. (Closes: #663447) + * checks/files.desc: + + [NT] Fix a typo in a tag description. Thanks to Ludovic + Rousseau for spotting it. (Closes: #663759) + * checks/scripts: + + [NT] Allow fontforge-nox as (alternative) provider for the + fontforge interpreter. Thanks to Martin Erik Werner for + the report. (Closes: #661363) + + [NT] Move %interpreters map to a separate data file. + * checks/source-copyright.desc: + + [NT] Update references for copyright-format checks. Thanks + to Thijs Kinkhorst for the report and the patch. + (Closes: #661778) + + [NT] Added trailing slash to copyright-format URLs in tag + descriptions for consistency with the policy. + + * collection/*: + + [NT] Removed assumption that "cwd" is the same as the + directory for the package being examined. + * collection/java-info: + + [NT] Added missing "use Util". + * collection/scripts: + + [NT] Use "fail" from Util.pm rather than using an embedded + copy. + * collection/strings: + + [NT] Use Lintian::Collect to find ELF files. + + * data/scripts/interpreters: + + [NT] New file. + + * frontend/lintian: + + [NT] Pass directory of the package to the collections. + + * lib/Lintian/Check.pm: + + [NT] Fixed false positive "*-address-malformed" if the local + part of the email was "0". Thanks to Christopher Vollick for + the report. (Closes: #663659) + * lib/Lintian/Tag/Info.pm: + + [NT] Fixed issue where "Experimental: no" was handled as a + "yes" when generating a tag description. + * lib/Util.pm: + + [NT] If no locale can be found, just set LC_ALL to en_US.UTF-8. + This fixes an issue with Lintian in backports when only + locales-all is installed. Thanks to Peter Palfrader for the + report. (Closes: #663459) + + * private/runtests: + + [NT] Support using en_US.UTF-8 from locales-all, when that is + available. This allows locales-all to be used as a substitute + for locales when compiling Lintian on Squeeze. + + * reporting/harness: + + [NT] Corrected inverted logic when checking for dry-run. + + -- Niels Thykier <niels@thykier.net> Wed, 14 Mar 2012 15:00:25 +0100 + +lintian (2.5.5) unstable; urgency=low + + The "Policy 3.9.3" release. + + * Summary of tag changes: + + Added: + - arch-dependent-file-not-in-arch-specific-directory + - binaries-have-file-conflict + - control-file-contains-dh_make-vcs-comment + - debhelper-compat-file-is-missing + - dependency-is-not-multi-archified + - dh-exec-install-not-allowed-here + - dh-exec-private-helper + - dh-exec-script-without-dh-exec-features + - dh-exec-subst-unknown-variable + - executable-debhelper-file-without-being-executable + - missing-dependency-on-numpy-abi + - package-file-is-executable + - package-uses-dh-exec-but-lacks-build-depends + - preinst-uses-dpkg-maintscript-helper-without-predepends + - shlib-in-multi-arch-foreign-package + - source-contains-waf-binary + - syntax-error-in-control-file + - syntax-error-in-debconf-template + + Removed: + - dh_dhelp-is-deprecated + - maintainer-not-full-name + - maintainer-script-calls-deprecated-wm-menu-config + - maintainer-script-does-not-check-for-existence-of-wm-menu-config + - uploader-address-missing + - uploader-not-full-name + + * checks/*: + + [NT] Fixed assumptions about certain fields being present. + Where needed, Lintian will make guesses to the most likely + value (or the least "broken" value). + * checks/binaries{,.desc}: + + [NT] Allow libnss_* plugins in usr/lib. + + [JW] Check for ELF binaries installed in unsafe paths in + Multi-Arch: same packages. (Closes: #650445) + + [JW] Added check numpy ABI dependency. (Closes: #658311) + + [NT] Fixed embedded-library false-positive for tiff3. Thanks + to Jay Berkenbilt for the report. (Closes: #660675) + * checks/control-file{,.desc}: + + [NT] Allow "pkg (= ${source:Version})" versioned dependency if + pkg is architecture all. This fixes a false-positive + "weak-library-dev-dependency" for some mono packages. Thanks + to David Bremner for the report. (Closes: #652602) + + [NT] Emit a tag if there is a syntax error in d/control rather + than just aborting the rest of the check. + + [NT] Accepted patch from Gergely Nagy to catch dh-make vcs + templates in comments. Thanks to Paul Wise for suggesting this + check. (Closes: #657110) + * checks/copyright.desc: + + [RA] Rephrase copyright-with-old-dh-make-debian-copyright long + description to be clearer about the legal status of copyright + notices. (Closes: #659574) + + [RA,NT] Make copyright-with-old-dh-make-debian-copyright a + pedantic tag. + * checks/cruft{,.desc}: + + [NT] Added dh-autoreconf as a build-depends alternative to + libtool for suppressing ancient-libtool warning. Thanks to + Felix Geyer for the report. (Closes: #650325) + + [NT] Accepted patch from Paul Wise to detect COFF object + files as Win32 binaries. + + [NT] Properly handle unpacked being a symlink. + + [NT] Accepted patch from Luca Falavigna to detect waf files + with a binary payload. (Closes: #654523) + * checks/debconf: + + [RA] Recognize Perl uses of debconf templates via metaget or + settitle. + * checks/debhelper{,.desc}: + + [NT] Do not check executable debhelper files for brace + expansion if compat is 9 (or greater). It may be allowed by + tool interpreting the file. + + [NT] Added checks for handling executable files in the + debian dir. Thanks to Joey Hess and Arno Töll for the + reports. (Closes: #651572, #651330) + + [NT] Added various dh-exec related checks. Thanks to Gergely + Nagy for the patches. (Closes: #653071) + + [NT] Removed tag for using dh_dhelp. It is not shipped in + debhelper anymore (not even Squeeze) and the tag is not + emitted anymore (according to lintian.d.o). + + [NT] Added check for missing compat file. (Closes: #656885) + * checks/fields{,.desc}: + + [JW] Properly handle uploader names with commas. + (Closes: #485705) + + [NT] Removed uploader-address-missing tag. + + [NT] Added section-mapping for (some) zope packages. This + fixes some false-positives where python-zope packages were + wrongly identified as belong to the python section. + + [NT] Fixed an issue where "doc-pkg-depends-on-main-pkg" would + only be triggered if it was a "pre-depends" relation. + + [NT] Use new Lintian::Architecture API. + + [JW] Include ssh:// as a valid protocol for hg. + (Closes: #655907) + + [NT] Ignore self relations in Replaces and Provides. This + is allowed according to Policy §7.6.2. (Closes: #657034) + + [NT] Applied patch from intrigeri to remove "not-full-name" + tags. (Closes: #658031) + * checks/files: + + [JW,NT] Skip "Multi-Arch: same" check of gzip files if their + install path contains the architecture. (Closes: #650665) + + [JW] Fixed a false-negative "empty-binary-package" if the + package contained the /u/s/doc/$pkg symlink. + (Closes: #650959) + + [NT] Allow fonts in packages starting with "fonts-". This + completes the fix for #646838. Thanks to أحمد المحمودي + for the follow up report. (Closes: #651045) + + [NT] Re-added swfobject.js to the list of known javascript + libraries. Thanks to Paul Wise for noticing it had been + uploaded. + * checks/group-check{,.desc}: + + [NT] Check for file conflicts in binaries built from the same + source package. (Closes: #293838) + + [JW] Added check for incomplete Multi-arch'ification. + (Closes: #650838) + * checks/menus{,.desc}: + + [NT] Remove obsolete checks for wm-menu/wm-menu-config use in + maintainer scripts. The executables are not shipped in menu + in Squeeze nor sid. Furthermore the tags are not emitted in + any package (according to lintian.d.o). + * checks/nmu: + + [JW] Properly handle uploader names with commas. + * checks/po-debconf: + + [NT] Remove special handling for packages using yada. + * checks/rules: + + [NT] Remove check for missing build-depends on yada. + * checks/scripts: + + [NT] Accepted patch from Evan Broder to check for missing + versioned pre-depends on dpkg when using maintscript helper. + This dependency is trivially satisfied in Debian, but may + complicate Ubuntu LTS upgrades. (Closes: #602249) + + [NT] Accepted patch from James McCoy to recognize "racket" as + a known interpreter. (Closes: #652594) + + [NT] Accepted patch from Martin Erik Werner to recognize + "fontforge" as a known interpreter. (Closes: #652736) + * checks/shared-libs{,.desc}: + + [JW] Check for Multi-Arch foreign packages shipping shared + libraries in public library directories. (Closes: #650444) + + [NT] Use the new hwcap-dirs data file to determine hwcap dirs. + + [NT] Ignore missing symbols/shlibs files for libc libnss + plugins. + * checks/source-copyright{,.desc}: + + [JW] Allow a trailing slash in the DEP-5 1.0 URL. + (Closes: #649813) + + [NT] Use line numbers rather than "0-indexed" paragraph numbers + in the emitted tags. Thanks to Jari Aalto for the suggestion. + + [NT] Recommend the URI to the copyright-format subpolicy as + DEP-5 format specification URI. Thanks to Helmut Grohne for + the report. (Closes: #651392) + * checks/symlinks: + + [NT] Ignore langpack symlinks if they appear to be consistent. + Thanks to Evan Broder for the report. (Closes: #650793) + + * collection/ar-info: + + [NT] Properly handle unpacked being a symlink. + * collection/index: + + [NT] Use Lintian::Processable::Package to determine source + name and version. + * collection/file-info{,-helper}: + + [NT] Do not open non-files when double-checking gzip files. + + [NT] Pass "-N" to file as Lintian does not need the aligned + output. + * collection/md5sums: + + [NT] Properly handle unpacked being a symlink. + * collection/source-control-file{,.desc}: + + [NT] Removed as they are no longer needed. They have been + replaced by a smarter Lintian::Collect. + * collection/unpacked: + + [NT] Pass --no-check to dpkg-source when requested not to + check signatures (via reporting/harness). + + * data/{fields => common}/architectures: + + [NT] Moved architectures to data/common. + * data/debhelper/dh_addons-manual: + + [JW] Add python3-sphinx as provider of sphinxdoc dh sequence. + * data/debhelper/dh_commands-manual: + + [JW] Add python3-sphinx as provider of dh_sphinxdoc. + (Closes: #649640) + + [NT] Added libxine-dev | libxine2-dev as provider of dh_xine. + (Closes: #659285) + * data/fields/archive-sections: + + [NT] Added new sections. Thanks to Michael Biebl for the + reminder. (Closes: #652123) + * data/fields/virtual-packages: + + [NT] Refreshed against sid. (Closes: #657155) + * data/files/fonts: + + [NT] Refreshed against sid. + * data/init.d/virtual_facilities: + + [NT] Refreshed against sid. + * data/output/ftp-master-{,non}fatal: + + [NT] Refreshed. + * data/output/manual-references: + + [NT] Refreshed. + * data/shared-libs/hwcap-dirs: + + [JW] New data file for listing known hwcap dirs. + * data/shared-libs/ldconfig-dirs: + + [NT] Auto-generate file with help from dpkg-architecture. + (Closes: #653832) + * data/spelling/corrections: + + [NT] Added corrections for deprecate(d) and pedantic. + * data/standards-version/release-dates: + + [NT] Added release date for Standards-Version 3.9.3. + + * debian/control: + + [NT] Prefer libc-bin (>= 2.13) to locales. Thanks to Josh + Triplett for the suggestion, investigative work and the + proposed patch to make this possible. (Closes: #636086) + + [JW] Add Build-Dependency on python-numpy and python-all-dev + for the test suite. + + [NT] Bumped Lintian's Standards-Version to 3.9.3. No changes + required. + * debian/{postinst,prerm}: + + [JW,NT] Remove the internal Lintian locale if a C.UTF-8 locale + is found in /usr/lib/locale. + * debian/source/lintian-overrides: + + [NT] Added override for python-dev tag. We need python-all-dev + for the test suite. + * debian/triggers: + + [JW] Added trigger for libc-bin C.UTF-8 locale. This ensures + the internal Lintian locale can removed if libc-bin is upgraded + after Lintian. + + * doc/lintian.xml: + + [NT] Corrected the runtime estimate for an archive-wide run. + With 35 000+ packages, it can no longer be done in "a few + hours". + + [NT] Documented architecture specific overrides. + (Closes: #651816) + * doc/lintianrc.example: + + [NT] Removed deprecated variables and added sample TMPDIR + usage. + + * frontend/lintian: + + [NT] Allow -U to be given more than once. + + [JW,NT] If using a temporary lab, print its location when + using --verbose option. (Closes: #650433) + + [NT] Fixed an issue where auto-clean would not see the real + status of some collections. + + [NT] Keep auto-cleaned collections until all processables in + the group has been checked. + + [NT] Attempt guess the version number when running in a git + checkout or unpacked source dir. Based on patch from Evan + Broder. (Closes: #650701) + + [NT] Added support for the virtual "GROUP" type in Lab Queries. + This will make Lintian select all packages related to a given + source (and version). + + [NT] Removed check loading code. This has been moved into + Lintian::Profile. + + [NT] Always load a profile. + + [NT] Allow TMPDIR in the configuration file. + + [NT] Treat "pedantic" as a normal severity. In previous + release, pedantic tags were not affected by --display-level. + A side-effect of this is that "pedantic" can no longer be + used with "display-level" in the configuration file. + + [NT] Produce a better error message when asked to process an + URL or a path that is definitely not a valid lab query. + Thanks to Nicholas Bamber for the report. (Closes: #651332) + * frontend/lintian-info: + + [NT] Support new lintian.log format. + + [NT] Support new override file format with -a. + + [NT] Fixed the --profile argument, which now accepts the + mandatory parameter it is supposed to. + + * lib/Checker.pm: + + [NT] Removed, merged into frontend/lintian. + * lib/Lintian/Architecture.pm: + + [NT] New file. + * lib/Lintian/Check.pm: + + [NT] Do not check for missing uploader address as it cannot be + done reliably anymore. + + [NT] Applied patch from intrigeri to remove the "not-full-name" + tags. + + [NT] Only emit a spelling tag once for each spelling error in each + field/file/text. + * lib/Lintian/CheckScript.pm: + + [NT] New file. + * lib/Lintian/Collect/{Binary,Source}.pm: + + [NT] Assume packages to be non-native when it cannot be + accurately determined due to missing version field. + * lib/Lintian/Collect/Binary.pm: + + [NT] Fixed an error in parsing symbol names when using readelf + as replacement for objdump. + * lib/Lintian/Collect/Group.pm: + + [NT] Made direct_dependencies properly handle udebs. This fixes + an error that would cause lintian to skip some checks for udebs. + * lib/Lintian/Collect/Package.pm: + + [NT] Map an owner/group of "0/0" to "root/root". This avoids a + number of false-positive ownership tags if only numerical + ownership is available in the tarball. Thanks to Thorsten + Glaser for the report. (Closes: #638278) + * lib/Lintian/Collect/Source.pm: + + [NT] Removed assumption that source packages always have a + format field. + * lib/Lintian/Lab.pm: + + [NT] Added "is_temp" method to identify temp labs from static + labs. + + [NT] Corrected issue where the lab would record binaries as + being from "main", even if their "section" field implied + otherwise. + * lib/Lintian/Lab/Entry.pm: + + [NT] Properly strip whitespace when loading collection status. + * lib/Lintian/Processable/Package.pm: + + [NT] Use part of the file name as package name if the mandatory + "Package" or "Source" fields are missing rather than choking. + * lib/Lintian/Profile.pm: + + [NT] Catch recursively defined profiles when the Profile field + contains a (slightly) different name than the Extends field of + its parent. (Closes: #655469) + + [NT] Handle loading of checks and tags. + * lib/Lintian/Tag/Info.pm: + + [NT] Accepted patch from Evan Broder to always output effective + severity in tag descriptions. + + [NT] Removed code to load tags from checks. This has moved to + Lintian::Profile. + * lib/Lintian/Tags.pm: + + [NT] Support architecture wildcards in overrides. + + [NT] Emit "malformed-override" for architecture specific tags for + unknown architectures and for "arch:all" packages. + + [NT] Use a Profile to determine if a tag is suppressed or not. + + [NT] Handle "pedantic" like the other severities. + + [NT] Count experimental tags as a separate group of tags. This + fixes an issue where lintian would exit 1 if the only error + tags emitted were experimental. (Closes: #658971) + * lib/Util.pm: + + [NT] Create clean_env function to handle cleaning of the + environment for children processes and finding a suitable UTF-8 + locale (when needed). + + [NT] Report line number instead of "0-indexed" paragraph number + in syntax errors. Thanks to Jari Aalto for the suggestion. + (Closes: #659909) + + * man/lintian.pod.in: + + [NT] Removed the notes that some options disable loading of a + profile. Lintian now always loads a profile when doing checks. + + * private/refresh-archs: + + [NT] Rewritten. + * private/refresh-hwcap: + + [JW] New file. + + * profiles/debian/ftp-master-auto-reject.profile: + + [NT] Refreshed. + + * reporting/harness: + + [NT] Removed useless "TODO" message from the log output. + + [NT] Added -h/--help option to print usage information. + + [NT] Added --dry-run option. + + [NT] A source package is now only processed if one (or more) of + its binaries are processed as well. + + [NT] Also symlink $LINTIAN_BIN_DIR/gpgv to /bin/true when + skipping signature checks. This avoids issues when some tools + prefers gpgv to gpg. + * reporting/html_reports: + + [JW] Properly handle uploader names with commas. + + [NT] Use the severities from profiles when generating tag pages. + Based on patches from Evan Broder. (Closes: #650712) + + [NT] Removed tag loading code, which has moved into + Lintian::Profile. + + [NT] Pass a profile to the templates (as $profile) instead of the + old %all hash. + + [NT] List only source packages on the "packages_X.html" pages. + * reporting/templates/tags-all.tmpl: + + [NT] Use $profile instead of the %all hash. + + -- Niels Thykier <niels@thykier.net> Thu, 23 Feb 2012 14:06:21 +0100 + +lintian (2.5.4) unstable; urgency=medium + + The "perl5.14 (+ misc) fix"-upload. Medium as perl 5.14 + deprecation warnings tend to make Lintian output unreadable. + + * Summary of tag changes: + + Added: + - data.tar.xz-member-without-dpkg-pre-depends + - gzip-file-is-not-multi-arch-same-safe + - init.d-script-does-not-implement-optional-option + - init.d-script-missing-lsb-description + - maintainer-address-causes-mail-loops-or-bounces + - missing-build-dependency-for-dh-addon + - package-depends-on-lower-priority-package + - package-would-benefit-from-build-arch-targets + - python-depends-but-no-python-helper + - python3-depends-but-no-python3-helper + - transitional-package-should-be-oldlibs-extra + - uploader-address-causes-mail-loops-or-bounces + + * checks/*: + + [JW] Replace common_data.pm with Lintian::Check. + + [NT] Remove some unused "use lib <expr>" from various checks. + + [NT] Use Lintian::Collect::Group to find direct dependencies. + * checks/binaries: + + [JW] Allow binaries to use "/usr/lib/$srcpkg/" in RPATHs. + (Closes: #642092) + + [JW] Fixed a false-positive when using the multiarch dir in + RPATH. (Closes: #646817) + * checks/changes-file{,.desc}: + + [NT] Added "precise" to the list of Ubuntu distributions. + Thanks to Loïc Minier for the patch. + + [NT] Accept release codename in the changes file. Thanks to + Julien Cristau for the report. (Closes: #637540) + * checks/circular-deps{,.desc}: + + [NT] Renamed to group-checks{,.desc}. + * checks/group-checks{,.desc}: + + [NT] Added check for depending on lower priority packages built + from the same source. Only strong dependencies are considered. + Thanks to Neil Williams for the report. (Closes: #387166) + * checks/common_data.pm: + + [JW] Merged into Lintian::Check. + * checks/cruft{,.desc}: + + [NT] Escape path when using them in regexes. (Closes: #642902) + + [NT] Extended the description of the tag for non-native packages + with native versions. Thanks to Jari Aalto for the report. + (Closes: #580048) + * checks/copyright.desc: + + [RG,NT] Clarified that the PHP 2.x license is only for the PHP + interpreter and PEAR modules cannot use it. Thanks to + Thomas Goirand for the report. (Closes: #616436) + * checks/deb-format{,.desc}: + + [NT] Added check for using .xz compression in deb files without + versioned Pre-Depends on dpkg. The severity is pedantic for + Debian and serious for Ubuntu. Thanks to Aaron M. Ucko for the + report. (Closes: #648350) + * checks/dehelper{,.desc}: + + [JW,NT] Check for versioned dependencies for some dh_commands. + (Closes: #641035) + + [JW] Detect missing dependencies for using dh sequences. + (Closes: #613327) + + [JW] Parse continuation lines in d/rules. + + [JW] Only emit brace-expansion-in-debhelper-config-file at most + once per file. (Closes: #644344) + + [JW] Replaced "=" with " => " in the tag extra for missing- + build-dependency-for-dh_-command to improve readability. This + breaks overrides, but according to lintian.d.o there are none + of these. (Closes: #644339) + + [JW] Added check for missing python helpers when using python + substvars in d/control. (Closes: #582511) + * checks/fields{,.desc}: + + [NT] Fixed source-field-does-not-match-pkg-name. + + [NT] Newlines from URIs in Vcs-* fields are stripped before they + are checked. These will fields will also cause a "multiline- + field" tag if they contain newlines. + + [JW,NT] Clarified that build-depends-on-metapackage is not only + triggered by X11 metapackages. (Closes: #642125) + + [NT] Ensure transitional packages are in section oldlibs and + priority extra. Thanks to Josh Triplett for the report. + (Closes: #645438) + + [NT] Check for bouncing and looping email addresses. Thanks to + Ansgar Burchardt and Arno Töll for the bug report and patch. + (Closes: #636599) + * checks/files{,.desc}: + + [JW] Suggest the usage of "-delete" rather than "| xargs rm -f". + (Closes: #641983) + + [JW] Improve "linked against libvga.so" test. This avoid + setuid-binary false-positives. (Closes: #642038) + + [NT] Skip package-contains-no-arch-dependent-files for + transitional packages. Thanks to Andreas Beckmann for the patch. + (Closes: #642339) + + [NT] Applied patch from Andrew Starr-Bochicchio to update the + description of font-in-non-font-package to better reflect current + font policy. (Closes: #646838) + + [JW,NT] Check that gzip files are compressed with -n in + "Multi-Arch: same" packages. (Closes: #649329) + + [NT] Corrected perl4 check, thanks to Dominic Hargreaves for the + report and the patch. + * checks/init.d{,.desc}: + + [NT] Applied patch from Peter Eisentraut to detect init.d scripts + without support for the optional "status" option. + (Closes: #647250) + + [NT] Fixed deprecation warning when using perl 5.14. + (Closes: #649133) + + [NT] Added tag for missing LSB Description keyword. Thanks to + Michael Biebl and Petter Reinholdtsen for the bug report. + (Closes: #604620) + * checks/rules{,.desc}: + + [JW] Fixed false negative "missing-build-dependency" when using + "dh --with=X" rather than "dh --with X". (Closes: #643714) + + [NT] Do not emit missing-build-dependency for missing dh sequences, + since the new tag will handle those. + + [JW] Parse continuation lines in d/rules. (Closes: #644021) + + [JW] Check for versioned dependency on dpkg-dev when using the new + dpkg makefiles. (Closes: #646495) + + [NT] Added tracker tag for the build-arch target goal. + (Closes: #647227) + + [JW] Fixed duplicate tags about missing dependency for + dh_pycentral/dh_pysupport. (Closes: #633507) + * checks/scripts: + + [RA] Exclude files ending in *.erb from several shell script + checks. ERB is a Ruby templating language, so these will probably + have mixed shell and Ruby code and may not be executable. Thanks, + Laurent Arnoud. + + [NT] Corrected perl4 check, thanks to Dominic Hargreaves for the + report and the patch. (Closes: #648532) + * checks/source-copyright: + + [JW] Added some more DEP-5 URLs. (Closes: #642027) + + [JW] Improved the wording of the extra information for the tag + syntax-error-in-dep5-copyright. (Closes: #644556) + * checks/symlinks: + + [NT] Ignore broken links that appears to point to fonts. + + * collection/index: + + [NT] Fixed an "uninitialized variable" warning if no tarballs were + present or the tarball is empty. (Closes: #645660, LP: #886487) + + [NT] Fixed deprecation warning when using perl 5.14. + * collection/debfiles: + + [NT] Bail if the debian dir is a symlink. + + * data/changelog-file/debian-dists: + + [NT] New file. + * data/changelog-file/ubuntu-dists: + + [NT] Added the "precise". Thanks to Loïc Minier for the + patch. (Closes: #644488) + * data/debhelper/{dh_commands,maint_commands,miscDepends_commands}: + + [NT] Refreshed. + * data/debhelper/alt-dh_commands: + + [NT] Renamed to dh_commands-manual. + * data/debhelper/dh_commands-manual: + + [NT] Support arbitrary dependency relations. This new change + also fixes a "duplicate" in the dependency output. + (Closes: #643716) + * data/fields/essential: + + [NT] Add libc-bin to the list of known essential packages. + * data/fields/obsolete-packages: + + [NT] Added dpatch per request of the maintainer. Thanks to + Gergely Nagy for the report. (Closes: #646420) + * data/fields/virtual-packages: + + [NT] Refreshed against sid. Thanks to Gregor Herrmann for the + report. (Closes: #646604) + * data/rules/deprecated-makefiles: + + [JW] Added dbs makefiles, since dbs maintainer deprecated the + package in 0.47. (Closes: #646126) + * data/shared-libs/ldconfig-dirs: + + [NT] Add multi-arch dirs for hurd-i386. Thanks to Julien + Cristau for noticing that they were missing. + * data/spelling/corrections: + + [NT] Added a correction for "propagate" and "separate", thanks + to Guillem Jover for the suggestions. + (Closes: #644793, #646529) + + [JW] Added a number of corrections. (Closes: #645393) + + * debian/control: + + [CW] Mark lintian Multi-Arch: foreign (there does exist one + Architecture: any package that Build-Depends: lintian, so this helps + multiarch cross-building slightly). + * debian/lintian.install: + + [NT] Removed unpack which was removed. + + * frontend/lintian: + + [NT] Collections explicitly requested (by -U) are no longer + auto-removed. Previously the only way to prevent auto-removal + was to use --keep-lab. + + [NT] Removed all archive-wide testing code. This has been moved + into reporting/harness. This deprecates a lot options and config + variables (--arch, --archivedir, --area, --dist, --section and + LINTIAN_{ARCH,ARCHIVEDIR,AREA,DIST}). + + [NT] Support new lab query format, replacing the old "package + name"-based search. + + * lib/Lab{,/Package}.pm: + + [NT] Removed, replaced by Lintian::Lab{,::Entry}. + * lib/Lintian/Check.pm: + + [JW] Merged with common_data.pm. + * lib/Lintian/Collect/Group.pm: + + [NT] New file - Collect like API for group data. + * lib/Lintian/Collect/Source.pm: + + [JW] Fixed call to binary_field in binary_relation. + (Closes: #641609) + * lib/Lintian/Data.pm: + + [NT] Fixed a file descriptor leak. + * lib/Lintian/Lab{,/Entry,/Manifest,/ManifestDiff}.pm: + + [NT] New files. Replaces the Read_pkglists, Lab and + Lab::Package modules. + * lib/Lintian/Lab.pm: + + [JW,NT] Correctly handle $TMPDIR not being an absolute path. + (Closes: #642113) + + [NT] New lab layout style resembling the "pool" dirs of the + Debian mirrors. This allows more than 32 000 packages of a + given type in the laboratory. It also allows multiple + versions/architectures of the same package in static labs. + A feature previously only enabled in temporary labs. The new + layout is incompatible with the old format. (Closes: #641468) + * lib/Lintian/Output.pm: + + [NT] Minor refactoring to simplify creation of the FullEWI + module. + * lib/Lintian/Output/FullEWI.pm: + + [NT] New experimental output. More machine-friendly version + of the normal Lintian output format. + * lib/Lintian/Output/XML.pm: + + [NT] Use self-closing tags (if possible) and do not write + attributes with an empty value. + * lib/Lintian/Processable.pm: + + [NT] Reduced to an abstract class. The "old" implementation + has been put into Lintian::Processable::Package. + * lib/Lintian/Processable/Package.pm: + + [NT] New file. + + [NT] Changed the "name" of changes files. It is now equal to + the name of the source package. Previously it was the filename + (without extension and without the dir part). + * lib/Read_pkglists.pm: + + [NT] Removed - replaced by Lintian::Lab::Manifest. + * lib/Util.pm: + + [NT] Stricten the parser to not accept a field name with a ":". + This could cause the parser to eat the first part of the value, + if it contained a colon and there was no space before the value. + Thanks to Pino Toscano for reporting the issue. + + [JW] Explicitly check that files are not encoded using ISO-2022, + when they should be encoded with UTF-8. (Closes: #643009) + + [JW] Use "paragraph" and "field" rather than "section" and "tag" + when referring to a Debian control file. + + * man/lintian.pod.in: + + [NT] Fixed a typo, thanks to Evgeni Golov for spotting it, + + * private/generate-lintian-pod: + + [NT] Document which collections are auto-removed by default in + static labs. + + * profiles/ubuntu/main.profile: + + [NT] Disable no-upstream-changelog and lzma-deb-archive for + Ubuntu. Thanks to Evan Broder for the report and patch. + (Closes: #648117) + + * reporting/*: + + [NT] Recognise and display pedantic tags. + + [JW] Only emit "plus X overrides" if there any overrides. + * reporting/{harness,html_reports}: + + [NT] Do not accept LINTIAN_UNPACK_LEVEL nor LINTIAN_SECTION + anymore. The lintian frontend lost support for these in + 2.5.0~rc3. + * reporting/harness: + + [NT] Refactored to handle the archive-wide checking directly. + + [NT] Use the new FullEWI output format for the archive-wide + logs. + * reporting/html_reports: + + [NT] Ensure source tags appear before binary tags. + (Closes: #580945) + + [NT] Supports the FullEWI output format. + + * t/*: + + [NT] Skip some tests broken by a recent dpkg upload. + (Closes: #643205) + + * unpack/*: + + [NT] Removed, no longer used. + + -- Niels Thykier <niels@thykier.net> Mon, 21 Nov 2011 23:05:12 +0100 + +lintian (2.5.3) unstable; urgency=low + + The "Another 51 bites the dust. 169 left to go." release. + + * Summary of tag changes: + + Added: + - boilerplate-copyright-format-uri + - control-file-is-not-a-file + - comma-separated-files-in-dep5-copyright + - copyright-has-crs + - debian-copyright-is-symlink + - depends-on-packaging-dev + - dh_installmanpages-is-obsolete + - missing-field-in-dep5-copyright + - missing-license-paragraph-in-dep5-copyright + - missing-license-text-in-dep5-copyright + - no-debian-copyright + - obsolete-field-in-dep5-copyright + - out-of-date-copyright-format-uri + - package-contains-no-arch-dependent-files + - perl-module-uses-perl4-libs-without-dep + - readme-debian-contains-invalid-email-address + - script-uses-perl4-libs-without-dep + - syntax-error-in-dep5-copyright + - unknown-copyright-format-uri + - unknown-paragraph-in-dep5-copyright + - unused-license-paragraph-in-dep5-copyright + - unversioned-copyright-format-uri + - vim-addon-within-vim-runtime-path + - wiki-copyright-format-uri + + Removed: + - debian-changelog-file-contains-debmake-default-email-address + - readme-debian-contains-debmake-default-email-address + - script-calls-init-script-directly + + * checks/*: + + [NT] Dropped fields from Needs-Info, it is no longer needed. + + [JW] Use LC_ALL rather than LANG, since LC_ALL overrules + LANG. (Closes: #637595) + + [JW] Removed all whitespace lines to avoid confusing some + dctrl parsers (notably grep-dctrl). (Closes: #639928) + + [JW] Fix a number of broken references in the tag + descriptions. (Closes: #639923) + + [JW] Rewrote Debian Bug references using #nnnnnn notation. + * checks/binaries.desc: + + [NT] Remove the reference to the Library Packaging Guide, + since it is no longer available (in Debian). (Closes: #640228) + * checks/changelog-file{,.desc}: + + [JW] Remove debmake-specific tag in favour of more general + debian-changelog-file-contains-invalid-email-address. + (Closes: #639946) + + [JW,NT] Fixed use of uninitialized value as hash key. + (Closes: #640238) + + [NT] Mention that the missing native changelog tag can, in + some cases, be emitted if it does not look like a Debian + changelog. + * checks/{conffile,etcfiles}{,.desc}: + + [JW] Merged etcfiles into conffile. (Closes: #637590) + * checks/conffile: + + [NT] Skip all checks if "conffiles" is a symlink. + * checks/control-files{,.desc}: + + [NT] Check that all members of the control.tar.gz are either + regular files or directories. + * checks/copyright-file{,.desc}: + + [JW] Check for CRLF line endings in copyright files. + (Closes: #634191) + + [JW] Extended helper-templates-in-copyright and ensure it is + only emitted once per package. + * checks/debhelper{,.desc}: + + [NT] Recognise /usr/share/R/debian/r-cran.mk as a cdbs-based + build. This prevents false-positive "unneeded cdbs" warning. + + [JW] Check for use of the obsolete dh_installmanpages debhelper + program. Thanks to Joey Hess for the report. (Closes: #634112). + * checks/debian-readme{,.desc}: + + [JW] Replace debmake-specific tag with more general + readme-debian-contains-invalid-email-address. + * checks/description.desc: + + [JW] Added references to some tags. (Closes: #640853) + * checks/duplicate-files{,.desc}: + + [NT] Replace the exception for "__init__.py" files by excluding + all empty files from the check. The bug (#632789) only requests + an exception for "empty __init__.py" files and generally empty + files are unlikely to cause a serious size-waste. + * checks/fields{,.desc}: + + [NT] Mention that perl modules included in perl itself should + be the first dependency if it is only included in the perl + from experimental. Thanks to Dominic Hargreaves for the + report and the patch. (Closes: #637793) + + [NT] Warn about (build)depending/recommending on packaging-dev. + Thanks to Luk Claes for the report and the initial patch. + (Closes: #629308) + + [NT] Also emit bad-homepage if the Homepage URL does not seem to + be using a known protocol (for homepages). (Closes: #580427) + + [JW] Bumped the severity of "no-human-maintainers", since it is + now a Policy "must" directive. (Closes: #640856) + + [JW,NT] If superfluous-clutter-in-homepage has been emitted, + ignore the surrounding "<>" for the rest of the homepage checks. + (Closes: #640947) + + [NT] Added check for Build-Depending on libdbX.Y-dev (and related + packages. Most packages should be able to use unversioned -dev + packages. Thanks to Ondřej Surý for the report and the initial + tag description. (Closes: #624434) + * checks/{filename-length,rules}.desc: + + [NT] Improved the descriptions of some tags. (Closes: #639018) + * checks/files{,.desc}: + + [NT] Added exceptions to "extra-license-file" for manpages, + static libraries, .pc-, elf and pyshared-data-files. This + covers all the false-positives currently found in the liblicense + package. (Closes: #617901) + + [NT] Ignore non-ELF files in multiarch paths, when checking for + a missing pre-depends on multiarch-support. Thanks to Sven + Joachim for the report. (Closes: #639735) + + [NT] Added check for packages that only ships files in /usr/share + and are not marked "Architecture: all". Thanks to Evgeni Golov, + Carl Fürstenberg and Jari Aalto for the suggestions. + (Closes: #574689) + + [JW] Do not emit third-party-package-in-python-dir for packages built + from python{,3}-{stdlib-extensions,profiler,old-doctools} sources. + Add reference to Python Policy in the tag description. + (Closes: #640211) + + [JW] Add check for Vim addons installing files into a directory + within Vim runtime path. (Closes: #640371) + + [NT] Added check for Perl modules using perl4 libs without depending + on libperl4-core-libs-perl. Thanks to Dominic Hargreaves for the + initial patch. + * checks/menus.desc: + + [NT] Added reference to the doc-base manual to help people + find the list of valid doc-base sections. (Closes: #584280) + * checks/patch-systems: + + [NT] Use lsdiff to determine if a patch modifies the debian dir as + it is more accurate than diffstat for this. (Closes: #640131) + * checks/rules: + + [NT] Do a simple and minimal variable tracking. In very simple + cases, it can determine which targets a variable contains (when + the variable is used as a target). (Closes: #638411) + * checks/scripts{,.desc}: + + [NT] Remove script-calls-init-script-directly. (Closes: #617959) + + [NT] Added check for Perl scripts using perl4 libs without depending + on libperl4-core-libs-perl. Thanks to Dominic Hargreaves for the + initial patch. (Closes: #636994) + * checks/shared-libs{,.desc}: + + [JW] Fixed a typo in a tag description. (Closes: #639177) + + [NT] Do not emit shlib-calls-exit for libraries that have an + INTERP section. (Closes: #607399) + * checks/source-copyright{,.desc}: + + [JW] Added check for DEP-5 copyright files. (Closes: #633779) + * checks/standards-version: + + [NT] Made the ancient-standards-version independent of the + system time. + * checks/version-substvars{,.desc}: + + [NT] Also emit the any-depends-all tag if the ">=" relation is + used. Thanks to Konstantinos Margaritis and Cyril Brulebois for + the report and the research. (Closes: #639144) + + * collection/fields{,.desc}: + + [NT] Removed, no longer used. + * collection/changelog-file: + + [NT] Double check changelogs that does not explicitly contains + "debian" in the filename. This should avoid a myriad of syntax + error tags in some cases (such as perl), where the Debian + changelog is not present and there is an upstream changelog. + + * data/fields/archive-sections: + + [NT] Fixed a typo in "otherosfs" section name. Thanks to + Stefan Potyra for the report. (Closes: #637596) + * data/fields/perl-provides: + + [NT] Refreshed with perl 5.14 in sid. + * data/files/fonts: + + [NT] Refreshed against sid and now includes packages starting + with "fonts-" as well. Thanks to Paul Wise for the patches. + (Closes: #622149) + * data/output/ftp-master-{,non}fatal: + + [NT] Refreshed. + * data/output/manual-references: + + [JW] Refreshed. + * data/rules/known-makefiles: + + [JW] Added Makefiles from (the future) dpkg. (Closes: #640921) + * data/spelling/corrections{,-multiword}: + + [NT] Added some corrections for "remove" etc. Thanks to + Jakub Wilk for spotting those. + + [JW,NT] Added more corrections. + (Closes: #639367, #640149, #613604) + + * debian/control: + + [NT] (Build-)Depends on patchutils for lsdiff. + * debian/copyright: + + [NT] Added Jakub Wilk to maintainers. + * debian/rules: + + [JW] Use LC_ALL rather than LANG, since LC_ALL overrules + LANG. + + * doc/lintian.xml: + + [NT] Removed duplicate "allowed to" in same sentence. + + [NT] Added a paragraph on some of the constrains in design + of Lintian. + * doc/lintianrc.example: + + [NT] Add an example on how to enable "--quiet" via lintianrc. + * doc/README.developers: + + [NT] New file. Thanks to Jeremiah C. Foster for the initial + contribution. + + * frontend/lintian: + + [NT] Lintian now mentions if overrides may have been ignored. + This happens if a package contains an override for a tag + that has been marked "non-overridable" by the current vendor + profile. + + [NT] Mention ".changes" as a valid file type in the "unknown + file" error. Thanks to Michael Gilbert for the report and + the patch. (Closes: #639430) + + [NT] Always display a given tag if requested with --tags + or --tags-from-file. Previously, pedantic and experimental + tags were not shown unless the relevant options were also + passed. + + [JW,NT] Fixed a regression where --check-part ignored display + settings (such as --display-info). (Closes: #640694) + + [NT] If both --verbose and --quiet is used together, then use + the last of them to appear rather than "both at the same time". + (Closes: #640366) + + [NT] Accept --quiet in lintianrc as "quiet". This option may + not be used together with "verbose" in the config file. + + * lib/Lintian/Check.pm: + + [NT] Catch "Name <Name <Email>>" as a malformed email address. + (Closes: #640489) + + [JW] Catch misspellings of the "Debian QA Group" maintainer + email (used for orphaned packages). (Closes: #640834) + * lib/Lintian/Collect.pm: + + [JW,NT] Create the source field from the package field if the + former is not present. This fixes a number of false-positives + introduced in 2.5.2. (Closes: #640186) + * lib/Lintian/Collect/Source.pm: + + [NT] Removed a requirement for fields that was not needed. + + [NT] Fixed "index" method for source packages. + * lib/Lintian/Collect/Package.pm: + + [JW,NT] Replace use of fail with croak. (Closes: #637741) + * lib/Lintian/Output.pm: + + [NT] Merged "quiet" and "verbose" into "verbosity_level". + * lib/Lintian/Profile.pm: + + [NT] Reject profiles containing an unknown field. + * lib/Lintian/Tag/Info.pm: + + [JW] Create links for references pointing to files in html + output. + + [JW] Parse "#nnnnnn" references as links to Debian bugs. + + [NT] Check severity and certainty when loading checks. This + causes Lintian to reject checks with broken/incomplete tags + even if the tag was never used. + * lib/Lintian/Tag/Override.pm: + + [NT] New file. + * lib/Lintian/Tags.pm: + + [NT] Track which tags had overrides that have been dropped. + + [NT,RG] Collect override comments and print the comments + above the overridden tag (with --show-overrides). Thanks + to Carl Fürstenberg for the report. (Closes: #474590) + + [NT] Remove the "respect-display-level" code. It is not as + useful as intended. + * lib/Text_utils.pm: + + [NT] Close <p>-tags in dtml_to_html since the output is used + in xhtml (xml), where all tags must be closed properly. + (Closes: #639292) + + [NT] Remove the last new line (if any) before a </pre> in tag + to reduce the empty space to the next paragraph. + * lib/Util.pm: + + [JW] Use LC_ALL rather than LANG, since LC_ALL overrules + LANG. + + [JW] Stricten the DCtrl parser to choke on some syntax errors + that were silently ignored. (Closes: #639516) + + * man/lintian.pod.in: + + [JW] Fixed some stray POD markup. (Closes: #640705) + + [JW,NT] Clarified that --tags and --tags-from-file ignores + display settings. + + [NT] Documented how lintian behaves if --quiet is used together + with --verbose or --debug. + + [NT] Documented how --verbose and --quiet can be enabled via + the config file. Only one of "verbose" and "quiet" may + appear in the config file. + + * profiles/debian/ftp-master-auto-reject.profile: + + [NT] Refreshed to include udeb-uses-non-gzip-data-tarball. + + * private/*: + + [JW] Use LC_ALL rather than LANG, since LC_ALL overrules + LANG. + * private/refresh-manual-refs: + + [NT] Remove code to refresh refs to the Library Packaging + Guide. + + [JW] Added the java-policy and fixed the lintian ref. + + [JW] Don't strip newlines from titles, but treat them as regular + whitespace characters. + + [JW] Strip some superfluous HTML markup from titles. + + * reporting/{config,html_reports,templates/foot.tmpl}: + + [NT] Added a link to the Lintian source code. + * reporting/harness: + + [NT] Added missing import statement. + * reporting/html_reports: + + [JW,NT] Create a gzip'ed version of the raw lintian.log. + (Closes: #637819) + * reporting/templates/head.tmpl: + + [NT] Show the list of all tags in the page header. Thanks to + Arno Töll for the suggestion and the patch. (Closes: #640962) + * reporting/templates/index.tmpl: + + [NT] Added link to the new gzip'ed lintian.log. + + * t/*: + + [JW,NT] Fixed test failures caused by unpacking the source + with a umask different from 0022. (Closes: #637649) + + -- Niels Thykier <niels@thykier.net> Sat, 10 Sep 2011 11:53:51 +0200 + +lintian (2.5.2) unstable; urgency=low + + * Summary of tag changes: + + Added: + - debian-rules-uses-deprecated-makefile + - debian-rules-uses-or-modifies-user-only-variable + - duplicate-changelog-files + - package-has-long-file-name + - source-package-component-has-long-file-name + - udeb-uses-non-gzip-data-tarball + - upstart-job-in-etc-init.d-not-registered-via-update-rc.d + + Removed: + - calls-suidperl-directly + - suid-perl-script-but-no-perl-suid-dep + + * checks/*: + + [NT] Migrated to use new methods in the Lintian::Collect + interfaces rather than accessing the Lab directly. + + [NT] Removed "fields" from Needs-Info. + * checks/{debconf,conffiles}.desc: + + [NT] Added missing bin-pkg-control Needs-Info. + * checks/{cruft,fields}{,.desc}: + + [NT] Relocated doc pkg not arch all tag; it was never + triggered since cruft was a source check and the tag + could only be triggered for binary packages. + * checks/binaries: + + [NT] Added lib/${MULTIARCH_DIR} to the list of paths to + check for public shared libraries. Thanks to Sven Joachim + for the report and the patch. (Closes: #630698) + + [NT] Recognise .gox files as object files that cannot be + stripped. Thanks to Matthias Klose for the report. + (Closes: #624521) + + [NT] Do not assume that the architecture field is present. + + [NT] Emit "arch-dependent-file-in-usr-share" and + "binary-in-etc" also for static compiled files. Thanks to + Jakub Wilk for the report and the patch. (Closes: #635354) + + [NT] Fixed false-negative for rpath, if the rpath included + the multi-arch dir. Thanks to Jakub Wilk for the report and + the patch. (Closes: #637259) + * checks/changelog-file: + + [NT] Removed exception for symlinked changelogs if the + package had an Ubuntu version. This exception is now + handled by the profile. Thanks to Benjamin Drung for the + heads up. + * checks/circular-deps.desc: + + [NT] Fixed typo; thanks to Nicolás Alvarez for the report + and patch. (Closes: #630925) + * checks/control-files: + + [NT] Refactored static tables into data-files. + * checks/copyright-file: + + [NT] Stricten one of the regexes for catching left over + helper templates. This should prevent false-positives for + some license texts. Thanks to Charles Plessy for the + report. (Closes: #631674) + + [NT] Use group data to determine if a package is foreign + or not for symlinked /usr/share/doc/<pkg> dirs. This + avoids the need for symlinks between packages in the + lab. + * checks/deb-format{,.desc}: + + [NT] Allow data.tar.xz as the third member. Thanks to + Ansgar Burchardt for the report and patch. + (Closes: #632556) + + [NT] Added test for udebs having non-gzip data members, + since the debian-installer does not support them. Thanks + to Luk Claes. (Closes: #634874) + * checks/debhelper: + + [NT] Do not trigger deprecation warning for dh_python if it + is followed by a "$". This prevents false-positives when + a Makefile variable is used to choose between dh_python2 + and dh_python3. Thanks to Leonid Borisenko for the report. + (Closes: #631662) + + [NT] Do not trigger deprecation warning for dh_python-ply, + which Lintian incorrectly identified as dh_python. Thanks + to Daniele Tricoli for the report. (Closes: #632693) + + [NT] Fix a broken regex that caused Lintian skip brace + expansion checks for some debhelper files. Thanks to + Jakub Wilk for the report and the patch. (Closes: #632883) + + [NT] Do not consider "debian/debhelper" a temporary debhelper + file. Some packages uses this a directory to store their + debhelper files. + * checks/debian-source-dir{,.desc}: + + [NT] Added missing word in the tag description for + git-patches-not-exported. + + [NT] Fixed information disclosure issue, where Lintian could + be tricked into disclosing the present of files on the host + system via specially crafted source packages. + * checks/duplicate-files: + + [NT] Exclude __init__.py files from the check as they are + required even if they are empty. Thanks to Daniele Tricoli + for the report. (Closes: #632789) + + [NT] Report duplicate changelogs as a separate tag. + * checks/fields: + + [NT] Refactored to use Lintian::Data and use new data files + from data/fields. + + [NT] Added python3-dev and removed python2.{4,5} from + $PYTHON_DEV. Thanks to Jakub Wilk for the report and the + patch. (Closes: #633044) + + [NT] Fixed a bug where the libdb1-compat tag only triggered + if libdb1-compat was listed in Pre-Depends. + + [NT] Updated list of python "dev" packages. Thanks to + Jakub Wilk for the patch. + * checks/filename-length{,.desc}: + + [NT] New file that checks the length of the package file + names. (Closes: #631656) + * checks/files: + + [NT] Check for embedded copies of the underscore javascript + library. Thanks to Jakub Wilk for report and the patch. + (Closes: #631513) + + [NT] Removed a leading slash from the filename part of the + extra for python-debug-in-wrong-location. Thanks to + Jakub Wilk for the report and the patch. (Closes: #631530) + + [NT] Accepted patch from Marcelo Jorge Vieira to catch + four additional embedded javascript libraries. + (Closes: #635447) + + [NT] Stricten the regex for finding .xvpics dirs. + + [NT] Shipping a lintian override is no longer enough to + make lintian consider the package for "non-empty". + * checks/init.d{,.desc}: + + [NT] Provide a separate tag for upstart-jobs not registered + via update-rc.d in postinst. This allows vendors (such as + Ubuntu) to disable this tag for upstart-jobs only using the + new vendor profiles. While this would break overrides, all + existing overrides appears to be for normal scripts rather + than upstart-jobs. (Closes: #631872) + * checks/java{,.desc}: + + [NT] Jar files containing clojure files are no longer + considered to be codeless. + + [NT] Exclude jar files in /usr/lib/xul{-ext,runner} from the + "jar-not-in-usr-share" check. (Closes: #635495) + + [NT] Fixed a typo in a tag description. + * checks/menu-format.desc: + + [NT] Mentioned how to get rid of the CR characters in the + desktop file. Thanks to Jakub Wilk. + * checks/nmu: + + [NT] "LowThresholdNMU" will now work as an alternative to + "NMU" in changelogs for suppressing + changelog-should-mention-nmu. Thanks to Jordi Mallach for + the report. (Closes: #620418) + * checks/po-debconf: + + [NT] Allow po-files with an "@modifier", which works with + debconf (>= 1.5.34). (Closes: #617905) + * checks/rules: + + [NT] Check included files in d/rules against a limited + number of common makefile snippets, which are known not + to implement all the required targets. This prevents + false negatives of missing targets. Thanks to + Jakub Wilk for the suggestion and the initial makefile + list. (Closes: #631711) + + [NT] Warn about including the CDBS simple-patchsys and dpatch + as they are both deprecated by source format 3.0 (quilt). + Thanks to Nelson A. de Oliveira for reporting and Luk Claes + for providing an initial patch. (Closes: #624201) + + [NT] Added check for using DEB_*FLAGS_{SET,APPEND} in d/rules. + Thanks to Raphaël Hertzog for the report. (Closes: #631786) + * checks/scripts{,.desc}: + + [NT] Removed perl-suid related tags as the package is no + longer available and we have no known packages triggering + the tags at the moment. (Closes: #631432) + + [NT] Added perl6/rakudo as a known interpreter. Thanks to + Alessandro Ghedini for the report and patch. (Closes: #636354) + * checks/shared-libs{,.desc}: + + [NT] Fixed broken sentence. Thanks to Norbert Preining for + reporting the issue. + + [NT] Applied patch from Peter Pentchev to correct the logic for + testing for shlib-calls-exit. (Closes: #633976) + + [NT] Mention that some of the tags may be triggered due to the + debhelper bug #204975. Thanks to Jakub Wilk for the report. + (Closes: #633853) + * checks/symlinks: + + [NT] Symlink checking extended to relative paths as well. + (Closes: #217023) + + * collection/*: + + [NT] Removed all Needs-Info on "fields" and all checks that + used the "fields" dir (or files therein) to determine if the + scripts had been called in the wrong dir. + * collection/diffstat: + + [NT] No longer unconditionally creates a diffstat file, + since the Lintian::Collect interface will fall back to + using /dev/null in its absence. + * collection/fields: + + [NT] Removed creation of cross package symlinks. They have + been replaced by the group information that checks are + passed. + + [NT] Deprecated it in favour of a smarter Lintian::Collect. + It will be removed in a later release; for now it will just + remove the "fields" directory in the lab. + * collection/file-info: + + [NT] Double check the output of file(1) when it says a ".gz" + file is not gzip compressed. This should reduce the number + of false-positives gz-file-not-gzip tags. + (Closes: #620289) + + [NT] Open files before using chdir. In the future unpacked + may be a symlink. + * collection/index{,.desc}: + + [NT] Updated to handle source packages and with support for + multi tarball source packages. + + * data/control-files/{,u}deb-permissions: + + [NT] Added files. + * data/fields/*: + + [NT] Added new files based on data variables from checks/fields. + * data/fields/obsolete-packages: + + [NT] Added libdigest-sha1-perl on request of the Perl Team. + Thanks to Salvatore Bonaccorso for the report and patch. + (Closes: #635441) + * data/fields/perl-provides: + + [NT] Refreshed against perl 5.12.4. + * data/files/standard-files: + + [NT] Added file. + * data/rules/{deprecated,known}-makefiles: + + [NT] Added file. + * data/spelling/corrections: + + [RA] Remove discontiguous correction. The OED lists this as valid. + Thanks, Charles Plessy. (Closes: #632159) + + [NT] Added another correction for "specification". Thanks to + Jakub Wilk for the hint. (Closes: #634222) + + [NT] Added another correction for "development" and "misspelt". + Thanks to Pino Toscano and Jakub Wilk for the suggestion. + + * debian/control: + + [NT] Bumped debhelper version to 8.1.0 due to the build-arch and + build-indep targets. Thanks to Mark Hymers for the heads up and + a patch. (Closes: #632550) + + [NT] Added Build-Depends on cdbs, it is needed for some of the + tests. + + [NT] Pruned the Uploaders list a bit. We would like to thank + Jeroen van Wolffelaar, Frank Lichtenheld and Marc 'HE' + Brockschmidt for their work on Lintian in the past. + * debian/lintian.install: + + [NT] Added the profiles directory. + * debian/rules: + + [NT] Added target to update the profiles. + + * doc/lintian.xml: + + [NT] Added information about the new Vendor profiles. + + [NT] Improved various parts of the User Manual. Especially + mention that Lintian can be run on changes files and this + processes all packages related to the changes file. + * doc/lintianrc.example: + + [NT] Added more sample options. + + * frontend/{lintian,lintian-info}: + + [NT] Added profile support (new option --profile), please + refer to the Lintian User Manual for more information. + * frontend/lintian: + + [NT] Ensure that all dependency collections of a check are + loaded. Previously Lintian would only load direct + dependencies of a collection and assume that was enough. + + [NT] Allow "verbose" to appear in the lintianrc file. + + [NT] Added new "--packages-from-file" option. Lintian will + read packages from the file (one package per line) and process + these. Unlike "--packages-file" it allows its argument to be + "-" for stdin and the format is simpler. + + [NT] Deprecated "--packages-file" in favour of the new + "--packages-from-file" option. + + [NT] Allow "y" as short form of "yes" in the configuration file. + Furthermore, ignore case when doing the check for boolean + values. + + * lib/Lab.pm: + + [NT] Removed $dist argument to lab creation, since we rely on + LINTIAN_DIST being exported anyway. + + [NT] Allow temporary labs to contain the same package twice if + the version or/and architecture differs. (Closes: #632115) + * lib/Lab/Package.pm: + + [NT] Symlink in all components of the source package when + creating the source entry in the lab. Also removed legacy + code for using the old unpack scripts. + * lib/Lintian/Collect/{Binary,Source}.pm: + + [NT] Refactored code from these files into the module + Lintian::Collect::Package. + * lib/Lintian/Collect/Package.pm: + + [NT] New file. This serves as a base for Lintian::Collect + modules that can be unpacked. + * lib/Lintian/Command.pm: + + [NT] Added support for appending output to files without + truncating them first via the new out_append and + err_append options. + * lib/Lintian/Data.pm: + + [NT] Let new take an optional fourth argument, a code sub, + that can be used to pre-process the value. + * lib/Lintian/{Internal/FrontendUtil,Profile}.pm: + + [NT] New files. + * lib/Lintian/ProcessablePool.pm: + + [NT] Made the pool consider two packages with the same name + as duplicates even if their version or architecture differs, + when the underlying Lab does not support this run. This + causes lintian to drop one of the packages rather than ending + up with an internal error. + * lib/Lintian/{Tag/Info,Tags}.pm: + + [NT] Updated for profile support. + * lib/Read_pkglists.pm: + + [NT] Merged the binary and udeb format since they were + essentially the same. Old udeb files can still be parsed + as binary ones. + + * man/lintian.pod.in: + + [NT] Documented the new --profile option. Note that the + options --suppress-tags{,-from-file} now suppresses tags + in the active profile. + + [NT] Removed all references to "unpack-level". All unpack + levels have been replaced by collections. + + [NT] Clarified that some command-line arguments are only + useful when using a static lintian lab. + + [NT] Described the configuration file format. Thanks to + Sven Joachim for the report. (Closes: #636681) + * man/lintian-info.pod: + + [NT] Documented the new --profile option. + + * profiles/*: + + [NT] Added default profiles for Debian and Ubuntu. Note + that these profiles will silently ignore overrides for + "fatal" (non-overridable) tags. (Closes: #536364) + + * reporting/harness: + + [NT] Use --packages-from-file instead of --packages-file. + * reporting/{html_reports,templates/index.tmpl}: + + [NT] Always emit a page for tags, even if they are not emitted. + It will also include a link to the entire list of known tags. + (Closes: #631763) + * reporting/templates/{tag-not-seen,tags-all}.tmpl: + + [NT] New files. + + * unpack/list-binpkg: + + [NT] Added a -u option to make it fetch udebs instead of + regular binaries. This and the udeb/bin format merge makes + list-udebpkg obsolete. + * unpack/list-udebpkg: + + [NT] Removed in favour of list-binpkg. + * unpack/unpack-srcpkg-l1: + + [NT] Removed in favour of the collection system. + + -- Niels Thykier <niels@thykier.net> Wed, 10 Aug 2011 18:35:47 +0200 + +lintian (2.5.1) unstable; urgency=low + + * Summary of tag changes: + + Added: + - bad-perm-for-file-in-etc-sudoers.d + - debian-rules-missing-recommended-target + - dh_pycentral-is-obsolete + - dh_python-is-obsolete + - illegal-multi-arch-value + - non-empty-dependency_libs-in-la-file + + Removed: + - uses-dh-python-with-no-pycompat + - ldconfig-symlink-before-shlib-in-deb + + * checks/binaries: + + [NT] Applied patch from Paul Wise to detect binaries embedding + glee, glew and libtheora. (Closes: #629288) + + [NT] Also consider multiarch dirs when looking for public shared + libraries. (Closes: #630164) + * checks/debhelper{,.desc}: + + [NT] Recognise that dh_python and dh_pycentral are now obsolete. + (Closes: #496902, #541978) + * checks/changes-file: + + [NT] Always verify the checksums of changes-files. + * checks/copyright-file: + + [NT] Extended current dh_make template checks. Thanks to + Nelson A. de Oliveira for the patch. (Closes: #598412) + * checks/fields{,.desc}: + + [NT] Allow "all" and "any" to appear together in the Architecture + field of a .dsc file. (Closes: #626775) + + [NT] Added illegal-multi-arch-value. (Closes: #616493) + * checks/files: + + [NT] Fixed two misnamed udeb tags, which lead to an internal + error if triggered. Thanks to Guillem Jover for the report. + (Closes: #628754) + + [NT] Added bad-perm-for-file-in-etc-sudoers.d tag. + (Closes: #588831) + + [CW] Do not issue missing-pre-dependency-on-multiarch-support for + udebs. + + [NT] Limit missing-pre-dependency-on-multiarch-support to real + files only. Previously it would also check symlinks. + (Closes: #629648) + * checks/java{,.desc}: + + [NT] Sort the jar files by name, so they are checked in the same + order. + + [NT] Improved the description of classpath-contains-relative-path. + (Closes: #629189) + + [NT] Reduced false-positives of classpath-contains-relative-path. + Relative classpaths are now okay if they point to jar files in + /usr/share/java (but not subdirs thereof) and there is a strong + libX-java dependency. Alternatively if the classpath points to + a file or a symlink in the package itself, then it is also okay. + + [NT] Allow maven plugins to be without classpaths. + (Closes: #629056) + * checks/manpages.desc: + + [ADB] Don't suggest using debmake's output as a reference. The + package is not even in oldstable any more. + * checks/md5sums.desc: + + [ADB] Drop references to obsolete debstd. Thanks to Steve Langasek + for the pointer. + * checks/rules: + + [NT] Removed code for handling packages with dh_python. + + [NT] Fixed the code for determining Build-Depends for python + packages. Thanks to Jakub Wilk for the patch. + (Closes: #614876, #616553) + + [NT] Applied patch from Roger Leigh to implement the check for + rules files missing the build-arch and build-indep targets. + (Closes: #605012) + * checks/shared-libs{,.desc}: + + [NT] Added non-empty-dependency_libs-in-la-file. (Closes: #628673) + + [NT] Removed ldconfig-symlink-before-shlib-in-deb. + + * collection/java: + + [NT] Fixed a regex that would accept any file ending with "jar" to + be a jar file rather than only accepting ".jar". This fixes a + number of false-positives java checks. + * collection/unpacked: + + [NT] Added support for unpacking source packages using libdpkg-perl, + instead of dpkg-source, if the latter is not present. + (Closes: #626476) + + * data/binaries/multiarch-dirs: + + [NT] New file - maps architectures to multiarch dirs. + * data/fields/{perl-provides,virtual-packages}: + + [NT] Refreshed. (Closes: #627082, #627431) + * data/output/ftp-master-*: + + [NT] Refreshed. + * data/shared-libs/ldconfig-dirs: + + [NT] Updated ldconfig path for i386 multiarch paths. Thanks to + Raphaël Hertzog for the reminder. + * data/spelling/corrections-multiword: + + [CW] Remove the "requires to" correction; it has too many common + false positives, especially involving relative clauses. + (Closes: #625886) + + * debian/control: + + [NT] (Build-)Dependency changes. + - xz-lzma is now preferred to lzma as Build-Dependency + - Added depends on libdpkg-perl + - Reduced dpkg-dev to a suggests, we can use libdpkg-perl as + fallback. + - Explicitly depends on bzip2 to always support bz2 source packages. + - Added xz-utils as suggests - needed for .xz source packages. + * debian/rules: + + [NT] Added recommended targets build-arch and build-indep. + + * doc/lintian.xml: + + [NT] Clarify that the package type is not listed in the output for + binary packages. (Closes: #629193) + + * frontend/lintian: + + [NT] Allow some options to be put into the lintianrc file. + (Closes: #460350) + + [NT] Added --no-cfg option that can be specified if no config + file should be read. + + [NT] Deprecated --checksums (also known as --md5sums and -m). + Lintian will now always verify the checksums in changes files. + The options will be accepted with a warning for now, but may + be removed in a later release. (Closes: #629453) + + [NT] Fixed an issue where fail was called before it was + available. Thanks to Toby Corkindale for the report. + (Closes: #630560, LP: #797553) + + * lib/Lintian/Tag/Info.pm: + + [NT] Output the name of the check and the type of the check + along with the description of the tag. + * lib/Lintian/Tags.pm: + + [NT] Fixed a flaw in logic that gave incorrect results for + architecture dependent overrides. Thanks to Andreas Beckmann for + the report and the patch. (Closes: #626587) + + * man/lintian.pod.in: + + [NT] Mentioned that --checksums and aliases are deprecated. + + * unpack/list-srcpkg: + + [ADB] Don't rely on the order of fields in the Sources file. The + files produced by the Debian archive no longer follow the order + which the code previously assumed, and we shouldn't assume that + the order won't change again in the future. (Closes: #626597) + + -- Niels Thykier <niels@thykier.net> Wed, 15 Jun 2011 23:05:28 +0200 + +lintian (2.5.0) unstable; urgency=low + + * Summary of tag changes: + + Added: + - duplicate-files + - format-3.0-but-debian-changes-patch + - extended-description-contains-empty-paragraph + - git-patches-not-exported + + * checks/binaries: + + [NT] Fixed false-positive embedded-library. Lintian incorrectly + assumed that none of these binary packages would contain a source + version in their source field. (Closes: #626038) + * checks/copyright-file.desc: + + [ADB] Correct a spelling mistake ("coypright" -> "copyright") in the + description of copyright-refers-to-deprecated-bsd-license-file; + thanks, Kees Cook. (Closes: #623780) + * checks/description{,.desc}: + + [NT] Check for empty paragraphs in extended description. Thanks to + Gerfried Fuchs for the patch. + * checks/duplicate-files{,.desc}: + + [NT] Added to check for duplicate files in usr/share/doc. Thanks to + Axel Beckert for the suggestion. (Closes: #614715) + * check/fields: + + [NT] Accepted patch from Antonio Terceiro to add Ruby-Version as an + accepted field in binary packages. Thanks to Vincent Carmona for + the report. (Closes: #623390) + * check/files: + + [NT] Accepted multiple patches (merged into one) from Marcelo Jorge + Vieira to detect a number of new javascript libraries. + (Closes: #623878) + * checks/patch-systems{,.desc}: + + [NT] Detect when 3.0 (quilt) packages have a debian-changes-VERSION + patch without a patch header. Thanks to Iain Lane for suggestion + and patch. (Closes: #588873) + * checks/debian-source-dir{,.desc}: + + [NT] Applied patch from David Bremner to enable + git-patches-not-exported. (Closes: #607694) + * checks/java: + + [NT] Tightened the regex for finding java libraries and restricted + missing-classpath tag to only be emitted for packages that actually + contain at least one jar file we check. This fixes false-positives + for packages that depended on libX-java-doc packages or packages + that only contain jar files we ignore. + * check/scripts{,.desc}: + + [NT] Accepted patch from Antonio Terceiro to allow ruby-interpreter + as alternative to ruby for /usr/bin/ruby scripts. + (Closes: #626210) + + * data/common/source-fields: + + [NT] Accepted patch from Antonio Terceiro to add Ruby-Version as an + accepted field in binary packages. Thanks to Vincent Carmona for + the report. + + * lib/Lintian/ProcessableGroup.pm: + + [NT] Properly handle if the changes file is located directly in the + file system root. Thanks to Trent W. Buck for the bug report. + (Closes: #624149) + * lib/Lintian/Tags.pm: + + [NT] Allow overrides to use wildcards anywhere instead of only in + the beginning or the end. Thanks to Steve R. Langasek for the + report. (Closes: #617991) + + [NT] Allow simple architecture overrides such as [i386] or [!i386]. + Architecture wildcards are not supported yet. The actual syntax + for the architecture the same as the one used in the Build-Depends. + Thanks to Andreas Beckmann for the bug report and the solution + proposal. (Closes: #622888) + + -- Niels Thykier <niels@thykier.net> Tue, 10 May 2011 20:44:32 +0200 + +lintian (2.5.0~rc3) unstable; urgency=low + + * Summary of tag changes: + + Added: + - dir-or-file-in-run + - intra-source-package-circular-dependency + - package-contains-broken-symlink + - classpath-contains-relative-path + - jar-not-in-usr-share + - executable-jar-without-main-class + - missing-dep-on-jarwrapper + - missing-classpath + - javalib-but-no-public-jars + - missing-manifest + - codeless-jar + - missing-pre-dependency-on-multiarch-support + + * checks/*.desc: + + [NT] Updated the Needs-Info field to include the new + collections where needed. + * checks/binaries: + + [NT] Accepted patch from Loïc Minier to support the armhf + architecture. (Closes: #618587) + + [NT] Drop wrong checks for multiarch directories. Multiarch + directories are only allowed in packages of the given architecture. + Thanks to Steve R. Langasek for the patch. + * checks/circular-deps{,.desc}: + + [NT] Added to check for circular dependencies between + binaries from the same source. It requires all binaries + packages to be present as well as the source package to be + effective. Thanks to Bill Allombert for the suggestion. + (Closes: #316283) + * checks/debhelper: + + [NT] Use new alt-dh_commands data file to fetch alternative + dependencies for dh_commands, which are sometimes provided + indirectly by meta or API packages. + * checks/fields: + + [NT] Do not emit needless-dependency-on-jre for libX-gcj + packages and only emit the tag at most once per package. + Thanks to Rene Engelhard for the report. + (Closes: #622396) + * checks/files{,.desc}: + + [NT] Added dir-or-file-in-run tag. (Closes: #623031) + + [NT] New tag missing-pre-dependency-on-multiarch-support, + Severity: serious, to warn when a package installs libraries to the + multiarch directory without taking care of upgrades. Thanks to + Steve R. Langasek for the patch. + + * checks/java{,.desc}: + + [NT] Added file based on patches submitted by Vincent Fourmond. + This new file checks for jar files in weird locations. + (Closes: #620829, #575447) + * checks/manpages: + + [NT] Fixed false-positive binary-without-manpage when the + manpage is in a direct dependency of the package and the + package is checked together with its dependency. + (Closes: #120323) + * checks/scripts: + + [NT] Fixed false positive missing-dep-for-interpreter, if + the interpreter was dash, since dash is now essential. + (Closes: #620120) + * checks/symlinks{,.desc}: + + [NT] New file that checks for broken symlinks. A symlink + is considered broken if it does not exist in the package + itself or in its direct dependencies. Since only absolute + symlinks are checked at the moment, this only partly + fixes #217023. + + * collection/*.desc: + + [NT] Updated the Needs-Info field to include the new + collections where needed. + * collection/{bin-pkg-control,fields,index}{,.desc}: + + [NT] Added to replace various unpack scripts. + * collection/java-info{,.desc}: + + [NT] Accepted patch from Vincent Fourmond to implement + Java related data collection. + + * data/binaries/multiarch: + + [NT] Removed by patch from Steve R. Langasek. + * data/debhelper/alt-dh_commands: + + [NT] New file; contains alternative dependencies for + dh_python2 and dh_python3. (Closes: #614879) + * data/fields/architectures: + + [NT] Updated to include armhf. + * data/files/triplets: + + [NT] Updated to include armhf triplet. + + [NT] Refresh with the final approved multiarch paths by patch + from Steve R. Langasek. + * data/output/manual-references: + + [NT] Accepted patch from Vincent Fourmond to add the links + to the Java Policy. + * data/spelling/corrections: + + [NT] Added a lot of spelling mistakes with corrections. + Kudos to Kevin Ryde for these. (Closes: #619075) + * data/spelling/corrections-multiword: + + [NT] Removed "helps to" as a spelling mistake. Thanks to + Nicholas Bamber for the report. (Closes: #622124) + * data/standards-version/release-dates: + + [NT] Added 3.9.2 as the newest Standards-Version. Thanks to + Sven Joachim for the report. (Closes: #621667) + + * debian/control: + + [NT] Bumped Standards-Version to 3.9.2. + + [NT] Updated Build-Depends for debiandoc -> docbook change of + the manual. + + [NT] Added missing Build-Depends on libhtml-parser-perl. Also + added it to suggests, since it is used for XML output. + * debian/{docs,rules}: + + [NT] Updated to use/install docbook instead of debiandoc. + + * doc/lintianrc.example: + + [NT] Removed reference to LINTIAN_UNPACK_LEVEL. + * doc/lintian.sgml: + + [RG] Removed file - replaced by doc/lintian.xml. + * doc/lintian.xml: + + [RG] Added to migrate away from debiandoc. (Closes: #587925) + + * frontend/lintian: + + [NT] Removed the deprecated --unpack-level argument. Only + two unpack levels were available and they were equal to + the --remove and --unpack options. + + [NT] Stopped accepting the environment/config variables + LINTIAN_UNPACK_LEVEL and LINTIAN_SECTION. The former is + redundant as explained above and the latter was deprecated + in favor of LINTIAN_AREA. + + [NT] Refactored the frontend to group packages together based + on their source package. This allows for cross-package checks. + (Closes: #513663) + + * lib/{Lab/Package,Lintian/Processable*}.pm: + + [NT] Added files to assist in package grouping. + * lib/Lintian/Command/Simple.pm: + + [NT] Added support for changing directory before running the + command. + * lib/Lintian/Collect.pm,lib/Lintian/Collect/*.pm: + + [NT] Removed assumption that all the information handled by + these are available in the current directory. + * lib/Lintian/Schedule.pm: + + [NT] Removed file, replaced by Lintian::ProcessablePool. + + * private/refresh-archs: + + [SRL] update to output directory mappings based on DEB_HOST_MULTIARCH + instead of DEB_HOST_GNU_TYPE. + * private/runtests: + + [NT] Added support for dumping build logs if a test fails. + (Closes: #621658) + + [NT] Disabled pkgbinarymangler during tests. (Closes: #621681) + + * t/tests/binaries-from-other-arch: + + [NT] Accepted patch from Benjamin Drung to accept i686-linux-gnu + as a valid triplet. This fixes test failure in Ubuntu. + (Closes: #622974) + + * unpack/unpack-{binpkg,changes}-l1: + + [NT] Removed unpack scripts for binpkg and changes as these have + been replaced by collections. + + -- Niels Thykier <niels@thykier.net> Thu, 21 Apr 2011 12:29:45 +0200 + +lintian (2.5.0~rc2) unstable; urgency=low + + Uploading to unstable. + + * Summary of tag changes: + + Added: + - unknown-multi-arch-value + - package-needs-versioned-debhelper-build-depends + + Removed: + - old-versioned-python-dependency + + * checks/binaries: + + [ADB] Update binary-from-other-architecture's tests in line with the + changes to filename output introduced in 2.5.0~rc1. + (Closes: #614906) + * checks/changes-file.desc: + + [NT] Added oneiric as valid Ubuntu distribution. Thanks to Benjamin + Drung for the patch. (Closes: #617227) + * checks/deb-format: + + [NT] Removed assumption that there was always a changelog in a binary + with a data.tar.lzma member. + * checks/debhelper: + + [NT] Reduced package-lacks-versioned-build-depends-on-debhelper to a + pedantic tag. It is now only emitted for debhelper compat levels of + 7 or less, since even oldstable ships with debhelper 7. + + [NT] Added package-needs-versioned-debhelper-build-depends, which + replaces package-lacks-versioned-build-depends-on-debhelper old + task of warning if a missing versioned depends may lead to a build + failure. Currently this is only emitted for compat 8 (or higher). + + [NT] Stopped emitting tags for using dh_* (and dh) if these scripts + is in debhelper 7 (or earlier). + * checks/fields{,.desc}: + + [NT] Recognise Multi-Arch as a known binary field. (Closes: #617816) + + [NT] Fixed typo in a tag description. + + [NT] Removed old-versioned-python-dependency per request of the + Python team. The tag was outdated and most instances of it was + false positives. Thanks to Piotr Ożarowski and Jakub Wilk for + the report and clarification. (Closes: #619487) + + [NT] Accepted patch from Joachim Breitner to support new Haskell + package naming scheme. + + [NT] Added Built-Using as a known binary and udeb field. This + field is supported with dpkg 1.16.0. + * checks/files: + + [NT] Also check files in /etc/cron.d for dots in filenames. Thanks + to Thijs Kinkhorst for the report and patch. (Closes: #615072) + + [NT] Applied patch to also detect copies of CKEditor. Thanks to + Jeroen Dekkers for the report and the patch. (Closes: #616505) + + [NT] Fixed a regression in caused by inconsistent prefixes. + * checks/huge-usr-share: + + [NT] Removed assumption that there is always files in usr/share. + * checks/menu-format: + + [NT] Fixed an inconsistency in output of file names. Thanks to + أحمد المحمودي (Ahmed El-Mahmoudy) for the report. + (Closes: #618921) + * checks/menus: + + [NT] Fixed check for special files that does not need to be + registered with doc-base (e.g. README.html). Thanks to + Tanguy Ortolo for the report. (Closes: #617266) + + [NT] Accepted patch from Joachim Breitner to support new Haskell + package naming scheme. (Closes: #616403) + * checks/patch-systems.desc: + + [NT] Reduced unneeded-build-dep-on-quilt to a pedantic tag, + since some people keep the dependency on quilt to ease + backporting for older releases. + + * data/changelog-file/ubuntu-dists: + + [NT] Added oneiric as valid Ubuntu distribution. Thanks to Benjamin + Drung for the patch. + * data/common/source-fields: + + [NT] Added 'package-list' field, which is emitted by dpkg 1.16.0. + * data/spelling/corrections: + + [NT] Added more misspellings. + + * t/tests/shared-libs-la-files: + + [NT] Fixed an issue where files would not be included in the tarball + due to dpkg-source's exclude patterns. (Closes: #619287) + * t/tests/*: + + [NT] Modified some versioned dependencies that the new dpkg will + not consider valid from 1.16.0. (Closes: #619290) + + -- Niels Thykier <niels@thykier.net> Tue, 05 Apr 2011 20:25:09 +0200 + +lintian (2.5.0~rc1) experimental; urgency=low + + The "welcome Niels Thykier!" release. + + * Summary of tag changes: + + Added: + - build-depends-on-specific-java-doc-package + - depends-on-specific-java-doc-package + - unneeded-build-dep-on-quilt + - description-synopsis-starts-with-article + - needless-dependency-on-jre + - temporary-debhelper-file + - compressed-objects.inv + - unused-build-dependency-on-cdbs + - python-debug-in-wrong-location + - debian-watch-contains-dh_make-template + - missing-dependency-on-python-central + - python-module-in-wrong-location + - missing-dependency-on-python-support + - package-installs-python-bytecode + - debhelper-maintscript-needs-versioned-build-depends + + Removed: + - embedded-zlib (now in embedded-library) + - embedded-libpng (now in embedded-library) + - embedded-libjpeg (now in embedded-library) + - embedded-libopenjpeg (now in embedded-library) + - package-installs-python-pyc (replaced by + package-installs-python-bytecode) + + * checks/*: + + [NT] Use the new pre-sorted file {index,info} when iterating over + files. + + [NT] All checks now report files without any "./" or "/" prefix. + This may break existing overrides. (Closes: #534940) + * checks/binaries: + + [RA] Exclude kfreebsd-kernel-di-{amd64,i386} from the + embedded-zlib check since it's in the kernel. (Closes: #593397) + + [RG] Add swipl to the list of known interpreters. (Closes: #591316) + + [RG] Detect embedded copies of ftgl, t1lib, gl2ps, libgd2, + ncurses, openssl (libcrypto), sqlite/3, libm, ltdl, curl, libmng, + libmsn, libmikmod, libmysqlclient, and tinyxml. + + [RG] Merge embedded-{zlib,lib{png,jpeg,openjpeg}} into + embedded-library. + + [RG] Find directories based on the file's type instead of file(1)'s + unforgiving output. Thanks, Gabriele Giacone. (Closes: #597990) + * checks/cruft{,.desc}: + + [NT] Extended the diff-contains-substvars check to also catch files + prefixed with a package name. + + [NT] Corrected the description of diff-contains-$vcs-control-dir. + It incorrectly assumed that -i worked for native packages. + (Closes: #609153) + + [NT] Moved the list of autotools packages into data/cruft/autotools. + + [NT] Clarified that dpkg-source looks for <package>_<upstreamversion> + and not <package>_<version> in the description of + native-package-with-dash-version. Thanks to Daniel Thomas for the + report. (Closes: #594254) + * checks/debhelper{,.desc}: + + [NT] Fix dependency check for dh_nativejava, default-jdk has never + provided dh_nativejava. (Closes: #606506) + + [NT] Added check for temporary debhelper files that ought to have + been removed by dh_clean. (Closes: #598251) + + [NT] Added check for unused build dependency on cdbs. Thanks to + Jari Aalto for suggesting this. (Closes: #582769) + + [NT] Added check for incorrect debhelper version when using the + maintscript feature from debhelper 8.1.0. + * checks/debian-source-dir: + + [NT] Added missing import of "Util" perl module. Thanks to David + Bremner for the patch. + * checks/description{,.desc}: + + [NT] Add a check for synopsis starting with articles. Thanks to + Nelson A. de Oliveira for the patch. (Closes: #603053) + + [NT] Fixed false positive description-contains-duplicated-word + caused by Lintian ignoring quoted words. Thanks to Gregor + Herrmann for report. (Closes: #590723) + * checks/fields{,.desc}: + + [NT] Added check for packages (build) depending on openjdk-X-doc or + classpath-doc instead of the default-jdk-doc metapackage. + (Closes: #593837) + + [NT] Fixed spelling of metapackage in tag descriptions. + + [NT] Added needless-dependency-on-jre tag. + + [NT] Corrected Policy references for the uploader tags. Thanks to + David Prévot for spotting this issue and providing a patch. + (Closes: #602632) + + [NT] Fixed false positives for breaks-without-version. The tag + will no longer be emitted if the package listed in Breaks is also + listed in Replaces. Thanks to Modestas Vainius for the report. + (Closes: #605744) + + [NT] Clarified that old-versioned-python-dependency can also be + triggered if dh_python2 is used and the package is missing + ${python:Breaks}. Thanks to Piotr Ożarowski for the report. + (Closes: #604167) + + [RG] Mention the package's original area in + wrong-section-according-to-package-name. (Closes: #608554) + * checks/files{,.desc}: + + [NT] Fixed false-positive extra-license-file for license.ui files. + Thanks to Jeremy Sanders for the report. (Closes: #595941) + + [NT] Added hurd-udeb to the list of packages allowed to ship + unusual top-level directories. Thanks to Samuel Thibault for + the patch. (Closes: #591331) + + [NT] Fixed spelling of metapackage in empty-binary-package tag + description. (Closes: #591300) + + [NT] Fixed false-positive extra-license-file for games. Instead + of skipping PATH directories Lintian now ignores all executable + files. (Closes: #608866) + + [NT] Added compressed-objects.inv tag to catch compressed + objects.inv files in python documentation. Thanks to + Fladischer Michael for the report and a partial patch. + (Closes: #608810) + + [NT] Added check for misplaced python debug files. Thanks to + Jakub Wilk for the report. (Closes: #576014) + + [NT] Added check for missing dependency on python-central. + Thanks to Jakub Wilk for the report. (Closes: #592533) + + [NT] Added check for misplaced Python modules. Thanks to + Jakub Wilk for the report. (Closes: #576012) + + [NT] Removed the "!= 0755" part from the out of the tag + executable-is-not-world-readable, since there are other valid + world readable file permissions. + + [NT] Added check for missing dependency on python-support. + Thanks to Jakub Wilk for the report. (Closes: #592491) + + [NT] Added check for packages installing Python eggs and + __pycache__ directories. Also extended existing Python bytecode + check to include ".pyo" files. Thanks to Piotr Ożarowski, + Jakub Wilk and the people in #debian-python for the report and + help with implementing this. (Closes: #576005) + * checks/init.d.desc: + + [RG] Raise severity of init.d-script-starts-in-stop-runlevel. + (Closes: #603800) + * checks/manpages: + + [NT] Fixed typo in locale name. Thanks to Christoph Biedl for + spotting this. (Closes: #606933) + * checks/menu-format.desc: + + [CW] Fix several typos. + * checks/menus.desc: + + [RA] Rephrase doc-base-uses-applications-section to be clearer that + its advice is to remove the "Applications/" part of the section. + * checks/nmu: + + [RG] Completely abort if debian/changelog is a symlink. + (Closes: #582408) + * checks/patch-systems{,.desc}: + + [NT] Added check for new unneeded-build-dep-on-quilt. + (Closes: #582767) + * checks/rules: + + [RG] Drop some checks for versioned dependencies that can now be + satisfied in stable (squeeze). Thanks, Cyril Brulebois. + (Closes: #612137) + + [RG] Correctly handle include directives preceded by a tab. + (Closes: #607281) + + [RG] Allow 'ocaml' as an alternative to 'ocaml-nox'. Thanks, + Ralf Treinen. (Closes: #612568) + * checks/scripts: + + [NT] Added mscgen as interpreter. + * checks/standards-version: + + [RG] Correctly handle cases where debian/changelog is a symlink. + * checks/watch-file{,.desc}: + + [NT] Added check for dh_make(1) templates in the watch file. + Thanks to Nelson A. de Oliveira for the report. (Closes: #600866) + + [RG] Document that relying on SourceForge's webpages for finding + new versions is not recommended either. (Closes: #593603) + + * collection/objdump-info: + + [RG] Support stricter parameter handling of objdump-info from + binutils 2.21. Thanks, Andreas Beckmann. + (Closes: #604047, LP: #683347) + + * data/changelog-file/ubuntu-dists: + + [CW] Add natty as a valid Ubuntu distribution, and remove the EOLed + intrepid and jaunty. (Closes: #611439) + * data/cruft/autotools: + + [NT] Added the file which is a list of all packages that will + suppress the {ancient,outdated}-autotools-helper-file tags. + Currently this is manually updated. This new list includes + dh-autoreconf, thanks to Felix Geyer. (Closes: #592358) + * data/debhelper/*: + + [RG] Refresh against unstable. + * data/debian-source-dir/known-files: + + [NT] Added the file and included git-patches in it. Thanks to + Ron for the report and David Bremner for the initial patch. + (Closes: #607502) + * data/fields/essential: + + [RG] Add hurd. (Closes: #591323) + * data/fields/obsolete-packages: + + [NT] Added default-jdk-builddep. See README.gcj-native-transition + in java-common for the replacement. + * data/fields/perl-provides: + + [RG] Refresh against perl 5.10.1. + * data/files/fonts: + + [NT] Made tipa replace xfonts-tipa as font provider. + (Closes: #595530) + + [RG] Refresh against unstable. + * data/files/locale-codes: + + [RG] Refresh against isoquery 1.4. + * data/shared-libs/ldconfig-dirs: + + [NT] Removed the emul/ia32-linux directories as they are no longer + used. (Closes: #596848) + * data/spelling/corrections: + + [NT] Added more corrections. + * data/spelling/corrections-case: + + [NT] Added DocBook corrections. Thanks to Jakub Wilk. + (Closes: #611349) + * data/spelling/corrections-multiword: + + [NT] Added "allows to" and other similar misspellings. Thanks + to Matthew Paul Thomas for the report. (LP: #608231) + + * debian/control: + + [RA] Add the build dependencies required to run the test suite + during the build. Many thanks to Niels Thykier for the investigative + work to determine which packages are required. (Closes: #593832) + + [RA] Remove versions from dependencies when those versions are + satisfied by oldstable (lenny). + + [NT] Bump debhelper build dependency to 7.0.50~, since some tests + depend on using dh7 with override targets. (Closes: #607730) + + [NT] Added Niels Thykier to uploaders. + + [NT] Introduce (build) dependency on libemail-valid-perl. + + [RG] Add a versioned build dependency on libtest-simple-perl or a + recent Perl that has Test::More with subtests support. + * debian/copyright: + + [NT] Added Niels Thykier to maintainers. + * debian/rules: + + [RA] Run the test suite during the package build. + + [NT] Replace dh_clean -k with dh_prep. + + [NT] Add support for skipping the test suite per policy 4.9.1. + Many thanks to David Bremner for the patch. + * debian/compat: + + [NT] Bump debhelper compat to 7. + * debian/source/lintian-overrides: + + [RG] Add overrides for quilt-related checks. + + * frontend/lintian: + + [NT] Ensure that Lintian always reaps processes it started before + exiting. In some cases these jobs would attempt to modify the + lab while Lintian was trying to remove it. Thanks to + Andreas Beckmann for reporting this issue. (Closes: #610218) + + [NT] Sorted related options alphabetically. Thanks to Jari Aalto + for the initial patch. (Closes: #600905) + + * lib/Lintian/Check.pm: + + [NT] Use Email::Valid to validate email addresses. + (Closes: #602655) + + [NT] Allow package names to be excluded from regular spelling + checks. They are still subject to multi word and case sensitive + spelling checks. Thanks to syq for the suggestion. + (Closes: #576283) + * lib/Lintian/Collect/Binary.pm: + + [NT] Pre-sort file index and file info to avoid sorting it + repeatedly in the checks. (Closes: #605844) + + * man/*: + + [NT] Rewrote the man pages in pod. (Closes: #600906) + + * t/runtests: + + [RG] Run blackbox tests in parallel too. + * t/tests/{rules-not-makefile,scripts-missing-dep}: + + [NT] Added new tests. (Closes: #607731) + + -- Raphael Geissert <geissert@debian.org> Tue, 22 Feb 2011 20:28:48 -0600 + +lintian (2.4.3) unstable; urgency=low + + The "Policy 3.9.1" release. + + * Summary of tag changes: + + Added: + - embedded-library + + Removed: + - debian-news-entry-without-blank-line + - dh_testversion-is-deprecated + + * checks/binaries{,.desc}: + + [RG] Detect embedded copies of expat, libbz2, libmagic, libxml2, + pcre3, and tiff. + + [RG] Recognise powerpcspe and sh4 ELF objects. + + [RA] Warn that spelling-error-in-binary may produce false positives + for words containing non-ASCII characters. (See #588661) + * checks/changelog-file{,.desc}: + + [RA] apt-listchanges has been fixed, so drop the check for NEWS + files ending in a trailing blank line. (Closes: #586816) + * checks/control-files.desc: + + [RA] Add references to Policy requirements added in 3.9.1. + * checks/copyright-file{,.desc}: + + [RA] Add examples for copyright-without-copyright-notice. Based on + a patch by Jari Aalto. (Closes: #580767) + + [RA] Remove exceptions for GPL v1, which is now in common-licenses + and mentioned in Policy 3.9.1. + * checks/cruft.desc: + + [RA] Add some hints to the ancient-libtool long description on how + to update the libtool files oneself. (Closes: #580767) + * checks/debhelper{,.desc}: + + [RA] package-lacks-versioned-build-depends-on-debhelper can also + trigger if the dependency is present but not tight enough. Thanks, + gregor herrmann. (Closes: #588156) + + [RA] Allow a tilde after the compatibility level in the debhelper + dependency. Thanks, Axel Beckert. (Closes: #583777) + + [RA] Remove dh_testversion-is-deprecated. The command is no longer + part of debhelper, so using it now just results in a build failure, + and there are no instances in the archive. + * checks/description.desc: + + [RA] Downgrade description-too-long to minor severity to match bug + reporting standards for formatting bugs. (Closes: #587837) + * checks/files{,.desc}: + + [RG] Detect embedded copies of HTMLPurifier. + + [RG] Detect embedded copies of the Strophe javascript library. + + [RA] Add references to Policy requirements added in 3.9.1. + * checks/patch-systems.desc: + + [RA] Improve the more-than-one-patch-system long description to + explicitly mention the case of packages that depend on dpatch but + are in 3.0 (quilt) format and to provide more rationale for the + tag. Thanks, Robert Luberda. (Closes: #585657) + * checks/po-debconf: + + [RA] Ignore comments in po/POTFILES.in. (Closes: #586036) + * checks/rules.desc: + + [RA] Rephrase the debian-rules-calls-debhelper-in-odd-order long + description to try to be clearer about the ordering requirements. + (Closes: #579964) + * checks/scripts{,.desc}: + + [RA] Improve python-script-but-no-python-dep tag description to be + clearer about the requirement for a versioned dependency for + versioned scripts and to mention ${python:Depends}, created by the + various Python debhelper scripts. (Closes: #575590, #582763) + + [RA] Add runhaskell and runghc. (Closes: #589266) + + [RA] Add references to Policy requirements added in 3.9.1. + + [RA] Allow kill -<signal> and kill and trap with signal numbers in + /bin/sh scrips, now allowed by Policy 3.9.1. + + * debian/changelog: + + [RA] Fix Policy 3.9.0 reference in 2.4.2. (Closes: #587549) + * debian/control: + + [RA] Update standards version to 3.9.1. + + * data/output/manual-references: + + [RA] Update for Policy 3.9.1. + * data/standards-version/release-dates: + + [RA] Add release date for Policy 3.9.1. + + * lib/Lintian/Check.pm: + + [RA] More correctly handle hyphenated words to avoid triggering + spelling error false positives. (Closes: #588896) + * lib/Lintian/Relation.pm: + + [RA] Don't require a package name component after a substvar to + follow the rules of the beginning of a package name. Fixes + stronger-dependency-implies-weaker false positives containing + substvars. (Closes: #580494) + * lib/Lintian/Schedule.pm: + + [ADB] Import "warning" from Lintian::Output, really fixing the + error caused by a non-existent file referenced in a .changes + file. (Closes: #583555, again) + + * private/refresh-insserv-data: + + [RG] Hardcode the '$all' virtual facility. + + * reporting/html_reports: + + [RA] Stop attempting to report unknown tags with a fake + description. This was failing with an error later, and the tag was + probably removed from Lintian and is now erroneous. + + * t/runtests: + + [RA] Add support for skipping raw Debian package and source package + tests. + + -- Russ Allbery <rra@debian.org> Sun, 25 Jul 2010 21:50:45 -0700 + +lintian (2.4.2) unstable; urgency=low + + The "Policy 3.9.0" release. + + * Summary of tag changes: + + Added: + - arch-wildcard-in-binary-package + - bad-provided-package-name + - conflicts-with-version + - copyright-refers-to-deprecated-bsd-license-file + - init.d-script-depends-on-unknown-virtual-facility + - team-upload-has-incorrect-version-number + - xc-package-type-in-debian-control (pedantic) + + Removed: + - arch-any-in-binary-pkg (now in arch-wildcard-in-binary-package) + - package-type-in-debian-control + + * checks/changes-file.desc: + + [RA] Add references for file-size-mismatch-in-changes-file and + checksum-mismatch-in-changes-file. + * checks/control-file{,.desc}: + + [RA] Remove package-type-in-debian-control now that dpkg-dev handles + it as desired by the d-i team. xc-package-type-in-debian-control + replaces it as a pedantic check to encourage switching to the + official name. Thanks, Raphael Hertzog. + + [RA] Add reference for debian-control-with-duplicate-fields. + * checks/copyright-file{,.desc}: + + [RA] Deprecate references to /usr/share/common-licenses/BSD in + debian/copyright following the change in Policy 3.9.0. + * checks/fields{,.desc}: + + [RA] Allow Breaks without a version if the broken package is a + virtual package. + + [RG] Check for invalid package names in provided (virtual) + packages. + + [RG] Exclude dash from the depends-on-essential-package checks, as + per discussion in debian-devel. (Closes: #587209) + + [RA] Allow architecture wildcards in build relations and in the + Architecture field of binary and source packages. (Closes: #582804) + + [RA] Rename arch-any-in-binary-pkg to arch-wildcard-in-binary-package + and diagnose any architecture wildcard, not just "any". + + [RA] Warn of using Conflicts with a version, which should normally + be Breaks instead, but only at wild-guess certainty for now. + * checks/huge-usr-share{,.desc}: + + [RA] Count file size from the tar listing rather than using du. The + results of du vary based on file system and other factors and make + the tag difficult to test. + * checks/init.d{,.desc}: + + [RG] Check for init.d scripts depending on unknown virtual + facilities. + + [RA] Remove checkroot from the list of scripts that should use a + virtual dependency since $local_fs is not quite the same and some + packages (cryptsetup) care about the difference. (Closes: #580082) + * checks/manpages{,.desc}: + + [RA] Run man page checks using the en_US.UTF-8 locale now that we + guarantee it exists. Should hopefully fix occasional problems with + col complaining about bad multibyte characters. (Closes: #575661) + * checks/menu-format.desc: + + [RA] Fix typo in long description of duplicated-key-in-desktop-entry. + Thanks, Niels Thykier. (Closes: #580700) + * checks/menus: + + [RG] Recognise call to update-menus when using 'exec.' + + [RA] Skip Haskell library documentation when warning about + documentation not registered with doc-base. Patch from Erik de + Castro Lopo. (Closes: #586877) + * checks/nmu{,.desc}: + + [RA] Recognize team uploads and do not treat them like NMUs. Patch + from Charles Plessy. (Closes: #582741) + * checks/rules.desc: + + [RA] Add reference for debian-rules-makemaker-prefix-is-deprecated. + * checks/scripts: + + [RG] Correctly handle variables at the beginning of a call to + dpkg-divert. Thanks, Andreas Beckmann. (Closes: #586984) + + * collection/objdump-info: + + [RG] Disable etch compatibility code. + * collection/strings: + + [RG] Correctly handle ELF binaries with whitespaces in their name. + (LP: #540342) + + * data/fields/architectures: + + [RG] Refresh against dpkg 1.15.7.2. (Closes: #581314, #584743) + * data/fields/virtual-packages: + + [RA] Update to current unstable and add the old xserver-xorg video + and input virtual packages. + * data/files/locale-codes: + + [RG] Refresh to reflect change to private/refresh-locale-codes. + * data/files/triplets: + + [RG] Refresh against dpkg 1.15.7.2. + * data/init.d/virtual_facilities + + [RG] New list of virtual facilities that exist in the archive. + * data/output/ftp-master-fatal: + + [RA] Remove arch-any-in-binary-pkg. + * data/output/manual-references: + + [RA] Update against latest Debian Policy and devref. + * data/spelling/corrections: + + [RG] Add more spelling corrections. + * data/spelling/corrections-case: + + [RG] Add capitalization correction for OAuth. (Closes: #582353) + * data/standards-version/release-dates: + + [RA] Add Debian Policy 3.9.0. + + * frontend/lintian: + + [RA] Set a PATH of /bin:/usr/bin if PATH is completely unset. + Thanks, Carsten Hey. + + * lib/Lintian/Collect/Binary.pm: + + [RG] Correctly handle ELF binaries with whitespaces in their name. + * lib/Lintian/Relation.pm: + + [RA] Rather than allowing only a package name or a substvar, allow + substvars mixed into the package name. (Closes: #580494) + * lib/Lintian/Schedule.pm: + + [ADB] Add missing "use Lintian::Output", required for the use of + warning(). (Closes: #583555) + + * private/refresh-insserv-data: + + [RG] New script to collect insserv data from the archive. + * private/refresh-locale-codes: + + [RG] Print elements with values only once. + * private/refresh-virtual-packages-data: + + [RA] Fix handling of # Keep: lines to work correctly now that + virtual packages mentioned only once are excluded. + + -- Russ Allbery <rra@debian.org> Sun, 27 Jun 2010 22:08:59 -0700 + +lintian (2.4.1) unstable; urgency=low + + The "there's always a hidden bug" release. + + * checks/manpages: + + [RG] Use "use" instead of "require" for Text::ParseWords and move + it outside a loop. + + * collection/debfiles: + + [RG] Properly handle cases where debian is a symlink. + + * data/spelling/corrections: + + [RG] Add more spelling corrections. + + * frontend/lintian: + + [RG] Remove finished processes from the processes hash to avoid + trying to kill dead processes. + + [ADB] Don't add the dependencies of the override-file check script + to the list of checks to run if --no-override was specified. + (Closes: #579211) + + -- Raphael Geissert <geissert@debian.org> Mon, 26 Apr 2010 22:44:35 -0500 + +lintian (2.4.0) unstable; urgency=low + + The "and this is just the beginning" release. + + * Summary of tag changes: + + Added: + - embedded-libjpeg + - embedded-libopenjpeg + - embedded-libpng + + * checks/binaries{,.desc}: + + [ADB] Use Lintian::Check::check_spelling() + + [RG] Detect embedded copies of libpng, lib{,open}jpeg. + + [RA] Suppress embedded-zlib if the zlib implementation is the Pascal + version. FPC doesn't support dynamic linking at this time, and this + isn't the problem the tag was designed to catch. + * checks/changelog-file: + + [ADB] Use Lintian::Check::check_spelling() + * checks/changes-file{,.desc}: + + [ADB] New check script for .changes file tests + + [RA] Add maverick as a valid Ubuntu distribution. + + [ADB] Recognise *-volatile as valid distributions. + * checks/copyright-file: + + [ADB] Use Lintian::Check::check_spelling() + * checks/deb-format.desc: + + [RG] deb-format needs changelog-file. + * checks/debconf.desc: + + [RG] Add missing dependency on debfiles collection script. + * checks/debian-readme: + + [ADB] Use Lintian::Check::check_spelling() + * checks/debian-source-dir.desc: + + [RA] Downgrade missing-debian-source-format to wishlist and tone + down the long description a bit. + * checks/description: + + [ADB] Use Lintian::Check::check_spelling{,_picky}() + * checks/fields: + + [RA] Add an exception for diffutils for depending on an essential + package without a version, since diff was renamed to diffutils and + depending on diffutils effectively is a versioned dependency. + Thanks, Santiago Vila. (Closes: #575073) + * checks/files{,.desc}: + + [RA] The simplepie class can begin with class[.-]. Patch from + Marcelo Jorge Vieira (metal). (Closes: #575879) + + [RG] Fix typo in empty-binary-package's description. Thanks, + Jakub Wilk. (Closes: #576804) + + [RG] Exclude udebs from empty-binary-package check. Thanks, + Vagrant Cascadian. (Closes: #576581) + + [RG] Also warn about bmp files in /usr/lib. Thanks, Rene + Engelhard. (Closes: #578776) + * checks/init.d: + + [RA] Allow $all to satisfy a $remote_fs or $local_fs requirement for + Required-Stop, since this has now been implemented. Thanks, Michael + Meskes. + + [RA] Recognize negated file checks when checking for file sourcing + without a test. Thanks, Jérémie Corbier. (Closes: #575363) + + [ADB] Use == for numeric comparison. + * checks/lintian.desc: + + [ADB] Remove information about .changes-related tags, now included in + checks/changes-file.desc + * checks/manpages: + + [ADB] Replace Spelling::spelling_check() call with the new + Lintian::Check::check_spelling() + * checks/menus: + + [ADB] Use Lintian::Check::check_spelling{,_picky}() + * checks/nmu: + + [RA] Skip leading changelog lines that do not begin with * when + looking for things like non-maintainer upload notes at the start of + the changelog entry. Patch from Gunnar Wolf. Thanks, Vincent + Danjean. (Closes: #575192) + * checks/rules: + + [RG] Warn about missing versioned build dependencies for + ocaml-related packages. (Closes: #567949) + * checks/scripts: + + [RA] Track local diversions like other diversions for the purposes + of checking for orphans and diversions of unknown files. Partly + addresses #575361. + * checks/watch-file{,.desc}: + + [RA] Warn about use of dversionmangle instead of uversionmangle to + handle tildes for upstream pre-releases. Patch from Peter + Eisentraut. (Closes: #575064) + + * collection/*.desc: + + [RG] Remove now-unneeded Order keys. + + * data/changelog-file/ubuntu-dists: + + [RA] Add maverick as a valid Ubuntu distribution. (Closes: #576282) + * data/fields/virtual-packages: + + [RG] Refresh against unstable. + * data/files/fonts: + + [RG] Refresh against unstable. + * data/files/locale-codes: + + [RG] Refresh to include ISO 639-3 codes. + * data/output/ftp-master-{,non}fatal: + + [RG] Refresh, without changes. + * data/spelling/corrections{,-case,-multiword}: + + [ADB] New files to contain the various types of spelling corrections + made by Lintian's spelling checks. + + [RG] Detect "pleaes" -> "please" typo. + + [RG] Add more spelling corrections. + + * doc/desc-files: + + [ADB] Add "changes" as an acceptable type for collection and check + scripts. + + [RG] Document Sort and Output-Format fields of the tests' desc files. + + * frontend/lintian: + + [ADB] Add "changes" as a valid type for collection and check scripts + + [ADB] Replace the special-cased parsing of .changes files with calls to + unpack-changes-l1 and Lintian::Schedule::add_changes() + + [ADB] Bump lab format to 10 for the addition of the "changes" lab + directory + + [ADB] Remove import of Lintian::Check which is no longer required after + the .changes parsing code was removed + + [RG] Support running collection and check scripts in parallel as soon + as their prerequisites are satisfied. + * frontend/lintian-info: + + [ADB] Add support for .changes tags to --annotate + + * lib/Lab.pm: + + [ADB] Add a "changes" directory to the lab structure. For static labs, + the directory is automatically added the first time a .changes-aware + Lintian accesses the lab. + * lib/Lintian/Check.pm: + + [ADB] Add new check_spelling and check_spelling_picky methods, based on + the spelling_check and spelling_check_picky methods from lib/Spelling.pm + (renamed for consistency with check_maintainer). + * lib/Lintian/Collect.pm: + + [ADB] Add support for Lintian::Collect::Changes + * lib/Lintian/Collect/Binary.pm: + + [ADB] The STACK element of objdump_info's result is a string not a + number; treat it as such consistently + * lib/Lintian/Collect/Changes.pm: + + [ADB] New module providing information about .changes files and the + files referenced therein + * lib/Lintian/Command.pm: + + [RG] Add done() method to check whether a process can be reaped + without blocking. + * lib/Lintian/Command/Simple.pm: + + [RG] New simple command interface which supports backgrounded + commands and easier waiting on commands without the full features of + Lintian::Command. + * lib/Lintian/DepMap.pm: + + [RG] New module to manipulate dependency maps. + * lib/Lintian/DepMap/Properties.pm: + + [RG] New subclass of Lintian::DepMap that allows properties to be + associated with Lintian::DepMap nodes. + * lib/Lintian/Schedule.pm: + + [ADB] Add support for scheduling .changes files + + [ADB] Fix an uninitialised value warning caused by .changes files by + treating a missing Version: field as being empty + * lib/Lintian/Tags.pm: + + [ADB] Remove the special-casing of .changes files in the output from + file_start() + + [ADB] Don't refer to .changes files as "packages" + * lib/Spelling.pm: + + [ADB] Removed as its functionality has been replaced by new methods in + Lintian::Check. + + * man/lintian.1: + + [ADB] Add changes-file to the list of check scripts. + + * private/refresh-locale-codes: + + [RG] Include ISO 639-3 codes. + * private/refresh-virtual-packages-data: + + [ADB] Use "==" for numeric comparison, not "eq". + * private/update-coverage: + + [ADB] Support .changes file tags + + * t/runtests: + + [ADB] Don't flag lintian output lines for .changes tags as invalid + + [ADB] When checking the number of jobs to run in parallel, use "==" + for numeric comparison rather than "eq". + * t/scripts/tags.t: + + [ADB] Use Lintian::Check::check_spelling() rather than Spelling.pm. + * t/tests/README: + + [ADB] Update the example .changes sed script to match the new output + format. + + * testset/runtests: + + [ADB] Don't flag lintian output lines for .changes tags as invalid + + * unpack/unpack-changes-l1: + + [ADB] New script to "unpack" a .changes file, creating a fields/ + hierarchy + * unpack/unpack-srcpkg-l1: + + [ADB] Support tarballs in the .tar.xz format. (Closes: #575633) + + -- Raphael Geissert <geissert@debian.org> Sat, 24 Apr 2010 13:51:45 -0500 + +lintian (2.3.4) unstable; urgency=low + + The "miscellaneous bug fix" release. + + * Summary of tag changes: + + Added: + - control-file-with-CRLF-EOLs + - debian-rules-makemaker-prefix-is-deprecated + - empty-binary-package + - incorrect-locale-code + - missing-debian-source-format + - package-type-in-debian-control + - possible-new-upstream-release-without-new-version + - star-file + - unknown-file-in-debian-source + - unknown-source-format + - unknown-locale-code + + * checks/binaries: + + [RA] Exclude packages from the klibc source package from the + embedded zlib check since klibc legitimately includes its own copy. + Thanks, maximilian attems. (Closes: #573914) + * checks/changelog-file{,.desc}: + + [RA] New check for a changelog entry indicating a new upstream + release but no change in the upstream portion of the package + version. Idea from Emilio Pozuelo Monfort. (Closes: #569129) + * checks/control-file: + + [RG] Update package-depends-on-hardcoded-libc exception to also + exclude eglibc. Based on a patch from Cyril Brulebois. + (Closes: #573398) + + [RA] Also exclude *-common packages from weak-library-dev-dependency + checks. Thanks, Emilio Pozuelo Monfort. (Closes: #570408) + + [RA] Suppress missing-separator-between-items if either of the items + contain substvars other than *:Depends substvars, since substvars + may be used to assemble the components of a dependency. Thanks, + Matthias Klose. (Closes: #573815) + + [RA] Warn about Package-Type instead of XC-Package-Type in + debian/control. Patch from Cyril Brulebois. (Closes: #573399) + * checks/cruft{,.desc}: + + [RA] Provide more information in native-package-with-dash-version + long description about how native packages can be created by + mistake. Thanks, Jari Aalto. (Closes: #573839) + + [RA] Reword source-contains-prebuilt-windows-binary long + description. (Closes: #574515) + + [RG] Warn about control and changelog files with CRLF end of line + terminators. Thanks, Michal Čihař. (Closes: #564713) + * checks/debconf: + + [RA] Don't warn about the length of the short description for + templates of type text in udebs, since they're frequently used by + including them into other templates at runtime. Patch from Frans + Pop. (Closes: #560414) + * checks/debian-source-dir{,.desc}: + + [RA] New check script from Raphaël Hertzog checking various things + about debian/source/* control files including checking for a source + format control file. (Closes: #566820) + * checks/fields.desc: + + [RA] Correct the supported source formats in the long description of + unsupported-source-format. Patch from Raphaël Hertzog. + + [RA] Stop recommending a dependency on perl-modules. Patch from + Niko Tyni. (Closes: #568749) + * checks/files{,.desc}: + + [RA] New check for binary packages that are empty except for + standard files and don't declare themselves to be metapackages or + other types of dummy packages. Based on a patch from Luca + Falavigna. (Closes: #569220) + + [RG] New check for packages shipping files literally called '*' + (star symbol). Thanks, Niels Thykier. (Closes: #574771) + + [RG] New checks for incorrect and unknown locale codes in + /usr/share/locale subdirectories. + * checks/init.d{,.desc}: + + [RA] Exclude symlinks to upstart-job from init script syntax checks. + Based on a patch by Jos Boumans. (Closes: #569492) + + [RA] Allow umountnfs to satisfy a $remote_fs requirement and + umountnfs or umountfs to satisfy a $local_fs requirement in LSB + headers, avoiding false positives in unusual situations such as + rsyslog. Thanks, Michael Biebl. (Closes: #571280) + + [RA] Allow $all to satisfy a $remote_fs or $local_fs requirement in + Required-Start, but (per the wiki) not Required-Stop. Thanks, + Michael Meskes. (Closes: #574970) + * checks/manpages.desc: + + [RA] Clarify the long description for manpage-has-bad-whatis-entry. + Thanks, Jari Aalto. (Closes: #573837) + * checks/rules: + + [RA] Allow ant1.7 to satisfy a build requirement for ant. Thanks, + Rene Engelhard. (Closes: #572430) + + [RG] Require a versioned build-dependency on cdbs if scons.mk or + perl-build.mk are used. (Closes: #574744) + + [RG] Warn about installing files specifying the destination + directory with PREFIX when Perl's MakeMaker build system is used. + Based on a patch by Niko Tyni. (Closes: #568748) + + [RA] Also check binary-independent, wildcard, and override rules for + programs requiring build dependencies, but accept them in either + Build-Depends or Build-Depends-Indep. + + [RA] Check for a quilt dependency when the debhelper 7 quilt module + is used. Thanks, Martin Meredith. (Closes: #548094) + + [RA] Allow python2.6 packages to satisfy Python build dependencies. + * checks/scripts{,.desc}: + + [ADB] Update the list of octave interpreters, adding octave3.2 + (Closes: #574048) and removing octave2.1 (only available in lenny + and earlier) and octave3.1. + + [RA] Allow non-executable *.pm files in the examples directory to + start with a line like #!perl. This is probably just an editor + hint. Thanks, Thijs Kinkhorst. (Closes: #574826) + + [RA] Mention #!@BASH@ and similar cases in the long tag description + of example-interpreter-not-absolute. + + [RA] Add Python 2.6 to recognized Python versions. + + [RA] Add liquidsoap and texlua to known interpreters. + * checks/shared-libs: + + [RA] symbols-declares-dependency-on-other-package should not have + trailing whitespace for unversioned dependencies. Patch from + Modestas Vainius. (Closes: #570380) + * checks/standards-version: + + [RG] Don't warn about timewarp-standards-version when the + changelog's distribution is "UNRELEASED." Thanks, Raphaël Hertzog. + (Closes: #571616) + + * collection/debfiles: + + [RA] Simplify the logic since the entire debian directory is always + copied. Patch from Raphaël Hertzog. + + * data/debhelper/*: + + [RG] Refresh against unstable. + * data/fields/{perl-provides,virtual-packages}: + + [RG] Refresh against unstable. + * data/files/architectures: + + [RG] Refreshed against dpkg 1.15.6. (Closes: #563495) + * data/files/fonts: + + [RG] Refresh against unstable. + * data/files/incorrect-locale-codes: + + [RG] New list of common incorrect locale names + * data/files/locale-codes: + + [RG] Generated from unstable's iso-codes. + * data/files/triplets: + + [RG] Refreshed against dpkg 1.15.6. + + * debian/control: + + [RG] Update package description to mention Policy version 3.8.4 + instead of 3.8.3. Should have been done on the previous release. + * debian/source/format: + + [RA] Switch package format to 3.0 (native). + * debian/postinst: + + [RG] Use triggers to ensure an up-to-date locale in all cases. + (Closes: #567451) + + * frontend/lintian: + + [RA] Globally ignore SIGPIPE, forcing error return codes from write. + Hopefully will resolve some unreproducible occasional crashes. + (Closes: #558360) + + * lib/Lintian/Tag/Info.pm: + + [JP] Don't link to references with no URL. (Closes: #572297) + * lib/Spelling.pm: + + [ADB] Remove duplicate entries from the correction list. Thanks, + Jakub Wilk. (Closes: #572260) + + [ADB] Add a spelling correction for "unecessary". Thanks, Jakub + Wilk. (Closes: #572456) + + * man/lintian-info.1: + + [CW] Fix typo. + + [RA] Document new debian-source-dir check script. + + * private/refresh-locale-codes: + + [RG] New script to generate a list of locale codes. + + * reporting/templates/foot.tmpl: + + [ADB] Replace the "please mail comments to the maintainer" request + with a pointer to reportbug. (Closes: #572298) + + * testset/etcfiles/: + + [RA] Fix problems with the md5sums test suite construction in the + legacy etcfiles test. Thanks, Frank Lin PIAT. (Closes: #573081) + + * t/runtests: + + [RG] Add support for architecture-specific tests. + + [RG] Add support for To-Do tests. + * t/tests/binaries-multiarch/: + + [RG] Fix test failure in non-i386 architectures by normalising the + expected output. Thanks, Niko Tyni. (Closes: #568680) + + -- Russ Allbery <rra@debian.org> Mon, 22 Mar 2010 16:23:51 -0700 + +lintian (2.3.3) unstable; urgency=low + + The "Policy 3.8.4" release. + + * Summary of tag changes: + + Added: + - missing-dependency-on-phpapi + - obsolete-comments-style-in-php-ini + - package-contains-mime-cache-file + - package-contains-mimeinfo.cache-file + - triplet-dir-and-architecture-mismatch + + * checks/binaries{,.desc}: + + [RG] Warn about packages shipping PHP extensions but not + depending on phpapi-*. + * checks/debconf.desc: + + [RG] There are legitimate uses of db_input on the postinst + script, downgrading the certainty of the check. (Closes: #543418) + * checks/fields{,.desc}: + + [RG] Don't warn about depending on the phpapi-* virtual package. + * checks/files{,.desc}: + + [RG] Warn about packages shipping PHP .ini files using old-style + (#) comments separators. + + [RG] Warn about packages embedding the dojo and dijit javascript + libraries. + + [RG] Don't warn about packages containing /sys or /selinux + directories. Policy 3.8.4 grants an exception to the FHS. + + [RG] Warn about packages containing (/usr)/lib/<triplet> + directories for a <triplet> that isn't the one of the + architecture of the package, per Policy 3.8.4 requirement. + + [RG] Warn about packages shipping cache files generated by + update-mime-database. Thanks, Jakub Wilk. (Closes: #563685) + + [RG] Warn about packages shipping mimeinfo.cache files, generated by + update-desktop-database. Thanks, Raphaël Hertzog. (Closes: #567753) + * checks/init.d: + + [RG] Warn about init scripts depending on checkroot instead of + $local_fs. + + [RG] Remove experimental flag from remote_fs and local_fs checks. + + [RG] Skip rc and rcS from the init script checks. + + * data/debhelper/*: + + [RG] Refresh against unstable. + * data/fields/{perl-provides,virtual-packages}: + + [RG] Refresh against unstable. + * data/files/fonts: + + [RG] Refresh against unstable. + * data/files/triplets: + + [RG] New file with a list of triplet<->architecture + relationships. + * data/output/ftp-master-{,non}fatal: + + [RG] Refresh, without changes. + * data/standards-version/release-dates: + + [RG] Add the release date for Policy 3.8.4. + + * debian/control: + + [RG] Update standards version to 3.8.4 (no changes required). + * debian/postinst: + + [RG] Generate the locale under the correct directory. + * debian/prerm: + + [RG] Don't ignore errors on shell commands failures. + + * frontend/lintian: + + [RG] Fix path to the locale directory passed to LOCPATH. + (Closes: #555408) + + * private/refresh-archs: + + [RG] Generate a list of triplet<->architecture relationships too. + + * t/runtests: + + [RG] Update standards version to 3.8.4. + + -- Raphael Geissert <geissert@debian.org> Sun, 31 Jan 2010 02:59:56 -0600 + +lintian (2.3.2) unstable; urgency=high + + * Summary of tag changes: + + Added: + - conflicting-negation-in-source-relation + + * checks/{control-files,files,menu-format,menus}: + + [RG] Fix CVE-2009-4014: format string vulnerabilities. + * checks/{fields,patch-systems}: + + [RG] Fix CVE-2009-4013: missing control files sanitation. + * checks/{files,patch-systems,po-debconf}: + + [RG] Fix CVE-2009-4015: arbitrary command execution. + * checks/changelog-file: + + [RA] Avoid Perl warning when the NEWS file ends immediately after + the most recent entry. (Closes: #563585) + * checks/copyright-file: + + [RA] Relax the regex for matching dh-make-perl boilerplate to catch + the current text. Thanks, gregor herrmann. (Closes: #563571) + * checks/fields{,.desc}: + + [RA] Reject "all" and "any" in architecture qualifications for build + dependencies. Thanks, Jonathan Yu. + + [RA] Warn if some architectures in a build relation are negated and + others are not. + * checks/files.desc: + + [JP] Fix outdated reference in file-in-usr-lib-site-python. + * checks/infofiles: + + [RA] Pass LOCPATH to subprocesses. + + [ADB] Don't flag info files with filenames of info-N.gz as having an + incorrect extension if N contains multiple digits. (Closes: #564900) + * checks/manpages: + + [RA] Pass LOCPATH to subprocesses. + + * collection/objdump-info: + + [RG] Fix CVE-2009-4015: arbitrary command execution. + * collection/source-control-file: + + [RG] Fix CVE-2009-4013: missing control files sanitation. + + * data/output/manual-references: + + [JP] Refresh reference data against Policy 3.8.3, doc-base 0.9.5, + developers-reference 3.4.3, and Python Policy 0.9.0. + + * debian/control: + + [RA] Depend on locales. + * debian/prerm: + + [RA] Remove /var/lib/lintian/locale on any removal except upgrades. + * debian/postinst: + + [RA] Generate an en_US.UTF-8 locale in /var/lib/lintian/locale for + use for tests, particularly man page tests. (Closes: #555408) + + * frontend/lintian: + + [RA] Set LOCPATH to LINTIAN_ROOT/locale or /var/lib/lintian/locale, + whichever exist. + + [RG] Fix CVE-2009-4013: missing control files sanitation. + + * lib/Lintian/Collect.pm: + + [ADB] Update the documentation to reflect the existence of + Lintian::Collect::Binary. + * lib/Lintian/Collect/Binary.pm: + + [ADB] Correct a reference in the documentation indicating that the + module collects data for source packages. + * lib/Lintian/Schedule.pm: + + [RG] Fix CVE-2009-4013: missing control files sanitation. + + [RG] Fix CVE-2009-4014: format string vulnerabilities. + * lib/Spelling.pm: + + [RA] Add additional spelling corrections. + + [RA] Remove spelling correction for parameterize. This is the + correct US spelling. Thanks, Jonathan Yu. (Closes: #564523) + + [RA] Remove spelling correction for useable, a variant permitted + by the OED. Thanks, Vagrant Cascadian. (Closes: #564740) + + [RG] Add more spelling corrections. + * lib/Util.pm: + + [RA] Pass LOCPATH to subprocesses. + + [RG] Fix CVE-2009-4015: arbitrary command execution. + + * man/lintian.1: + + [RA] Spelling fix. Thanks, A. Costa. (Closes: #564017) + + * private/refresh-manual-refs: + + [RG] Fix CVE-2009-4015: arbitrary command execution. + + * reporting/{config,html_reports}: + + [JP] Make it possible to keep a record of statistics of previous + archive-wide Lintian executions. + * reporting/templates/maintainer.tmpl: + + [RA] Really fix the logic to optionally display the archive area of + additional package entries under the same source package. + + * unpack/unpack-{bin,src}pkg-l1: + + [RG] Fix CVE-2009-4013: missing control files sanitation. + + -- Raphael Geissert <geissert@debian.org> Wed, 27 Jan 2010 10:55:03 -0600 + +lintian (2.3.1) unstable; urgency=low + + The "goodbye to unpack level 2" release. + + * Summary of tag changes: + + Added: + - init.d-script-missing-start + - debian-news-entry-has-unknown-version + - debian-news-entry-uses-asterisk + - debian-news-entry-without-blank-line + - non-native-package-with-native-version + - udev-rule-in-etc + + * {checks,collection}/*.desc: + + [RG] Remove Unpack-Level fields and depend on the 'unpacked' + collection script as needed. + * checks/binaries: + + [RG] Recognise hppa64 binaries and ignore them on the + binary-from-other-architecture check for hppa. + Thanks, Matthias Klose. (Closes: #562788) + * checks/changelog-file{,.desc}: + + [RA] Per devref, recommend against NEWS.Debian entries formatted + with asterisks like changelog entries. + + [RA] Check that the most recent NEWS.Debian entry is followed by a + blank line for apt-listchanges. Thanks, Adeodato Simó. (Addresses + the Lintian part of #523436) + + [RA] Warn if the version of the latest NEWS.Debian entry doesn't + appear in the changelog. Thanks, Christoph Berg. (Closes: #550594) + * checks/control-file: + + [RA] Fix parsing of dependencies for weak-library-dev-dependency + when the content of Depends begins with a newline. Thanks, Julien + Cristau. (Closes: #563370) + * checks/cruft: + + [RA] Fix the regex to properly ignore CMakeCache.txt in the debian + directory. Thanks, Aaron M. Ucko. (Closes: #553264) + + [RA] Check for a non-native package with a native version. Thanks, + Andreas Beckmann. + * checks/debhelper: + + [RA] Always warn if debhelper is in use but no ${misc:Depends} + dependency is present rather than checking which specific debhelper + commands use it. Any debhelper command may start adding + dependencies to ${misc:Depends} at any time. Lower the certainty to + possible, since a missing ${misc:Depends} may not cause problems. + * checks/fields.desc: + + [RA] Fix spelling error in dfsg-version-with-period tag description. + Thanks, Jakub Wilk. (Closes: #563185) + * checks/files{,.desc}: + + [RG] Add a missing 'it' to the description of duplicate-font-file. + + [RG] Add detection of nusoap to the embedded PHP libraries check. + + [RG] Check that udev rules are not installed in /etc/udev/rules.d. + Thanks, Marco d'Itri. (Closes: #559208) + * checks/init.d{,.desc}: + + [RG] Bump severity of init.d-script-sourcing-without-test to serious. + + [RG] Lower the severity of init.d-script-does-not-provide-itself + to minor. + + [RG] Fix an init.d-script-possible-missing-stop false positive when + stopping on runlevels 2-5. + + [RG] Mention 'killprocs' in init.d-script-possible-missing-stop's + description. Thanks, Kurt Roeckx. (Closes: #562608) + + [RG] Warn about init scripts with incomplete start runlevels. + + [RG] Tighten check for missing dependency on local_fs or remote_fs + when using files with a name of 'var*' or 'usr*'. + + [RG] Also recognise the use of the -r test as a file test, and + the test command when determining whether a /etc/default file is + being sourced unconditionally. + + [RG] Correct the description of the + missing-dependency-on-{remote,local_fs} tags where 'is' was meant + to be used instead of 'are'. + * checks/manpages.desc: + + [RA] Downgrade spelling-error-in-manpage to minor severity. + (Closes: #563039) + * checks/patch-systems: + + [RA] Avoid false positives for patches modifying files in debian/* + when the parent directory in which the patch was created is named + debian. Thanks, Mark Brown. (Closes: #562875) + + * collection/ar-info: + + [RA] Skip *.a files that are dangling symlinks and discard error + output from ar. Correctly handle file names that contain shell + metacharacters. + * collection/unpacked{,.desc}: + + [RG] New scripts to replace the unpack level 2. + + * frontend/lintian: + + [RG] Deprecate and replace unpack levels with the use of + collection scripts. + + [ADB] Remove an unused variable declaration. + + * lib/Spelling.pm: + + [ADB] Add corrections for "nam" (name) and "nams" (names). + + [RG] Add some more spelling errors. + + [RG] Uppercase every character of the correction if every + character of the original word is too. + + [RA] Superceded is an acceptable alternative spelling of superseded. + + * man/lintian.1: + + [RG] Document deprecation of unpack levels. + + [ADB] Add the new "unpacked" collection script to the list of such + scripts. + + [ADB] Correct the documentation of --tags-from-file to indicate that + the file contains tags to issue, not suppress. + + * reporting/html_reports: + + [RA] Sort the tags so that the maintainer view will group repeated + instances of the same tag and display extra information in sorted + order. (Closes: #563126) + + [RA] Better handle missing information for packages in the package + lists and default the package area to main. + * reporting/templates/maintainer.tmpl: + + [RA] Fix the logic to optionally display the archive area of + additional package entries under the same source package. + + * unpack/unpack-{src,bin}pkg-l2: + + [RG] Dropped in favour of collection/unpacked. + + -- Russ Allbery <rra@debian.org> Sat, 02 Jan 2010 21:01:14 -0800 + +lintian (2.3.0) unstable; urgency=low + + The "welcome Raphael Geissert!" release. + + * Summary of tag changes: + + Added: + - capitalization-error-in-description + (split from spelling-error-in-description) + - debian-rules-automatically-updates-control + - duplicate-in-relation-field (pedantic) + - duplicated-compressed-file + - init.d-script-missing-dependency-on-local_fs (experimental) + - init.d-script-missing-dependency-on-remote_fs (experimental) + - obsolete-relation-form-in-source + - ocaml-dangling-cmi + - ocaml-dangling-cmx + - ocaml-dangling-cmxa + - ocaml-dangling-cmxs + - ocaml-dev-file-in-nondev-package (pedantic) + - ocaml-dev-file-not-in-usr-lib-ocaml (pedantic) + - ocaml-meta-without-suggesting-findlib (pedantic) + - ocaml-stray-cmo + - spelling-error-in-manpage + + Removed: + - build-depends-without-arch-dep + + * checks/*: + + [RA] Use Lintian::Tags instead of Tags. + * checks/binaries{,.desc}: + + [RA] Allow any RPATH containing $ORIGIN or ${ORIGIN}, not just the + literal value $ORIGIN. (Closes: #557511) + + [ADB] Exempt all binary packages built from the zlib source from + the embedded-zlib test, not just those with binary package names + matching zlib.+. Thanks, Mark Brown. + + [RA] Spelling errors are no longer normalized to lowercase. + * checks/changelog-file: + + [RA] Suppress latest-debian-changelog-entry-without-new-date if the + distribution is UNRELEASED. Thanks, Raphaël Hertzog. + (Closes: #560149) + + [RA] Also ignore too-long lines that consist of "See" followed by an + unbreakable word. Thanks, Jari Aalto. (Closes: #560005) + + [RA] Downgrade spelling tags to severity: minor. + * checks/control-file{,.desc}: + + [RA] Check for < and > version dependencies in debian/control since + dpkg-source helpfully rewrites and fixes them in binary packages. + Thanks, Jakub Wilk. (Closes: #557971) + + [RA] Add a pedantic check for duplicates in relation fields in + debian/control prior to the fixes applied by dpkg-dev. Thanks, + Nelson A. de Oliveira. (Closes: #548819) + + [RA] Fix a typo that skipped checks on the Build-Conflicts field. + + [RA] Rework weak-library-dev-dependency to allow more approaches to + bounding the shared library version. Skip complex cases with or'd + dependencies and assume the maintainer knows what they're doing. + Add more explanation to the long tag description. Thanks, Reinhard + Tartler and Mike Hommey. (Closes: #557449) + * checks/copyright-file.desc: + + [RA] Downgrade spelling-error-in-copyright to minor and mention + false positive possibilities and an override in the tag description. + * checks/cruft: + + [RA] Allow an automake or libtool dependency in Build-Depends-Indep + to also satisfy the check for outdated helper files. Thanks, + Guillaume Delacour. (Closes: #557530) + + [RA] Ignore files in .pc, created by unpacking 3.0 (quilt) packages. + Thanks, Ahmed El-Mahmoudy. (Closes: #556022) + * checks/debian-readme.desc: + + [RA] Downgrade spelling tag to severity: minor. + * checks/description{,.desc}: + + [RA] Downgrade spelling tag to severity: minor. + + [RA] Split capitalization-error-in-description to a separate tag and + downgrade its certainty to wild-guess. + * checks/fields{,.desc}: + + [ADB] Re-order the fields of build-depends-on-build-essential so that + all of the descriptive text is included. Thanks, Jonathan Wiltshire. + (Closes: #557786) + + [RA] For lib-recommends-documentation, exclude packages ending in + -tools or -bin. Thanks, Jay Berkenbilt. (Closes: #557883) + + [RA] Warn of build dependencies on python*-dev if no architecture- + dependent packages are being built. Patch from Luca Falavigna. + (Closes: #551793) + + [RA] Add emacs22 to obsolete emacs versions. Thanks, Sven Joachim. + (Closes: #560053) + * checks/files{,.desc}: + + [RA] New check for files present in both compressed and uncompressed + form. Patch from Raphael Geissert. (Closes: #546174) + + [RA] Allow /etc/sudoers.d files to be mode 0440 as recommended by + sudo. Thanks, Thijs Kinkhorst. (Closes: #557353) + * checks/huge-usr-share{,.desc}: + + [RA] Increase the thresholds to 2MB (over 50%) and 4MB (any + percentage), and mention the thresholds in the tag description. + Thanks, Christoph Egger. (Closes: #561720) + * checks/init.d{,.desc}: + + [RA] Add checks for missing dependencies on $local_fs or $remote_fs + based on what files appear to be used in the init scripts. Patch + from Raphael Geissert. (Partly addresses #405454) + * checks/manpages{,.desc}: + + [RG] Check for spelling errors in English manpages. + * checks/manpages.desc: + + [RA] Clarify the long description of hyphen-used-as-minus-sign. + Note that Debian groff is currently patched to avoid this problem, + but hopefully that divergence can be removed. Reference + groff-base's README.Debian for more information. (Closes: #548844) + * checks/menus.desc: + + [RA] Change spelling tags to severity: minor and certainty: certain + since there are few false positives but minor is the correct + severity. + * checks/ocaml{,.desc}: + + [RA] New checks for OCaml packaging. Contributed by Stéphane + Glondu. (Closes: #528367) + * checks/patch-systems{,.desc}: + + [RA] Recommend DEP-3 in {dpatch,quilt}-patch-missing-description and + reference the document. Thanks, Raphaël Hertzog. (Closes: #554025) + + [RA] Allow DEP-3 headers in dpatch patches to satisfy the + description requirement. Thanks, Paul Gevers. (Closes: #548640) + * checks/rules{,.desc}: + + [RA] Remove build-depends-without-arch-dep. If the package only + builds architecture-independent packages, the distinction between + Build-Depends and Build-Depends-Indep is meaningless and there's no + reason, even pedantically, to worry about the separation. Thanks, + Charles Plessy. (Closes: #552200, #555667) + + [RA] Add a new check for DEB_AUTO_UPDATE_DEBIAN_CONTROL = yes. + Thanks, Nelson A. de Oliveira. (Closes: #557120) + + * collection/ar-info{,.desc}: + + [RA] Collects the results of ar t on all *.a files, used by the new + OCaml checks. Contributed by Stéphane Glondu. + * collection/override-file: + + [RA] Check debian/source/lintian-overrides before + debian/source.lintian-overrides for source package overrides. + Thanks, martin f krafft. (Closes: #554617) + + * data/debhelper/*: + + [ADB] Refresh against unstable. + * data/fields/{perl-provides,virtual-packages}: + + [ADB] Refresh against unstable. + * data/files/fonts: + + [ADB] Refresh against unstable. + * data/output/ftp-master-{non,}fatal: + + [RA] New data files listing tags that may result in an automated + upload reject. + + * doc/lintian.sgml: + + [RA] Document debian/source/lintian-overrides as the new preferred + location for source overrides. + + * debian/control: + + [RG] Add Raphael Geissert to Uploaders. + + [RA] Add ${misc:Depends} to dependencies. + * debian/copyright: + + [RG] Add Raphael Geissert to maintainers. + + * frontend/lintian: + + [RA] Add options --suppress-tags and --suppress-tags-from-file to + completely suppress the given tags. + + [RA] Support comments and blank lines in --tags-from-file files. + + [RA] Run the check modules in sorted order. + + [RA] Create a global Lintian::Tags object and use it instead of + setting variables in the Tags namespace. Move display level code + from here to Lintian::Tags. Adjust calls for the new Lintian::Tags + module. + + [RA] Add option -F or --ftp-master-rejects which only checks tags + that could result in an automatic upload reject. + * frontend/lintian-info: + + [RA] Add -h/--help option. Patch from gregor herrmann. + (Closes: #558214) + + * lib/Lintian/Check.pm: + + [RA] Use Lintian::Tags instead of Tags. + * lib/Lintian/Output.pm: + + [RA] print_tag() now takes an additional argument containing + override data and expects a Lintian::Tag::Info object as the tag + info instead of a hash. + + [RA] Adjust for the renaming of pkg in the file information hash. + * lib/Lintian/Output/*.pm: + + [RA] Adjust for print_tag() and file information hash changes. + * lib/Lintian/Output/XML.pm: + + [RA] Rewrite to be more readable and fix the tags attribute for + overridden experimental tags. + * lib/Lintian/Relation.pm: + + [RA] Fix bugs in unparse() and duplicates() that caused duplicates() + to crash when processing duplicates between an alternative and a + regular package. Thanks, Jonathan Yu. (Closes: #559625) + * lib/Lintian/Tag/Info.pm: + + [RA] Add a code method that returns the tag code corresponding to + the severity and certainty for a tag, based on get_tag_code from + Tags.pm. + + [RA] Add certainty, severity, and tag accessor methods. + + [RA] Add a method saying whether a tag is experimental. + + [RA] Record the check script corresponding to each tag and add an + accessor method for it. + + [RA] Add a sources method returning a list of sources referenced by + a tag, based on the get_tag_source method from Tags.pm. + * lib/Lintian/Tags.pm: + + [RA] New module in a proper namespace replacing Tags.pm. A global + Lintian::Tags object replaces the static variables in the Tags + namespace, with new accessor functions, except for the tag metadata + functions (which have moved to Lintian::Tag::Info). All handling of + display levels is now here instead of in frontend/lintian. + + [RA] Support suppressing a list of tags. + + [RA] Suppress calling Lintian::Output::print_end_pkg for changes + files, where we don't call print_start_pkg. This fixes an unmatched + closing tag in the experimental XML output. + * lib/Spelling.pm: + + [RA] Use Lintian::Tags instead of Tags. + + [RA] Ignore all-caps words of five characters or less for spelling + corrections, since they are probably acronyms. Thanks, Michal + Čihař. (Closes: #556456) + + [RA] Report the original word in spelling errors rather than the + normalized form. + + [RG] Detect some multi-word spelling errors. + + [RA] Remove the als to also correction. This is a word in several + European languages, and the many hits on the archive are nearly all + false positives. + * lib/Tags.pm: + + [RA] Removed in favor of Lintian::Tags. + * lib/Util.pm: + + [RA] Consume all output from extracting the control file of a binary + package before closing the pipe. + + * man/lintian.1: + + [RA] Document --suppress-tags and --suppress-tags-from-file. + + [RA] Document format of --tags-from-file. + + [RA] Document -F (--ftp-master-rejects). + + [RA] Add ocaml checker script. + + [RA] Add ar-info collection script. + + [RA] Document the override locations in the FILES section. Thanks, + Jakub Wilk. (Closes: #558649) + + [RA] Remove obsolete spelling checker script. + + [RA] Mention /usr/share/lintian/data under FILES. + + [RA] Clarify that errors are not necessarily policy violations. + + [RA] Remove bug that Lintian doesn't handle packages with different + binary and source versions correctly. I don't believe this is still + an issue. + * man/lintian-info.1: + + [RA] Add -h (--help). + + [RA] lintian -i no longer pipes output through lintian-info. Adjust + the man page accordingly. + + * private/refresh-ftp-master-tags: + + [RA] Script to refresh data about automatic package rejects. + + * reporting/html_reports: + + [RA] Never use O as the code for the tag on the per-tag page even if + all instances in the archive are overridden. (Closes: #562630) + + * t/runtests: + + [RA] Unwrap the Options field so that it can be continued. + + [RA] Replace TESTSET in Options with the root of the test suite so + that lintian options referring to files can be tested with files in + the test suite directory. + + [RA] Support a new Sort: no field in package test metadata to + suppress sorting of lintian output, for testing output formatting. + + [RA] Use Lintian::Command::spawn to run Lintian for package tests so + that the lintian options may contain shell metacharacters. + + [RA] Put all error output from lintian unsorted before the regular + output, making it easier to diagnose errors. + + [RA] Suppress checking the syntax of the lintian output if neither + Test-For nor Test-Against are set and Sort: no is set. + + * unpack/list-{bin,src,udeb}pkg: + + [RA] Support multiple versions of a package in the archive and + include only the latest version in the Lintian package list. + * unpack/unpack-binpkg-l2: + + [RA] Report errors from dpkg-deb or tar on stderr if either exit + with non-zero status. + * unpack/unpack-srcpkg-l2: + + [RA] Report errors from dpkg-source -x on stderr if it exits with + non-zero status. (Closes: #557717) + + -- Russ Allbery <rra@debian.org> Sat, 26 Dec 2009 18:38:10 -0800 + +lintian (2.2.18) unstable; urgency=low + + The "synchronize severities with ftpmaster's Lintian checks" release. + + * Summary of tag changes: + + Removed: + - copyright-lists-upstream-authors-with-dh_make-boilerplate + + Promoted from experimental: + - spelling-error-in-binary + - template-uses-unsplit-choices + + * checks/binaries.desc: + + [RA] Remove experimental marker on spelling-error-in-binary. Change + severity to minor; spelling errors are minor bugs. + + [RA] library-in-debug-or-profile-should-not-be-stripped, + binary-or-shlib-defines-rpath, arch-dependent-file-in-usr-share, and + binary-in-etc, binary-file-compressed-with-upx, + binary-with-bad-dynamic-table, and embedded-zlib are now + serious since they can result in ftpmaster rejects. embedded-zlib, + missing-dependency-on-libc, and binary-or-shlib-defines-rpath are + possible rather than certain since overrides are allowed. + * checks/changelog-file: + + [FL] Avoid various Perl warnings which can be caused by + completely broken changelog files. + * checks/conffiles.desc: + + [RA] file-in-usr-marked-as-conffile is serious (ftpmaster reject). + Add a Policy reference and improve the description. + + [RA] non-etc-file-marked-as-conffile is serious/possible rather than + important/certain (ftpmaster reject unless overridden). + * checks/control-file{,.desc}: + + [RA] Say to use (= ${binary:Version}) to fix weak dependencies + between a library dev package and the shared library. Thanks, + Norbert Preining. (Closes: #548218) + + [ADB] Fix an uninitialised value warning when processing a + -dev package which has no Depends: fields. Thanks, Lucas + Nussbaum. + + [RA] build-info-in-binary-control-file-section and + debian-control-with-duplicate-fields are now serious (ftpmaster + reject). + + [RA] Allow -dev dependencies based on source:Upstream-Version or + source:Version if the -dev package is architecture: all. Thanks, + Mike Hommey. (Closes: #552729) + * checks/control-files.desc: + + [RA] not-allowed-control-file, control-file-has-bad-permissions, and + control-file-has-bad-owner are now serious (ftpmaster reject). + Mention that the config control file should also be executable. + * checks/copyright-file{,.desc}: + + [FL] Add special exception to no-copyright-file for perl. + See #522827 for discussion. (Closes: #553262) + + [FL] Extend match for exceptions to copyright-refers-to-symlink-license + to catch more ways to specify Perl's license. Patch from + Salvatore Bonaccorso. (Closes: #549596) + + [RA] copyright-lists-upstream-authors-with-dh_make-boilerplate + removed, as some package maintainers prefer to use Author(s) and + have filled out the copyright file. (Closes: #553469) + + [RA] Add additional dh_make template strings to the + helper-templates-in-copyright check, including the templates for + upstream author or copyright holder, which effectively replaces + copyright-lists-upstream-authors-with-dh_make-boilerplate with far + fewer false positives. + + [RA] Remove a duplication of the check for "This copyright info was + automatically extracted from the perl module" by dh-make-perl, and + ensure that this is copyright-contains-dh-make-perl-boilerplate and + not helper-templates-in-copyright, since it is lower severity. + + [RA] copyright-refers-to-old-directory, old-style-copyright-file, + usr-share-doc-symlink-without-dependency, + usr-share-doc-symlink-to-foreign-package, + copyright-refers-to-incorrect-directory, and + copyright-contains-dh_make-todo-boilerplate are now serious + (ftpmaster reject). copyright-contains-dh_make-todo-boilerplate is + possible (overrides allowed). Significantly improve the description + of usr-share-doc-symlink-without-dependency to mention that Lintian + doesn't look at transitive dependencies, and change to possible. + * checks/cruft: + + [FL] Add automake1.11 to list of autotools packages. Thanks, + Laurent Bigonville. (Closes: #551051) + + [RA] Allow CMakeCache.txt files in the debian directory. Thanks, + Aaron M. Ucko. (Closes: #553264) + * checks/debconf.desc: + + [FL] Remove experimental flag from template-uses-unsplit-choices. + This was only done to not disrupt the lenny freeze. Thanks, + Raphael Geissert. (Closes: #553487) + * checks/description.desc: + + [RA] Downgrade description-synopsis-might-not-be-phrased-properly to + minor and fix the cross-reference to point to devref, not Policy. + + [RA] description-is-dh_make-template is serious (ftpmaster reject). + * checks/etcfiles.desc: + + [RA] file-in-etc-not-marked-as-conffile is serious (ftpmaster + reject). + * checks/fields{,.desc}: + + [RA] Fix lib-recommends-documentation tag to correctly exclude dev + and doc packages. Patch from Stéphane Glondu. (Closes: #548210) + + [FL] Allow source formats 3.0 (quilt) and 3.0 (native). + (Closes: #552707) + + [RA] Multiple maintainer-* and uploader-* tags for syntax errors or + localhost addresses are now serious (ftpmaster reject), as are + section-is-dh_make-template and bad-relation. + * checks/files.desc: + + [RA] Add a note to wrong-file-owner-uid-or-gid that it's possible to + construct a Policy-compliant package that triggers this tag by + creating users in preinst, and asking package maintainers to file a + bug against Lintian if they encounter a case where this appears to + be necessary. + + [RA] package-contains-ancient-file, package-installs-python-pyc + symlink-has-too-many-up-segments, and package-contains-info-dir-file + are now serious (ftpmaster reject). + + [RA] dir-or-file-in-var-www is now serious/possible (ftpmaster + reject unless overridden). + + [RA] dir-or-file-in-{tmp,mnt,opt,srv} are now serious and have the + proper File Hierarchy Standard cross-references and descriptions. + + [RA] Don't suggest creating a symlink to the python-feedparser + library. Just use the normal Python import mechanism. Thanks, + Jakub Wilk. (Closes: #555617) + * checks/lintian.desc: + + [CW] Add lucid as an allowable distribution for Ubuntu, and remove + gutsy. + * checks/manpages.desc: + + [ADB] Mention in the description for manpage-has-errors-from-man + that Lintian passes "-E UTF-8" to man when running checks. Thanks, + Raphaël Hertzog. (Closes: #555320) + + [RA] Also suppress failures to break lines if the reported line is + a .UE macro, which marks the end of a block defining a URL. Thanks, + Martin Stigge. + * checks/patch-systems: + + [RA] Do not issue patch-system-but-no-source-readme for packages in + 3.0 (quilt) format. Patch from Stéphane Glondu. (Closes: #553207) + + [RA] Don't consider the "index <sha1>..<sha1>" line added by git + diff to be a patch description. (Closes: #553697) + + [RA] If a diff outside of the patch system only creates new files + that can be copied into place by the package build rules, suggest + just putting them in the debian directory rather than using a patch + system. Thanks, Charles Plessy. (Closes: #550924) + * checks/rules.desc: + + [RA] missing-build-dependency is now serious/possible (ftpmaster + reject unless overridden). + * checks/scripts{,.desc}: + + [RA] Add some more details to executable-not-elf-or-script about + possible causes and how to correct them. + + [RA] Suggest mkfifo in mknod-in-maintainer-script if the script was + creating a named pipe. + + [RA] Add rep. Thanks, Rodrigo Gallardo. (Closes: #510954) + + [RA] Add r. Thanks, Dirk Eddelbuettel. (Closes: #555278) + + [RA] Add rackup. Thanks, Sebastien Delafond. (Closes: #552013) + * checks/shared-libs: + + [FL] Add /usr/lib/python*/dist-packages to exception list for + incorrect-libdir-in-la-file. Thanks, Mathieu Trudel. + (Closes: #551134) + + * data/changelog-file/ubuntu-dists: + + [CW] Add lucid as an allowable distribution for Ubuntu, and remove + gutsy. + * data/doc-base/sections: + + [FL] Update from doc-base 0.9.5. Adds Typesetting section. + Thanks Julian Gilbey. (Closes: #552526) + * data/fields/architectures: + + [ADB] Refresh against unstable. + * data/fields/perl-provides: + + [ADB] Refresh against unstable. + * data/fields/virtual-packages: + + [ADB] Refresh against unstable. + * data/files/fonts: + + [ADB] Refresh against unstable. + + * man/lintian.1: + + [RA] Add additional explanation of experimental tags. Remove the + comment that pedantic tags are frequently wrong; that's not what + they're for. Improve the explanation for -i to not imply that + everything Lintian finds is a Policy violation. + + * private/refresh-perl-provides: + + [ADB] Special-case libio-compress-perl; the package contains the + modules which used to be in libio-compress-* but does not contain + IO::Compress. Patch from Niko Tyni. (Closes: #554393) + + -- Russ Allbery <rra@debian.org> Thu, 12 Nov 2009 23:36:33 -0800 + +lintian (2.2.17) unstable; urgency=medium + + * Urgency medium to beat libclass-accessor-perl into testing. + + * checks/control-file: + + [RA] Correctly exclude lib*-dev dependencies on other lib*-dev + packages that contain a version number. Thanks, Yves-Alexis Perez. + (Closes: #547773) + + * debian/control: + + [RA] Explicitly depend on libclass-accessor-perl, since we use it + directly. (libparse-debianchangelog-perl was implicitly ensuring it + was installed.) + + -- Russ Allbery <rra@debian.org> Tue, 22 Sep 2009 10:07:24 -0700 + +lintian (2.2.16) unstable; urgency=low + + * Summary of tag changes: + + Added: + - dh_undocumented-is-obsolete + - lib-recommends-documentation + - weak-library-dev-dependency + + * checks/control-file{,.desc}: + + [RA] Check that -dev packages depend on exactly the same version of + the shared library package. (Closes: #537768) + * checks/debhelper{,.desc}: + + [RA] Check for use of the obsolete dh_undocumented debhelper + program. Patch from Raphael Geissert. (Closes: #541977) + * checks/fields{,.desc}: + + [RA] Check for library packages that recommend documentation + packages. Patch from Raphael Geissert. (Closes: #527363) + + [RA] Fix regex for recognizing CVS repositories available via + anonymous ssh. Thanks, Thorsten Glaser. (Closes: #546927) + * checks/menus{,.desc}: + + [RA] Exclude examples from documentation that may require doc-base + registration. Thanks, Mikhail Gusarov. (Closes: #547345) + * checks/scripts{,.desc}: + + [RA] Add /usr/bin/ir as an interpreter provided by the ironruby + package. Thanks, Matthias Klose. (Closes: #547555) + + [ADB] Fix a typo in the description of example-script-uses-bin-env + (pth -> path). Thanks, Jakub Wilk. (Closes: #547670) + + * lib/Lintian/Output.pm: + + [ADB] Import Exporter before Class::Accessor to avoid accidentally + calling Class::Accessor::import(). Thanks, Niko Tyni. + (Closes: #547631) + * lib/Spelling.pm: + + [RA] Additional spelling corrections from Raphael Geissert. + + [RA] Return the count of spelling errors and support suppressing the + tag by passing undef for the tag name so that the spell checking + functions can be used to test tag descriptions for spelling errors. + (Closes: #546641) + + * reporting/html_reports: + + [RA] Include all tag types in the qa-list.txt file instead of just + errors and warnings. The new order of columns is errors, warnings, + info tags, pedantic tags, experimental tags, and overridden tags. + + -- Adam D. Barratt <adam@adam-barratt.org.uk> Mon, 21 Sep 2009 20:30:33 +0100 + +lintian (2.2.15) unstable; urgency=low + + The "BTS cleanup" release. + + * Summary of tag changes: + + Added: + - build-depends-on-non-build-package + - desktop-entry-limited-to-environments + - example-interpreter-in-usr-local (pedantic) + - example-interpreter-not-absolute + - example-script-without-interpreter + - example-script-uses-bin-env + - example-shell-script-fails-syntax-check (pedantic) + - example-wrong-path-for-interpreter + - example-unusual-interpreter (pedantic) + - global-data-in-games-directory + - init.d-script-does-not-provide-itself + - init.d-script-possible-missing-stop + - init.d-script-provides-virtual-facility + - init.d-script-should-depend-on-virtual-facility + - init.d-script-starts-in-stop-runlevel + - ocaml-custom-executable + + * checks/binaries{,.desc}: + + [RA] Add a new check for OCaml bytecode executables. Patch from + Stéphane Glondu. (Closes: #498138) + + [RA] Allow ldconfig to be statically linked. + * checks/changelog-file: + + [RA] Don't warn about a symlinked changelog file if the version + contains ubuntu. Thanks, Benjamin Drung. (Closes: #536434) + * checks/common_data.pm: + + [RA] Moved the essential package list to data/fields. + * checks/copyright-file: + + [RA] Use Lintian::Data to read the essential package list. + * checks/debhelper: + + [RA] Ignore whitespace when checking debian/compat, since Perl will + when converting it to a number. Thanks, Niels Thykier. + (Closes: #545430) + * checks/fields{,.desc}: + + [RA] Exclude base-files from the needlessly-depends-on-awk tag + and from the warning about depending on a virtual package without + a real package for the awk virtual package. + + [RA] Use Lintian::Data to read the essential package list. + + [RA] Stop allowing unversioned build dependencies on coreutils. The + migration from fileutils is long since finished. + + [RA] Check for build dependencies on packages that should not be + used for builds. (Closes: #540594) + + [RA] Allow architecture-dependent metapackages, since it can be + useful for metapackages to change dependencies based on the + architecture. Thanks, Vagrant Cascadian. (Closes: #544004) + * checks/files{,.desc}: + + [RA] Suppress non-standard-dir-perm for /tmp, /var/tmp, /var/local, + /var/lock, and /usr/src if they have their normal owner and + permissions. This suppresses some Lintian tags for base-files. + + [RA] Allow base-files to ship /var/backups and /var/local. + + [RA] Remove swfobject.js from the known packaged Javascript + libraries. The version in libjs-yui is old and the new version is + not packaged. Thanks, Giuseppe Iuculano. (Closes: #542046) + + [RA] Allow t1- and xfonts- as prefixes for font packages since the + font regex is also looking for Type 1 fonts. Thanks, Rogério + Brito. (Closes: #542389) + + [RA] Stop looking for *.pcf files outside font packages. The check + wasn't triggering since PCF files are always compressed, and the + situation for PCF font packages is more complex and not suitable for + the same check. + + [RA] Add mootools.js to embedded-javascript-library. Patch from + Marcelo Jorge Vieira (metal). (Closes: #545716) + + [RA] Check for putting data that should be in /usr/share under + /usr/share/games. Patch from Raphael Geissert. (Closes: #534486) + * checks/init.d{,.desc}: + + [RA] Add new checks for starting in runlevels 0 and 6, providing a + virtual facility, not providing a facility matching the script, not + depending on a virtual facility, and inconsistent stop runlevels. + Patch from Raphael Geissert. (Closes: #544221) + * checks/manpages{,.desc}: + + [ADB] Add HTTPS to the list of recognised protocols for URLs in manpages + which should not cause manpage-has-errors-from-man to be emitted. + (Closes: #543641) + + [RA] Document the MANWIDTH variable when running man by hand to + check for man page errors. (Closes: #542584) + + [RA] Adjust the exclusion of pod2man's .IX macro for the new + output format from groff. + * checks/menu-format{,.desc}: + + [RA] Add a pointer to desktop-file-validate in many of the tag + descriptions for desktop tags. (Closes: #539403) + + [RA] Mention in the description of desktop-entry-invalid-category + that whitespace isn't allowed and categories are case-sensitive. + + [RA] Add a new check for desktop entries that are limited to + multiple environments. NotShowIn was probably intended instead. + Thanks, Andrew Lee. (Closes: #537737) + * checks/rules: + + [RA] Anchor the dh_quilt regex to not trigger on commented-out + calls. Patch from Cesare Tirabassi. (Closes: #543259) + + [RA] When checking for out-of-order debhelper calls, take into + account the -p flag and only check within each package. Thanks, + Michael Koch. (Closes: #545219) + * checks/scripts{,.desc}: + + [RA] Don't warn about missing dependencies on programs if the + program invocation is followed by || true. Thanks, Aurelien Jarno. + (Closes: #541372) + + [RA] Permit diversion of a man page as long as the package is + installing a man page by the same name in the same numeric section, + even if the specific section is different. Thanks, Niko Tyni. + (Closes: #543781) + + [RA] Check example scripts for most of the same issues as scripts + elsewhere in the package, but report problems with a different set + of tags with info or pedantic severity. Patch from Damyan Ivanov. + (Closes: #543873) + + [RA] Add seed. Thanks, Josselin Mouette. (Closes: #543779) + + [RA] Add pike 7.8. Thanks, Magnus Holmgren. (Closes: #543262) + * checks/shared-libs: + + [RA] Allow ld.so to be executable. (Closes: #538716) + + * data/fields/essential: + + [RA] New list of essential packages. + + [RA] Add dash. (Closes: #541744) + + [RA] Add diffutils and remove diff. (Closes: #544277) + * data/fields/no-build-depends: + + [RA] New list of packages that should not be used as build + dependencies, currently containing only java-propose-classpath. + Thanks, Josh Triplett. + * data/files/fonts: + + [RA] Refresh and include Type 1 fonts and packages as well. + + * lib/Lintian/Collect/Binary.pm: + + [RA] Stop looking for the special OCaml symbol. OCaml custom + binaries are now detected another way. Patch from Stéphane Glondu. + * lib/Lintian/Schedule.pm: + + [RA] If declining to add a duplicate file to the Lintian check + schedule, return success to avoid a spurious error message. Patch + from Raphael Geissert. (Closes: #542072) + * lib/Spelling.pm: + + [RA] Add spelling correction for "aplication." (Closes: #546404) + + * private/refresh-fonts-data: + + [RA] To match what checks/files looks for, also look for *.pfb files + and packages starting with t1-. + + * reporting/{html_reports,templates/clean.tmpl}: + + [JP] Don't link to full report if the maintainer only has clean + packages. (Closes: #545781) + + -- Russ Allbery <rra@debian.org> Mon, 14 Sep 2009 00:06:01 -0700 + +lintian (2.2.14) unstable; urgency=low + + The "Policy 3.8.3" release. + + * Summary of tag changes: + + Added: + - debhelper-overrides-need-versioned-build-depends + - maintainer-script-modifies-ld-so-conf + - missing-dependency-on-install-info + - multiple-distributions-in-changes-file + - patch-system-but-no-source-readme + - package-modifies-ld.so-search-path + - possible-documentation-but-no-doc-base-registration + + Removed: + - file-in-usr-something-x11-without-pre-depends + + Renamed: + - build-depends-on-x-metapackage => build-depends-on-metapackage + - depends-on-x-metapackage => depends-on-metapackage + + * checks/changelog-file.desc: + + [RA] Document the "Old Changelog" way of marking historic changelog + entries that shouldn't be syntax-checked in the long description for + syntax-error-in-debian-changelog. (Closes: #541119) + * checks/debconf: + + [CW] Permit Help: in .templates files, which is supported as of + cdebconf 0.143 and used in the installer. + * checks/debhelper{,.desc}: + + [CW] Check for the use of debhelper override targets, which require + debhelper 7.0.50. + + [RA] Don't warn about recently deprecated debhelper commands in + possibly optional portions of debian/rules. (Closes: #537607) + + [RA] Don't warn about missing build dependencies for commands in + possibly optional portions of debian/rules. (Closes: #537608) + * checks/description: + + [RA] Decode descriptions from UTF-8 before checking length. Thanks, + Charles Plessy. (Closes: #537207) + + [RA] Avoid duplicated word false positives from words that contain + punctuation. Thanks, Nelson A. de Oliveira. (Closes: #540348) + * checks/fields{,.desc}: + + [FL] packages named lib*-camlp4-dev should be in section ocaml + + [RA] Move debian/rules parsing to check build dependencies to + checks/rules. + + [RA] Allow any package to be in section oldlibs without triggering + warnings. Thanks, Rene Engelhard. (Closes: #537606) + + [RA] Lower wrong-section-according-to-package-name to possible. + + [RA] Recognize packages as metapackages even if they contain Lintian + overrides, thus fixing two packages that added a Lintian override + for having dependencies only permitted for metapackages, which in + turn ensures that they keep getting that tag. + + [RA] Recognize packages as metapackages even if they contain files + in /usr/share/cdd. + + [RA] Renamed the tags for depending or build-depending on X + metapackages to make them generic and load the list of metapackages + from data/fields/metapackages. Always consider known metapackages + to be metapackages for the dependency check. + + [RA] Don't require a tilde after lp: in bzr URLs. Thanks, Benjamin + Drung. (Closes: #541143) + + [RA] Fix spelling of xfonts-encodings in the xfont dependency + exception. (Closes: #540425) + + [RA] Allow :ext: CVS repository references if the username looks + like it won't require authentication. Thanks, Thorsten Glaser. + * checks/files{,.desc}: + + [CW] /var/lock and /var/run are not temporary filesystems in d-i, so + don't emit errors about their use in udebs. + + [RA] Warn about packages containing files in /etc/ld.so.conf.d that + don't appear to be part of libc. Policy 3.8.3 no longer permits + modification of ld.so.conf. + + [RA] Remove the check for x11-common pre-depends before installing + files in /usr/{include,lib}/X11. Policy 3.8.3 removes this + requirement. + * checks/infofiles{,.desc}: + + [RA] Add missing leading * to example info directory entry. + + [RA] Check that packages with info files depend on dpkg or + install-info as recommended by Policy 3.8.3. + * checks/lintian.desc: + + [RA] Expand multiple-distributions-in-changes-file description and + add a reference to the Policy section. Change certainty to + possible, since this may be fine for non-Debian uploads. + * checks/menus{,.desc}: + + [RA] Add info-level tag for packages with apparent HTML or PDF + documentation in /usr/share/doc but no doc-base registration. Based + on a patch from Raphael Geissert. (Closes: #469018) + * checks/patch-systems{,.desc}: + + [RA] Check for a patch system in use but no debian/README.source. + Based on a patch from Jonathan Yu. (Closes: #537969) + * checks/po-debconf: + + [CW] Don't emit not-using-po-debconf if all templates are marked "for + internal use". (Closes: #492626) + * checks/rules{,.desc}: + + [RA] Moved checking of build dependencies based on programs invoked + in debian/rules from checks/fields to here. + + [RA] Expand Lintian's understanding of which targets are run for the + clean target to include targets invoked via pattern variable + expansion. (Closes: #536405) + + [RA] Make the handling of make variables as rule names more robust + and avoid generating invalid regexes. + + [RA] Packages including /usr/share/mozilla-devscripts makefile + fragments in debian/rules must Build-Depend on mozilla-devscripts. + Thanks, Benjamin Drung. (Closes: #541144) + * checks/scripts: + + [RA] Fix parsing of dpkg-divert commands diverting a file ending in + a number, followed by a redirection. Thanks, Andreas Beckmann. + (Closes: #534942) + + [RA] Warn about maintainter scripts that modify /etc/ld.so.conf. + Policy 3.8.3 no longer permits this. + + [RA] Avoid command-with-path-in-maintainer-script false positives + with backtick expressions as arguments to commands. Thanks, Stefan + Fritsch. (Closes: #536397) + * checks/watch-file: + + [RA] Fix false positives in debian-watch-file-should-mangle-version + when an upstream version is specified in the watch file and give the + line number of mangling issues. Patch from Raphael Geissert. + (Closes: #536404) + + * data/debhelper/*: + + [ADB] Refresh against unstable. + * data/fields/architectures: + + [RA] Refresh architecture list against dpkg 1.15.3.1, adding avr32 + and kopensolaris. (Closes: #538055) + * data/fields/metapackages: + + [RA] New file listing known metapackages that should not be used in + Depends or Build-Depends. + + [RA] Add mono-complete. (Closes: #538929) + * data/fields/virtual-packages: + + [ADB] Refresh against unstable. + * data/files/fonts: + + [ADB] Refresh against unstable. + * data/standards-version/release-dates: + + [RA] Add the release date for Policy 3.8.3. + + * debian/control: + + [RA] Update standards version to 3.8.3 (no changes required). + + * frontend/lintian: + + [RA] Enable multiple-distributions-in-changes-file now that Policy + documents that this does not work with the Debian archive. + * frontend/lintian-info: + + [ADB] Correctly parse Lintian output for pedantic tags. Thanks, James + Vega. + + * lib/Spelling.pm: + + [RA] Add spelling correction for precedence. + + * reporting/html_reports: + + [JP] Accumulate tag-specific statistics in a new variable, and pass it + to the appropriate templates. + * reporting/templates/tags{,-severity}.tmpl: + + [JP] Remove duplicate code to calculate tag statistics. + + * t/runtests: + + [RA] Update standards version to 3.8.3. + + -- Russ Allbery <rra@debian.org> Sat, 15 Aug 2009 22:47:44 -0700 + +lintian (2.2.13) unstable; urgency=low + + The "triggerized install-info" release. + + * Summary of tag changes: + + Added: + - install-info-used-in-maintainer-script + - package-contains-info-dir-file + + Removed: + - info-documents-not-removed + - install-info-not-called-with-quiet-option + - missing-comma-after-substvar + - postrm-calls-install-info + - preinst-calls-install-info + + * checks/control-file{,.desc}: + + [RA] Rework missing-separator-between-lines to only include two + specific package stanzas in the extra tag data and not include + newlines. Generalize it to also detect missing commas between + substvars, replacing missing-comma-after-substvar. + * checks/cruft{,.desc}: + + [RA] Don't warn about outdated libtool if the package build-depends + on libtool. Thanks, Kurt Roeckx. (Closes: #534134) + + [RA] Fix typo in *-contains-ht-tags-file description. Patch from + Peter Pentchev. (Closes: #534218) + * checks/fields: + + [ADB] If the Debian r-cran makefile include is used in the rules file, + cdbs, debhelper and r-base-dev are required in Build-Depends. Thanks, + Charles Plessy. (Closes: #534684) + + [RA] Allow variable settings before ant, dpatch, and dh when + checking debian/rules for dependencies. Thanks, Ryan Niebur. + (Closes: #535432) + * checks/files{,.desc}: + + [RA] Allow non-core Python packages to install files into + /usr/lib/python*/dist-packages, the extension location for Python + 2.6 and later. Thanks, Julian Andres Klode. (Closes: #534212) + + [RA] Check for /usr/share/info/dir files included in the package. + Thanks, Bas Zoetekouw. (Closes: #535566) + * checks/infofiles{,.desc}: + + [RA] Ignore dir files; they're a different error that's now caught + by checks/files. + + [RA] Remove all checking of maintainer scripts, since info dir + entries are now handled with triggers. Now always warn of info + files without INFO-DIR-SECTION, even if install-info were called + with a --section argument. Warn of info files without a DIR-ENTRY + section. Thanks, Raphaël Hertzog. (Closes: #534640) + + [RA] Fix a bug in the detection of bad info file extensions that + missed extensions containing the string "info". + + [RA] Improve the long descriptions of tags about compression of info + documents. + * checks/init.d: + + [RA] Take into account dangling symlinks in /etc/init.d. Patch from + Raphael Geissert. (Closes: #534139) + + [RA] Don't require symlink init scripts to be conffiles and realize + they are included in the package even if the symlink is dangling. + Thanks, Steve Langasek. (Closes: #534326) + * checks/manpages: + + [RA] Don't warn about hyphens used as minus signs inside draft mode, + since \- cannot be used there. Based on a patch by Gennaro Oliva. + (Closes: #535308) + * checks/patch-systems: + + [RA] Don't include the package name as extra data in tags that are + only issued for source packages. Patch from Raphael Geissert. + * checks/scripts{,.desc}: + + [RA] Lower certainty of read-in-maintainer-script to possible and + mention false positives. Thanks, Raphaël Hertzog. (Closes: #534276) + + [RA] Allow for output redirection when parsing diversions in + maintainer scripts. Thanks, Andreas Beckmann. (Closes: #534942) + + [ADB] Detect the use of the "source" bashism when the sourced filename + contains a tilde or consists of a single character. Thanks, Raphael + Geissert and Ryan Niebur. + + [RA] Avoid a false positive in the bashism check for trap with + signal numbers when the trap command contains a number. Thanks, + Julien Cristau. (Closes: #534580) + + [RA] Check for any maintainer script running install-info, since + this is now handled with triggers. + * checks/watch-file: + + [RA] Use a consistent way of displaying the line number of a problem. + + * collection/strings: + + [ADB] Handle the fact that, when Lintian is run as root, the output of + "file" on set[gu]id files may include the fact that they are set[gu]id. + Thanks, Peter Pentchev. (Closes: #533618) + + * lib/Read_pkglists.pm: + + [RA] Increment the package list format and expect the archive area + as an additional argument. Patch from Raphael Geissert. + * lib/Spelling.pm: + + [RA] Add changes misspelling. + + [RA] Fix correction for endianness. Thanks, Raphael Geissert. + (Closes: #535582) + + [RA] Only strip most punctuation from the end of each word, not from + anywhere in the string. We don't want to strip the period from + res.size. Thanks, Zack Weinberg. (Closes: #534234) + * lib/Tags.pm: + + [RA] Replace all newlines in tag data with \n, not just the first. + (Closes: #534141) + + * man/lintian.1: + + [RA] The archive area may be a comma-separated list of areas. Patch + from Raphael Geissert. + + * private/update-coverage: + + [RA] Provide a breakdown of tags only covered in the legacy test + suite by test name. + + * reporting/html_reports: + + [RA] Change area back to section in the loop for generating the + package index pages to be consistent with the page template. + + [RA] Allow for multiple archive areas in the front page summary. + + [RA] Add the archive area to the tag information. + * reporting/templates/maintainer.tmpl: + + [RA] Include the archive area in the source package heading if it's + not main. Include the archive area in the binary package heading if + it's different than the source package archive area. + + * unpack/list-{bin,src,udeb}pkg: + + [RA] Collect information from multiple archive areas and include the + archive area in the package list. Patch from Raphael Geissert. + (Closes: #516530) + + -- Russ Allbery <rra@debian.org> Thu, 09 Jul 2009 09:11:14 -0700 + +lintian (2.2.12) unstable; urgency=low + + The "Policy 3.8.2" release. + + * Summary of tag changes: + + Added: + - debug-symbols-directly-in-usr-lib-debug + - dh_desktop-is-deprecated + - dh_scrollkeeper-is-deprecated + - file-in-discouraged-x11-font-directory + - file-in-unknown-x11-font-directory + - init.d-script-sourcing-without-test + - init.d-script-uses-usr-interpreter + - missing-separator-between-items + - package-contains-multiple-dpi-fonts + - package-mixes-misc-and-dpi-fonts + + Removed: + - missing-comma-between-items + + * checks/binaries{,.desc}: + + [RA] Diagnose installing detached debugging symbols directly in + /usr/lib/debug instead of in an appropriate subdirectory. Patch + from Raphael Geissert. (Closes: #532394) + * checks/control-file{,.desc}: + + [ADB] Allow both comma and pipe as valid separators between items when + detecting whether a separator has been omitted. As a consequence, + rename the missing-comma-between-items tag to the more descriptive + missing-separator-between-items. Based on a patch by Rafael + Laboissiere. (Closes: #533202) + + [RA] Allow a newline immediately after the field name, since this + does work with fields that can be wrapped (such as Build-Depends). + Thanks, Stephane Glondu. (Closes: #528377) + * checks/debhelper{,.desc}: + + [RA] Issue package-lacks-versioned-build-depends-on-debhelper always + if the debhelper dependency isn't properly versioned, not just for + compat levels newer than 5. (Closes: #522384) + + [RA] Warn about dh_desktop calls since the command is now + deprecated. Thanks, Nelson A. de Oliveira. (Closes: #531164) + + [RA] Include the line number in deprecated and obsolete dh_* command + tags. + + [ADB] Warn about dh_scrollkeeper calls since the command is now + deprecated. + * checks/fields{,.desc}: + + [RA] Update source-field-malformed to serious and don't allow + capital letters in source package names. Check source package names + for validity even when checking only source packages to be sure the + package name is syntactically valid. + + [RA] Permit quilt in Build-Depends for arch-independent packages if + dh_quilt_* programs are called in the clean target. Thanks, Daniel + Moerner. (Closes: #528003) + + [RA] If one of the gnome-pkg-tools makefile fragments is included, + gnome-pkg-tools is allowed and required in Build-Depends. Thanks, + Emilio Pozuelo Monfort. (Closes: #532892) + * checks/files{,.desc}: + + [RA] Diagnose files installed into discouraged or unknown + subdirectories of /usr/share/fonts/X11 per Policy 11.8.5. + + [RA] Diagnose packages including both 100dpi and 75dpi fonts or + mixing misc and Xdpi fonts. + * checks/init.d{,.desc}: + + [RA] Also check unregistered init scripts for other syntax problems. + Patch from Raphael Geissert. + + [RA] Don't think required init.d options are implemented just + because they occur in a comment. Patch from Raphael Geissert. + + [RA] Diagnose init scripts sourcing /etc/default files without + checking first whether they're present. Patch from Raphael + Geissert. (Closes: #533571) + + [RA] Diagnose init scripts that use interpreters in /usr. Patch + from Raphael Geissert. + * checks/menus{,.desc}: + + [RA] Read menu-methods files from the collected location instead of + the unpacked binary package and change the unpack level of menus to + 1. Patch from Raphael Geissert. + * checks/scripts{,.desc}: + + [RA] Per Policy 3.8.2, read-in-maintainer-script is now of serious + severity. + + [RA] Catch obsolete dpkg checks in more contexts. + + [RA] Check for invocations of fc-cache in maintainer scripts. + Thanks, Josselin Mouette. (Closes: #532984) + + [RA] Catch more commands with paths in maintainer scripts. Thanks, + Raphael Geissert. + + * collection/menu-files{,.desc}: + + [RA] Collect menu-methods as well as menu files. Refactor to remove + code duplication. Patch from Raphael Geissert. + + * data/standards-version/release-dates: + + [RA] Add the release date for Policy 3.8.2. + + * debian/control: + + [RA] Update standards version to 3.8.2 (no changes required). + + * t/runtests: + + [RA] Update standards version to 3.8.2. + + -- Russ Allbery <rra@debian.org> Thu, 18 Jun 2009 17:19:03 -0700 + +lintian (2.2.11) unstable; urgency=low + + * Summary of tag changes: + + Added: + - missing-comma-between-items + - non-conf-file-in-modprobe.d + - non-free-flash + - section-area-mismatch + + Removed: + - section-category-mismatch + + * checks/binaries{,.desc}: + + [ADB] Extend the description of spelling-error-in-binary to mention + that misspelt words are always output in lower case, and give some + suggestions for finding the error oneself. Thanks, Raphael Geissert + and Paul Gevers. (Closes: #526435) + + [RA] Downgrade certainty of tags for which we recommend overrides. + Patch from Raphael Geissert. (Closes: #530008) + + [ADB] Don't consider a 64-bit kernel module shipped in a binary + package for the corresponding 32-bit architecture to be "from other + architecture". (Closes: #532013) + + [ADB] When checking for binaries which define rpaths, don't exclude + rpaths of /lib and /usr/lib, even if the directory is shipped by the + package. (Closes: #532508) + * checks/control-file{,.desc}: + + [ADB] Refer to main, contrib and non-free as archive areas rather + than categories. + + [ADB] Rename section-category-mismatch to section-area-mismatch. + + [ADB] Update the description of section-area-mismatch to clarify + that source packages in main may build binary packages in contrib. + + [RA] Skip duplicate description checks for udeb packages. Thanks, + Thijs Kinkhorst. (Closes: #529924) + + [ADB] Warn about missing spaces between items in a control file which + have been omitted when spanning the dependency line over multiple + lines. Based on a patch by Damyan Ivanov. (Closes: #516706) + * checks/cruft{,.desc}: + + [RA] Downgrade certainty of tags for which we recommend overrides. + Patch from Raphael Geissert. + + [RA] When looking for tar errors from dpkg-source, ignore gpgv + output as well as gpg output. (Closes: #533116) + * checks/debhelper.desc: + + [ADB] Correct Unpack-Level to 1. Thanks, Raphael Geissert. + * checks/fields{,.desc}: + + [RA] Allow python << dependencies without Python-Version if the + package depends on python-support, which doesn't use the + Python-Version field. Adjust the long description of + old-versioned-python-dependency to make it clearer it only applies + to python-central. Thanks, Bernd Zeimetz. (Closes: #525997) + + [ADB] Refer to contrib and non-free as "archive areas" rather than + distributions. + + [ADB] Accept Architecture fields in .dsc files which contain both + "all" and one or more binary architectures. (Closes: #530565) + + [ADB] If a ruby-pkg-tools make include is used in a rules file, + require a build-dependency on that package. Patch by Ryan Niebur. + (Closes: #532837) + + [ADB] Replace a misplaced "build-depends" with the correct "depends" + in the description of the "missing-build-dependency" tag. Patch by + Ryan Niebur. (Closes: #532838) + * checks/files{,.desc}: + + [RA] Downgrade symlink-has-double-slash and symlink-ends-with-slash + to minor. These are violations of a Policy should, but are unlikely + to cause practical problems. (Closes: #527843) + + [RA] Explain in the symlink-contains-spurious-segments description + that these segments can cause problems in the presence of symlinked + directories. + + [RA] Downgrade certainty of tags for which we recommend overrides. + Patch from Raphael Geissert. + + [ADB] Add a new tag indicating that the filename of a Flash file + it may be a known non-free file. Patch by Raphael Geissert. + (Closes: #516250) + + [ADB] Check for files in /etc/modprobe.d with filenames which do not + end in ".conf". Based on a patch by Raphael Geissert. + (Closes: #521595) + * checks/manpages: + + [ADB] Remove support for detecting whether man supports the --warnings + flag. The version of man shipped in lenny supports it so the + compatibility code is no longer required. + * checks/menu{s,-format}.desc: + + [ADB] Correct Unpack-Level to 2. Thanks, Raphael Geissert. + * checks/po-debconf.desc: + + [ADB] Correct Unpack-Level to 1. Thanks, Raphael Geissert. + * checks/scripts: + + [ADB] Do not include an empty alternative in the list of suggested + dependencies for an interpreter when the interpreter may be + unversioned but the dependency may not. For example, pikeX.Y provide + /usr/bin/pike and /usr/bin/pikeX.Y but there is no "pike" package. + + [ADB] Add ksh and zsh to the list of packages providing the /bin/ksh + alternative. Thanks, Guillaume Delacour. (Closes: #529457) + + [ADB] Detect shellscript wrappers which embed a call to "exec" in a + conditional statement. Thanks, Raphael Geissert. + + [ADB] Fix a syntax error in the shellscript wrapper detection that lead + to it returning a part of the wrapper script rather than a simple + success value. + + [ADB] Remove "\\" from the list of unsafe backslash escapes in the + shell script checks. POSIX does not prohibit its use and it works in + all shells in Debian. + + [RA] Add escript to the list of known interpreters. Thanks, Nicholas + Jefferson. (Closes: #532158) + * checks/shared-libs.desc: + + [RA] Downgrade certainty of tags for which we recommend overrides. + Patch from Raphael Geissert. + + * data/debhelper/{dh_commands,dh_packages,maint_commands}: + + [ADB] Refresh against unstable. (Closes: #530622) + * data/fields/{perl-provides,virtual-packages}: + + [ADB] Refresh against unstable. + * data/files/fonts: + + [ADB] Refresh against unstable. + + * debian/control: + + [ADB] Depend on libapt-pkg-perl. + * debian/rules: + + [ADB] Re-order the commands in the runtests target so that the + "new style" testset is run first, as it now also tests the harness. + Thanks, Raphael Geissert. + + * frontend/lintian: + + [ADB] Rename the --section command line option to --area in line + with Policy's use of the term "archive area" to describe main, etc. + Also rename the corresponding environment and configuration file + variables. In each case, the original name is permitted as a + synonym. + + [ADB] Reset the timezone in the environment before running any + tests so that tar's "implausibly old timestamp" errors use a + consistent epoch. Thanks, Raphael Geissert. + + * lib/Lintian/*.pm: + + [ADB] Fix a few errors and add missing example variable declarations + in POD synopsis example sections. Patch by Raphael Geissert. + * lib/Lintian/Relation/Version.pm: + + [ADB] Rework to use libapt-pkg-perl rather than calling "dpkg + --compare-versions" repeatedly and keeping a potentially large + cache of previous results. + * lib/Lintian/Schedule.pm: + + [ADB] Correctly display package versions of 0 in status messages. + (Closes: #532550) + * lib/scan_script.pl: + + [RA] Removed. A start at parsing shell scripts that was never + finished and wasn't usable in its current form. + * lib/Spelling.pm: + + [ADB] Add a number of new corrections from Raphael Geissert. + (Closes: #526019) + + * man/lintian.1: + + [ADB] Document the new --area command line option and update the + documentation of --section to indicate that it is deprecated in + favour of the new option. + + * private/refresh-debhelper-data: + + [ADB] Update the contents file parsing to handle the fact that + there are now section names containing hyphens. + + [ADB] Use LC_ALL=C to preserve sort order regardless of the user's + locale. + * private/refresh-fonts-data: + + [ADB] Use LC_ALL=C to preserve sort order. + * private/refresh-perl-provides: + + [ADB] Special-case libio-compress-zlib-perl to account for the fact + that it does not contain IO::Compress::Zlib. Patch by Niko Tyni. + (Closes: #528744) + + * reporting/config: + + [ADB] Use $LINTIAN_AREA rather than $LINTIAN_SECTION in the default + configuration file. + * reporting/harness: + + [ADB] Use the new $LINTIAN_AREA variable to determine which packages + to process. + + [RA] Include pedantic tags in lintian.log, but don't report them on + the web site. Patch from Raphael Geissert. + * reporting/html_reports: + + [ADB] Use the new $LINTIAN_AREA variable to determine which archive + area we are generating reports for, and pass it through to templates + where relevant. + * reporting/templates/index.tmpl: + + [ADB] Modify the statistics table to refer to archive area rather + than section. + + * t/runtests: + + [ADB] Run the test scripts before all other tests as they now test + some fundamentals which are required to pass in order for the harness + itself to work. Thanks, Raphael Geissert. + + [RA] Run prove recursively in the scripts directory. + + [RA] Skip scripts tests if a tag was specified. Patch from Raphael + Geissert. + * t/scripts/minimum-version.t: + + [ADB] New script by Raphael Geissert to ensure that all our scripts + can run with Perl 5.8.0. + * t/scripts/needs-info.t: + + [ADB] Renamed to needs-info-exists.t. + * t/scripts/needs-info-missing.t: + + [ADB] New script by Raphael Geissert to check whether scripts using + Lintian::Collect{,::*} declare the required collection scripts in + Use-Info. + * t/scripts/pod-synopsis.t: + + [ADB] New script by Raphael Geissert to ensure that example code in + module's POD synopsis section is valid. + * t/scripts/{static-lab,tags}.t: + + [ADB] New test scripts splitting some of the "harness checking" out + of the runtests script. Patch by Raphael Geissert. + * t/scripts/strict.t: + + [ADB] New script by Raphael Geissert to check that all our scripts + "use strict". + * t/scripts/unpack-level.t: + + [ADB] New script by Raphael Geissert to check that all checks scripts + declare the correct unpack level. + * t/scripts/version.t: + + [ADB] New script to test Lintian::Relation::Version. + * t/tests/lintian-overrides: + + [ADB] New testset for the {malformed,unused}-override tags. Patch by + Raphael Geissert. + + * unpack/list-{bin,src,udeb}pkg: + + [ADB] Use the new $LINTIAN_AREA variable to determine which package + list to read. + + -- Russ Allbery <rra@debian.org> Sun, 14 Jun 2009 18:40:18 -0700 + +lintian (2.2.10) unstable; urgency=low + + The "do something useful with tar errors, plus bug fixes" release. + + * Summary of tag changes: + + Added: + - ancient-autotools-helper-file + - tar-errors-from-control + - tar-errors-from-data + - tar-errors-from-source + + Removed: + - desktop-mimetype-without-update-call + - package-uses-breaks + + * checks/conffiles: + + [RA] Fix a false negative in duplicate-conffile by improving + normalization of conffiles before comparing and restructure the + check a bit. Patch from Raphael Geissert. + * checks/cruft{,.desc}: + + [RA] Split outdated-autotools-helper-file into ancient- and + outdated-, preserving the 2004 date for ancient and checking for at + least June of 2006 for outdated. The latter is needed for AVR32. + Thanks, Bradley Smith. (Closes: #525280) + + [RA] Set certainty for ancient- and outdated-autotools-helper-file + to possible instead of certain. Some packages contain extra copies + that aren't used during the Debian package build. + + [RA] Document that cdbs still requires the autotools-dev build + dependency to update config.{sub,guess} at build time. + + [RA] Report errors from tar or dpkg-source when listing or unpacking + the source package, skipping and suppressing some harmless errors. + * checks/deb-format{,.desc}: + + [RA] Report tar errors from listing or unpacking the control or data + members of the package, suppressing uninteresting errors or errors + that are caught some other way. (Closes: #367327) + + [CW] Ubuntu's archive allows packages whose data members are + compressed with lzma. + * checks/etcfiles.desc: + + [RA] Remove unused Needs-Info: etcfiles. Thanks, Raphael Geissert. + * checks/fields{,.desc}: + + [RA] Remove package-uses-breaks. dpkg in stable now supports it. + Thanks, Julian Andres Klode. (Closes: #522660) + + [RA] Fix Needs-Info. Thanks, Raphael Geissert. + * checks/files{,.desc} + + [ADB] Anchor the regular expression for the "gz-file-not-gzip" tag so + that files with names that contain ".gz" but do not end in that string + are not flagged. Patch by Raphael Geissert. (Closes: #523352) + + [RA] Remove desc for removed possible-name-space-pollution tag. + * checks/manpages.desc: + + [RA] Remove desc for removed no-manpage-in-correct-directory tag. + * checks/menu-format{,.desc}: + + [RA] Remove desktop-mimetype-without-update-call. This is now + handled by triggers. Thanks, Chow Loong Jin. (Closes: #525133) + + [RA] Remove desc for removed menu-item-adds-to-root-menu tag. + * checks/patch-systems.desc: + + [RA] Mention that empty dpatch patch lists or quilt series files + will disappear in a non-native source package and hence produce the + warning about a missing file. (Closes: #525005) + * checks/scripts{,.desc}: + + [RA] Handle command delimiters, $() expressions, and braces and + parentheses in the checks for correct diversion handling. Patch + from Raphael Geissert. (Closes: #523708) + + [RA] Clarify the php-script-but-no-phpX-cli-dep description to + explain why it warns about a php4-cli dependency. (Closes: #525484) + + [RA] Add jruby1.2 and allow an unversioned jruby reference. Thanks, + Sebastien Delafond. (Closes: #523001) + * checks/shared-libs{,.desc}: + + [RA] Strip trailing slashes from the libdir path in *.la files + before checking it for correctness. Thanks, Patrick Matthäi. + (Closes: #524228) + + [RA] Special-case *.la files for Python modules installed in + /usr/share/pyshared, since they're moved during install. Thanks, + Jonas Smedegaard. (Closes: #522623) + + [RA] Requires unpack level 2 to read the *.la files. + * checks/standards-version.desc: + + [ADB] Fix a couple of spelling mistakes ("verison" -> "version"). + Thanks, Guillaume Delacour. (Closes: #522643) + + * collection/file-info: + + [ADB] Call "file" with "--" to ensure that any filenames in the package + that start with "-" aren't interpreted as options to "file". Thanks, + Trent W. Buck. (Closes: #523408) + * collection/strings: + + [RA] Make strings gathering on ELF binaries robust against file + names containing "ELF" or a colon. Patch from Raphael Geissert. + + * doc/desc-files: + + [ADB] Mention the new Standards-Version field available for tests. + Patch by Raphael Geissert. + + * frontend/lintian: + + [RA] Stop reporting $! when unpack scripts fail. It will almost + never contain anything useful. + + [RA] Move override parsing to the Tags module. Patch from Raphael + Geissert. + + * lib/Lintian/Collect/Binary.pm: + + [CW] Add missing 'use Parse::DebianChangelog'. + * lib/Lintian/Output.pm: + + [RA] With --color=html, display the HTML rendering of the long tag + description rather than the text version and escape HTML + metacharacters in the tag information. Patch from Raphael Geissert. + (Closes: #522527) + * lib/Lintian/Relation.pm: + + [ADB] Fix a spelling mistake ("verison" -> "version"). Thanks, + Guillaume Delacour. + * lib/Spelling.pm: + + [RA] Add spelling correction for "verison". + * lib/Tags.pm: + + [RA] Add a function to parse overrides, moved from frontend/lintian. + Patch from Raphael Geissert. + + * t/runtests: + + [ADB] Allow a default Policy version to be specified in template files. + This avoids the need to update every test each time a new Policy version + is released, unless one specifically wishes to keep a particular test + using an older version. Patch by Raphael Geissert. + + [ADB] Use extended regular expressions in "post_test" sed scripts. + Patch by Raphael Geissert. + * t/tests/README: + + [ADB] Mention the new Standards-Version field available for tests. + Patch by Raphael Geissert. + + * unpack/unpack-binpkg-l1: + + [RA] Save control unpack errors in control-errors, control listing + errors in control-index-errors, and package listing errors in + index-errors for later processing by deb-format. (Closes: #522530) + * unpack/unpack-binpkg-l2: + + [RA] Save data unpack errors in unpacked-errors for later processing + by deb-format. + * unpack/unpack-srcpkg-l1: + + [RA] Save source listing errors in index-errors for later processing + by cruft. Don't fail the unpack if tar exits with non-zero status. + star-created archives will cause tar to blow up, but the listing + and unpacking still works. + * unpack/unpack-srcpkg-l2: + + [RA] Save source unpack errors in unpacked-errors for later + processing by cruft. + + -- Russ Allbery <rra@debian.org> Mon, 27 Apr 2009 19:28:02 -0700 + +lintian (2.2.9) unstable; urgency=low + + * Summary of tag changes: + + Added: + - wrong-section-according-to-package-name + - vcs-field-uses-not-recommended-uri-format + - vcs-field-uses-unknown-uri-format + + Removed: + - dev-package-should-be-section-libdevel + - doc-package-should-be-section-doc + - perl-package-should-be-section-perl + - python-package-should-be-section-python + + * checks/deb-format.desc: + + [RA] In the tag description, the first required element should be + debian-binary, not debian-control. Thanks, Judit Foglszinger. + (Closes: #521012) + * checks/fields{,.desc}: + + [FL] Update list of valid sections. (Closes: #521782) + + [RA] Fix dbg-package-missing-depends check when the dependency is + followed by a comma. (Closes: #520640) + + [FL] Add package name checks for the new sections. Move all package + section checks to one tag "wrong-section-according-to-package-name" + instead of one tag per section. + + [FL] Add checks for well formatted Vcs-* fields. (Closes: #517635) + * checks/lintian.desc: + + [CW] Add karmic as an allowable distribution for Ubuntu (thanks, Soren + Hansen). + * checks/scripts: + + [RA] Fix a hash collision that could suppress a correct + remove-of-unknown-diversion tag if the diversion was removed in + multiple maintainer scripts including postrm. + + [RA] Handle variables in maintainer scripts when adding and removing + diversions. Patch from Raphael Geissert. (Closes: #519268) + * checks/shared-libs: + + [RA] Correctly handle SONAMEs in symbols files that contain regex + metacharacters like +. Thanks, Daniel Kobras. (Closes: #521621) + + * collection/file-info: + + [RA] Use chomp instead of chop to remove newlines. + + [RA] Ignore error returns from file. file returns non-zero if it + can't parse some files, but the resulting output is still fine for + Lintian's purposes. Thanks to Raphael Geissert for the problem + identification. (Closes: #521257) + + * data/changelog-file/ubuntu-dists: + + [CW] Add karmic as an allowable distribution for Ubuntu (thanks, Soren + Hansen). + + * debian/rules: + + [RA] Remove and recreate debian/tests before runtests or check-tag to + avoid spurious test failures from lingering old files. + + * frontend/lintian: + + [RA] Belatedly bump the lab format version for many recent changes. + + * lib/Lintian/Command.pm: + + [RA] In kill, initialize the result status and use &&= instead of |=. + Partly addresses #521257. + + * unpack/unpack-srcpkg-l1: + + [RA] Better anchor the regexes that parse the file list in a source + package. + + -- Russ Allbery <rra@debian.org> Fri, 03 Apr 2009 11:49:06 -0700 + +lintian (2.2.8) unstable; urgency=low + + The "Policy 3.8.1" release. + + * Summary of tag changes: + + Added + - dir-or-file-in-var-lock + - dir-or-file-in-var-run + + * checks/changelog-file.desc: + + [RA] Using UTF-8 is now a Policy must and hence serious. + * checks/control-file.desc: + + [RA] Using UTF-8 is now a Policy must and hence serious. + * checks/files{,.desc}: + + [CW] Emit dir-or-file-in-var-lock or dir-or-file-in-var-run, as + appropriate, for packages shipping directories or files in /var/lock + or /var/run. See policy bug #514326. + * checks/menus{,.desc}: + + [RA] Revert the change to not require update-menus in postinst. + This is still needed due to #518919. Don't require update-menus in + postrm for regular menu files, only for menu-methods, but also don't + warn if it's present. (Closes: #519300) + * checks/scripts: + + [RA] Policy allows scripts to assume that /bin/sh supports local + with simple variable assignments. + + [ADB] Check all added and removed diversions at once rather than + as each maintainer script is processed. This avoids differing + results and false positives if the postrm is processed before other + maintainer scripts. (Closes: #518966) + + * data/debhelper/*: + + [RA] Refresh against unstable. + * data/fields/virtual-packages: + + [RA] Refresh against unstable. + * data/files/fonts: + + [RA] Refresh against unstable. + * data/output/manual-references: + + [RA] Refresh reference data against Policy 3.8.1, doc-base 0.9.1, + and developers-reference 3.4.1. + * data/standards-version/release-dates: + + [RA] Add release date for 3.8.1. + + * debian/control: + + [RA] Update to standards version 3.8.1. + + * lib/Dep.pm: + + [RA] Remove, replaced with Lintian::Relation. + * lib/Lintian/Collect/Binary.pm: + + [RA] Fix POD errors. + * lib/Lintian/Collect/Source.pm: + + [RA] Fix POD errors. + * lib/Lintian/Command.pm: + + [RA] Fix POD errors. + + * private/refresh-debhelper-data: + + [RA] Remove symlinks as a (possibly temporary) workaround to + packages that contain broken links to dh_* commands. + + [RA] Exclude dh_gencontrol from debhelper commands that set + ${misc:Depends} since it only sets it to empty when not already + set. + * private/refresh-fonts-data: + + [RA] Correctly handle not specifying a Contents file on the command + line. + + * t/runtests: + + [RA] Add support for running test scripts under t/scripts via prove + (the standard Perl test harness). + + -- Russ Allbery <rra@debian.org> Wed, 11 Mar 2009 21:50:58 -0700 + +lintian (2.2.7) unstable; urgency=low + + The "debhelper 7.2.3 and lots of fiddly infrastructure fixes" release. + + * Summary of tag changes: + + Added + - apparently-truncated-elf-binary + - copyright-refers-to-nonexistent-license-file + - debian-control-has-unusual-field-spacing (pedantic) + - diversion-for-unknown-file + - embedded-zlib + - gz-file-not-gzip + - incorrect-libdir-in-la-file + - orphaned-diversion + - package-uses-local-diversion + - remove-of-unknown-diversion + + Removed + - description-synopsis-has-leading-spaces + - postinst-does-not-call-installdocs + - prerm-does-not-call-installdocs + + * checks/binaries{,.desc}: + + [RA] Check for embedded copies of zlib in ELF binaries by looking + for the inflate and deflate copyright strings. Patch from Raphael + Geissert. (Closes: #318104) + + [RA] Avoid capturing parentheses in regexes due to their minor + performance penalty. Patch from Raphael Geissert. + + [RA] Report apparently truncated ELF binaries separately from + apparently corrupted ones. The current binutils now distinguishes. + Patch from Raphael Geissert. (Closes: #517778) + + [RA] Allow i386 binaries in amd64 packages for right now. Thanks, + Paul Wise. (Closes: #516856) + + [RA] Suggest, when fixing spelling errors in binaries, that one + unfuzzy gettext translations as well. Thanks, Raphael Geissert. + * checks/changelog-file: + + [RA] Avoid capturing parentheses in regexes due to their minor + performance penalty. Patch from Raphael Geissert. + + [RA] Correctly handle changelog.gz files that aren't compressed with + gzip. Patch from Raphael Geissert. + * checks/common_data.pm: + + [RA] Move all information used only in one check script from here to + the relevant check script. Patch from Raphael Geissert. + * checks/control-file{,.desc}: + + [RA] Add pedantic tag for weird spacing after the colon of a field. + * checks/copyright-file{,.desc}: + + [RA] Avoid capturing parentheses in regexes due to their minor + performance penalty. Patch from Raphael Geissert. + + [RA] Avoid false positive for versionless license files when the + file is referred to without a hyphen; instead, issue a separate tag + that explains the problem. Based on a patch from Raphael Geissert. + (Closes: #517191) + + [RA] Allow commas between the GFDL license name and version when + suppressing false positives for the 1.1 version. Thanks, Aurelien + Jarno. (Closes: #516687) + + [RA] Don't warn about versionless GPL references if the word version + appears nowhere in the copyright file. + * checks/debconf: + + [ADB] Use Lintian::Relation rather than Dep. + * checks/debhelper{,.desc}: + + [ADB] Use Lintian::Relation rather than Dep. + + [RA] Add dh_bugfiles to version requirements, added in 7.2.3. + + [RA] debhelper compatibility level V4 is now deprecated. + * checks/description{,.desc}: + + [RA] Remove description-synopsis-has-leading-spaces. Policy + explicitly says this is not a bug. Adjust for the changes to Util + that preserve leading whitespace in continued fields. + * checks/fields: + + [RA] Precompile constant regexes with qr. Patch from Raphael + Geissert. + + [RA] Load Lintian::Data objects only once. Patch from Raphael + Geissert. Also use all caps for global variables. + * [RA] Move data from common_data.pm to here and use Lintian::Data to + get the list of known architectures. Patch from Raphael Geissert. + * checks/files{,.desc}: + + [RA] Avoid capturing parentheses in regexes due to their minor + performance penalty. Patch from Raphael Geissert. + + [RA] Precompile constant regexes with qr and only load the list of + font packages if needed. Patch from Raphael Geissert. + + [RA] Warn about yui-*.js as well as yahoo-*.js. Patch from Raphael + Geissert. + + [ADB] Use Lintian::Relation instead of Dep. + + [RA] magpierss was renamed to libphp-magpierss. Patch from Marcelo + Jorge Vieira (metal). (Closes: #518684) + + [RA] Diagnose files ending in *.gz that aren't compressed with + gzip. Patch from Raphael Geissert. (Closes: #518873) + + [RA] Simplify some checks now that we're guaranteed leading and + trailing whitespace will be stripped from field values. + * checks/manpages: + + [CW] Run man with '-E UTF-8' to avoid producing bogus warnings on + localised manual pages due to attempting to recode through ASCII. + + [RA] Set MANWIDTH to 80 in the environment when running man to force + it to assume 80-column lines even when Lintian is run in a smaller + window. Thanks, Joey Hess. (Closes: #517629) + + [ADB] Use Lintian::Relation::Version when determining whether the + installed version of man supports the --warnings option. + * checks/menus: + + [RA] Cache the reference to the section list. Thanks, Raphael + Geissert. Also use all caps for global variables. + + [RA] Move known doc-base formats from common_data.pm to here. Patch + from Raphael Geissert. + + [RA] Explicit update-menus calls in postinst and postrm are no + longer required unless menu-methods are installed. Thanks, Eric + Lavarde. (Closes: #518712) + + [RA] Explicit install-docs calls are no longer needed since doc-base + registration is done with triggers. (Closes: #518801) + * checks/nmu: + + [RA] Calculate the regex for Ubuntu distributions only once. + * checks/patch-systems: + + [ADB] Use Lintian::Relation instead of Dep. + * checks/rules: + + [ADB] Remove some obsolete code and therefore stop use-ing Dep. + * checks/scripts: + + [ADB] Use Lintian::Relation rather than Dep. + + [ADB] Update lists of known interpreter versions (add jruby1.1, + octave3.1 and remove jruby0.9) + + [RA] Diagnose various problems with creating and removing + diversions. Based on a patch by Jörg Sommer. (Closes: #516221) + * checks/shared-libs{,.desc}: + + [ADB] When parsing symbols files, correctly ensure that meta-information + occurs between the end of the dependency template(s) and the start of + the symbol list. The code that was intended to check this resulted + in a false positive syntax error being generated if a file with + alternative dependency templates used meta-information. + + [ADB] Extend the parsing of dependency templates in symbols files to + handle ORed dependencies. + + [ADB] Use Lintian::Relation rather than Dep. + + [ADB] Avoid capturing parentheses in regexes due to their minor + performance penalty. + + [RA] Check the libdir path in libtool *.la files and ensure that it + matches the installed location of the *.la file. Based on a patch + by Raphael Geissert. (Closes: #302196) + * checks/version-substvars: + + [RA] Be robust against whitespace in the Architecture field. + Thanks, Gonéri Le Bouder. (Closes: #517555) + + * collection/*.desc: + + [RA] Remove the output key and instead add a version key. Patch + from Raphael Geissert. + * collection/changelog-file: + + [RA] Remove the remains of a previous run before starting. + * collection/diffstat: + + [RA] Remove the remains of a previous run before starting. + * collection/objdump-info: + + [RA] Recognize truncated binaries. Patch from Raphael Geissert. + * collection/source-control-file: + + [RA] Remove the remains of a previous run before starting. + + * debian/control: + + [CW] Depend on man-db (>= 2.4.0) for '-E UTF-8'. + + * data/fields/architectures: + + [RA] Replace the runtime-generated list of known architectures with + this data file, built from the current dpkg files. Patch from + Raphael Geissert. + + * doc/desc-files: + + [RA] Document new Version field for collect scripts and remove + Output field. Document pedantic severity for tags. Document + Sequence, Options, and Skeleton for test suite descriptions. + Thanks, Raphael Geissert. + * doc/lintian.sgml: + + [RA] Document pedantic tags. Patch from Raphael Geissert. + + * frontend/lintian: + + [RA] Stop loading FileHandle. We no longer use it. + + [RA] Run all the collect scripts within a given order in parallel. + Patch from Raphael Geissert. + + [RA] Create marker files in the laboratory for each collect script + that has successfully including its current version number. Use + these marker files rather than the existence of output files to + determine when to run collect scripts. Re-run collect scripts if + the current version doesn't match what's in the lab. Patch from + Raphael Geissert. (Closes: #517650) + + [RA] Add oldstable to the known distributions for *.changes files. + + * lib/Lintian/Collect/Binary.pm: + + [RA] Recognize truncated binaries. Patch from Raphael Geissert. + * lib/Lintian/Command.pm: + + [RA] Add support for running commands in the background using a + final argument of '&'. Allow reap() to take multiple opt hashes and + reap all of them in a loop. Add a kill() function to kill + outstanding jobs. Patch from Raphael Geissert. + * lib/Lintian/Tag/Info.pm: + + [RA] Strip leading whitespace from continued lines. + * lib/Spelling.pm: + + [RA] Optimize the spell-checking algorithm. Patch from Raphael + Geissert. (Closes: #514495) + * lib/Util.pm: + + [RA] Fully comply with Policy in whitespace handling when parsing + Debian control files. Multiline fields will now have the leading + whitespace of subsequent lines left in, and leading tabs are no + longer handled specially. Trailing whitespace is now uniformly + stripped, as is leading whitespace on the first field line. + + * man/lintian.1: + + [RA] Document strings collect script. + + * private/refresh-archs: + + [RA] Script from Raphael Geissert to refresh known architectures. + + * unpack/unpack-binpkg-l1: + + [RA] Run the separate commands involved in unpacking a binary + package in parallel where possible. Patch from Raphael Geissert. + * unpack/unpack-srcpkg-l1: + + [RA] When processing tar output, we may not get complete lines at a + time. Save partial lines and glue them back together again when we + get the next burst of data. (Closes: #517899) + + [RA] Do a little bit of parallelization when writing out the sorted + index of the source package. + + [RA] Ignore leading whitespace in the Files section. + + -- Russ Allbery <rra@debian.org> Sun, 08 Mar 2009 21:58:32 -0700 + +lintian (2.2.6) unstable; urgency=low + + * Summary of tag changes: + + Added + - binary-from-other-architecture + - icon-size-and-directory-name-mismatch + - lzma-deb-archive + - multiple-distributions-in-changes-file (disabled) + - spelling-error-in-binary (experimental) + - unsupported-source-format + + * checks/binaries: + + [RA] When checking for dependencies on libc, don't use /o on the + regex. Otherwise, lintian produces false positives when run on + multiple packages with different architectures, since the libc + package name is not the same on all architectures. Thanks to + Raphael Geissert for the report. (Closes: #516067) + + [RA] Check for binaries from other architectures than the declared + architecture of the package outside of known multiarch directories. + Patch from Raphael Geissert. (Closes: #513996) + + [RA] Check the data section of ELF binaries for spelling errors. + Patch from Raphael Geissert. + * checks/common_data.pm: + + [RA] Virtual packages now come from data. + * checks/changelog-file: + + [RA] Don't warn about uncompressed ChangeLog files in doc. They may + be small files and the maintainer may be installing some other + upstream file as the upstream changelog. (Closes: #515601) + + [RA] Fix improbable-bug-number-in-closes so that it works. + * checks/control-file: + + [ADB] Properly exclude packages built from the glibc source package + from the "hardcoded depends on libc" test. (Closes: #515831) + * checks/cruft: + + [RA] For Format: 2.0 and Format: 3.0 (quilt) packages, check + the *.debian.tar.(gz|bz2|lzma) contents instead of expecting + diffstat output. (Closes: #515069) + + [RA] Ignore cruft in the upstream source in directories that look + like part of a test suite. The files may be part of the test + cases. (Closes: #515137) + * checks/deb-format{,.desc}: + + [RA] Recognize data.tar.lzma binary package components and use a + different tag than malformed-deb-archive. + * checks/description: + + [ADB] Warn of homepages embedded in the description which use the + syntax "Homepage: <http://example.com>" using the warning level + tag description-contains-homepage rather than the info level tag + description-possibly-contains-homepage. (Closes: #515998) + + [RA] Don't warn about too-short long descriptions for transitional + or dummy packages. Thanks, Andreas Beckmann. (Closes: #515538) + * checks/fields{,.desc}: + + [RA] Load virtual packages from data/fields/virtual-packages. + + [RA] Warn of unsupported source package versions. + * checks/files{,.desc}: + + [RA] Warn of PNG icons whose size doesn't match the size indicated + by the directory in which they're installed. Patch from Raphael + Geissert. (Closes: #509624) + + [RA] Make static regexes global to avoid recreating them for each + file we scan. Patch from Raphael Geissert. + + [ADB] Modify the check for embedded Javascript libraries to ignore + yahoo.js as there are similarly named, but unrelated, scripts in + the archive. + + [ADB] Lower the certainty of the embedded-{javascript,php}-library + tags to "possible" as they trigger purely on filenames and not + content. (Closes: #515690) + + [RA] Offer advice for duplicate-font-file for when the font package + is huge. Thanks, Thijs Kinkhorst and Paul Wise. (Closes: #515689) + * checks/patch-systems.desc: + + [RA] Improve the suggestions in the long description of + quilt-patch-missing-description and dpatch-missing-description based + on suggestions from Paul Wise. (Closes: #516534) + * checks/scripts: + + [RA] Make static regexes global to avoid recreating them for each + file we scan. Patch from Raphael Geissert. + * checks/shared-libs: + + [RA] Save a local reference to objdump information to reduce the + number of method calls. Patch from Raphael Geissert. + + [ADB] Correctly handle alternative dependency lines in symbols files + which contain multiple entries. (Closes: #516427) + + * collection/strings{,.desc}: + + [RA] Collect a list of ELF binaries in the package and the output of + strings on each binary except for those in /usr/lib/debug. Based on + a patch from Raphael Geissert. (Closes: #514951) + + * data/fields/obsolete-packages: + + [RA] Add foomatic-data, lambdamoo-{core,server}, and old kernel + packages. Patch from Raphael Geissert. + * data/fields/virtual-packages: + + [RA] New file listing known virtual packages. Based on a patch by + Raphael Geissert. (Closes: #514497) + + * debian/postrm: + + [RA] Use set -e, not #!/bin/sh -e. + + * frontend/lintian: + + [ADB] Split the Distribution field of a .changes file into individual + distributions and then check each of them against the list of known + distributions. (Closes: #514853) + + [ADB] Anchor the regular expressions for the backports, security and + proposed-updates distribution checks, so that etch-backports is + accepted as a valid distribution but etch-backportss is not. + + [ADB] Add a new check for .changes files which contain multiple + entries in their Distribution: field. The check is currently + disabled as the syntax is currently accepted by dak although it is + likely to stop being so in the near future. + + * lib/Lintian/Collect/Source.pm: + + [RA] Recognize Format: 2.0 packages as non-native. + * lib/Lintian/Command.pm: + + [RA] Disable IPC::Run debugging. Patch from Raphael Geissert. + + [RA] Don't load Data::Dumper. Patch from Raphael Geissert. + * lib/Spelling.pm: + + [RA] Add spelling correction for "mroe". + * lib/Util.pm: + + [RA] Minor optimizations to {read,parse}_dpkg_control. Patch from + Raphael Geissert. + + [RA] Only take the first space after a field name as the separator + and treat the rest as part of the field value so that other parts of + Lintian can see the leading spaces. + + * private/refresh-virtual-packages-data: + + [RA] New script to generate the list of virtual packages. Based on + a patch by Raphael Geissert. + * private/update-coverage: + + [RA] Add support for source package tests. + + * t/runtests: + + [RA] Add support for raw source package checks in the source + subdirectory. See t/source/README for more details. + + * unpack/unpack-srcpkg-l1: + + [ADB] Handle a number of different ways in which upstream directory + trees may be represented in tarballs. (Closes: #515795) + + [RA] Support LZMA-compressed upstream source. (Closes: #515068) + + [RA] Analyze the upstream source tarball to extract its prefix and + save it in the laboratory. Also fixes unpacking of source tarballs + that have no common subdirectory. + + -- Russ Allbery <rra@debian.org> Sat, 21 Feb 2009 23:53:09 -0800 + +lintian (2.2.5) unstable; urgency=low + + * lib/Lintian/Collect/{Binary,Source}.pm: + + [ADB] Add a missing "use Lintian::Relation". Thanks, Raphael Geissert. + (Closes: #514697) + + -- Adam D. Barratt <adam@adam-barratt.org.uk> Tue, 10 Feb 2009 23:15:43 +0000 + +lintian (2.2.4) unstable; urgency=low + + * checks/changelog-file: + + [RA] Use Lintian::Relation::Version instead of Dep. + * checks/control-file: + + [RA] Use Lintian::Relation instead of Dep. + * checks/copyright-file: + + [RA] Use Lintian::Collect for dependency information. + * checks/cruft: + + [RA] Use Lintian::Collect for dependency information. + + * t/runtests: + + [ADB] Correctly handle epoched package versions. Patch by + Raphael Geissert. + + * testset/runtests: + + [ADB] Correctly handle epoched package versions. + + * unpack/unpack-srcpkg-l1: + + [ADB] Correctly determine the source package version for packages + with epoched versions. Based on a patch by Raphael Geissert. + (Closes: #514641) + + -- Adam D. Barratt <adam@adam-barratt.org.uk> Mon, 09 Feb 2009 23:59:00 +0000 + +lintian (2.2.3) unstable; urgency=low + + * Summary of tag changes: + + Added + - description-possibly-contains-homepage + - dfsg-version-in-native-package + - dfsg-version-with-period + - dfsg-version-misspelled + - experimental-to-unstable-without-comment (pedantic) + - homepage-for-cpan-package-contains-version + - maintainer-script-without-set-e (pedantic) + - source-contains-prebuilt-binary (pedantic) + - source-contains-prebuilt-windows-binary (pedantic) + - using-first-person-in-description + + Removed + - non-us-spelling + + * checks/changelog-file{,.desc}: + + [RA] Add pedantic check for a distribution of unstable when the last + version had a distribution of experimental and there's no comment + about the change. (Closes: #483845) + * checks/common-data.pm: + + [ADB] Remove the obsolete non-US from the list of recognised archive + sections. + * checks/copyright-file: + + [RA] Treat License: GPL-2+ as "GPL version 2 or later" for the + purposes of the check for a correctly versioned license reference. + Patch from Evgeni Golov. (Closes: #513946) + * checks/cruft{,.desc}: + + [RA] Downgrade all source-contains-* tags to pedantic. These are + upstream problems the packager can't do much about and they have + no practical effect on the Debian package. Wishlist implies that + a wishlist bug against the package would be appropriate, which + seems too strong. + + [RA] Add pedantic check for binaries in the upstream source. Patch + from Raphael Geissert. (Closes: #127494) + * checks/description{,.desc}: + + [RA] Check for using first person in package descriptions, similar + to the existing check for debconf questions. Patch from Raphael + Geissert. (Closes: #514491) + + [RA] Add check (wishlist/wild-guess) for apparent home page URLs in + the long description with no Homepage field. Based on a patch by + Paul Wise. (Closes: #339829) + * checks/fields{,.desc}: + + [ADB] Remove checks for the capitalisation of the obsolete non-US + archive section. + + [RA] Warn about Homepage fields pointing to search.cpan.org pages + containing a version number. Based on a patch by Paul Wise. + + [RA] Warn of dfsg versions in native packages. + + [RA] Warn of ".dfsg" versions and recommend "+dfsg" for version + sorting reasons. Thanks, Paul Wise. (Closes: #514203) + + [RA] Warn of the "dsfg" typo in versions. Thanks, Paul Wise. + + [RA] Use Lintian::Relation and the new Lintian::Collect support for + retrieving parsed relationship fields. + * checks/files: + + [ADB] Don't report duplicate-font-file for udebs. Patch by Raphael + Geissert. (Closes: #514095) + * checks/scripts{,.desc}: + + [RA] Add pedantic check for maintainer scripts using #!/bin/sh -e + instead of set -e in the script body. (Closes: #119045) + + * collection/file-info{,.desc}: + + [RA] Also run file-info for source packages. Patch from Raphael + Geissert. + + * lib/Lintian/Collect.pm: + + [RA] Defer loading of the subclasses until the constructor to avoid + circular dependencies at compilation time. + * lib/Lintian/Collect/Binary.pm: + + [RA] New method relation() to return a Lintian::Relation object for + a given relationship field or set of relationship fields. + * lib/Lintian/Collect/Source.pm: + + [RA] New methods relation() and relation_noarch() to return + Lintian::Relation objects for a given build relationship field or + set of fields. New method binary_relation() to return a + Lintian::Relation object for a given relationship field in a binary + package built from this source package. + + [RA] Add file_info() method to return file information for source + packages. Patch from Raphael Geissert. + * lib/Lintian/Relation.pm: + + [RA] New class based on the existing Dep module that handles package + relationship analysis. Now includes documentation, uses a more + object-oriented structure, and removes a special case handling of + Perl alternatives. This module will eventually replace Dep. + * lib/Lintian/Relation/Version.pm: + + [RA] New module containing the version comparison code from Dep. + This module will only be needed until Lintian is converted to + Dpkg::Version or AptPkg::Version. + * lib/Spelling.pm: + + [RA] Add some additional typo and case corrections. Patch from + Raphael Geissert. + + * t/runtests: + + [RA] Copy test suite data based on checksum, not size and time, + since some files change one character and Git doesn't preserve + timestamps. Patch from Raphael Geissert. (Closes: #514496) + + * unpack/list-{binpkg,udebpkg}: + + [RA] Preserve the source_version field from the previous list when + adding new packages, remove some dead code, and restructure for + improved readability. Thanks to Jordà Polo for the analysis. + (Closes: #507849) + + [RA] Generate an index of files in the upstream source tarball. + Patch from Raphael Geissert. + + -- Russ Allbery <rra@debian.org> Sat, 07 Feb 2009 19:19:45 -0800 + +lintian (2.2.2) unstable; urgency=low + + The "this is why spooky action at a distance is bad" release. + + * checks/copyright-file: + + [ADB] Treat the new copyright file format's "License-Alias: Perl" as + indicating that the package is licensed under the same terms as Perl. + Thanks, gregor herrmann. (Closes: #513831) + * checks/debconf: + + [RA] Reset $/ before issuing duplicate-fields-in-templates to + prevent problems if -i was given. + * checks/debhelper: + + [RA] Remove stray localization of $/, which broke -i when issuing + tags about ${misc:Depends}. + * checks/fields: + + [RA] Stop pointlessly setting $/ while parsing debian/rules and then + restoring it to the wrong value, which broke -i when issuing some + tags if they were the first tags issued. + * checks/scripts: + + [RA] Add nickle as a known interpreter. Patch from Julien Cristau. + (Closes: #513823) + + * lib/Util.pm: + + [ADB] Localise a use of $_ in control file parsing to avoid overwriting + it and leading to uninitialized value warnings in check scripts. + (Closes: #513795) + + -- Russ Allbery <rra@debian.org> Sun, 01 Feb 2009 11:11:36 -0800 + +lintian (2.2.1) unstable; urgency=low + + * Summary of tag changes: + + Added + - copyright-refers-to-symlink-license (pedantic) + - copyright-refers-to-versionless-license-file + - debhelper-compat-not-a-number + - debhelper-compatibility-level-not-a-number + - duplicate-font-file + - font-in-non-font-package + + * checks/copyright-file{,.desc}: + + [RA] Add checks for references to the versionless FSF license files, + pedantic if the package license allows relicensing under later + versions. Patch from Raphael Geissert. (Closes: #497346) + * checks/debhelper{,.desc}: + + [RA] Use binary_field() to read control fields for binary packages. + Patch from Raphael Geissert. + + [RA] Read only the first line of debian/compat, matching debhelper's + behavior. Improve the parsing of DH_COMPAT to pick up values that + aren't numbers. Warn of compatibility levels that aren't numbers. + Use the same compatibility level that debhelper would use in some + other checks. Patch from Raphael Geissert. (Closes: #513767) + + [RA] default-jdk and default-jdk-builddep provide dh_nativejava as a + special case. (Closes: #513423) + * checks/fields: + + [RA] Allow but do not require a libmodule-build-perl dependency if + the Build script is referenced in clean. Thanks, Charles Plessy and + gregor herrmann. (Closes: #421549) + * checks/fields{,.desc}: + + [RA] Run dbg-package-missing-depends against the source package + instead of the binary package and check that it has a dependency + against another binary package built from the same source rather + than making assumptions about the package name. Patch from Raphael + Geissert. (Closes: #513336) + + [RA] Use binary_field() to read control fields for binary packages. + Patch from Raphael Geissert. + * checks/files{,.desc}: + + [RA] Add check for fonts in non-font packages. Thanks, Paul Wise + and Raphael Geissert. (Closes: #513650) + + [RA] Add check for fonts that duplicate already packaged fonts. + Patch from Raphael Geissert. Thanks to Paul Wise for analysis and + data. (Partly addresses #298545) + * checks/shared-libs.desc: + + [RA] Add references to the UsingSymbolsFiles wiki page in the tags + requesting generation of a symbols file. + + [RA] Provide details on how to manually check some of the shared + library problems that Lintian diagnoses. (Closes: #513086) + * checks/standards-version: + + [RA] Be robust against unparsable timestamps in changelog files. + Patch from Raphael Geissert. (Closes: #513766) + * checks/version-substvars: + + [RA] Use binary_field() to read control fields for binary packages. + Patch from Raphael Geissert. + + * data/files/fonts: + + [RA] New file listing all font filenames in Debian and the + containing package names. Generated by private/refresh-fonts-data. + * data/output/manual-references: + + [RA] Manual reference data used for formatting tag descriptions. + Moved from lib/manual_refs and added an explanatory header. + + * frontend/lintian-info: + + [RA] Use Lintian::Tag::Info instead of Read_taginfo. + + * lib/Lintian/Collect/Source.pm: + + [RA] Add binary_field() method to return a binary package field from + debian/control for a source package. Based on a patch by Raphael + Geissert. + + [RA] Rewrite the binaries() method to use binary_field(). Based on + a patch by Raphael Geissert. + * lib/Lintian/Output.pm: + + [ADB] Add a colour for pedantic tags to avoid warnings when colourised + output is used and make the combination more useful. Thanks, gregor + herrmann. (Closes: #513132) + + [RA] Use Lintian::Tag::Info instead of Read_taginfo. + + [RA] Force early exporting of functions to be more robust in the + face of circular library dependencies. The circular dependencies + had already existed but not previously caused problems. + * lib/Lintian/Output/LetterQualifier.pm: + + [ADB] Add support for pedantic tags. + + [RA] Use Lintian::Tag::Info instead of Read_taginfo. + * lib/Lintian/Tag/Info.pm: + + [RA] New module providing an interface to tag metadata. Currently, + this only supports formatting the tag description, merging the + actions previously done by Manual_refs.pm and Read_taginfo.pm. It + defers loading of manual references until they're needed, which + removes the requirement that LINTIAN_ROOT be already set in the + environment before running the reporting harness. It also saves a + small amount of time in runs without -I. + * lib/Manual_refs.pm: + + [RA] Removed, merged into Lintian::Tag::Info. + * lib/manual_refs: + + [RA] Moved to data/output/manual-references. + * lib/Read_taginfo.pm: + + [RA] Removed, merged into Lintian::Tag::Info. + * lib/Util.pm: + + [RA] Force early exporting of functions to be more robust in the + face of circular library dependencies. + + * man/lintian.1: + + [ADB] Fix the spelling of "pedantic". Thanks, Michal Čihař. + (Closes: #513083) + + * private/refresh-fonts-data: + + [RA] New script to refresh the list of font filenames and containing + packages in Debian. Based on a script by Raphael Geissert. + * private/refresh-manual-refs: + + [RA] Renamed from manual_refs_update.pl. Add a section heading to + the output file and update the file in Lintian's data directory + directly rather than printing to standard output. + + * reporting/config: + + [RA] Set a bin directory and disable signature checks by default. + * reporting/harness + + [RA] Add the bin directory to the path and create a gpg link to + /bin/true if signature checks are disabled. This is a hack to work + with the etch version of dpkg-source. In lenny, the --no-check flag + will be used instead. Patch from Raphael Geissert. + * reporting/html_reports: + + [RA] Use Lintian::Tag::Info instead of Read_taginfo. + + * t/runtests: + + [RA] Add support for selecting a different test package skeleton. + * t/templates/pedantic{,.upstream}: + + [RA] New template that passes all pedantic checks. + + -- Russ Allbery <rra@debian.org> Sat, 31 Jan 2009 20:20:46 -0800 + +lintian (2.2.0) unstable; urgency=low + + * Summary of tag changes: + + Added + - direct-changes-in-diff-but-no-patch-system (pedantic) + - no-homepage-field (pedantic) + - no-upstream-changelog (pedantic) + - package-depends-on-hardcoded-libc + - weak-dependency-on-misc-depends + + * checks/*.desc: + + [RA] Replace `' "balanced" quotes with straight double-quotes. The + old style looks strange with modern fonts. Based on work by Raphael + Geissert. + * checks/binaries: + + [FL] Fix check for directories in the package in RPATH check. + * checks/changelog-file{,.desc}: + + [RA] Use Lintian::Collect to read the changelog. + + [RA] Enable no-upstream-changelog as a pedantic check, since it's + often incorrect for multiple binary packages generated from the same + source. Patch from Raphael Geissert. (Closes: #470912) + * checks/control-file{,.desc}: + + [ADB] Fix a typo ("arne't"). Thanks, Raphael Geissert. + + [RA] Check for hard-coded package dependencies on libc. Patch from + Evgeni Golov. (Closes: #512196) + + [RA] Check package-depends-on-itself for Suggests as well. + * checks/debhelper{,.desc}: + + [ADB] Remove no longer required "Type" fields from a couple of + entries. Thanks, Raphael Geissert. + + [ADB] Fix a couple of typos. Thanks, Raphael Geissert. + + [RA] Allow ${misc:Depends} in Pre-Depends and warn of + ${misc:Depends} in Recommends or Suggests. Patch from Raphael + Geissert. (Closes: #512478) + * checks/fields{,.desc}: + + [RA] Add pedantic check for no Homepage control field. Patch from + Raphael Geissert. + * checks/files: + + [RA] Add swfobject.js to embedded-javascript-library. Thanks, Paul + Wise. (Closes: #512363) + * checks/nmu{,.desc}: + + [RA] Use Lintian::Collect to read the changelog. + + [RA] Only treat the mention of NMU as a maintainer acknowledgement + if the "ack" string appears before the mention of NMU. Avoids + changelog-should-mention-nmu false positives for "NMU with ACK from + maintainer." Thanks, Evgeni Golov. (Closes: #512738) + * checks/patch-systems{,.desc}: + + [RA] Add pedantic check for changes to the upstream source in the + diff without using a patch system. Thanks, Raphael Geissert. + * checks/standards-version{,.desc}: + + [ADB] Add source-control-file to the list of information needed by + the script. Thanks, Raphael Geissert. (Closes: #512563) + + [RA] Use Lintian::Data to get the standards versions and release + dates. Dates are now in seconds since epoch, so remove the date + conversion code. + * checks/version-substvars.desc: + + [RA] Mention when the binary:Version and source:Version substvars + were introduced. Thanks, Steffen Moeller. + + * collection/*.desc: + + [RA] Replace `' "balanced" quotes with straight double-quotes. The + old style looks strange with modern fonts. Based on work by Raphael + Geissert. + + * data/standards-version/release-dates: + + [RA] Known standards versions and their release dates in seconds + since epoch, taken from checks/standards-version. + + * frontend/lintian: + + [RA] Add --pedantic option to display pedantic tags. Patch from + Raphael Geissert. (Closes: #373767) + + * lib/Checker.pm: + + [ADB] Remove some unused code. + * lib/Lintian/Collect/Binary.pm: + + [RA] Add a changelog() method to return the parsed changelog. + * lib/Lintian/Collect/Source.pm: + + [ADB] Add a missing "use Util" as the module uses the fail() function + from that module. Thanks, Raphael Geissert. (Closes: #512560) + * lib/Text_utils.pm: + + [ADB] Add a missing "use Util" as the module uses the fail() function + from that module. Thanks, Raphael Geissert. + * lib/Tags.pm: + + [RA] Add support for pedantic tags. Patch from Raphael Geissert. + + * man/lintian.1: + + [RA] Document the new --pedantic option. + + * reporting/html_reports: + + [RA] Add support for a new tag index sorted by severity and + certainty. (Closes: #511496) + * reporting/templates/index.tmpl: + + [RA] Link to the new tag index. + * reporting/templates/tags-severity.tmpl: + + [RA] Template for a tag index sorted by severity and certainty. + + * t/runtests: + + [RA] Add support for specifying the Lintian options to use when + checking a test package. Patch from Raphael Geissert. + (Closes: #512678) + + [RA] Expect the desc files for tests to be in the test directory + rather than at the top level and move the sequence number to an + attribute in the test description rather than in the desc file + name. + + -- Russ Allbery <rra@debian.org> Sat, 24 Jan 2009 16:43:32 -0800 + +lintian (2.1.6) unstable; urgency=low + + * Summary of tag changes: + + Added + - diff-contains-cmake-cache-file + - diff-contains-hg-tags-file + - duplicate-uploader + - empty-debian-diff + - malformed-changes-file + - missing-comma-after-substvar + - source-contains-hg-tags-file + + * checks/control-file{,.desc}: + + [RA] Check for missing commas after substvars in dependency fields. + Thanks, Jari Aalto. (Closes: #409099) + * checks/cruft{,.desc}: + + [RA] Error on CMakeCache.txt files added or modified in the diff. + Thanks, Joerg Jaspert. (Closes: #510957) + + [RA] Warn about .hgtags files in the diff and source. Thanks, + Holger Levsen and Chris Lamb. (Closes: #464837) + + [RA] Warn if the Debian diff or a non-native package is entirely + empty. (Closes: #498668) + * checks/debhelper: + + [RA] Ignore architecture when checking whether sufficient build + dependencies are present for dh_* commands. If the maintainer has + architecture-restricted build dependencies, they presumably know + what they're doing. (Closes: #511859) + * checks/fields{,.desc}: + + [ADB] Warn about an individual uploader appearing multiple times + in Uploaders. Thanks, Joerg Jaspert. (Closes: #511536) + + [RA] Ignore architecture qualifications when checking for missing + build dependencies. + * checks/lintian.desc: + + [RA] Add tag description for malformed-changes-file. + * checks/menus: + + [RA] Recognize type as a way of checking for binaries, even though + it's a bashism, so that we don't issue confusing duplicate tags for + one same problem. (Closes: #512119) + * checks/nmu{,.desc}: + + [RA] Suppress NMU warnings for packages with "local" in the version + number or "local package" in the first line of the changelog. + Thanks, Zack Weinberg. (Closes: #501523) + * checks/scripts{,.desc}: + + [RA] Mention type as a bashism and recommend which or command -v. + + [RA] Recognize type as a way of checking for binaries, even though + it's a bashism, so that we don't issue confusing duplicate tags for + one same problem. + * checks/standards-version.desc: + + [RA] Add a pointer to the debian-policy upgrading-checklist.txt.gz + in out-of-date-standards-version and ancient-standards-version. + + * frontend/lintian: + + [RA] Check that .changes files have at least a Format key. If not, + issue malformed-changes-file and skip them. This catches .changes + files that were PGP-signed twice. (Closes: #315538) + + * lib/Dep.pm: + + [RA] New function, parse_noarch(), which ignores architecture + qualifications when parsing a dependency field. + + * t/runtests: + + [RA] Add pre_upstream hook to modify the upstream source before + generation of the .orig.tar.gz. + + -- Russ Allbery <rra@debian.org> Sat, 17 Jan 2009 13:35:04 -0800 + +lintian (2.1.5) unstable; urgency=low + + * Summary of tag changes: + + Added + - changed-by-address-is-on-localhost + - changed-by-address-looks-weird + - changed-by-address-malformed + - changed-by-address-missing + - changed-by-name-missing + - duplicate-long-description + - duplicate-short-description + - malformed-deb-archive + + * checks/control-file{,.desc}: + + [RA] Tag (severity: wishlist) duplicate short or long descriptions + in packages built from the same source. (Closes: #30020) + + [RA] Clarify the binary-control-field-duplicates-source tag. + (Closes: #511213) + * checks/deb-format{,.desc}: + + [RA] New check for the format of *.deb ar archives. Most cases will + fail during unpack, but dpkg-deb is more forgiving than dak and + allows ordering problems and extra members that dak rejects. + (Closes: #292055) + * checks/fields: + + [RA] Use check_maintainer from Lintian::Check, which suppresses + duplicate tags for some ill-formed maintainer fields. + * checks/lintian.desc: + + [RA] New tag descriptions for Changed-By field tests. + * checks/rules: + + [RA] Consider a define command to be the end of a list of target + commands, avoiding binary-arch-rules-but-pkg-is-arch-indep false + positives when an empty rule is followed by a definition. + (Closes: #510869) + + * frontend/lintian: + + [RA] Run maintainer well-formedness checks on the Changed-By field + of the *.changes file. (Closes: #183642) + + * lib/Lintian/Check.pm: + + [RA] New module for checks run from multiple places. + * lib/Lintian/{Output.pm,Output/*.pm}: + + [RA] Expect a single string of extra information rather than an + array, removing duplicate code to convert it to a string. + * lib/Lintian/Schedule.pm: + + [RA] Fix Perl warnings triggered by missing fields in the control + file of a binary package. + * lib/Tags.pm: + + [RA] Avoid Perl warnings if Severity or Certainty isn't set for a + tag. (Closes: #507278) + + [RA] Record statistics for certainty correctly. + + [RA] Canonicalize the extra tag information once and pass it as a + string to the other output methods. Based on a patch by Raphael + Geissert. (Closes: #498883) + + [RA] Fix override checking with extra tag information that Perl + evaluates to false (such as a bare 0). + + * man/lintian.1: + + [RA] Document new deb-format check script. + + * t/runtests: + + [RA] Add support for running lintian on changes files in t/changes + and checking the tag output. + + [RA] Add support for building a Debian package using basic tools, + with more complete control over the contents, and running lintian on + the results. + + [RA] Fix exit status when a test fails but -k was given. + + -- Russ Allbery <rra@debian.org> Sat, 10 Jan 2009 21:59:57 -0800 + +lintian (2.1.4) unstable; urgency=low + + * Summary of tag changes: + + Added + - binary-control-field-duplicates-source + - brace-expansion-in-debhelper-config-file + - control-interpreter-in-usr-local (split from + interpreter-in-usr-local) + - control-interpreter-without-depends + - copyright-refers-to-bad-php-license + - copyright-refers-to-problematic-php-license + - copyright-with-old-dh-make-debian-copyright + - dh-clean-k-is-deprecated + - desktop-mimetype-without-update-call + - forbidden-postrm-interpreter + - games-package-should-be-section-games + - preinst-interpreter-without-predepends + - script-calls-init-script-directly + - unknown-control-interpreter (split from unusual-interpreter) + - version-refers-to-distribution + + Removed + - desktop-file-but-no-dh_desktop-call + - interpreter-without-predep + + * checks/changelog-file{,.desc}: + + [RA] Warn of Debian version numbers containing "testing", "stable", + or "unstable", or with release code names for uploads not targeted + at that release, except in NMUs. Based on a patch by Raphael + Geissert. (Closes: #498876) + * checks/control-file{,.desc}: + + [RA] Warn (severity: wishlist) of binary control stanzas duplicating + fields of the source control stanza. (Closes: #497348) + * checks/copyright-file{,.desc}: + + [RA] Warn (severity: wishlist) about the old dh_make packaging + copyright, which used (C) without the word or symbol. Based on a + patch by Raphael Geissert. (Closes: #497347) + + [RA] Clean up checks of a symlinked /usr/share/doc directory and + avoid making package info global. + + [RA] Warn about older PHP licenses. Based on a patch by Raphael + Geissert. (Closes: #498875) + * checks/cruft: + + [RA] Keep the hash of files for which warnings were already issued + local to each package, reducing memory consumption and false + negatives for archive-wide runs. + * checks/debhelper{,.desc}: + + [RA] Check for use of shell brace expansion in debhelper config + files that list filenames, which is not supported. Based on a patch + from Raphael Geissert. (Closes: #480939) + + [RA] If dh is used, require debhelper tokens in maintainer scripts. + + [ADB] Warn about packages declaring a debhelper compatibility level + of 7 or above and using dh_clean -k, which has been deprecated in + favour of dh_prep. + + [RA] Add dh_auto_* and dh_prep to the debhelper scripts that require + a particular version of debhelper. + + [RA] De-duplicate the list of scripts with specific version + requirements before issuing tags. + + [RA] Upgrade package-lacks-versioned-build-depends-on-debhelper to + certain (although still minor), making it a warning. debhelper(7) + explicitly recommends a versioned build dependency on debhelper. + Rewrite the tag description accordingly. + * checks/fields: + + [RA] dh-make-php provides a CDBS rule fragment and hence should go + into Build-Depends, not Build-Depends-Indep. Thanks, Mathieu + Parent. (Closes: #509286) + * checks/files{,.desc}: + + [RA] Packages whose executables are all in /usr/games should + probably be in section games. (Closes: #509147) + * checks/menu-format{,.desc}: + + [RA] If a *.desktop file contains a MimeType key, check that the + postinst calls update-desktop-database. (Closes: #488832) + + [RA] Stop keeping a separate hash of all files in the package and + use Lintian::Collect information. The hash was being reused across + packages, possibly leading to excessive memory consumption and false + negatives for archive-wide runs. + * checks/menus: + + [RA] Keep the hash of files and symlinks local to each package, + reducing memory consumption and false negatives for archive-wide + runs. + * checks/patch-systems.desc: + + [RA] Improve the patch-system-but-direct-changes-in-diff long + description. (Closes: #496516) + * checks/rules{,.desc}: + + [RA] Remove desktop-file-but-no-dh_desktop-call. The only action of + dh_desktop is now checked by desktop-mimetype-without-update-call; + dh_desktop is unnecessary with other *.desktop files. + * checks/scripts{,.desc}: + + [RA] Overhaul checking of maintainer script and config interpreters: + - postrm scripts must use an essential interpreter. + - Only preinst scripts require Pre-Depends; Depends is sufficient for + postinst and prerm scripts. (Closes: #508307) + - Separate unknown-control-interpreter from unusual-interpreter + since it's much more likely to be an error. + - Separate control-interpreter-in-usr-local from + interpreter-in-usr-local since the severity is higher. + - unusual-control-interpreter is certain, not possible. + - Suppress some cases of multiple tags about the same basic problem. + + [RA] Check for scripts in /etc that call init scripts directly + without using invoke-rc.d. Based on a patch by Raphael Geissert. + (Closes: #381485) + + [RA] Allow dpkg-dev to satisfy a make dependency. (Closes: #510190) + + [ADB] More intelligently remove comments from shell scripts, to avoid + removing some constructs that aren't comments, such as those in + [ $# -gt 2 ] and "foo # bar". + + [ADB] Flag the source bashism when its argument is quoted or a bare + filename. + * checks/watch-file: + + [RA] Recognize additional SourceForge URLs and recommend the + redirector. Thanks, Riccardo Stagni. (Closes: #510398) + + * collection/copyright-file: + + [RA] Copy copyright files that are relative links, provided that the + link is safe, and otherwise treat symlinked copyright files as if + they were empty. Fixes a Lintian crash on packages where the + copyright file is a relative symlink. + + * debian/copyright: + + [RA] Add an explicit key to initials used in changelog entries. + * debian/rules: + + [RA] New check-tag target which runs all test cases in the new test + suite that check for or against a particular tag. + + * data/debhelper/filename-config-files: + + [RA] New file listing debhelper config files containing filenames. + + * frontend/lintian: + + [RA] When processing the entire archive, do so in sorted order. + + * private/update-never-seen: + + [RA] Merge data from both test suites and use the tag files for the + old test suite rather than relying on runtests -v. + + * reporting/html_reports: + + [RA] We only care about the first line of the archive timestamp. + + * t/runtests: + + [RA] Check that a test produces all tags listed in Test-For and + doesn't produce any tags listed in Test-Against. + + [RA] Support finding and running all tests for or against a + particular tag. + + [RA] Correctly set up non-native packages for dpkg-source. + * t/tests/README: + + [RA] Add documentation of the new test suite. + + -- Russ Allbery <rra@debian.org> Sat, 03 Jan 2009 16:40:30 -0800 + +lintian (2.1.3) unstable; urgency=low + + * Summary of tag changes: + + Added + - debian-watch-file-should-use-sf-redirector + - debian-watch-file-specifies-wrong-upstream-version + - debian-watch-file-specifies-old-upstream-version + - extended-description-is-probably-too-short + - shlib-without-versioned-soname + + * checks/description{,.desc}: + + [RA] Check for extended descriptions shorter than three lines; they + probably don't contain enough information. Patch from Raphael + Geissert. + * checks/files{,.desc}: + + [RA] Exclude __init__.py files and Doxygen-generated *.map files + from zero-byte-file-in-doc-directory. Improve the tag description + to add a rationale and a suggestion for when overrides are + appropriate. Lower the certainty to possible. (Closes: #507273) + + [RA] Move the check for override files in the wrong location so that + the check for subdirectories of /usr/share/lintian/overrides works + and improve the tag description. + * checks/nmu: + + [RA] Recognize Ubuntu native packages by the target distribution and + suppress NMU tags for them. Based on a patch by Adrien Cunin. + (Closes: #507740) + * checks/shared-libs{,.desc}: + + [RA] Remove special shlibs exception for NSS modules. libc6 now + includes shlibs entries for them. + + [RA] Report a more specialized tag for shared libraries with SONAMEs + that have no version and exclude them from the shlibs file tests + since they cannot be represented there. Reported by Raphael + Hertzog. (Closes: #506673) + + [RA] Use the same regexes as dpkg-shlibdeps when parsing version + information from SONAMEs. + * checks/version-substvars: + + [RA] Skip version substvar checks when the dependency is on a + package whose name is formed by expanding substvars at build time. + Thanks, Bastian Blank. (Closes: #507763) + * checks/watch-file{,.desc}: + + [RA] Merge a set of changes by Raphael Geissert: + - Correctly parse multiple line continuations. + - Don't attempt any detailed checks on version one watch files. + - Recognize versionmangle in addition to [du]versionmangle. + - Add line information to some of the tags. + - Detect watch files that specify SourceForge download servers + directly and suggest use of the QA sf.net redirector instead. + - Detect watch files specifying an upstream version that matches a + non-native Debian package version in debian/changelog. + - Detect watch files specifying an upstream version for an older + changelog entry when the current changelog entry has a newer + upstream version. + + * data/changelog-file/ubuntu-dists: + + [RA] New shared list of Ubuntu distributions. + + * frontend/lintian: + + [RA] Recognize Ubuntu native packages by the target distribution and + check them against the correct set of distributions. Based on a + patch by Adrien Cunin. (Closes: #507740) + + * lib/Lab.pm: + + [ADB] Ensure that the output of unpack/list-*pkg is correctly captured + so that the reporting harness can use the information to decide which + packages to process in an incremental run. + * lib/Lintian/Data.pm: + + [RA] New all() method that returns all valid keywords. + * lib/Read_pkglists.pm: + + [JP] Add a new "source version" field to binary and udeb info files. + Bump binary and udeb format version to 3 and 2 respectively. + + * reporting/html_reports: + + [JP] Group packages by source version instead of binary version. + (Closes: #507849) + * reporting/templates/maintainer.tmpl: + + [ADB] Print tags affecting udeb packages under a heading for that + package, rather than merging them in to whichever binary package + was last displayed (or the source package if the udeb is first + alphabetically). + + [ADB] Separate tags affecting a binary package from those of a source + package with the same name when the binary is the first package produced + from the source for which there are issues. + + [JP] Include binary package version in subtitles when it isn't the same + as the source version. + + * t/runtests: + + [RA] Parameterize the package section in the skeleton. + + * unpack/list-{bin,udeb}pkg: + + [JP] Extract source package version from source field. + + -- Russ Allbery <rra@debian.org> Sat, 27 Dec 2008 14:17:18 -0800 + +lintian (2.1.2) unstable; urgency=low + + * frontend/lintian: + + [ADB] Accept "html" as a valid argument for --color again. + + * lib/Lintian/Output.pm: + + [ADB] Re-introduce support for HTML coloured output. (Closes: #508341) + + * man/lintian.1: + + [ADB] Document that "--color=html" is supported again. + + -- Adam D. Barratt <adam@adam-barratt.org.uk> Wed, 10 Dec 2008 20:12:48 +0000 + +lintian (2.1.1) unstable; urgency=low + + * Summary of tag changes: + + Added + - latest-debian-changelog-entry-changed-to-native + + * checks/changelog{,.desc}: + + [ADB] Warn when the version of a package changes to Debian native. + Based on a patch by Michal Čihař. (Closes: #504070) + * checks/fields.desc: + + [RA] Improve the recommendation for dependencies in debug packages + to include the case of a debug package corresponding to multiple + other packages. + * checks/files: + + [ADB] Add tests for several more embedded PHP libraries. Patch + by Raphael Geissert. + * checks/patch-systems{,.desc}: + + [ADB] Don't complain about a missing quilt build-dependency if + the package contains a directory named debian/patches/series. + (Closes: #507761) + + [ADB] Lower the severity of {quilt-,d}patch-missing-description from + minor to wishlist. + * checks/scripts: + + [ADB] Enhance the test for command-with-path-in-maintainer-script to + better match executions of the command rather than the use of its name + in pattern matching expressions. (Closes: #499847) + + * collection/{fileinfo,md5sums}: + + [ADB] Use blocking filehandles to pass the list of filenames to check + to the spawned file / md5sum. By default the handles were non-blocking + which could lead to problems with larger file lists. (Closes: #507461) + + * debian/{control,copyright}: + + [ADB] Add Adam D. Barratt to Uploaders and copyright. + + * frontend/lintian: + + [ADB] Don't call lintian-info when --info is specified. Set a new + flag on the Lintian::Output module instead. + * frontend/lintian-info: + + [ADB] Add missing "use Text_Utils". It used to be indirectly pulled + in via Read_taginfo. + + * lib/Lintian/Output{.pm,/*.pm}: + + [ADB] Flag a tag as issued when printing it. + * lib/Lintian/Output.pm: + + [ADB] Make sure the default list of colours is initialised before + attempting to use it. Thanks, gregor herrmann. (Closes: #507241) + + [ADB] Maintain a list of tags which have been issued. + + [ADB] Optionally include the description of a tag when displaying it. + * lib/Lintian/Output/ColonSeparated.pm: + + [ADB] Fix uninitialized value warnings by displaying the type code + rather than the (no longer present in description files) Type field + and handling non-overridden tags. + * lib/Lintian/Output/LetterQualifier.pm: + + [ADB] Optionally include the description of a tag when displaying it. + * lib/Lintian/Output/XML.pm: + + [ADB] Add a missing angle bracket to the closing "tag" tag, so that + the XML is well-formed. + + * lib/Lab.pm: + + [FL] Fix breakage of populate_with_dist() I introduced in 2.1.0. + * lib/Read_taginfo.pm: + + [ADB] Move the work of formatting a tag's description to a separate + function so that it can be called from multiple locations. + + [ADB] Properly export those functions which are called from other + modules. + * lib/Spelling.pm: + + [RA] Don't add unnecessary backslashes in the list of spelling + corrections. They're copied into the output. Thanks, Micah + Anderson. (Closes: #507331) + * lib/Tags.pm: + + [ADB] Don't output a "Processing binary package foo.changes" message. + Thanks Sandro Tosi for pointing the issue out. + * lib/Text_utils.pm: + + [ADB] Properly export those functions which are called from other + modules. + + * reporting/html_reports: + + [ADB] Add missing "use Text_Utils". It used to be indirectly pulled + in via Read_taginfo. + + -- Adam D. Barratt <adam@adam-barratt.org.uk> Mon, 9 Dec 2008 00:09:21 +0000 + +lintian (2.1.0) unstable; urgency=low + + * Summary of tag changes: + + Added + - debhelper-but-no-misc-depends + - missing-build-dependency-for-dh_-command + - quilt-patch-missing-description + - shlib-calls-exit + + * checks/common_data.pm: + + [FL] New variable $known_shells_regex which matches known shell + names. This removes some synchronisation issues between the + different regexes in use. + * checks/debconf{,.desc}: + + [CW] Update my e-mail address. + + [ADB] Don't detect the use of "?" as a literal character or wildcard + as part of a question in an extended template description. Based + on a patch by Stephen Gran. (Closes: #500661) + * checks/debhelper: + + [FL] Use Lintian::Data for list of debhelper commands that modify + maintainer scripts. Patch by Raphael Geissert. + + [FL] Add new tag missing-build-dependency-for-dh_-command for + debhelper commands that are not from the debhelper package. + Patch by Raphael Geissert. + + [FL] Add new tag debhelper-but-no-misc-depends which warns + about missing misc:Depends if you use commands that might + set it. Patch by Raphael Geissert. (Closes: #499737) + * checks/fields: + + [ADB] Ignore non-dependency fields when considering whether a + versioned dependency is satisfied by the perl core packages. + Based on a patch by Niko Tyni. (Closes: #500720) + + [RA] Stop checking for a libmodule-build-perl build dependency since + Module::Build now comes with Perl. Thanks, Raphael Hertzog. + (Closes: #506697) + * checks/files: + + [ADB] Apply patches from Raphael Geissert to update the list of + embedded PHP libraries: + - Add detection for the Snoopy and GeSHi libraries and the use of + phpmailer.inc (rather than .php). + - Enable the libmarkdown-php check, as the package is now in unstable. + - Add support for the (not currently packaged and thus disabled) IXR + and kses libraries. + * checks/infofiles: + + [FL] Use $known_shells_regex from common_data. + * checks/menus: + + [FL] Use $known_shells_regex from common_data. + * checks/patch-systems{,.desc}: + + [ADB] Don't include dpatch comment lines containing no content + when determining whether the patch includes a description. + (Closes: #503695) + + [ADB] Add missing "diffstat" to the Needs-Info field. + + [ADB] Check whether quilt patches include a description. + (Closes: #498892) + * check/scripts: + + [FL] Use $known_shells_regex from common_data. + + [FL] Add icmake as a known interpreter as requested by + Frank B. Brokken. (Closes: #505868) + * checks/shared-libs{,.desc}: + + [ADB] Don't issue both symbols-file-contains-debian-revision and + symbols-file-contains-current-version-with-debian-revision for any + given symbol, as the latter implies the former and may thus create + noise in the tests' output. (Closes: #505826) + + [ADB] Add an experimental tag flagging shared libraries that call + _exit() or exit() without at some point calling fork() (a somewhat + inaccurate heuristic, but one which should weed out a number of + false positives). (Closes: #504257) + + * collection/objdump-info: + + [ADB] Only use readelf to emulate objdump if objdump returned "file + format not recognized". In cases where the objdump output was "invalid + operation", the output of etch's readelf is not particularly useful + and it's easier to simply let the checks scripts handle the objdump + output. + + * debian/control: + + [FL] Add dependency on libipc-run-perl for Lintian::Command. + + * doc/lintian.sgml: + + [ADB] Correct a few typos in the "overrides" section. + + * frontend/lintian: + + [FL] Convert to use Lintian::Output. + + [CW] Add jaunty as an allowable distribution for Ubuntu, and remove + the EOLed edgy and feisty. + + [ADB] Don't complain about unused overrides if the check script + for the overridden tag hasn't been run (or --tags was used and + the overridden tag not specified). (Closes: #501722) + + * lib/Lintian/Output: + + [FL] New module to bundle output methods. + * lib/Tags/{ColonSeparated,LetterQualifier}.pm: + + [FL] Move to lib/Lintian/Output and convert to subclasses of + Lintian::Output. + * lib/Lintian/Output/XML.pm: + + [FL] New experimental output format. + * lib/Lintian/Command: + + [FL] New utility module as a replacement for Pipeline. Provides + a convenient wrapper around IPC::Run. + + * lib/Lab.pm: + + [FL] Convert to use Lintian::Output. + * lib/Tags.pm: + + [FL] Convert to use Lintian::Output. + * lib/Pipeline.pm: + + [FL] Remove, replaced by Lintian::Command. + * lib/Spelling.pm: + + [RA] Add subversion to Subversion correction for package descriptions. + Thanks, Sandro Tosi. (Closes: #506793) + + [ADB] Don't check text contained within square brackets for + capitalisation mistakes. This allows for lists such as "[ cvs | + subversion ]" to be included. + * lib/Util.pm: + + [FL] Convert to use Lintian::Output. + + [FL] Add some new utility functions: delete_dir copy_dir gunzip_file + touch_file. + + * private/refresh-debhelper-data: + + [FL] New script to update debhelper related data by Raphael Geissert. + - data/debhelper/miscDepends_commands: debhelper commands that set + misc:Depends + - data/debhelper/maint_commands: debhelper commands that edit + maintainer scripts + - data/debhelper/dh_packages: packages that contain debhelper commands + - data/debhelper/dh_commands: mapping of debhelper commands to + packages they are contained in + + * testset/{diffs,filenames}: + + [ADB] Generate the files "files/'\ " and "filenames.c~" at build time + instead of including it in the source package, to allow lintian to be + imported in to Bazaar. + + -- Frank Lichtenheld <djpig@debian.org> Sun, 28 Sep 2008 10:35:47 +0200 + +lintian (2.0.0) unstable; urgency=low + + The "and this is only the beginning" release. + + * checks/fields: + + [RA] Allow tildes in the optional version number in the Source + field. Thanks, Rene Engelhard. (Closes: #500063) + + * checks/scripts: + + [ADB] Detect brace expansions with either a leading or trailing + blank component (e.g. "{foo,}"). Thanks to Jonny Lamb for pointing + this out. + + * frontend/lintian: + + [FL] Fix config file parsing which I completely broke in ~rc1. + + * lib/Lintian/Schedule.pm: + + [FL] Fix parsing of source package entries in package lists. + + * man/lintian.1: + + [FL] Remove a stray backslash. + + * reporting/harness: + + [FL] Include STDERR output in lintian.log. + + -- Frank Lichtenheld <djpig@debian.org> Sun, 28 Sep 2008 01:08:41 +0200 + +lintian (2.0.0~rc2) experimental; urgency=low + + * Summary of tag changes: + + Added: + - package-superseded-by-perl + + * checks/copyright-file: + + [FL] Also detect v1.1 of CeCILL license, not only v2.0. + (Closes: #498994) + * checks/debhelper: + + [FL] Use new Lintian::Collect::Source->binaries method. + * checks/fields{,.desc}: + + [FL] Warn about Perl module packages superseded by Perl + core. Patch by Niko Tyni. (Closes: #498897) + * checks/rules: + + [FL] Do not issue desktop-file-but-no-dh_desktop-call if the + package uses dh. (Closes: #497247) + * checks/scripts: + + [FL] Accept the ocaml virtual packages as providing ocamlrun. + Based on a patch by Stephane Glondu. (Closes: #495431) + * checks/standards-version: + + [FL] Use new Lintian::Collect::Source->binaries method to + fix udeb detection. Thanks to Raphael Geissert. + (Closes: #498096) + + * frontend/lintian: + + [FL] Add support for ranges to --display-level. + + * lib/Lintian/Collect/Source.pm: + + [FL] New binaries method that returns a hash with binary package + names and types. + + -- Frank Lichtenheld <djpig@debian.org> Sun, 21 Sep 2008 15:56:51 +0200 + +lintian (2.0.0~rc1) experimental; urgency=low + + * [FL] Merge the results of the GSoC project by Jordà Polo, + which fully implements a tag classification system in two + dimensions (Severity and Certainty). + The default output is unchanged, see the documentation on + how to utilize the new features. + + * Summary of tag changes: + + Added: + - description-contains-dh-make-perl-template + - doc-base-uses-applications-section (actually a split of + doc-base-unknown-section in two tags) + - embedded-pear-module + - embedded-php-library + - improbable-bug-number-in-closes + - maintainer-also-in-uploaders + - maintainer-script-ignores-errors + - manpage-has-errors-from-pod2man + - ored-build-depends-on-obsolete-package (actually a split of + build-depends-on-obsolete-package in two tags) + - versioned-dependency-satisfied-by-perl + - windows-devel-file-in-package + + Removed: + - package-needs-python-policy-debhelper + + * checks/*.desc: + + [ADB] Fix a number of spelling mistakes and typos. + * checks/changelog-file{,.desc}: + + [RA] Warn about closing a bug number less than 100; this is likely + a typo or placeholder. Thanks, Raphael Geissert. (Closes: #497350) + * checks/debconf: + + [ADB] Avoid flagging a template as unused if its definition is + followed by a string of whitespace. + * checks/debhelper{,.desc}: + + [FL] Do not require versioned build-depends for compat level 5 + anymore. Sarge is not supported anymore. (Closes: #496826) + + [FL] Drop package-needs-python-policy-debhelper. Sarge is not + supported anymore. + * checks/description{,.desc}: + + [FL] Warn about left-over dh-make-perl statement. + * checks/fields{,.desc}: + + [RA] Check for a maintainer also listed in uploaders. Patch from + Raphael Geissert. + + [ADB] Don't issue an error tag for obsolete packages in Build-Depends + fields if the package is part of an "ORed group" of packages and is + not listed first. As with Depends, an info tag will still be issued + for such packages. (Closes: #496875) + + [FL] Check Enhances together with the other relational fields. + + [FL] Add ant to @rule_clean_depends. (Closes: #498135) + + [FL] Due to a logical error "source-field-malformed" was never actually + checked. Patch by Raphael Geissert. (Closes: #498197) + + [FL] Check for unnecessary versioned dependencies on Perl core modules. + Patch by Niko Tyni. (Closes: #497887) + * checks/files{,.desc}: + + [RA,FL] Patches from Raphael Geissert: + - Check for embedding copies of jsjac and jsMath. + - Check for embedded copies of tinymce/2 and allow the usage of + regexes on pkgs names. + - Add xinha on the embedded js lib check, which is not yet in the archive + thus disabled. + - Add experimental check for embedded copies of PEAR PHP modules. + + [ADB] Rework the description for embedded-javascript-library to make + it clear that the listed libraries are examples rather than an + exclusive list. Also fix a spelling mistake. + + [ADB] Re-add an accidentally removed slash to the check for embedded + Javascript libraries, removing some false positives. (Closes: #497215) + + [FL] Check for Windows Development files in packages. Based on a patch + by Raphael Geissert. + * checks/manpages{,.desc}: + + [FL] Warn about the POD ERRORS sections pod2man generates. + (Closes: #497864) + * checks/menus{,.desc}: + + [FL] Do not complain if the unknown doc-base section is the subsection + of a known section. The doc-base documentation seems to suggest that + this is o.k. (Closes: #495836) + + [FL] Issue a special tag if the doc-base section would be valid except + for a prefixed App(lication)s. + * checks/scripts: + + [FL] Change all regular expressions in depends_needed to + require spaces after the command and not \b. There are + very few cases where this would produce false negatives + but there are reported false positives for the current + expressions. + + [RA] Improve the check for possibly insecure /tmp files to check + variable assignment as well and reduce false positives by ignoring + uses with $RANDOM or without a filename. Based on a patch from + Raphael Geissert. + + [FL] Update lists of available interpreter versions (remove: jruby1.1, + pike7.7, php4, octave2.9, add: tcl8.6, tk8.6). (Closes: #485954) + + [FL] Add . and + to regex for command-with-path-in-maintainer-script. + Based on a patch from Raphael Geissert. + + [FL] Check for missing set -e in maintainer scripts. Patch by + Raphael Geissert. + + [FL] Add mksh as a valid interpreter. (Closes: #498075) + + [FL] Handle continued lines in maintainer shell scripts correctly. + Based on a patch by Rafael Laboissiere. (Closes: #495176) + + * collection/objdump-info: + + [ADB] Correctly handle shared objects with no symbol versioning when + using readelf. + + [ADB] Update the readelf version table parsing code to handle hidden + symbols. + + * data/fields/perl-provides: + + [FL] Data about Perl modules that are available both in Perl and as + separate packages. + * private/refresh-perl-provides: + + [FL] Script to update data/fields/perl-provides. By Niko Tyni. + + * doc/lintian.sgml: + + [FL] Document wildcard support in overrides. + + * frontend/lintian: + + [RA] Ensure we close the pipe to lintian-info before exiting, since + otherwise lintian-info may print the rest of our output after + lintian exits, producing confusing output interleaved with the + shell prompt. (Closes: #496295) + + [FL] Actually make package version available to output formatters. + Currently used only by experimental colon-separated output. + + [FL] Use new module Lintian::Schedule and make package architecture + available to output formatters if possible. + Currently used only by experimental colon-separated output. + + * lib/Tags.pm: + + [FL] Add support for specifying wildcards in overrides. + (Closes: #253884) + * lib/Tags/ColonSeparated.pm: + + [FL] Update for new features and make a little bit easier to read + for humans: + - Update the format to include the new severity/certainty info. + - Include information whether the tag is experimental. + - Move the detailed override info to the end but include info + flag about the override status in the same column that also + includes the experimental flag info. + * lib/Lintian/Schedule.pm: + + [FL] Factor out some scheduling code. + * lib/Lintian/Data.pm: + + [FL] Extend Lintian::Data to handle key/value pairs. Patch by + Niko Tyni. + + * man/lintian.1: + + [FL] Document udeb support in description for --packages-file. + + * reporting/templates/maintainer.tmpl: + + [ADB] Don't list packages in the summary at the top of the main + report page if all of the issues reported for the package were + "info" or "experimental". (Closes: #498617) + + * t/runtests: + + [FL] Copy the changes to testset/runtests from JP's branch. + + [FL] Remove global tests that were duplicated from testset/runtests, + which will not go away in the foreseeable future. + + [FL] Print a warning if no tests were run. Based on a patch by + Raphael Geissert. + + [RA] Fix single test mode. + * testset/runtests: + + [FL] Print a warning if no tests were run. Based on a patch by + Raphael Geissert. + + -- Frank Lichtenheld <djpig@debian.org> Sun, 14 Sep 2008 03:31:54 +0200 + +lintian (1.24.4) unstable; urgency=low + + The "[JP] is Jordà Polo" release. + + * checks/*.desc: + + [JP] Update, fix and unify various manual references. + * checks/copyright-file: + + [ADB] Don't flag copyright files using phrases such as "previously + distributed under the GNU GPL" as lacking a reference to the license. + Thanks Raphael Geissert. + * checks/cruft{,.desc}: + + [FL] Add new check for outdated libtool files. + (Closes: #293296) + + [FL] Don't exclude all of lintian, but only files in the test suites. + * checks/files{,.desc}: + + [ADB] Don't warn about embedded Javascript libraries in the package + that actually provides the library. Thanks Raphael Geissert for + pointing out the problem. (Closes: #494577) + + [ADB] Enhance the description of package-contains-empty-directory to + mention how to remove such directories when building the package. + Thanks Chris Lamb. (Closes: #495153) + + [ADB] Add libjs-yui (the Yahoo User Interface Library) to the list of + packages which contain Javascript libraries and should be depended upon + rather than embedded in other packages. Patch from Chris Lamb. + (Closes: #495155) + * checks/manpages: + + [RA] Also ignore "cannot adjust line" errors from man for lines that + contain URLs. Thanks, Stéphane Glondu. (Closes: #491578) + * checks/scripts: + + [ADB] Split the "read without variable or with invalid options" bashism + test in two, thus enabling the checks to be more accurate and avoiding + an uninitialized variable warning. (Closes: #494450) + + [RA] Add dash to the recognized characters in a command in + command-with-path-in-maintainer-script to avoid truncation. Thanks, + Thijs Kinkhorst. (Closes: #494723) + + [RA] Add jruby1.1, thanks Sebastien Delafond. (Closes: #494919) + * checks/shared-libs{,.desc}: + + [RA] Clarify that shlibs-declares-dependency-on-other-package can be + issued for a version mismatch. (Closes: #494400) + + [ADB] Correctly match alternative dependency templates in symbols + files which specify an unversioned dependency. + * checks/standards-version: + + [FL] Avoid Perl warning if only the timestamp could not be parsed. + + * collection/objdump-info: + + [ADB] Correctly parse a readelf symbol version block containing the + definition of a single symbol. + + * debian/rules: + + [FL] Use $(PERL) instead of a hardcoded path. + + [FL] Clean-up the binary-indep code. + + [FL] Add build stamp file. + + * doc/README{,.in}: + + [FL] Move README to README.in and add the listing of lintian + options on build time from lintian --help. + + * frontend/lintian: + + [FL] Do not try to use fail() before the lintian libraries are + loaded. + + [JP] Allow tags from the "lintian" checkset to be specified with --tags. + + * lib/manual_refs: + + [JP] Regenerate with new manual_refs_update.pl script. + (Closes: #493660) + * lib/Read_taginfo.pm, lib/Manual_refs.pm: + + [JP] Add support for new manuals, allow specifying manual + sections by id and not only by section number. + + [JP] Link manpages to manpages.debian.net. + + * private/manual_refs_update.pl: + + [JP] Add support for many more manuals (FHS, debconf-spec, + {menu,python,perl}-policy, libpkg-guide). + + -- Frank Lichtenheld <djpig@debian.org> Fri, 22 Aug 2008 07:43:52 +0200 + +lintian (1.24.3) unstable; urgency=low + + The "greetings from Argentina" release. + + * checks/binaries: + + [ADB] Use Lintian::Collect throughout rather than reparsing file-info + and objdump-info. + * checks/changelog-file{,.desc}: + + [ADB] Use Lintian::Collect instead of reading the fields/*, file-info + and objdump-info files. + + [ADB] Remove a misplaced word from the description of the tag + "debian-changelog-file-contains-invalid-email-address". + * checks/copyright-file{,.desc}: + + [ADB] Drop the "copyright line too long" check. Most of the issues + it flags aren't easily fixable, particularly where the copyright file + is (semi)automatically generated. (Closes: #491302, #491365, #491685) + + [ADB] Use Lintian::Collect for accessing control fields and reading the + list of files in the package. + + [ADB] Don't flag use of version 1 of the GPL, or licenses using phrases + such as "compatible with the GPL" (for example, the W3C Software + License) as missing a reference to common-licenses + + [ADB] Replace references to the GPL in GFDL and LGPL related tags + with the appropriate license. Also remove a misplaced word. + * checks/cruft: + + [ADB] Use Lintian::Collect for accessing control fields + * checks/debconf: + + [ADB] Don't complain about unused debconf templates in udebs. + (Closes: #491135) + + [RA] Try to recognize at least some debconf template uses in Perl. + + [ADB] Replace fields/* and scripts access with Lintian::Collect + + [ADB] Don't flag the shared templates used for dictionaries-common + co-ordination as unused. + + [FL] Remove debconf-error-requires-versioned-depends since post-lenny + a tag for the sake of sarge-backports clearly makes no sense anymore. + (Closes: #493920) + * checks/description: + + [RA] Don't warn about a synopsis that ends in "etc." Patch from + Chris Lamb. (Closes: #491252) + + [ADB] Use Lintian::Collect to read the package's description. + * checks/etcfiles: + + [ADB] Walk Lintian::Collect->index instead of reading the "index" file. + * checks/fields{,.desc}: + + [RA] Warn about packages that depend exclusively on makedev. + Thanks, Josh Triplett. (Closes: #491625) + + [ADB] Use Lintian::Collect::field() to determine the content of fields + from control files rather than reading the fields/* files. This and + similar changes to other scripts should improve performance as the + Collect object caches the lookup result. + + [ADB] Reformat a couple of tags' descriptions. + * checks/files{,.desc}: + + [ADB] Switch to using Lintian::Collect. + + [ADB] Fix a couple of bugs in the parsing of the list of scripts + contained within a package which led to scripts in /usr/share/doc + being incorrectly tagged as executable-in-usr-share-doc. + + [ADB] Update a couple of Policy references. Thanks Jordà Polo. + + [ADB] Warn when a package embeds a copy of the Universal Feed Parser. + Patch from Chris Lamb. (Closes: #493156) + + [FL, ADB] Don't issue tag file-in-unusual-dir for files where we already + issued one of the specific dir-or-file-in-* tags. (Closes: #493921) + + [ADB] Add a missing "have" to package-contains-ancient-file's + description. + * checks/huge-usr-share: + + [ADB] Replace (the single) direct access to fields/* with ::field() + + [ADB] Replace an outdated link to the Developer's Reference. + Thanks Jordà Polo. + * checks/infofiles{,.desc}: + + [ADB] Use Lintian::Collect to retrieve information about the files + being processed. + + [ADB] Update the tag "install-info-not-called-with-quiet-option"'s + Policy reference. Thanks Jordà Polo. + * checks/init.d.desc: + + [ADB] Update a Policy reference. Thanks Jordà Polo. + * checks/lintian.desc: + + [ADB] Add a Policy reference to bad-section-in-changes-file. Thanks + Jordà Polo. + * checks/manpages{,.desc}: + + [RA] Suppress warnings about inability to break a line that contains + a URL. URLs often can't be usefully broken. Based on a patch by + Damyan Ivanov. (Closes: #491578) + + [ADB] Update the Policy reference for manpage-has-wrong-extension. + + [ADB] Use Lintian::Collect rather than parsing the "index" and + "file-info" files. + + [FL] In description for manpage-has-errors-from-man note how to + reproduce this errors outside of lintian. (Closes: #492930) + * checks/menu-format{,.desc}: + + [ADB] Use Lintian::Collect to parse the list of files in the package. + + [ADB] Don't raise menu-command-not-in-package for 'sensible-browser' + or 'sh'. Thanks Raphael Geissert. + + [RA] Warn about .kdelnk files and [KDE Desktop Entry] headings in + desktop files. Patch from Raphael Geissert. + * checks/menus{,.desc}: + + [ADB] Fix a typo; thanks Jordà Polo. + + [ADB] Use the file list from Lintian::Collect. + * checks/nmu{,.desc}: + + [ADB] Use Lintian::Collect for maintainer / uploader information + + [ADB] Add a DevRef reference to changelog-should-mention-nmu. Thanks + Jordà Polo. + * checks/patch-systems: + + [RA] Combine all patch-system-but-direct-changes-in-diff instances + into a single message to reduce the noise from packages that rebuild + all auto-generated files outside the patch system. Thanks, Julien + Cristau. (Closes: #491296) + + [ADB] Migrate fields/* reading to use ::Collect::field(). + * checks/po-debconf{,.desc}: + + [ADB] Check that at least one complete translation exists. Thanks Jordà + Polo. + * checks/rules: + + [ADB] Use ::Collect for field access. + + [FL] Do not complain about using dh in an unused binary-* target. + * checks/scripts{,.desc}: + + [RA] Warn about maintainer scripts that prepend a path to commands. + Based on a patch by Raphael Geissert. (Closes: #376184) + + [ADB] Don't read fields/*, scripts, index or file-info directly as the + contents have almost certainly been cached in Lintian::Collect already. + + [ADB] Update a couple of Policy references. Thanks Jordà Polo. + * checks/shared-libs.{,desc}: + + [ADB] Improve the description of no-symbols-control-file. + + [ADB] Migrate to using ::Collect instead of parsing the index, file-info + and objdump-info files directly. + + [ADB] Disable ldconfig-symlink-before-shlib-in-deb as it can never be + tested correctly using the information currently available to the + scripts + * checks/watch-file: + + [FL] Do not issue debian-watch-file-should-mangle-version for + empty watch files. + + * data/doc-base/sections: + + [ADB] Resynchronize with doc-base's section list (adding + Programming/OCaml). (Closes: #491440) + + * debian/postrm: + + [FL] Do not try to remove /var/spool/lintian if it doesn't exist + (dpkg might already removed it at this point). + + * doc/desc-files: + + [ADB] Update the description of tags to include experimental and info + tags. + * doc/README: + + [ADB] Add -E / --show-experimental, -T / --tags and --tags-from-file + to the option list. + + * frontend/lintian: + + [FL, ADB] Add new --tags/-T option to limit the amount of checks + run not by check names but by names of tags you're interested + in. Requested by Joerg Jaspert for ftpmaster. (Closes: #493903) + + [FL] Add --tags-from-file option to make it easier to specify + a long list of tags. + + * lib/Lintian/Collect/Binary.pm: + + [ADB] When parsing objdump-info, indicate whether a shared object is + an Ocaml executable. Also add information on segments which various + checks scripts use which hadn't made it here yet. + + [ADB] Make index() return a hash rather than an array + + [ADB] Add support for parsing the "scripts" index file + * lib/Read_taginfo.pm: + + [FL] Handle URLs in the Ref: field. + * lib/Tags.pm: + + [ADB] If --tags was used, don't issue tags that aren't in the provided + list. + + * man/lintian.1 + + [ADB] Update the list of check scripts, removing the no longer present + deb-format and perl and adding the nmu script. + + [FL] Document the new --tags/-T option. + + [FL] Document the new --tags-from-file option. + + * reporting/templates/index.tmpl: + + [RA] Add a link to lintian.log. Suggested by Stefano Zacchiroli. + + * t/: + + [FL] Begin work on a new testsuite. + + * testset/fields: + + [ADB] New testset from Tobias Quathamer (including some tags which + previously weren't tested) + * testset/tags.scripts{,.sed}: + + [ADB] Munge .changes filenames so that the tests produce consistent + output across architectures + + -- Frank Lichtenheld <djpig@debian.org> Sat, 09 Aug 2008 00:35:13 -0300 + +lintian (1.24.2) unstable; urgency=low + + The "welcome Adam D. Barratt!" release. + + * checks/binaries.desc: + + [ADB] Add some FHS references. Thanks Jordà Polo. + * checks/changelog-file{,.desc}: + + [ADB] Add missing "use Dep". Thanks gregor herrmann (Closes: #488397) + + [RA] Ignore "CNRI OPEN SOURCE GPL-COMPATIBLE LICENSE AGREEMENT" when + looking for missing GPL references. Thanks, Scott Kitterman. + (Closes: #490264) + + [ADB] Fix a typo in the description of syntax-error-in-debian-changelog. + Thanks Jordà Polo. + * checks/copyright-file{,.desc}: + + [ADB] Check for over-long lines in copyright files. (Closes: #479651) + * checks/cruft{,.desc}: + + [ADB] Check for BTS control directories in source packages and diffs + in addition to the existing binary package checks. (Closes: #481787) + * checks/debconf{,.desc}: + + [ADB] Warn about the use of "_Choices" in templates file and suggest + using "__Choices" instead (Closes: #481152) + + [ADB] Check all maintainer scripts for issues, rather than just config + and postinst. + + [ADB] Detect debconf templates which appear to be unused. + + [ADB] Replace the {config,postinst}-loads-obsolete-confmodule tags + with a new loads-obsolete-confmodule test which is used for all + maintainer scripts and outputs the script name as part of its extra data. + * checks/description{,.desc}: + + [RA] Warn about duplicated words in the description. Patch from + Raphael Geissert. (Closes: #424746) + * checks/fields{,.desc}: + + [FL] Do not complain about obsolete packages if there are + non-obsolete alternatives specified and if the obsolete + package is not listed first. Issue an info tag for them + though. Patch by Adam D. Barratt. (Closes: #486145) + + [ADB] Update and add some Policy and DevRef references and fix some + typos. Thanks Jordà Polo. + + [RA] Recognize and do not warn about Ubuntu security update version + numbers for multiple releases. (Closes: #489222) + * checks/files{,.desc}: + + [ADB] Warn if the package contains embedded copies of separately + packaged Javascript libraries. Patch by Chris Lamb. (Closes: #489191) + + [ADB] Fix a typo in the description of executable-is-not-world-readable + * checks/infofiles{,.desc}: + + [ADB] Warn if the package's postinst installs info directory entries + but the prerm doesn't remove them. (Closes: #182512) + + [ADB] Treat --remove-exactly as indicating removal of an info directory + entry as well as --remove. + * checks/menus{,.desc}: + + [ADB] Check that menu-method files include menu.h (Closes: #184104) + * checks/nmu: + + [RA] When comparing maintainers, treat the right-hand side of the + e-mail address as case-insensitive. (Closes: #486795) + * checks/patch-systems{,.desc}: + + [RA] Check quilt patches as well as dpatch patches, and also check + quilt patches when using the 3.0 (quilt) package format. Fix build + dependency checking and check all dpatch files. Patch from Raphaël + Hertzog. (Closes: #484549) + + [ADB] Treat 00list* as dpatch series files rather than just 00list. + (Closes: #482040). Also rename dpatch-index-references-non-existant-patch + to dpatch-index-references-non-existent-patch. + * checks/rules{,.desc}: + + [RA] Warn about use of DEB_BUILD_OPTS. Patch from Raphael Geissert. + * checks/scripts: + + [FL] Apply File::Spec->canonpath() to rpaths to improve + matching with directories. + + [FL] Do not check zsh scripts, since zsh -n gives false + positives. Downgrades #485885 to wishlist. Also see + #175467. Patch by Raphael Geissert. + + [FL] Remove "quoted quotes". They're likely to be inside + another pair of quotes; we're not interested in + them for their own sake and removing them makes finding + the limits of the outer pair far easier. Patch by + Adam D. Barratt. + + [FL] Improve heredoc detection. Patch by Adam D. Barratt. + + [FL] Improve script_is_evil_and_wrong() to catch more scripts. + Patch by Adam D. Barratt. + + [ADB] Update bashism regexes to add new checks, improve performance + and reduce false positives. (Closes: #490227) + * checks/shared-libs{,.desc}: + + [ADB] Implement syntax and sanity checking for symbols files + (Closes: #452216) + + [ADB] Check symbols files for dependencies that are not satisfied by + the package itself (Closes: #461575) + * checks/standards-version{.desc,}: + + [RA] Only issue out-of-date-standards-version once. Noticed by + Raphael Geissert. + + [RA] Base the two-year clock for ancient-standards-version on when + the Policy version was superseded, not when it was issued. Thanks, + Scott Kitterman. (Closes: #487780) + + [RA] Warn for packages declaring a standards version released after + the date of the most recent changelog entry. Based on a patch by + Raphael Geissert. + * checks/watch-file{,.desc}: + + [FL] Check for more Debian specific strings in version + number. Issue an info tag if the watch file uses + uversionsmangle to add the Debian specific string. Patch + by Raphael Geissert. (Closes: #485879) + + [RA] Warn about watch files in native packages and check those watch + files for other problems anyway. Allow whitespace around the + version declaration. More correctly handle continuation lines. + Patch from Raphael Geissert. + + [RA] Check for using the Sourceforge QA redirector with deprecated + arguments. Patch from Raphael Geissert. + + [RA] Be more explicit when warning about missing watch files that + Lintian recommends adding a watch file containing only comments for + any non-native package where it's not possible to write a meaningful + watch file, not only for packages unmaintained upstream. + + * collection/objdump-info: + + [ADB] If objdump from binutils 2.17 fails to parse a file then + attempt to gather the required information using readelf instead. + This allows us to process 64-bit packages on etch/i386 again + (i.e. on lintian.d.o) (Closes: #487746) + + * data/fields/obsolete-packages: + + [RA] mailx is not obsolete. It's a virtual package. Thanks, martin + f krafft. (Closes: #488114) + + [RA] Add the cupsys packages, all of which have been renamed to cups. + Patch from Raphael Geissert. + + * debian/control: + + [FL] Adapt VCS-* headers for move from SVN to git. + * debian/copyright: + + [FL] Add Patrick Schoenfeld (for checks/watch-file). + + [ADB] Update repository information and GPL2 URL. + + [RA] Add Adam D. Barratt to the maintainer list so that readers can + expand initials in the changelog. + * debian/{prerm,postrm}: + + [RA] Move prerm to postrm and remove the default /var/spool/lintian + lab using shell instead of lintian. We only want to remove the lab + on purge, and purge is only passed to postrm, not prerm, by which + point the lintian frontend is gone. (Closes: #489860) + + * doc/CREDITS: + + [FL] Add Raphael Geissert and Adam D. Barratt. + * doc/lintian.sgml: + + [ADB] Add reference to new option to display experimental tags. + + * frontend/lintian: + + [ADB] Add a new --show-experimental / -E option which indicates + that experimental tags should be displayed. + + [RA] Exit with the correct exit status if no packages were found + because non-existent packages were specified on the command line. + + * lib/Lintian/Collect/Binary.pm: + + [FL] Add support for file-info file. + + [FL] Add support for objdump-info file. + * lib/Spelling.pm: + + [RA] Add a couple more spelling corrections and capitalization + checks for LaTeX and TeX. Thanks, Raphael Geissert. + * lib/Tags.pm: + + [ADB] (Re-)Add support for experimental tags. + + * man/lintian.1: + + [FL] Document watch-file check. + + [ADB] Document new option to display experimental tags. + + [RA] Refer to lintian-info(1) for printing tag descriptions. Patch + from Chris Lamb. (Closes: #490374) + + * reporting/harness: + + [ADB] Process packages using -E so that experimental tags are included. + * reporting/html_reports: + + [FL] Mark the tag pages with the correct code. + * reporting/lintian.css: + + [RA] New style for marking packages that override a tag on the tag + summary page. Patch from Jordà Polo. + * reporting/templates/clean.tmpl: + + [ADB] Note that the full report includes experimental tags. + * reporting/templates/tag.tmpl: + + [FL] Mark overridden tags. + + [RA] Mark packages that override all instances of a given tag. + Patch from Jordà Polo. + * reporting/templates/maintainer.tmpl: + + [FL] Add useful links for each source package. + With layout help by Jordà Polo. + + [FL] Include Co-maintained packages in the summary + at the top of the page. Also sort the list. Patch + by Jordà Polo. + + [ADB] Note that the full report includes experimental tags. + + * testset/runtests: + + [ADB] Support experimental tags + + -- Russ Allbery <rra@debian.org> Sun, 13 Jul 2008 17:28:08 -0700 + +lintian (1.24.1) unstable; urgency=medium + + The "mostly for the benefit of lintian.debian.org only" release. + + * frontend/lintian: + + [FL] Increase LAB_FORMAT to 8. This should have happened + in 1.23.47, since the unpack-binpkg-l1 then produced a + new file which checks depend upon. Since this only + affects static labs and only if packages get rechecked + (i.e. not on harness -i runs) it only got noticed now. + Use urgency=medium for this fix. + + * checks/watch-file: + + [FL] Fix the order of two regular expression to use + the more specific one first. Patch by Raphael Geissert. + (Closes: #485884) + + * unpack/unpack-binpkg-l1: + + [FL] Don't include version number from Source: field in + the source symlink. Noted by RA. (Closes: #485474) + + * lib/Lintian/Collect/Binary.pm: + + [FL] New module for retrieving binary package information. + + * reporting/checkout-release: + + [FL] New helper script for lintian.d.o maintenance. + * reporting/config: + + [FL] Generate files in $HOME/www directly instead + of $HOME/www/reports. + * reporting/html_reports: + + [FL] Allow inclusion of the new shared templates by + convenient functions. Remove some duplicated data + setting while I'm on it. + + [FL] Generate the manual and lintian.log symlinks + dynamically, so that we don't need the reports subdirectory + anymore. Also generate a reports -> . symlink for + backwards compatibility. + * reporting/templates/{head,foot}.tmpl: + + [FL] New templates meant for inclusion by other templates + for common header and footer parts + * reporting/templates/index.tmpl: + + [FL] Remove obsolete reports/ subdirectory from the links. + * reporting/templates/maintainer.tmpl: + + [RA] Redisplay the tag name for each separate binary package, also + fixing list nesting problems in some cases. Patch from Jordà + Polo. + * reporting/templates/*.tmpl: + + [FL] Replace common headers/footers with calls to the + new head()/foot() functions. + + -- Frank Lichtenheld <djpig@debian.org> Thu, 12 Jun 2008 17:28:44 +0200 + +lintian (1.24.0) unstable; urgency=low + + The "Policy 3.8.0, infrastructure evolution, and real web design" + release. + + * checks/binaries: + + [RA] Fix code for filtering out NSS modules from SONAME checks. + + [RA] When checking SONAMEs against package names, convert all + underscores to dashes, not just the first one. Thanks, Gonéri Le + Bouder. (Closes: #482450) + + [RA] Remove several-sonames-in-same-package. This is frequently not + an error and Lintian doesn't have enough information to know. + * checks/common_data.pm: + + [RA] armel is now a standard architecture. + + [RA] Remove %known_obsolete_packages, now handled via data. + + [RA] Merge %non_standard_archs into %known_archs. + * checks/control-file{.desc,}: + + [RA] Check for self-dependencies in the source package since the + current dpkg-gencontrol silently fixes them but they may indicate + other problems. Thanks, Patrick Matthäi. (Closes: #471740) + * checks/copyright-file{.desc,}: + + [RA] Check for copyright files containing the Apache 2.0 license, + which is now in common-licenses. + * checks/cruft: + + [RA] Format: 3.0 (quilt) packages are not native even though they + have no *.diff.gz. Thanks, Raphael Hertzog. (Closes: #483384) + + [RA] Use the new Lintian::Collect interface to check whether a + package is native. + * checks/debconf: + + [RA] Don't warn about using db_input in postinst if a config script + also exists and uses db_input. The package maintainer probably + knows what they're doing. + * checks/fields: + + [RA] Syntax-check Breaks like other relationship fields. Warn if + any packages use Breaks for right now. Only check for duplicate + libraries and Tcl versions in dependency fields, not Breaks, + Conflicts, and other similar fields. Warn if Breaks is used without + a version. Check that Breaks is not inconsistent with other + dependency fields. + + [RA] Use Lintian::Data to load the obsolete package list. + + [RA] When checking whether a debug package has proper dependencies, + allow a dependency on any package name that starts the same as the + debug package up to the first dash. This will hopefully produce + fewer false positives. Thanks, Josselin Mouette. (Closes: #476587) + + [RA] Remove non-standard-architecture-in-source-relation and + non-standard-architecture. These aren't bugs. + * checks/filenames{.desc,}: + + [RA] Warn about BTS data directories in packages (.be and + .ditrack). Patch by Ben Finney. (Closes: #481787) + * checks/init.d: + + [RA] Try to allow for postinst scripts written in Perl and still + recognize the update-rc.d calls. + * checks/manpages{.desc,}: + + [RA] Only ignore errors about wrapping lines for Asian locale man + pages, since that's where the groff trouble lies. Ignore character + set errors for all man pages with old versions of man and no man + pages with current versions of man since the new character set + handling should cope. (Closes: #474052) + + [FL] Ignore more unicode issues with old man. + + [RA] Warn about inclusion of the country name in the localized man + page directory unless it's one of the known exceptions. + + [RA] Mention in binary-without-manpage that the case of the man page + should match the case of the binary even if man can find it anyway. + (Closes: #484028) + * checks/md5sums: + + [FL] Don't complain about missing md5sums file if the + package only contains conffiles. (Closes: #482869) + * checks/nmu: + + [RA] Don't treat "Ack NMU" as an NMU declaration. Thanks, Joe + Nahmias. (Closes: #484600) + + [RA] Binary NMUs of QA-maintained packages are fine. + * checks/rules{.desc,}: + + [RA] Add some basic checks for whether debhelper programs are called + in a reasonable order. (Closes: #471869) + + [RA] Support pattern rules. (Closes: #483475) + * checks/scripts: + + [RA] Catch deprecated chown syntax even when options are given to + chown. Patch by Raphael Geissert. (Closes: #483775) + + [RA] $((var+1)) now works in dash and is in POSIX, so remove it from + bashisms. Patch by Adam D. Barratt. (Closes: #473156) + * checks/standards-version{.desc,}: + + [RA] Largely rewritten. Now contains a list of standards versions + with the date when they were released, adding 3.8.0. Only emit tag + out-of-date-standards-version if the newer version predates the date + of the package. Base ancient-standards-version on whether the + standards version of the package is more than two years old. Remove + package-declares-source-relation-but-has-older-standards-version; + policy 3.1.0 was a long time ago. (Closes: #472513) + * checks/watch-file{.desc,}: + + [RA] New checks for watch files, based on work by Patrick + Schoenfeld. (Closes: #234202, #409104, #456629, #472499) + + * data/fields/obsolete-packages: + + [RA] Moved from common_data.pm. Removed many very old packages that + nothing depends on and added many new packages identified by Riku + Voipio. (Closes: #475400) + + * debian/control: + + [RA] Update standards version to 3.8.0. + + [RA] Depend on libtimedate-perl for convenient date parsing. + + * frontend/lintian: + + [RA] Create a new Lintian::Collect object for each package being + checked and pass it into Checker::runcheck. + + * lib/Checker.pm: + + [RA] Pass a Lintian::Collect object as the third argument to the run + function of each check. + * lib/Lintian/Collect.pm: + + [RA] New module to retrieve package information. + * lib/Lintian/Collect/Source.pm: + + [RA] New module to retrieve source package information. + + * reporting/html_reports: + + [RA] Copy over images. Set the maintainer name to "Unknown + Maintainer" if not known. Pass the code for a tag into the per-tag + page. Based on a patch by Jordà Polo. + * reporting/images/*: + + [RA] New logo images from Jordà Polo. + * reporting/lintian.css: + + [RA] Significant overhaul of the lintian.d.o design by Jordà Polo. + * reporting/templates/*: + + [RA] Significant overhaul of the lintian.d.o design by Jordà Polo. + * reporting/templates/clean.tmpl: + + [FL] Include link to full maintainer report. Suggested by + Kartik Mistry. + + -- Russ Allbery <rra@debian.org> Sat, 07 Jun 2008 21:09:54 -0700 + +lintian (1.23.49) unstable; urgency=low + + The "Business as usual" release. + + * checks/binaries: + + [FL] Ignore rpaths to directories present in the same binary + package. Also ignore $ORIGIN since that obviously fulfills + that criterion. (Closes: #480636) + * checks/copyright-file{,.desc}: + + [FL] Implement new check for dh-make-perl boilerplate. + + [FL] New check for example URL from dh-make. Based on + a patch by Michal Čihař. (Closes: #481368) + * checks/debhelper: + + [FL] dh_lintian needs debhelper >= 6.0.7. Patch by David Paleino. + (Closes: #479088) + + [FL] Add basic support for debhelpers new dh utility. + (Closes: #477628) + + [FL] Suppress maintainer-script-lacks-debhelper-token for + single-udeb-only packages as well. (Closes: #471853) + * checks/files: + + [FL] Drop xresources-file-in-etc-without-proper-conflicts, since + the last package that conflict applies to was released with hamm! + Reported by Julien Cristau. (Closes: #480574) + * checks/menu-format: + + [FL] Don't issue false positives about menu files in format menu-2. + We don't check them for errors yet, though. (Closes: #478578) + * checks/patch-systems: + + [FL] Add basic support for dpatch list files which use cpp for + preprocessing. Patch by Jörg Sommer. (Closes: #477057) + * checks/scripts: + + [FL] Always use /bin/bash for shell script syntax check to give + consistent errors on systems with changed /bin/sh. Suggested + by Raphael Geissert. (Closes: #478192) + + * frontend/lintian: + + [FL] Don't issue a warning about Distribution: UNRELEASED in + .changes files. It can be annoying to have to ignore this error + during testing and dupload/dput/dak/etc... all will error out + on it anyway. Suggested by martin f krafft. (Closes: #382327) + + [FL] Add a --keep-lab option to make it easier to debug temporary + labs. (Closes: #401046) + + * lib/Util.pm: + + [FL] Only require Digest::SHA if the code path is really used. + This makes it unnecessary to install libdigest-sha-perl on + lintian.debian.org for now. + + * man/lintian.1: + + [FL] Document --keep-lab option. + + [FL] Fix error in checkname: s/patch-system/patch-systems/. + Reported by Jörg Sommer. + + * reporting/html_reports: + + [FL] Escape $email variable for usage in URI query strings. + Currently it is not used for anything else, so it is most simple + to do it in the actual code. Reported by Sandro Tosi. + (Closes: #481256) + + -- Frank Lichtenheld <djpig@debian.org> Tue, 20 May 2008 22:03:58 +0200 + +lintian (1.23.48) unstable; urgency=low + + The "Perl 5.10 compatibility" release. + + * checks/common_data.pm: + + [FL] Add 8.5 versions to known_tcls and known_tks. + * checks/copyright-file: + + [FL] Also apply the "possible-gpl-code-linked-with-openssl" checks + to Pre-Depends. + * checks/menus: + + [RA] Stop using a deprecated Perl construct that Perl 5.10 no longer + supports. Patch from Adam D. Barratt. (Closes: #479318) + * checks/shared-libs: + + [RA] Fix an unescaped | in the regular expression parsing postinst + files for ldconfig invocation. The regex had always been broken, + but in Perl 5.10 it causes a recursion error in the regex engine. + * checks/version-substvars: + + [FL] Also apply the "not-binnmuable-*" checks to Pre-Depends. + (Closes: #472247) + + * frontend/lintian: + + [RA] Work around a Perl 5.10 bug with Getopt::Long and sub handlers. + + * testset/runtests: + + [RA] dpkg-source now enables the -i and -I regexes by default. + Replace the defaults with ones that never match so that we can + continue testing for cruft left in source packages. + + -- Russ Allbery <rra@debian.org> Sun, 04 May 2008 12:57:48 -0700 + +lintian (1.23.47) unstable; urgency=low + + The "long time no upload" release. + + * checks/binaries{.desc,} + + [RA] Permit architecture: all packages to have binaries in the + multiarch directories. (Closes: #469301) + + [RA] Suggest an override for arch: all packages containing binaries + independent of the host architecture (such as for cross-compiles). + * checks/changelog-file: + + [RA] Quash more Perl warnings on badly malformed NEWS.Debian files. + * checks/control-files: + + [FL] Add 'triggers' as a valid control file. Thanks, Joey Hess. + (Closes: #473840) + * checks/copyright-file{.desc,}: + + [RA] Document handling of false positives for GPL, GFDL, and LGPL + license references and catch the GFDL 1.1 false positive. + + [FL] Add CeCILL license to false positives list for + copyright-should-refer-to-common-license-file-for-gpl. Thanks, + Alexandre Fayolle. (Closes: #472933) + * checks/cruft: + + [RA] Subversion conflicts generate three files, two with revision + numbers and one with .mine. Only warn about the revision numbers; + .mine probably won't occur alone and may be a false positive. + * checks/etcfiles: + + [RA] /etc/init.d/{skeleton,rc,rcS} are not conffiles, and README + files in /etc need not be. + * checks/fields.desc: + + [FL] Remove obsolete section base from list of valid sections in + unknown-section. (Closes: #471751) + * checks/files{.desc,}: + + [RA] /etc/init.d/{skeleton,README} don't need to be executable. + + [RA] Warn about linda overrides since linda has been removed from + the archive. Thanks, Y Giridhar Appaji Nag. (Closes: #469603) + + [RA] Check for numeric owners or groups outside of the reserved + static ranges. Patch from Håkon Stordahl. (Closes: #469924) + + [RA] Issue errors for installing files under /var/www. This isn't + in FHS, may not be the document root, and may break local files if + it is the document root. Thanks, Joerg Jaspert. (Closes: #470403) + + [RA] Don't consider files in bin directories that contain "copying" + or "license" to be extra license files. + + [FL] Don't complain about empty directories under + /usr/share/python-support since those might be needed. Thanks, + Josselin Mouette. (Closes: #473428) + + [RA] Ignore extra license files in examples subdirectories of + /usr/share/doc. Thanks, Daniel Jacobowitz. (Closes: #476149) + * checks/lintian.desc: + + [FL] Rename md5sum-mismatch-in-changes-file to + checksum-mismatch-in-changes-file. + * checks/nmu{.desc,}: + + [RA] Add support for +nmuX versioning for NMUs of native packages. + Patch from James Vega. (Closes: #475026) + + [RA] Don't consider an NMU changelog entries that mention NMU with + a variation of the word "incorporate." + * checks/scripts: + + [RA] Attempt to quash some Perl warnings. + + [RA] *.py files in /usr/{lib,share}, /etc/init.d/skeleton, and *.ex + files do not need to be executable even if they look like scripts. + + [RA] Add clisp, procmail, and rrdcgi, and another way interpreters + are templated in *.in files. + + [RA] Expect unversioned dependencies on OCaml packages rather than + versioned dependencies since the version changes frequently and + unversioned dependencies are what people are already using. Thanks, + Hideki Yamane. (Closes: #476417) + + [RA] Add inetutils-inetd and xinetd as additional update-inetd + providers. Patch from Guillem Jover. (Closes: #474077) + + [RA] If the call to some supporting program like update-inetd is + conditional on the existence of the program, assume the maintainer + knows what they're doing and don't warn. + * checks/shared-libs: + + [RA] Move the default ld.so search path into data. Drop obsolete + /usr/lib/libg++-dbg, /usr/X11R6/lib/Xaw3d, and libc5 compatibility + directories in the process. + + [RA] Allow and expect ldconfig, SONAMEs, and shlibs treatment of + libraries in multiarch directories. + + * data/binaries/multiarch: + + [RA] New file listing multiarch binary directories. + * data/shared-libs/ldconfig-dirs: + + [RA] New file listing directories searched by ld.so. + + * debian/compat: + + [FL] Increase debhelper compat level to 5. There is really + no need anymore to support building on sarge. + * debian/control: + + [FL] Add dependency on libdigest-sha-perl. + + [FL] Increase debhelper dependency to >= 5 + + * frontend/lintian: + + [RA] Qualify relative --root directories so that we don't break + later. Patch from Håkon Stordahl. (Closes: #469925) + + [CW] Add intrepid as an allowable distribution for Ubuntu. + + [FL] Support Checksums-* fields in .changes files. Follows + the same rules as the md5sum check. Add new option --checksums + as alias for --md5sums. (Closes: #476565) + + * lib/Spelling.pm: + + [RA] Avoid Perl warnings when called with an uninitialized value. + + [RA] Correct "meta package" and "meta-package" in descriptions to + "metapackage". Thanks, Frank S. Thomas. (Closes: #476681) + * lib/Util.pm: + + [FL] Rename function get_file_md5sum to get_file_checksum and + support SHA1 and SHA256. + + * man/lintian.1: + + [FL] Drop linda from SEE ALSO since it is obsolete now. Suggested + by Hideki Yamane. (Closes: #474478) + + [FL] Add new --checksums option. + + * reporting/html_reports: + + [RA] Base the generation of clean report pages on the maintainer URL + rather than the full maintainer string so that maintainers with + different forms of their name won't have clean reports that + overwrite dirty ones. + + [RA] Fix the counts in qa-list.txt, which were broken in several + respects. + + [RA] Don't consider a maintainer's page error/warning free if there + are errors or warnings in their co-maintained packages. + * reporting/templates/maintainer.tmpl: + + [RA] Always add anchors to the package names even for uploaders. + + * testset/copyright: + + [FL] New testcases by Tobias Toedter. (Closes: #472665) + * testset/description: + + [FL] New testcases by Tobias Toedter. (Closes: #471838, #477471) + + * unpack/list-srcpkg: + + [RA] Fix syntax error introduced by Uploaders support. + * unpack/unpack-binpkg-l1: + + [RA] Extract a tar listing with numeric owners and groups into + index-owner-id in the lab. + + -- Frank Lichtenheld <djpig@debian.org> Thu, 01 May 2008 15:04:08 +0200 + +lintian (1.23.46) unstable; urgency=low + + The "five Lintian committers!" release. + + * checks/binaries: + + [RA] Anchor file matches for Perl libraries and debugging symbols so + as to not match partial paths. Based on a patch from Niko Tyni. + (Closes: #466501) + + [RA] Also check for make -i when checking if errors from make clean or + distclean are ignored. Thanks, Jörg Sommer. (Closes: #469024) + * checks/changelog-file: + + [RA] Adjust for the extra space added by Parse::DebianChangelog when + checking line length. Thanks, Robert Millan. (Closes: #467019) + * checks/common_data.pm: + + [RA] Accept (and ignore for now) the new Checksums-Sha1, + Checksums-Sha256, and Checksums-Md5 fields in source packages. + Thanks, Raphael Hertzog. (Closes: #466979) + * checks/control-file: + + [RA] Skip empty dependencies for stronger-dependency-implies-weaker. + * checks/control-files{.desc,}: + + [FL] Warn about empty control files. I can't see any use for + them. Exclude udebs though, since they might differ there. + * checks/copyright-file{.desc,}: + + [RA] Tests for copyright notices must be case-insensitive. Patch + from Chris Lamb. (Closes: #464992) + + [RA] When looking for cases where Copyright is separated from a year + by a newline, also allow (C) before or after the newline. Thanks, + Michael Meskes. (Closes: #465258) + + [RA] Further explain why lintian looks for a valid copyright notice. + (Closes: #466714) + + [RA] Suggest an override if only the Debian packaging or some other + part of the package not linked with OpenSSL is covered by the GPL. + Thanks, Andrew Pollock. (Closes: #469106) + * checks/cruft{.desc,}: + + [FL] Add hg to the list of <vcs>-control-dir tags. + + [RA] In the long description of outdated-autotools-helper-file, + point to autotool-dev's documentation. (Closes: #465132) + + [RA] Remove now-unnecessary workarounds for calling File::Find with + symlink starting directory. + * checks/debian-readme{.desc,}: + + [RA] Warn of references to /usr/doc in README.Debian. Thanks, + Guillem Jover. (Closes: #465192) + * checks/files{.desc,}: + + [FL,RA] Merge all the tags for vcs ignore files, inventory files, + and vcs control dirs. Since the explanations don't actually differ, + different tags make no sense. While at it, add the mercurial + equivalents as well and update some of the tag descriptions. Partly + based on a patch by Chris Lamb. + * checks/md5sums{.desc,}: + + [FL] Remove tag md5sums-control-file-is-empty in favour of + a more general tag in control-files. + * checks/manpages.desc: + + [RA] Mention in binary-without-manpage that if the man pages are + provided by another package on which this package depends, a lintian + override is appropriate. + * checks/menu-format: + + [RA] When the menu or desktop file invokes a quoted command via an + su program, don't try to check whether the command is in the + package. Thanks, Paul Wise. (Closes: #466665) + * checks/menus{,desc}: + + [RA] Check that doc-base files are encoded in UTF-8. Thanks, Robert + Luberda. (Closes: #468759) + + [RA] Check doc-base sections against the new canonical list. + Thanks, Robert Luberda. (Closes: #463474) + * check/patch-systems: + + [HE] Warn if the .diff.gz contains changes while the package uses + a patch system. (Closes: #452215) + * checks/scripts{.desc,}: + + [FL] Warn if a maintainer script is a valid shell script but + doesn't seem to have any actual code. Based on an idea + by Justin Pryzby. (Closes: #410042) + + [RA] Update regexes based on checkbashisms to remove additional + false positives and add additional checks. Thanks, Adam D. Barratt. + + [RA] Add kaptain. Thanks, Tobias Toedter. (Closes: #466701) + + [RA] Allow zsh-beta as an alternative to zsh. Thanks, Joost van + Baal. (Closes: #468362) + + [RA] Add yorick. Thanks, Thibaut Paumard. (Closes: #468370) + + [RA] Add warnings for dpkg --assert* flags for features that have + been guaranteed for nearly a decade. Thanks, Bernhard R. Link. + (Closes: #467642) + * checks/shared-libs{,desc}: + + [RA] Rename sharedobject-in-library-directory-not-actually-a-shlib + to sharedobject-in-library-directory-missing-soname for clarity. + Thanks, Peter Eisentraut. (Closes: #467425) + + * data/doc-base/sections: + + [RA] New file listing known doc-base sections. + + * debian/dirs: + + [RA] Install the base directory for the Lintian root here. + * debian/rules: + + [RA] Redo the installation rules to support arbitrary nesting under + the copied directories. As a side effect, install + lib/Tags/ColonSeparated.pm, unbreaking the experimental + colon-separated output format. + + * frontend/lintian: + + [CW] Make the presence of an Ubuntu release name in the version number + trigger the Ubuntu distribution field checks. + + [RA] Fix option parsing bug leading lintian to incorrectly reject -a + or -p without a package. + + * lib/Dep.pm: + + [RA] Skip empty dependencies, avoiding false positives for + stronger-dependency-implies-weaker. Patch from Adam D. Barratt. + (Closes: #469222) + * lib/Lintian/Data.pm: + + [RA] New module for loading and querying lists of keywords. + * lib/Read_pkglists.pm: + + [RA] Extract Uploaders from the source package list. + * lib/Spelling.pm: + + [RA] Add another spelling correction. + + [RA] Merriam-Webster and the OED have both given up on publically + vs. publicly, so we should as well. (Closes: #466617) + + * reporting/html_reports: + + [RA] Load the correct configuration file. + + [RA] Include packages for which one is an uploader in one's + maintainer page, marked accordingly. (Closes: #421011) + * reporting/templates/*: + + [TK] Correct Lintian maintainers address in page footers. + * reporting/templates/maintainer.html: + + [RA] Include packages for which the maintainer is an uploader. + + * unpack/list-srcpkg: + + [RA] Include Uploaders in the package list. + * unpack/unpack-srcpkg-l2: + + [RA] Don't rely on the output format of dpkg-source to learn the + source directory and create a symlink. Instead, tell dpkg-source to + unpack the source directly into the unpacked directory. Discard + output of dpkg-source to allow for the current version, which prints + things even with -q (fixed in later versions). Thanks, Raphael + Hertzog. (Closes: #468927) + + -- Russ Allbery <rra@debian.org> Mon, 03 Mar 2008 18:21:32 -0800 + +lintian (1.23.45) unstable; urgency=low + + The "100 open bugs is magical" release. + + * checks/debconf: + + [RA] Recognize require as well as use when loading debconf modules + in Perl. Thanks, Manoj Srivastava. (Closes: #464775) + * checks/fields: + + [RA] Fix coding error that didn't allow python-all-dev to satisfy a + Python build dependency. Thanks, Joerg Jaspert. (Closes: #464709) + * checks/manpages: + + [RA] Ignore another undefined macro generated by pod2man (will be + fixed with the Pod::Man in Perl 5.10). + * checks/po-debconf: + + [RA] Also accept nnn_NN names for po files. nds_DE and nds_NL are + valid locales. Thanks, Christian Perrier. + * checks/scripts{.desc,}: + + [RA] Warn of use of start-stop-daemon in maintainer scripts unless + used with --stop. Thanks, Kurt Roeckx. (Closes: #381180) + + -- Russ Allbery <rra@debian.org> Fri, 08 Feb 2008 22:58:32 -0800 + +lintian (1.23.44) unstable; urgency=low + + The "I can't release a quick fix without *some* other work" release. + + * checks/binaries: + + [RA] Make an architecture specification after perlapi optional. + Thanks, gregor herrmann. (Closes: #464626) + * checks/copyright-file{.desc,}: + + [RA] Check the copyright file to ensure it contains at least one + copyright statement with a date or the term "public domain". It's + hard to be thorough without false positives, but this should catch + the most obvious omissions. Thanks, Justin Pryzby and Jari Aalto. + (Closes: #286842, #409131) + * checks/fields: + + [RA] Warn of build-dependencies on a Debian revision of -1. They + make backporting unnecessarily difficult. Thanks, Erich Schubert. + (Closes: #345487) + * checks/po-debconf: + + [RA] Accept three-character language codes for po files. Thanks, + Patrick Winnertz and Eddy Petrișor. (Closes: #464511) + + * lib/Spelling.pm: + + [RA] Don't strip hyphens before checking spelling. Move all D-Bus + corrections to the picky list since the correction is too confusing + even if accurate without capitalization. Thanks, Nelson A. de + Oliveira. (Closes: #464461) + + -- Russ Allbery <rra@debian.org> Thu, 07 Feb 2008 20:07:45 -0800 + +lintian (1.23.43) unstable; urgency=low + + The "37 bug fixes is enough for one release" release. + + * checks/binaries{.desc,}: + + [RA] Don't require objdump's errors on files with bad dynamic tables + to start at the beginning of the line. Patch from Chris Lamb. + (Closes: #459509) + + [RA] Warn for packages that have binaries requiring libc but which + don't depend on libc. Patch from Niko Tyni. (Closes: #461350) + + [RA] Remove check for libc5 binaries. libc5 is long-gone. + + [RA] Remove various dead tag descriptions we no longer issue. + + [RA] Warn on packages that provide Perl modules but don't depend on + perlapi-*. Thanks, Niko Tyni. (Closes: #463142) + + [RA] Check files in /usr/lib/debug directories mirroring the main + file system to verify they are detached debugging symbols and not + full libraries or executables. Thanks, Neil Williams and Niko + Tyni. (Closes: #462456) + * checks/changelog-file: + + [RA] Decode the changelog entry from UTF-8 before doing length + checks. Thanks, Cyril Brulebois. (Closes: #461822) + + [RA] Check for mismatches between the latest changelog and + NEWS.Debian entries if they're for the same package version. + Thanks, Cyril Brulebois. (Closes: #461823) + * checks/common_data.pm: + + [RA] Add Bugs, Origin, and Breaks to known binary and udeb fields + and Bugs to known source fields, matching current dpkg. Thanks, + Raphaël Hertzog. (Closes: #459787) + * checks/debhelper: + + [RA] CDBS now defaults to a debhelper compatibility level of V5. + + [FL] Update list of debhelper commands that modify maintainer + scripts. Add dh_icons, dh_installudev, dh_pysupport, dh_pycentral + and rename dh_installtexfonts to dh_installtex. + + [RA] Add checks for versioned debhelper dependencies for dh_icons + and dh_installifupdown. Thanks, Evgeni Golov. (Closes: #463028) + * checks/fields{.desc,}: + + [RA] The CDBS ant rules are in class, not rules. Thanks, Cyril + Brulebois. (Closes: #460168) + + [RA] Versioned Python dependencies satisfy a Python debian/rules + requirement. Add a separate tag for Python build dependencies to + explain the dependency possibilities. Ignore dh_python if + debian/pyversion or a Python-Version control field are present. + Thanks, Loïc Minier. (Closes: #460625) + + [RA] Check that -dbg packages depend on their base package. Patch + from Chris Lamb. (Closes: #458785) + + [RA] Check the value of Dm-Upload-Allowed. + + [RA] Warn about packages with a list as the maintainer and no + Uploaders. Thanks, Sune Vuorela. (Closes: #462635) + + [RA] Remove the package-has-duplicate-relation test. It gets + relations with different version strictness in different levels of + dependency wrong and what it gets right dpkg-gencontrol strips out. + * checks/files{.desc,}: + + [RA] In many of the long descriptions for symlink-related tags, + mention that running dh_link will fix symlink problems. + + [RA] Fix a long-standing error in the regex checking for *.desktop + files in /usr/share/gnome/apps that caused the tag to never be + issued. Remove the check for /usr/share/applnk, since obsolete or + not KDE appears to actively use it still. + + [RA] Check for *.devhelp{2,} files not linked into devhelp's search + path. Based on a patch by Bradley Smith. (Closes: #273309) + + [RA] Warn about /etc/cron.{hourly,daily,weekly,monthly} scripts that + won't be executed by run-parts because of periods in the name. + Patch from Chris Lamb. (Closes: #458742) + + [RA] Warn of .gitignore files installed by the package. Patch from + Chris Lamb. (Closes: #459502) + + [RA] Warn of more language extensions on files in the user's path. + Patch from Chris Lamb. (Closes: #459514) + + [RA] Remove the tag for empty Perl directories. The underlying + issue is fixed in Perl 5.10; there's no need to add code to + debian/rules when 5.10 is landing soon. (Closes: #463138) + * checks/infofiles: + + [RA] Don't issue unknown-interpreter for maintainer scripts with + weird interpreters. checks/scripts already handles this and the tag + wasn't defined. Thanks, Thijs Kinkhorst. (Closes: #460964) + + [RA] Fix Perl warnings given a zero-byte maintainer script. Thanks, + Thijs Kinkhorst. (Closes: #460966) + * checks/init.d{.desc,}: + + [RA] Downgrade a missing LSB Short-Description keyword to info since + it's not required for functionality. Thanks, Petter Reinholdtsen. + (Closes: #460499) + * checks/manpages{.desc,}: + + [RA] Make hyphen-used-as-minus-sign more conservative to avoid false + positives with non-ASCII text and catch hyphens at the start of + lines. Thanks, Michal Čihař. (Closes: #459871) + + [CW] Use man's new --warnings option to catch use of undefined + strings, macros, or diversions in manual pages, which usually indicate + mistaken use of "." or "'" at the start of a line. This check is only + enabled if man 2.5.1 or later is installed. (Closes: #377392) + * checks/menu-format: + + [RA] Avoid a Perl warning for desktop entries without Exec. + + [RA] Fix a bug that prevented Exec keys in desktop files from being + checked at all. Thanks, Raphael Geissert. (Closes: #462601) + + [RA] Exempt packages providing the su wrappers from the check for + using su-to-root. Thanks, Raphael Geissert. + * checks/menus: + + [RA] Don't issue unknown-interpreter for maintainer scripts with + weird interpreters. + + [RA] Fix Perl warnings given a zero-byte maintainer script. + * checks/po-debconf: + + [RA] Exclude from not-using-po-debconf template files with only the + shared templates used for coordination with dictionaries-common. + Thanks, Thomas Bushnell BSG. (Closes: #460731) + * checks/rules.desc: + + [RA] To fix an ignores-make-clean-error, suggest removing "-" for + static makefiles. Thanks, Andrea Colangelo. (Closes: #458164) + * checks/scripts{.desc,}: + + [RA] Re-add php4-cli as a valid interpreter for those who want to + maintain stable compatibility. Thanks, Thomas Goirand. + + [RA] Be clearer in the tag name that php-cli dependencies should be + versioned. Add more explanation to the long description of several + interpreter tags about limitations and requested bug filings. + + [RA] Remove tcl as a valid interpreter since tclx8.3 is obsolete. + (tclsh is the standard interpreter name.) + + [RA] Require versioned dependencies for OCaml scripts. Each version + is ABI-incompatible. Thanks, Samuel Mimram. (Closes: #462065) + + [RA] Add tcl and tk metapackages. Thanks, Sergei Golovan. + (Closes: #463281) + + [RA] Catch exec wrappers that use $* instead of $@ (not that this is + a good idea). Thanks, Adam D. Barratt. (Closes: #463476) + + [RA] Integrate several more bashism checks from checkbashisms in + devscripts. Patch from Adam D. Barratt. (Closes: #464026) + + * debian/control: + + [RA] Suggest man-db >= 2.5.1 for better warning support. + + [RA] Wrap Uploaders. + + * frontend/lintian: + + [RA] Include info tags in the broken-down description of the + override count since they're included in the total. Based on a + patch by Chris Lamb. (Closes: #459851) + + [RA] Don't try to report overrides when not checking a package. + Thanks, Håkon Stordahl. (Closes: #461978) + + [RA] Cope with a relative path to the lab. Patch from Håkon + Stordahl. (Closes: #461982) + + [RA] Don't require *.changes files for source-only uploads to have a + Description field. Thanks, Cyril Brulebois. (Closes: #462586) + + * lib/Spelling.pm: + + [RA] Add spelling corrections for PostgreSQL and OCaml and lots of + new capitalization corrections. (Closes: #460347) + + -- Russ Allbery <rra@debian.org> Tue, 05 Feb 2008 21:07:30 -0800 + +lintian (1.23.42) unstable; urgency=low + + The "what did you do on your Christmas vacation?" release. + + * checks/binaries: + + [RA] Don't warn about unstripped binaries in .../lib/debug. Some + packages include debugging symbols in the main package. + + [RA] Allow rpath pointing to /usr/lib/games/<package>. Thanks, Bas + Wijnen. (Closes: #456318) + + [RA] Exclude nsswitch modules from multiple SONAME and package + naming checks. + * checks/changelog-file{.desc,}: + + [RA] Don't spell-check lines that include the word "spelling". + Thanks, Andreas Hoenen. (Closes: #456515) + + [RA] Allow long no-whitespace lines even when spaces or bullets + precede the text. + * checks/common_data.pm: + + [RA] Remove the obsolete base section. (Policy change pending). + * checks/control-file{.desc,}: + + [RA] Include the package name in stronger-dependency-implies-weaker. + + [RA] Fix stronger-dependency-implies-weaker description cut and + paste error. Thanks, Rafael Laboissiere. (Closes: #456405) + * checks/copyright-file{.desc,}: + + [RA] Warn about packages covered by the GPL and linked with libssl + that don't list other common licenses or mention a license exception + or exemption. Requested by Joerg Jaspert. (Closes: #454238) + * checks/cruft: + + [RA] Ignore debian/config.cache. + * checks/debconf{.desc,}: + + Remove partially-translated-question at the request of Christian + Perrier. Only the translator could fix this, and debconf doesn't + show the translation unless it's complete. (Closes: #459293) + * checks/debian-readme{.desc,}: + + Combine readme-debian-{is,contains}-debmake-template and be less + particular about the exact formatting of the dh-make template. + Triggering off the template text is enough and matches linda. + Thanks, Joerg Jaspert. (Closes: #458074) + * checks/description{.desc,}: + + [RA] Do picky spelling and capitalization checks on the description + and note and explain this in the long description. + * checks/fields: + + [RA] Handle double-colon rules when checking that build dependencies + match debian/rules. (Closes: #457501) + + [RA] Allow python-setuptools in Build-Depends for arch-independent + Python packages. Thanks, Vincent Bernat. (Closes: #459042) + * checks/fields.desc: + + [RA] Remove X.X.X versions from the debian-revision-not-well-formed + long description. (Closes: #456286) + + [RA] Update references and binary-NMU version descriptions. + * checks/files: + + [RA] Ignore zero-length files in /usr/share/doc/examples. + + [RA] The underFooLicense.docbook files from KDE are not license + files. Thanks, Sune Vuorela. (Closes: #458831) + + [RA] Allow /emul as a top-level directory and files in + /emul/ia32-linux/{lib,usr/lib}. (Closes: #459254) + * checks/files.desc: + + [RA] Remove a stray variable from the config-file-reserved tag. + * checks/init.d{.desc,}: + + [RA] Warn on init scripts that list S in their Default-Stop LSB + keyword. Thanks, Petter Reinholdtsen. (Closes: #458596) + * checks/menu-format{.desc,}: + + [RA] Fix non-wm-module-in-wm-modules-menu-section pluralization to + match the check and reword the long description to be hopefully + clearer. Thanks, Martín Ferrari. (Closes: #457527) + + [RA] Warn about use of su wrappers other than su-to-root for desktop + and Live CD support. Thanks, Daniel Baumann. (Closes: #453931) + + [RA] Only check for desktop files in /usr/share/applications. The + ones elsewhere are too strange. (Closes: #459252) + * checks/menus{.desc,}: + + [RA] Spelling errors in doc-base files should only be warnings. Do + picky spelling and capitalization checks on the abstract and title + fields. + * checks/patch-systems: + + [RA] dpatch permits multiple patches to be listed on the same line + of 00list. Patch by Chris Lamb. (Closes: #457523) + * checks/scripts{.desc,}: + + [RA] Add lua40 and lua5.1. Thanks, Enrico Tassi. (Closes: #457219) + + [RA] Improve recognition of heredocs. + + [RA] Recognize quoted strings that start at beginning of the line. + + [RA] Rewrite script path and dependency checking. Remove scripts + and packages no longer in the archive. Add new versions of + versioned scripts and packages. Fix the dependencies for pike + interpreters. (Closes: #458896) + + [RA] Reformat long descriptions and collapse some tags. + + [RA] For consistent results, only syntax-check sh and bash scripts. + Also ignore all dpatch files, not just those in /usr/src. + * checks/shared-libs{.desc,}: + + [RA] New check for version numbers in symbol files. Based on a + patch from Raphael Hertzog. (Closes: #457067) + + [RA] Exclude nsswitch modules from shlibs file checks. + + [RA] ld.so may also look in /emul/ia32-linux/{lib,usr/lib}. + + * debian/control: + + [RA] Suggest libtext-template-perl, needed for HTML reporting. + * debian/copyright: + + [RA] Add my copyright statement. + + [RA] Reference GPL-2, not the GPL symlink, reflecting our license. + + * frontend/lintian: + + [RA] Merge all override messages into a single message per run. Add + -q/--quiet option to suppress that message. (Closes: #457513) + + [RA] Allow + and . in tag names in overrides. Thanks, Stefan + Fritsch. (Closes: #454790) + + [RA] Check that the argument to --color is valid. + + [RA] Warn about no package arguments unless --setup-lab or + --remove-lab are given. Thanks, Damyan Ivanov. (Closes: #455732) + + [RA] Add support for HTML coloring. (Closes: #458376) + * frontend/lintian-info: + + [RA] Allow for HTML color tags. + + [RA] Add -a to annotate an override file. + + * lib/Dep.pm: + + [RA] Allow substvars instead of package names so that dependency + checks against the source debian/control file don't treat all + substvars as equivalent. Thanks, Julien Cristau. (Closes: #456802) + * lib/Spelling.pm: + + [RA] Stop doing capitalization checks on all files; there's too much + of a risk of false positives. Instead, provide a separate picky + spelling check function for package descriptions and similar cases + where we're more sure of the contents. + + [RA] Expand the picky capitalization checks to catch Debian, GNOME, + KDE, and Linux. (Closes: #456582) + * lib/Tags.pm: + + [RA] Add support for HTML coloring. + + * man/lintian.1: + + [RA] Document the --color=html and -q/--quiet options. + * man/lintian-info.1: + + [RA] Document the --annotate option. + + * reporting/html_reports: + + [RA] Rewritten. + - Include info, experimental, and overridden tags in the tag pages. + - Generate a second report for each maintainer showing all tags. + - Correctly handle multiple different maintainer strings with the + same e-mail address. + - Correctly report the version number of a binary package when it + differs from the source package. (Closes: #458036) + - Formatting changes (hopefully improvements) to the web pages. + - New template-driven system for easier revision of the HTML. + * reporting/lintian.css: + + [RA] New minimal style sheet for the HTML reports. + * reporting/templates/*: + + [RA] New Text::Template page templates for the HTML reports. + + * testset/runtests: + + [RA] Test tags for valid characters. + + -- Russ Allbery <rra@debian.org> Sat, 05 Jan 2008 17:16:32 -0800 + +lintian (1.23.41) unstable; urgency=low + + The "it would be lovely if there were an actual desktop file standard" + release. + + * checks/*.desc: + + [RA] Escape all literal angle brackets and fix unclosed and unknown + HTML tags. Based on a patch by Thijs Kinkhorst. (Closes: #455211) + * checks/field{.desc,}: + + [FL] Add some checks for the Homepage field: + - warn about enclosing < and > + - warn about non-absolute URLs + * checks/menu-format{.desc,}: + + [RA] Add Actions to the KDE-specific desktop file keys. Add + Application as an acceptable Main Category even though it's not + listed in the standard; given how widely it's used, it doesn't + appear to be worth warning about right now. (Closes: #444651) + + [RA] Add GNUstep as an acceptable Main Category, since it's used as + a non-standard category by GNUstep applications. + + [RA] Warn about desktop files containing CRLF line endings (and then + strip the CR for later checks). The standard is explicit that each + line ends in only LF. + + * debian/control: + + [FL] Add liburi-perl to Depends for the Homepage checks. + + [RA] Wrap Depends for readability. + + * testset/runtests: + + [RA] Check all tag descriptions for unknown or unclosed HTML tags + and for stray angle brackets. + + -- Russ Allbery <rra@debian.org> Sun, 09 Dec 2007 20:03:03 -0800 + +lintian (1.23.40) unstable; urgency=low + + The "Russ's brown paper bag bug" release. + + * checks/doc-base: + + [RA] My mistaken precedence fiddling with the doc-base checks caused + them to warn about every abstract containing a period. Patch from + Chris Lamb. (Closes: #454941) + + * lib/Spelling.pm: + + [RA] Add common mistakes for publicly and spelling. + + -- Russ Allbery <rra@debian.org> Sat, 08 Dec 2007 12:15:33 -0800 + +lintian (1.23.39) unstable; urgency=low + + The "Ubuntu and doc-base patch merge, with extra fixes" release. + + * checks/*.desc: + + [RA] Remove the unused Standards-Version header. + * checks/changelog-file{.desc,}: + + [RA] Check the latest entry of the Debian changelog and any + NEWS.Debian file for common spelling errors. (Closes: #36017) + + [RA] If this looks like a new package (Debian revision of -1 and + only one changelog entry), warn if it doesn't close a bug. Thanks, + Margarita Manterola. (Closes: #356051) + + [RA] Check for lines over 80 columns in the most recent entry. + Thanks, Guillem Jover. (Closes: #435963) + * checks/copyright-file{.desc,}: + + [RA] Moved spelling-error-in-copyright check to here. + * checks/debconf: + + [RA] Go back to not warning about "no" in boolean debconf + questions. The word is too common in normal English prose for + reasons other than assuming a particular debconf interface. Thanks, + Rafael Laboissiere. (Closes: #453177) + * checks/debian-readme{.desc,}: + + [RA] Moved spelling-error-in-readme-debian check to here. + * checks/description{.desc,}: + + [RA] Moved spelling-error-in-description check to here. + * checks/fields: + + [RA] Python documentation packages should still be in section doc. + Thanks, Michal Čihař. (Closes: #454688) + + [RA] Warn about lib.*-dev packages not in section libdevel. + + [RA] Warn about debug packages that aren't priority: extra. Thanks, + Joerg Jaspert. (Closes: #454358) + + [RA] Ignore Original-Maintainer if the version contains ubuntu. + + [RA] Only warn about Section for Python packages starting with + python-, not py, since py picks up too many things that aren't + Python modules. + + [RA] Only warn about Section for Perl packages matching lib.*-perl + to avoid false positives for things like dh-make-perl. Thanks, + Damyan Ivanov. (Closes: #454723) + * checks/files: + + [RA] Warn about packages providing files in /usr/lib/debug that + aren't named -dbg. Thanks, Joerg Jaspert. + * checks/lintian.desc: + + [RA] Add bad-ubuntu-distribution-in-changes-file, merged from the + Ubuntu patch. + + [RA] Fix the malformed-override long description. Thanks, Stefan + Fritsch. + * checks/menus{.desc,}: + + [RA] Substantial overhaul and expansion of the doc-base control file + checks. Patch from Robert Luberda. (Closes: #448783) + * checks/nmu: + + [RA] No packages with ubuntu in the version number are NMUs. Merged + from the Ubuntu patch. + * checks/patch-systems: + + [RA] Ignore blank lines in 00list and don't report them as patches + without descriptions. Thanks, Julien BLACHE. (Closes: #454730) + * checks/spelling{.desc,}: + + [RA] Subsumed into other check scripts and lib/Spelling.pm. + + * frontend/lintian: + + [RA] If the version number indicates an Ubuntu package, check + against a different list of allowable distributions. Merged from + the Ubuntu patch. + + [RA] Skip check and collection *.desc files whose names start with a + period (mostly to avoid testing artifacts from editor lock files). + + [RA] Restore previous override parsing and make the package name + optional again. Thanks, Stefan Fritsch. (Closes: #454790) + + [RA] Check overrides for implausible tags. + + * lib/Spelling.pm: + + [RA] New module to do general spelling checks for specific + misspellings. Based on the previous checks/spelling and a patch by + Robert Luberda. + + -- Russ Allbery <rra@debian.org> Fri, 07 Dec 2007 22:12:56 -0800 + +lintian (1.23.38) unstable; urgency=low + + * The "HE's brown paper bag bug" release + + * checks/changelog-file: + + [RA] Don't warn about version numbers going backwards in the + changelog file if the comment says this is a backport. + * checks/patch-systems: + + [FL] Try appending .dpatch to patchnames found in 00list. + Patch by Leo Antunes. (Closes: #454516, #454518) + + * lib/Dep.pm: + + [FL] Fix "uninitialized value" warning in pred_implies(). + + -- Russ Allbery <rra@debian.org> Wed, 05 Dec 2007 17:21:44 -0800 + +lintian (1.23.37) unstable; urgency=low + + The "Policy 3.7.3" release. + + * checks/binaries: + + [HE] Fix RegEx to re-enable 'binary-in-etc' and + 'arch-dependent-file-in-usr-share' checks. (Closes: #452336) + + [HE] When checking that a lib is linked against libc, search for + libc.so, not any library beginning with libc. Thanks for + the bug and patch to Ruben Porras <nahoo82@gmail.com>. (Closes: + #448652) + + [RA] Ignore the gf suffix from the gfortran migration when checking + whether the package name matches the SONAME. Thanks, Kevin + B. McCarty. (Closes: #448207) + * checks/changelog-file{.desc,}: + + [RA] Check that the latest changelog entry has a later version than + the previous entry. Thanks, Thijs Kinkhorst. (Closes: #449257) + * checks/common_data.pm: + + [RA] Add Dm-Upload-Allowed as a control field. (Closes: #453779) + * checks/control-file{.desc,}: + + [RA] Diagnose stronger dependencies that imply weaker dependencies, + such as the same dependency in both Depends and Recommends or + Recommends and Suggests. Thanks, Joerg Jaspert. (Closes: #453302) + + [RA] Upgrade no-section-field-for-source to warning at the request + of Joerg Jaspert. + * checks/control-files: + + [RA] Add symbols as a known control file for debs and udebs. + * checks/copyright-file: + + [HE] Check that encoding of copyright file is UTF-8. Patch by + gregor herrmann <gregor+debian@comodo.priv.at>. (Closes: #451689) + + [HE] Add warning copyright-contains-dh_make-todo-boilerplate + if the maintainer left the dh_make boilerplate in the + copyright file. Based on patch by Cyril Brulebois + <cyril.brulebois@enst-bretagne.fr>. (Closes: #448677) + + [RA] Check for the complete GFDL included in the copyright file and + expand copyright-file-contains-full-gpl-license to look for GPL v3 + references. Also check for correct references to common-licenses + for the GFDL and LGPL. + * checks/deb-format: + + [HE] Remove, not needed any more. (Closes: #447257) + * checks/debconf: + + [HE] Explicitly allow the phrase "no longer" in boolean debconf + questions. (Closes: #447718) + * checks/description.desc: + + [RA] Upgrade the legacy Homepage tag to a warning. + * checks/fields: + + [HE] Add 'doc-package-should-be-section-doc', + 'python-package-should-be-section-python', + 'perl-package-should-be-section-perl'. Ideas shamelessly + stolen from linda. (Closes: #452839) + + [RA] Allow Python dependencies in Build-Depends when using another + variant for calling Python in the clean target. Thanks, Bernd + Zeimetz. (Closes: #444642) + * checks/files{.desc,}: + + [HE,RA] Add 'package-contains-empty-directory' check, but ignore + dirs in /var and /etc and handle /usr/lib/perl5 and /usr/share/perl5 + directories separately with a lower priority level since they're + very common. (Closes: #452316, #357838) + + [HE] Add checks for game packages that contain no game executables + (package-section-games-but-contains-no-game) or that contain + anything in usr/bin at all, which is usually a mistake. + (package-section-games-but-contains-no-game). (Closes: #451668) + + [RA] Downgrade symlink-should-be-relative to a warning since it's a + Policy should. Thanks, Thijs Kinkhorst. (Closes: #454239) + * checks/lintian.desc: + + [RA] Add critical as a recognized urgency. + * checks/patch-systems: + + [HE] Add complete new check script, intended to check for usual + problems when using patch systems. Start with three + checks for common dpatch problems. Idea loosely based on + patch by Carl Fürstenberg <azatoth@gmail.com>. (Closes: #437959) + * checks/po-debconf.desc: + + [RA] not-using-po-debconf is now an error per Policy section 3.9.1. + * checks/rules: + + [HE] Implement 'binary-arch-rules-but-pkg-is-arch-indep', checking + for rules in binary-arch when the package is arch: all. + (Closes: #409109, #119097) + + [HE] Implement 'desktop-file-but-no-dh_desktop-call', checking for + missing dh_desktop calls when .desktop files are installed in + a debhelperized package. (Closes: #409138) + * checks/scripts: + + [HE] Allow packages to drop snippets into /etc/csh/login.d + without a dependency on csh. Files there should also + be allowed to have csh in the shebang line. (Closes: #453417) + + [HE] Allow packages to drop snippets into /etc/fish.d/ without + a dependency on fish. (Closes: #453416) + + [RA] Remove possible-non-posix-code-in-maintainer-script entirely. + Debian Policy now allows local and test -a/-o specifically and this + is pointless portability. + * checks/standards-version: + + [RA] 3.7.3 is now the current Standards-Version and anything older + than 3.6.2 is ancient. + + * debian/control: + + [TK] Add Vcs-* fields to point to Lintian's repository. + + [RA] Update standards version to 3.7.3. + * debian/dirs: + + [RA] Stop creating empty /usr/share/lintian/{overrides,info} + directories. The latter is no longer used and the former is shipped + with packages that include overrides. + + * frontend/lintian: + + [RA] Add critical as a recognized urgency. + + [RA] Diagnose malformed override entries; don't just ignore them. + + [RA] Fix some odd formatting. + + [RA] Display a summary of overridden tags as an N: output line. + Requested by Steve McIntyre. (Closes: #452804) + + * man/lintian.1: + + [RA] Be clearer about what files lintian takes as arguments; in + particular, mention that source packages are checked by providing + the .dsc file as an argument. (Closes: #441636) + + [RA] Fix a slight spacing problem with the --color flag. + + [RA] Remove mention of unused /usr/share/lintian/info directory. + + * lib/DebVersions.pm: + + [RA] Remove. This isn't used by anything and would produce + incorrect results (it doesn't understand ~), and Dep.pm provides + version comparison routines that use dpkg. + * lib/Tags.pm: + + [RA] Keep statistics on overrides by severity. + + * reporting/html_reports: + + [RA] Change the layout of the per-maintainer lintian pages. Now, + each report will be in /reports/maintainer/<email>.html where + <email> is the maintainer's e-mail address with unsafe characters + replaced by _. This should allow better links from the QA pages. + Thanks, Stefano Zacchiroli. + + * unpack/list-srcpkg: + + [RA] Escape ; and newline characters in all package fields before + writing them to the index (uncovered when someone accidentally + appended a package description to Standards-Version). + + -- Russ Allbery <rra@debian.org> Tue, 04 Dec 2007 16:43:13 -0800 + +lintian (1.23.36) unstable; urgency=low + + The "grand open change and desktop cleanup" release. + + * {checks,collection,depcheck,frontend,lib,reporting,unpack}/*: + + [RA] Use the three-argument form of open uniformly, whether needed + or not, to head off further quoting and whitespace interpretation + bugs. + + * checks/files{.desc,}: + + [RA] Catch .DS_Store.gz files as well. + + [RA] Warn about ._ Mac OS X resource files in the package. + + [RA] Add a hopefully helpful note about how cruft from other + operating systems can show up in binary packages. + * checks/menu-format: + + [RA] Fix detection of commands for menu entries when the command is + given with its full path. (Closes: #446796) + + [RA] Remove Actions from known desktop keys again, as I believe the + root problem was our willingness to inspect desktop types other than + Application (also fixed in the previous release). + + [RA] Fix Perl flow error when skipping some desktop files. + + [RA] Skip unknown and deprecated key warnings and encoding key + warnings in desktop files if they were of an unknown type. + + * lib/Dep.pm: + + [RA] Fix negative implication in some boundary cases when comparing + two versioned relationships in the same direction. Thanks to + Raphael Hertzog for the analysis and fix. (Closes: #446768) + + -- Russ Allbery <rra@debian.org> Mon, 15 Oct 2007 21:23:16 -0700 + +lintian (1.23.35) unstable; urgency=low + + The "frantic bug catchup" release. + + * checks/changelog-file{.desc,}: + + [RA] Add some basic checks for NEWS.Debian files: naming, + compression, encoding, a syntax check with Parse::DebianChangelog, + and unreleased for the distribution. (Closes: #437707) + * checks/common_data.pm: + + [RA] Allow Homepage in source and binary packages. + * checks/control-file: + + [RA] Support and ignore comments in debian/control. Thanks, Julien + Cristau. (Closes: #440830) + + [RA] Check for XS-Vcs-* headers and recommend (at info level) that + they be changed to Vcs-* headers. (Closes: #444661) + * checks/cruft.desc: + + [RA] Fix incorrect tag name for patch failure files. Thanks, Romain + Francoise. (Closes: #437463) + * checks/debconf: + + [RA] A cdebconf that supported error was released with sarge, so + don't require a versioned cdebconf dependency. Thanks, Thijs + Kinkhorst. (Closes: #438860) + + [RA] Various improvements from Thomas Huriaux: Diagnose select + templates with only yes/no options, diagnose more question prompts, + warn on any questions in the extended description, allow yes/no + mentions in non-boolean templates, and catch more first-person + language. (Closes: #439508) + + [RA] More exactly follow the Developer's Reference recommendations + by only requiring open prompts for string and password prompts and + only complaining about imperative wording for select and multiselect + templates. Thanks, Steve Langasek. (Closes: #442711) + * checks/description{.desc,}: + + [RA] Warn (at info level for now) about Homepage pseudo-fields in + the extended description. (Closes: #444336) + * checks/fields: + + [RA] Allow python-all as yet another way of satisfying a Python + build dependency. (Closes: #444642) + * checks/fields.desc: + + [RA] Properly escape < and >. + * checks/files{.desc,}: + + [RA] Warn about Thumbs.db files, which are usually useless Windows + thumbnail databases. Thanks, Paul Wise. (Closes: #438202) + + [RA] Warn about .DS_Store files, used by Mac OS X to store extended + folder attributes. Thanks, Paul Wise. (Closes: #438203) + + [RA] Improve the recommended command to remove .packlist files. + Thanks, Justin Pryzby. + + [RA] Don't think hard links are zero-length files. + + [RA] Diagnose files with names ending in whitespace. + * checks/infofiles: + + [RA] Emacs 22 now allows embedded images in info files, so accept + and ignore PNG files in the info directory. More image types may be + needed. Thanks, Andreas Metzler. (Closes: #438602) + * checks/menu-format{.desc,}: + + [RA] Reserved categories are okay in .desktop files if OnlyShowIn is + present, and generally deserve their own separate tag regardless. + Thanks, Michael Biebl. (Closes: #442709) + + [RA] Ignore categories beginning with "X-", reserved for category + extensions. Thanks, Josselin Mouette. (Closes: #443827) + + [RA] Allow Actions keys. This isn't in the desktop standard but + is widely used. Thanks, Raphael Geissert. (Closes: #444651) + + [RA] Ignore desktop files not for one of the known types. This + should significantly reduce the noise for KDE packages. + + [RA] Only check whether a program referenced by Exec is in the + package if the desktop file is in /usr/share/applications. Too many + applications use Exec for desktop files elsewhere without the + standard PATH. + + [RA] Ignore Exec fields pointing to kcmshell. + + [RA] Ignore desktop files in /usr/share/doc or that appear to be + templates. + + [RA] Avoid uninitialized warnings on all-whitespace commands. + * checks/menus: + + [RA] Find the targets of hard links correctly. (Closes: #444355) + + [RA] Use the three-argument form of open to not fail on doc-base + files ending in whitespace. Error on doc-base files with Document + fields that end in whitespace, since currently they break multiple + tools. Thanks, Ian Zimmerman. (Closes: #444889) + * checks/nmu.desc: + + [RA] Remove obsolete note about binary NMUs. Patch from Thijs + Kinkhorst. (Closes: #437925) + * checks/scripts{.desc,}: + + [RA] We now have a csh package. Allow it as an alternative for csh + script dependencies. Thanks, Bernd Zeimetz. (Closes: #440825) + + [RA] Allow install-sgmlcatalog --remove in postinst as well as + prerm and suggest removing it entirely in the long description. + * checks/version-substvars.desc: + + [RA] Properly escape < and >. + + * collection/changelog-file{.desc,}: + + [RA] Collect NEWS.Debian as well as changelog. + + -- Russ Allbery <rra@debian.org> Sun, 14 Oct 2007 22:29:51 -0700 + +lintian (1.23.34) unstable; urgency=low + + The "brown paper operator" release. + + * frontend/lintian: + + [RA] Use =~ with regexes, not eq. Thanks, Guillem Jover. + (Closes: #436180) + + -- Russ Allbery <rra@debian.org> Sun, 05 Aug 2007 19:58:38 -0700 + +lintian (1.23.33) unstable; urgency=low + + The "menu and cruft reorganization" release. + + * checks/common_data.pm: + + [CW] Add automaken as a known virtual package. + + [CW] Update architectures to dpkg 1.14.5, adding solaris-* and lpia. + + [RA] Add %known_obsolete_emacs. + * checks/cruft{.desc,}: + + [RA] Check for .git directories in source packages. Thanks, Julien + Cristau. (Closes: #433516) + + [RA] Substantially rewrite how all cruft checking against source + packages is done, incorporating debdiff in the process. There are + now two tags for most source package cruft problems: one for files + introduced in the Debian diff or in a native package, and one for + files present upstream. The former is at warning severity and the + latter is at info severity, since it's usually not worth repackaging + the upstream source to remove such files. In the process, + standardize the names of all of the tags and pull the regexes out + into data instead of code for easier maintenance. (Closes: #434744) + * checks/debdiff{.desc}: + + [RA] Removed, incorporated into checks/cruft. + * checks/debian-readme: + + [RA] Replace all uses of tag_error and tag_warn with just tag. + * checks/fields{.desc,}: + + [RA] Tag packages listing emacs21 as the preferred Emacs flavor in a + dependency. Thanks, Tatsuya Kinoshita. (Closes: #434978) + + [RA] Start tagging unversioned dependencies on coreutils again since + the transition from fileutils is long-since finished. Thanks, + Guillem Jover. (Closes: #436058) + * checks/files{.desc,}: + + [RA] Check for .git directories in binary packages. + * checks/menu-format{.desc,}: + + [RA] Switch to the new menu hierarchy, which will be in the next + release of Policy. Add specific checks for the major renamings to + hopefully cut down on the confusion and provide some specific + guidance. Remove the code that allowed for applications to create + new sub-menus, since the current menu documentation says not to do + that. (Closes: #431844) + + [RA] Add checks of desktop files. The checks so far are basic, but + do include key and category verification. Based heavily on work by + Javier Fernández-Sanguino Peña. (Closes: #277441, #433411) + * checks/scripts{.desc,}: + + [RA] If rm output is redirected to /dev/null, don't think that rm is + removing /dev/null. Thanks, Robert Luberda. (Closes: #431259) + + [RA] xjed also provides jed-script. Thanks, Jörg Sommer. + (Closes: #431629) + + [RA] Don't complain about ruby libraries in /usr/lib/ruby that have + shebang lines. This is a common means for embedding unit tests in + Ruby libraries. Thanks, Paul van Tilburg. (Closes: #431545) + + [RA] Don't push depending directly on update-inetd in the long + description of maintainer-script-needs-depends-on-update-inetd. + Most packages should depend on inet-superserver. Leave the check + the same for the time being, however. + + [RA] Replace all uses of tag_error and tag_warn with just tag. + * checks/shared-libs: + + [RA] Exclude udebs from dependency checking in the shlibs files + since binary packages may legitimately declare udeb dependencies on + other packages. Thanks, Loïc Minier. (Closes: #431395) + * checks/spelling: + + [RA] Replace all uses of tag_error and tag_warn with just tag. + * checks/version-substvars: + + [RA] Don't skip other checks for binNMUability when warning about + the deprecated ${Source-Version} substvar. Thanks, Lior Kaplan. + (Closes: #432959) + + * frontend/lintian: + + [RA] Add \w+-backports to the known distribution list. Thanks, + Vincent Danjean. (Closes: #432268) + + * lib/Tags.pm: + + [RA] Replace any newlines in the extra information to the tag + function with \n. + + * man/lintian.1: + + [RA] Remove the mention of the debdiff check script. + + -- Russ Allbery <rra@debian.org> Sun, 05 Aug 2007 11:59:15 -0700 + +lintian (1.23.32) unstable; urgency=low + + The "stability of output" release. + + * checks/binaries: + + [RA] Sort the package SONAMEs to provide more stable lintian tags. + Patch from Cyril Brulebois. (Closes: #428681) + * checks/files{.desc,}: + + [RA] Limit the Zope license exception to only .dtml, .pt, and .cpt + files. Thanks, Bernd Zeimetz. + + [RA] Sort the files listed in package-contains-hardlink so that the + lintian output is stable regardless of the hash order of the + directory when the tar file was built. + + [RA] Don't incorrectly skip all other file location checks for hard + links. + + [RA] Check for files installed in /usr/lib/sgml. This transition + was probably completed long ago, but checking for regression can't + hurt. (Closes: #90019) + * checks/manpages{.desc,}: + + [RA] Check for dh_make man page templates (by looking for the + template whatis entry). Thanks, Bill Allombert. (Closes: #173583) + * checks/menus: + + [RA] Avoid a quadratic search of the files in the package on + doc-base files that list tons of files individually. This speeds up + a lintian check of openoffice.org-dev-doc enormously. + * checks/po-debconf: + + [RA] Close the template file handle between files so that the line + numbers for translated default fields are correct. + * checks/rules{.desc,}: + + [RA] Check for ignoring all errors from make clean or make distclean + and recommend skipping the call if there's no Makefile instead. + Thanks, Branden Robinson. (Closes: #325372) + * checks/scripts{.desc,}: + + [RA] Add Octave as an interpreter, and allow both versioned and + unversioned forms. Thanks, Sebastian Harl. (Closes: #428403) + + [RA] Check for deprecated install-sgmlcatalog usage. + * checks/shared_libs: + + [RA] Report the correct file for shlib-with-nonpic-code rather than + the last shlib in the package. (Closes: #429840, #429528) + + * frontend/lintian: + + [RA] Don't require -v in order to report unused overrides; they're + already info-level tags, which is enough hiding. + + [RA] Remove old dead unused override code. + + * reporting/html_reports: + + [RA] Fix a Perl warning when generating the clean maintainer pages. + + * unpack/unpack-binpkg-l1: + + [RA] Sort the output of tar tfv by filename so that the lintian + output will be stable regardless of the hash order of the directory + when the tar file was built. + + -- Russ Allbery <rra@debian.org> Thu, 21 Jun 2007 01:47:53 -0700 + +lintian (1.23.31) unstable; urgency=low + + The "back under 100 open bugs" release. + + * checks/changelog-file: + + [RA] Only check for missing colons in bug closers in the most recent + changelog entry. Thanks, Thijs Kinkhorst. (Closes: #423171) + * checks/common_data.pm: + + [RA] Update architectures to dpkg 1.14.1. Remove all linux-* + architectures and add armel. (Closes: #421995) + * checks/control-files.desc: + + [RA] Change unknown-control-file to a warning, since Policy only + discourages it and doesn't outlaw it. (Closes: #287209) + * checks/cruft: + + [RA] Allow any automake package to satisfy the autotools-dev build + dependency for suppressing warnings about out of date autotools + helper files. (Closes: #417067) + * checks/fields: + + [RA] Require libmodule-build-perl in Build-Depends if the clean rule + runs perl Build. Hopefully this isn't too aggressive. Thanks, Ian + Beckwith. (Closes: #421549) + * checks/files: + + [RA] Don't warn about LICENSE files in Zope products, since they may + be used for runtime display. (Closes: #424164) + * checks/manpages: + + [RA] Avoid false positives on binaries with X11 in the name. Patch + from Kevin B. McCarty. (Closes: #423229) + * checks/menu-format.desc: + + [RA] Improve the pkg-not-in-package-test long description and add a + manual reference. (Closes: #423519) + * checks/menus: + + [RA] Allow multiple blank lines between doc-base sections and + trailing blank lines in the file. doc-base is fine with this. + Reported by Luis Rodrigo Gallardo Cruz. (Closes: #423096) + * checks/scripts: + + [RA] Add pagsh, provided by openafs-client and heimdal-clients. + + [RA] Diagnose removal of device files in maintainer scripts per + Policy 10.6. (Closes: #268688) + + [RA] Add jruby1.0. Thanks, Sebastien Delafond. (Closes: #426950) + + [RA] Add jed and friends. Thanks, Jörg Sommer. (Closes: #426469) + + [RA] Move several maintainer script checks specific to shell scripts + inside the conditional so that they won't run on maintainer scripts + not written in shell. + + [RA] Diagnose maintainer scripts looking at /var/lib/dpkg/status + directly. Thanks, Guillem Jover. (Closes: #426628) + + [RA] Diagnose direct modifications to /etc/services, /etc/protocols, + /etc/rpc, and /etc/inetd.conf in maintainer scripts. (Yes, an + eight-year-old bug!) (Closes: #32532) + * checks/version-substvars{.desc,}: + + [RA] Add a check for deprecated ${Source-Version} substvars. Patch + from Guillem Jover. (Closes: #427577) + + * frontend/lintian-info: + + [CW] Fix uninitialized value warning after reading a blank line. + + -- Russ Allbery <rra@debian.org> Mon, 04 Jun 2007 20:29:55 -0700 + +lintian (1.23.30) unstable; urgency=low + + The "beating false positives off with a stick" release. + + * checks/common_data.pm: + + [RA] Add mktemp and sysvinit-utils as known essential packages. + + [RA] Add Vcs-Mtn and Vcs-Browser to the known source package + fields. + + [RA] Add Kernel-Version to known udeb control fields. + * checks/control-files: + + [RA] Allow clilibs, but don't try to check the syntax of it yet. + Thanks, Sebastian Dröge. (Closes: #378088) + * checks/copyright-file: + + [RA] Exclude the Affero General Public License from the check for + references to the shared GPL copy. (Closes: #420077) + + [RA] Replace yet another hand-rolled dependency parser with Dep. + * checks/cruft{.desc,}: + + [RA] Check for svk commit message files. + * checks/debconf{.desc,}: + + [RA] Remove the dependency check for SETTITLE since all debconf + implementations back to oldstable support it. + + [RA] Reduce the dependency check for error templates to info since + all debconf implementations back to stable support it. + * checks/debhelper{.desc,}: + + [RA] Downgrade the dependency check for dh_python and the Python + policy to info since all debhelpers back to stable support it. + + [RA] Downgrade the dependency check for compatibility level V5 to + info since all debhelpers back to stable support it. + * checks/fields{.desc,}: + + [RA] The CDBS Python rules only call pycentral or pysupport during + the binary targets, so those dependencies can be safely moved to + Build-Depends-Indep. Still allow them in Build-Depends, though, + since that's where CDBS likes to put them. Thanks, Tristan + Seligmann. (Closes: #420526) + + [RA] Allow the Python core packages themselves to depend on + python-minimal. + + [RA] Remove the version constraints for python-central and + python-support dependencies since stable released with a working + version and they weren't in oldstable. + + [RA] Remove the dependency check on dh_installxfonts for the X.Org + transition since the debhelper released with stable does the right + thing and this dependency is not useful for backports to oldstable. + + [RA] Remove the version on the quilt dependency check. It's not + worth the effort to maintain a separate version check for oldstable + backports. (Closes: #420160) + * checks/files{.desc,}: + + [RA] Check for svk commit message files. + + [RA] Don't consider {copying,license}.dtd extra license files; the + Mozilla suite uses them for non-licenses. (Closes: #420558) + + [RA] Use $pkg rather than reading fields/package for the x11-common + pre-depend check. + + [RA] Allow x11-common to install /usr/X11R6/bin. + + [RA] Downgrade the pre-depends on x11-common requirement for + packages installing into /usr/include/X11 or /usr/lib/X11 to info + since it's only needed for upgrades from sarge or early etch. + * checks/md5sums: + + [RA] Don't warn about a missing md5sums file if the package contains + nothing for which we would generate an MD5 checksum. Thanks, + Andreas Beckmann. (Closes: #420465) + * checks/manpages: + + [RA] Cope with more uses of - in *roff escapes that don't need + hyphen warnings. + + [RA] Don't consider a binary an X binary if it's a symlink into + /etc/X11. (seyon does something weird but probably legitimate.) + + [RA] Fix manpage-for-non-x11-binary-in-wrong-directory and + manpage-for-x11-binary-in-wrong-directory output. (Closes: #295072) + * checks/menus{.desc,}: + + [RA] In doc-base control files, check for Index fields for HTML and + Info documents and require that each section after the header have a + Format field. Thanks, Bernhard R. Link. (Closes: #419847) + * checks/rules: + + [RA] Listing a rule as a dependency of .PHONY is sufficient to mark + it as present for GNU make and hence sufficient for Policy's + requirement. Thanks, Peter Eisentraut. (Closes: #419446) + * checks/scripts{.desc,}: + + [RA] Packages calling update-xmlcatalog must depend on xml-core. + Also avoid false positives when a package itself provides the + program its maintainer scripts use. Thanks, Daniel Leidert. + (Closes: #419461) + + [RA] Check for maintainer scripts calling read (but exclude those + that include /usr/share/debconf/confmodule on the grounds that + they're probably only using it as a fallback). Based on a patch by + Luk Claes. (Closes: #231770) + + [RA] Add pike7.6 and ruby1.9 as valid interpreters. + + [RA] Diagnose use of /bin/env with a more specific message than the + generic unusual interpreter tag. + + [RA] Remove the version constraint on the gconf-schemas check since + all versions of gconf2 back to stable provide this script and it's + not worth maintaining a separate check for oldstable backports. + * checks/shared-libs{.desc,}: + + [RA] Warn if a package declares dependencies in its shlibs control + file that cannot be satisfied by that package (including via + Provides). (Closes: #56440) + + * reporting/harness: + + [RA] Include overridden tags in the lintian output so that we can do + statistical reporting on them and see them in lintian.log. + * reporting/html_reports: + + [RA] Create stub pages for maintainers with only lintian-clean + packages. (Closes: #305173) + + [RA] Sort packages on each maintainer's page. + + [RA] Report statistics on info tags as well. + + [RA] Generate better file names for maintainer pages with weird + characters. + + [RA] Fix Perl warnings. + + -- Russ Allbery <rra@debian.org> Sat, 28 Apr 2007 16:31:31 -0700 + +lintian (1.23.29) unstable; urgency=low + + The "look at all the stuff that accumulated during the etch freeze" + release. + + * COPYING: + + [CW] Update to current text of GPL v2 (which talks about the GNU + Lesser General Public License rather than Library, etc.; no functional + changes). + + * checks/changelog-file{.desc,}: + + [RA] Check for bug closers without a colon after closes, but only if + there are at least six digits in the bug number and no non-digits. + Suggestion from Jari Aalto. (Closes: #373918) + * checks/copyright-file{.desc,}: + + [JA] Update usr-doc-* test to report user-share-doc-* instead. + New tests added: postinst-should-not-set-usr-doc-link, + doc-base-file-references-usr-doc. + Patch from Thijs Kinkhorst. (Closes: #406349). + * checks/common_data.pm: + + [JA] Perl syntax corrections. + + [JA] Support the Autobuild: and Vcs-* fields in .dsc files. + Applied patch to implement this by Ian Beckwith. (Closes: #403553). + * checks/control-file: + + [RA] Allow source in main to generate contrib packages. Thanks, + Bdale Garbee. (Closes: #401881) + * checks/cruft{.desc,}: + + [RA] Use Dep to check autotools-dev build dependency rather than + rolling our own dependency parsing, thus avoiding problems when it's + the first dependency. Thanks, Tilman Koschnick. (Closes: #412406) + + [RA] Mention that including CVS or .svn directories in a release + tarball should generally be reported as an upstream bug. Qualify + the statement that export should be used instead of checkout to + refer to snapshot packaging. Thanks, Jari Aalto. (Closes: #373668) + + [RA] Allow a build dependency on automake to satisfy the + autotools-dev requirement since users may use autoreconf to update + config.{sub,guess}. Thanks, Jordà Polo. (Closes: #417067) + * checks/debconf: + + [RA] Rather than munging dependencies to cope with the various + implementations of debconf, take advantage of our new dependency + comparison routines and check the full correct dependency. This + should really fix problems with checking the dependencies for + settitle. Patch from Damyan Ivanov. (Closes: #349616) + + [RA] Check that an appropriate versioned dependency on debconf + and/or cdebconf is present if error template types are used. + Thanks, Christian Perrier. (Closes: #416140) + * checks/debhelper.desc: + + [RA] Use consistent file naming when diagnosing possibly conflicting + debhelper compat settings. Thanks, Jari Aalto. (Closes: #409122) + * checks/fields{.desc,}: + + [RA] Add an exception to maintainer-not-full-name for Wookey and a + comment to consider removing the check if we get more false + positives. Thanks, Neil Williams. (Closes: #406731) + + [RA] Rename build-depends-indep-should-be-build-depends to + clean-should-be-satisfied-by-build-depends to make the reason for + the message clearer without running lintian -i. Thanks to Osamu + Aoki for the suggestion. (Closes: #405840) + + [RA] Recognize the +bX convention for binary NMUs. Warn about use + of the old three-part version numbers. + * checks/files{.desc,}: + + [RA] Diagnose creation of subdirectories of /usr/bin other than mh + and the legacy X11 directory. (Closes: #417912) + * checks/manpages: + + [RA] When checking for hyphen used as a minus sign, avoid false + positives on \s-1 (small font) and \*(-- (pod2man long dash). + + [RA] Display the full path for binary-without-manpage tags to make + it easier to track down problems. + + [RA] Ignore binaries in subdirectories of the normal binary + directories (other than /usr/bin/X11 and /usr/bin/mh). These should + be caught by other checks and the man page warnings would likely be + confusing noise. + * checks/menu-format{.desc,}: + + [RA] If a menu icon isn't an absolute path, only look for it in + /usr/share/pixmaps, not in the old X11R6 paths. Update the long tag + description accordingly. + * checks/menus: + + [JA] Perl syntax corrections. Removed extra empty newlines. + * checks/lintian.desc: + + [RA] List emergency as a valid urgency. + * checks/nmu{.desc,}: + + [RA] List the exact phrases recognized by lintian as marking an NMU. + Reported by Jari Aalto. (Closes: #409108) + + [RA] Recognize the +bX convention for binary NMUs. + * checks/po-debconf: + + [RA] Now that we're passing --use-untranslated to msgcmp, we have to + compare the generated pot file with the one in the package both + directions to catch all out of date errors. Thanks, Thomas + Huriaux. (Closes: #402662) + * checks/rules{.desc,}: + + [RA] Fix the policy section for debian-rules-missing-required-target + and debian-rules-not-a-makefile. Thanks, Daniel Kahn Gillmor. + (Closes: #414964) + + [RA] Warn about use of $(PWD) instead of $(CURDIR). + + [RA] Setting DH_COMPAT globally in debian/rules is now deprecated in + favor of debian/compat. Patch from Luk Claes. (Closes: #330025) + * checks/scripts{.desc,}: + + [RA] update-inetd is now its own package and netbase may not always + depend on it. Update the check to require a dependency on + update-inetd, inet-superserver, or one of the inet-superserver + packages that provides update-inetd. Reported by Tatsuya Kinoshita. + (Closes: #402319) + + [RA] Mention SUSv3 in the bashism and non-posix tag descriptions, + note that use of test -a/-o and local aren't bugs but may still be + worth avoiding, and mention short circuiting of && and ||. (Thanks + to Jari Aalto for the latter). + + [RA] Add /usr/bin/gbr2, provided by gambas2-runtime. Thanks, José + "L. Redrejo" Rodríguez. (Closes: #403515) + + [RA] Add /usr/bin/jruby0.9, provided by jruby0.9. Thanks, Sebastien + Delafond. (Closes: #418105) + + * doc/README: + + Document --color option. Based on a patch from Loïc Minier. + + * depcheck/deppages.pl: + + [JA] Perl syntax corrections. + * depcheck/report2html.pl: + + [JA] Perl syntax corrections. + + * frontend/lintian: + + [JA] Removed trailing spaces and other perl syntax corrections. + + [RA] Add --color option to optionally colorize lintian tags based on + their severity. Based on a patch from Loïc Minier. + + [RA] Accept emergency as a valid urgency and check urgencies + case-insensitively since that's what Policy specifies. Thanks, Joey + Hess. (Closes: #412577) + * frontend/lintian-info: + + [RA] Ignore ANSI color sequences when parsing lintian tags. + + * lib/Checker.pm + + [JA] Perl syntax corrections. + * lib/Lab.pm + + [JA] Perl syntax corrections. + * lib/Tags.pm + + [JA] Perl syntax corrections. + + [RA] Support for colorizing lintian tags based on their severity. + Based on a patch from Loïc Minier. (Closes: #399714) + + * man/lintian.1: + + [RA] Document --color. Based on a patch from Loïc Minier. + + * unpack/unpack-*pkg* + + [JA] Perl syntax corrections. + + -- Russ Allbery <rra@debian.org> Tue, 10 Apr 2007 21:08:23 -0700 + +lintian (1.23.28) unstable; urgency=high + + * collection/objdump-info: + + [RA] Remove unsafe temporary file creation in left-over debugging + code added accidentally when fixing #399456. Thanks, Josh + Triplett. (Closes: #414237) + + -- Russ Allbery <rra@debian.org> Fri, 9 Mar 2007 22:58:59 -0800 + +lintian (1.23.27) unstable; urgency=low + + The "we haven't run this against the whole archive in a while" release + + * checks/binaries{.desc,}: + + [RA] Tag unrecognized ELF binaries as apparently corrupted rather + than failing with a note that binutils-multiarch is required. Some + packages have had ELF binaries recognized by file but unreadable. + Reported by Bill Allombert. (Closes: #399456) + * checks/infofiles: + + [RA] Don't consider /usr/share/infon to be an info directory. + Reported by Joachim Breitner. (Closes: #399857) + * checks/md5sums: + + [RA] Also don't complain about missing md5sums for files in + /var/lib/ispell as they're changed after installation. Thanks, + Agustin Martin. (Closes: #401070) + * checks/po-debconf: + + [RA] gettext 0.16's msgcmp requires --use-untranslated when checking + for newer templates than PO files or it gives false positives for + every package. Thanks, Damyan Ivanov. (Closes: #400957) + + [RA] Don't consider directories to be stray template files even if + named template. Thanks, Thomas Huriaux. (Closes: #401442) + * checks/shared-libs: + + [RA] Don't report shlib-with-non-pic-code unless we're sure that + we're looking at a shared library. Otherwise, we get many false + positives on some platforms where text relocations are normal for + binaries. Reported by Bill Allombert. (Closes: #399525) + + * collection/file-info: + + [RA] Unescape non-ASCII characters escaped by tar before running + file on the resulting filename. Otherwise, file can't find the + file, exits with an error, and lintian aborts. Reported by Bill + Allombert. (Closes: #399392) + * collection/objdump-info: + + [RA] Include unrecognized format errors from objdump in the output + rather than aborting; some packages contain apparently corrupt ELF + binaries. + + * debian/control: + + [RA] Depend on gettext 0.16 or later for --use-untranslated. + + * lib/Lab.pm: + + [RA] Preserve the old package lists when setting up a static lab so + that the unpack programs can build a list of changed packages and + incremental mode works. Thanks, Bill Allmobert. (Closes: #400342) + + * unpack/list-udebpkg: + + [RA] Handle compressed udeb Packages files. Thanks, Bill + Allombert. (Closes: #400338) + + -- Russ Allbery <rra@debian.org> Sun, 3 Dec 2006 11:06:33 -0800 + +lintian (1.23.26) unstable; urgency=low + + * checks/binaries{.desc,}: + + [RA] Add a policy reference for unstripped-binary-or-object. + Thanks, Bas Wijnen. (Closes: #394419) + + [RA] Add a special exception to the shared library dependency check + for the dynamic loader itself. + * checks/changelog-file.desc: + + [RA] Downgrade to a warning several errors with changelog files, + including compression and a text version of HTML changelogs, that + are only shoulds in Policy. (Closes: #289723) + + [RA] Cleaned up language and use of unbalanced single quotes in + numerous descriptions. + * checks/control-file{.desc,}: + + [RA] Diagnose a control file that creates binary packages in a + different archive category from the source package or the other + binary packages. Idea from Yann Dirson. (Closes: #394720) + + [RA] Close opened files. + + [RA] Add info-level check for Section in the source section of the + control file. (Closes: #322244) + * checks/cruft{.desc,}: + + [RA] Tighten the timestamp check on config.{sub,guess} to look for + files dated 2004 or newer, since that's when x86_64 was added. + Increase to an error at the request of Ryan Murray since we already + suppress this warning of config.{guess,sub} are modified by the + Debian patch or if the package build-depends on autotools-dev. + (Closes: #190897) + * checks/debconf{.desc,}: + + [RA] Take into account comma escaping when checking the number of + translated choices. Reported by Frans Pop. (Closes: #395028) + + [RA] Only require debconf be loaded in the postinst script if a + config script exists. Reported by Josselin Mouette. + + [RA] Require pre-depends on debconf if debconf is used in the + preinst script. Update the long description to deprecate only + depending on debconf and falling back on another configuration + system. Reported by Josselin Mouette. (Closes: #395468) + + [RA] Warn of debconf notes displayed with low or medium priority, + with an exception for Policy-required device file warnings. Based + on a patch by Thomas Huriaux. (Closes: #389070) + + [RA] Close files after opening them, fixing incorrect line numbers + when reporting problems with config scripts. + * checks/debdiff{.desc,}: + + [RA] Check for creation of ~ and .xxx.swp backup files in the Debian + diff, but only at the info level for now since they cause no harm. + (Closes: #332770) + * checks/fields{.desc,}: + + [RA] Clarify in missing-build-dependency why lintian does not take + into account transitive build dependencies. (Closes: #393975) + + [RA] Avoid Perl warning when diagnosing a Python-Version of the form + "all, >= 2.4". Thanks, Thijs Kinkhorst. (Closes: #394104) + + [RA] Teach the debian/rules parsing about make conditionals and + don't require build dependencies for lines encountered inside a + conditional (in other words, assume people using conditionals know + what they're doing). Fixes a false positive due to the unusual + arch-specific build dependencies for openoffice.org, reported by + Rene Engelhard. (Closes: #380286) + * checks/files{.desc,}: + + [RA] Check for vim .swp files in the package. + + [RA] Split the warning for NFS temporary files into a separate tag + from the warning for editor backup files. + * checks/infofiles: + + [RA] Close opened files. + + [RA] debhelper no longer adds a --section flag to install-info, so + don't warn about any install-info invocation without --section. + Instead, check each info file for INFO-DIR-SECTION and diagnose + calling install-info without --section if any info file is missing + this information. (Closes: #97502, #398670) + + [RA] Checks for the compression and suffixes of info files were not + being run due to a mistake in specifying either /usr/info or + /usr/share/info as an info directory. Re-enable them. + * checks/md5sums{.desc,}: + + [RA] Add a tag for a missing md5sums control file, but only at info + level, at least for now. (Closes: #133027) + + [RA] Do better syntax checking of the md5sums control file and + report malformed lines as a tag rather than aborting lintian. + + [RA] Downgrade file-missing-in-md5sums to a warning since it doesn't + break the package or debsums and may be intentional. + * checks/menu.desc: + + [RA] Remove stray commas in Ref strings since the reporting code + considers commas to be separating two different references. + * checks/menu-format{.desc,}: + + [RA] Support the sux, gksu, and kdesu wrappers in menu commands as + well as su-to-root. (Closes: #360227) + + [RA] Fix tag name for menu-icon-cannot-be-parsed. Thanks, Bill + Allombert. (Closes: #399245) + * checks/po-debconf{.desc,}: + + [RA] Check for misnamed PO files in debian/po, which cause + translations to be merged into the template with the wrong names and + not found. Based on a patch by Thomas Huriaux. (Closes: #387360) + * checks/shared-libs: + + [RA] Calling ldconfig is also required for libraries installed in + various subdirectories of its standard search path based on hardware + capabilities. Reported by Aurelien Jarno. (Closes: #396278) + + * debian/rules: + + [RA] Exclude testset/diffs/binary.c~ from dh_clean. + + * frontend/lintian: + + [RA] Add --fail-on-warning option to exit with non-zero status if + any warnings were found. Thanks, Daniel Bonniot. (Closes: #189656) + + * man/lintian.1: + + [RA] Document --fail-on-warning. + + -- Russ Allbery <rra@debian.org> Sat, 18 Nov 2006 17:21:22 -0800 + +lintian (1.23.25) unstable; urgency=low + + The "dependency and debconf" release + + * checks/debconf: + + [CW] Don't trigger partially-translated-question when Choices-C exists + but not Description-C. + + [RA] Remove select-with-translated-default-field since there are + cases where this is correct and we can perform a better check + against the source package. Patch from Thomas Huriaux. + + [RA] Fix Perl warnings when a template has no type. + * checks/debdiff: + + [RA] Remove the source-tar-is-posix-tar tag. This was only a + problem for woody and earlier, and woody support is no longer + needed. Reported by Loïc Minier. (Closes: #385833) + * checks/fields{.desc,}: + + [RA] Improve the long descriptions of the warnings about dependencies + on essential or build-essential packages to make it clearer that the + correct resolution is normally to omit the dependency and why. + + [RA] Add a check for duplicate build dependencies. (Closes: #359178) + * checks/files: + + [RA] Don't consider files named license.rb to be extraneous + licenses. Patch from NIIBE Yutaka. (Closes: #387269) + * checks/init.d: + + [RA] Correctly handle LSB keywords which are present but have an + empty value. Reported by Erich Schubert. (Closes: #386968) + * checks/lintian.desc: + + [RA] Add tags for missing and bad Urgency fields in *.changes files. + + [RA] Improve the no-description-in-changes-file information. + * checks/md5sums: + + [RA] aspell dictionary packages may ship files in /var/lib/aspell + that should not have MD5 checksums in md5sums because they change + after installation. Don't complain that those files are missing. + * checks/po-debconf: + + [RA] Avoid Perl warnings on .po files that don't contain msgstr + lines. Patch from Thomas Huriaux. (Closes: #387357) + + [RA] Check templates for a translatable Default or DefaultChoice + field and warn if there isn't a translator comment. Patch from + Thomas Huriaux. (Closes: #388824) + * checks/scripts: + + [RA] Add /usr/bin/gosh from the gauche package to the list of valid + interpreters. Thanks, Tatsuya Kinoshita. (Closes: #386798) + + [RA] Add a separate tag for tclsh dependencies to explain about the + virtual package and improve the description of the wish virtual + package in its tag. Fix inverted logic that got the wish dependency + backwards. Reported by Hamish Moffatt. (Closes: #387845) + + [RA] Allow tcsh to satisfy a csh dependency. Reported by Yann + Dirson. (Closes: #389615) + + [RA] Improve the check for shell scripts that are actually exec + wrappers around scripts written in another language. + + [RA] Allow update-inetd to fulfill the dependency requirements for + the update-inetd script. Thanks, Michael Holzt. (Closes: #389960) + + * frontend/lintian: + + [RA] Check the existence and value of the Urgency field in *.changes + files. (Closes: #384219) + + * lib/Dep.pm: + + [RA] Improve the dependency resolution engine so that it can prove + aa|bb implies aa|bb|cc. Fix the comparison of dependencies for + inverse implication to catch many more cases. (The latter code + isn't currently used in lintian.) + + [RA] Add an unparse function to take an internal representation and + convert it back to human-readable text. + + [RA] Significantly improve and rewrite the get_dups function to only + find relations that imply each other and to return the complete + duplicate dependencies in sets. + + * man/lintian.1: + + [RA] Document setting TMPDIR to change the location of lintian's + temporary lab. (Closes: #388786) + + -- Russ Allbery <rra@debian.org> Sun, 8 Oct 2006 12:57:05 -0700 + +lintian (1.23.24) unstable; urgency=low + + The "LSB init script" release + + * checks/control-files: + + [RA] perm2oct definition moved to Util.pm. + * checks/cruft{.desc,}: + + [RA] Remove the (info-level) check for .cvsignore files in the + source tarball. This isn't an error; those files contain metadata + that may be useful for people making modifications and it's quite + common to distribute them. + * checks/debconf{.desc,}: + + [RA] Diagnose unknown priorities in db_input and db_text + invocations. Patch from Thomas Huriaux. (Closes: #386014) + * checks/fields{.desc,}: + + [RA] Depending on versioned variants of python-minimal is also an + error. Thanks, Adeodato Simó. (Closes: #384476) + * checks/files: + + [RA] perm2oct definition moved to Util.pm. + * checks/init.d{.desc,}: + + [RA] Added a warning for init scripts missing an LSB keyword + section, checks of the syntax of such a section if present, and + some basic semantic checks of the easiest fields. Based on initial + work by Carlos Villegas. (Closes: #377740) + * checks/menus: + + [RA] perm2oct definition moved to Util.pm. + * checks/scripts: + + [RA] Properly concatenate the dependencies for a package when + checking whether the dependency for an interpreter is included. + Thanks, Vincent Danjean. (Closes: #385178) + * checks/shared-libs: + + [RA] perm2oct definition moved to Util.pm. + + * lib/Util.pm: + + [RA] Move perm2oct to here and improve recognition of s, S, t, and T + characters. Thanks to Justin B. Rye for patch. (Closes: #376119) + + -- Russ Allbery <rra@debian.org> Mon, 4 Sep 2006 12:03:16 -0700 + +lintian (1.23.23) unstable; urgency=low + + The "new Python policy" release + + * checks/binaries.desc: + + [RA] Greatly expand the binary-or-shlib-defines-rpath long + description based on recent discussion in debian-policy. Add a + reference to the wiki page. (Closes: #378054, #378055) + * checks/changelog-file{.desc,}: + + [RA] Diagnose changelog files that are symlinks, using the new way + the changelog-file collection script processes them. + * checks/common_data.pm: + + [RA] Add Python-Version as a known source and binary field. + * checks/copyright-file: + + [RA] Catch "<fill in http/ftp site>" as well as the string without + "http/". Thanks, Jari Aalto. (Closes: #374167) + * checks/deb-format{.desc,}: + + [RA] Remove deb-created-with-broken-tar; the bug was actually in + dpkg, and the dpkg in stable has been fixed. Thanks Jari Aalto and + Thijs Kinkhorst. (Closes: #375638, #376030) + * checks/debconf: + + [RA] Diagnose a missing template description only once and avoid + Perl warnings. Thanks, Thomas Huriaux. (Closes: #377654) + * checks/debhelper: + + [RA] Use the standard control file parser rather than a custom + parser that can't handle continuation lines. + + [RA] Warn if dh_python is used without debian/pycompat in non-CDBS + packages and check for the debhelper version required for Python + policy. Thanks, Raphaël Hertzog. (Closes: #375318) + * checks/fields{.desc,}: + + [RA] Don't warn virtual-package-depends-without-real-package-depends + for Recommends and rewrite the tag description to be more accurate. + Thanks to Martin F. Krafft for the report. (Closes: #370720) + + [RA] ~ is now permitted in version numbers. (Closes: #381965) + + [RA] Catch and check dependencies correctly for debconf-updatepo run + from the clean target. Thanks, James Westby. (Closes: #380399) + + [RA] Warn when encountering an aspell dictionary package that isn't + arch: all. Thanks, Piotr Engelking. (Closes: #374899) + + [RA] Check the syntax of the new Python-Version field. + + [RA] Check for missing build dependencies on python-central or + python-support. Thanks, Raphaël Hertzog. + + [RA] Check for old << dependencies on Python in Python packages that + lack a Python-Version control field, as these are probably packages + that don't follow the new Python policy. Thanks, Raphaël Hertzog. + * checks/files{.desc,}: + + [RA] Provide a better explanation of why Debian packages shouldn't + ship files in /srv. (Closes: #379176) + + [RA] Warn about files installed into /etc/gconf/schemas. + + [RA] Warn about files in /usr/lib/site-python. Thanks, Thomas + Viehmann and Raphaël Hertzog. (Closes: #372748) + * checks/manpages{.desc,}: + + [RA] Warn about manpage short descriptions of the form "manual page + for program" (usually generated by help2man). + * checks/menu: + + [RA] Ignore trailing whitespace in doc-base files. Patch from Bas + Zoetekouw. (Closes: #379749) + * checks/nmu{.desc,}: + + [RA] When checking for an NMU changelog entry, require "NMU" be + surrounded by word boundaries. + + [RA] Warn if the changelog incorrectly indicates an NMU. Thanks to + George Danchev for the report. + * checks/scripts{.desc,}: + + [RA] Except mkstemp from possibly-insecure-handling-of-tmp-files for + maintainer scripts written in Perl. + + [RA] Mention [[ ]] explicitly in the possible-bashism long + description as requiring a Korn shell and make it clearer that the + primary arbiter of this test is the POSIX shell specification. + (Closes: #381800 by clarification) + + [RA] Use the Dep library to check dependencies. Add php5 to the + interpreter list and correctly handle the dependencies for + version-less PHP scripts. (Closes: #379558) + + [RA] Check for proper dependencies if gconf-schemas is called in + maintainer scripts and diagnose calling gconftool(-2) directly. + Thanks, Josselin Mouette. (Closes: #333311) + * checks/version-substvars{.desc,}: + + [RA] New check from Adeodato Simó for proper use of substvars for + versioned dependencies between packages built from the same source + package so that NMUs will work properly. Also catch use of such a + substvar for a versioned dependency on a package not built from the + same source. (Closes: #377141, #376596) + + * collection/changelog-file: + + [RA] Be much more careful about changelog files that are symlinks. + Don't skip over changelog symlinks just because they point to + non-existent files, mark unsafe symlinks or symlinks to non-existent + files by creating copyright as a symlink to a non-existent file in + the lab, and don't create an empty dummy changelog if we couldn't + find a changelog. Correctly handle changelog files that are + symlinks to other files in the same directory. + + * debian/copyright: + + [RA] Add Subversion repository location. + + * frontend/lintian: + + [JvW] Give error if there is no "Description" field in .changes, this is + required by dak + + * frontend/lintian-info: + + [RA] Add the -t or --tags option that, given a tag name, prints out + the description. (Closes: #376109) + + * lib/Tags.pm: + + [RA] If a tag has been overridden via any mechanism, do not add it to + any of the statistics (tag, severity, or significance). Before, the + override only suppressed a record for the specific statistic the + override was based on, meaning that classic tag-based overrides + didn't suppress severity statistics. Overridden error tags would + therefore cause lintian to exit with non-zero status. Thanks, + Andree Leidenfrost and Martin F. Krafft. (Closes: #377182, #374314) + + * man/lintian.1: + + [RA] Better document the --archivedir and --dist options and how + lintian constructs the path to an archive. (Closes: #383203) + + [RA] Document new version-substvars check script. + * man/lintian-info.1: + + [RA] Document the new -t or --tags option. + + * reporting/html_reports: + + [RA] Include the lintian version in HTML page footers. Thanks, + Thijs Kinkhorst. (Closes: #377616) + + -- Russ Allbery <rra@debian.org> Mon, 21 Aug 2006 10:28:14 -0700 + +lintian (1.23.22) unstable; urgency=low + + * checks/debconf: + + [JvW] Teach lintian to know about the 'error' debconf template + question type. (Closes: #374399) + + [RA] Exclude debconf templates with "for internal use" in the short + description from style checks and document this in the log + description of the tags most likely to trigger on internal + templates. (Closes: #368206) + * checks/common_data.pm: + + [RA] Add amd64 to the standard architectures. (Closes: #367324) + * checks/debhelper: + + [RA] Use the Dep library to check debhelper build dependencies + rather than parsing Build-Depends with regexes. This avoids false + positives due to matching package names ending in debhelper. + Reported by Fabio Tranchitella. (Closes: #366531) + * checks/fields: + + [RA] Allow build-depend on quilt if clean depends on the xsfclean + rule, for packages maintained by the X Strike Force. + + [RA] CDBS packages that use the python-distutils class should list + Python in Build-Depends, not Build-Depends-Indep, since CDBS wants + to use it in debian/rules clean. Thanks, Jan Lübbe. + + [HE] Add check for build-deps on build-essential. Yes, people do that. + + [RA] Recognize direct invocations of quilt in clean rules and allow + Build-Depends on quilt in that case. Reported by Sam Hocevar. + (Closes: #374878) + + [RA] Fix handling of versioned Build-Depends to avoid spurious + build-depends-without-arch-dep warnings. Reported by Marcus + Better. + + [RA] Don't require Build-Depends on perl even if run explicitly in + debian/rules clean, since perl-base may be sufficient. Catch more + ways perl could be run, including the common idiom for packages that + use Build.PL. + + [RA] Downgrade build-depends-without-arch-dep to info from warning. + Policy doesn't require using Build-Depends-Indep for + arch-independent packages and the test has a lot of false positives. + + [RA] Require ant in Build-Depends when using the CDBS ant rule. + + [RA] Bypass the build-depends-without-arch-dep check entirely when + using ant, since determining which Java dependencies are then + permissible in Build-Depends is too complex to do a proper job. + Reported by Peter Eisentraut. (Closes: #372190) + + [RA] Only allow patch in Build-Depends for yada unpatch, don't + require it, since yada depends on patch. (Closes: #375479) + * checks/po-debconf: + + [RA] Don't consider templates.in to be a stray translated template + file. Thanks, Thomas Huriaux. (Closes: #367534) + + * lib/Util.pm: + + [RA] Pass the --wildcards option to tar, now required by a change in + the default tar semantics. (Closes: #375246) + + -- Russ Allbery <rra@debian.org> Tue, 27 Jun 2006 17:50:05 -0700 + +lintian (1.23.21) unstable; urgency=low + + * checks/menus: + + [RA] Tell Perl where common_data.pm is since we're now including it. + Doh. Thanks, Nelson A. de Oliveira. (Closes: #366481) + + -- Russ Allbery <rra@debian.org> Mon, 8 May 2006 18:52:45 -0700 + +lintian (1.23.20) unstable; urgency=low + + The "Policy backlog clearing is a wonderful sight" release + + * checks/debconf{.desc,}: + + [RA] Add checks for the Developer's Reference guidelines for debconf + templates. Based on a patch by Thomas Huriaux. (Closes: #362145) + * checks/fields{.desc,}: + + [RA] xfonts-encodings is also not an xfont package. Thanks, Drew + Parsons. (Closes: #365503) + + [RA] Report errors for dependencies on python-minimal. Thanks to + Steve Langasek for the analysis. + + [RA] Allow a build-dependency on patchutils when using CDBS with one + of the patch systems, as patchutils may be optionally used to check + for bad patches. Thanks, Marc Dequènes (Duck). (Closes: #365466) + + [RA] Since some packages should be in Build-Depends and some should + be in Build-Depends-Indep, report all of the misplaced ones rather + than just the first one. That way, users know which to move. + + [RA] Allow perl in Build-Depends if invoked in clean rules. + + [RA] Allow patch in Build-Depends if yada unpatch is invoked in + clean rules. + * checks/files{.desc,}: + + [RA] Add an explicit check for non-world-readable executables to + provide a more detailed explanation and tighten the accepted + permissions of setuid and setgid executables to just the permissions + mentioned in Policy 10.9. Add Policy 10.9 references to the + descriptions. Reported by Piotr Engelking. (Closes: #365452) + + [RA] Add a request to the descriptions of setuid and setgid tags to + add a lintian override for documentation if the permissions are + intentional. + + [RA] Report a more specific tag for binaries that are owned by group + games but are not setgid. + + [RA] Remove the check for files in /usr/lib/cgi-bin. This policy + change was reverted. + + [RA] Allow files installed in /usr/include/X11 and /usr/lib/X11 but + require Pre-Depends on x11-common (>= 1:7.0.0). Remove the + duplicate check for files in /usr/bin/X11 since it no longer adds + additional information. + * checks/menus{.desc,}: + + [RA] Check that all files referenced in doc-base control files are + present in the package, based on a patch by Robert Luberda. Also + check that Index references only one file and that Format names a + known format. (Closes: #196122) + + [RA] Fix incomplete diagnosis of missing calls to update-menus. + + [RA] Change postrm to prerm in the check for a useless install-docs + call; calling install-docs in postrm is always a warning and useless + calls in prerm were not being diagnosed. + * checks/po-debconf{.desc,}: + + [RA] Exempt packages that use yada from the POTFILES.in check and + from checking for up-to-date templates, since yada does this at + build time. Reported by Piotr Roszatycki. (Closes: #321139) + + [RA] Check for stray debconf-mergetemplate files in packages + using po-debconf. Thanks, Martin Quinson. (Closes: #232442) + + [RA] General cleanup of tag descriptions for grammar and markup. + Move man page references into Ref fields. + * checks/shared-libs.desc: + + [RA] Document that exceptions to the -fPIC rule for shared libraries + are possible and ask that such exceptions be documented with lintian + overrides. + * checks/standards-version: + + [RA] Update to 3.7.2. (Closes: #366233) + + [RA] Report the current standards version when warning about too old + or too new versions. Thanks, Jari Aalto. (Closes: #366104) + + * debian/control: + + [RA] Update standards version to 3.7.2 (no changes required). + + [RA] Update description to note calibration for Policy 3.7.2. + + -- Russ Allbery <rra@debian.org> Mon, 8 May 2006 13:22:03 -0700 + +lintian (1.23.19) unstable; urgency=low + + The "Policy 3.7.0" release + + * checks/fields{.desc,}: + + [RA] python-all-dev also satisfies dh_python's requirements. + Thanks, Marc Dequènes (Duck). (Closes: #364943) + + [RA] Allow python in Build-Depends if it's invoked explicitly in the + clean rule. Thanks, Marc Dequènes (Duck). (Closes: #365030) + + [RA] Recognize the CDBS included rule files that indicate dpatch or + quilt will be used, check those dependencies, and require that they + be in Build-Depends since they're used for clean. Thanks, Marc + Dequènes (Duck). (Closes: #365041) + * checks/files{.desc,}: + + [RA] Add the references to Policy for the deprecation of X11R6 + directories now that Policy has been updated in 3.7.0.0. + + [RA] Policy now mandates FHS 2.3. Update tag descriptions. + + [RA] Warn about files installed in /usr/lib/cgi-bin. Policy now + states they should be installed in /usr/lib/cgi-lib. + + [RA] Warn about scripts installed on the user's PATH with names that + include language extensions (.sh, .pl, .py), per Policy 10.4. + + [RA] Report directories under /usr/share/man that don't match the + directory layout specified in the FHS. (Closes: #176683) + + [RA] Fix a very long-standing bug that caused the check for + executable manpages to be silently skipped. + * checks/scripts: + + [RA] Debian etch release policy explicitly forbids scripts without + #! magic and they rely on being run from a shell. Revert the change + that permitted the Perl magic without a #! line. Thanks to Piotr + Engelking and Steve Langasek for pointing this out. + + [RA] Don't syntax-check *.dpatch scripts in /usr/src. bash -n + doesn't stop at exit 0 and then may choke on the patch. Thanks, + Matthias Klose. (Closes: #364521) + * checks/scripts.desc: + + [RA] Using invoke-rc.d is now required by Policy. + * checks/standards-version: + + [RA] Update to 3.7.0. + + * debian/control: + + [RA] Update standards version to 3.7.0 (no changes required). + + [RA] Update description to note calibration for Policy 3.7.0. + + -- Russ Allbery <rra@debian.org> Sat, 29 Apr 2006 01:06:59 -0700 + +lintian (1.23.18) unstable; urgency=low + + The "brown paper Python" release + + * checks/fields{.desc,}: + + [RA] Redo handling of build dependencies to allow a custom tag to be + specified and to allow a general dependency string to be required + rather than a simple package name. As a result, dh_python handling + is no longer a buggy special case. Allow either python or + python-dev for dh_python and the cdbs Python rules. Thanks, Torsten + Merek and Aaron M. Ucko. (Closes: #364297, #364330) + + [RA] Require at least quilt 0.40 if /usr/share/quilt/quilt.make is + included. Thanks, Michele Baldessari. + + [RA] Packages using dh_installxfonts must build-depend on 5.0.31 or + later of debhelper for the X.Org 7 transition. + + -- Russ Allbery <rra@debian.org> Sat, 22 Apr 2006 16:17:14 -0700 + +lintian (1.23.17) unstable; urgency=low + + The "happy Nanaimo hacking" release + + * checks/binaries: + + [RA] Detect klibc binaries from their requested interpreter and + allow them to appear static. (Closes: #328850) + * checks/common_data.pm: + + [RA] Include all combinations of cpu and os from the dpkg cputable + and ostable files (as of dpkg 1.13.16). (Closes: #337034, #357433) + + [RA] Include a list of known X metapackages. + * checks/control-file{.desc,}: + + [RA] Warn if debian/control in a source package is a symlink. + * checks/copyright-file{.desc,}: + + [RA] Don't assume mentions of GPL or GNU General Public License + after what look like mail headers are referring to the license of + the package. Be a bit more specific in the old FSF address check + to avoid false positives on other Cambridge, MA addresses. Reported + by Adam C. Powell IV. (Closes: #205934) + * checks/debconf: + + [RA] Allow Indices as a template field. cdebconf uses it and + debconf ignores it. Reported by Frans Pop. (Closes: #361986) + * checks/debdiff{.desc,}: + + [RA] Warn if the diff contains debian/substvars. Based on a patch + by Michael Ablassmeier. (Closes: #359646) + * checks/debhelper.desc: + + [RA] When explaining the warning about deprecated debhelper + compatibility versions, mention that debhelper defaults to version 1 + if not set anywhere. (Closes: #360711) + + [RA] Move simple man page references from Info into Ref. + * checks/fields{.desc,}: + + [RA] Allow dpatch in Build-Depends for arch-independent packages if + it is invoked in clean, build-arch, or binary-arch. + + [RA] Only list examples of non-standard architectures, since there + are now too many combinations to list completely. + + [RA] Catch dependencies on X metapackages, based on a patch by Josh + Triplett. No packages are allowed to build-depend, and only + packages that look like metapackages (arch: all, no files outside of + /usr/share/doc) are allowed to depend. (Closes: #347169) + + [RA] Look for an explicit section of unknown, probably left over + from dh_make templates, and diagnose it with an error rather than a + warning. Reported by Jari Aalto. (Closes: #355032) + + [RA] Reorganize dependency checking based on debian/rules analysis. + Diagnose missing build dependencies on the helper packages we know + about, catch cases where Build-Depends-Indep should be Build-Depends + because of the clean target, and make sure users of dh_python + build-depend on python. yada is no longer a special case. + (Closes: #242789, #278290) + + [RA] Check for conflicting with dependencies and build-conflicting + with build dependencies. (Closes: #122760) + + [RA] Allow xfonts-utils in dependencies. It's not actually an X + font package. + * checks/files{.desc,}: + + [RA] For the X.Org 7 transition, add explicit checks for fonts and + binaries installed in /usr/X11R6. Rename the existing check for + other files in /usr/X11R6 since the tag had a pluralization error + and we want package maintainers to see the error again and + reconsider whether to ignore it. No packages should be installing + files in /usr/X11R6 going forward. Remove the policy cross-refs for + right now until policy catches up. + * checks/manpages: + + [RA] Use system_env instead of system and sanitize the environment + before running man -l out of caution and to avoid extraneous output + when CDPATH is set. Reported by Marc Haber. (Closes: #360217) + * checks/nmu{.desc,}: + + [RA] Warn if debian/changelog in a native source package is a + symlink and skip checks rather than aborting if it was a symlink to + a file we didn't unpack. (Closes: #257650) + * checks/po-debconf: + + [RA] Use system_env instead of system out of caution and to avoid + extraneous output when CDPATH is set. + * checks/rules{.desc,}: + + [RA] A new set of checks that parses debian/rules and checks for + required rules, debian/rules as a symlink, and the correct first + line. Based heavily on previous work by René van Bevern. + (Closes: #294926, #311786) + * checks/scripts{.desc,}: + + [RA] Ignore text inside single quotes and, for most checks, text + inside double quotes when checking for bashisms. Reported by Frank + Küster. (Closes: #344266) + + [RA] Change canonical zsh path to /bin/zsh at the request of the zsh + maintainer. (Closes: #360534) + + [RA] Change the check for broken error handling with invoke-rc.d to + maintainer-script-hides-init-failure to be more generic and explain + what the test looks at. Add the script name and line number and fix + a typo. Thanks, Marc Haber. (Closes: #360214, #360216) + + [RA] Warn when maintainer scripts run init scripts directly and + don't use invoke-rc.d. Thanks, Lars Wirzenius. (Closes: #353659) + + [RA] Find missing ucf dependencies and restructure the code to allow + easier addition of similar checks. (Closes: #261891) + + [RA] Add python2.5, lua50, gbx, and gbx2 to the list of valid + interpreters. (Closes: #361601, #361644, #362566) + * checks/shared-libs: + + [RA] Limit shlib-without-PT_GNU_STACK-section to only those + architectures where gcc always adds the section. Thanks to Frans + Pop for the report and Bastian Blank for the architecture list. + (Closes: #357636) + + * collection/objdump-info: + + [RA] Unset CDPATH before running cd to avoid strange effects from + the user's environment. + + [RA] Run readelf -l to collect interpreter information. + + * lib/Dep.pm: + + [RA] Add initial support for analyzing architecture information in + dependencies instead of ignoring it. + * lib/Read_taginfo.pm: + + [RA] Add support for formatting man page references from Ref. + * lib/Util.pm: + + [RA] Add system_env, like system but sanitizing the environment. + + * man/lintian.1: + + [RA] Mention the new rules check class. + + -- Russ Allbery <rra@debian.org> Fri, 21 Apr 2006 09:36:34 -0700 + +lintian (1.23.16) unstable; urgency=low + + The "What's this Russ guy up to?" release + + * checks/binaries{.desc,}: + + [RA] Add a check for the new "Invalid operation" error from + objdump -T. Skip shared-lib-without-dependency-information for + files in /usr/lib/debug. + * checks/changelog-file: + + [FL] Add line number to output of wrong-bug-number-in-closes. + Inspired by #349761 from Steinar H. Gunderson. + * checks/common_data.pm: + + [FL] Add armeb to %non_standard_archs as requested by + Martin Michlmayr. (Closes: #350653) + * checks/debconf: + + [RA] Packages that depend on dbconfig-common are allowed to have + config scripts without templates or an explicit debconf dependency. + Reported by Marcus Better. (Closes: #344421) + * checks/debconf.desc: + + [RA] Clarify the necessary dependencies for packages using SETTITLE. + (Closes: #349616) + * checks/debhelper: + + [RA] Recognize setting DH_COMPAT with := in addition to = in + debian/rules. (Closes: #349272) + + [RA] CDBS sets DH_COMPAT to 4 but doesn't export it. It does create + debian/compat with that value if none was present. Reflect this + behavior to avoid spurious compat level warnings when using CDBS. + Based on a patch by Jay Berkenbilt. (Closes: #350228) + * checks/fields: + + [RA] Allow a quilt build-dependency for arch-independent packages if + the quilt makefile rules are included. (Closes: #349273) + + [RA] If clean depends on a rule that calls dh_clean rather than + calling it directly, still allow debhelper in Build-Depends for + arch-independent packages. Reported by Michael Stilkerich. + + [JvW] Commented that Uploaders no longer will hit the multiline field + issue, updated testsuite accordingly + * checks/manpages: + + [FL] Ignore more warnings ("cannot adjust line", "can't break + line") in non-English manpages. (Closes: #349792) + + [RA] cd into the parent directory before checking man pages with man + so that .so inclusions are processed correctly. Based on a patch by + Nicolas François. (Closes: #349614) + * checks/menu-format: + + [RA] Look for binaries in /usr/X11R6/bin, not /usr/bin/X11, per + Policy 11.8.7. Thanks, Matej Vela. (Closes: #354890) + * checks/menu-format.desc: + + [RA] Use "menu manual" rather than "menu" for references to more + clearly distinguish from the Debian Menu Policy. (Closes: #347510) + * checks/po-debconf: + + [RA] If there are template files in debian, assume the package uses + debconf; don't require a dependency or config script. Patch by + Thomas Huriaux. (Closes: #353294) + * checks/scripts: + + [RA] Allow /tmp in variable settings. It's likely to be a false + positive. Reported by Frank Küster. (Closes: #344998) + + [RA] Make the syntax checking of shell scripts more robust against + filenames containing shell metacharacters. Reported by Michael + Stilkerich. + + [RA] Add fish and expectk to the list of valid interpreters. + (Closes: #351624, #353770) + + [RA] /usr/bin/tcl is provided by tclx8.3, not tcl. Reported by + James R. Van Zandt. (Closes: #351324) + + [RA] Allow more variations on leading magic to invoke some + interpreter rather than then shell. Bypass the ELF magic check for + scripts using magic that relies on having no leading #! line. + Reported by Frank Küster. (Closes: #344269) + + [JvW] Add check against package suffering from debhelper bug #337664, + per Joey Hess, which had broken error detection (Closes: #358523) + * checks/shared-libs: + + [JvW] Fix postinst-must-call-ldconfig to also get emitted when there is + no postinst at all, instead of just one lacking a ldconfig call + + [JvW] Implement checks for "udeb:" lines in shlibs files + (Closes: #357541) + + [JvW] Consider also the soname version for shlibs checking, preventing + some bogus 'duplicate' warnings, and actually throw a warning when + soname version doesn't match + + [JvW] Added error when udeb postinst calls ldconfig, that must never + happen (thanks to Frans Pop for noticing, see #203056) + + * debian/{control,copyright}: + + [RA] Add Russ Allbery to Uploaders and copyright. + + [JvW] Version dpkg-dev requirement to >= 1.13.17, for + unpack/unpack-srcpkg-l2 + + * frontends/lintian-info: + + [RA] Avoid Perl uninitialized value warnings when given output that + looks like lintian messages without tags. (Closes: #352606) + + * collection/objdump-info: + + [RA] Pass "Invalid operation" errors from objdump -T on to the check + scripts instead of failing. (Closes: #249435) + + * man/lintian.1: + + [RA] Add references to dh_make, debhelper, dpkg-buildpackage, and + linda in new reference sections. (Closes: #322288) + * man/{lintian.1,lintian-info.1}: + + [RA] Left-justify and disable hyphenation for readability. + + * unpack/unpack-srcpkg-l2: + + [JvW] Use -q with dpkg-source to suppress warnings about unsigned source + packages. Requires dpkg-dev 1.13.17 + + -- Jeroen van Wolffelaar <jeroen@wolffelaar.nl> Sun, 26 Mar 2006 15:38:37 +0200 + +lintian (1.23.15) unstable; urgency=low + + * The "www.no-name-yet.eu" release + + * debian/changelog: + + [FL] Fix wrapping of last changelog entry (Closes: #344899) + + * checks/common_data.pm: + + [FL] Add xlibs-dev and debmake to %known_obsolete_packages + * checks/debconf: + + [CW] Show template name for empty-translated-choices, + mismatch-translated-choices, and unknown-field-in-templates. + * checks/debhelper: + + [FL] Also check for debhelper build-dependency in debhelper-using + cdbs based packages + + [FL] Indicate where we found which compat version in + declares-possibly-conflicting-debhelper-compat-versions + (Closes: #329953) + + [FL] Add dh_installtexfonts to list of commands that modify + the maintainer scripts + + [FL] Try a little harder to find the DH_COMPAT setting in debian/rules + (Closes: #348380) + * checks/fields: + + [FL] Allow version numbers of 0 by correctly checking the output + of _valid_version for definedness and not the boolean value + (Closes: #345005) + + [FL] Better check for false positives of build-depends-without-arch-dep. + Should fix false positives for cdbs, dbs, dpatch and yada. Based on + a patch by Russ Allbery (Closes: #344609, #321135, #339750) + + [FL] Also check for build-dependencies on obsolete packages not + only dependencies (Closes: #234531) + * checks/fields.desc: + + [JvW] Fix typo in description + * checks/init.d: + + [FL] Only try to validate update-rc.d calls where the name of the + script matches [\w.-]+. That accounts for all today known init + scripts and eliminates false positives like shell variables in the + name (Closes: #343865) + * checks/manpages: + + [FL] Fix stupid mistake in regex to strip of filenames from roff + output (which was hidden by another stupid mistake in the test + suite). Patch by Nicolas François (Closes: #347999) + * checks/scripts: + + [FL] Make mknod-in-maintainer-script an error since this is now + a must in policy. Pointed out by Bartosz Fenski (Closes: #344928) + + [FL] dpkg --print-installation-architecture is deprecated + so delete dpkg-print-architecture-in-maintainer-script + + [FL] Add parrot to list of valid interpreters (Closes: #346335) + + -- Frank Lichtenheld <djpig@debian.org> Thu, 19 Jan 2006 15:13:02 +0100 + +lintian (1.23.14) unstable; urgency=low + + * The "fix those frontend regressions" release + + * frontend/lintian: + + [FL] Fix exit status computing so that we exit with 1 again + if we found any error. (Closes: #329458) + + [FL] Re-enable reporting unused overrides. + + * lib/Tags.pm: + + [FL] Some fixes to the statistics code to make the fixes + in frontend/lintian possible + + * checks/binaries{.desc,}: + + [FL] support c2a suffix in soname check, too (Closes: #340856) + + [FL] fix typo in description of package-name-doesnt-match-sonames + (Closes: #339360) + + [FL] The Debian specific patches from coreutils to call strip with + --remove-section arguments on install -s have been dropped. Adapt + description of binary-has-unneeded-section accordingly and demote + it to "info" because many packages will get this now. + * checks/debconf{.desc,}: + + [FL] drop seen-flag-requires-versioned-depends and + multiselect-without-dependency and drop version requirement from + missing-debconf-dependency-for-preinst. All due to the fact that + woody shipped with 1.0.x and therefor versioned depends on versions + lesser than that don't make much sense anymore (Closes: #333736) + * checks/debhelper: + + [FL] debhelper compat level 3 is deprecated as well now (Closes: #340222) + * checks/files: + + [FL] forgot /lib(32|64) (more #328612 fixes) + * checks/menu-format: + + [FL] Drop su-to-root-with-usr-bin and su-to-root-without-usr-sbin, + and add su-to-root-with-usr-sbin to adapt to current menu package + and policy (Closes: #332400) + * checks/po-debconf: + + [FL] Fix logical error in search for files (Closes: #342707) + * checks/scripts{.desc,}: + + [FL] Drop install-fvwmgenmenu as valid interpreter. Was dropped + from menu package before sarge. (also for #332400, see + checks/menu-format) + + [FL] Change path for install-menu from /usr/sbin to /usr/bin (also + for #332400) + + [FL] Merge most of the wrong-path-for-* and *-script-but-no-*-dep + tags to two tags wrong-path-for-interpreter and + missing-dep-for-interpreter. This makes maintaining the list of + valid interpreters way easier. Some tags with special text have + been special cased (php\d? and (m|g)awk). + + [FL] Add speedy and slsh to list of valid interpreters + (Closes: #333955, #336700) + * checks/shared-libs: + + [FL] forgot /lib(32|64) (hopefully finally closes: #328612) + + -- Frank Lichtenheld <djpig@debian.org> Sun, 18 Dec 2005 02:04:46 +0100 + +lintian (1.23.13) unstable; urgency=low + + * The "doesn't contain all the fixes I would like but that's no + reason to let the others wait forever" release + + * debian/control: + + [FL] Fix typo in description. Noted by Bill Allombert + (Closes: #327859) + + * checks/copyright-file: + + [JvW] Demote FSF address check to warning + * checks/description: + + [HE] Change description-synopsis-is-duplicated to only be emitted if + the synopsis is copied without being extended. (Closes: #316523) + * checks/files: + + [FL] Add some formats to the exception list for extra-license-file + (jpe?g, gif and svg) (Closes: #324944) + + [FL] Don't complain about lib(32|64) as unusual directories. Noted + by Matthias Klose (partly fixes #328612, see checks/shared-libs for + the rest) + * checks/infofiles: + + [FL] Don't issue install-info-not-called-with-section-option if + the call in postinst is really a removal. Experienced by Ben Pfaff + in autoconf (Closes: #329170) + * checks/po-debconf: + + [FL] Previously we only run the checks if we found a templates file + and a debconf dependency. Since the latter is mostly generated by + ${misc:Depends} nowadays, we now also run the checks if we find + a templates and a config file. (Closes: #331672) + * checks/scripts: + + [FL] PythonX.Y dependency can also be satisfied with pythonX.Y-minimal. + Noted by Matthias Klose (Closes: #326643) + + [FL] Only match 'local' at the beginning of a line. The check is too + ambiguous otherwise. Reported by Marc Haber (Closes: #330548) + + [FL] Better reflect the current discussions whether some of the + XSI:sms should be allowed in shell scripts by moving some of + them to a separate check possible-non-posix-code-in-maintainer-script. + Not doing that for kill -NAME as requested since -s NAME is available + and should be perfectly portable. (Closes: #323053) + * checks/shared-libs: + + [HE] Apply patch from Bastian Blank to check for executable stacks in + binaries. New checks are called shlib-without-PT_GNU_STACK-section, + shlib-with-executable-stack, thanks waldi. (Closes: #321750) + + [FL] Add lib(32|64) to ldso directories. Pointed out by + Matthias Klose (Closes: #328612) + + -- Frank Lichtenheld <djpig@debian.org> Thu, 13 Oct 2005 15:19:05 +0200 + +lintian (1.23.12) unstable; urgency=low + + * The "bad, bad SONAME check" release + + * all files: + + [FL] Update FSF address + + * debian/control: + + [FL] Depend on dpkg-dev since we use dpkg-source. How old exactly is + this bug? (Closes: #324673) + + * checks/binaries: + + [FL] Only use sonames from files in common library directories for + the soname checks. This avoids many false positives. Patch by + Russ Allbery (Closes: #321564) + + [FL] Convert the SONAME to lower case before comparing with + package name. Suggested by Josh Triplett (Closes: #321206, #325225) + + [FL] Try to remove strings added for transition purposes from + library package names before comparing package name with SONAME. + Pointed out by Rene Engelhard (Closes: #322241, #324121) + + [FL] Also remove -udeb strings and substitute lib64 with lib in + package name before comparing with SONAME + + [FL] Replace any occurrence of _ in the SONAME with - since the + former isn't allowed in package names but occasionally used in + sonames + + [FL] Remove trailing .so from SONAMEs + + [FL] Also ignore static binaries in sub directories of /boot, + not only in /boot itself. Patch by Guillem Jover + (Closes: #320382) + * checks/changelog-file: + + [FL] Detect old FSF address additionally to the even older + one + * checks/{cruft,files}{,.desc}: + + [FL] Also check for .arch-ids/ {arch}/ .arch-inventory and .bzr/ + in packages and sources (Closes: #324255) + * checks/debhelper{,.desc}: + + [FL] Warn about using debhelper compat version lower than 3 + like debhelper itself + + [FL] Drop package-lacks-versioned-build-depends-on-debhelper + tag for compat versions < 5. With debhelper 4 even in oldstable + issuing an error here is silly + + [FL] Fix typo (s,debian/control,debian/compat,) in description of + declares-possibly-conflicting-debhelper-compat-versions + * checks/description{,.desc}: + + [FL] Avoid double warning about description-is-dh_make-template + in the same way we do it for the corresponding debmake tag + + [FL] Policy section of Description field has changed + * checks/fields{,.desc}: + + [FL] Fix a lot of off-by-one errors in the policy references + (caused by the addition of the Uploaders field). Unknowingly + pointed out by Russ Allbery + + [FL] Also use non_standards_archs when checking source package + relations. Patch by Russ Allbery (Closes: #322291) + * checks/manpages: + + [FL] Don't issue warnings about 8bit characters in translated + man pages. Patch by Denis Barbier (Closes: #321650) + * checks/scripts: + + [FL] Don't issue bashism warning on POSIX character classes ([[:foo:]]). + Noted by Stephen Gran (Closes: #323098) + + [FL] Remove some useless groupings in the bashism regexes + + -- Frank Lichtenheld <djpig@debian.org> Sun, 28 Aug 2005 22:05:54 +0200 + +lintian (1.23.11) unstable; urgency=low + + * frontend/lintian: + + [FL] Don't use dpkg --print-installation-architecture since + it is deprecated, use dpkg --print-architecture instead. + + * debian/control: + + [FL] Depend on libparse-debianchangelog-perl, require + >= 0.6 since prior versions have bugs regarding parse + error handling + + * checks/binaries: + + [FL] Check that the package name of a shared library matches + the SONAME as defined in the "Library Packaging guide" + (Closes: #305575, #313118) + * checks/changelog-file{,.desc}: + + [FL] Use libparse-debianchangelog-perl to parse the changelog, + which detects a lot of syntax errors + + [FL] Add a new tag debian-changelog-file-missing-or-wrong-name + which is issued if we found no Debian changelog but an upstream + changelog since the further checks will treat the + latter file as the Debian changelog and only issuing + debian-changelog-file-missing would be confusing then + (Closes: #285152) + + [FL] Detect closes: statements with non-valid bugnumbers, + suggested by martin f. krafft (Closes: #294409) + * checks/common_data.pm: + + [FL] Fix typo (hurd-386 -> hurd-i386) from last release + that lead to spurious warnings about unknown architectures + (Closes: #318110) + * checks/control-file: + + [CW] Break control paragraphs at lines containing only whitespace, not + just on zero-length lines. (Closes: #319370) + * checks/fields: + + [FL] Actually mention which architecture we're complaining about + * checks/manpages: + + [FL] Report errors from man when parsing man pages. Based on + a patch by Kevin Ryde (Closes: #285540) + * checks/po-debconf: + + [FL] Abort check if the package doesn't seem to use debconf to + avoid false positives in case maintainers use debian/po for + other Debian specific strings (Closes: #262749) + * checks/scripts: + + [FL] increase search limit for exec hack by not counting comments + and empty lines (Closes: #294661) + + [FL] detect more bashisms, suggested by Clint Adams and + martin f krafft (Closes: #253498, #296233 and addresses #253012 + partly). + + [FL] Adjust check for positional arguments after ". file" to detect + more shell control and piping commands that are all allowed. + Noted by Thomas Hood. (Closes: #319212) + + * reporting/html_reports: + + [FL] Fix counting of binary package names + + [FL] Generate mostly valid HTML (id and name attributes still + aren't valid in all cases) + + -- Frank Lichtenheld <djpig@debian.org> Mon, 11 Jul 2005 15:50:10 +0300 + +lintian (1.23.10) unstable; urgency=low + + * The "Ah, it's LinuxTag and I still have free time!" release + + * debian/control: + + [HE] Updated description to say that we're calibrated for Policy + version 3.6.2. As the changes between 3.6.{1,2} aren't stuff we + (can) check, this is actually true! (Closes: #317049) + + * testset/runtests: + + [HE] Fix symlinking of original tarballs to allow run directories + outside the lintian source tree. + + * checks/control-file + + [HE] Check for duplicated fields. (Closes: #299792) + + * checks/fields: + + [HE] Change unknown-architecture a bit: We don't complain about + "known" non-standard archs (like amd64, ppc64, *bsd-i386) and only + print out an info message for those. (Closes: #253405, #311471) + + * checks/files: + + [HE] Allow backupninja configuration files in /etc/backup.d/ to be + 0600. (Closes: #307639) + + * checks/scripts: + + [HE] Allow Scripts in /etc/Xsession.d/ to be not executable, as they're + not directly called, but only sourced. (Closes: #309203) + + [HE] Check for use of adduser and update-inetd and warn if the package + has no (pre-)dependency on adduser/netbase. Patch by Russ Allbery, + thanks for the work. (Closes: #308569) + + [HE] Check for use of "." as a deprecated separator between user and + group names in chown call. (Closes: #88340) + + [HE] Fix to work $interpreter-script-but-no-$pkg-dep with more than one + dependency if needed. First use case is depending on build-essential + to provide /usr/bin/make. (Closes: #294894) + + [HE] Add lefty as a valid interpreter and check for a correct dependency + on graphviz. (Closes: #295093) + + * checks/shared-libs: + + [HE] Don't allow non-PIC shared libraries. This conforms to the new + etch release policy. Thanks for the report and patch to Kurt Roeckx + <kurt@roeckx.be>. (Closes: #309220) + + -- Marc 'HE' Brockschmidt <he@debian.org> Sun, 10 Jul 2005 16:20:42 +0200 + +lintian (1.23.9) unstable; urgency=low + + * The "Wow, so much time at hand" release + + * [FL] Convert build process to debhelper + - debian/rules - adapted + - debian/compat - new + - debian/dirs - new + - debian/docs - new + - debian/control - add build depends + - debian/postinst - remove (Closes: #292981) + - debian/conffiles- remove + - debian/prerm - adapted + * debian/control: + + [FL] Update Standards-Version to 3.6.2 + + * checks/conffiles: + + [JvW] Warn on /var files being a conffile too (Closes: #293443) + * checks/debconf: + + [FL] Also report postinst-does-not-load-confmodule and + postrm-does-not-purge-debconf if the related files don't + exist at all. Spotted by Gerfried Fuchs (Closes: #301056) + * checks/menus: + + [FL] New check menu-file-in-usr-lib because /usr/lib/menu is + deprecated + + [FL] Also find menu files in /usr/share/menu (Closes: #314187) + + [FL] Rename executable-in-usr-lib-menu to executable-menu-file + * checks/menu-format: + + [FL] Adapt to changes in collections/menu-files + * checks/standards-version: + + [FL] Update to 3.6.2 (Closes: #314879) + + * collections/menu-files: + + [FL] Also collect files from /usr/share/menu + + -- Frank Lichtenheld <djpig@debian.org> Fri, 17 Jun 2005 02:17:52 +0200 + +lintian (1.23.8) unstable; urgency=low + + The "Hm, this is the team's one year anniversary of maintaining lintian" + release[1], and still using the "temporary" subversion repository... + + Featuring Steve "R." Langasek in a guest appearance. + + [1] http://lists.debian.org/debian-lint-maint/2004/01/msg00014.html + + * checks/*.desc,doc/lintian.sgml: + + [JvW] Stop bugging us for exceptions, mmkay, just install overrides. + Hints like this should be in the general documentation anyway, not in + per-tag descriptions. The general documentation will now only ask to + contact us if in doubt + * checks/changelog-file{,desc}: + + [JvW] (new test) Bark on @toplevel email signatures in changelogs + + [JvW] Display invalid debmake email address upon detection + * checks/common_data.pm: + + [CW] Add tclx8.4 to %known_tclxs. + * checks/description: + + [SRL] Do not generate warnings when a short description starts with an + article; this is good grammar and should not be discouraged. + (Closes: #290505) + + [JvW] Drop description-synopsis-starts-with-a-capital-letter by popular + demand (Closes: #288568) + * checks/files{,.desc}: + + [JvW] Warn only for hardlinks in /etc or amongst different directories + (Closes: #288634) + + [JvW] Only check for desktop files in GNOME's and KDE's obsolete places, + not in all the package, as KDE uses .desktop files also for other + purposes (Closes: #289773) + * checks/nmu.desc: + + [JvW] Be more precise in explaining why lintian thinks this is a NMU, + and copy explanation to changelog-should-mention-nmu + * checks/scripts{,.desc}: + + [CW] Add checks for tclsh8.4 and wish8.4. (Closes: #288287) + + -- Jeroen van Wolffelaar <jeroen@wolffelaar.nl> Mon, 31 Jan 2005 23:14:01 +0100 + +lintian (1.23.7) unstable; urgency=high + + * lib/Lab.pm: + + Fixed creation of static lab if the directory already existed, this + failed in 1.23.6 + + In temporary lab mode, try to create the directory several + times before giving up + + * testset/runtests: Extend the static lab test + + -- Frank Lichtenheld <djpig@debian.org> Sat, 8 Jan 2005 21:41:21 +0100 + +lintian (1.23.6) unstable; urgency=low + + The "Let's see if I can upload myself now" release, made by Marc, Frank and + Colin, uploaded by Jeroen. + + * checks/description + + [HE] Warn if the short description start with an article or a capital + letter. Patch by Tobias Toedter <t.toedter@gmx.net>, thanks. (Closes: + #258824) + * checks/fields: + + [HE] Warn if the debian revision has three parts, as this is the sign of + a binary NMU. New check's name is binary-nmu-debian-revision-in-source. + (Closes: #244830) + + [HE] Warn if people use the Bugs field to refer to the Debian BTS, the + new check is called redundant-bugs-field. (Closes: #245883) + * checks/files: + + [HE] Check that .desktop files are placed in /usr/share/applications. + This seems to be the standard place for those files that are used + to create menus. The check is called desktop-file-in-wrong-dir. + (Closes: #200171) + * checks/manpages: + + [HE] Don't compare the manpage filename extension and the content of + .TH case-sensitive. Report + patch by Jay Berkenbilt <ejb@ql.org>, + thanks. (Closes: #285335) + + [HE] Emit binary-without-english-manpage if a package only provides + translated manpages for a binary. (Closes: #259227) + + [HE] Skip all comment lines when checking for .so links in manpages. + Thanks for the report and fix suggestion to Steinar H. Gunderson + <sgunderson@bigfoot.com>. (Closes: #284662) + * checks/md5sums: + + [HE] Strip off ./ at the beginning of the filenames in md5sums + files (this seems to happen on some systems, though we don't know + how). (Closes: #284728) + * checks/standards-version: + + [CW] By definition, udebs aren't required to conform to policy, so + don't issue no-standards-version-field for them. (If they happen to + have a Standards-Version field anyway, we still check that it's + valid.) + + * lib/Lab.pm, frontend/lintian: + SECURITY (CAN-2004-1000): + + [FL] Overhaul lab directory handling. This also fixes the issue + of removing a lab that never was created (Closes: #286681) + + -- Debian Lintian Maintainers <lintian-maint@debian.org> Mon, 27 Dec 2004 05:40:13 +0100 + +lintian (1.23.5) unstable; urgency=low + + The "learn how to use intltool-debian correctly the hard way" release + + * checks/po-debconf: Set INTLTOOL_EXTRACT to fix invocation + of intltool-update (Closes: #285419, #285471) + + -- Frank Lichtenheld <djpig@debian.org> Mon, 13 Dec 2004 18:16:52 +0100 + +lintian (1.23.4) unstable; urgency=low + + The "A little pause from the sarge release work" release. + + * checks/changelog-file: + + [FL] file has apparently changed its output format for + symlinks sometime in the past. This broke symlink detection. + (Closes: #276504) + * checks/deb-format, unpack/unpack-binpkg-l1, unpack/unpack-binpkg-l2: + + [CW] Fix binary package data member extraction to work with arbitrary + compression algorithms instead of hardcoding data.tar.gz. + * checks/debconf{,.desc}: + + [FL] The SETTITLE command was introduced in debconf version + 1.3.22. Check the depends for that (Closes: #261890) + + [FL] Warn about incorrect usage of commas in translated Choices + fields. Patch by Denis Barbier after a suggestion by Andreas + Metzler (Closes: #282030) + * checks/debhelper: + + [FL] Update list of debhelper scripts that modify maintainer + scripts + * checks/menu-format.desc: + + [FL] Adjust references to the menu documentation. Noted by + Jack Moffitt (Closes: #277393) + * checks/po-debconf{,.desc}: + + [FL] Check for outdated .pot files when using po-debconf. + This requires a new dependency on intltool-debian. Patch + by Denis Barbier with corrections by JvW (Closes: #242345) + * checks/scripts{,.desc}: + + [FL] Fix copy-and-paste error in description + of wrong-path-for-gnuplot (Closes: #276945) + Thanks to Lionel Elie Mamane for reporting. + + [FL] Add tclsh8.3 to list of valid interpreters as it is used + in at least one package. (Closes: #280080) + + [FL] Issue wrong-path-for-{ruby,python} even if the path contained + a version number. Change the description of the tag to reflect that. + (Closes: #257904) + + * frontend/lintian-info: + + [FL] Overrides start with O:, not with 0:, d'oh! + (Closes: #258815) + + * lib/Tags.pm: + + [FL] Add missing "use Util;", noted by Robert Luberda + (Closes: #278513) + + * testset/debconf/*,testset/tags.debconf: + + [FL] New test package for debconf and udeb tests + * testset/diffs: + + [JvW] Remove the shipped ELF binary, can be compiled at test-time + * testset/runtests: + + [FL] Make checks of udeb packages possible + + -- Frank Lichtenheld <djpig@debian.org> Mon, 6 Dec 2004 01:41:21 +0100 + +lintian (1.23.3) unstable; urgency=low + + The ``the others must be busy releasing Sarge or something'' release, + prepared by yours truly + + * checks/conffiles.desc: + + Note the most likely cause for duplicate-conffile in the description + (thanks Chris Anderson for running into this problem and asking me + about it) + * checks/copyright-file: + + Revert the extra pedantic check introduced in 1.23.0 that + complained about unstrict dependencies when one as a + /usr/share/doc/<package> that is a symlink (Closes: #249414) + * checks/debconf: + + Don't warn when the Choices field of a debconf question is + not translated, often it makes no sense to translate it + (Closes: #262649) + * checks/debhelper: + + dh-make also creates sample files named .EX, so make that check + case-insensitive (Closes: #251262) + * checks/fields.desc: + + Adjust package-has-a-duplicate-relation to warning, and note that + this sometimes happens to you when using ${shlibs:Depends}, and you + shouldn't bother too much if that's the case (Closes: #274286) + Thanks Peter Eisentraut for the suggestion + + Fix English language depends-on-essential-package-without-using-version, + thanks to Peter Eisentrautf for noticing (Closes: #261603) + + [FL] Clone depends-on-essential-package-without-using-version as + build-depends-on-essential-package-without-using-version to give + correct policy reference (Closes: #261602) + * checks/init.d: + + Don't warn for missing init.d scripts in package and conffile list + if a variable is used instead of a real name (Closes: #264218) + * checks/manpages.desc: + + Demote binary-without-manpage to warning, and adjust description, + to be consistent with policy, which says a manpage should be available + (and doesn't use "must" for it). Thanks to Robert Millan for his patch + (Closes: #271014) + * checks/nmu.desc: + + Note in source-nmu-has-incorrect-version-number's description that + the mistake could also be the other way around (Closes: #258604) + * checks/po-debconf: + + Don't give missing-file-from-potfile-in on empty lines + (Thanks Adam Conrad for noticing) + * checks/scripts: + + The php commandline interpreter is now provided by php4-cli, and + not php4-cgi, update dependency check accordingly (Closes: #268077) + + Give an error if the 'config' script uses a non-essential + interpreter (Closes: #274832) + * checks/shared-libraries: + + Ignore comments in shlibs files (Closes: #275124) + + * doc/lintian.sgml: + + Document that you can use comments in overrides (Closes: #87805) + + * frontend/lintian: + + Fix overrides so that they allow all of (1) <package> <type>:, + (2) <package>:, and (3) <nothing> as prefix to tags you want to + override, and modify documentation accordingly. This used to be buggy + (Closes: #261435) + + -- Jeroen van Wolffelaar <jeroen@wolffelaar.nl> Wed, 13 Oct 2004 02:45:36 +0200 + +lintian (1.23.2) unstable; urgency=low + + * The "of course it had to go wrong on my first own lintian + upload" release. + * Tighten versioned Build-Depends on sed to (>= 4.1-4) to avoid + being hit by a bug in sed that changes the permissions of files + when processed with sed -i (Closes: #259109) + + -- Frank Lichtenheld <djpig@debian.org> Tue, 13 Jul 2004 13:36:45 +0200 + +lintian (1.23.1) unstable; urgency=low + + The ``Now featuring over 500 checks'' release, prepared by the usual + suspects. + + * checks/*: + + [JvW] Changed from executables to check-plugins + + [HE] Drop the misuse of charset when we want to say "encoding". + Renamed 2 tests for that: + unknown-charset-in-po-file -> unknown-encoding-in-po-file + debian-changelog-file-uses-obsolete-national-charset -> + debian-changelog-file-uses-obsolete-national-encoding + (Closes: #248194) + * checks/binaries: + + [FL] Change check for binary-compiled-with-profiling-enabled on + hppa to look for _mcount instead of __gmon_start__ since the + latter can't be used as an indicator on that arch (Closes: #207063) + + [JvW] Exempt ocaml binaries from the 'is the binary stripped?' test, + since they cannot be stripped harmlessly. See #256900 (Closes: #252695) + + [JvW] Parse the output of file a little bit more strict, and make it + consequent across checks (Closes: #257898) + * checks/changelog-files{,.desc}: + + [HE] New check latest-debian-changelog-entry-without-new-date, comparing + the dates of the last 2 changelog entries. (Closes: #111215) + + [FL] New tag invalid-date-in-changelog which is issued if + latest-debian-changelog-entry-without-new-date encounters a + parse error + * checks/common-data.pm: + + [JvW] Add libgl(u)-dev to list of virtual packages (Closes: #255595) + + [JvW] Added amd64 to list of known architectures, as the name has + settled and it'll likely enter the archive soonish (Closes: #257503) + * checks/control-file{,.desc}: + + [HE] Introduced new check script. New checks: + - build-info-in-binary-control-file-section, triggered + by a Build-* field in a binary section (Closes: #94928) + - debian-control-file-uses-obsolete-national-encoding, stolen from + changelog-file (Closes: #247197) + * checks/cruft{,.desc}: + + [JvW] cvsignore-file-in-source is now info, because it happens so often + by upstream, and is only very minor in size + + [HE] New check: source-contains-cvs-conflict-copy, triggered by + .#file.version files. They are created by cvs when it tries to merge + local changes and an update from the repo. (Closes: #246060) + + [JvW] Also check for source-contains-svn-conflict-copy (for .r123 and + .mine files) + * checks/debhelper: + + [FL] Avoid Perl warning about undefined values. Noted by JvW. + * checks/fields{,.desc}: + + [JvW] Added debian-revision-should-not-be-zero, suggested by Adam + Conrad + + [FL] Downgrade build-depends-without-arch-dep to warning as it's + heuristic. Reword explanation. This partly handles #247171. + + [JvW] For build-depends-without-arch-dep, fix detection of debhelper + usage in clean when used by means of CDBS (combined with above change, + now fully closes: #247171) + + [HE] Check Build-Depends(-Indep) for virtual packages without a + real dependency. Fix based on patch by Steinar H. Gunderson + <sgunderson@bigfoot.com>. (Closes: #255593) + + [HE] Don't issue virtual-package-depends-without-real-package-depends + if this happens in Suggests. (Closes: #254367) + + [FL] Allow whitespace in relations after the version number + * checks/huge-usr-share: + + [FL] Skip check for packages that don't have usr/share at all + (Closes: #247708) + * checks/manpages: + + [FL] Comment check for no-manpage-in-correct-directory out until + I know if it's worth keeping it at all (Closes: #253011) + Thanks to Stephen Stafford for pointing this out. + * checks/menus: + + [FL] Fix regex which checks for update-menus calls (missing + whitespace) and allow path before executable name (perhaps this + should be another warning, though?) (Closes: #254420) + + [FL] Some clean-up and warn that wm-menu-config is deprecated + (Closes: #248997) + + [FL] Demote executable-in-usr-lib-menu to warning as executables + are supported (but seldom used) (Closes: #254498) + * checks/menu-format: + + [FL] Fix su-to-root checks to cope with the new -X option and + improve the option parsing to better handle unknown options + + [FL] Allow a comma separated list in the package test. Pointed + out by Gerfried Fuchs (Closes: #246507) Change incorrect-package-test + to pkg-not-in-package-test which is issued when the package is + not in the list. Don't issue menu-command-not-in-package when + we have a list. + + [FL] Commands for window manager's modules can't be expected + to be available as executables, so don't issue + menu-command-not-in-package in this case. Thanks to + Manoj Srivastava for reporting (Closes: #247805) + + [HE] Change menu-command-not-in-package to also look into the standard + PATH. (Closes: #255155) + * checks/po-debconf: + + [JvW] Simply fail if stuff from gettext is missing. + * checks/scripts: + + [FL] Don't issue executable-not-elf-or-script for files + that are named *.exe (Closes: #251075, #255083) + + [CW] Add python2.4 as a valid interpreter (Closes: #254482) + + [FL] Add ruby1.[68] as valid interpreters, introduce new + ruby-script-but-no-ruby-dep error, copied from the python stuff + + [FL] Don't issue script-not-executable for menu-methods. There + are reasons why they are sometimes not executable (Closes: #250632) + + [FL] 'and' and 'or' are no bash keywords (Closes: #194283) + * checks/shared-libs: + + [FL] Don't report shlib-with-executable-bit and + shlib-with-bad-permissions on symbolic links to such files + + [JvW] Fix the pic-detection code (Closes: #185816) + + * debian/{control,rules}, frontend/lintian: + + [JvW] Insert version number at package build time, no need to commit a + change to frontend/lintian on every version number change... Requires + sed version 4 at build-time. + + [JvW] Start depending on gettext. + + [JvW] Start depending on libdigest-md5-perl on woody, for using md5 on + files. + + * frontend/lintian: + + [JvW] Partial rewrite: checks are now plugins loaded into lintian, + rather than executed as separate executables. Makes it easy to make + common functions available, tags are done centrally, etc etc. Should + also save quite a number of forks, thus more speedier. + + * lib/Util.pm: + + [FL] dpkg supports comments in control files now, handle them + correctly + + [FL] a space after the colon is not mandatory in dpkg control + files + + * man/lintian.1: + + [FL] Document new control-file check script + + * reporting/harness: + + [FL] Correctly support udeb packages + * reporting/html_reports: + + [FL] Correctly support udeb packages + + [FL] Remove some unused code for bug references + * reporting/bug.status: + + [FL] Remove + + * testset/filenames: + + [JvW] Fix two lintian warnings in lintian itself by touching files only + on clean target, and not distributing them in the source + + * unpack/list-srcpkg: + + [FL] Some packages don't specify a standards-version, e.g. d-i ones. + Prevent Perl warnings. + * unpack/list-udebpkg: + + [FL] Fix sort of copy & paste error which caused the whole + script to behave ill + * unpack/unpack-binpkg-l2: + + [FL] While fixing permissions, also enable write access + so we get no problems on removal. Disable group write + permissions, we need nobody to interfere with us. + + -- Debian Lintian Maintainers <lintian-maint@debian.org> Tue, 13 Jul 2004 01:23:20 +0200 + +lintian (1.23.0) unstable; urgency=low + + The ``moving forward'' release, prepared by Marc 'HE' Brockschmidt, + Frank Lichtenheld and Jeroen van Wolffelaar. + + * [FL] add udeb support (Closes: #216117) + Thanks to Joey Hess for his input. Many changes, mostly to + frontend/lintian, checks/debconf and checks/files + + * checks/binaries: + + [JvW] Ignore static binaries in /usr/lib/debug + * checks/changelog-file: + + [HE] Check for the debmake template email address in the changelog + entries. Patch by Steffen Moeller <moeller@pzr.uni-rostock.de>, + thanks! (Closes: #199903) + + [JvW] Loosen up checks for -0.x versions, could be either native or + upstream + Debian revision, so some tests cannot be performed because of + that uncertainty + * checks/copyright-file: + + [HE] Change usr-doc-symlink-to-foreign-package check to throw an + error when a package doesn't depend on the *same* version of the + package its /usr/share/doc/$foo dir is symlinked to. This is supposed + to ensure that both come from the same source and the same source + version. (Closes: #201470) + * checks/cruft.desc: + + [HE] Reworded some parts and bumped the Standards-Version after + checking for changes. (Closes: #235735) + * checks/debconf{,.desc}: + + [JvW] Add an error for a bogus default for a boolean template + (Closes: #236846) + + [HE] Check for duplicate fields in templates. Fix based on + patch by Denis Barbier <barbier@linuxfr.org>, thanks! (Closes: #233116) + + [HE] Check if the translation of a Choices: field is empty, leading to + skipped questions. (Closes: #149451) + * checks/debdiff: + + [HE] Check for accidental native packaging. This is done by checking for + a dash in the version number (though -0.\d+ and -0.\d+.\d+ are allowed + for (binary) NMUs) and the existence of a .diff.gz. (Closes: #216327) + + [JvW] Implement source-tar-is-posix-tar, which checks for upstream + tarballs that are tar --posix tarballs, which cannot be untarred by the + tar version in woody (Closes: #245138) + * checks/debhelper{,.desc}: + + [JvW] Add error if debian/compat is empty, happens once in current + sid and gave internal error before + * checks/debian-readme: + + [HE] Add check for the debmake template email address. Patch by Steffen + Moeller <moeller@pzr.uni-rostock.de>, thanks! + * checks/deb-format: + + [HE] Add a check for the data member of a deb. dpkg 1.11 introduces + support for configurable compression algorithms (bzip2, for example), + but this shouldn't be allowed before dpkg 1.11 hits stable. + (Closes: #159874) + * checks/fields: + + [HE, FL] Nearly complete rewrite for clean up: + - bad-relation seems to work better now (Closes: #171763) + - duplicate relations checking now works for different fields, too + (Closes: #234978, #235356) + + [HE] Add check for an Origin field with "Debian" as value. + (Closes: #119618) + + [HE] Reintroduce build-depends-without-arch-dep check with the patch + I proposed in #214231. (Closes: #242484) + + [JvW] Check for well-formed Debian-revision + + [JvW] Check for correct realname when QA mailaddress used + * checks/fields.desc: + + [FL] Fix some wrong policy references + * checks/files: + + [HE] New check for compiled python files (*.pyc). Patch by David + Kimdon <david@kimdon.org>, thanks. (Closes: #236606) + + [HE] Check for gzipped zero byte files. (Closes: #172052) + + [FL] Don't complain about read-only *.ali files as requested by + Ludovic Brenta. This makes #226879 wishlist again. + + [FL] Warn about ancient files with the value of + Dinstall::CutOffPastYear from dak CVS as limit. + (Closes: #204801, #218304) + + [HE] Check for *.ali files introduced, warn if their permissions are != + 0444. (Closes: #226879) + + [HE] New checks for deprecated X11 dirs (/usr/{bin,lib,include}/X11 and + usr/X11R6/*). (Closes: #81004) + + [HE] Check for README for other distributions/platforms and warn if + they're installed. Based on patch by Jay Bonci. (Closes: #178441) + * checks/init.d: + + [FL] output-of-updaterc.d-not-redirected-to-dev-null should be + only an info tag since it is more an aesthetical issue, not a + policy violation. (Closes: #149700) + * checks/lintian.desc: + + [JvW] Added missing Type: tags + * checks/manpages: + + [FL] New checks: + - Section number of directory and file differ + - Section number of file differs from what is expected + from the location of the binary. (Closes: #203831) + + [FL] Parse contents of man page and implement more new checks: + - Section number of file and header differ (Closes: #89488) + - Try to search for hyphens that should be minus signs + (Closes: #205924). First patch by Eduard Bloch, final + regex by Josip Rodin. + - Search for FSSTND directories referenced in man pages. Only + an info tag. (Closes: #111098) + + [FL, HE] Fix false positives of + manpage-for-non-x11-binary-in-wrong-directory when a link + from a normal bin/ is pointing to a binary in an X11 dir. Based + on patch by FL. (Closes: #203389) + + [JvW] x11-games-should-be-in-usr-games is now error, because it's + mandated by policy + * checks/menus: + + [JvW] Stricter checking for whether update-menus is actually called + (Closes: #244628) + * checks/menu-format: + + [FL] Only issue one warning about needs=dwww, not two + + [HE] Check if the command given with command= is in the package + (Closes: #199346) + * checks/nmu{,desc}: + + [JvW] New series of checks: Check whether NMU's have correct NMU version + number, and whether maintainer uploads have correct maintainer version. + Also, check whether NMU's and QA uploads are identified as such in the + changelog (Closes: #111948) + * checks/scripts: + + [FL] Add /usr/bin/php as valid interpreter. (Closes: #239115) + Thanks to Peter Eisentraut for pointing this change out + + [FL] Reflect new suidperl handling. /usr/bin/suidperl + shouldn't/can't be called directly anymore so add a new + error and remove it from the list of usual interpreters. + (Closes: #240806) + + [HE] Don't warn about files with a shebang line which are not executable + when they are called *in, as they're probably just templates. (Closes: + #114740) + * checks/shared-libs: + + [HE] Add some new logic to cope with symlinks from /usr/lib to another + dir to fix false positives of postrm-has-useless-call-to-ldconfig and + friends. (Closes: #190714) + + [HE] Also handle case statements in postrm scripts. (Closes: #179435) + * checks/standards-version: + + [JvW] Also emit warning if standards version is 3.6.0, and not yet 3.6.1 + + * collection/diffstat + + [HE] The diff.gz file name does not include the epoch, so strip it + before trying to get the file. + * collection/override-file: + + [FL] add support for source overrides (Closes: #129510) + See the User Manual for more information. + * collection/source-control-file: + + [FL] New collection script to extract field information + from debian/control in source packages. Currently used + in checks/debhelper to guess udeb packages. + + * debian/control,debian/copyright: + + [FL] Add Marc 'HE' Brockschmidt to Uploaders and + to copyright file + + * doc/lintian.sgml: + + [FL] Some updates, some more verbatim explanations + (Closes: #197955) + + [FL] Reworked the override section to handle udeb and + source packages, too + * doc/README: + + [FL] Update options + + * frontend/lintian: + + [HE] Added a --dont-check-parts|-X option to allow users to specify + which tests should not be run. Also added infos about this to the + manpage. (Closes: #206674) + * frontend/lintian-info: + + [JvW] Fixed that lintian -I also displays info for I: entries + + * lib/Dep.pm: + + [FL] Fixed some semantic errors (since no one ever observed the + corresponding perl warnings the fixed parts are probably never + used in the current code) + * lib/Utils.pm + + [HE] Changed {read,parse}_dpkg_control a bit to cope with the fact + that template files sometimes contain lines consisting only of + whitespace which do *not* separate to blocks. (Closes: #242479) + + * testset/runtests: + + [JvW] Rewrote so that it is actually useful: + - sort output to nullify filesystem directory ordering differences + - run lintian just once + - check that all tests that are triggered have a description, if verbose + specified, warn about tests that are not tested + + * unpack/list-binpkg: + + [HE] Try to open Packages.gz if no Packages file can be found. Fix + based on patch by Robert Lemmen <robertle@semistable.com>, thanks! + (Closes: #198617) + + -- Debian Lintian Maintainers <lintian-maint@debian.org> Fri, 23 Apr 2004 12:32:36 +0200 + +lintian (1.22.12) unstable; urgency=low + + The ``Fix those false positives, mkay'' release, prepared for all Debian + Maintainers by Frank Lichtenheld and Jeroen van Wolffelaar. + Best served cold. + + * debian/control: + + [FL] Make Uploaders a single line field. It didn't really + break, but at least DDPO had its difficulties + + * man/lintian.1: + + [FL] sync man page with the --help output by adding missing options + Based on a patch by Robert Lemmen. (Closes: #198615) + + [FL] sync man page with the current list of checks and collection + scripts + + * checks/binaries: + + [FL] Don't complain about non-stripped kernel modules. + Patch by Dagfinn Ilmari Mannsaker (Closes: #203373) + + [JvW] Exclude binaries and packages named *-static from the + binary-is-static test. Exception for sash removed. (Closes: #215235) + * checks/changelog-file: + + [FL] Check that encoding of changelog file is UTF-8, based on a patch by + Denis Barbier (Closes: #175318) + * checks/copyright-file{,.desc}: + + [FL] Don't advise to point to the perl packages' copyright file. + Thanks to Martin Orr for pointing this out. (Closes: #193293) + + [FL] Fixed false positives of + copyright-should-refer-to-common-license-file-for-gpl due to + the GFDL. Thanks to Ross Burton for reporting this. (Closes: #192278) + * checks/deb-format{,.desc}: + + [JvW] Fix perl variable-name clash causing unusually formatted error + output (only important if you do automatic processing on it) + + [FL] The current script is by Denis Barbier, correcting author in + .desc file + * checks/debhelper.desc: + + [FL] correct reference to debhelper manpage. It's debhelper(7), not + debhelper(1). Thanks to Brian Nelson for pointing this out + (Closes: #188245) + * checks/debconf: + + [JvW] Update valid types, since currently 'title' is supported now too + (Closes: #234379, #234608) + * checks/description: + + [FL] fix description-is-dh_make-template check. (Closes: #215125) + Fix suggested by Josip Rodin + * checks/etcfiles.desc: + + [FL] correcting abbreviation of etcfiles to 'etc', was 'ini' which + is already used by init.d + * checks/fields: + + [FL] Really check only "real" dependency fields for needless + depends (Closes: #185035) + + [JvW] Don't consider depending on coreutils bad, as this is in a way a + versioned depend (Closes: #216536) + + [FL] Remove the build-depends-without-arch-dep check. It produces + way too much false positives and can only be replaced by + a sophisticated debian/rules parser + (Closes: #192037, #202950, #214231) + + [JvW] Test syntax of Uploaders: too + + [JvW] Accept more whitespace in relations, which is allowed according to + policy, thanks Adrian Bunk for noticing, FL for patch (Closes: #200280) + * checks/filenames: + + [JvW] Revised the symlink detection stuff, it is now more rigorous, and + has separate warning for recursive symlinks that are otherwise not + necessarily wrong (Closes: #118080) + * checks/files: + + [FL] only issue package-installs-nonbinary-perl-in-usr-lib-perl5 if + there is no binary perl file at all in the package, since this + reflects the way the Installer module behaves (Closes: #199898) + * checks/huge-usr-share: + + [JvW] Check for a big /usr/share (currently 1-2MB will trigger it) in + arch-dependent packages. Currently just I:. Thanks Steve McIntyre for + the idea. (Closes: #232849) + * checks/menus{,.desc}: + + [FL] Remove non-executable-in-etc-menu-methods as it doesn't + reflects the current menu manual (Closes: #229460) + * checks/po-debconf: + + [JvW] Check whether files listed in debian/po/POTFILES.in actually + exist, and only positively detect po-debconf usage if dependency is + there. (Patch by Denis Barbier <barbier@debian.org>, only minimally + modified) + * checks/scripts: + + [FL] Fix check for "exec ..." line. Fix suggested by Josip Rodin. + (Closes: #212811) + + [JvW] Tighten up mknod, dpkg --print-architecture and killall detection + in maintainer scripts, would need rewrite to be really sane. + (Closes: #148548, #161820, #192300) + * checks/shared-libs: + + [FL] Be more tolerant to variations when checking for + postrm-unsafe-ldconfig. Thanks to Martin Godisch, Steinar H. Gunderson + and Aidas Kasparas for their input. (Closes: #218543, #233740) + + * unpack/unpack-binpkg-l1: + + [FL] tar uses now h to signal hardlinks which breaks a lot of our code. + so sed'ing it away. Many many thanks to Theodore Y. Ts'o for bringing + this to our attention (Closes: #234545) + + -- Frank Lichtenheld <djpig@debian.org> Mon, 8 Mar 2004 00:46:15 +0100 + +lintian (1.22.11) unstable; urgency=low + + Jeroen van Wolffelaar <jeroen@wolffelaar.nl> + * Upgrade lintian itself to policy 3.6.1 + + Drop question about removing lab on purge, just do it. + * Update to Debian Policy 3.6.1, all references broken by + section-reorganization are updated (Closes: #194257, #208945, #214949, + also closes: #217384, #231884) + (Patch by Nicholas Breen <nbreen@ofb.net>) + * Support for dash scripts (Closes: #194787) + (Patch by Frank Lichtenheld <djpig@debian.org>) + * checks/binaries.desc: + + Fix typo (Closes: #202856) + * checks/deb-format, debian/control: + + Rewrite by Denis Barbier, slightly cleaned up, renders + libarchive-tar-perl dependency unneeded (Closes: #232875) + * checks/filenames (and more): + + Check for Subversion version control leftovers (Closes: #190067) + + Ignore empty __init__.py files in /usr/share/doc (Closes: #215234) + (based on patch by Frank Lichtenheld <djpig@debian.org>) + * checks/cruft: + + Check for CVS and Subversion cruft in source packages (Closes: #189776, + also closes: #190067) + * checks/po-debconf + + Rewrite in Perl + + Obsolete PO files are no more checked because po2debconf now + automatically runs debconf-updatepo if PO files are older than + templates files. Of course PO files might be outdated (e.g. when + downloaded from a BR), but it should occur seldom. + + PO files are processed through msgfmt to ensure they are valid. + + Based on patch by Denis Barbier <barbier@debian.org>, Closes: #210576 + + Check whether po-debconf is used at all, and warn if it isn't + + Check for required POTFILES.in and template.pot in debian/po + * checks/menu-format + + Drop menu-icon-has-bad-colors, it doesn't apply anymore (Closes: #199341) + + Menu sub-policy 3.6.0 added two sections (Closes: #207529) + + Added three checks for correct su-to-root usage (Closes: #188095) + + Understand icon32x32 and icon16x16 (Closes: #200046) + + Missing required tags are now an error (and check name changed) + + Check tag-quotation + + Rewrite needs check properly, being more precise what is allowed + + Complain about needs="dwww", as this is obsolete according to menu + maintainer + (parts menu-format updates based on patch by Bill Allombert + <ballombe@debian.org>) + * checks/scripts + + Recognise the 'tcl' interpreter, not the same as tclsh (Closes: #230182) + + Frank Lichtenheld <djpig@debian.org> + * checks/debhelper: + + fix parsing debian/compat for needed + version (Closes: #198611) + + update list of existing debhelper commands + * checks/manpages: + + push back the extension after testing for + manpage-not-compressed (Closes: #225293) + * checks/copyright-file: don't complain about missing reference to + the GPL if we already detected a wrong reference (Closes: #225837) + * checks/debconf: + + don't complain about partially-translated-question, if + Choices is only a substitution variable (Closes: #200802,#222648) + + fix testing of dependencies to eliminate false + positives of missing-debconf-dependency (Closes: #195201) + + -- Jeroen van Wolffelaar <jeroen@wolffelaar.nl> Mon, 16 Feb 2004 21:17:59 +0100 + +lintian (1.22.10) unstable; urgency=low + + * Lintian maintenance is now in the hands of the `Debian Lintian + Maintainers' group + * Add check for tar bug #230910 + (tar check written by Marc 'HE' Brockschmidt <marc@marcbrockschmidt.de>) + + -- Jeroen van Wolffelaar <jeroen@wolffelaar.nl> Fri, 13 Feb 2004 01:00:48 +0100 + +lintian (1.22.9) unstable; urgency=low + + * config.* files from 2000-09-05 and such had the timestamp in a + variable called version, not timestamp, so check for that as well + to detect the really old ones as well. + * Made sharedobject-in-library-directory-not-actually-a-shlib an E + because it uses the same method as + pkg-has-shlibs-control-file-but-no-actual-shared-libs does, and that + one's pretty reliable and already E, closes: #197951 + * Fixed logic error in detecting whether the uncompressed changelog + file is really a symlink, closes: #198171. + * Ripped out those few remaining bits of code that watched over /usr/doc, + closes: #193598. + * Don't whine about policy 3.5.10. No changes. + * Avoid install-docs' --no-update-menus when checking for update-menus + calls, closes: #183193. + * Close the IN filehandle in menus:check_script() so that $. gets + properly reset (sloppy coding -- argh!). + * Fixed a $1 overwriting thinko in debhelper checks. + * Demoted build-depends-without-arch-dep from E to W. "Most likely" + isn't non-heuristic, dammit. + + -- Josip Rodin <joy-packages@debian.org> Sat, 06 Sep 2003 22:05:22 +0200 + +lintian (1.22.8.1) unstable; urgency=high + + * Fixed a small logic oversight in the new debhelper compat check, + closes: #187415. + + -- Josip Rodin <joy-packages@debian.org> Thu, 3 Apr 2003 12:27:55 +0200 + +lintian (1.22.8) unstable; urgency=low + + * Updated the list of valid archive sections, closes: #187111. + * Ignore symlinks in the image-file-in-usr-lib check, closes: #180280. + * Updated the list of virtual packages, closes: #179614, #180421. + * Fixed typo in the LaTeX license exception, closes: #184640. + * Removed anal-retentive check for a bug in debconf << 1.2.9, + closes: #185721. + * Updated policy version in the description, closes: #185882. + * Checks in debian/compat for debhelper compat version, and warns + if it finds that as well as DH_COMPAT, closes: #186269. + + -- Josip Rodin <joy-packages@debian.org> Wed, 2 Apr 2003 19:22:37 +0200 + +lintian (1.22.7) unstable; urgency=low + + * Adjusted Policy references for changes in the shared library stuff. + Updated standards-version checks to recognize 3.5.9, and shifted + old/ancient borders to 3.5.7/3.5.2. + * Allow for ${1+"$@"} as well in the evil exec line check, closes: #179145. + * Removed the CXXABI check because it's not reliable enough, not all + C++-linked programs include libsupc++ which provides those symbols. + Sorry. Closes: #179278, #184729. + * Allow /usr/lib/$pkg in the rpath check, thanks to Matej Vela, + closes: #173610. + * Added /usr/share/pixmaps to the icon file path, closes: #181552. + * Ignored symlinks in the gzip -9 check for changelogs, closes: #181899. + * Ignore LaTeX license in the common-licenses check for GPL, thanks + to Peter van Rossum, closes: #184640. + * Included (tcl|tk)8.4 on their respective lists, thanks to Chris Waters, + closes: #184655. + * Ignore alternatives in the check for duplicate relations, closes: #184660. + It's still not inclusive, but the remaining cases should be rare enough. + * Added Denis Barbier's po-debconf checks, closes: #173823. + + -- Josip Rodin <joy-packages@debian.org> Fri, 14 Mar 2003 23:21:41 +0100 + +lintian (1.22.6) unstable; urgency=low + + * Added missing description for empty-manual-page. + * Adjusted some descriptions for -dev symlinks. + * Updated the policy section for copyright files from 13.6 to 13.5, + closes: #177769. + * Updated the policy section for changelog files from 13.8 to 13.7, + closes: #176946. + * Added extended-description-line-too-long, closes: #176784. + * Warn against lack of CXXABI, thanks to Colin Watson, closes: #175920. + * Allow for all the other tricks scripts play with their interpreters + by making the check generic, /^\s*exec\s*.+\s*.?\$0.?\s*.?\$\@/. + Thanks to Colin Watson, closes: #175602. + * Changed the dh_testversion checks to also find disparities between + DH_COMPAT and debhelper build-dep version, closes: #175295. + * Ignore packages that build-depend on autotools-dev in the config.* + date check, since they probably copy stuff around, closes: #178347. + + -- Josip Rodin <joy-packages@debian.org> Thu, 30 Jan 2003 17:03:15 +0100 + +lintian (1.22.5) unstable; urgency=low + + * Ignore Zope's license in + copyright-should-refer-to-common-license-file-for-gpl, thanks to + Matej Vela, closes: #172211. + * Don't require \S+ but .+ while parsing @packages, closes: #172444. + * Rewrote the chunk of code dealing with names of manual pages, because + it was done all wrong, closes: #173548. + * Ignore files consisting merely of .so links completely, thanks to + Matej Vela, closes: #173609. + * Added code to check for bad-so-link-within-manual-page. + * Also added code to check for empty-manual-page. + * Added a few more cases of safe ldconfig invocation in postrm, + closes: #174042. Didn't handle the one with the "case" statement, + it's too bothersome. Oh well, the check is a warning instead of + an error for a reason. + * Added a check for the timestamp line in config.guess/sub files, + closes: #171295. + * Renamed the full-stop check to + description-synopsis-might-not-be-phrased-properly and rephrased its + description. This is where I draw the line :) closes: #174150. + * Added a warning on .pl and .pm files within /usr/lib/perl5, + closes: #174595. + * Renamed pkg-without-shlibs-has-shlibs-control-file to + pkg-has-shlibs-control-file-but-no-actual-shared-libs and improved + its long description. + * Added sharedobject-in-library-directory-not-actually-a-shlib, + which should properly address the issue of SONAME-less libraries, + closes: #174928. + * Exclude files that match "LICENSE AGREEMENT FOR PYTHON 1.6.1" from the + copyright-should-refer-to-common-license-file-for-gpl check, + closes: #174929. + + -- Josip Rodin <jrodin@jagor.srce.hr> Sat, 11 Jan 2003 12:32:33 +0100 + +lintian (1.22.4) unstable; urgency=low + + * Fixed typo in the description of description-synopsis-ends-with-full-stop, + closes: #172049. + * Slightly clarified the text as well, and added a pointer to Policy 5.7.1. + * Made it a warning, not an error which it was by mistake, closes: #172541. + * Removed an extra colon from copyright-file-lacks-pointer-to-perl-license. + + -- Josip Rodin <jrodin@jagor.srce.hr> Wed, 11 Dec 2002 20:39:38 +0100 + +lintian (1.22.3) unstable; urgency=low + + * Fixed typo in copyright-should-refer-to-common-license-file-for-gpl + which caused it to have no description. Also moved the opening of + the pipe to lintian-info before the first print E: line so that + bad-distribution-in-changes-file and other tags in lintian.desc + actually get displayed, closes: #171737. + * Updated the description of link-to-undocumented-manpage to better + match the current Policy and be more helpful. + * Added missing \Q and \E around the variable in + description-synopsis-is-duplicated, closes: #171721. + * Don't warn on _any_ mention of update-rc.d in postinst, just those that + follow whitespace or something else and a semicolon, closes: #171472. + + -- Josip Rodin <jrodin@jagor.srce.hr> Thu, 5 Dec 2002 12:25:17 +0100 + +lintian (1.22.2) unstable; urgency=medium + + * Fixed some random glitches. + * Change rgb-vs-cmap to first include the hex codes of colors in cmap.xpm, + and then go searching for names in rgb.txt. Updated the cmap.xpm + location in the description. This hopefully really closes: #170860. + * Added exception in the shell syntax checks for evil rep scripts, + thanks to Kevin Ryde, closes: #171175. + * Added checks for multiple dependencies on libstdc, tcl, tclx, tk, tkx + and libpng packages. This is currently being done in a hardcoded manner, + but that should do for now, closes: #80447, #129548. + * Added a regression test as part of the relations regression test for + the above multiple dependencies. + * Don't barf on /var/local in the FSSTND-dir-in-var check, just in + non-standard-dir-in-var, closes: #119414. The normal packages + shouldn't install anything there anyway, and base-files can have + overrides :) + * Prepend a slash to the file names in file-in-etc-not-marked-as-conffile, + closes: #122285. We already don't have the prepended thing normalized, + so why not indulge this. + * Added dh_suidregister-is-obsolete, closes: #94031. + * Added copyright-lists-upstream-authors-with-dh_make-boilerplate, + closes: #107815. I am now the official maintainer so I get to do that >:) + This time I've written the description much better, so there should + be no confusion like there was the last time. + * Added description-synopsis-is-duplicated first by comparing the + lowercased synopsis with the lowercased start of the extended + description, and then if that fails, the letters and numbers are + removed and the strings are compared. This may not catch _everything_, + but should be satisfactory, and it closes: #118098. + * Added a regression test for the above error to the other relations test. + It seemed handy. :) + * Added an error for depending on libdb1-compat, just in case, as advised + by Colin Watson. + + -- Josip Rodin <jrodin@jagor.srce.hr> Fri, 29 Nov 2002 22:22:54 +0100 + +lintian (1.22.1) unstable; urgency=medium + + * Handle the $statistics_file rotation in harness. + * Warn on dh_dhelp use, thanks to Chris Tillman, closes: #130016. + * Exempt awk from the virtual-package-depends-without-real-package-depends + check, and add an error when there's a non-versioned dependency on awk, + closes: #136831. The description may be considered vague for some + cases, but I'll wait until someone actually complains about that + before rewriting it. + * Moved the generic exceptions before the script-without-interpreter check, + which should fix Daniel Kobras' dx false positive, closes: #165574. + * Added a warning for full stop in the synopsis line, thanks to + Colin Walters, closes: #131747. + * Added a warning for daemon stopping stuff in postinst, without + a dependency on debconf (>= 1.2.9), thanks to Martin Godisch, + closes: #168621. + * Based on hints from in Jim Van Zandt's otherwise rather flawed patch + posted in bug #94928, moved the diff file stuff from the cruft check + into the diffstat collector, and made it simply extract the patch into + a file called "debian-patch" which is then used elsewhere, instead of + zcatting it over and over again. + * Added a regression test for the debian/files and config.* checks. + * Added config.log to the list of configure-generated files to warn about. + * Updated menu icon colors with a little script I wrote, closes: #170860. + * It appears File::Find has changed semantics since woody and now refuses + to follow a symlink as the name of the directory to scan. Obviously, + a simple readlink() fixes it. + * I realized that bug #122855 couldn't have been fixed the diff scanning + code anyhow, since dpkg-source ignores file deletions in the first place. + Removed the hours of work and simply expanded on the description of the + error instead. Oh well. + * Added an error for GPL copyrights that don't refer to + /usr/share/common-licenses, thanks to Edward Betts, closes: #99885. + * Added a warning for some popular architecture-independent image files + in /usr/lib which suggests moving them to /usr/share per FHS, thanks to + Bill Allombert, closes: #114474. + + -- Josip Rodin <jrodin@jagor.srce.hr> Wed, 27 Nov 2002 20:00:05 +0100 + +lintian (1.22) unstable; urgency=medium + + * Further updated the python script checks to ignore obsolete -base + packages and watch versioned python interpreters better, thanks + to Federico Di Gregorio and Luca De Vitis, closes: #169872. + * Added an exception for sash in the statically-linked-binary check, + as reported by H. S. Teoh. + * Moved descriptions for two manual page location consistency checks + from shared-libs.desc (?!) to manpages.desc, and clarified them, + as reported by Othmar Pasteka. + * Accept /var/games as an exception for setgid stuff, closes: #169382. + * Removed the /etc/ppp perms exception as per discussion on debian-devel. + * Fixed the add-log-mailing-address check by not re-my-ing the prefix + and suffix variables in each iteration of the loop, closes: #129581. + Added the word obsolete in the name of the error and a paragraph break + to further clarify it. + * Added Apps/Science as a valid menu section. This and the removal of + the error for calling ldconfig anywhere in the postinst in 1.21.5 + make Lintian Policy 3.5.8 compliant, closes: #170093. + * Exclude .png files from the extra-license-file check, closes: #164017. + * Exclude .php files from the extra-license-file check, closes: #116384. + * Added documentation-package-not-architecture-independent warning in + the cruft check, closes: #120261. + * Check if $action is defined before comparing it to avoid a warning with + the -C option, closes: #129582. + * Added Kevin Ryde's patch that implements menu-icon-too-big, + menu-icon-has-bad-colors, menu-icon-cannot-be-parsed, closes: #71396. + * Make .nfs* files trigger the backup-file-in-package check, closes: #95140. + * Added an error for .xvpics directories, closes: #169831. + * Added more misspellings from Matt Zimmerman, without the British + English stuff, with the four language names in a special arrangement, + closes: #119786. + * Made package-contains-CVS-dir an error, closes: #147301. + * Added an error for /usr/share/doc/<something>/examples/examples + directory, closes: #153144. + * Added an error for referring to the Perl license terms without actually + pointing to their location on the file system, thanks to Gergely Nagy, + closes: #157449. + * Check for localhost(.localdomain) in the Maintainer fields, + closes: #162248. + * Fixed the needs=dwww exception in the menu file check for an empty + section, thanks to Colin Watson, closes: #170437. + * Check for debian-qa@l.d.o in Maintainer fields, thanks to Colin Watson, + closes: #126687. + * Updated standards-version check to declare anything lesser than 3.2 + ancient (1999!), and anything lesser than 3.5.6 old (2001). + + -- Josip Rodin <jrodin@jagor.srce.hr> Mon, 25 Nov 2002 14:38:55 +0100 + +lintian (1.21.6) unstable; urgency=high + + * Fix two regexps in the scripts check in order to fix *sh -n checking, + closes: #167079. + * Added duplicate-conffile error, closes: #131632. + * There doesn't appear to be any provision in the Policy or in the FHS + for random compatibility symlinks, so I've just added "or symbolic + link" to the description of file-in-unusual-dir, closes: #135546. + * Fixed the regexp for package-contains-CVS-dir to actually recognize + directories that are printed with the trailing slash, closes: #146831. + * Made unregistered-script-in-etc-init.d a warning, renamed it to + script-in-etc-init.d-not-registered-via-update-rc.d and updated + its description to mention why it may not be an error, closes: #118823. + * Added dash into the regexps in the scripts check. + * Added a crude check for code within another shell (foosh -c something). + I say crude because it works with oneliners only -- anything that spans + lines sounds like pretty much impossible to do in without actually + _being_ a shell script interpreter :) closes: #166483. + * Added an exception for /etc/ppp being 750 root:dip, and complain if + it exists and it's not like that, closes: #169260. + * Expunged the notion of a global override file from the tag descriptions. + + -- Josip Rodin <jrodin@jagor.srce.hr> Sat, 16 Nov 2002 17:26:07 +0100 + +lintian (1.21.5) unstable; urgency=medium + + * Removed postinst-unsafe-ldconfig warning as per the discussion in + #120585, which also conveniently closes: #117260, #114123. + Note that postrm-unsafe-ldconfig stays! + * Further improvements to reporting/harness, reporting/html_reports + and related code. + * Fixed the display of info for python-script-but-no-python-dep on + python1*. + + -- Josip Rodin <jrodin@jagor.srce.hr> Wed, 13 Nov 2002 16:37:09 +0100 + +lintian (1.21.4) unstable; urgency=medium + + * Just check for bashisms in sh files, thanks to Jay Bonci for + pointing me a this. + * Recognize python source packages called pythonX.Y, which should fix + third-party-package-in-python-dir for all of them, closes: #114281. + Also extend the checking of that directory on all X.Y and not just 1.5. + * Fixed policy references in several init script related tags, made the + init.d not conffile check a warning since Policy allows otherwise and we + can't check reliably, extended the rc.d file check on rc(\d|S).d and + excluded sysvinit and file-rc from the check. All this closes: #118824. + + -- Josip Rodin <jrodin@jagor.srce.hr> Mon, 11 Nov 2002 11:52:47 +0100 + +lintian (1.21.3) unstable; urgency=high + + * Do _not_ close STDERR before running dpkg-source in unpack-srcpkg-l2. + The logname stuff has been fixed ages ago so there shouldn't be any + remotely valid reason to do this. This should explain bugs like #159474 + and #162813 to the submitters, but I'll have to wait and see, since + I still can't reproduce it myself. + * Fixed the cruft check not to check the diff file just once, not for + every damn subdirectory of the source, d'oh. + * Backed out the --remove-lab move to postrm, lintian doesn't exist there + any more, silly, closes: #166309. + + -- Josip Rodin <jrodin@jagor.srce.hr> Sun, 27 Oct 2002 12:48:57 +0100 + +lintian (1.21.2) unstable; urgency=low + + * Changed the default path for ksh to /bin/ksh, as per the change + in the pdksh package, closes: #131484. + Maybe /usr/bin/ksh should still be allowed, but it seems inconsistent + to allow several paths like that... perhaps the same should be done + for zsh? Although, I suppose there are less zsh scripts out there + compared to ksh. + * Added $link to the usr-doc-symlink-to-foreign-package error message, + hopefully properly closes: #116309 (untested). + * Eradicated the remaining Packaging Manual references, from + Chris Tillman's patch in #116488. Also removed FSSTND references. + * Fixed typo in description-is-dh_make-template, closes: #145802. + * Replaced /usr/share/doc with /usr/doc in checks/copyright-file.desc, + thanks Matej, closes: #157423. + * Set binary mode to be able to grok UTF-8 with Perl 5.8 when reading + override files, thanks to Colin in #158119. Maybe this is all wrong, + but it shouldn't hurt anyway. :) + * Added Colin's patch check manual pages for correctness with lexprog, + along with the appropriate versioned dependency on man-db, closes: #52524. + * Cleaned up some typos in copyrights. + * Added *sh -n checking for syntax errors in shell scripts, closes: #42348. + * Moved script checks from control-files to the second part of scripts, + and also noticed and fixed a bug -- if a script e.g. called killall and + had a bashism on the same line, it would escape undetected. + * Check the .diff.gz file (if it exists) for config.(cache|status) that + includes no added and a number of removed lines and don't print the + configure-generated-file-in-source error for those files, closes: #122855. + The diff output analysis isn't perfect, but it oughta work. + * Clarified the virtual-package-depends-without-real-package-depends + warning with an additional paragraph, closes: #164813. + * Updated the testset/check_info.pl to work, similarly to lintian-info. + * Updated the testsets (this verified my s/elsif/if/g bug fix in + checks/scripts mentioned above). + * Updated %known_essential as per my sid available file. + * Updated %known_virtual_packages as per Policy's virtual packages list. + + -- Josip Rodin <jrodin@jagor.srce.hr> Thu, 17 Oct 2002 13:57:00 +0200 + +lintian (1.21.1) unstable; urgency=low + + * Removed FHS transition stuff from lintian's own maintainer scripts. + Lintian is now Lintian-clean. :o) + * Moved the purge stuff from the old prerm to postrm, and made the + (possibly redundant; to-do) question more forgiving. + * Added a doc-base file and run install-docs, closes: #129509. + * Removed spurious no-manpage exception for binaries that end in + numbers, closes: #118479. + * Fixed lintian-info's broken $ENV{LINTIAN_ROOT} use. + * Fixed --setup-lab to ignore already-existing packages, thanks to + Chris Tillman, closes #83593. Let's hope it all works out :o) + * Updated the list of allowed distributions, closes: #150466. + * Removed the leading ./ from filenames in %linked_against_libvga which + actually makes it work, thanks to Matej Vela, closes: #157317. + * Warn against all uncompressed changelogs, thanks again to Matej Vela, + closes: #157318. + * Nuked the code that checked that for every /usr/share/doc/foo -> ... + symlink there exists an equivalent /usr/doc/foo -> ... symlink; + seems to be a leftover from the FHS transition days, thanks yet again + to Matej Vela for the patch, closes: #161716. + + -- Josip Rodin <jrodin@jagor.srce.hr> Mon, 7 Oct 2002 22:18:20 +0200 + +lintian (1.21) unstable; urgency=low + + * New maintainer. + * Applied the ever so appropriately named ``unfuck'' patch to the lab + code. It includes but is not limited to: + + code to read the pool from Bas Zoetekouw + + other changes to support new style distributions from myself + + fixes for the breakage induced by Shaleh's blitheful insertion of + "use strict" everywhere + + an array of assorted fixes from Colin Watson, myself and perhaps + others which I've accidentally forgotten. + The lab code is now officially not entirely broken. Yay! :) + There's still work to be done, but this still closes: #157369, #157942. + + -- Josip Rodin <jrodin@jagor.srce.hr> Wed, 25 Sep 2002 19:18:57 +0200 + +lintian (1.20.19) unstable; urgency=high + + * revert the frontend to using require as use is a compile time only option + which was causing the environment variables to not be read. + Closes: #160819 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Fri, 13 Sep 2002 17:55:54 -0700 + +lintian (1.20.18) unstable; urgency=low + + * "I release once a year whether I need to or not" release + * updated debhelper command list, closes: #119094 + * applied lab patch from Joy, et. al., closes: #157942 + * added python version 1.5, 2.{1,2,3} to checks/scripts, closes: #114164 + * applied Colin Watson's patch for needs=dwww handling in menu files, + closes: 115486 + * renamed autoconf-generated-file-in-source to + configure-generated-file-in-source, closes: #115744 + * updated php checks in checks/scripts, closes: #116386 + * yet another checks/script update. This time we allow for unusual + interpreters when the file is not in a bin/ directory, closes: #116584 + * updated policy revision, closes: 118694 + * applied Colin Watson's patch for a bug in deplib which made A | B => A, + closes: #122742 + * applied Chris Tillman's patch to clean up policy references, + closes: #123585 + * applied Kevin Ryde <user42@zip.com.au>'s patch to better check for emacs + local variables in changelogs and updated the error message as well, + closes: #129581, #138216 + * accept *-proposed-updates in distribution field, closes: #139288 + * removed check for postrm removing usr doc symlink and inverted the + postinst check to now make sure the package does NOT set the symlink. + Closes: #154005 + * removed global override file, it was getting ancient + * converted all uses of 'require' to use statements + * more use strict cleanups + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Fri, 13 Sep 2002 09:49:24 -0700 + +lintian (1.20.17) unstable; urgency=high + + * Colin patches: + fixed typo in man page causing incorrect formatting, closes: #114118 + duplicate relations check is a lot more intelligent, closes: #119048 + * urgency set to high to reflect the fact that the relations check is + reporting many packages violating policy when in fact they are following + it correctly. This is especially true for the new python policy. + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Sun, 25 Nov 2001 18:15:04 -0800 + +lintian (1.20.16) unstable; urgency=low + + * the "next day bug" release + * give an error if a package declares a relation on the same package twice, + i.e. Depends: libc6, libc6 (<< 2.0). Closes: #27442. + * objdump-info collection script now handles UPX binaries (closes: #113497) + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Tue, 25 Sep 2001 15:40:30 -0700 + +lintian (1.20.15) unstable; urgency=low + + * the "collecting unemployment and have time to code" release + * no longer use syscall to exit from pipeline handler, now uses POSIX::_exit + Closes: #112205. + * Accept Joy's NMU patch (he applied it as 1.20.14.1). + Closes: #110991, #109244. + * Warn if the copyright file contains dh-perl-make boilerplate as suggested + by James Troup. In the process debmake-templates-in-copyright became + helper-templates-in-copyright. Closes: #110337. + * Oops, used the same argument name (-s) twice. Reverted back to -s meaning + "source". Updated manpage and source to reflect this. Closes: #109631. + * added a warning when hardlinks are used. Closes: #103893, #97518. + I am closing #97518 here as well which asked that I warn about hard links + that link to files in another directory. Since I warn about hardlinks + existing adding a separate check for where they link seems silly. + * applied Edward Betts patch to detect .cvsignore and CVS/. Closes: #74684. + * applied Daniel Schepler's patch for Build-Depends v. Build-Depends-Indep. + Closes: #92472. + * applied Edward Betts patch for detecting a misspelling in common-licenses. + * added 'debain' to list of spelling errors. Closes: #112083. + * applied Steve Kowalik's patch that adds out-of-date-standards-version. + This will be defined as the policy shipped with the last stable release. + Closes: #112043. + * Made doc-base-references-usr-doc inform which file is the culprit. + Closes: #111020. + * Applied Steve M. Robbins' patch for improved handling of ldconfig checks + in maintainer scripts. Closes: #110465, #113285. + * do not complain about static binaries if they are called "foo.static". + Closes: #98288. + * testset/runtests now calls dpkg-buildpackage with a '-d' so build-depends + are not checked. + * oops I left 'debian' in the spelling check list. + * backed out Gergely Nagy's suggestion for checking for 'Author(s)'. That + is just overly pedantic and lame. Reopens: #107815, tagged wontfix. + * checks/etcfiles now complains about ANY file found in /etc that is not a + conffile. The finer grain checks have been removed. Closes: #103940. + Added a new testset 'etcfiles' to go along with the test. + * debconf check now looks for the 'seen' flag and gives an error if the + package does not have a versioned dependency on debconf 0.5.00. + Closes: #113164. + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Mon, 24 Sep 2001 12:20:00 -0700 + +lintian (1.20.14.1) unstable; urgency=low + + * Another non-maintainer upload blessed by the maintainer, to clean up + after the last such NMU. :) + * Fixed spurious postinst-has-useless-call-to-ldconfig warnings, patch + from Colin Watson, closes: #109721. Also fixed the silly error in + shared-libs which broke shlib-missing-in-control-file. + * Fixed checking for /var/lib/games, patch from Andrew Suffield, amended + by me not to warn for the files but just that dir, closes: #109970. + * Have debian-changelog-file-contains-user-emacs-settings checked only + at the start of the line (wonder if Emacs allows indentation in there?), + closes: #109971. + * Force LANG=C because of a bug in debiandoc-sgml, closes: #110891. + + -- Josip Rodin <jrodin@jagor.srce.hr> Sat, 1 Sep 2001 21:01:30 +0200 + +lintian (1.20.14) unstable; urgency=low + + * Non-maintainer upload blessed by the maintainer. Kudos to Colin Watson + and Steve Kowalik for helping in the preparation of this upload. + * Skip shared objects which aren't in %ldso_dir in some shlib checks, + as per changes in Policy 3.5.5, finally closes: #42399, #41613. + * Fixed Policy section in package-contains-upstream-install-documentation, + closes: #94267. + * Added Adrian Bunk's patch for pike/pike7 stuff, along with pike7 stuff + in checks/scripts.desc so it's consistent, closes: #94902. + * Added an error for leaving files generated by autoconf in the source + package, patch from Colin Watson, closes: #107679, #94316. + This pulled in renaming checks/debian-cruft* to cruft*, logically. + * Added checks/infofiles* for everything related to info files, moved + parts of checks/menus* in it and added compression related errors, + closes: #95785. + * Added Brendan O'Dea's patch for checking Perl module directories, + and for not checking the source for each matching file in a !$is_python + package, closes: #96350. + * Removed lc() from checks on whether a debconf field value is valid, + closes: #106324. + * Improved binary-or-shlib-defines-rpath description, closes: #94901. + * Fixed the references to /usr/doc in the manual page using the patch + from Stephen Stafford, closes: #103177. + * Added debconf's "config" among %maintainer_scripts in + checks/control-files, closes: #108123. + * Added "Debian/GNU Linux" among the corrections in checks/spelling, + closes: #35761. It required some other modifications but oh well. + * Added a new warning, doc-base-file-references-usr-doc, closes: #46582. + This required adding collection/doc-base-files* and using that in + checks/menus*. + * Added a new error, debian-changelog-file-contains-user-emacs-settings, + closes: #84750. This required using collection/changelog-file in + checks/changelog-file (doh! :). + * Complains on manual pages located in /usr/(share|X11R6)/man instead of + man* subdirs, closes: #93056. + * Added php4 as a valid interpreter, closes: #94534. + * Fixed a little bug in checks/spelling.desc, it lacked a comma in its + Needs-Info field. + * Added a warning when there's common-licenses and not + /usr/share/common-licenses/ in the copyright file, closes: #99886. + * Added a warning when there's "Upstream Author(s)" in the copyright file, + closes: #107815. + * Removed -v from command(1) invocation check, patch from Colin Watson, + closes: #96227. + * Mention the language in select-with-translated-default-field and + partially-translated-question, patch from Colin Watson, closes: #95795. + Also, fixed some thinkos in the code for the latter warning. + * No longer barfs on debhelper-generated safe ldconfig calls, patch from + Paul Martin, closes: #82479. + * Added the recent Policy versions up to 3.5.6 to standards-version, + and moved the threshold for ancient versions up to 3.2.0 because that + version was released a bit more than one year ago, closes: #104766. + * Added a new error, package-depends-on-an-x-font-package. The pattern + is ^xfont.*, that ought to work fine (xfntil2 et al will go undetected, + but that's obsolete). + * Colin tweaked lib/text_utils.pl to display indented and empty stuff in + Info: tags properly. + + -- Josip Rodin <jrodin@jagor.srce.hr> Sat, 18 Aug 2001 18:46:34 +0200 + +lintian (1.20.13) unstable; urgency=low + + * debhelper check for lacks #DEBHELPER# token now checks if -n was passed + to the dh_ script. Thanks Chip for pointing this out. (closes: #92624) + * list of debhelper programs that want to write to maintainer scripts updated + * now check for Build-Depends on essential or build-essential packages + (closes: #92372) + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Thu, 5 Apr 2001 16:00:10 -0700 + +lintian (1.20.12) unstable; urgency=low + + * 'farewell to Fabrizio Polacco' release + * checks/debhelper's dh-make-template check did not include the $type in + its output. + * removed spurious debug message from zero-byte-file check in checks/files + * lintian no longer runs its regression test when it builds (closes: #92192) + * unpack-src-l2 now ensures that we have sufficient permissions to later + remove the package (closes: #92224) + * bashism check now looks for bash style arrays, thanks Torsten Landschoff. + also added to testset. + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Mon, 2 Apr 2001 12:30:20 -0700 + +lintian (1.20.11) unstable; urgency=low + + * 'where is my mind release' + * added science to list of known sections, Closes: #91798 + * cleanup override handling, was using chop instead of chomp + * checks/binaries checks a binary for profiling symbols now, Closes: #91837 + * removed false report of prerm failing to remove a doc link when there is + no doc dir, just a symlink to another package. + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Mon, 26 Mar 2001 11:22:22 -0800 + +lintian (1.20.10) unstable; urgency=low + + * 'I think I remember perl' release + * checks/menu-format would die if the last line of a menu had a line + continuation character. Seems the function was not getting called with + all 5 arguments. + * added a list of exempt paths for static binaries, currently only /boot + is listed. + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Mon, 19 Mar 2001 14:14:41 -0800 + +lintian (1.20.9) unstable; urgency=low + + * 'rule monger' release + * checks/debhelper: make regex case insensitive, Closes: #89070 + * checks/debhelper: modify search logic so it does not report false positives + when both Build-Depends and Build-Depends-Indep are defined, Closes: #89069 + * Fix the description for package-contains-upstream-install-documentation, + Closes: #89257 + * dh_testversion is deprecated, patch applied. Closes: #89624 + * lintian now detects that the deb/dsc/changes file it was told to parse is + zero bytes and skips it. + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Fri, 9 Mar 2001 14:16:24 -0800 + +lintian (1.20.8) unstable; urgency=low + + * 'wearing my "fuck redhat" shirt and loving it' release + * checks/menus, the check for whether or not the doc symlink is removed + fails for people who do not use the -f option to rm (or any other options) + thanks Oliver Elphick, Closes: #88182 + * checks/scripts handles 'wish' better (I hope), Closes: #88333 + * checks/debconf, the registry check is ignore if the package being tested + is debconf itself. Closes: #88526 + * frontend handles files that are referenced but do not exist better + * this is looking like one of the last releases for a while + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Wed, 7 Mar 2001 10:42:03 -0800 + +lintian (1.20.7) unstable; urgency=low + + * 'test everything' release + * updated architecture list -- hppa, ia64, mips, mipsel, s390, sh added + * added 'Enhances' to list of known fields + * removed libwraster2 from list of obsolete packages, Closes: #85584 + * Colin Watson's debconf checks added, still need a testset though, + Closes: #85876, #84759 + * checks/menus now checks for proper use of install-info, + Closes: #25823, #30192 + need a testset for this too + * checks/files.desc now points to the FHS in /usr/share/doc/debian-policy + * applied Joey Hess' app-defaults patch. This allows app-defaults to be + conffiles as well as adding a check for app-defaults in old dirs. + Closes: #86707, #76811 + * lintian now knows more about 3.5.x's X policy in 12.8. Added check for + Xresources file but no conflicts on xbase (<< 3.3.2.3a-2). Closes: #63542 + * applied Joey Hess's perl patch. Now know that pm's in /usr/share have + no need for the +x bit. Closes: #86709 + * check for INSTALL in /usr/share/doc now knows about INSTALL\..+ (i.e. + INSTALL.gz) + * checks/standards-version has an error for packages which declare a source + relation (ie Build-Depends) but are not at least policy 3.1.x. + Closes: #86711 + * checks/fields now checks that the arch definition in source relations + follows policy. Closes: #86710 + * added wish8.3 to list of known interpreters in checks/scripts + * warning description cleanups, Closes: #87528 + * added more bashism checks -- '|&', '$[foo]', '${parm:len[:offset]}', + '${parm/pat[/str]}', '${parm//pat[/str]}' + Closes: #32113 (the suidregister stuff happened a release or three ago) + you guessed it, need a testset + * bashism check now tells you what it thinks the bashism was. + Closes: #81738 + * bashism checks now ignore here documents, Closes: #87527 + teset/maintainer-scripts now has a here document in a script and extended + bash triggers. + Also, various other bashism test cleanups and improvements. + * typo in scripts fixed, now I really do work on python2, thanks Jerome. + Closes: #87772 + * hmm, versioned-provides message was often wrong, made it better and it + reports the perceived relation, i.e. foo (= 4). + * removed the -w and strict from reporting/ scripts + * update-menus checks enhanced with knowledge about wm-menu-config. + * added 'asmodule' to list of known menu tags + * depends-on-essential-package-without-using-version now is only reported + for actual depends or pre-depends. + * interpreter checking handles arbitrary whitespace now + * fixed scripts check for ocaml, now know about ocamlrun. + * unusual-interpreter messages were being caused by not prepending '.' to + the interpreter name when checking %executables in checks/scripts. + * still more fun with ++ )-: menus is now even more paranoid with + quotemeta(). + * ensure $setuid, $setgid is set in checks/files, thanks to the luxman + package for triggering the perl oops. + * collections/scripts handles files that only contain '#!'. + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Wed, 14 Feb 2001 08:55:09 -0800 + +lintian (1.20.6) unstable; urgency=low + + * 'people who depend on side effects should be flogged' release + * lintian had code which set a variable to undef, then used it. Without + -w and use strict, this silently became a zero, but now it causes errors. + So, since it obviously was meant to be zero, I set it to zero instead of + undef. Closes: #85326 + Fun part was this only happened when run on more than one version of a + single package i.e. lintian foo_1.changes foo_2.changes. + * checks/scripts updated to deal with python2.x and there being two versions + of python. Closes: #85441 + while doing this, collections/scripts was updated to support the use of + /usr/bin/env. I probably added bugs here )-: + added a scripts testset, very early still. + * my modification to checks/menus to support /usr/share/doc/package -> other + had a problem with special chars. Now calls quotemeta(). Annoying because + I have a ++ package name but it did not trigger this particular case. + So, I added a package to foo++ which links to foo++. Closes: #85530 + * added a TODO to the private dir. + * left off a closes in the big perl closings 2 revisions ago, Closes: #80192 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Sat, 10 Feb 2001 14:28:19 -0800 + +lintian (1.20.5) unstable; urgency=low + + * 'people who name a lib libfoo-X.X.so should be shot' release + * checks/shared-libs handles libraries of the form 'libfoo-X.X.so' now + * the virtual package check I added in the last release failed to check + the field it was testing, so errors were reported on fields other than + Depends. Ooops. The description also should have referred to packaging + not policy. Closes: #85225 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Wed, 7 Feb 2001 13:55:10 -0800 + +lintian (1.20.4) unstable; urgency=low + + * 'why would you ever do THAT?' release + * lintian-info sets $ENV{'LINTIAN_ROOT'} if it is not set + * added a check to checks/files for packages which ship the upstream INSTALL + document. This is almost always useless for users of a package. + testset/binary now includes such a file + Closes: #81970 + * checks/menus -- the walk over package contents now has logic to run file + tests on files, link tests on links, etc. + * checks/menus -- if there is a /usr/share/doc/$pkg symlink, assume it links + to a package it depends on and do not warn about setting the usr/doc + symlink. There is code in checks/copyright-file that makes sure policy is + followed with regards to what is actually linked against. Closes: #48048 + * checks/fields is now less strict about Section: non-US handling + * added debconf files to list of known control files in checks/control-files + Closes: #46863 + * perl mistakes are no longer checked for. Closes: #47076, #75889 + * FHS 2.1 cleanups, Closes: #75878 + * lintian will not complain if you symlink your doc directory to an essential + package and leave off the depends, because since it is essential you must + not depend on it. Closes: #48296 + * lintian now gives and error when a package declares a depends on an + essential package without using a versioned depends. Closes: #33250 + * extra-license-file is not given if the file is just a symlink. + Closes: #35224 + * checks/fields: now complain if a package declares a depends on a virtual + package without first depending on a real packages as an alternative. + Required adding a known_virtual_packages list to checks/common_data.pl. + Also removed redundant info/registered-virtual-packages file. + Closes: #70673 + * added a library (mostly empty right now) and non-us testset + * runtests now runs the tests in alphabetical order + * lintian's --version info is being updated automagically again + * moved some hashes around in checks/ to common_data.pl + * checks/changelog-file reorganized so it knows the size of the files. Now + it can check that the changelog is sufficiently large to require + compressing. Also modified the desc file to reflect this. Closes: #84400 + * --info now outputs all info. Silly bug in how I used split and defined. + Closes: #82970 + * added a testset/check_info.pl script. It verifies that every lintian + check referenced in a desc also has an info section. runtests now runs + this test as well. + * suidregister warning is now an error. + * checks/menus: fixed the if link case pattern match -- one more perl error + down, 3 billion hidden ones to go. + * Following items thanks to Colin Watson + * updated checks/standards-version so it does not give perl errors when it + encounters a newer standards version than it knows about. Closes: #84083 + * updated references to policy for policy 3.5.0. Closes: #84088, #83969 + * Added a warning for packages containing a link to undocumented(7) as + suggested on debian-policy list. Also includes a testset (manpages) + addition. + Closes: #83188 + * At the moment checks/copyright-file just tests for a slash in the link; + I've changed it here to test for an initial / or ../, and then after that + check it strips off everything from the first slash on, so that tests on + the package name work correctly when people link to subdirectories of + other /usr/share/doc directories. Closes: #84066 + * It was unpacking to level 2 even though I had Unpack-Level: 1 and no + associated collection scripts. Of course, it wanted override files from + /usr/share/lintian/overrides/$pkg. Fair enough - except that if I said + --no-override it wanted the override file information anyway, and still + unpacked to level 2. No obeys non-overrides. Closes: #84722 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Tue, 30 Jan 2001 14:26:04 -0800 + +lintian (1.20.3) unstable; urgency=low + + * 'Does the pain ever end?' release + * oops, lintian cannot create a static lab due to an error check too + early in the code. While fixing this I also added a static lab check in + testset/runtests. Closes: #83411 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Wed, 24 Jan 2001 14:36:35 -0800 + +lintian (1.20.2) unstable; urgency=low + + * 'Where or where did my changes go' release + * fixed --help option to not show escaped chars + * changed regression test to also do a run with --info on + * seems lintian always used the lintian-info script from the path, changed + to look in LINTIAN_ROOT if passed + * perl problems cleaned up, Closes: #82970 + * removed randomization of output strings when referring to policy documents, + not only is this silly but it makes regression tests impossible + * moved manual_refs.pl list of policy manuals to an external file. This will + allow automated updating when releases occur. It also removes the perl + warnings (-: + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Sat, 20 Jan 2001 12:21:30 -0800 + +lintian (1.20.1) unstable; urgency=low + + * the change hurts release + * every perl script now calls use strict and passes -w to perl + The long road of bug tracking because of this has begun. Thanks Joey H. + * testset/filenames now has a lengthy-symlink bug to show how that code works + * typo in checks/control-files in a bashism check, the correct POSIX call + is 'read foo' however the code was checking for the existence of whitespace + before the call, not the existence of the variable to read into due to a + mixed up regex. Thanks Adam Heath for pointing this out. Closes: #81453 + * checks/control-files, the check for whether '.' takes more than one + argument did not take into account things like 'and'. It does now. + Closes: #81737 + * fixed interpreter check code to hand a space between the #! and the + interpreter (really), also allows bash,ksh,ash as valid sh shells. Also + knows to look for an ELF header and stop parsing the script. Thanks + Colin Watson. Closes: #80348, #82541 + * testet/binary-1 added. This is a small C program to test lintian's + handling of binary files. See the changelog in this directory for info + * fixed message for 'manpage-has-wrong-extension', Closes: #82452 + * 'N: Unknown interpreter' message now only printed once per script, + Closes: #81644 + * added equivalent file-directly-in-usr-share-doc messages (et al.), + Closes: #82654 + * added new message: suidregister-used-in-maintainer-script. this replaces + the old messages suidregister-used-in-maintainer-script-other-than-postinst + and suidunregister-not-called-in-postrm due to suidregister being phased + out of Debian. Closes: #81868 + * binary-has-unneeded-section upgraded from info to warning + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Wed, 3 Jan 2001 13:04:20 -0800 + +lintian (1.11.15) unstable; urgency=low + + * Hack Hack + * checks/perl disabled until it can be improved + * fixed typo in checks/description: s/%type/$type/ + * fixed mental typo in checks/*: $foo == 'string' is not the same as + $foo eq 'string', Closes: #80813 + * Added Colin Watson's patches, Closes: #80373, #80376, #80377 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Fri, 22 Dec 2000 16:02:58 -0800 + +lintian (1.11.14) unstable; urgency=low + + * more fun with interpreter checking, seems a space is allowed between bang + and the interp path. So, fixed the regex (again). Also store the name + of the interpreter in $interp and use that rather than $is_sh, this will + allow for other interpreter checks later. Closes: #80348 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Fri, 22 Dec 2000 15:51:10 -0800 + +lintian (1.11.13) unstable; urgency=low + + * (Joy) fixed a typo in binaries.desc + * (Joy) checks/debhelper now passes $type with the lintian message + * (Joy) libs/text_utils.pl, reporting/html_reports fix maintainer name + * checks/control-files now checks if the postrm calls update-alternatives + with the --remove option, this is considered harmful, Closes: #80255 + checks/control-files.desc explains the problem in detail + * fixed checks/menus setting of is_sh, $foo = split() sets foo to the number + of items, not the first item -- duh (-: How did this make it thru testing? + added a maintainer-scripts testset to help catch this in the future + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Thu, 21 Dec 2000 10:34:43 -0800 + +lintian (1.11.12) unstable; urgency=low + + * new command line option: --show-overrides, displays tags even if + they have been overridden, marked 'O: .....' + * shared-libs.desc text changed to give more info when a shared library is + present, but the SONAME is not set or set improperly, Closes: #78277 + * removed references to libtool-workarounds.txt (it never died ....), + Closes: #78420 + * my reformat of the code in checks/menu-format changed the regex from + m/^#/ to m/^ #/, I changed it back (kind of). The test is now + m/^\s*\#/ just in case a space snuck in. Also modified the code so it + does a if (m//) { next;} rather than if (! m//) { ........ }. + Closes: #78532 + * checks/menus now checks which interpreter the maint script uses and varies + its checks accordingly -- works for sh and perl currently, Closes: #78880 + Updated menus.desc while I was at it. + * fixed typo in scripts.desc, pike error message should have referred to pike + not to make, Closes: #79744 + * killed use of \b in bashism checks, now uses (^|\s+), Closes: #80122 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Thu, 21 Dec 2000 10:20:30 -0800 + +lintian (1.11.11) unstable; urgency=low + + * Finally, lintian's version number is automagically set + * lintian.sgml updated to document per package overrides info. + * the /usr/share/lintian/overrides/<package> actually works now (-: + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Thu, 16 Nov 2000 14:19:22 -0800 + +lintian (1.11.10) unstable; urgency=low + + * Dammit, + sign in package name problems again + added a regression test for a foo++ package. Closes: #77216 + * removed the libtool text in the rpath message, libtool no longer sets rpath + the upstream finally saw the light. + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Thu, 16 Nov 2000 09:02:50 -0800 + +lintian (1.11.9) unstable; urgency=low + + * Moved the override files from /usr/share/doc/<package> to + /usr/share/lintian/overrides/<package> + also added a check to catch override files in the old directory + * Removed calls to defined in checks/perl, Closes: #76339 + * copyright-file-is-gpl renamed to copyright-file-contains-full-gpl-license + * magicfilter should be in /usr/sbin, not /usr/bin, Closes: #76686 + * modified testset/empty. dpkg-genchanges now requires a Maintainer + field. + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Thu, 9 Nov 2000 12:23:43 -0800 + +lintian (1.11.8) unstable; urgency=low + + * Fixed Description too long message, Closes: #75570 + * removed description-may-be-too-long + * Fixed description of package-uses-debhelper-but-lacks-build-depends, + I left the 's' off of lacks + * zero-byte-file-in-usr-doc changed to zero-byte-file-in-doc-directory + * added documentation for zero-byte-file-in-doc-directory, Closes: #75744 + * renamed package-source-contains-debian/files to + debian-files-list-in-source, Closes: #75746 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Fri, 27 Oct 2000 16:09:09 -0700 + +lintian (1.11.7) unstable; urgency=low + + * Fixed lintian's handling of autouse, Closes: #75115 + Thanks Stefan Hornburg for helping me with this + * Fixed silly manpage filename parsing bug, Closes: #75246 + * Removed now out of date libtool-workarounds.txt, Closes: #75324 + * unpack-srcpkg-l2 used a silly regex to parse dpkg-source output, this + has been fixed to simply read some string of non-whitespace, Closes: #58943 + * checks/spelling should now work with high ascii chars, Closes: #70974 + * added debiandoc-sgml Build-Depends-Indep, Closes: #74751 + * added checks/debian-cruft. Checks for the debian/files file, Closes: #38710 + * fixed checks/debhelper -- it actually works now. + * added tixwish to list of known interpreters, Closes: #47775 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Tue, 24 Oct 2000 15:29:14 -0700 + +lintian (1.11.6) unstable; urgency=low + + * Fixed manpages check to handle oddly named files, now uses + File::Basename + * fixed debhelper check so it will detect a need for Build-Depends even if + a script which needs to modify maintainer scripts is not used. + * lintian-info now outputs info for source messages too, Closes: #51811 + * used a different syntax in checks/perl rather than set $2, Closes: #54710 + * if dh_testversion is called by a package, ensure that the package uses a + versioned Build-Depends + * Maintainer Upload (with Darren's blessing) + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Mon, 9 Oct 2000 13:23:51 -0700 + +lintian (1.11.5) unstable; urgency=low + + * /etc/pam.d are now checked to ensure they are conffiles, Closes: #50293 + * fixed the typo in checks/copyright-file, Closes: #53626 + * fixed description, lintian is at policy 3.2.0.0, Closes: #55083 + * fixed checks/standards-version, knows about policy version 3.2.0, + Closes: #68655 + * check for zero byte length files in /usr/share/doc/<package>, + Closes: #59508 + * added a fail function to frontends/lintian, Closes: #69259 + * checks/files.desc now refers to FHS 2.1, Closes: #69422 + * ran ispell on checks/*.desc files, Closes: #69423 + * added checks for suidregister and suidunregister, Closes: #29444 + * lintian now checks the length of the short description, Closes: #33411 + * lintian now verifies that /etc/cron.{d,daily,monthly,weekly} files are + marked as conffiles, Closes: #46332 + * Description: is checked to make sure it is not a dh_make template, + Closes: #59141 + * fixed URL in README, Closes: #59733 + * added magicfilter to list of interpreters, Closes: #60361 + * added check if debhelper is used by a package, it is included in + Build-Depends, Closes: #70438 + * for menu files, if the menu needs=foo and foo is the package name, assume + this is ok. Also, sections that match the package name are also assumed + to be ok. This affects mostly window managers. Closes: #64674 + * Checks whether the icon used in a menu file is in xpm format. + * added {g,k,p,y}forth as valid interpreters, Closes: #51778 + * More checks/ dir cleanups + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Wed, 27 Sep 2000 15:31:38 -0700 + +lintian (1.11.4) unstable; urgency=low + + * Brought lintian.sgml up to date + * cleaned up the layout of frontend/lintian + * Dep::implies did not parse Depend: foo | bar | baz correctly, this is why + things like wmakerconf gave bogus errors. This is duct taped, real fix + some day. + * Closes: #43706 + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Wed, 6 Sep 2000 19:13:20 -0700 + +lintian (1.11.3) unstable; urgency=low + + * Added 'Format' field to dsc file checks + New dpkg versions seem to write a Format version to dsc files, lintian + flagged them as an unknown field. + * lintian failed lintian (-: + changed copyright to point at /usr/share/common-licenses/GPL + + -- Sean 'Shaleh' Perry <shaleh@debian.org> Fri, 1 Sep 2000 15:35:03 -0700 + +lintian (1.11.2) unstable; urgency=low + + * Official maintainer change + * Package specified overrides + * Fixed perl dep check bug + * Added perl modules: (#46118) (#51457) (thanks ardo) + * Added interpreter ocaml (#50933) + * Cleaned up some overrides -hopefully not yours (#48703, #48769) + * SUID allowed for packages named *-suid + * Applied Frank Belew's patches (#39832 #48794) + * Added checks for /usr/[share/]doc/copyrights references in copyright + file + * Added change in directory checks based on changes by the Great X + Reorganization + * Added check for text version of changelog no matter what + * Added check for /var/lib/games + * Added checks for Build-* source-depends fields + * Updated standards-version to accept 3.1.0 and made anything 2.x ancient + + -- Darren Benham <gecko@debian.org> Fri, 24 Sep 1999 09:59:35 -0700 + +lintian (1.10) unstable; urgency=low + + * Richard's changes: + * Darren's changes: + + changed rm of /usr/doc link to look for rm and rm -f (closes: #46740) + + changed numerous overrides to account for tar (closes: #46903) + + added doc-base override (closes: #45999) + + changed of URI:: functions liburi-perl (closes: #45770) + + added recognition of HTML::SimpleParse (closes: #45081) + + added "hints" to the known menu tags (closes: #47248) + + changed example checks to include ./ (closes: #44897) + + moved data/dumper to perl|perl5 (closes: #42036) + + changed perl|perl5 check to allow perl5|perl (ver) (closes: #44425) + + caused lintian to skip many file related checks for the files in + directories /hurd and /server (closes: #36680) + + -- Darren Benham <gecko@debian.org> Fri, 24 Sep 1999 09:59:35 -0700 + +lintian (1.9.1) unstable; urgency=low + + * Richard's changes: + * Darren's changes: + + Added a check for /etc/pam.conf. Precursor for reserved + /etc/* files + + Added a check of postinst and prerm for /usr/doc symlink manipulation + + Added the /usr/doc symlink to lintian's scripts + + -- Darren Benham <gecko@debian.org> Mon, 13 Sep 1999 22:06:07 -0700 + +lintian (1.8.2) unstable; urgency=low + + * Richard's changes: + * Darren's changes: + + Added /var/lib to the FHS check + + Fix for the new tar + + Make libraster2, not libraster1 obsolete + + -- Darren Benham <gecko@debian.org> Thu, 5 Aug 1999 00:13:28 -0700 + +lintian (1.7) unstable; urgency=low + + * Richard's changes: + * Darren's changes: + + This time.. added Help as a valid root level menu option + + Changed FSSTND directory Infos to Josip's suggested wording. + + Removed /var/lib from the FSSTND check + + Fixed non-US/section check + + Added text about bashism checks performed to N: tag + + Fixed bad-link-to-undocumented.man.page N: tag + + -- Darren Benham <gecko@debian.org> Thu, 29 Jul 1999 15:54:37 -0700 + +lintian (1.6) unstable; urgency=low + + * Richard's changes: + * Darren's changes: + + Added some bashism checks from Shalah + + Added /usr/share/doc as valid directory + + Added /usr/share/man as valid directory + + Set warning for FSSTND directories + + Added Help and App/Databases to valid menu entries + + Added patch from Steve Haslam to recognise /etc/menu-methods and + check for update-menus calls + + Added overrides for dh_make requested by C. Small + + Added patch from Roderick Schertler to skip comments/blank lines at + top of menu files. + + Changed the relative shared-library check to look for either + rela.text or rel.text, not just rel.text. This is needed for PowerPC + and other non-i386 architectures. + + Added ruby as a valid interpreter + + Added notice when unrecognized file format is found that it might be + due to a missing package: binutils-multiarch + + -- Darren Benham <gecko@debian.org> Sun, 11 Jul 1999 17:15:40 -0700 + +lintian (1.5) unstable; urgency=low + + * Richard's changes: + * Darren's changes: + + Changed file error message to indicate it's file's + fault(closes: #37259) + + Changed perl depends to perl | perl5 to cover both + Also added perl-5.004 and perl-5.005 since they are valid perls + (closes: #41041, closes: #39835) + + Remove a undefine causing spurious unknown-tag error (close: #40699) + + Ancient-ized standards-version 2.4.0 and 2.4.1 + + Added policy 2.5.1 to the accepted number for standards-version + + Check for use of /etc/nntpserver. Only major change in policy v2.5.1 + + Added perl-5.005 and perl-5.004 as valid interpreters (close: #39834) + + -- Darren Benham <gecko@debian.org> Mon, 5 Jul 1999 11:46:53 -0700 + +lintian (1.4-1) unstable; urgency=low + + * Richard's changes: + + When reporting errors in .changes files, report filenames the way + they were listed, rather than as absolute pathnames. + + Don't exit with code 1 for errors that were overridden. + This fixes bug#37353, reported by Wichert Akkerman. + + Correctly handle escaped characters in menu items (bug pointed + out by Raphael Hertzog). + + bltwish scripts should now depend on blt, not blt8.0. + This fixes bug#38092, reported by Gordon Russell. + * Darren's changes: + + override requested by christian kurz for ppp. Several of the + files/dirs have non-standard permissions. + + override requested by adam kleine for gtk-engines-gtkstep. Contains + libraries not meant to be linked. + + override requested by Manoj Srivastava for latex2html. Fixes + bug#38098. + + hugs added to the list of interpreters. Fixes bug#37668 reported by + Antti-Juhani Kaijanaho. + + -- Darren Benham <gecko@debian.org> Tue, 11 May 1999 13:24:27 -0700 + +lintian (1.3-1) unstable; urgency=low + + * Richard's changes: + + For install-docs, accept --remove as well as -r. Fixes bug#35664, + reported by James Van Zandt. + + In explanatory text for prerm-does-not-call-installdocs, give a + correct example for the prerm (not the postinst). Fixes bug#35665, + reported by James Van Zandt. + + List gmp2 as obsolete package (replaced by libgmp2). + + Don't generate depends-on-obsolete-package for -dev and -dbg packages + that depend on their library. + * Darren's changes: + + override requested by julian gilbey for menu. Menu can't call + update-menus in postrm since it won't exist then. + + added requested override for vtwm update menus. Fixes bug#36457 + reported by Branden Robinson + + override requested by Oliver Elphick for postgresql-pl. Has shared + libraries not loaded by ld.so + + -- Darren Benham <gecko@debian.org> Mon, 05 Apr 1999 16:00:05 -0800 + +lintian (1.2-1) unstable; urgency=low + + * Darren's changes: + + added the -1 to denote purely packaging changes + + added fvwmother to menu needs= check (fixes bug#35057) + * Richard's changes: + + Added new tag package-installs-packlist. + This closes wishlist bug#33827, reported by Joey Hess. + + Mark all versions of libgtk1.1 as obsolete for + depends-on-obsolete-package tag. + + For tag arch-indep-package-contains-binary-or-object, + tighten up regexp that detects "ELF". This fixes bug#35237, + reported by Mark Brown. + + -- Darren Benham <gecko@debian.org> Mon, 29 Mar 1999 16:31:05 -0800 + +lintian (1.1) unstable; urgency=low + + * Zapped compiled-with-bad-libc check. + * Corrected spelling error in spelling check (it flagged "interchangeable" + as a bad word; this should have been "interchangable"). This fixes + bug#33252, reported by Santiago Vila. + * Silenced non-standard-dir-in-usr check about /usr/$arch-linuxlibc1/, + which will go away at some point and is not worth moving now. + I'll file a policy proposal for it at some point. This fixes + bug#33114, reported by Marcus Brinkmann, and bug#33374, reported + by James Troup + * Silenced non-standard-dir-in-var check about /var/www/, since it's + Debian policy to use it. + + -- Richard Braakman <dark@xs4all.nl> Thu, 25 Feb 1999 14:43:27 +0100 + +lintian (1.0) unstable; urgency=low + + * New tags: + E: non-standard-toplevel-dir + W: non-standard-dir-in-usr + W: non-standard-dir-in-var + W: file-in-unusual-dir + E: dir-or-file-in-mnt + E: binary-in-etc + E: use-of-compat-symlink + E: subdir-in-bin + These cover much of the FSSTND and FHS. + + * No longer emit executable-in-usr-doc for scripts. It's just too + controversial. I've added an info-level tag script-in-usr-doc + for people who are interested. This closes bug#28560, by + Stephane Bortzmeyer. + + * Only emit compiled-with-bad-libc if the register_frame symbols + are UNdefined. This closes bug#31867, submitted by Michael Meskes. + + * Don't emit compiled-with-bad-libc for binaries linked to + libgnustep_base.so.0, which also defines __register_frame_info. + This closes bug#31004, submitted by Matthias Klose. + + * Changed a lot of "error:" messages to "internal error:", to make + clear that they are errors in Lintian's execution, not in the package + being checked. This closes bug#31013, submitted by James Troup. + + * (frontend/lintian) Select STDOUT again after closing OUTPUT_PIPE. + This fixes bug#31574, reported by Julian Gilbey. Thanks for the patch! + + * (checks/copyright-file) Lintian was confused by "libident(=0.22-1)", + i.e. without separating whitespace. Fixed. This closes bug#31821, + reported by Paul Slootman. + + * Man page fix: mention that lintian can be run on .changes files. + * Depcheck pages: fixed version comparison bug. + + -- Richard Braakman <dark@xs4all.nl> Wed, 27 Jan 1999 14:43:15 +0100 + +lintian (0.9.5) unstable; urgency=low + + * Do not abort when run as root; print a warning instead. + --allow-root still overrides the warning. + + * Only generate non-standard-file-permissions-for-etc-init.d-script + tag for regular files. Reported by Martin Schulze. + + * Corrected libtool-workaround sample configure.in snippet: + Look for *-*-linux-gnu, not *-pc-linux-gnu. + Fixes bug#30756, reported by James Troup. + + * Made lintian abort with an error message when objdump can't handle + a binary's file format. Also made lintian Suggest binutils-multiarch. + + * New error tag: arch-dependent-file-in-usr-share + This closes bug#30742, reported by Matthias Klose. + + * Added gnuplot as a known interpreter. Suggestion by Rafael Laboissiere. + + -- Richard Braakman <dark@xs4all.nl> Sun, 20 Dec 1998 18:05:46 +0100 + +lintian (0.9.4) unstable; urgency=low + + * New features (summary): + - 112 new spelling corrections. + - Minor efficiency improvements. + - Checks __register_frame_info problems. + - Updated to policy 2.5.0 + + * (lib/util.pl) Exit with code 2 when failing, like the manpage says. + * (checks/files) Print octal permissions in + bad-permissions-for-etc-cron.d-script, not decimal. + * (checks/files) + Ignore .xpm extensions too when hunting for extra license files. + * (checks/conffiles, checks/conffiles.desc) + Renamed -may-not-be- tags to -must-not-be-, for clarity. + + * Replaced most bash scripts with perl scripts, for faster startup times + and fewer subprocesses. This speeds up lintian by some 30% on my machine. + * (collection/objdump-info) + Add -T flag, to collect dynamic symbols table too. + * (checks/binaries) + Look for __register_frame_info and __unregister_frame_info. + New tag: compiled-with-bad-libc + + * (checks/*.desc) Use new (2.5.0) section numbering for policy references. + * (checks/changelog-file) Accept changelog.html.gz files. + * (checks/standards-version) newer-standards-version is warning, not error. + This fixes bug#29366, reported by Julian Gilbey <jdg@maths.qmw.ac.uk>. + * (checks/standards-version) Updated to standards-version 2.5.0. + + * (info/overrides) New overrides. + Fixes bug#29449 reported by Marcus Brinkmann (libc5 overrides) + + * (checks/standards-version.desc) Remove the link to the upgrading-checklist, + which I can no longer find and which is probably not maintained anymore. + + * (checks/control-files) Fix check for mknod-in-maintainer script: + pipes are made with p, not -p. + + * (debian/control) In the package description, mention which policy + version Lintian checks. + + -- Richard Braakman <dark@xs4all.nl> Mon, 23 Nov 1998 14:46:32 +0100 + +lintian (0.9.3) unstable; urgency=low + + * (checks/binaries) Warn if a package with ELF binaries does not have + a Depends line. New tag: missing-depends-line. + (Suggested by Charles Briscoe-Smith) + + * (checks/menus) Don't warn about /usr/lib/menu/README. + (Noted by joost witteveen) + + * (checks/binaries.desc, checks/binaries, checks/shared-libs.desc) + Renamed "shlib-without-dependency-information" to + "shared-lib-without-dependency-information", to avoid confusion with + the shlibs control file. (Suggested by Branden Robinson) + Also moved the tag info from shared-libs.desc to binaries.desc, where + it belongs. + + * (checks/shared-libs) + Suppress "shlib-with-executable-bit" error if a library has an + INTERP header. This catches the libraries (such as libc or libm) + that print a little banner when executed. + + * (checks/fields) + Report maintainer addresses that have no dots in the domain part. + (Suggestion by James Troup) + * Teach fields check about non-us. + + * (info/perl-modules) Updated modules info. + * (lib/deplib.pl) Fixed handling of versioned dependencies. + + * (checks/files.desc) In executable-in-usr-doc tag, suggest examples + directory as a place for executables. + (Suggestion by Stephane Bortzmeyer) + + * (checks/fields, checks/fields.desc) + New tag: depends-on-obsolete-package, to flag dependencies on + old libraries. + + -- Richard Braakman <dark@xs4all.nl> Tue, 27 Oct 1998 12:59:43 +0100 + +lintian (0.9.2) unstable; urgency=low + + * Look for more misspellings: + dependant -> dependent, dependancy -> dependency, + definate -> definite, definately -> definitely. + * (checks/scripts) Correctly deal with the terminating newline when + parsing dependency lines. Fixed bug#27694, reported by Rob Tillotson. + * (checks/menu-format) Added Apps/Technical and Apps/Hamradio as sections. + * (checks/copyright-file) + Don't report copyright-file-is-gpl unless it is GPL version 2. + This fixes bug#27793, reported by Milan Zamazal. + * (checks/menus) Add newline after bad-menu-file-name tag! + * (lib/manual_refs.pl) Update urls to manual sections, so that + they refer to www.debian.org. Regenerate index of devref sections. + + -- Richard Braakman <dark@xs4all.nl> Thu, 15 Oct 1998 14:06:26 +0200 + +lintian (0.9.1) unstable; urgency=low + + * Added overrides for imap daemons being sgid mail. + * Updated info/perl-modules from new Contents file. + * (lib/read_pkglist.pl) Don't fail on 0-size package lists. + This fixes bug#27121, reported by Adam P. Harris. + + -- Richard Braakman <dark@xs4all.nl> Wed, 30 Sep 1998 18:16:14 +0200 + +lintian (0.9) unstable; urgency=low + + * (frontend/lintian, reporting/html_reports, checks/*, collection/*) + Make rigorous distinction between source and binary packages. + Pass "source" or "binary" as second argument to check scripts. + Report source package tags with "pkg source:" instead of just "pkg:". + Binary package tags stay the same. + (The check scripts always report "pkg type:", and the frontend strips + the type again if it's "binary"). + This involves several changes in the web-report scripts as well. + + * Add command-line options for the things that could only be set via + environment variables or the configuration file. (--cfg, --root, + --lab, --dist, --arch). + + * Really rename obsolete-ldconfig-call-in-postinst to + postinst-has-useless-call-to-ldconfig. + * Really rename changelog-file-missing-in-native-debian-package to + changelog-file-missing-in-native-package + + * (checks/scripts) bltwish now lives in blt8.0, not blt4.2. + + -- Richard Braakman <dark@xs4all.nl> Sun, 20 Sep 1998 16:34:38 +0200 + +lintian (0.8.3) unstable; urgency=low + + * (checks/menu-format) Added "sort" as a known tag; it's documented in + the menu package. This fixes bug#26373, reported by Marcelo E. Magallon. + + * (checks/scripts, checks/scripts.desc) Added /usr/bin/js as a known + interpreter (in ngs-js), as suggested by Brian Bassett. + + * (checks/shared-libs) Brian Bassett reported inaccuracies in detection + of "ldconfig" calls in maintainer scripts. Fixed. + + * (checks/menu-format) Skip checks on "section" if the "needs" tag had an + unknown value. This deals with bug#26375, reported by Marcelo E. Magallon. + + * (checks/manpages) Fixed: check for links to "undocumented" manpage + should not react to link destinations like "ilu-undocumented". + + * changelog-file-missing-in-native-debian-package shortened to + changelog-file-missing-in-native-package + * wrong-name-for-changelog-file-of-native-debian-package shortened to + wrong-name-for-changelog-of-native-package. + + -- Richard Braakman <dark@xs4all.nl> Thu, 10 Sep 1998 12:55:45 +0200 + +lintian (0.8.2) unstable; urgency=low + + * Ignore common programming-language extensions when looking for + extra-license-files. (Fixes bug#26252, reported by Manoj Srivastava, + who had a file vm-license.el). + + * Use -z flag for tar, rather than piping through gzip -dc explicitly. + This allows tar to detect and pass on errors reported by gzip. + + -- Richard Braakman <dark@xs4all.nl> Tue, 1 Sep 1998 11:57:53 +0200 + +lintian (0.8.1) unstable; urgency=low + + * Added /usr/bin/guile and /usr/bin/scsh as known interpreters. + (This fixes bug#26093, reported by Karl M. Hegbloom <karlheg@debian.org>) + + * Renamed tags: + postinst-contains-obsolete-call-to-updatemenus + to postinst-has-useless-call-to-update-menus + postrm-contains-obsolete-call-to-updatemenus + to postrm-has-useless-call-to-update-menus + postinst-contains-obsolete-call-to-installdocs + to postinst-has-useless-call-to-install-docs + postrm-contains-obsolete-call-to-installdocs + to postrm-has-useless-call-to-install-docs + obsolete-ldconfig-call-in-postinst + to postinst-has-useless-call-to-ldconfig + The first two are also downgraded from error to warning. + (This fixes bug#26118, reported by Wichert Akkerman <wakkerma@debian.org>) + + * Renamed tag use-of-killall-in-maintainer-script to killall-is-dangerous. + + * More overrides. + + -- Richard Braakman <dark@xs4all.nl> Thu, 27 Aug 1998 18:56:03 +0200 + +lintian (0.8) unstable; urgency=low + + * (checks/perl) Don't emit warnings for perl scripts in /usr/doc. + This closed bug#25728, reported by Manoj Srivastava. + + * (info/overrides) Change the non-standard-*-perm overrides to match + the new format of those tags. (was changed in 0.7.5) + + * (checks/control-files) + "possibly-insecure-handling-of-tmp-files-in-maintainer-script" now knows + about mkdir. + New tag: W: possible-bashism-in-maintainer-script (Suggestion by Joey Hess) + + * (testset/filenames-2) Don't rely on installer's umask for testset. + + * (collection/menu-files, collection/menu-files.desc, + checks/menu-format, checks/menu-format.desc) + New check for correct syntax in "menu" files, written by Joey Hess. + New tags: + E: old-format-menu-file + E: whitespace-after-continuation-character + E: bad-test-in-menu-item + E: unparsable-menu-item + W: incorrect-package-test + W: duplicated-tag-in-menu-item + W: menu-item-missing-important-tag + W: menu-item-contains-unknown-tag + W: menu-item-uses-icon-none + W: menu-item-needs-tag-has-unknown-value + E: menu-item-adds-to-root-menu + W: menu-item-uses-apps-games-section + W: menu-item-creates-new-section + E: menu-item-creates-new-root-section + The check follows current practice on two sections: + Window-managers -> WindowManagers + Screen/Screen-saver -> Screen/Save + The menu docs will be updated to match. + + * (lib/pipeline.pl) Bugfix: Use syscall SYS_exit when exiting from + children that failed to exec, because the perl function exit() would + run END blocks and such. + + * (checks/standards-version) By now, 2.2.0.0 is more than one year old; + mark it as 'ancient'. + + * (reporting/html_reports) Bugfix: Apply quotehtml() to the tag text + *before* adding links to bug pages. + + * Many small adjustments to checks: + * (checks/scripts) Be less picky about package names when checking + dependencies. (The check was confused by the package blt4.2) + * (checks/description) Ignore case when looking for synopsis lines + that start with the package name. + * (checks/files) Don't give executable-in-usr-doc error for executables + in /usr/doc/examples/, since that directory does contain examples, and + it's already flagged by old-style-example-dir. + * (checks/control-files) Don't warn about references to "/tmp" unless the + full filename is "/tmp" or "/var/tmp". + * (checks/binaries) Split tag "binary-not-linked-against-libc" into + "program" and "library" tags. + * (checks/files, checks/scripts) New tag "executable-manpage", which + replaces "executable-not-elf-or-script" for manpages. + * (checks/files) Shortened file-directly-in-usr-share-not-in-a-sub-directory + and file-directly-in-usr-doc-not-in-a-sub-directory to just + file-directly-in-usr-share and file-directly-in-usr-doc. + * (checks/md5sums) Added md5sums-control-file-is-empty tag, to avoid + spewing many file-missing-in-md5sums errors in that case. + * (checks/scripts) Suppress interpreter-not-absolute tag if the + filename ends in .in and the interpreter looks like #!@PERL@ + * (checks/control-files) Suppress mknod-in-maintainer-script tag if + mknod was called with -p. + * (checks/shared-libs) Emit no-shlibs-control-file tag for each shared lib + found, rather than just once. + * (checks/files) Emit old-style-example-dir only for directories, not for + every file. + * (checks/perl) perl-script-needs-dependency + Bugfix: realize that a package does not need to depend on itself. + * (checks/description) possible-unindented-list-in-extended-description: + Only emit this tag if there are at least two things that look like + list items. + * (checks/scripts) List /usr/bin/env as a known interpreter. + * (checks/binaries) unstripped-binary-or-object: + Instead of an exception for /lib/modules specifically, suppress this + tag for all .o files. + * (checks/control-files) Bugfix: check for == bashism works now. + * (checks/files) Introduced new tag lengthy-symlink, which supersedes + and corrects the relative-symlink-enters-same-toplevel-directory tag. + + * (man/lintian.1) Document the check and collection scripts added to + lintian in the last few months. (oops) + + * (collection/perlmods, checks/perl) + Refined scanner so that fewer spurious perl-script-uses-unknown-module + tags are emitted. + Perl tags are no longer 'Experimental'. + + -- Richard Braakman <dark@xs4all.nl> Mon, 24 Aug 1998 18:01:40 +0200 + +lintian (0.7.5) unstable; urgency=low + + * (checks/perl) Exchanged order of arguments in + perl-script-needs-dependency tag, for clarity. + * (info/perl-modules) Added some module dependencies. + + * (info/overrides) More overrides. + + * (checks/shared-libs, checks/shared-libs.desc) + Fixed: erroneous shlib-missing-in-control-file if a shared library + had more than one symlink to it. + * Renamed obsolete-shlib-entry-in-control-file to + unused-shlib-entry-in-control-file. + + * (checks/copyright-file) Changed size-requirement for copyright-file-is-gpl + tag from 17000 to 12000 bytes, because some packages (casio) extracted + only the "TERMS AND CONDITIONS" part, which is shorter. + + * (reporting/html_reports) Count packages as well as tags, in tag index. + + * (checks/control-files, checks/control-files.desc) + New tag: W: mknod-in-maintainer-script + + * (checks/files, checks/files.desc) + New tags: + W: package-installs-into-etc-rc.boot (rc.boot is obsolete) + W: extra-license-file (for COPYING files, etc) + + * (checks/shared-libs, frontend/lintian) + Get rid of dependency on File::Basename; use a simple regexp instead. + + -- Richard Braakman <dark@xs4all.nl> Fri, 14 Aug 1998 17:33:37 +0200 + +lintian (0.7.4) unstable; urgency=low + + * (collection/perlmods) + Fixed: perl script scanner is now POD-aware. + This should cut down on the number of spurious warnings. + + * (doc/CREDITS) + Install credits file. My apologies if I have forgotten anyone. + There were far more people than I would have guessed -- Thanks to all! :-) + + * (checks/perl) + Skip 'autouse' keyword when parsing use and require directives. + + * (frontend/lintian) + When processing a .changes file, turn md5sum checks OFF by default. + A new -m flag is provided to turn them back on. + The .dsc file is still always checked. + + * (frontend/lintian) + Saner interrupt handling. Lintian now dies immediately if ^C is hit, + and does remove the temporary lab (if any). This is mostly a side + effect of avoiding system() (in favour of the new functions in + lib/pipeline.pl), but did involve some tinkering about with perl's + signal handling. Thanks to Ruud de Rooij and Graydon Hoare for + their help. This closes bug#24975, reported by Yann Dirson. + + * (checks/copyright) + Fixed copyright-is-gpl tag so that it actually works. + + * (lib/dep.pl, checks/perl, checks/perl.desc, info/perl-modules) + Much smarter perl module analysis. Lintian now has a list of + perl modules and the packages that provide them (in info/perl-modules), + and a dependency processor (in lib/dep.pl), and uses these to + check "use" and "require" lines in perl scripts. + New tags: + W: perl-script-needs-dependency (Experimental) + W: perl-script-uses-unknown-module (Experimental) + Tag "script-needs-full-perl" has been dropped. + + -- Richard Braakman <dark@xs4all.nl> Mon, 10 Aug 1998 19:02:53 +0200 + +lintian (0.7.3) unstable; urgency=low + + * (frontend/lintian) + Fixed: --display-infotags option wasn't working. + + * (reporting/harness, reporting/html_reports) + Have the archive check generate infotags but not display them on the + web pages. This way they are still available in the log file. + + * (checks/fields, checks/fields.desc) + New tag: W: doc-package-depends-on-main-package + + * (checks/menus, checks/menus.desc) + New tag: E: bad-menu-file-name + This is emitted for packages that install "/usr/lib/menu/menu", which + overlaps with the menu package. (I've seen it happen a couple of times). + + * (checks/binaries, checks/binaries.desc) + Allow unstripped-binary-or-object for any package with "debug" in its + name. (This is in addition to the exception already made for "-dbg"). + Allow binary-not-linked-against-libc for libc itself :-) + + * (lib/pipeline.pl) + New helper functions for starting pipelines from perl scripts, without + involving the shell. This makes it easier to pass filenames literally, + and often saves a shell invocation. + * (collection/diffstat, frontend/lintian, unpack/*) + Use the new pipeline functions. + + * (checks/description, checks/description.desc) + New tag: + E: description-is-debmake-template + + * (reporting/html_reports) + Quote < and > in displayed tags (such as occurs in email addresses). + This fixes the maintainer-name-missing tag output. + + * (checks/copyright-file, checks/copyright-file.desc) + New tag: + E: copyright-file-is-gpl + Generated for copyright files that contain the complete GPL text. + + -- Richard Braakman <dark@xs4all.nl> Thu, 6 Aug 1998 23:39:18 +0200 + +lintian (0.7.2) unstable; urgency=low + + * (unpack/unpack-srcpkg-l1, unpack/unpack-binpkg-l1, unpack/unpack-binpkg-l2) + Speedup: replaced system("mkdir ...") with mkdir() calls. + * (unpack/unpack-binpkg-l1) + Speedup: avoid extracting control info twice. + More speedups are possible here. + * (unpack/unpack-binpkg-l1, unpack/unpack-binpkg-l2) + Speedup: avoid using dpkg-deb to unpack debs; construct a pipeline + with ar, gzip, and tar instead. It turns out to be far faster. + * Together, these changes made for a speed increase of some 30% + when checking packages that have to be unpacked. + + -- Richard Braakman <dark@xs4all.nl> Wed, 5 Aug 1998 19:18:44 +0200 + +lintian (0.7.1) unstable; urgency=low + + * (reporting/html_reports) + Fixed: Print bug number with tags that were reported as bugs. + + * (checks/scripts, checks/scripts.desc) + Added /usr/bin/expect (provided by expect) as known interpreter. + + * (unpack/unpack-srcpkg-l2) + Fixed: chmod -R the right directory when unpacking a source package. + + * (collection/diffstat, collection/diffstat.desc) + New collection script that runs diffstat on the Debian diff. + * (debian/control) + Depend on diffstat, version >= 1.27-1 so that it can parse Debian diffs. + * (checks/debdiff, checks/debdiff.desc) + New check that look at the filenames included in the Debian diff. + New tag: + W: patch-failure-file-in-diff foo.rej + + * (checks/control-files, checks/control-files.desc) + New tag: + W: dpkg-print-architecture-in-maintainer-script + (dpkg --print-installation-architecture should be used there) + + -- Richard Braakman <dark@xs4all.nl> Wed, 5 Aug 1998 14:58:02 +0200 + +lintian (0.7) unstable; urgency=low + + * (reporting/html_reports) + - Rewritten (more modular). + - Create a page for each different tag, which gives the lintian-info + for that tag and then lists all occurrences of that tag, with each + tag line also being a link back to the page for the package in + which it occurs. + This closes bug#21390, reported by Gregory S. Stark <gsstark@mit.edu>. + - Instead of listing the lintian-info text with every different tag + in every package, make every tag a link to the page for that tag + (which will have the lintian-info for it at the top). + This should make the reports a lot smaller, and also more readable. + - Make a "Sorted by tag types" page and link to it from the index page. + * (doc/TODO) Entries [L3] and [L4] now complete. + + * (checks/spelling, checks/spelling.desc) + Check README.Debian file as well, since we now collect it anyway + for the readme-debian-is-debmake-template tag. + New tag: + E: spelling-error-in-readme-debian + + * (checks/fields) Added hurd-i386 to the list of known architectures, at + the request of Marcus Brinkmann <brinkmds@rz.ruhr-uni-bochum.de>. + + * (checks/scripts, checks/scripts.desc) + Added trs to the list of known interpreters, as /usr/bin/trs provided + by konwert. Suggestion by Yann Dirson <dirson@debian.org>. This + closed bug#24998. + + * (checks/files) + - Fixed: tags dir-in-user-local and file-in-usr-local did not print + the filename involved. + - Fixed: some tags were erroneously output as "setuid-gid-binary" + even though only one of suid or sgid was set. + + * (checks/fields) + - Fixed: change a few cases of "maintainer-address-malformed" + to "maintainer-name-missing". + + -- Richard Braakman <dark@xs4all.nl> Tue, 4 Aug 1998 19:45:47 +0200 + +lintian (0.6.1) unstable; urgency=low + + * Inserted GPL boilerplate text in every file whose format allowed comments. + + * (doc/lintian.sgml) Use new <url> tag. + + * (info/overrides) New override for the file in kbd-data with the strange + name. Having lintian handle that file correctly would be too expensive. + This "closes" bug#25107. + + * (checks/control-files, checks/control-files.desc) + New tag: use-of-killall-in-maintainer-script (experimental) + Added at the recommendation of Santiago Vila <sanvila@unex.es>. + This closes bug#22206. + + * (depcheck/deppages.pl, reporting/html_reports) + Added arm and hurd-i386 to the list of architectures to check. + + * (doc/libtool-rpath-workaround.txt, checks/binaries.desc) + Revamped doc file at Rob Browning's suggestion, and renamed it to + doc/libtool-workarounds.txt because it describes both -rpath and -lc + workarounds. Updated the info for the tags binary-not-linked-against-libc + and binary-or-shlib-defines-rpath to refer to the new file. + + * (doc/desc-files) Moved from private/DESC. + Briefly describes the meanings of the fields used in lintian's .desc files. + + * (doc/TODO) + Updated and restructured version of what used to be in private/TODO, + various bugreports and mailed suggestions. This will become the + central place for potential improvements to lintian. I hope that + having it in /usr/doc/lintian will inspire some people to help. + + -- Richard Braakman <dark@xs4all.nl> Mon, 3 Aug 1998 16:07:54 +0200 + +lintian (0.6.0) unstable; urgency=low + + * (checks/shared-libs) + Corrected bug that made lintian complain about shared modules without + version info (thus ending in ".so") with a "non-dev-pkg-with-shlib-symlink" + warning. + + * (info/overrides) Added overrides: + libtricks is like fakeroot; nothing is compiled with it. + libtricks: no-shlibs-control-file + slrnpull has been split off from slrn, and shares some of its overrides. + slrnpull: non-standard-dir-perm var/spool/slrnpull/ 2755 + This fixes bug#24668, reported by Joey Hess. + + * (collection/perlmods) + Collector script that greps perl scripts for use and require directives. + * (checks/perl, checks/perl.desc) + New check script that checks perl "use" and "require" directives. + New tags: + E: script-needs-perl-version (Experimental) + W: script-needs-full-perl (Experimental) + I: cannot-parse-perl-directive + + * (frontend/lintian) + New flag --print-version that prints the unadorned version number. + * (reporting/config, reporting/html_reports) + Instead of requiring $LINTIAN_VERSION in the config file, query the + lintian frontend for the version number. + + -- Richard Braakman <dark@xs4all.nl> Sun, 19 Jul 1998 16:41:39 +0200 + +lintian (0.5.2) unstable; urgency=low + + * (reporting/html_reports) + Lintian web pages now use dists/unstable/main in the path for + "Getting Lintian", rather than hamm/hamm, where it doesn't exist anymore. + (Pointed out by Ruud de Rooij) + + * (checks/scripts) + Add /usr/sbin/install-fvwmgenmenu as a known interpreter. + This fixes bug#23783, reported by Joost Kooij. + + * (checks/binaries, checks/changelog-file, checks/manpages) + [speedup] Don't skip blank lines in file-info file, since there + shouldn't be any. + + * (checks/manpages.desc) + - Added note to manpage-in-wrong-directory info that only + sections 1 through 9 should be used. Refer to policy 5.1. + I had a rewrite of the manpages check in the works, but I deferred + it to a later lintian version. + + * (info/overrides) + New override from Joel Klecker: binutils: no-shlibs-control-file. + Added overrides supplied by Joey Hess, in bugreport #24425. + + * (checks/changelog-file) + Corrected regexp used for changelog-file-not-compressed; + This really fixes bug#23683, reported by Joey Hess. + + * (checks/files) + New warning: package-installs-perllocal-pod, inspired by + Manoj Srivasta's recent bugreports about such files. + + * (checks/fields.desc) + No longer experimental: + E: alternates-not-allowed + E: versioned-provides + E: bad-version-in-relation + + -- Richard Braakman <dark@xs4all.nl> Sun, 12 Jul 1998 22:04:04 +0200 + +lintian (0.5.1) unstable; urgency=low + + * Added overrides supplied by Ray Dassen. + + * (frontend/lintian-info) + Made lintian-info aware of X (experimental) tags. (oops) + * (lib/read_taginfo.pl) + Add a paragraph to the info output for experimental tags that explains + what experimental status means. + + * Added test package "relationships" to test weird dependency lines. + + * (frontend/lintian) + Instead of specifying /usr/bin/lintian-info, use just lintian-info + and let the path search find the script. + + -- Richard Braakman <dark@xs4all.nl> Tue, 7 Jul 1998 16:27:56 +0200 + +lintian (0.5.0) unstable; urgency=low + + * (checks/menus) The menu package doesn't need to check for the + existence of update-menus :-) + + * (testset/runtests) A harness for running regression tests on Lintian. + * (testset/*) A collection of broken packages on which to test Lintian. + Currently, only an empty package is provided for testing. + * (debian/rules) Run the tests in the build target. + * (checks/*.desc) Added "Tested: empty" to tags that are tested for + with the "empty" testpackage. + + * (collection/file-info) Use a better parser for the index file, so + that weird filenames are handled correctly. This fixes bug#24079. + * (collection/md5sums) Adapt index-file parser from file-info collector, + this saves a "find" operation on the unpacked tree. + * New test package filenames-1, which contains various evil filenames. + + * (checks/shared-libs, checks/menus, checks/manpages, checks/files, + checks/control-files) + Handle filenames that contain spaces correctly. + + * (frontend/lintian, reporting/config) + Update version number. This fixes bug #23555, reported by Yann Dirson. + These will have to be kept in sync manually, because the lintian + source package has to be directly usable by the lintian web page + generator. + + * (checks/changelog-file) + Allow the upstream changelog to be a symbolic link. + As a side-effect, allow it for the Debian changelog too. + This handles bug#23300, reported by Manoj Srivastava. + + * (checks/changelog-file, checks/changelog-file.desc) + The wrong-name tags are now warnings, not errors, because the + relevant section of policy uses "should usually". + This fixes bug#23757, reported by Gregory S. Stark. + + * (checks/changelog-file) + Limited the changelog-file-not-compressed tag to only complain + about changelog and changelog.Debian, because policy 5.8 does not + mention other changelogs. (These would fall under section 5.3, I guess.) + This fixes bug#23683, reported by Joey Hess. + + -- Richard Braakman <dark@xs4all.nl> Sat, 4 Jul 1998 15:33:31 +0200 + +lintian (0.4.8) unstable; urgency=low + + * (checks/fields) + New error tag: "multiline-field" flags control fields that span multiple + lines when they shouldn't. (According to the Packaging manual, + "Except where otherwise stated only a single line of data is allowed"). + + * (checks/fields) + Check dependency relationship fields as well. + New tags: + E: alternates-not-allowed + (generated for use of | in Provides, Conflicts, and Replaces fields) + E: versioned-provides + (generated for Provides fields that use a versioned package name) + W: obsolete-relation-form + (generated for use of < and > in versioned relationships) + W: bad-version-in-relation + (generated if the version number in a versioned relation + is not syntactically correct) + E: bad-relation + (generated if lintian cannot parse an element of a dependency line) + W: package-relation-with-self + + * (checks/fields) + Bugfix to maintainer-not-full-name tag, it works now. + Added maintainer-address-looks-weird warning for obscure cases. + I doubt anyone will ever see it. + + * (checks/fields) + Added new-essential-package warning, to highlight such packages. + + * (checks/fields.desc) Descriptions of new tags. + + -- Richard Braakman <dark@xs4all.nl> Sun, 7 Jun 1998 17:58:19 +0200 + +lintian (0.4.7) unstable; urgency=low + + * Removed Christian's name wherever it appeared as a contact address. + + * (depcheck/buglist) Entered newly reported bug numbers for dependency + problems. + + * (checks/menus) Distinguish between install-docs and install-docs -r. + (closes #23049). + + * (checks/files) Added new tag backup-file-in-package. This warns + about emacs-style backup files that got installed in a package. + + * (frontend/lintian) Allow I: tags to be overridden just like any other. + + * (frontend/lintian) Add support for "Experimental" tags. These are + handled like other tags, but an "Experimental: yes" flag in the tag + description tells lintian to output them with "X:" rather than "E:" + or "W:" or "I:". This is used for new tags that might still misbehave. + + * (doc/lintian.sgml) Add a paragraph to explain the new tag type. + "The displayed message is one of types listed above, but has been + flagged as `experimental' by the Lintian maintainers. This means + that the code that generates this message is not as well tested as + the rest of Lintian, and might still give surprising results. Feel + free to ignore Experimental messages that do not seem to make sense, + though of course bug reports are always welcomed." + + -- Richard Braakman <dark@xs4all.nl> Sat, 6 Jun 1998 20:30:36 +0200 + +lintian (0.4.6) unstable; urgency=low + + * (debian/control) + Lintian now depends on perl, since perl-base is not enough. It already + uses Text::Wrap, which is only in perl, and soon it will also use + Getopt::Long. + + * (reporting/html_reports) + Report all dates in GMT, in rfc822 format. + + * (debian/rules) + In clean target, delete byte-compiled python files (*.pyc) as well. + + * (depcheck/dependencies.py) + Check "Cannot satisfy without packages in base" before checking + "Cannot satisfy with required packages", because a dependency will + be listed in only one category, and the former is more important + to flag. + + * (frontend/lintian) + Rewrote option handling to use Getopt::Long, thus allowing nifty + features like bundling of single-character options. Closes wishlist + bug#22566. + + -- Richard Braakman <dark@xs4all.nl> Fri, 29 May 1998 11:25:31 +0200 + +lintian (0.4.5) unstable; urgency=low + + * (depcheck/) New directory, containing scripts for generating reports + about broken dependency relationships in the main distribution. + These are not installed by the lintian deb, they are intended for + use by the lintian web pages, which use the source package directly. + * (reports/harness) Added hooks to call the depcheck scripts to generate + the depcheck page. + * (reports/html_reports) Add links from the lintian root page to the + depcheck page. + + * (checks/menus) A tag was still generating "existance" while its + description had been corrected to "existence"; the html report + generator complained about that. Fixed. + + * (unpack/list-binpkg) Bugfix in lintian --setup-lab. Instead of + looking for files in binary-$arch and binary-all, look only in + binary-$arch and follow the symlinks. + + * (lib/text_utils.pl) Changed "&maint;" name from Christian Schwarz + to Richard Braakman, and changed mail address to lintian-maint@debian.org. + + * (checks/standards-version) If checking a package with a Standards-Version + that is newer than the one lintian is written for, warn that lintian + should be upgraded. (closes: #22919). + * (checks/standards-version.dsc) + New tag: newer-standards-version + + * (checks/debian-readme) New check: at James Troup's suggestion, + scan for unmodified deb-make templates in README.Debian files. + New tags: + readme-debian-is-debmake-template + readme-debian-contains-debmake-template + * (checks/debian-readme.desc) Describe new tags. + * (collection/debian-readme) New collection script for README.Debian file. + * (man/lintian.1) Describe new check and collection script. + + * (doc/libtool-rpath-workaround.txt) Explain how to achieve the same + result without touching configure.in and rerunning autoconf, provided + certain conditions hold. + + * (lib/text_utils.pl, frontend/lintian-info, reporting/html_reports) + Do not split words that are longer than a line. This fixes the + "Poli cy" bug in the lintian HTML reports. + + * (checks/standards-version.desc) Corrected the URL to Christian's + policy upgrading checklist, which seems to have changed from + "upgrading.html" to "upgrading-checklist.html". + + * (info/override) Removed another *.pm warning, I missed it the last time. + + -- Richard Braakman <dark@xs4all.nl> Thu, 28 May 1998 15:51:37 +0200 + +lintian (0.4.4) unstable; urgency=low + + * (checks/scripts) Suppress script-not-executable warnings for files + in /usr/lib that match *.pm. These are perl modules, which often + have a #!/usr/bin/perl line at the top but are not intended to be + executed directly. + * (info/override) Removed now-suppressed warnings from the overrides file. + + * (info/override) Added more overrides. (closes #21028). + + * (checks/scripts) At Oliver Elphick's suggestion, do not emit + *-script-but-no-*-dep tags or csh-considered-harmful tags for + scripts that are not executable. (These already produce a + script-not-executable warning). + + * (checks/binaries) At Yann Dirson's suggestion, added a tag for + stripped binaries that still have the .comment and .note sections. + This tag is info-level, thus not normally displayed. + dh_strip and install -s have been patched to strip these sections, + but most of the distribution has not been recompiled with the patched + versions. + * (checks/binaries.desc) Described the new tag. + (closes #22495). + + * (man/lintian.1) Documented the options that were added in lintian 0.4.3. + + * (checks/fields) Produce informational tags no-section-field and + no-priority-field. These were removed in a previous version, because + nearly all packages do not pass -isp to dpkg-gencontrol when building + packages, but the new handling of info-level tags makes them useful again. + + -- Richard Braakman <dark@xs4all.nl> Sat, 16 May 1998 14:10:30 +0200 + +lintian (0.4.3) unstable; urgency=low + + * Christian added more overrides. + * debian/control: New maintainer. + * debian/copyright: Mention that lintian has no separate upstream source. + * debian/rules: Got rid of 'dirs' file. + * Moved manpages from doc/ to man/ in source package. + * debian/rules: Restyled :-) + * New overrides, read all about them in /usr/share/lintian/info/overrides. + (closes #22001) + * Corrected typo in frontend, added --allow-root option at Johnie Ingram's + suggestion to override lintian's refusal to run as root. (closes #22162). + * Ran ispell over .desc files, fixing lots of typos, including the + word "existance" which occurs in several tags. + * checks/files: At the advice of the python maintainer, added a warning + against files installed in /usr/lib/python1.5 that are not in the + site-packages subdirectory. (closes #22236) + * checks/fields: Reduced unknown-field-in-dsc and unknown-field-in-control + tags from "warning" to "info", because such fields can only be + introduced deliberately anyway. ("info" tags are not normally reported, + but can be queried when someone is interested.) (closes #20521) + * Made the above comment about info tags true, by adding a --display-info + option. + + -- Richard Braakman <dark@xs4all.nl> Mon, 4 May 1998 17:31:34 +0200 + +lintian (0.4.2) unstable; urgency=low + + * This release contains updates for Policy 2.4.1 + + * Fixed `changelog' check: + - don't report not-max-compression tag if changelog file is a symbolic + link (thanks to Santiago for noticing that! fixes:bug#20842) + + * Improved `description' check: + - recognize if extended description is `Missing' + (fixes:bug#21091) + + * Changed `files' check: + - symbolic links within /etc and /var have to be relative! + + * Fixed `scripts' check: + - package name is "blt4.2", not "btl4.2" :) + + * Updated `shared-libraries' check: + - check if postinst calls ldconfig if shared libraries are installed + in a directory controlled by ld.so + (fixes:bug#20414) + [2 new tags] + + * Changed `standards-version' check: + - added Standards-Version 2.4.1 + - only check first there digits of Standards-Version field + + * Changes to the `lintian' frontend: + - unused overrides are displayed per package + - display `Processing changes file...' + - use $TMPDIR environment variable for creation of the temporary lab + (fixes:bug#21092) + - clean up lab if C-C is pressed + + * Added more overrides + + -- Christian Schwarz <schwarz@debian.org> Wed, 15 Apr 1998 19:57:09 +0200 + +lintian (0.4.1) unstable; urgency=low + + * Fixed `changelog-file' check: + - don't treat "NEWS" files as changelog files + (thanks to Manoj for pointing this out! fixes:bug#20787) + + * internal: small changes to the reporting harness + + -- Christian Schwarz <schwarz@debian.org> Tue, 7 Apr 1998 21:42:51 +0200 + +lintian (0.4.0) unstable; urgency=low + + * Changes which make it possible to check the whole archive with Lintian + each day without having to check all packages all the time: + - Reworked creation and handling of info/{binary,source}-packages files: + - the list files contain a version number now, which allows checking + for old file formats + - each entry has a timestamp now + - don't remove $LAB/info/ directory on --setup-lab + - just process changed packages when doing --setup-lab + - added command line option: `-p X' makes lintian only process all + packages which are listed in file X + - changed meaning of command line option `-U': specifies info to + collect _in addition to_ the usual info (necessary to extract + the changelog files on master--see below) + + * Improved `binaries' check: + - objects and binaries in a *-dbg package may be unstripped + - libraries in lib/profile or lib/debug may not be stripped + (suggested by Fabrizio) + [1 new tag] + + * Added new `changelog' check + (thanks to Juan Cespedes for the idea! fixes:bug#19695) + + * Improved `control-files' check: + - improved RE that searches maintainer scripts for /tmp security bugs + + * Improved `description' check: + - fixed RE to check for description-starts-with-package-name + (thanks to Roderick Schertler) + + * Fixed `fields' check: + - internal: check for source pkg using "-l dsc" instead of "-e dsc" + + * Fixed `files' check: + - disabled possible-name-space-pollution tag since policy is not + defined yet + + * Improved `manpages' check: + - fixed silly typo in binary-without-manpage tag info + (thanks to Robert Edmonds for noticing that!) + - disabled tag binary-without-manpage for `versioned binaries' + (thanks to Dirk for the suggestion! fixes:bug#20186) + + * Fixed `menu' check: + - report maintainer-script-does-not-check... tag only once per package + and maintainer script + - recognize `$(which update-menus)' as valid check for the existence + of update-menus; same for install-docs + (thanks to Fabrizio for pointing this out!) + - recognize `command -v update-menus' as valid check for the existence + of update-menus; same for install-docs + (thanks to Adam P. Harris for pointing this out! fixes:bug#20759) + - fixed tag infos + (thanks to Adam P. Harris for the input! fixes:bug#19810) + + * Improved `scripts' check: + - added new interpreters: + nawk, pike, rexx, regina, burlap, wish8.0, bltwish + (fixes:bug#20223) + + * Improved `shared-libs' check: + - added check if shared libraries contain non-pic code + (thanks to Gregory S. Stark for the idea and the patch! + fixes:bug#19249) + [1 new tag] + + * Added `changelog' collector script + This makes it possible for Lintian to extract all changelog files + on master for use by Apt (fixes:bug#20546) + + * Incremented LAB_FORMAT version to 3 because of + incompatible changes in the objdump-info collector script + + * Internal: fixed bug in read_dpkg_control() utility function: empty + tags have not been handled correctly + + * Internal: html-reporting tool: don't chop of text after hash (#) + + * Added a lot new overrides and removed unused overrides + (fixes:bug#20017,bug#20082,bug#19562) + + -- Christian Schwarz <schwarz@debian.org> Mon, 6 Apr 1998 21:58:42 +0200 + +lintian (0.3.4) unstable; urgency=low + + * Bug fix release: + - check if lab in /tmp already exists (fixes security bug#19799) + Thanks to James Troup for noticing this and thanks to Joey Hess + for providing a patch! + + * Added one override entry + + -- Christian Schwarz <schwarz@debian.org> Tue, 17 Mar 1998 23:28:38 +0100 + +lintian (0.3.3) unstable; urgency=low + + * Bug fix release: + - `unknown-control-file du' message disappeared + - fixed `executable-in-usr-doc' to not display files in + /usr/doc/<pkg>/example + - fixed tag parameters for + bad-owner-for-doc-file + dir-or-file-in-opt + + * Added overrides + + -- Christian Schwarz <schwarz@debian.org> Mon, 16 Mar 1998 08:44:34 +0100 + +lintian (0.3.2) unstable; urgency=low + + * This is (intentionally) an `unstable' upload--we've decided to not + include the lintian package in `frozen' since it doesn't make sense to + maintain a `stable' and `unstable' version of a package in such an + early state. The maintainers should get Lintian from the `unstable' + distribution to check `frozen' uploads though. + + * Added `menus' check. This check checks for common mistakes WRT + /usr/lib/menu and /usr/share/doc-base files. + [16 new tags] + + * Fixed `shared-libs' check: + - removed `shared-library-uses-its-soname' check since this produced + way too many false alarms (thanks to David Engel for the input!) + + * Fixed `binaries' check: + - skip `unstripped-binary-or-object' check for kernel modules + (thanks to Michael Meskes for noticing that!) + - fixed pattern which parses the `file' command's output to be able + to handle files without info text correctly + (thanks to James R. Van Zandt for pointing this out!) + - mention in tag info that shared libs should be stripped with + `--strip-unneeded' options (thanks to Brian for pointing this out!) + + * Improved `manpages' check: + - check if manual pages are compressed with gzip -9 + (thanks to Holger Rusch for the idea!) + [2 new tags] + + * Improved `files' check: + - for files in /usr/doc: + - executables may only be in /usr/doc/<something>/examples + - files should be owned by root.root (thanks to Joey) + - files should not be directly placed into /usr/doc/ + (fixes:bug#19485) + - no files may be installed into /tmp and /var/tmp + - renamed file-directly-in-usr-share to + file-directly-in-usr-share-not-in-a-sub-directory + (thanks to Santiago) + - fix tag info for "symlink-should-be-absolute" + [3 new tags] + + * Improved `description' check: + - lists (starting with a dash or asterisk) have to be indented + (thanks to cpb4@ukc.ac.uk for the idea and the patch! + fixes:bug#19481) + [1 new tag] + + * Fixed `scripts' check: + - packages with python scripts might depend on python or python-base + (thanks to Gregor Hoffleit for pointing this out and to Richard for + the patch! fixes:bug#19162) + - remove wrong policy quotation for `script-not-executable' tag + + * Fixed `init.d' check: + - ignore update-rc.d calls in preinst and postinst scripts, if + "remove" option is specified (thanks to Roman Hodek and Herbert Xu + for pointing this out--this change also removes a lot of other false + alarms WRT update-rc.d calls) + + * Improved `control-files' check: + - scan maintainer scripts for references to /tmp or TMPFILE since this + might be insecure (thanks to Topi Miettinen for the help!) + [1 new tag] + + * Improved `copyright-file' to issue a special error message if a + symbolic link /usr/doc/foo refers to a directory outside of /usr/doc + (thanks to Darren for pointing this out!) + [1 new tag] + + * Fixed `fields' check: + - added architecture `arm' (thanks to Roman Hodek) + + * Fixed `lintian' frontend: + - run lintian scripts with LC_ALL=C + (thanks to Yann for pointing this out! fixes:bug#19166) + - changed handling of `#' comments: for comments in the overrides + file, the hash (#) has to be in the first column + - changed all tags which used `#' for comments + + * Fixed `lintian-info': + - multiple HTML tags haven't been converted into text format in all + cases + - preformatted text is now handled correctly + - merged with code that produced the HTML reports + - code much cleaner now + + * Improved Lintian's documentation: + - fixed libtool/rpath workaround file: don't wrap long line + (Thanks to Yann for pointing this out!) + - stress in docs that the "lintian-maint@debian.org" address should + be used to contact the lintian authors (thanks to Adrian Bridgett + for pointing this out!) + + * Added more overrides (fixes:bug#19163) + + -- Christian Schwarz <schwarz@debian.org> Sun, 15 Mar 1998 23:00:31 +0100 + +lintian (0.3.1) unstable; urgency=low + + * Added `scripts' checks and collector, written by Richard. This check + checks the #! lines of scripts in a package. + [40 new tags] + + * Added `spelling' checks, written by Richard. This check searches + the "Description:" field and the "copyright" file for common spelling + errors (typos). + [2 new tags] + + * Improved `files' check: No package should install files directly into + /usr/share. + New tag: + file-directly-in-usr-share + + * Fixed `files' check WRT files in /usr/lib/sgml and + /etc/emacs/site-start.d: + - ignore directories and symbolic links when checking for correct + file permissions + - display permissions in octal format + (fixes:bug#18866,#19026) + + * Fixed `control-files' check: really ignore `control' control file + + * Improved `lintian' frontend: + - parse command line parameters before reading the configuration + file. With that, `lintian -h' even works if the cfg file has + errors. (fixes:bug#19031) + - issue a warning and ignore `-all' option if packages are specified + at the same time (in older versions, this make lintian abort with + an error message) + - really check all packages listed in a .changes file + (fixes:bug#18851) + + * Fixed `md5sums' check to handle file names with spaces correctly + + * Put conffile /etc/lintianrc back in (fixes:bug#19031) + + * Include information about libtool/rpath workaround by Yann Dirson + (Thanks Yann!) + + * Added more overrides + + * Internal changes: + - Each error tag has a (bug) `Severity' field now which can be used + to file bug reports with the correct severity + - Each helper script has an `Author' field now + - Fixed `unused overrides' report + + -- Christian Schwarz <schwarz@debian.org> Sat, 7 Mar 1998 18:46:31 +0100 + +lintian (0.3.0) unstable; urgency=low + + * Lintian now also works without a configuration file and without + a static laboratory! (Since Lintian is so easy to use now, there + are no excuses for not using it! ;-) + + * Changed handling of lab: + - if no lab is specified, it is created dynamically by the + `lintian' command (the average use does not have to worry + about the lab anymore) + - since the dynamically created lab is placed in /tmp, several + users can run lintian at the same time without having to know + of each other + - the commands `lintian-setup' and `lintian-remove' have been + removed (fixes: bug#18707). + - a `static' laboratory can be created/updated or removed by + specifying the `--setup-lab' or `--remove-lab' options for the + `lintian' command + - added a lot of sanity checks to make removal of lab less risky :) + + * Changed handling of configuration file: + - configuration file is not necessary anymore + - changed search path for the configuration file to: + $LINTIAN_CFG/lintianrc + $LINTIAN_ROOT/lintianrc + $HOME/.lintianrc + /etc/lintianrc + - all configuration variables have reasonable defaults and can + be overwritten by environment variables of the same name + - removed configuration file /etc/lintianrc--the file is now + installed as /usr/doc/lintian/lintianrc.example + - renamed all configuration variables to LINTIAN_xxxx + - relaxed syntax of configuration file. It's now also possible + to use `~' and `$HOME' in the configuration file (fixes: + bug#18559) + - added LINTIAN_ARCH configuration variable so that Lintian + handles distribution directories correctly if these contain + several architectures + + * Changed parsing of command line arguments: + - if a package name is specified (instead of a file), look for + this package in the distribution directory and in the lab (in + earlier version, only the distribution directory was searched + for packages) + - added `--all' option to check the whole distribution + (in earlier version, this was the default operation) + - removed buggy `-n' command line option (this option wasn't + really useful anyways) + - the `-h' option displays a short description of all available + options now + - debug option `-d' can be specified several times to increase + the verbosity level + - recognize `--' as the end of options on the command line + + * Improved overrides handling: + - the override files does not include the leading `[EW]:' + anymore + - the parameters of an error tag may be omitted to disable + a certain tag for a whole package + - when checking the full distribution, unused overrides are + displayed + - cleaned up overrides file and added/removed a few overrides + + * Improved documentation: + - there is now a `Lintian User's Manual' which explains how to + setup and use Lintian to check ones packages, and which gives + insight on the design issues behind Lintian + - added a manual page for lintian-info (has been split off + from lintian(1)) + - updated the documentation files and the example lintianrc file + - merged QUICKSTART file into the README + + * Improved `binaries' check: check if a binary or shared library + defines RPATH + (Thanks to Ray Dassen for the suggestion! fixes: bug#18519) + New tag: + binary-or-shlib-defines-rpath + + * Improved `files' check: + WRT symbolic links: + - issue errors instead of warnings + - links between different top-level directories should always be + absolute + - check for relative links which contain to many `../' segments + - check for symbolic links which contain segments like `foo/../bar' + (Thanks to Manoj for the patch and the ideas!) + general: + - some additional checks for wrong file permissions + New tags: + symlink-has-too-many-up-segments + relative-symlink-enters-same-toplevel-directory + symlink-contains-up-and-down-segments + bad-permissions-for-etc-cron.d-script (renamed) + bad-permissions-for-etc-emacs-script + executable-in-usr-lib-sgml + + * Fixed `control-files' check: check file permissions correctly; + also check file owners of control files + New tag: + control-file-has-bad-owner + + * Fixed `copyright' check: check for package dependencies correctly + (fixes: bug#18611) + + * Improved `conffiles' check: files in /var/lib/games should not be + tagged as conffile, in general. + New tag: + score-file-may-not-be-conffile + + * Improved `manpages' check: files in /usr/X11R6/man/man6 usually + indicate X11 games in the wrong directory. + New tag: + x11-games-should-be-in-usr-games + + * Fixed `init.d' check: skip comments in init.d file + (Thanks to Joey for pointing this out!) + + - don't collect info for unselected collector scripts (internal bug) + + * Internal changes: + - don't refer to package `ftp.debian.org' for bugs in the + $LINTIAN_DIST directory--refer to package `general' instead + - made list-binpkg and list-srcpkg more verbose + - made lintian-info less verbose (don't give detailed info more + than once) + - create control-index file which lists all files in control.tar.gz + - fix permissions in the lab after a package has been unpacked + - chdir to lab dir before running the checker and collection + scripts (this makes it easier to write checks in awk or even sh) + - pass vars to helpers via environment + - don't link static info/* files into lab + - implemented dpkg_read_control to parse all controls + - don't use dpkg-deb to get control information about a .deb + - collection and checking scripts `registry' is now done dynamically + - move tag descriptions from collector and checker scripts into + separate `.desc' files + - each base directory in the lab has a .lintian-status file now, which + can be used to detect incompatible lab changes, for example + - moved unused files and internal documents into a private/ directory + of the source package + - cleaned up code + + -- Christian Schwarz <schwarz@debian.org> Sun, 1 Mar 1998 23:16:15 +0100 + +lintian (0.2.4) unstable; urgency=low + + * Added `fields' check for control fields. (That's the first check + written by Richard--and it's all Perl!!! ;-) + [32 new tags] + + * Added `binaries' check. + [6 new tags] + + * Improved `shared-libraries' check: + - use objdump instead of ldd and ldconfig + - this should fix all problems where Lintian couldn't check + python/perl dynamic objects, etc. + - allow cross-checking of packages, e.g., to check non-i386 .debs + on an i386 system (note, that this requires a multi-arch objdump) + - recognize if the shared library uses its SONAME + New tag: + shared-library-uses-its-soname + + * Improved `control-files' check: + - Don't check the `control' control file for correct + permissions, because dpkg doesn't care and this file isn't + installed on the systems anyways + + * Improved `files' check: + - Games are allowed to be setgid games + - svgalib programs are allowed to be setuid root + - usually, files in /usr/doc/foo should not be executable + New tag: + executable-in-usr-doc + + * Fix bug in `manpages' check: symlinks in /usr/bin, etc. also need + a manual page! (Thanks to Joey Hess for pointing this out!) + + * Use `.' instead of `source' in lintian-{remove,setup} /bin/sh scripts + (fixes bug#18421) + + * Define default values for configuration variables in + lintian-{remove,setup} scripts (fixes bug#18354) + + * Fix bug in `copyright-file' check: Don't report + usr-doc-symlink-to-foreign-package if we don't know whether the + referenced package comes from the same source or not. + (Thanks to James A. Treacy for pointing this out!) + + * Internal change: + - process source packages before binary packages so that a binary + package check can use info from the source packages (if these + are unpacked, too) + + * Added more override entries--and removed a few obsolete entries + (the checks are smarter now! :) + + * Added "Depends: binutils" for `objdump' + + * Changed maintainer email address to lintian-maint@debian.org + + -- Christian Schwarz <schwarz@debian.org> Sat, 21 Feb 1998 22:39:46 +0100 + +lintian (0.2.3) unstable; urgency=low + + * Fixed manual-pages check: Check for the `undocumented' symbolic + link failed on X11 manual pages (fixes #18343). + + * Improved files check. New tag: + etc-cron.d-script-tagged-executable + + * Improved control-files check: + - the `du' control file is not allowed anymore + - check file permissions of control files + New tags: + control-file-has-bad-permissions + + * Fixed bug: ldd-info collection script stopped when ldd failed + + * Fixed (internal) bugs: + - collect data for collection scripts too + - don't collect init.d data every time again + + * Error handling code improved again :) + + * The lintian frontend script checks if it has root permissions and + aborts if this is the case. (Running it as root is unnecessary and + simply too dangerous.) + + * Added one override entry + + -- Christian Schwarz <schwarz@debian.org> Wed, 18 Feb 1998 21:50:16 +0100 + +lintian (0.2.2) unstable; urgency=low + + * Fixed bug in lintian-setup: don't try to create $LAB if it already + exists (fixes bug#18227, bug#18252) + + * Added "Depends: file" (oops!) + + * Rewrote package "Description:" + + * Added a lot more override entries (thanks to all that told me about + overrides!) + + -- Christian Schwarz <schwarz@debian.org> Wed, 18 Feb 1998 12:55:58 +0100 + +lintian (0.2.1) unstable; urgency=low + + * Fixed bug in ldconfig collection script: script aborted without + error message if a shared library had errors (thanks to Kai!) + + * Fixed bug: `standards-version' check didn't collect necessary data + (actually, this was a more general bug--thanks to Joey Hess!) + + * Fixed bug: init.d checker script didn't notice if several of the + required options (start, stop, etc.) have been included on a single + line (thanks to Joey Hess!) + + * Don't check duplicated packages more than once (thanks to Joey Hess!) + + * Error handling code improved once more + + * Added more overrides (Thanks to Joey Hess!) + + * Mentioned Lintian's home page in the README file + + * Set package priority to `optional' (requested by several developers) + + -- Christian Schwarz <schwarz@debian.org> Sun, 15 Feb 1998 11:44:32 +0100 + +lintian (0.2.0) unstable; urgency=low + + * First public release + + * Fixed bug in shlibs check: Sometimes, ldconfig doesn't install any + symbolic links at all (e.g., for `acroread' package). + + * Changed lintian-setup: Don't remove the whole lab if it already + exists--just remove the info/ directory. + + * Changed handling of critical Lintian errors (abort on error) + + * Built package using fakeroot (first time i tried fakeroot--it's great!!) + + * Checked package with latest Lintian :) + + -- Christian Schwarz <schwarz@debian.org> Sat, 14 Feb 1998 21:49:10 +0100 + +lintian (0.1.3) unstable; urgency=low + + * Next beta release (hopefully the last one :-) + + * The lintian-info script is available now! You can either pipe the output + of lintian through it, or specify the `-i' option when calling lintian. + + * Lintian can check .changes files now! New tags: + bad-distribution-in-changes-file + file-size-mismatch-in-changes-file + md5sum-mismatch-in-changes-file + bad-section-in-changes-file + + * Lintian now detects if packages have been changed, even if they + have the same version number as before. + + * Improved shlibs check (this fixes the "error: bad ldconfig-info file" + bug). New tags: + ldconfig-symlink-referencing-wrong-file + ldconfig-symlink-is-not-a-symlink + + * Improved files check! New tags: + package-installs-into-etc-rc.d + non-standard-file-permissions-for-etc-init.d-script + + * New check for /etc/init.d scripts! Tags: + duplicate-updaterc.d-calls-in-postinst + output-of-updaterc.d-not-redirected-to-dev-null + preinst-calls-updaterc.d + duplicate-updaterc.d-calls-in-postrm + prerm-calls-updaterc.d + postrm-does-not-call-updaterc.d-for-init.d-script + postrm-contains-additional-updaterc.d-calls + file-in-etc-rc.d-marked-as-conffile + init.d-script-not-marked-as-conffile + init.d-script-does-not-implement-required-option + init.d-script-not-included-in-package + unregistered-script-in-etc-init.d + + * Fixed manpages check: Subdirectories of /usr/bin (e.g., /usr/bin/mh) + have not been handled correctly. + + * Added new override entries + + * Cleaned up Lintian's source code + + * Updated documentation + + * Lots of small changes + + -- Christian Schwarz <schwarz@debian.org> Fri, 13 Feb 1998 23:24:51 +0100 + +lintian (0.1.2) unstable; urgency=low + + * Beta release + * Two major bugs have been fixed + * Debugging info increased + + -- Christian Schwarz <schwarz@debian.org> Fri, 13 Feb 1998 11:20:51 +0100 + +lintian (0.1.1) unstable; urgency=low + + * Beta release + + -- Christian Schwarz <schwarz@debian.org> Thu, 12 Feb 1998 23:45:51 +0100 + +lintian (0.1.0) unstable; urgency=low + + * First release + + -- Christian Schwarz <schwarz@debian.org> Wed, 11 Feb 1998 23:15:51 +0100 diff --git a/debian/control b/debian/control new file mode 100644 index 0000000..7aaac3c --- /dev/null +++ b/debian/control @@ -0,0 +1,172 @@ +Source: lintian +Section: devel +Priority: optional +Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org> +Uploaders: + Axel Beckert <abe@debian.org>, + Bastien Roucariès <rouca@debian.org> +Build-Depends: + aspell <!nocheck>, + aspell-en <!nocheck>, + cdbs <!nocheck>, + debhelper (>= 13.11.8~) <!nocheck>, + debhelper-compat (= 13), + default-jdk-headless | default-jdk <!nocheck>, + dh-elpa | bash (<< 4.4) <!nocheck>, + dh-python <!nocheck>, + dh-r <!nocheck>, + dh-runit <!nocheck>, + dpkg (>= 1.17.14), + fakeroot <!nocheck>, + gcc-mingw-w64-i686 <!nocheck>, + gcc-mingw-w64-x86-64 <!nocheck>, + gpg-agent <!nocheck>, + javahelper <!nocheck>, + libarray-utils-perl <!nocheck>, + libconst-fast-perl, + libfile-basedir-perl, + libio-prompt-tiny-perl <!nocheck>, + libipc-run3-perl, + liblist-someutils-perl <!nocheck>, + libmce-perl <!nocheck>, + libpath-tiny-perl, + libperl-critic-freenode-perl <!nocheck>, + libperl-critic-pulp-perl <!nocheck>, + libpod-coverage-trustpod-perl <!nocheck>, + libtest-minimumversion-perl <!nocheck>, + libtest-perl-critic-perl <!nocheck>, + libtest-pod-coverage-perl <!nocheck>, + libtest-pod-perl <!nocheck>, + libtest-spelling-perl <!nocheck>, + libtest-strict-perl <!nocheck>, + libtest-synopsis-perl <!nocheck>, + libtext-csv-perl <!nocheck>, + libtext-csv-xs-perl <!nocheck>, + libtext-diff-perl <!nocheck>, + libtext-template-perl <!nocheck>, + libunicode-utf8-perl, + lintian <!nocheck>, + mingw-w64-tools <!nocheck>, + pkg-php-tools <!nocheck>, + python-dev-is-python3 <!nocheck>, + python3 <!nocheck>, + python3-all-dev <!nocheck>, + python3-dev <!nocheck>, + python3-docutils, + python3-numpy <!nocheck>, + python3-setuptools <!nocheck>, + quilt <!nocheck>, + tidy <!nocheck>, + uglifyjs <!nocheck>, + wamerican <!nocheck>, + wbritish <!nocheck>, + zip <!nocheck> +Standards-Version: 4.6.2 +Rules-Requires-Root: no +Vcs-Git: https://salsa.debian.org/lintian/lintian.git +Vcs-Browser: https://salsa.debian.org/lintian/lintian +Homepage: https://lintian.debian.org/ + +Package: lintian +Architecture: all +Depends: + binutils, + bzip2, + diffstat, + dpkg (>= 1.17.14), + dpkg-dev, + file, + gettext, + gpg, + intltool-debian, + iso-codes, + libapt-pkg-perl, + libarchive-zip-perl, + libberkeleydb-perl, + libcapture-tiny-perl, +# Bug#1001173 solved in 2.005004-3; leave for backports for now + libclass-xsaccessor-perl, + libclone-perl, + libconfig-tiny-perl, + libconst-fast-perl, + libcpanel-json-xs-perl, + libdata-dpath-perl, + libdata-validate-domain-perl, + libdata-validate-uri-perl, + libdevel-size-perl, + libdigest-sha-perl, + libdpkg-perl, + libencode-perl, + libemail-address-xs-perl, + libfile-basedir-perl, + libfile-find-rule-perl, + libfont-ttf-perl, + libhtml-html5-entities-perl, + libhtml-tokeparser-simple-perl, + libio-interactive-perl, + libipc-run3-perl, + libjson-maybexs-perl, + liblist-compare-perl, + liblist-someutils-perl, + liblist-utilsby-perl, + libmldbm-perl, + libmoo-perl, + libmoox-aliases-perl, + libnamespace-clean-perl, + libpath-tiny-perl, + libperlio-gzip-perl, + libperlio-utf8-strict-perl, + libproc-processtable-perl, + libregexp-wildcards-perl, + libsereal-decoder-perl, + libsereal-encoder-perl, + libsort-versions-perl, + libsyntax-keyword-try-perl, + libterm-readkey-perl, + libtext-levenshteinxs-perl, + libtext-markdown-discount-perl, + libtext-xslate-perl, + libtime-duration-perl, + libtime-moment-perl, + libtimedate-perl, + libunicode-utf8-perl, + liburi-perl, + libwww-mechanize-perl, +# Bug#1001164 solved in 3.16-4; leave for backports for now + libwww-perl, + libxml-libxml-perl, + libyaml-libyaml-perl, + plzip | lzip-decompressor, + lzop, + man-db, + patchutils, + perl, + t1utils, + unzip, + xz-utils, + ${misc:Depends}, + ${perl:Depends}, +Suggests: + binutils-multiarch, + libtext-template-perl, +Breaks: + funny-manpages (<< 1.3-5.1), + libconfig-model-dpkg-perl (<< 2.151), + lintian-brush (<< 0.88), +# for bullseye, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001655#35 + lzd (<< 1.2-3~), + pkg-js-tools (<< 0.9.4), + pkg-perl-tools (<< 0.53), +Replaces: + funny-manpages (<< 1.3-5.1), +Multi-Arch: foreign +Description: Debian package checker + Lintian dissects Debian packages and reports bugs and policy violations. It + contains automated checks for many aspects of Debian policy as well as some + checks for common errors. + . + This package is useful for all people who want to check Debian packages for + compliance with Debian policy. Every Debian maintainer should check packages + with this tool before uploading them to the archive. + . + This version of Lintian is calibrated for Debian Policy version 4.6.2. diff --git a/debian/copyright b/debian/copyright new file mode 100644 index 0000000..7eee053 --- /dev/null +++ b/debian/copyright @@ -0,0 +1,86 @@ +Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: lintian +Upstream-Contact: <debian-lint-maint@lists.debian.org> +Source: https://lintian.debian.org/ +Comment: + This is the Debian package of Lintian, the Debian package checker. + The latest version of Lintian can always be found at: + https://lintian.debian.org/ + . + Lintian was designed and written by Christian Schwarz and Richard Braakman. + The package was previously maintained by Darren Benham, + Sean 'Shaleh' Perry and Josip Rodin. + . + It is now maintained by a group of people, with changes noted by initials + in the changelog. Key to frequent committers: + . + JvW == Jeroen van Wolffelaar <jeroen@wolffelaar.nl> + FL == Frank Lichtenheld <djpig@debian.org> + HE == Marc 'HE' Brockschmidt <he@debian.org> + CW == Colin Watson <cjwatson@debian.org> + RA == Russ Allbery <rra@debian.org> + TK == Thijs Kinkhorst <thijs@debian.org> + ADB == Adam D. Barratt <adam@adam-barratt.org.uk> + JP == Jordà Polo <jorda@ettin.org> + JA == Jari Aalto <jari.aalto@cante.net> + RG == Raphael Geissert <geissert@debian.org> + NT == Niels Thykier <niels@thykier.net> + JW == Jakub Wilk <jwilk@debian.org> + BR == Bastien ROUCARIÈS <roucaries.bastien@gmail.com> + AB == Axel Beckert <abe@debian.org> + PW == Paul Wise <pabs@debian.org> + CL == Chris Lamb <lamby@debian.org> + EB == Edward Betts <edward@debian.org> + GN == Gergely Nagy <algernon@debian.org> + SL == Sylvestre Ledru <sylvestre@debian.org> + SRL == Steve Langasek <vorlon@debian.org> + . + Lintian is maintained in git. The current development version may + be checked out from: + https://salsa.debian.org/lintian/lintian.git + +Files: * +Copyright: 1998, Christian Schwarz + 1998, Richard Braakman + 1998-1999, Joey Hess + 1999, Darren Benham + 2000, Sean 'Shaleh' Perry + 2001-2017, Colin Watson + 2001-2003, Josip Rodin + 2002-2004, Denis Barbier + 2004-2008, Marc Brockschmidt + 2004-2008, Frank Lichtenheld + 2004-2006, Jeroen van Wolffelaar + 2005, René van Bevern + 2006, Adeodato Simó + 2007-2013, Russ Allbery + 2008, Patrick Schoenfeld + 2008, Niko Tyni + 2008-2017, Raphael Geissert + 2008-2019, Adam D. Barratt + 2009, Stéphane Glondu + 2010, Raphaël Hertzog + 2010-2019, Niels Thykier + 2011, Gerfried Fuchs + 2011-2016, Jakub Wilk + 2013-2018, Bastien ROUCARIÈS + 2014-2023, Axel Beckert + 2016-2021, Chris Lamb + 2018-2022, Felix Lechner + 2017, Edward Betts +License: GPL-2+ + This program is free software; you may redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2, or (at your option) + any later version. + . + This is distributed in the hope that it will be useful, but without + any warranty; without even the implied warranty of merchantability or + fitness for a particular purpose. See the GNU General Public License + for more details. + . + A copy of the GNU General Public License version 2 is available as + /usr/share/common-licenses/GPL-2 in the Debian GNU/Linux distribution + or at https://www.gnu.org/licenses/old-licenses/gpl-2.0.html. + You can also obtain it by writing to the Free Software Foundation, Inc., + 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. diff --git a/debian/dirs b/debian/dirs new file mode 100644 index 0000000..be90752 --- /dev/null +++ b/debian/dirs @@ -0,0 +1,3 @@ +etc +usr/bin +usr/share/lintian diff --git a/debian/doc-base b/debian/doc-base new file mode 100644 index 0000000..d571578 --- /dev/null +++ b/debian/doc-base @@ -0,0 +1,12 @@ +Document: lintian +Title: Lintian User's Manual +Author: Christian Schwarz, Richard Braakman, Sean 'Shaleh' Perry +Abstract: This manual describes Lintian, the Debian package checker. +Section: Debian + +Format: HTML +Index: /usr/share/doc/lintian/lintian.html +Files: /usr/share/doc/lintian/*.html + +Format: text +Files: /usr/share/doc/lintian/lintian.rst.gz diff --git a/debian/docs b/debian/docs new file mode 100644 index 0000000..58aff05 --- /dev/null +++ b/debian/docs @@ -0,0 +1,5 @@ +README.md +doc/CREDITS +doc/api.html +doc/lintian.html +doc/lintian.rst diff --git a/debian/duck-overrides b/debian/duck-overrides new file mode 100644 index 0000000..64e41cc --- /dev/null +++ b/debian/duck-overrides @@ -0,0 +1,5 @@ +# Reported as parked, false positive +https://www.freedesktop.org/wiki/Software/dbus/ + +# True positive, but part of a lintian test to find such stuff. :-) +https://example.com/%i/ diff --git a/debian/gbp.conf b/debian/gbp.conf new file mode 100644 index 0000000..4b202dd --- /dev/null +++ b/debian/gbp.conf @@ -0,0 +1,6 @@ +[DEFAULT] +# As long as this is a native package, we don't need any prefixes +debian-tag = %(version)s + +[dch] +multimaint-merge = True diff --git a/debian/lintian.examples b/debian/lintian.examples new file mode 100644 index 0000000..09a90d6 --- /dev/null +++ b/debian/lintian.examples @@ -0,0 +1 @@ +doc/examples/* diff --git a/debian/lintian.install b/debian/lintian.install new file mode 100644 index 0000000..10e7160 --- /dev/null +++ b/debian/lintian.install @@ -0,0 +1,10 @@ +bin usr/share/lintian +data usr/share/lintian +lib usr/share/lintian +.perlcriticrc usr/share/lintian +# the next line will be removed when libconfig-model-dpkg-perl stops using Lintian data (Bug#968000) +private/latest-policy-version usr/share/lintian/private +profiles usr/share/lintian +tags usr/share/lintian +templates usr/share/lintian +vendors usr/share/lintian diff --git a/debian/lintian.links b/debian/lintian.links new file mode 100644 index 0000000..e54d784 --- /dev/null +++ b/debian/lintian.links @@ -0,0 +1,7 @@ +usr/share/lintian/bin/lintian usr/bin/lintian +usr/share/lintian/bin/lintian-explain-tags usr/bin/lintian-explain-tags +usr/share/lintian/bin/lintian-annotate-hints usr/bin/lintian-annotate-hints +usr/share/lintian/bin/lintian-annotate-hints usr/bin/lintian-info +usr/share/man/man1/lintian-annotate-hints.1.gz usr/share/man/man1/lintian-info.1.gz +usr/share/lintian/bin/spellintian usr/bin/spellintian +usr/share/doc/lintian/lintian.rst usr/share/doc/lintian/lintian.txt diff --git a/debian/lintian.maintscript b/debian/lintian.maintscript new file mode 100644 index 0000000..a16bc80 --- /dev/null +++ b/debian/lintian.maintscript @@ -0,0 +1 @@ +rm_conffile /etc/lintianrc 2.90.0~ lintian diff --git a/debian/manpages b/debian/manpages new file mode 100644 index 0000000..a34ee8b --- /dev/null +++ b/debian/manpages @@ -0,0 +1,2 @@ +man/man1/*.1 +man/man3/*.3 diff --git a/debian/rules b/debian/rules new file mode 100755 index 0000000..956ea16 --- /dev/null +++ b/debian/rules @@ -0,0 +1,71 @@ +#!/usr/bin/make -f + +PERL ?= /usr/bin/perl + +VER := $(shell head -1 debian/changelog | sed -e 's/^.*(//' -e 's/).*$$//') +tmp := $(CURDIR)/debian/lintian +pod2man := pod2man --center "Debian Package Checker" --release "Lintian v$(VER)" +pod2mansources := $(wildcard man/*.pod) +docsources := doc/lintian.rst README.md $(pod2mansources) +perlprovides := data/fields/perl-provides + +ifneq (,$(filter parallel=%,$(DEB_BUILD_OPTIONS))) + jobs = $(patsubst parallel=%,%,$(filter parallel=%,$(DEB_BUILD_OPTIONS))) + PAR_ARGS=-j $(jobs) +endif + +# export DH_VERBOSE=1 + +%: + dh $@ + +override_dh_auto_build: generate-docs-stamp +# check that the static data about perl core modules is up to date + $(PERL) -ne '/PERL_VERSION=(.+)/ and $$] > $$1 and warn q{*}x60 . qq{\n$(perlprovides) needs an update, please run\n debian/rules refresh-perl-provides\n} . q{*}x60 . qq{\n}' $(perlprovides) + + +override_dh_auto_test: +ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS))) + private/runtests +endif + +override_dh_clean: + rm -rf $(CURDIR)/debian/test-out + rm -rf doc/api.html doc/lintian.html + rm -rf man/man1/ man/man3/ l10n/ + dh_clean + +override_dh_install: + dh_install + echo "Setting LINTIAN_VERSION to $(VER)" + $(PERL) -p -i -e 's/my \$$LINTIAN_VERSION;/my \$$LINTIAN_VERSION = q{$(VER)};/;' \ + $(tmp)/usr/share/lintian/bin/* + + +api-doc: + private/generate-html-docs doc/api.html + +.PHONY: generate-docs +generate-docs: generate-docs-stamp + +generate-docs-stamp: $(docsources) + dh_testdir +# A UTF-8 locale seemed appropriate; manual uses § character + cd doc && LC_ALL=en_US.UTF-8 rst2html lintian.rst > lintian.html + mkdir -p man/man1/ man/man3/ + $(pod2man) --name lintian --section=1 man/lintian.pod > man/man1/lintian.1 + set -e ; for POD in $(pod2mansources) ; do \ + BASENAME=$$(basename "$$POD" .pod) ; \ + $(pod2man) --section=1 "$$POD" > "man/man1/$$BASENAME".1 ; \ + done + set -e ; for POD in $$(find doc/tutorial lib/Lintian lib/Test -type f '!' -path '*/Output/*' '!' -path '*/Check/*' '!' -path '*/Screen/*' ) ; do \ + BASENAME=$$(echo "$$POD" | perl -pe 's@^(doc/tutorial|lib)/@@; s@/@::@g; s/\.(pod|pm)$$//') ; \ + $(pod2man) --name="$$BASENAME" --section=3 "$$POD" > "man/man3/$$BASENAME".3 ; \ + done + private/generate-html-docs doc/api.html > /dev/null + touch $@ + +# only used manually +.PHONY: refresh-perl-provides +refresh-perl-provides: + perl private/refresh-perl-provides > $(perlprovides) diff --git a/debian/salsa-ci.yml b/debian/salsa-ci.yml new file mode 100644 index 0000000..fc2e898 --- /dev/null +++ b/debian/salsa-ci.yml @@ -0,0 +1,30 @@ +--- +include: + - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml + - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml + +build-testing: + variables: + RELEASE: 'testing' + DEB_BUILD_OPTIONS: 'nocheck' + extends: .build-package + +build-bookworm-backports: + variables: + RELEASE: 'bookworm-backports' + DEB_BUILD_OPTIONS: 'nocheck' + extends: .build-package + allow_failure: true + +variables: + SALSA_CI_DISABLE_BLHC: 1 + SALSA_CI_DISABLE_BUILD_PACKAGE_ANY: 1 + SALSA_CI_LINTIAN_FAIL_WARNING: 1 + DEB_BUILD_OPTIONS: 'nocheck' + +# Try to override the lintian version being used to the just built +# version. +.test-lintian: &test-lintian + before_script: + - apt-get update + - apt-get install -y ${WORKING_DIR}/lintian_*.deb diff --git a/debian/source/format b/debian/source/format new file mode 100644 index 0000000..89ae9db --- /dev/null +++ b/debian/source/format @@ -0,0 +1 @@ +3.0 (native) diff --git a/debian/source/lintian-overrides b/debian/source/lintian-overrides new file mode 100644 index 0000000..4226ad1 --- /dev/null +++ b/debian/source/lintian-overrides @@ -0,0 +1,3 @@ +license-problem-json-evil *tags/l/license-problem-json-evil.tag* +license-problem-nvidia-intellectual *lib/Lintian/Check/Cruft.pm* +test-leaves-python-version-untested *debian/tests/build-and-evaluate-test-packages* diff --git a/debian/tests/build-and-evaluate-test-packages b/debian/tests/build-and-evaluate-test-packages new file mode 100755 index 0000000..58b3e83 --- /dev/null +++ b/debian/tests/build-and-evaluate-test-packages @@ -0,0 +1,10 @@ +#!/bin/sh + +set -e + +export LINTIAN_TEST_INSTALLED=yes +WORKDIR="$AUTOPKGTEST_TMP/$(basename $0)" + +private/runtests --debug --unattended --keep-going --work-dir="$WORKDIR" + +rm -rf "${WORKDIR}" diff --git a/debian/tests/control b/debian/tests/control new file mode 100644 index 0000000..bbb82ea --- /dev/null +++ b/debian/tests/control @@ -0,0 +1,52 @@ +Tests: build-and-evaluate-test-packages +Restrictions: allow-stderr +# Conflicts: +# libperl-critic-pulp-perl, +Depends: + aspell, + aspell-en, + build-essential, + cdbs, + default-jdk-headless | default-jdk, + dh-elpa | bash (<< 4.4), + dh-python, + dh-r, + dh-runit, + fakeroot, + gcc-mingw-w64-i686, + gcc-mingw-w64-x86-64, + gpg-agent, + javahelper, + libarray-utils-perl, + libio-prompt-tiny-perl, + liblist-someutils-perl, + libmce-perl, + libperl-critic-freenode-perl, + libperl-critic-pulp-perl, + libpod-coverage-trustpod-perl, + libtest-minimumversion-perl, + libtest-perl-critic-perl, + libtest-pod-coverage-perl, + libtest-pod-perl, + libtest-spelling-perl, + libtest-strict-perl, + libtest-synopsis-perl, + libtext-csv-perl, + libtext-csv-xs-perl, + libtext-diff-perl, + libtext-template-perl, + lintian, + mingw-w64-tools, + pkg-php-tools, + python-dev-is-python3, + python3, + python3-dev, + python3-all-dev, + python3-numpy, + python3-setuptools, + quilt, + tidy, + uglifyjs, + wamerican, + wbritish, + zip, |