• Re: RFC for changes regarding NMU in developers reference (Was: ITN pro

    From Holger Levsen@21:1/5 to Lucas Nussbaum on Fri May 9 13:00:01 2025
    On Fri, May 09, 2025 at 12:43:54PM +0200, Lucas Nussbaum wrote:
    On 09/05/25 at 10:27 +0200, Andreas Tille wrote:
    However, I have doubts about (4), since there's still so many different workflows to use Git+Salsa.

    same here.

    Which brings us back to DEP-14 as a baseline recommendation that can
    help reduce friction. While individual workflows vary, having some repository is a precondition for any collaboration--and DEP-14 provides a neutral, widely accepted starting point.
    Err, the current state of things is that DEP-14 is still in CANDIDATE
    state, and I read the last thread on this topic as unconclusive[0].

    that, both, plus the fact that DEP-14 does not recommend one specific
    workflow, but several.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    More and more people seem to forget that SARS-CoV-2 infection can cause
    memory impairment.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmgd32MACgkQCRq4Vgaa qhyhsw//QmeahJ5W9AashQELutcQKwst9C/1T0x5K2wvRD2YnVd2oD6qnotZF9Ng JsiHaOvPyEduhpA0J85C7pbPh7ONevg1yQ/2RWajPUyY1+bArLspg614C4sbBEt6 46UJVex5uyy6oYKNrYpTu8WkqiYIa6TbPrWrh38CEnCzbsmrbv43YK40OKZSgwhs ZjjKwh2PbaASVB4PFbMXi2zc21TvdTRaW9ibeMVRjTlUIltdVdjwKGdB8xJJph2j x1clhK4QufQKiNx+xYd4BxBMX7bVAORIxAhsswBnwdlAwxe5UFxRelzCiXzNeiUT eLpC3sveYJ9JbSeO5CPATFtikZl7TS8u/+Yk+rYU+7B3bcX89TSRCxLIa9IR0+O/ Mct7XIJ37Wafqx+HO4zI1WvYnmnrTFrcN0kgzS/gmahwQijVPkiGYBWIYsICqEoQ dMSdkR69tHGbstyxM1t2XfZfs3l0vF6WpP8t346gQ3HZOBUFZRFmicThgx7OHMp8 wFicjAVLq9Sgfbfz1pJ/PjxXAMBFVLbg2fly8DtgbAvXKbBhGDSfhTJlX8ChjxtH 77WYrhPn8hwmfXzs7QYwY
  • From Lucas Nussbaum@21:1/5 to Andreas Tille on Fri May 9 12:50:01 2025
    On 09/05/25 at 10:27 +0200, Andreas Tille wrote:
    However, I have doubts about (4), since there's still so many different workflows to use Git+Salsa.

    Which brings us back to DEP-14 as a baseline recommendation that can
    help reduce friction. While individual workflows vary, having some
    repository is a precondition for any collaboration--and DEP-14 provides a neutral, widely accepted starting point.

    Err, the current state of things is that DEP-14 is still in CANDIDATE
    state, and I read the last thread on this topic as unconclusive[0].

    [0] https://lists.debian.org/debian-devel/2025/01/msg00080.html

    So I wouldn't say that is "widely accepted".

    I would love to see data about the actual acceptance of DEP-14 among
    packages in the archive: my feeling is that it is currently being a bit
    ignored by maintainers and teams (but maybe I'm wrong).

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?B?QsOhbGludCBSw6ljemV5?=@21:1/5 to All on Sat May 10 12:30:01 2025
    Hi,

    Holger Levsen <holger@layer-acht.org> ezt írta (időpont: 2025. máj.
    9., P, 12:56):

    On Fri, May 09, 2025 at 12:43:54PM +0200, Lucas Nussbaum wrote:
    On 09/05/25 at 10:27 +0200, Andreas Tille wrote:
    However, I have doubts about (4), since there's still so many different workflows to use Git+Salsa.

    same here.

    I have no doubt that migrating a package to Git is an improvement in
    long term maintenance efficiency and it is not just my personal
    preference.
    According to https://trends.debian.net/#version-control-system >90% of
    packages are maintained in git already.
    I'd also enable CI by default as well ensuring that it passes thus the
    original maintainer does not have to deal with broken tests should the
    NMU go through.
    In addition to fine grained history and CI, having a Git repository on
    Salsa allows Debian Janitor to offer automated updates to the package
    which is the cheapest way of keeping a package in good shape.
    Eventually we could implement importing new upstream releases and
    uploads from Salsa tags and maintaining a package could be as simple
    as accepting MR-s and tagging a release.

    Which brings us back to DEP-14 as a baseline recommendation that can
    help reduce friction. While individual workflows vary, having some repository is a precondition for any collaboration--and DEP-14 provides a neutral, widely accepted starting point.
    Err, the current state of things is that DEP-14 is still in CANDIDATE state, and I read the last thread on this topic as unconclusive[0].

    that, both, plus the fact that DEP-14 does not recommend one specific workflow, but several.

    It is sad enough that the project could not converge on a recommended
    git workflow, please don't use that as an argument to hold back
    improving the state of neglected packages.
    DEP-14 not being officially accepted poses no practical issue for
    those who really want to migrate a package to git anyway. I typically
    just used gbp's default layout and lived with it or migrated to a
    newer format later. A potential NMU-er should also be able to make a
    good judgment call on the proposed repository format.

    Migrating a neglected package to Git should be allowed for bigger
    NMUs, which are offered with uploads with very long delay.

    Cheers,
    Balint

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Lucas Nussbaum on Sun May 11 22:40:01 2025
    On 09/05/25 at 12:43 +0200, Lucas Nussbaum wrote:
    I would love to see data about the actual acceptance of DEP-14 among
    packages in the archive: my feeling is that it is currently being a bit ignored by maintainers and teams (but maybe I'm wrong).

    I started working on a salsa importer in UDD. It still needs some
    polishing and Web pages to expose interesting results, but it already
    provides the following information:

    * 37641 source packages in trixie/main
    * of which 36083 declare a VCS URL
    * of which 34644 point to a salsa project
    * of which 34370 point to a salsa project that exists

    .. grouped by salsa group:
    salsa_group | count
    --------------+-------
    debian | 4255
    perl-team | 3963
    rust-team | 2970
    python-team | 2703
    go-team | 2338
    js-team | 1677
    r-pkg-team | 1159
    java-team | 1089
    ruby-team | 1054
    haskell-team | 957

    .. grouped by default branch:
    default_branch | count
    -----------------+-------
    master | 24467
    debian/master | 2569
    debian/latest | 2480
    debian/sid | 2160
    debian | 561
    debian/main | 522
    debian/unstable | 512
    debian/epoxy | 450
    main | 338
    debian-unstable | 117

    Looking at the DEP-14 compliance of the above:
    default_branch | count
    -----------------+-------
    master | 24467 ; not DEP-14-compliant
    debian/master | 2569 ; not DEP-14-compliant, but shares the idea of
    using <vendor>/ branches
    debian/latest | 2480 ; DEP-14-OK
    debian/sid | 2160 ; DEP-14-OK but not recommended (debian/unstable would be)
    debian | 561 ; not DEP-14-compliant
    debian/main | 522 ; not DEP-14-compliant, see debian/main
    debian/unstable | 512 ; DEP-14-OK
    debian/epoxy | 450 ; not DEP-14-compliant (this is used by the
    openstack team)
    main | 338 ; not DEP-14-compliant
    debian-unstable | 117 ; not DEP-14-compliant

    So that leaves 2480+2160+512=5152 source packages using a DEP-14 default branch.

    They are maintained by the following salsa groups:
    salsa_group | count_dep14 | count_total ------------------------+-------------+-------------
    go-team | 1491 | 2338
    debian | 980 | 4255
    python-team | 333 | 2703
    gnome-team | 321 | 329
    perl-team | 268 | 3963
    php-team | 211 | 268
    multimedia-team | 152 | 606
    homeassistant-team | 120 | 435
    science-team | 74 | 856
    DebianOnMobile-team | 74 | 83
    pkg-octave-team | 72 | 73
    js-team | 55 | 1677
    games-team | 53 | 506
    ruby-team | 51 | 1054
    fonts-team | 48 | 393
    lxqt-team | 48 | 48
    swaywm-team | 27 | 31
    virtualsquare-team | 26 | 26
    java-team | 25 | 1089

    So, it looks like among the largest packaging teams, only the go team,
    the gnome team, and the php team have significantly adopted DEP-14.

    Note that this is not a criticism of DEP-14, only an attempt at
    providing numbers about DEP-14 adoption.

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?B?T3R0byBLZWvDpGzDpGluZW4=?@21:1/5 to All on Sun May 11 23:40:01 2025
    Hi

    So, it looks like among the largest packaging teams, only the go team,
    the gnome team, and the php team have significantly adopted DEP-14.

    Note that this is not a criticism of DEP-14, only an attempt at
    providing numbers about DEP-14 adoption.

    I have published similar stats before and I ran a large "poll" on this
    mailing list with subject "DEP-14: Default branch name 'debian/latest' objections?" to find out what the objections are. My take is that a
    vocal minority with very strong opinions prevent Debian from landing
    on a default Debian branch name.

    I believe that if Julien finalizes https://salsa.debian.org/dep-team/deps/-/merge_requests/16 and Raphael
    approves if (after gauging that the result is reasonable and has
    enough consensus), and then Raphael follows up with a MR that changes
    DEP-14 from candidate to accepted, and 20+ DDs +1 it, we could merge
    it and have a decision. Once we have a decision, Guido is more likely
    to support making that decision the default in git-buildpackage, and
    the people who previously migrated from master to debian/master or
    debian/sid (while the historic DEP-14 suggested them) are more likely
    to change to the final branch name. With this everything would most
    likely converge.

    If we don't finalize DEP-14, the git-buildpackage default 'master'
    will continue to be the most likely default, as software defaults
    triumph policy/standard recommendations.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?B?QsOhbGludCBSw6ljemV5?=@21:1/5 to All on Sun May 11 23:50:01 2025
    Hi Lucas,

    Thank you for collecting the statistics.

    Lucas Nussbaum <lucas@debian.org> ezt írta (időpont: 2025. máj. 11., V, 22:36):

    On 09/05/25 at 12:43 +0200, Lucas Nussbaum wrote:
    I would love to see data about the actual acceptance of DEP-14 among packages in the archive: my feeling is that it is currently being a bit ignored by maintainers and teams (but maybe I'm wrong).

    I started working on a salsa importer in UDD. It still needs some
    polishing and Web pages to expose interesting results, but it already provides the following information:

    * 37641 source packages in trixie/main
    * of which 36083 declare a VCS URL
    * of which 34644 point to a salsa project
    * of which 34370 point to a salsa project that exists

    .. grouped by salsa group:
    salsa_group | count
    --------------+-------
    debian | 4255
    perl-team | 3963
    rust-team | 2970
    python-team | 2703
    go-team | 2338
    js-team | 1677
    r-pkg-team | 1159
    java-team | 1089
    ruby-team | 1054
    haskell-team | 957

    .. grouped by default branch:
    default_branch | count
    -----------------+-------
    master | 24467
    debian/master | 2569
    debian/latest | 2480
    debian/sid | 2160
    debian | 561
    debian/main | 522
    debian/unstable | 512
    debian/epoxy | 450
    main | 338
    debian-unstable | 117

    Looking at the DEP-14 compliance of the above:
    default_branch | count
    -----------------+-------
    master | 24467 ; not DEP-14-compliant
    debian/master | 2569 ; not DEP-14-compliant, but shares the idea of
    using <vendor>/ branches
    debian/latest | 2480 ; DEP-14-OK
    debian/sid | 2160 ; DEP-14-OK but not recommended (debian/unstable would be)
    debian | 561 ; not DEP-14-compliant
    debian/main | 522 ; not DEP-14-compliant, see debian/main
    debian/unstable | 512 ; DEP-14-OK
    debian/epoxy | 450 ; not DEP-14-compliant (this is used by the
    openstack team)
    main | 338 ; not DEP-14-compliant
    debian-unstable | 117 ; not DEP-14-compliant

    So that leaves 2480+2160+512=5152 source packages using a DEP-14 default branch.

    While this is accurate considering the latest DEP-14 version, it
    should be noted that the first DEP-14 draft allowed 'master' as the
    main branch for native packages and up to 2020-11-29 DEP-14
    recommended debian/master instead of debian/latest.
    Earlier adopters (like me) thus probably don't follow the latest
    changes to DEP-14 because what's the point of renaming a perfectly
    fine branch.

    Also git-buildpackage's defaults probably play a bigger role in
    choosing branch names.
    DEP-14 starts becoming useful in practice when the packaging
    repository starts targeting other releases than just unstable/sid and
    until that point gbp's default branch names are just fine and clear
    enough for potential contributors.

    Cheers,
    Balint


    They are maintained by the following salsa groups:
    salsa_group | count_dep14 | count_total ------------------------+-------------+-------------
    go-team | 1491 | 2338
    debian | 980 | 4255
    python-team | 333 | 2703
    gnome-team | 321 | 329
    perl-team | 268 | 3963
    php-team | 211 | 268
    multimedia-team | 152 | 606
    homeassistant-team | 120 | 435
    science-team | 74 | 856
    DebianOnMobile-team | 74 | 83
    pkg-octave-team | 72 | 73
    js-team | 55 | 1677
    games-team | 53 | 506
    ruby-team | 51 | 1054
    fonts-team | 48 | 393
    lxqt-team | 48 | 48
    swaywm-team | 27 | 31
    virtualsquare-team | 26 | 26
    java-team | 25 | 1089

    So, it looks like among the largest packaging teams, only the go team,
    the gnome team, and the php team have significantly adopted DEP-14.

    Note that this is not a criticism of DEP-14, only an attempt at
    providing numbers about DEP-14 adoption.

    Lucas


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Colin Watson@21:1/5 to All on Mon May 12 00:00:01 2025
    On Sun, May 11, 2025 at 02:35:14PM -0700, Otto Kekäläinen wrote:
    I have published similar stats before and I ran a large "poll" on this >mailing list with subject "DEP-14: Default branch name 'debian/latest' >objections?" to find out what the objections are. My take is that a
    vocal minority with very strong opinions prevent Debian from landing
    on a default Debian branch name.

    The impression I had back then was that it was a vocal minority who
    thought it was important, and most developers just weren't all that
    bothered. But this is anecdata ...

    Once we have a decision, Guido is more likely
    to support making that decision the default in git-buildpackage, and
    the people who previously migrated from master to debian/master or
    debian/sid (while the historic DEP-14 suggested them) are more likely
    to change to the final branch name. With this everything would most
    likely converge.

    I think this significantly underestimates the annoyance involved in
    renaming existing long-lived branches (in that all clients have to
    re-clone or manually adjust), which is certainly why I generally avoid
    doing so unless I absolutely have to.

    --
    Colin Watson (he/him) [cjwatson@debian.org]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Roberto =?iso-8859-1?Q?C=2E_S=E1nch@21:1/5 to Colin Watson on Mon May 12 00:30:01 2025
    On Sun, May 11, 2025 at 10:50:21PM +0100, Colin Watson wrote:
    On Sun, May 11, 2025 at 02:35:14PM -0700, Otto Keklinen wrote:

    Once we have a decision, Guido is more likely
    to support making that decision the default in git-buildpackage, and
    the people who previously migrated from master to debian/master or debian/sid (while the historic DEP-14 suggested them) are more likely
    to change to the final branch name. With this everything would most
    likely converge.

    I think this significantly underestimates the annoyance involved in renaming existing long-lived branches (in that all clients have to re-clone or manually adjust), which is certainly why I generally avoid doing so unless I absolutely have to.

    I'm personally not a fan of branch renaming, so I can see the validity
    of arguing for "no change". However, would it not be possible for those
    who prefer to keep the old branch names (for the sake of compatibility
    with existing tools/working copies/etc) to change the *default* (so that
    new clones benefit from the new/preferred naming structure) and then
    maintain the old default and the new default in sync by way of a
    'git merge --ff-only' (which could be implemented in a hook, CI, or some
    other automated means)?

    This could even be something that gbp is aware of (maybe by a
    configuration option which can be placed in gbp.conf, perhaps named
    something like 'old-debian-branch') which it then warns the user about
    when the two branch pointers aren't pointing at the same commit. Or
    something like that.

    Regards,

    -Roberto

    --
    Roberto C. Snchez

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?B?T3R0byBLZWvDpGzDpGluZW4=?@21:1/5 to All on Mon May 12 01:00:01 2025
    I think this significantly underestimates the annoyance involved in renaming
    existing long-lived branches (in that all clients have to re-clone or manually adjust), which is certainly why I generally avoid doing so unless I
    absolutely have to.
    ...
    This could even be something that gbp is aware of (maybe by a
    configuration option which can be placed in gbp.conf, perhaps named
    something like 'old-debian-branch') which it then warns the user about
    when the two branch pointers aren't pointing at the same commit. Or
    something like that.

    This seems overly complicated. The simplest way forward if to finalize
    DEP-14, and let maintainers and packagers adopt it whenever they feel
    the benefit. You probably also want to wait a bit for tooling
    maintainers to default to what DEP-14 suggests.

    Regardless of what branch names packages use today or in the future,
    they should all have a debian/gbp.conf file that defines what branches
    and packaging practices are being used *right now*.

    Having a DEP-14 agreed will help that in the long-term the contents of
    those gbp.conf files will converge on the Debian-specific branch and
    tag names.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to All on Mon May 12 10:10:02 2025
    On 11/05/25 at 23:40 +0200, Blint Rczey wrote:
    While this is accurate considering the latest DEP-14 version, it
    should be noted that the first DEP-14 draft allowed 'master' as the
    main branch for native packages and up to 2020-11-29 DEP-14
    recommended debian/master instead of debian/latest.
    Earlier adopters (like me) thus probably don't follow the latest
    changes to DEP-14 because what's the point of renaming a perfectly
    fine branch.

    Here is the updated table, with 'count_dep14' being the sources that
    use debian/latest, debian/sid or debian/unstable, and
    count_loosely_dep14 adding those using debian/master:

    salsa_group | count_dep14 | count_loosely_dep14 | count_total ------------------------+-------------+---------------------+-------------
    go-team | 1491 | 1499 | 2338
    debian | 980 | 1554 | 4253
    python-team | 333 | 1506 | 2703
    gnome-team | 321 | 321 | 329
    perl-team | 268 | 268 | 3963
    php-team | 211 | 215 | 268
    multimedia-team | 152 | 159 | 606
    homeassistant-team | 120 | 253 | 435
    science-team | 74 | 116 | 856
    DebianOnMobile-team | 74 | 83 | 83
    pkg-octave-team | 72 | 72 | 73
    js-team | 55 | 87 | 1677
    games-team | 54 | 70 | 507
    ruby-team | 51 | 55 | 1054
    fonts-team | 48 | 54 | 393
    lxqt-team | 48 | 48 | 48
    swaywm-team | 27 | 28 | 31
    virtualsquare-team | 26 | 26 | 26
    java-team | 25 | 27 | 1089
    pkg-security-team | 22 | 247 | 255
    perl6-team | 21 | 21 | 26
    emacsen-team | 20 | 52 | 340
    lxde-team | 20 | 20 | 20
    electronics-team | 19 | 21 | 79
    math-team | 18 | 19 | 55
    cinnamon-team | 18 | 19 | 21
    roundcube-team | 16 | 16 | 16
    pkg-voip-team | 16 | 17 | 44

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Lucas Nussbaum on Wed May 14 09:50:01 2025
    On 11/05/25 at 22:36 +0200, Lucas Nussbaum wrote:
    On 09/05/25 at 12:43 +0200, Lucas Nussbaum wrote:
    I would love to see data about the actual acceptance of DEP-14 among packages in the archive: my feeling is that it is currently being a bit ignored by maintainers and teams (but maybe I'm wrong).

    I started working on a salsa importer in UDD. It still needs some
    polishing and Web pages to expose interesting results, but it already provides the following information:

    * 37641 source packages in trixie/main
    * of which 36083 declare a VCS URL
    * of which 34644 point to a salsa project
    * of which 34370 point to a salsa project that exists

    [...]

    This is now available at https://udd.debian.org/cgi-bin/dep14stats.cgi

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Wed May 14 10:30:01 2025
    Am Wed, May 14, 2025 at 09:40:54AM +0200 schrieb Lucas Nussbaum:
    * 37641 source packages in trixie/main
    * of which 36083 declare a VCS URL
    * of which 34644 point to a salsa project
    * of which 34370 point to a salsa project that exists

    [...]

    This is now available at https://udd.debian.org/cgi-bin/dep14stats.cgi

    Thanks a lot
    Andreas.

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)