[Pkg-roundcube-maintainers] Bug#814664: Bug#814664: Incorrect hardcoded php-auth and other dependencies

[Sandro Knauß]

Hey,

thanks for reporting this bug. I actually try to use pkg-php-tools, but don't 
get the same result like you.

I installed the composer.json-dist to roundcure-core package and than run
override_dh_phpcomposer:
 dh_phpcomposer --sourcedirectory=$(CURDIR)/debian/roundcube-core/usr/share/
roundcube

but with that I get:
phpcomposer:Debian-require=php5-common, php5-common (>= 5.3.7), php-roundcube-
plugin-installer (>= 0.1.6), php-roundcube-plugin-installer (<< 0.2~~), php-
auth-sasl (>= 1.0.6), php-auth-sasl (<< 1.1~~), php-net-idna2 (>= 0.1.1), php-
net-idna2 (<< 0.2~~), php-net-sieve (>= 1.3.4), php-net-sieve (<< 1.4~~), php-
mail-mime (>= 1.9.0), php-mail-mime (<< 1.10~~), php-net-smtp (>= 1.7.1), php-
net-smtp (<< 1.8~~), php-patchwork-utf8 (>= 1.2.3), php-patchwork-utf8 (<< 
1.3~~)
phpcomposer:Debian-require-dev=php-crypt-gpg, phpunit
phpcomposer:Debian-suggest=php-net-ldap2, php-net-ldap3

do i miss an option for  dh_phpcomposer to get rid of these << XX~~ parts? Or 
are they needed?

regards,

sandro


--
Am Saturday 13 February 2016, 15:43:06 schrieb David Prévot:
> Package: roundcube-core
> Version: 1.1.4+dfsg.1-1
> Severity: important
> 
> Hi,
> 
> According to composer.json-dist, there shouldn’t be any php-auth
> dependency. Instead, it should read something like:
> 
> Depends: php-auth-sasl (>= 1.0.6),
>          php-net-idna2 (>= 0.1.1),
>          php-net-sieve (>= 1.3.4),
> 	 php-mail-mime (>= 1.9.0),
> 	 php-net-smtp (>= 1.4.2),
> 	 php-patchwork-utf8 (>= 1.2.3)
> Suggests: php-net-ldap2 (>= 2.1.0),
>           php-net-ldap3
> 
> pkg-php-tools may be useful to translate those dependencies
> automatically, and to keep them up to date.
> 
> Since php-auth “is not maintained” [0], we’d like to get read of it
> ASAP, thus the important severity.
> 
> 	0: https://pear.php.net/package/Auth
> 
> I’ll open a serious bug against php-auth, and block it by this one. You
> may wish to update your package before it gets auto-removed.
> 
> Regards
> 
> David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-roundcube-maintainers/attachments/20160223/7cbb6466/attachment.sig>