From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id 2N2+MKPmpWI7/wAAbAwnHQ (envelope-from ) for ; Sun, 12 Jun 2022 15:14:11 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id 8L2ZMKPmpWJffwAAauVa8A (envelope-from ) for ; Sun, 12 Jun 2022 15:14:11 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 7156DF947 for ; Sun, 12 Jun 2022 15:14:11 +0200 (CEST) Received: from localhost ([::1]:43684 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o0NPu-0002IT-Fv for larch@yhetil.org; Sun, 12 Jun 2022 09:14:10 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:42946) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o0NPm-0002Ha-I9 for guix-patches@gnu.org; Sun, 12 Jun 2022 09:14:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:32930) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1o0NPm-0000m5-9i for guix-patches@gnu.org; Sun, 12 Jun 2022 09:14:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1o0NPl-0008DY-VA for guix-patches@gnu.org; Sun, 12 Jun 2022 09:14:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#55903] [PATCH 25/41] gnu: Add go-github-com-protonmail-go-crypto-openpgp. Resent-From: "(" Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 12 Jun 2022 13:14:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 55903 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: "Maxime Devos" , <55903@debbugs.gnu.org> Received: via spool by 55903-submit@debbugs.gnu.org id=B55903.165503962831558 (code B ref 55903); Sun, 12 Jun 2022 13:14:01 +0000 Received: (at 55903) by debbugs.gnu.org; 12 Jun 2022 13:13:48 +0000 Received: from localhost ([127.0.0.1]:55060 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o0NPY-0008Cv-3g for submit@debbugs.gnu.org; Sun, 12 Jun 2022 09:13:48 -0400 Received: from knopi.disroot.org ([178.21.23.139]:35126) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o0NPW-0008Cm-51 for 55903@debbugs.gnu.org; Sun, 12 Jun 2022 09:13:46 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id BA08E43CEC; Sun, 12 Jun 2022 15:13:44 +0200 (CEST) X-Virus-Scanned: SPAM Filter at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oXUU4LqxXFAt; Sun, 12 Jun 2022 15:13:43 +0200 (CEST) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1655039623; bh=q1XSH69kIHkxjKKsmlMW5r5E5AHXg/s7q8Np09HJVgY=; h=Date:Subject:From:To:References:In-Reply-To; b=a95eQ04b1iKst1eWTzqxZzR0YIaH9OeXgAJK4stGCSPvYhoKCDl4m1Dr/4FUKW9Rg 0lWpVSpOyzzt9O9WD3KXdy3KFhUb8wmDqGED+bhcANGGuAQvl+YDRWT7omIfdZOKK/ o1p5XBG/nn/Y1O+IL6uNA8XzfqJB5UA7coWuJiF5WDcxZJLAZlcl19v9IBt8urVfGj 6XdRKkGySlwBZI5xt7FiRaM7AXALpOe+VnIKIWrXu4JhuviS60xxguj4grTzztIfK/ leXstODKOs6tc02jjBzvQdG6t9+U2HtHEKImo5r91PZFOVZ48CZgIo+9RPdpYbRT3p Njp0qroDlIjRw== Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=UTF-8 Date: Sun, 12 Jun 2022 14:13:43 +0100 Message-Id: References: <20220611191653.15471-1-paren@disroot.org> <20220611191653.15471-25-paren@disroot.org> <8bda65b813803639b127a174bbd0a74b3d383858.camel@telenet.be> In-Reply-To: X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" Reply-to: "\(" X-ACL-Warn: , "\( via Guix-patches" From: "\( via Guix-patches" via X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1655039651; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=ZA3Ru/GYNpqZd4VYwh68GBCUbnnHBNq6sLGghyZSsOs=; b=KuVFhZAvo+SrN1qmqC31V07jWl4eLMqf8SuBCUKol3i7XAzHDUM8iuhWVt3f3wtkCUCsUI KUxOzfOMcv8EQlbHnPKX62U57xVhi3VUTIm7hLWnNMco6fMVM64sk1hAxRGmqWbYTMK13a Ti77q9ZFwpHqN5uK5PsBZJedAnNN3C0B2zPxH7qitB3ZrnYpx6FOWcLlmFT7xMjVy6GJSW 9mJYxbK5qhsTgCKAghugXmVx5WIx+RNXFilj4WAIZSyO58VxtCHWPfQNSgkWivcvvwvyjh XL/1OiJ/z/MJTGz6fR9zEBLuD3Ku0JSW6gb20+EPFvTDNy5Eo3lcfIlbDHPJRw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1655039651; a=rsa-sha256; cv=none; b=qJ/grU229ysIibgjVyIddijfcYXPTqRwh/6y4id83R77beGohg9yuaMT2aP4TWYx18DpI3 GeFb5i0eHH0rZnK29mHekbtt3t+L6bMuFuYzjIyb86ncwqgRV0OzHET8FQpWPbmrL5PKhf HJDRWuu6p4yWuEhERA1JN76O49tbpzvR8OZcqxjrVk4zgUlc5+C8SDypyszf9/AkLNIXTo L3Yjx2/HLm5wsFx8KA8xHE4K2TtpMZzuAWZQ30FS8Xtxtc+kxXf71jdILsWeD1opyS+pQD na2wpQ8B6yODSdSfneRZC47rQwuGBsjNbAK4+EYGmYDEaxXRQJNbEaImrzon4Q== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=disroot.org header.s=mail header.b=a95eQ04b; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -2.49 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=disroot.org header.s=mail header.b=a95eQ04b; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 7156DF947 X-Spam-Score: -2.49 X-Migadu-Scanner: scn1.migadu.com X-TUID: zToaQdXkTC/K On Sun Jun 12, 2022 at 1:53 PM BST, Maxime Devos wrote: > we can refuse to package impacted packages until things improve. I'm not sure boycotting packages is a good idea... If we did that, there'd be a _lot_ of useful Rust and Go packages that we'd be refusing to package. Anyway, I think it'd probably just drive people even further away from distribution package management towards the "modern" (read: insecure, bloated, and inherently flawed) stuff like Docker and Flatpak. > Or if upstream is unmaintained, point the go-golang-org-x-crypto package > at the protonmail fork. Seems a little risky just to avoid packaging one fork. It's possible the tw= o have diverged since the protonmail version was created, too. > Go packaging needs to become less cracy. We don't have to participate > in spreading the dependency hell. I agree! It's an awful situation created by fundumentally borked dependency management systems. But I don't see anything we can do about it other than try to convince people that carelessly adding dependencies is Not A Good Idea.