Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 555266 - dev-util/pkgcheck: add a warning about outdated upper bound dependencies
Summary: dev-util/pkgcheck: add a warning about outdated upper bound dependencies
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Michał Górny
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-07-18 12:17 UTC by Sergei Trofimovich (RETIRED)
Modified: 2022-07-12 03:21 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sergei Trofimovich (RETIRED) gentoo-dev 2015-07-18 12:17:48 UTC 
Background:
  haskell packages extensively use upper bounds for haskell depends.

  It's a widespread conscious upstream decision
  (no need to read, but for curious: https://wiki.haskell.org/Package_versioning_policy)

  Recent example is bug #554768 where stable pandoc-1.12.1 had the following
    RDEPEND=">=dev-haskell/text-0.11 <dev-haskell/text-0.12"
  text-0.11 was stable for a while and all was well

  Then text-1.1.1.3 got stabilised as a bug #550400 and users started reporting various dependency blockers.
  I'll need to tweak/fast-stabilise pandoc after the fact.

The request itself:
  Teach repoman to find "outdated" dependencies and warn about them.

Examples:
  package A:
   - SLOT=0, VERSION=1.0, RDEPEND="", KEYWORDS=~amd64
   - SLOT=0, VERSION=2.0, RDEPEND="", KEYWORDS=~amd64
  package B:
   - SLOT=0, VERSION=1.0, RDEPEND="=A-1.0*", KEYWORDS=~amd64
   - SLOT=0, VERSION=1.5, RDEPEND=">=A-1.0 <>=A-1.9", KEYWORDS=~amd64
   - SLOT=0, VERSION=2.0, RDEPEND="=A-2.0*", KEYWORDS=~amd64
repoman should warn about:
    B-1.0.ebuild: not matching latest A-2.0 in SLOT=0
    B-1.5.ebuild: not matching latest A-2.0 in SLOT=0

Thanks!
Comment 1 Sergei Trofimovich (RETIRED) gentoo-dev 2015-08-30 11:35:41 UTC 
Another example: https://bugs.gentoo.org/554002
Comment 2 anonymous 2018-03-01 23:38:15 UTC 
What is preventing this issue from being solved?
Comment 3 Sergei Trofimovich (RETIRED) gentoo-dev 2018-03-01 23:44:20 UTC 
(In reply to crocket from comment #2)
> What is preventing this issue from being solved?

Last of a patch in my understanding.
Comment 4 Sergei Trofimovich (RETIRED) gentoo-dev 2018-03-01 23:44:32 UTC 
(In reply to Sergei Trofimovich from comment #3)
> (In reply to crocket from comment #2)
> > What is preventing this issue from being solved?
> 
> Last of a patch in my understanding.

s/Last/Lack/
Comment 5 anonymous 2018-03-02 00:10:22 UTC 
Do you mean lack of interest or manpower rather than rejection of upper bound checks?
Comment 6 Zac Medico gentoo-dev 2018-03-02 00:17:03 UTC 
It would be a useful enhancement. Also, this could check for things like USE or subslot dependencies that only match older versions.
Comment 7 Sergei Trofimovich (RETIRED) gentoo-dev 2018-03-02 07:22:19 UTC 
(In reply to crocket from comment #5)
> Do you mean lack of interest or manpower rather than rejection of upper
> bound checks?

Don't think anyone can answer this question for project open to outside contribution.
Comment 8 anonymous 2018-10-24 12:08:24 UTC 
I think this issue is more urgent than other haskell issues since it blocks "emerge -quDN @world".

Is there a way to work around this issue other than to wait for fixes to come to haskell overlay?
Comment 9 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-12 03:18:41 UTC 
repoman support has been removed per bug 835013.

Please file a new bug (or, I suppose, reopen this one) if you feel this check is still applicable to pkgcheck and doesn't already exist.
Comment 10 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-12 03:21:05 UTC 
I think this might still be relevant for pkgcheck.