From: tobi@debian.org   
      
   Control: tags -1 moreinfo   
      
   Hi Christian,   
      
   - d/copyright, Files-Exluded:   
     O: snuffleupagus source: repackaged-source-not-advertised [debian/copyright]   
      
     This override is wrong, lintian is right:   
     You are repacking, you need to indicate that. When not repacking due   
     to licenses, you use the suffix +ds.   
      
   - the gcc patch:    
     - is missing dep3 headers. They are very helpful in assessing new   
       patches…   
     - should it be upstreamed? I think so, but the dep3 header Forwarded would   
   convey   
       that information.   
      
   (side note: upstream https://snuffleupagus.readthedocs.io/downlo   
   d.html#debian-and-ubuntu   
   still says "not available on Debian" -- possibly send them a patch   
   updating that page?   
      
   Can you run the test suite also as autopkgtests (possibly enabling the   
   skipped tests?)  -- not needed for this upload, but nice to have in the   
   future.   
      
   --    
   tobi   
      
      
   On Sun, Feb 01, 2026 at 09:32:05PM +0100, Christian Göttsche wrote:   
   > Package: sponsorship-requests   
   > Severity: important   
   >    
   > Dear mentors,   
   >    
   > I am looking for a sponsor for my package "snuffleupagus":   
   >    
   >  * Package name     : snuffleupagus   
   >    Version          : 0.13.0-1   
   >    Upstream contact : Julien (jvoisin) Voisin   
   >    
   >  * URL              : https://snuffleupagus.readthedocs.io   
   >  * License          : LGPL-3, PHP-3.01   
   >  * Vcs              : https://salsa.debian.org/cgzones/snuffleupagus   
   >    Section          : php   
   >    
   > The source builds the following binary packages:   
   >    
   >   php-snuffleupagus - Security module for php7 and php8   
   >    
   > To access further information about this package, please visit the   
   > following URL:   
   >    
   >   https://mentors.debian.net/package/snuffleupagus/   
   >    
   > Alternatively, you can download the package with 'dget' using this command:   
   >    
   >   dget -x https://mentors.debian.net/debian/pool/main/s/snuffl   
   upagus/snuffleupagus_0.13.0-1.dsc   
   >    
   > Changes since the last upload:   
   >    
   >  snuffleupagus (0.13.0-1) unstable; urgency=medium   
   >  .   
   >    * New upstream version 0.13.0   
   >      - fixes CVE-2026-22034   
   >  .   
   >    * Adjust to moved PHP 8 default rules   
   >    * d/control:   
   >      - drop priority and R^3 fields with default value   
   >      - bump to std version 4.7.3 (no further changes)   
   >    * d/watch: rewrite in version 5   
   >    * d/copyright: bump years   
   >    * d/patches: add nonstring attribute to fix GCC 15 build (Closes:   
   #1126792)   
   >    
   > Regards,   
   >        Christian Göttsche   
   >    
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAABCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmmQQBoACgkQkWT6HRe9   
   XTZQ1BAAw6UoZCFgyvGGdLYe9Lusrcz6FruFwjTTK/VwAB9LsquPJaW9Hk137vxo   
   EaleGx6y0crVY2VrepvZZPa9bPmRvlrVTIit98eXUMQKU1LVkLA81TxEzzsdbybj   
   K/vmsbO9qNGdzeWPZVlMZtk1GSez1oJS4WHRK5sGopK2y151dgvGaidQ1CaiP6IX   
   UhGo7v3vAE5Lr24cs3ezw1a4eKgRKWhaNQ1uLx3KisGSW6zwV2XY3zU4D4K4ZpNz   
   9C/748Qf/8isy6plGyca2LWBAqiSgc+TyaBsk91KfgKNpek9IY9LaTyKtWozDIob   
   JOtuT9wGDz2ap6Fs9Is5L51IFjbDgR2rL8jNTqVS5GQP1h1VA6vvB4OOpf6R67rn   
   qmScMZ4tkcSaIS+nuY2pc1px8Qm7A7PL/bVyAB8TWMdMoIrUZbn4Onlour6/SkrV   
   ikv0/7QXlOzPE4gEwy3sN/t853OjA+6Hid+G+qHERFUWGOv3ewUAWaM7Qndf4wNl   
   aWK5rWFjBx+3v/+0dVw6MOhgVexEc6LPkWsIej2X8fepednsSB0nRwNkQJ4+Fvb7   
   zXsM6084E5DyjOKsRIaXtL9ep+O7K0rL3YGOfLvE+gIIrBUY/7FDL1GdXqZsinZ/   
   tT3xgLvX7y6sBp02u2ty69loZn8pJTNnHY+T3Oe0bUGO8vF8i4U=   
   =w2fs   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)