update dependencies in debian
What dependencies do need updates in debian for the standalone proxy?
Designs
- #40399Pluggable transports and bridges are reliable, resilient, diverse, and scalable
Activity
added Next Project 146 labels
assigned to @meskio
marked this issue as related to #40399
dependency go.mod version debian version can use debian version github.com/aws/aws-sdk-go-v2 1.32.2 1.30.3 
github.com/golang/mock 1.6.0 1.6.0 github.com/gorilla/websocket 1.5.3 1.5.3 github.com/miekg/dns 1.1.62 1.1.62 github.com/pion/stun/v3 3.0.0 0.4.0 
github.com/pion/webrtc/v4 4.0.1 3.1.56 github.com/prometheus/client_golang 1.20.5 1.20.5 github.com/smartystreets/goconvey/convey 1.8.1 1.6.4 github.com/stretchr/testify 1.9.0 1.9.0 github.com/txthinking/socks5 v0.0.0-20230325130024-4230056ae301 - github.com/xtaci/kcp-go/v5 5.6.8 5.6.1 github.com/xtaci/smux 1.5.31 1.5.16 github.com/refraction-networking/utls 1.6.7 1.2.1 
gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/ptutil v0.0.0-20240710081135-6c4d8ed41027 v0.0.0-20240710081135-6c4d8ed41027 gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/goptlib 1.6.0 1.6.0 golang.org/x/net 0.30.0 0.27.0 Edited by meskio-
Looks like the repo of the goptlib package is updated to 1.5.0, but that version is not in debian. I'm asking about it to the maintainers: https://alioth-lists.debian.net/pipermail/pkg-privacy-maintainers/2024/004696.html
This issue has been waiting for information two weeks or more. It needs attention. Please take care of this before the end of 2024-12-20. ~"Needs Information" tickets will be moved to the Icebox after that point.
(Any ticket left in Needs Review, Needs Information, Next, or Doing without activity for 14 days gets such notifications. Make a comment describing the current state of this ticket and remove the Stale label to fix this.)
To make the bot ignore this ticket, add the bot-ignore label.
added Stale label
just learned about this issue, i was looking at #40105 instead... those two should probably be linked!
i just uploaded the latest goptlib in debian. if i find the cycles, i might upload ptutil as well, but i've asked the #debian-golang folks if we can just vendor it for now.
i haven't checked the other deps, i'd assume they don't need an update unless the build fails, in the short term.
-
i think i managed to package ptutil:
there's still a bunch of build failures, some weird, some are probably just more build-deps that need to be added to the control file, but i think we're getting pretty close.
it might be worth filing a bug with the golang-github-pion-webrtc.v3 package, as that one will clearly need an update, and that won't be trivial because it will likely be a "NEW" package.
marked this issue as related to #40105
-
@anarcat Amazing work, thank for packaging ptutil. I think it was fine to vendor it but nice to have it as package.
The latest snowflake release depends on pion webrtc v3, the v4 is needed for main but we haven't release anything with it yet (I was looking at main when writing that table). So for now we can package the currentl snowflake with the version in debian. And in the mean time let's see if we can get webrtc v4.
I just submited a bug asking about v4, let's see. The package author has being fairly responsive in the past.
-
The bug on debian side: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089538
-
ptutil is now in the NEW queue: https://ftp-master.debian.org/new/golang-ptutil_0.0~git20240710.6c4d8ed-1.html
-
Got into Debian: https://packages.debian.org/sid/golang-ptutil-dev