Re: PKGREVISION conflict between HEAD and stable

[Jonathan Perkin <jperkin%mnx.io@localhost>]

* On 2023-11-15 at 16:45 GMT, Manuel Bouyer wrote:

> I've commited security patches for Xen packages, and bumped PKGREVISION.
> Now I'd like to get these fixes in the stable branch.
> The problem: xentools415 also got a PKGREVISION bump for a dependancy change.
>
> At this time, HEAD is at xentools415-4.15.5nb2, -stable is at
> xentools415-4.15.5. If I request pullup,
> -stable will either get xentools415-4.15.5nb1 or xentools415-4.15.5nb2.
> If we go with xentools415-4.15.5nb1, then we have two different
> xentools415-4.15.5nb1 packages, one with the security fix and one without.
> If we go with xentools415-4.15.5nb2, then we have two different packages
> (different dependancies) with the same name, which may bread 2023Q3->2023Q4
> upgrades.
>
> How do we deal with this ?

For the record, the way pkgin deals with this is by effectively ignoring 
version numbers.  If a remote package is different then it is marked 
either as a refresh (if the version is identical but the BUILD_DATE is 
different) or an upgrade (if the version is different).

Currently downgrades are reported as upgrades, which is a little 
confusing to users.  I'll hopefully update the output for this case 
soon.

--
Jonathan Perkin   -   mnx.io   -   pkgsrc.smartos.org
Open Source Complete Cloud   www.tritondatacenter.com