[Koha-bugs] [Bug 26893] New version of JSON::Validator (D11) break our REST API routes

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26893

--- Comment #17 from David Cook <dcook at prosentient.com.au> ---
(In reply to Mason James from comment #16)
>
> i asked for 'pinning' advice in the debian #packaging irc channel
> 
> it's impossible to pin an older package without instructing users to
> manually add an entry to their /etc/apt/preferences.d dir
>

Ahh right. In hindsight, I have always manually added entries for pinning.
Silly me. 

> we could automate that task within koha-common, or another helper package -
> but that is probably considered inappropriate behaviour for a package (for
> security reasons)
> 
> 
> the workaround for pinning, is to name the package using the +really
> convention described here -> 
> https://www.debian.org/doc/debian-policy/ch-controlfields.html

Interesting! I'd never heard of +really, although that still sounds like a bit
of a different scenario.

I think that there is a 3rd option. With HTTP::OAI, we use the older version in
Koha's Apt repo and don't use the Debian version which is too new. 

"libhttp-oai-perl (>= 3.2) | libhttp-oai-3.27-perl, libhttp-oai-perl (<< 4.0) |
libhttp-oai-3.27-perl"

http://debian.koha-community.org/koha/pool/main/libh/
https://packages.debian.org/bullseye/libhttp-oai-perl

That seems like the same thing that we'd want to do here.

-- 
You are receiving this mail because:
You are watching all bug changes.