From: spwhitton@spwhitton.name 
  
 Hello, 
  
 On Wed 01 Oct 2025 at 02:07pm +02, Simon Josefsson wrote: 
  
 > Ian Jackson  writes: 
 > 
 >> Package: dgit-infrastructure 
 >> Version: 13.13 
 >> 
 >> Simon Josefsson writes ("webhook from browse.dgit.debian.org?"): 
 >>> Hi.  I'm playing with the idea of a Debian Blend that build and publish 
 >>> packages directly from git in CI/CD, based on sources on 
 >>> browse.dgit.debian.org.  I think most things are feasible to implement, 
 >>> but getting notifications of new uploads is a tricky concern.  Is it 
 >>> possible to setup a webhook from when browse.dgit.debian.org gets a new 
 >>> version of a package somehow?  Maybe other services will need this too, 
 >>> so you may want to design a generic mechanism.  Or is there one already? 
 >> 
 >> How exciting! 
 >> 
 >> We should definitely have a way to support this. 
 >> 
 >> I'm not sure a webhook is right, We would need to maintain a 
 >> subscriber list, and it might get rather long. 
 >> 
 >> Perhaps we should send updates to a mailing list.  Email already has 
 >> retries, subscription management, and so on.  We could use 
 >> debian-*-changes, but that might be controversial (and we'd need to 
 >> figure out *which* list to post to).  Or we could have a new list. 
 > 
 > E-mail is okay, but it is not synchronous.  A separate mailing list 
 > seems fine, and I think everything going into browse.dgit.debian.org 
 > could be posted to the same (new) list, using some standardized 
 > machine-readable format. 
 > 
 > Long-term, I think I would prefer something synchronous instead, but 
 > this is really not an urgent request, mostly a question if there already 
 > exists some method to get notifications of new tag2upload tags somehow. 
  
 I think the biggest issue is maintaining a list of subscribers. 
 dgit.debian.org doesn't have readwrite access other than through SSH. 
 So either we implement some subscribing and unsubscribing mechanism 
 accessible to DDs via SSH (urgh), or a whole new web interface for doing 
 it.  Neither are very palatable. 
  
 Whereas if we use a mailing list then this problem is solved for us. 
  
 -- 
 Sean Whitton 
  
 --=-=-Content-Type: application/pgp-signature; name="signature.asc" 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQJNBAEBCgA3FiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAmjeZLMZHHNwd2hpdHRv 
 bkBzcHdoaXR0b24ubmFtZQAKCRBpW3rkvwZiQCt/D/90pKxEmPkKVe+grrHlb3pX 
 P00m4tUjgNylfq+TTpSruOfO4VLpPyOW2QVisQeCfT0ifKaqOmzLdd2pcEPlhUtp 
 GMptsXrCzjPlvoZCChrekhAxZC+eggmCcaJIrLwdREoNoegNEN6lsxB3CmMH5Dgm 
 CCmp8yckhqydVblQfN3s4fml/jYq62u2xbStaj9cnXit3hiGi+9HZmeUd/uASDbo 
 TFMQYdjOVUd7C415Tf04g68urYbpvO3oaZPi25QNocodxLIhlvGd/UHDCnX34+R2 
 7jZsb7I0fFhudzZlDqUalV3pMeq/aGSENnNVKabiPRp2wRXvNaxTbgOD+F/M1QCa 
 /o1NG+cQ9aRAvWQ3eKodHkBl+noRiXlYxmuXLJsAquxUbGRAyQo3D+1dns9+bbWz 
 Hy30zGN7KENGrNytVXSxSoVG7xlT9fKk4glMjgr7eh8bX7xrmUPdFrYgt82plJkN 
 AJpqvmf2Fg08cvFtNSKlDuC+v9Jb4yXHvvIO3OUj2xKfRwzCvEvqm0IXp+XbHGLv 
 ANpPO2HwlCONu5gZMEeGrGCMcwMJpbrathHkfKLxi+UaTjtXHtlT1l1sM2VT63jV 
 Ipz8/6pr5od48mp0cZ7F5QQugmHqbIP/Z2uKuWJyQAgAIjnsT5B0K5eKeUwJnoVI 
 I4zQl8rB0LMHtPRLndIb+w==zLP0 
 -----END PGP SIGNATURE----- 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)