No UPDATING entry and some ports missed in curl update

[Kevin Oberman]

On Fri, Jul 12, 2013 at 11:14 AM, olli hauer <ohauer at gmx.de> wrote:

> On 2013-07-12 19:47, Kevin Oberman wrote:
> > It is a good thing to get curl up to date and I appreciate the effort
> > involved by you and several others.
> >
> > While the curl port was updated to 7.31.0 and lots of ports using the
> > sharable had bumps, I have found three ports on my system that link to
> > libcurl and were not bumped: devel/git, textproc/rasqal, and
> > textproc/redland.
> >
> > There was no entry in UPDATING, so there was no warning that saving a
> copy
> > of the old sharable would be a good thing, either.
> >
>
> hm,
> $ svn info ftp/curl| grep ^Last
> Last Changed Author: sunpoet
> Last Changed Rev: 322824
> Last Changed Date: 2013-07-12 11:02:43 +0200 (Fri, 12 Jul 2013)
>
> $> svn info /usr/ports/devel/git | grep ^Last
> Last Changed Author: sunpoet
> Last Changed Rev: 322833
> Last Changed Date: 2013-07-12 15:54:25 +0200 (Fri, 12 Jul 2013)
>
> $ svn log devel/git
> ------------------------------------------------------------------------
> r322833 | sunpoet | 2013-07-12 15:54:25 +0200 (Fri, 12 Jul 2013) | 4 lines
> - Bump PORTREVISION for ftp/curl shlib change
> Notified by:    Rotluchs (via IRC)
>
> So the latest git revision is OK
>
>
> It seems the dependency list for textproc/rasqal textproc/redland is not
> correct
>
> $ grep -R curl textproc/rasqal/
> $ grep -R curl textproc/redland*
> (no output, so they fly under the bump radar)
>
> regarding your information this ports require LIB_DEPENDS+= curl...
>
> Maybe you can file a PR for this two ports.
>
>
Yep. All tree were caught after I updated my tree in later commits.  Looks
like all of the ports relevant to my systems are now covered. I'd still
like to see UPDATING have a note, though. Too many people will catch only
some version bumps (as I did), so I think a heads-up is still appropriate
for ports with this many dependencies.

As to LIB_DEPENDS, both rasqal and redland depend on libraptor2.so. raptor2
depends on libcurl.so, so the dependency is inherited quite properly. It is
simply neither practical nor appropriate to list every sub-dependency in
every port's Makefile. Worst cases are things like gnome and kde4. Keepin g
track of all of those manually would be a real pain in the neck and make
maintaining such complex ports impractcal and that is why the ports system
is designed to make this unnecessary. It gets even worse when, due to
options, a port may or may not link to some sharable.

Of course, this makes it impossible for quickly check for this sort of
things when a sharable has a version bump an this is why I think bumping
ports is simply inadequate.It is fairly trivial to check on ports on a
given system that require a version bump, but testing thousands of ports
for indirect dependencies does not do the trick.

-- 
R. Kevin Oberman, Network Engineer
E-mail: rkoberman at gmail.com