Problem installing Patchman packages on Debian 13 (Trixie)

[Aleksey-Maksimov]

Hello.

There are two issues when using Patchman on Debian 13 (Trixie):

1. The repository https://repo.openbytes.ie/patchman/debian doesn't have a branch for Debian Trixie.

2. If we try to use the Debian Bookworm branch in Debian Trixie, we get a package manager warning about a weak SHA1 key.

# apt update --audit
...
Hit:5 https://repo.openbytes.ie/patchman/debian bookworm InRelease
...
Warning: https://repo.openbytes.ie/patchman/debian/dists/bookworm/InRelease: 
Policy will reject signature within a year, see --audit for details
Audit: https://repo.openbytes.ie/patchman/debian/dists/bookworm/InRelease: 
Sub-process /usr/bin/sqv returned an error code (1), error message is:
   Signing key on 198AF25376E7ACD8E123B0CDD30FB02B0412F522 is not bound:
              primary key
     because: No binding signature at time 2025-08-06T02:03:56Z
     because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
     because: SHA1 is not considered secure since 2026-02-01T00:00:00Z

[furlongm]

v4 will be released for trixie, hopefully sometime soon! There are a few bits and pieces still to fix up.

Also noted that it looks like a new key will be needed for the trixie repo.

[furlongm]

New key added for trixie, updated installation instructions are in p4-install branch. Packages for trixie are pending some final v4 fixes.

[Aleksey-Maksimov]

Thank you. We are waiting for the new version and instructions on upgrading from version 3.