Bug#1040417: docker-compose V1 is depreciated.

[Peter Allebone]

Package: docker-compose
Version: 1.29.2-3

As per https://www.docker.com/blog/new-docker-compose-v2-and-v1-deprecation/

Docker V1 is depreciated.
This is still in Sid:
https://tracker.debian.org/pkg/docker-compose

Also this issue is present:
Problems while searching for a new upstream version high
uscan had problems while searching for a new upstream version:

In debian/watch no matching files for watch line
  https://github.com/docker/compose/tags .*/v?(1\S*)\.tar\.gz

Problem is v1 is no longer supported, so v2 should be compiled and used instead as there is no support from docker-compose developers anymore, yet latest version (Bookworm) of Debian still uses it.

Is this a problem?

Kind regards

Pete

[Peter Allebone]

Hi Leandro,

Thank you for this information. Hopefully it can be updated sometime, for now what do you suggest users of Debian do as V1 is depreciated now? Must we compile on our own?

Kind regards

Peter

On Wed, Jul 5, 2023 at 3:35 PM Leandro Cunha <leandro...@gmail.com> wrote:

Hi,

At the moment it would not be possible to update to the latest version
of docker compose version 2, due to the lack of dependencies for
building the package and there is a staff taking care of it. About the
deprecation, I think Andrej knows this and the whole Docker Compose
Team. I'm not part of this team, but I use the package frequently.

--
Cheers,
Leandro Cunha

[Leandro Cunha]

Hi,

I think it's possible to wait. Despite being deprecated, it is still
possible to use. I'll check in with the folks who are packaging the
dependencies for version 2 to see if I can help with anything.

--
Cheers,
Leandro Cunha

[Peter Allebone]

Thank you for your time, it is appreciated.

P

[Peter allebone]

Hi Leandro,

Apologies to bother you again. I just wanted to follow up and check if you had had a chance to check with the folks who are packaging the dependencies at this stage?

Kind regards
Pete

[Leandro Cunha]

Hi,

I've been talking to one of them these days and he's been busy lately.
But he said next month he should work on it. I should see if I can
help with something too.

--
Cheers,
Leandro Cunha

[Peter allebone]

Thank you Leandro :)

Kind regards,
Pete

> On Aug 16, 2023, at 19:39, Leandro Cunha <leandro...@gmail.com> wrote:
>
> Hi,

> <signature.asc>

[Michael Kesper]

Dear maintainers,

On Wed, 16 Aug 2023 20:39:25 -0300 Leandro Cunha
<leandro...@gmail.com> wrote:
> Hi,
>
> I've been talking to one of them these days and he's been busy lately.
> But he said next month he should work on it. I should see if I can
> help with something too.

As this software is really critical regarding security and does not get
ANY patches from upstream since May 2021 please remove it from Debian.

https://docs.docker.com/compose/migrate/#can-i-still-use-compose-v1-if-i-want-to

The final Compose V1 release, version 1.29.2, was May 10, 2021. These
packages haven't received any security updates since then. Use at your
own risk.

Best
Michael