[deb] The regex for valid package names in relationships does not allow names including "." (and is missing a couple of constraints)

[ccooke]

Debian policy is that package names may include a period, and this is used for a number of default packages (for instance, ruby2.7).

Binary package documentation points to the Source package docs:
https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-package
Source package documentation includes ".":
https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-source

Current text:

Package names (both source and binary, see Package) must consist only of lower case letters (a-z), digits (0-9), plus (+) and minus (-) signs, and periods (.). They must be at least two characters long and must start with an alphanumeric character.

The regex in

fpm/lib/fpm/package/deb.rb

Line 41 in 7881705

RELATIONSHIP_FIELD_PATTERN = /^(?<name>[A-z0-9_-]+)(?: *\((?<relation>[<>=]+) *(?<version>(?:[0-9]+:)?[0-9A-Za-z+~.-]+(?:-[0-9A-Za-z+~.]+)?)\))?$/

does not correctly apply the rules, as it does not allow "." or apply the alphanumeric and minimum-two-character limits.

[jordansissel]

Nice! Also, thank you for citing references as this helps research and also helps us verify things as Debian policys may change over time <3

[jordansissel]

fpm 1.15.0 is released and contains this improvement.