converters: Preserve GPG signatures on releases

Since version 0.19.10 (more specifically, this commit: https://github.com/dulwich/dulwich/commit/72aec0c79fb395689e40f9228df93e2a39cf8fb0), Dulwich strips GPG signatures from the 'message' attribute of Tag objects, and stores it in a new attribute, 'signature'.

This means we were silently dropping all signatures from releases.

---

Migrated from D6045 (view on Phabricator)

Build is green

Patch application report for D6045 (id=21866)

Rebasing onto 9e52708e...

Current branch diff-target is up to date.

Changes applied before test

commit c67ab0269ef2ed4e87799f0140e1358a9a0ddce4
Author: Valentin Lorentz <vlorentz@softwareheritage.org>
Date:   Fri Jul 30 10:53:53 2021 +0200

    converters: Preserve GPG signatures on releases
    
    Since version 0.19.10 (more specifically, this commit:
    <https://github.com/dulwich/dulwich/commit/72aec0c79fb395689e40f9228df93e2a39cf8fb0>),
    Dulwich strips GPG signatures from the 'message' attribute of Tag objects,
    and stores it in a new attribute, 'signature'.
    
    This means we were silently dropping all signatures from releases.

See https://jenkins.softwareheritage.org/job/DLDG/job/tests-on-diff/101/ for more details.

mentioned in issue swh/devel/experiments/swh-db-audit#75 (moved)

lgtm

Merge request was accepted

approved this merge request

Merge request was merged

closed

mentioned in issue swh/meta#3860