Path: csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!bofh.it!news.nic.it!robomod From: Nilesh Patra Newsgroups: linux.debian.bugs.dist,linux.debian.maint.python Subject: Bug#1003567: Please make a separate package for mistune 2.x Date: Fri, 04 Feb 2022 17:10:02 +0100 Message-ID: References: X-Original-To: Julian Gilbey , Pierre-Elliott =?UTF-8?Q?B=C3=A9cue?= X-Mailbox-Line: From debian-bugs-dist-request@lists.debian.org Fri Feb 4 16:09:08 2022 Old-Return-Path: X-Spam-Flag: NO X-Spam-Score: -5.651 Reply-To: Nilesh Patra , 1003567@bugs.debian.org Resent-To: debian-bugs-dist@lists.debian.org Resent-Cc: Debian Python Team X-Debian-Pr-Message: followup 1003567 X-Debian-Pr-Package: python3-schema-salad X-Debian-Pr-Source: python-schema-salad MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="3vRNye3AAcqdNNXwQ0eVobsqT1ADM491R" X-Greylist: delayed 547 seconds by postgrey-1.36 at buxtehude; Fri, 04 Feb 2022 16:07:20 UTC X-Debian-Message: from BTS X-Mailing-List: archive/latest/1703541 List-ID: List-URL: Approved: robomod@news.nic.it Lines: 81 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: "Michael R. Crusoe" , 1003567@bugs.debian.org, debian-python@lists.debian.org X-Original-Date: Fri, 4 Feb 2022 21:27:59 +0530 X-Original-Message-ID: X-Original-References: <20220111213844.BE33D2C006E@pimeys.fr> <878rurbmr3.fsf@jaatynyt> <20220111213844.BE33D2C006E@pimeys.fr> Xref: csiph.com linux.debian.bugs.dist:1092045 linux.debian.maint.python:13919 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --3vRNye3AAcqdNNXwQ0eVobsqT1ADM491R Content-Type: multipart/mixed; boundary="DVhHPc22iAIj3rkJ9ETotL5idPepug21b"; protected-headers="v1" From: Nilesh Patra To: Julian Gilbey , =?UTF-8?Q?Pierre-Elliott_B=c3=a9cue?= Cc: "Michael R. Crusoe" , 1003567@bugs.debian.org, debian-python@lists.debian.org Message-ID: Subject: Re: Please make a separate package for mistune 2.x References: <20220111213844.BE33D2C006E@pimeys.fr> <878rurbmr3.fsf@jaatynyt> In-Reply-To: --DVhHPc22iAIj3rkJ9ETotL5idPepug21b Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 2/4/22 9:18 PM, Julian Gilbey wrote: > Basically, the mistune upstream author has completely messed up on > this by making what is essentially a completely different package with > superficially similar functionality but the same name. True. =20 > [...] > _mistune.py within the Debian package, > and have nbconvert do "import nbconvert.filters._mistune as mistune" > (see /usr/lib/python3/dist-packages/nbconvert/filters/markdown_mistune.= py). > That seems like an eminently sensible solution to this problem. But that'd lead to a number of mistune's embedded copies in a huge number= of packages; since majority of the rev-deps (when I last checked) haven't adapted to this new version. W= hen they do, and it becomes a overhead to fix each one later. Even worse, if we discover a security problem sometime later, then all su= ch packages would be effected, and that honestly does not look like a good idea to me. I somehow do not understand the urgency of uploading this newer version, = as the maintainer said: | I intend to upload src:mistune 2.0.0 to unstable between March the | 15th and April the 15th (depending on the progress of its | reverse-dependencies). We could simply wait a little more for the dust to settle, IMHO. Regards, Nilesh --DVhHPc22iAIj3rkJ9ETotL5idPepug21b-- --3vRNye3AAcqdNNXwQ0eVobsqT1ADM491R Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEEPpmlJvXcwMu/HO6mALrnSzQzafEFAmH9TQcFAwAAAAAACgkQALrnSzQzafEV XA//Qv7QkxPWODoLcB8IpDdxoWBhB/FuNhfx7zBoPEzmf6ProtVGUb8swGSXG3LQyggdCGAlx8Vs 8meoBZfKQGwW3waqzyc1FRLs7v9CAM75O44Hp1VR/ZHduOEhk/fkyspALA1xfRcK+Yj5I90A9Ewk 6QCMpcu+NdmBlRkU669X77RGnJ8un9NLPa5ilgwwKcWhoVlKKasl/kAECsqYmFQ9+Dkn38PtaYND eutGlMOhSqRYAjWQNLEC1F11/mgG4TAW0rveVzfBiAdbm0yJy0q58ldJZbldvHAXji1gvu/QRgWN 0wYKYk/SeAJe+P0Bt8eS2wO7HMQm9CvzcGIYv943blFYDWZRzLMmIPal2apEshlL0P1Fyk0ngZc+ mY5ofXeaoVMO3IxRViWz0E8/qqMFlJQuJDsj1lVEciA6wI+2Q+Xl7G64spZQdDVxJ+FC2cGT1N/a VMVs62AJ5jOP2OUBoew2lAM7tRUpb2DFSZ1/T7XlOuQ8rWd7f5MLURbRf8yq0goFIh/WgKOkINS/ A3vv7Gvfhyi1TmwSIL8rbH+ZEPCF3QDScQM64wZnTt5EC+UnOx+XeaMX2WjIfS3sdDGOQIPzaYMo gzvOapF3tGKK17bKToVdRe8qDmEWQq0UYXY52Tbg41Zsx6e/RNab3gmROK3S+s3UA3dj6BEzroDq hco= =rlsw -----END PGP SIGNATURE----- --3vRNye3AAcqdNNXwQ0eVobsqT1ADM491R--