Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.python > #13064 > unrolled thread

Please upload the latest version of python-flask-cors ready in git

Back to article view | Back to linux.debian.maint.python

Contents

  Please upload the latest version of python-flask-cors ready in git Louis-Philippe Véronneau <pollo@debian.org> - 2020-12-17 04:30 +0100
    Re: Please upload the latest version of python-flask-cors ready in  git Louis-Philippe Véronneau <pollo@debian.org> - 2020-12-17 21:40 +0100
      Re: Please upload the latest version of python-flask-cors ready in  git Louis-Philippe Véronneau <pollo@debian.org> - 2020-12-17 22:30 +0100
      Re: Please upload the latest version of python-flask-cors ready in  git Bastian Germann <bastiangermann@fishpost.de> - 2020-12-17 22:40 +0100
    Re: Please upload the latest version of python-flask-cors ready in  git Bastian Germann <bastiangermann@fishpost.de> - 2020-12-17 21:50 +0100
    Re: Please upload the latest version of python-flask-cors ready in git "Nicolas Dandrimont" <nicolas@dandrimont.eu> - 2020-12-18 12:40 +0100
      Re: Please upload the latest version of python-flask-cors ready in  git Louis-Philippe Véronneau <pollo@debian.org> - 2020-12-18 17:20 +0100

#13064 — Please upload the latest version of python-flask-cors ready in git

[Multipart message — attachments visible in raw view] — view raw

Hello!

Bastian Germann asked a month ago for the package python-flask-cors [1]
to be sponsored by someone from the Python Team.

Since you put the Team in "Uploaders", I'm writing to you to know if it
would be possible to make an upload from the latest git commit in Salsa.

Bastian fixed a CVE and a FTBFS bug (as well as updated the package) and
I did a few tweaks left and right.

I believe the package should thus be ready to upload as is, as the only
thing missing is "dch -r" :)

If you don't have the time to do so, I would be happy to make the upload
for you.

Cheers,

[1]: https://salsa.debian.org/python-team/packages/python-flask-cors

-- 
  ⢀⣴⠾⠻⢶⣦⠀
  ⣾⠁⢠⠒⠀⣿⡁  Louis-Philippe Véronneau
  ⢿⡄⠘⠷⠚⠋   pollo@debian.org / veronneau.org
  ⠈⠳⣄

[toc] | [next] | [standalone]

#13065 — Re: Please upload the latest version of python-flask-cors ready in git

[Multipart message — attachments visible in raw view] — view raw

On 2020-12-17 15 h 28, Bastian Germann wrote:
> Am 17.12.20 um 04:28 schrieb Louis-Philippe Véronneau:
>> Hello!
>>
>> Bastian Germann asked a month ago for the package python-flask-cors [1]
>> to be sponsored by someone from the Python Team.
>>
>> Since you put the Team in "Uploaders", I'm writing to you to know if it
>> would be possible to make an upload from the latest git commit in Salsa.
>>
>> Bastian fixed a CVE and a FTBFS bug (as well as updated the package) and
>> I did a few tweaks left and right.
>>
>> I believe the package should thus be ready to upload as is, as the only
>> thing missing is "dch -r" :)
>>
>> If you don't have the time to do so, I would be happy to make the upload
>> for you.
> 
> Just checked the RFS queue again and the package is gone from there. I
> would appreciate you sponsoring the package so it can migrate to bullseye.

I removed it since it cannot be sponsored by a member of the team at the
moment, as a consequence of Stewart putting the team in "Uploaders" and
not in "Maintainers".

As stated in the Team's policy [1], this means Stewart should be the one
making the upload, thus the email I sent him.

Otherwise, I would've gladly uploaded it myself.

Cheers,

[1]:
https://salsa.debian.org/python-team/tools/python-modules/-/blob/master/policy.rst#maintainership

-- 
  ⢀⣴⠾⠻⢶⣦⠀
  ⣾⠁⢠⠒⠀⣿⡁  Louis-Philippe Véronneau
  ⢿⡄⠘⠷⠚⠋   pollo@debian.org / veronneau.org
  ⠈⠳⣄

[toc] | [prev] | [next] | [standalone]

#13067 — Re: Please upload the latest version of python-flask-cors ready in git

[Multipart message — attachments visible in raw view] — view raw

On 2020-12-17 16 h 19, Bastian Germann wrote:
> Am 17.12.20 um 21:37 schrieb Louis-Philippe Véronneau:>> Just checked
> the RFS queue again and the package is gone from there. I
>>> would appreciate you sponsoring the package so it can migrate to
>>> bullseye.
>>
>> I removed it since it cannot be sponsored by a member of the team at the
>> moment, as a consequence of Stewart putting the team in "Uploaders" and
>> not in "Maintainers".
>>
>> As stated in the Team's policy [1], this means Stewart should be the one
>> making the upload, thus the email I sent him.
>>
>> Otherwise, I would've gladly uploaded it myself.
> 
> I see. The RC bug is open for 11 months, so a NMU might be justified.

Let's give Stewart some time (at least a week) to reply to my mail.

Considering this fixes a CVE and a FTBFS, I'll make an upload if we
don't hear from them. I guess I could make a team upload to DELAYED/7,
but that seems like extra work ;P

-- 
  ⢀⣴⠾⠻⢶⣦⠀
  ⣾⠁⢠⠒⠀⣿⡁  Louis-Philippe Véronneau
  ⢿⡄⠘⠷⠚⠋   pollo@debian.org / veronneau.org
  ⠈⠳⣄

[toc] | [prev] | [next] | [standalone]

#13068 — Re: Please upload the latest version of python-flask-cors ready in git

Am 17.12.20 um 21:37 schrieb Louis-Philippe Véronneau:>> Just checked 
the RFS queue again and the package is gone from there. I
>> would appreciate you sponsoring the package so it can migrate to bullseye.
> 
> I removed it since it cannot be sponsored by a member of the team at the
> moment, as a consequence of Stewart putting the team in "Uploaders" and
> not in "Maintainers".
> 
> As stated in the Team's policy [1], this means Stewart should be the one
> making the upload, thus the email I sent him.
> 
> Otherwise, I would've gladly uploaded it myself.

I see. The RC bug is open for 11 months, so a NMU might be justified.

[toc] | [prev] | [next] | [standalone]

#13066 — Re: Please upload the latest version of python-flask-cors ready in git

Am 17.12.20 um 04:28 schrieb Louis-Philippe Véronneau:
> Hello!
> 
> Bastian Germann asked a month ago for the package python-flask-cors [1]
> to be sponsored by someone from the Python Team.
> 
> Since you put the Team in "Uploaders", I'm writing to you to know if it
> would be possible to make an upload from the latest git commit in Salsa.
> 
> Bastian fixed a CVE and a FTBFS bug (as well as updated the package) and
> I did a few tweaks left and right.
> 
> I believe the package should thus be ready to upload as is, as the only
> thing missing is "dch -r" :)
> 
> If you don't have the time to do so, I would be happy to make the upload
> for you.

Just checked the RFS queue again and the package is gone from there. I 
would appreciate you sponsoring the package so it can migrate to bullseye.

> 
> Cheers,
> 
> [1]: https://salsa.debian.org/python-team/packages/python-flask-cors
> 

[toc] | [prev] | [next] | [standalone]

#13070

On Thu, Dec 17, 2020, at 04:28, Louis-Philippe Véronneau wrote:
> Hello!
> 
> Bastian Germann asked a month ago for the package python-flask-cors [1]
> to be sponsored by someone from the Python Team.
> 
> Since you put the Team in "Uploaders", I'm writing to you to know if it
> would be possible to make an upload from the latest git commit in Salsa.
>
> Bastian fixed a CVE and a FTBFS bug (as well as updated the package) and
> I did a few tweaks left and right.

Hey,

I think you're being overly conservative here; That package has had a RC bug open for almost a year. It's a security-sensitive package with open security issues; I think it's more than ripe for a team-upload.

[rant about team in Uploaders deleted]
 
> I believe the package should thus be ready to upload as is, as the only
> thing missing is "dch -r" :)
> 
> If you don't have the time to do so, I would be happy to make the upload
> for you.

Looks like Stewart doesn't have DM upload rights to this package so a DD would have to sponsor it anyway.

HTH,
-- 
Nicolas Dandrimont

[toc] | [prev] | [next] | [standalone]

#13071 — Re: Please upload the latest version of python-flask-cors ready in git

[Multipart message — attachments visible in raw view] — view raw

On 2020-12-18 06 h 33, Nicolas Dandrimont wrote:
> On Thu, Dec 17, 2020, at 04:28, Louis-Philippe Véronneau wrote:
>> Hello!
>>
>> Bastian Germann asked a month ago for the package python-flask-cors [1]
>> to be sponsored by someone from the Python Team.
>>
>> Since you put the Team in "Uploaders", I'm writing to you to know if it
>> would be possible to make an upload from the latest git commit in Salsa.
>>
>> Bastian fixed a CVE and a FTBFS bug (as well as updated the package) and
>> I did a few tweaks left and right.
> 
> Hey,
> 
> I think you're being overly conservative here; That package has had a RC bug open for almost a year. It's a security-sensitive package with open security issues; I think it's more than ripe for a team-upload.
> 
> [rant about team in Uploaders deleted]

Uploaded! (twice, I forgot to git pull and Bastian added an extra commit...)

Thank you for the input and thanks to Bastian for the work on this package.

-- 
  ⢀⣴⠾⠻⢶⣦⠀
  ⣾⠁⢠⠒⠀⣿⡁  Louis-Philippe Véronneau
  ⢿⡄⠘⠷⠚⠋   pollo@debian.org / veronneau.org
  ⠈⠳⣄

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.maint.python

csiph-web