Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1092045

Bug#1003567: Please make a separate package for mistune 2.x

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On 2/4/22 9:18 PM, Julian Gilbey wrote:
> Basically, the mistune upstream author has completely messed up on
> this by making what is essentially a completely different package with
> superficially similar functionality but the same name.

True.
  
> [...]
> _mistune.py within the Debian package,
> and have nbconvert do "import nbconvert.filters._mistune as mistune"
> (see /usr/lib/python3/dist-packages/nbconvert/filters/markdown_mistune.py).
> That seems like an eminently sensible solution to this problem.

But that'd lead to a number of mistune's embedded copies in a huge number of packages; since majority of
the rev-deps (when I last checked) haven't adapted to this new version. When they do,
and it becomes a overhead to fix each one later.
Even worse, if we discover a security problem sometime later, then all such packages would be
effected, and that honestly does not look like a good idea to me.

I somehow do not understand the urgency of uploading this newer version, as the maintainer said:

| I intend to upload src:mistune 2.0.0 to unstable between March the
| 15th and April the 15th (depending on the progress of its
| reverse-dependencies).

We could simply wait a little more for the dust to settle, IMHO.

Regards,
Nilesh

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1003567: Please make a separate package for mistune 2.x "Michael R. Crusoe" <crusoe@debian.org> - 2022-01-24 11:50 +0100
  Bug#1003567: Please make a separate package for mistune 2.x Pierre-Elliott Bécue <peb@debian.org> - 2022-02-03 23:40 +0100
    Bug#1003567: Please make a separate package for mistune 2.x Julian Gilbey <julian@d-and-j.net> - 2022-02-04 17:10 +0100
      Bug#1003567: Please make a separate package for mistune 2.x Nilesh Patra <nilesh@tchncs.de> - 2022-02-04 17:30 +0100
        Bug#1003567: Please make a separate package for mistune 2.x Jerome Charaoui <jerome@riseup.net> - 2022-02-04 18:40 +0100
    Bug#1003567: Please make a separate package for mistune 2.x Julian Gilbey <julian@d-and-j.net> - 2022-02-04 17:10 +0100
      Bug#1003567: Please make a separate package for mistune 2.x Nilesh Patra <nilesh@tchncs.de> - 2022-02-04 17:10 +0100
        Bug#1003567: Please make a separate package for mistune 2.x Pierre-Elliott Bécue <peb@debian.org> - 2022-02-04 17:40 +0100
        Bug#1003567: Please make a separate package for mistune 2.x Julian Gilbey <julian@d-and-j.net> - 2022-02-05 20:00 +0100
          Bug#1003567: Please make a separate package for mistune 2.x Nilesh Patra <nilesh@tchncs.de> - 2022-02-05 20:30 +0100
            Bug#1003567: Please make a separate package for mistune 2.x Pierre-Elliott Bécue <peb@debian.org> - 2022-02-05 23:00 +0100
              Bug#1003567: Please make a separate package for mistune 2.x Sandro Tosi <morph@debian.org> - 2022-02-05 23:00 +0100

csiph-web