15:31 #startmeeting Weekly Main Inclusion Requests status 15:31 Meeting started at 15:31:52 UTC. The chair is cpaelzer. Information about MeetBot at https://wiki.ubuntu.com/meetingology 15:31 Available commands: action, commands, idea, info, link, nick 15:31 Ping for MIR meeting - didrocks joalif slyon sarnold cpaelzer jamespage ( eslerm dviererbe ) 15:32 plenty of people already said hi 15:32 o/ 15:32 so let me start 15:32 #topic current component mismatches 15:32 Mission: Identify required actions and spread the load among the teams 15:32 #link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg 15:32 #link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg 15:32 non proposed is fine 15:32 proposed has libmail-dkim-perl 15:32 historically that was desktop, but we agreed topick this up as part of the similar work on dmarc 15:33 so mirespace will file requests for those 15:33 I haven't seen libio-prompter-perl before, anyone knows about this? 15:33 cpaelzer: we're taking care of libio-prompter-perl 15:33 it's been there for a few weeks 15:33 I checked it is foundations 15:33 thanks 15:33 it didn't move yet so I wanted to ask again, all fine 15:34 pipewire is Desktop and has been there in the past 15:34 looks like a new dep by a sync maybe 15:34 let us check the most recent upload 15:34 yep https://launchpad.net/ubuntu/+source/pipewire/1.0.0-1 15:34 jbicha: didrocks: could you carry this to the team and let us know next week what the approach to that one should be? 15:35 OTOH I'm impressed it is 1.0 - yay suggest stability 15:35 and then we know jaraco.text no need to bring it up again 15:35 that is all that I see in mismatches 15:35 anything else you want to raise for that section of the agenda? 15:36 actually I had a query on the jaraco.text one 15:36 go 15:36 pydantic is one of the deps - I worked through the feedback on that last week 15:37 one TODO was to upgrade to the latest 2.x series release (from 1.10.x) which is a pretty large transition as the 2 series breaks alot of API 15:37 logcheck -> esmtp feels like it's part of the furniture around here but my irc client no longer has scrollback about it -- is that still in a state for us to ignore? 15:37 sarnold: yes that is a known false positive 15:37 question is really whether we should always insist on very latest up-to-date 15:37 jamespage: I agree that not going for 2.x seems right for this 15:37 1.10.x has recent-ish releases which I have updated to 15:37 thanks for updating and enabling the tests 15:38 sarnold: https://bugs.launchpad.net/ubuntu/+source/plzip/+bug/1980663/comments/3 15:38 oh hah, clicking it even goes to the right thing; thanks 15:39 jamespage updating the case ... 15:39 ta 15:39 still needs security review onthat task 15:40 no it does not 15:40 oh 15:40 I misread as they were to many updates 15:40 and too many review 15:40 right, fixing 15:41 should be good now jamespage 15:41 brill thanks 15:41 ok 15:41 next 15:41 #topic New MIRs 15:41 Mission: ensure to assign all incoming reviews for fast processing 15:41 #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir 15:42 https://bugs.launchpad.net/ubuntu/+source/libemail-mime-contenttype-perl/+bug/2030962 15:42 yes, Desktop is investigating the new Pipewire 1.0 dependency to either disable it or prepare a MIR 15:42 was reviewed 15:42 thanks jbicha 15:42 This is actually ready, just needs the subscription and the other dependencies 15:43 I'll add the subscription and mark if as ready later 15:43 next is https://bugs.launchpad.net/ubuntu/+source/libgssglue/+bug/2044535 15:43 slyon: did the check with the team already happen? 15:44 cpaelzer: the discussion in still in progress. I'm +1 personally, but like to get some more buy-in from the team 15:44 sure 15:44 sounds fine 15:44 happy to wait for the call then 15:44 #topic Incomplete bugs / questions 15:44 Mission: Identify required actions and spread the load among the teams 15:44 #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir 15:44 heh, the whole template in there, it's hard to know what's relevant vs regular old boilerplate -- I wonder if we need to update our docs to make it more clear what's expected of mir proposers 15:45 I felt it is clear, it needs inout of those requesters what they would have expected 15:45 recent changes in incomplete 15:45 inout? input or i/o? :) 15:45 https://bugs.launchpad.net/ubuntu/+source/libmail-dmarc-perl/+bug/2023971 has gotten the change to the smaller dependency set 15:45 https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2023531 is almost ready 15:46 just tests to be added, then it is good 15:46 long things are finally good 15:46 https://bugs.launchpad.net/ubuntu/+source/libnet-ip-perl/+bug/2039456 is interesting 15:46 sarnold: eslerm: could you have a look 15:46 that is a case of "all fine, but upstream is dead" 15:46 OTOH it also doesn#t need any change one would know of 15:47 there are such packages in the archive and joalif rightfully asked for you to say "yeah this is fine for us too" 15:47 is it? 15:47 and while you ponder about that , the other one in incomplete is https://bugs.launchpad.net/ubuntu/+source/libmatch-simple-perl/+bug/2042100 which slyon mentioned before to be in progress - no action needed 15:48 the further ones are dependencies of the dmarc thing which are no more needed 15:48 so before going on, sarnold / eslerm - WDYT? 15:48 * eslerm looking 15:48 # Copyright (c) 1999 - 2002 RIPE NCC 15:48 heh 15:48 do not call it dead, call it stable 15:48 :D 15:49 Looks ripe. 15:49 feel free to give me the answer on the bug later on 15:49 I'd like to use the time here to complete all agenda items 15:49 ok? 15:49 yeah 15:49 sounds ok, we're going to fuzz a lot of these packages at once, and I feel we may as well with this even if we don't do an mir 15:50 indeed eslerm 15:50 ESM for the win 15:50 leave a trace on the bug later on please 15:50 #topic Process/Documentation improvements 15:50 Mission: Review pending process/documentation pull-requests or issues 15:50 #link https://github.com/canonical/ubuntu-mir/pulls 15:50 #link https://github.com/canonical/ubuntu-mir/issues 15:50 only the old on-hold things 15:50 I've landed last week the security "make clear about deadlines" PR 15:50 after like 3 spell check PRs :-P 15:51 #topic MIR related Security Review Queue 15:51 Mission: Check on progress, do deadlines seem doable? 15:51 Some clients can only work with one, some with the other escaping - the URLs point to the same place. 15:51 #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir 15:51 #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=[MIR]&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir 15:51 Internal link 15:51 - ensure your teams items are prioritized among each other as you'd expect 15:51 - ensure community requests do not get stomped by teams calling for favors too much 15:51 #link https://warthogs.atlassian.net/jira/software/c/projects/SEC/boards/594 15:51 oh look new bug on the list :) 15:52 hehe 15:52 well, some email things that we expected 15:52 there is a bunch in TODO 15:52 I'm hoping dbus-broker gets a dbus-run-session wrapper, it's a package we want promotoed 15:52 let me ask, how is the capacity before Christmas shutdown to get some of them to done? 15:52 ack eslerm 15:53 capacity is limited, many people are burning the needful pto due 15:53 the perl work should be ramping up soon. @iosifache has perl fuzzing tooling setup and will teach a few others who will work on them together 15:53 * cpaelzer thinks of eslerm and sarnold now coordinating out of band what they should say to be nice but not make promises :-P 15:53 ah there it is 15:54 understandable sarnold and sounds good eslerm 15:54 thanks 15:54 #topic Any other business? 15:54 heh, after we yanked internal irc, I can't multitask chat like I used to :( 15:54 use MM via IRC 15:54 the thought occurs to me often :( 15:54 remember https://xkcd.com/1782/ 15:54 it me! 15:55 no other topic by me this week 15:55 oh right 15:55 well, mirespace asked me to notify that the libmail-dkim things seen in proposed will not be 1 8as shown) but 3 MIR packages 15:55 none here, except a general warning of the pto bonfire 15:55 nothing here. 15:56 indeed sarnold 15:56 ok, let me close this 15:56 thank you and see you next week 15:56 thanks cpaelzer, all :) 15:56 with a few more cases to review and a few more in the seucity check "in progress" list 15:56 \o/ 15:56 #endmeeting