15:31 #startmeeting Weekly Main Inclusion Requests status 15:31 Meeting started at 15:31:09 UTC. The chair is slyon. Information about MeetBot at https://wiki.ubuntu.com/meetingology 15:31 Available commands: action, commands, idea, info, link, nick 15:31 Ping for MIR meeting - didrocks joalif slyon sarnold cpaelzer jamespage ( dviererbe ) pushkarnk 15:31 #topic current component mismatches 15:31 Mission: Identify required actions and spread the load among the teams 15:31 #link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg 15:31 #link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg 15:31 * slyon looking at non-proposed 15:31 I plan to handle fonts-inter this week, sorry for delay 15:31 thanks! 15:32 kernel seeds usually get sorted by the corresponding team. Ignoring. 15:32 esmtp and xterm are false positives 15:32 * slyon looking at -proposed 15:32 good morning 15:32 tracker-miners (localsearch) is being worked on as a re-review. 15:32 I am looking into tracker-miners/localsearch with help from slyon 15:33 (I thought we had the 'false positive bug' thing to put these items so that they'd stop showing up on our report?) 15:33 sarnold: they still show up. But once you click it, you'll be directed towards the false-positive bug report giving an explanation 15:34 o/ (late sorry) 15:34 (that's the best we could do without changing the component-mismatch tooling) 15:34 *sass* is looking mostly good, but still pending sec-review. Thanks jamespage for adding those autopkgtests quickly! 15:35 o/ (for once, I am around, no conflicting meetings!) 15:35 slyon: aha, that does sound familiar now. thanks. 15:35 ruby-* is being worked on by the server team. 15:35 this leaves us with libcamera. 15:36 https://bugs.launchpad.net/ubuntu/+source/libpisp/+bug/2093321 is now in c-m. So moving to "Fix Committed" 15:37 https://bugs.launchpad.net/ubuntu/+source/nlohmann-json3/+bug/2093868 is pending sec-review 15:37 sarnold: can you get this tagged/imported ^ ? 15:38 #topic New MIRs 15:38 Mission: ensure to assign all incoming reviews for fast processing 15:38 https://warthogs.atlassian.net/browse/SEC-5935 15:38 #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir 15:38 only https://bugs.launchpad.net/ubuntu/+source/nghttp3/+bug/2098797 15:39 unsure about the status with what juliank mentioned 15:39 The concern is about using gnutls for Quic TLS support and Julian prefers to wait for openssl to release QUIC support (possibly version 3.5?). 15:39 However, it looks like nghttp3 (like nghttp2) will be owned by Server. 15:39 CC tsimonq2: Foundations already investigated this (thanks pushkarnk & juliank). I'll also bring it to the server team meeting as nghttp2 is currently owned by the server team. But given the OpenSSL concerns Julian lined out, I'm afraid this will most probably slip into next cycle. Thank you very much for your work on this from the community side, though! 15:40 +1 15:40 #topic Incomplete bugs / questions 15:40 Mission: Identify required actions and spread the load among the teams 15:40 #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir 15:40 https://bugs.launchpad.net/ubuntu/+source/rust-gst-plugin-gtk4/+bug/2097804 has some TODOs for jbicha 15:41 https://bugs.launchpad.net/ubuntu/+source/libsass-python/+bug/2095581 is ready, but depends on bug #2095582 (sec-review), as noted before. 15:41 nothing else. 15:41 #topic Process/Documentation improvements 15:41 Mission: Review pending process/documentation pull-requests or issues 15:41 #link https://github.com/canonical/ubuntu-mir/pulls 15:41 #link https://github.com/canonical/ubuntu-mir/issues 15:42 https://github.com/canonical/ubuntu-mir/pull/78 is new, thanks pushkarnk 15:42 slyon thanks for fixing the spell check :) 15:42 I fixed the spell-check prior to this meeting, so it should be good to go. 15:42 * slyon merging... 15:43 \o/ 15:43 the rest is old stuff 15:43 #topic MIR related Security Review Queue 15:43 Mission: Check on progress, do deadlines seem doable? 15:43 Some clients can only work with one, some with the other escaping - the URLs point to the same place. 15:43 #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir 15:43 #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=[MIR]&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir 15:43 Internal link 15:43 #link https://warthogs.atlassian.net/jira/software/c/projects/SEC/boards/594 15:44 how are security-reviews moving forward, sarnold? 15:44 could bug 2097800 be added to the security queue? 15:44 slyon: we have a new contributor interested in joining in, he'll start working on libsass soon 15:44 that's good news! 15:44 nice! 15:45 hrm how did I miss 2097800 :/ 15:45 .. not even recent. sheesh. 15:46 I see nlohmann-json3 & libsass are tagged, and sarnold is adding 2097800 – so let's move forward. 15:46 #topic Any other business? 15:46 sorry I didn't notice it was waiting on security until today either 15:46 https://warthogs.atlassian.net/browse/SEC-5936 15:46 (sheesh, this was *slow*, I wonder if we're self-hosting some part of this api?) 15:46 is Papers approved now? bug 2097727 15:47 smcv's suggestion in the debian bug feels like a good addition to me 15:48 AOB: I'll miss (most of?) next week's meeting because I've got an interview scheduled immediately afterwards 15:48 jbicha: I see security and MIR ack. But didn't see the package in component-mismatches? Status "In Progress" seems about right. It also has a bug team subscriber. Please add it to the seeds (or add it as a dependency), then ping an AA for promotion. 15:49 thanks 15:49 also consider smcv's suggestion. But I guess that's non-blocking given the existing ACKs 15:50 Anything else? 15:50 nothing else from me for this meeting ☺️ 15:50 :) 15:50 nothing else either 15:50 Well looks like I don't have an interview conflict, but a team meeting conflict (same as c_paelzer) next week... Not sure how we'll figure this out. 15:51 but we'll find a way! :) 15:51 alright then. 15:51 Thanks all! Finally a MIR meeting on time again :) 15:51 \o/ 15:51 \o/ 15:51 #endmeeting