[14:08] <doko> jdstrand, cyphermox, jamespage, cpaelzer: MIR meeting?
[14:10]  * jdstrand is here
[14:12] <doko> yaml-cpp has a pending security review
[14:13] <cyphermox> yep
[14:13] <cpaelzer> arr
[14:13] <cpaelzer> here I am
[14:13] <doko> https://bugs.launchpad.net/ubuntu/+source/cpdb-libs/+bug/1747759 -> I'll need to follow-up
[14:17] <cpaelzer> Checking new MIRs
[14:17] <cpaelzer> https://bugs.launchpad.net/ubuntu/+source/placement/+bug/1805691
[14:17] <cpaelzer> seems to have passed new queue, and now shows up
[14:18] <cpaelzer> is that on jamespage or anyone else there still, or what would be the next step there
[14:18] <cpaelzer> coreycb: FYI ^^
[14:18] <cpaelzer> seems to be nova (already in main) split out
[14:18] <cpaelzer> how are such cases usually handled?
[14:19] <doko> https://bugs.launchpad.net/ubuntu/+source/xdg-desktop-portal-gtk/+bug/1750069
[14:19] <doko> how is this handled by security, jdstrand?
[14:19] <coreycb> cpaelzer: yes that's the case. placement has been split from nova and seeded.
[14:22] <doko> jdstrand: ^^^?
[14:27] <cpaelzer> coreycb: old nova had only nova-placement-api
[14:27] <cpaelzer> how does that relate dto the full placement package that appears now?
[14:28] <coreycb> cpaelzer: that's it, the API has moved out of tree. i've not done a full diff on the code but should. also I don't think the nova code has been dropped yet.
[14:28] <coreycb> cpaelzer: but it's still a dev release so they are testing upstream.
[14:29] <cpaelzer> 2:19.0.0~b1~git2018120609.c9dca64fa6-0ubuntu1 the latest nova at least has it still
[14:29] <cpaelzer> e.g. ./nova/conf/placement.py ~==  ./placement/conf/placement.py
[14:30] <cpaelzer> coreycb: I haven't checked the files build, but wouldn't that need a massive set of breaks/replaces?
[14:30] <cpaelzer> to avoid conflicts on upgrades?
[14:32] <cpaelzer> hmm
[14:32] <cpaelzer> it seems it is all namespaced
[14:32] <cpaelzer> https://launchpadlibrarian.net/400344356/buildlog_ubuntu-disco-amd64.placement_0.0.1~git2018112616.3ccbacfc-0ubuntu1_BUILDING.txt.gz
[14:32] <cpaelzer> https://launchpadlibrarian.net/400622842/buildlog_ubuntu-disco-amd64.nova_2%3A19.0.0~b1~git2018120609.c9dca64fa6-0ubuntu1_BUILDING.txt.gz
[14:32] <coreycb> cpaelzer: yes but I've not added breaks/replaces since it hasn't been removed from nova. wasn't sure how to handle the transition period.
[14:32] <cpaelzer> nova has the same bits still it seems, but with nova-* in front of it
[14:33] <cpaelzer> coreycb: no-duplication is usually a MIR rule
[14:33] <cpaelzer> coreycb: when will that be moved/removed from nova?
[14:33] <coreycb> cpaelzer: I can double check with upstream to see what the removal plans are
[14:33] <cpaelzer> yeah, please update that on the bug once known
[14:33] <cpaelzer> and that can give jdstrand and folks some time to respond on how such broken out code that was rviewed before would be handled security-wise
[14:35] <jdstrand> doko: sorry, got pulled aside
[14:35]  * jdstrand reads
[14:36] <cpaelzer> coreycb: I updated the bug
[14:36] <jdstrand> yaml-cpp is not in our trello lane
[14:36]  * jdstrand adds it
[14:36] <cpaelzer> jdstrand: also upadted the bug for you as I assumed you were unavailable
[14:38] <cpaelzer> "upadted" is the new "updated" btw
[14:40] <jdstrand> doko: wrt https://bugs.launchpad.net/ubuntu/+source/xdg-desktop-portal-gtk/+bug/1750069, what is the question? sarnold commented in it yesterday
[14:41] <doko> jdstrand: so that's up to -desktop?
[14:41] <jdstrand> doko: yeah
[14:41] <doko> ok
[14:42] <jdstrand> doko: I commented in the bug
[14:43] <jdstrand> cpaelzer: as for https://bugs.launchpad.net/ubuntu/+source/placement/+bug/1805691, normally we say something along the lines of "this was already supported before it was split out, so no need redoing a security review". there is only the standard packaging checks for the MIR imho
[14:43] <cpaelzer> ok thanks jdstrand
[14:44]  * jdstrand comments
[14:44] <cpaelzer> thanks
[14:44] <didrocks> (joined, but in desktop team meeting)
[14:44] <jdstrand> cpaelzer: it is good to raise it to us though
[14:44] <cpaelzer> so I think once coreycb is back with how this will be de-duplcated it might be approved
[14:44] <cpaelzer> I didn#t see other big show stoppers
[14:52] <doko> ok, nothing, should we finish?
[14:53] <doko> that took way too long
[14:54] <didrocks> nothing from me, I only have vulkan-loader left on my list, dlna stack is dealt with
[14:55] <cpaelzer> nothing new to me, except still being afraid of the mailman3 dependency list
[15:00] <cpaelzer> doko: I guess the silence is a yes, I guess we can consider todays meeting done
[15:00]  * cpaelzer realizes he guesses too much
[15:01] <didrocks> ;)
[15:04] <doko> ok, done