=== JanC is now known as Guest2050 === JanC_ is now known as JanC === locutusofborg_ is now known as locutusofborg === locutusofborg is now known as LocutusOfBorg === Kilos- is now known as Kilos [15:31] ahoi [15:31] good morning [15:31] hello o/ [15:31] heyho [15:31] let me get the template [15:31] o/ [15:31] #startmeeting Weekly Main Inclusion Requests status [15:31] Meeting started at 15:31:52 UTC. The chair is cpaelzer. Information about MeetBot at https://wiki.ubuntu.com/meetingology [15:31] Available commands: action, commands, idea, info, link, nick [15:31] Ping for MIR meeting - didrocks joalif slyon sarnold cpaelzer jamespage ( eslerm dviererbe ) [15:32] plenty of people already said hi [15:32] o/ [15:32] so let me start [15:32] #topic current component mismatches [15:32] Mission: Identify required actions and spread the load among the teams [15:32] #link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg [15:32] #link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg [15:32] non proposed is fine [15:32] proposed has libmail-dkim-perl [15:32] historically that was desktop, but we agreed topick this up as part of the similar work on dmarc [15:33] so mirespace will file requests for those [15:33] I haven't seen libio-prompter-perl before, anyone knows about this? [15:33] cpaelzer: we're taking care of libio-prompter-perl [15:33] it's been there for a few weeks [15:33] I checked it is foundations [15:33] thanks [15:33] it didn't move yet so I wanted to ask again, all fine [15:34] pipewire is Desktop and has been there in the past [15:34] looks like a new dep by a sync maybe [15:34] let us check the most recent upload [15:34] yep https://launchpad.net/ubuntu/+source/pipewire/1.0.0-1 [15:34] jbicha: didrocks: could you carry this to the team and let us know next week what the approach to that one should be? [15:35] OTOH I'm impressed it is 1.0 - yay suggest stability [15:35] and then we know jaraco.text no need to bring it up again [15:35] that is all that I see in mismatches [15:35] anything else you want to raise for that section of the agenda? [15:36] actually I had a query on the jaraco.text one [15:36] go [15:36] pydantic is one of the deps - I worked through the feedback on that last week [15:37] one TODO was to upgrade to the latest 2.x series release (from 1.10.x) which is a pretty large transition as the 2 series breaks alot of API [15:37] logcheck -> esmtp feels like it's part of the furniture around here but my irc client no longer has scrollback about it -- is that still in a state for us to ignore? [15:37] sarnold: yes that is a known false positive [15:37] question is really whether we should always insist on very latest up-to-date [15:37] jamespage: I agree that not going for 2.x seems right for this [15:37] 1.10.x has recent-ish releases which I have updated to [15:37] thanks for updating and enabling the tests [15:38] sarnold: https://bugs.launchpad.net/ubuntu/+source/plzip/+bug/1980663/comments/3 [15:38] -ubottu:#ubuntu-meeting- Launchpad bug 1980663 in plzip (Ubuntu) "[MIR] false-positives, do not promote" [Undecided, Fix Released] [15:38] oh hah, clicking it even goes to the right thing; thanks [15:39] jamespage updating the case ... [15:39] ta [15:39] still needs security review onthat task [15:40] no it does not [15:40] oh [15:40] I misread as they were to many updates [15:40] and too many review [15:40] right, fixing [15:41] should be good now jamespage [15:41] brill thanks [15:41] ok [15:41] next [15:41] #topic New MIRs [15:41] Mission: ensure to assign all incoming reviews for fast processing [15:41] #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir [15:42] https://bugs.launchpad.net/ubuntu/+source/libemail-mime-contenttype-perl/+bug/2030962 [15:42] -ubottu:#ubuntu-meeting- Launchpad bug 2030962 in libemail-mime-contenttype-perl (Ubuntu) "[MIR] libemail-mime-contenttype-perl (libemail-mime-perl dependency as libmail-dmarc-perl dependency)" [Undecided, New] [15:42] yes, Desktop is investigating the new Pipewire 1.0 dependency to either disable it or prepare a MIR [15:42] was reviewed [15:42] thanks jbicha [15:42] This is actually ready, just needs the subscription and the other dependencies [15:43] I'll add the subscription and mark if as ready later [15:43] next is https://bugs.launchpad.net/ubuntu/+source/libgssglue/+bug/2044535 [15:43] -ubottu:#ubuntu-meeting- Launchpad bug 2044535 in libgssglue (Ubuntu) "[MIR] libgssglue" [Undecided, New] [15:43] slyon: did the check with the team already happen? [15:44] cpaelzer: the discussion in still in progress. I'm +1 personally, but like to get some more buy-in from the team [15:44] sure [15:44] sounds fine [15:44] happy to wait for the call then [15:44] #topic Incomplete bugs / questions [15:44] Mission: Identify required actions and spread the load among the teams [15:44] #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir [15:44] heh, the whole template in there, it's hard to know what's relevant vs regular old boilerplate -- I wonder if we need to update our docs to make it more clear what's expected of mir proposers [15:45] I felt it is clear, it needs inout of those requesters what they would have expected [15:45] recent changes in incomplete [15:45] inout? input or i/o? :) [15:45] https://bugs.launchpad.net/ubuntu/+source/libmail-dmarc-perl/+bug/2023971 has gotten the change to the smaller dependency set [15:45] -ubottu:#ubuntu-meeting- Launchpad bug 2023971 in libmail-dmarc-perl (Ubuntu) "[MIR] libmail-dmarc-perl" [High, Incomplete] [15:45] https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2023531 is almost ready [15:45] -ubottu:#ubuntu-meeting- Launchpad bug 2023531 in dotnet6 (Ubuntu) "[MIR] dotnet6" [Undecided, Incomplete] [15:46] just tests to be added, then it is good [15:46] long things are finally good [15:46] https://bugs.launchpad.net/ubuntu/+source/libnet-ip-perl/+bug/2039456 is interesting [15:46] -ubottu:#ubuntu-meeting- Launchpad bug 2039456 in libnet-ip-perl (Ubuntu) "[MIR] libnet-ip-perl (as libmail-dmarc-perl dependency)" [Undecided, Incomplete] [15:46] sarnold: eslerm: could you have a look [15:46] that is a case of "all fine, but upstream is dead" [15:46] OTOH it also doesn#t need any change one would know of [15:47] there are such packages in the archive and joalif rightfully asked for you to say "yeah this is fine for us too" [15:47] is it? [15:47] and while you ponder about that , the other one in incomplete is https://bugs.launchpad.net/ubuntu/+source/libmatch-simple-perl/+bug/2042100 which slyon mentioned before to be in progress - no action needed [15:47] -ubottu:#ubuntu-meeting- Launchpad bug 2042100 in libmatch-simple-perl (Ubuntu) "[MIR] libmatch-simple-perl (libio-prompter-perl dependency)" [Undecided, Incomplete] [15:48] the further ones are dependencies of the dmarc thing which are no more needed [15:48] so before going on, sarnold / eslerm - WDYT? [15:48] * eslerm looking [15:48] # Copyright (c) 1999 - 2002 RIPE NCC [15:48] heh [15:48] do not call it dead, call it stable [15:48] :D [15:49] Looks ripe. [15:49] feel free to give me the answer on the bug later on [15:49] I'd like to use the time here to complete all agenda items [15:49] ok? [15:49] yeah [15:49] sounds ok, we're going to fuzz a lot of these packages at once, and I feel we may as well with this even if we don't do an mir [15:50] indeed eslerm [15:50] ESM for the win [15:50] leave a trace on the bug later on please [15:50] #topic Process/Documentation improvements [15:50] Mission: Review pending process/documentation pull-requests or issues [15:50] #link https://github.com/canonical/ubuntu-mir/pulls [15:50] #link https://github.com/canonical/ubuntu-mir/issues [15:50] only the old on-hold things [15:50] I've landed last week the security "make clear about deadlines" PR [15:50] after like 3 spell check PRs :-P [15:51] #topic MIR related Security Review Queue [15:51] Mission: Check on progress, do deadlines seem doable? [15:51] Some clients can only work with one, some with the other escaping - the URLs point to the same place. [15:51] #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir [15:51] #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=[MIR]&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir [15:51] Internal link [15:51] - ensure your teams items are prioritized among each other as you'd expect [15:51] - ensure community requests do not get stomped by teams calling for favors too much [15:51] #link https://warthogs.atlassian.net/jira/software/c/projects/SEC/boards/594 [15:51] oh look new bug on the list :) [15:52] hehe [15:52] well, some email things that we expected [15:52] there is a bunch in TODO [15:52] I'm hoping dbus-broker gets a dbus-run-session wrapper, it's a package we want promotoed [15:52] let me ask, how is the capacity before Christmas shutdown to get some of them to done? [15:52] ack eslerm [15:53] capacity is limited, many people are burning the needful pto due [15:53] the perl work should be ramping up soon. @iosifache has perl fuzzing tooling setup and will teach a few others who will work on them together [15:53] * cpaelzer thinks of eslerm and sarnold now coordinating out of band what they should say to be nice but not make promises :-P [15:53] ah there it is [15:54] understandable sarnold and sounds good eslerm [15:54] thanks [15:54] #topic Any other business? [15:54] heh, after we yanked internal irc, I can't multitask chat like I used to :( [15:54] use MM via IRC [15:54] the thought occurs to me often :( [15:54] remember https://xkcd.com/1782/ [15:54] it me! [15:55] no other topic by me this week [15:55] oh right [15:55] well, mirespace asked me to notify that the libmail-dkim things seen in proposed will not be 1 8as shown) but 3 MIR packages [15:55] none here, except a general warning of the pto bonfire [15:55] nothing here. [15:56] indeed sarnold [15:56] ok, let me close this [15:56] thank you and see you next week [15:56] thanks cpaelzer, all :) [15:56] with a few more cases to review and a few more in the seucity check "in progress" list [15:56] \o/ [15:56] #endmeeting [15:56] Meeting ended at 15:56:47 UTC. Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2023/ubuntu-meeting.2023-11-28-15.31.moin.txt [15:56] thanks all o/ [15:56] thanks everyone o/ [16:04] cpaelzer: I’ll track it to seb, but I think jbicha is the one with the closest interest of it :) [16:05] didrocks: yes, seb128 & I briefly discussed the new pipewire dependency today & added a Jira card to investigate [16:09] jbicha: exellent, thanks! === JanC is now known as Guest1745