On Thu, May 08, 2025 at 11:02:01AM -0700, Chris Lamb wrote:
Hi Colin,
I noticed you apparently tried to upload 3:4.2.21-1 for this yesterday
(judging from git), but I don't see it on
https://tracker.debian.org/pkg/python-django nor in the ftp-master logs.
Could you check whether the upload got lost somewhere?
Actually there has no attempt at an upload — yet. (And so therefore
nothing has got lost.)
Ah, OK.
I haven't uploaded the package yet for two reasons:
(1) The Salsa CI tests are currently failing. (Just saw the failure
email this morning, haven't opened it yet.)
Yeah, since upstream seems to have removed setup.py, you need
pybuild-plugin-pyproject now. I've done loads of those conversions so
let me know if you need help with it.
(2) There was a direct request from the team behind Debusine [0] that
I try their service for a real update to a real package. I said I
was happy to, especially as this CVE is not critical. (Django is a
great package for this too, because it has so many reverse-deps.)
[0] https://debusine.debian.net/
Ah yes, that team includes me :-)
Some questions for you, however:
Are you inferring an attempt was made from the Git tag or the
existence of the changelog? Or some other indicator? If so, that is
misleading, and I'd be interested to know how I can prevent that in
the future. :)
I inferred it from the existence of the Git tag - in my own workflow I
only ever push that at around the same time as an upload, to avoid
confusion if any last-minute pre-upload corrections are needed.
May I assume you are asking as you'd like to update backports? If so,
I'd be happy to let you know explicitly when I've uploaded something
into unstable.
Actually I just noticed it in the Python team's list of open RC bugs and
wondered what was happening. But it's true that we also use the
backport of python-django for debusine.debian.net, so I try to keep it
up to date if you haven't already done so (I have no particular
attachment to being the one doing the backport though!).
Thanks,
--
Colin Watson (he/him) [cjwat...@debian.org]
