Re: Bug#863361: dgit-user(7): replace apt-get build-deps with mk-build-deps

2017-05-28 Thread David Kalnischkies

On Fri, May 26, 2017 at 03:33:17PM +0100, Ian Jackson wrote:
> Emilio Pozuelo Monfort writes ("Re: A proposal for a tool to build local 
> testing debs"):
> > Or you can just do
> > 
> > $ sudo apt-get build-dep ./
[…]
> Probably we should recommend --no-install-recommends.

I would recommend not to recommend it because apt follows the general
recommendation of not recommending the installation of recommendations
of build-dependencies by default for all recommended Debian releases.

Recommended summary: Already the default since 2011.

Recommending everyone to have a wonderful day,

David Kalnischkies


signature.asc
Description: PGP signature


Bug#863572: ITP: wallpaperdownloader -- Download, manage and change your favorite wallpapers from the Internet

2017-05-28 Thread Eloy García Almadén
Package: wnpp
Severity: wishlist
Owner: =?utf-8?b?RWxveSBHYXJjw61hIEFsbWFkw6lu?= 

* Package name: wallpaperdownloader
  Version : 2.7
  Upstream Author : Eloy García Almadén 
* URL : https://bitbucket.org/eloy_garcia_pca/wallpaperdownloader
* License : GPL-3
  Programming Lang: Java
  Description : Download, manage and change your favorite wallpapers from
the Internet

WallpaperDownloader is a GUI Java-based application for downloading, managing
and setting wallpapers from different sources. Currently there are five
providers implemented. It allows the user to define keywords in order to
download those wallpapers which fit the search terms. Users can bookmark their
favorite wallpapers too, delete those who don't want to keep and move them to
another location. It implements a background changer to change automatically
the wallpaper in 1,5,10,30 or 60 minutes. It currently support a lot of Desktop
Environments including Plasma 5, GNOME Shell, Unity, XFCE and MATE.

Additional information
- I think this package is useful for people who likes wallpapers and loves to
download, manage and change them automatically using a GUI and using their own
keywords. I use it on a daily basis and a lot of people is currently using it
because it is published in the Ubuntu Store (as a snap package:
https://uappexplorer.com/app/wallpaperdownloader.egarcia) and in AUR for Arch
Linux (https://aur.archlinux.org/packages/wallpaperdownloader/). There are some
other packages providing the same functionality (as Variety for example), but I
think WallpaperDownloader is the only one which allows the user to define
exactly the search terms to find their favorite wallpapers.

- WallpaperDownloader is currently under development and new features are
included in every release. This is the Wiki of the project, so you can check
all the history, versions, features and more:
https://bitbucket.org/eloy_garcia_pca/wallpaperdownloader/wiki/Home

Thanks!


Bug#863593: ITP: golang-github-chai2010-gettext-go -- GNU gettext for Go

2017-05-28 Thread Potter, Tim
X-Debbugs-CC: debian-devel@lists.debian.org, 
pkg-go-maintain...@lists.alioth.debian.org
Package: wnpp
Severity: wishlist
Owner: Tim Potter 

* Package name: golang-github-chai2010-gettext-go
  Version : 0.0~git20160711.0.c6fed77-1
  Upstream Author : chai2010
* URL : https://github.com/chai2010/gettext-go
* License : BSD-3-clause
  Programming Lang: Go
  Description : GNU gettext for Go

This library implements the interface of the GNU gettext library for
Go. Use the SetLocale and BindTextdomain functions to add
internationalization and localization features to your Go application
using translation files.


signature.asc
Description: Message signed with OpenPGP using GPGMail


Re: Mitigating the problem of limited security support

2017-05-28 Thread Alberto Garcia
On 2017-05-27 23:49, Moritz Mühlenhoff wrote:
> The "browser exception" applies to Chromium and Firefox, which are
> standalone packages (sans a few addons breaking), but unless webkit
> provides a long term branch with API stability guarantees, that's
> not a workable. "Rebase to a new 2.x branch every six months and let's
> hope that it doesn't break any rdeps" is not a workable solution.

webkit2gtk does guarantee API stability.

"We support each major Debian version until one year after
 the release of the next major version."

   https://trac.webkit.org/wiki/WebKitGTK/DependenciesPolicy

I'm actually writing this e-mail from a web-based e-mail client
using the latest stable release of webkit2gtk (2.16.13) that I just
built for Debian jessie (which ships 2.6.2).

What webkit2gtk cannot guarantee is zero regressions between
stable releases, and there have been a couple of annoying ones.

So yes, it can happen that updating webkit2gtk breaks an
rdep (#855103). Unfortunately it can also happen that NOT
updating webkit2gtk breaks an rdep (#862156).

The good news is that the first kind of problems are detected and
fixed immediately, so waiting a couple of weeks before uploading
the releases to debian-security could be an option (is that what
Ubuntu does?).

Berto



Re: Mitigating the problem of limited security support

2017-05-28 Thread Jeremy Bicha
On Sun, May 28, 2017 at 7:19 PM, Alberto Garcia  wrote:
> The good news is that the first kind of problems are detected and
> fixed immediately, so waiting a couple of weeks before uploading
> the releases to debian-security could be an option (is that what
> Ubuntu does?).

For the past 9 months, the development version of Ubuntu tests the
beta versions of the new major webkit2gtk release (for instance Zesty
tested the 2.15.90 releases). This has been useful in catching
regressions before they ever hit a stable webkit2gtk release.

If a webkit2gtk release fixes publicized CVEs, the release is now
pushed as a security update into Ubuntu Stable Releases fairly
quickly.

Thanks,
Jeremy Bicha