** Description changed:

+ [Availability]
+ - The package node-mathjax-full is already in Ubuntu universe.
+ - The package node-mathjax-full builds only architecture-independent packages 
and successfully builds on amd64.
+ - Link to package: https://launchpad.net/ubuntu/+source/node-mathjax-full
+ 
+ [Rationale]
+ - The package node-mathjax-full is required in Ubuntu main for sphinx.
+ - It is the new version of src:mathjax (from the same upstream), which is 
already in main. The source and binary package names are different, because 
upstream rewrote this project in TypeScript and changed API in an incompatible 
way.
+ 
+ [Security]
+ - Had 2 security issues in the past (one of them disputed): 
https://ubuntu.com/security/cves?package=mathjax
+ - However, both issues apply to 2.x branch, which is src:mathjax and already 
in main.
+ - No security issues for the 3.x branch.
+ 
+ - no `suid` or `sgid` binaries
+ - no executables in `/sbin` and `/usr/sbin`
+ - Package does not install services, timers or recurring jobs
+ - Package does not open privileged ports (ports < 1024).
+ - Package does not expose any external endpoints
+ - Package does not contain extensions to security-sensitive software
+ 
+ [Quality assurance - function/usage]
+ - The package works well right after install
+ 
+ [Quality assurance - maintenance]
+ - The package is maintained well in Debian/Ubuntu/Upstream and does not have 
too many, long-term & critical, open bugs
+ - Ubuntu: https://bugs.launchpad.net/ubuntu/+source/node-mathjax-full
+ - Debian: https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=node-mathjax-full
+ - Upstream's bug tracker: https://github.com/mathjax/MathJax/issues
+ 
+ [Quality assurance - testing]
+ - The package does not run tests at build time because upstream does not 
provide a test suite, and testing is non-trivial because this library only 
works in a browser.
+ - The package can be tested manually e.g. by installing sphinx-doc, opening 
file:///usr/share/doc/sphinx-doc/html/usage/restructuredtext/roles.html#math in 
a browser and making sure that the Pythagoras theorem is displayed correctly.
+ 
+ [Quality assurance - packaging]
+ - debian/watch is present and works
+ - debian/control defines a correct Maintainer field
+ - Lintian overrides are not present
+ - This package does not rely on obsolete or about to be demoted packages.
+ - This package has no python2 or GTK2 dependencies
+ - The package will not be installed by default
+ - Packaging and build is easy, link to debian/rules: 
https://salsa.debian.org/js-team/node-mathjax-full/-/blob/master/debian/rules
+ 
+ [UI standards]
+ - Application is end-user facing
+ - Translation is possible via https://github.com/mathjax/MathJax-i18n but not 
packaged
+ 
+ [Dependencies]
+ - There is one further dependency that is not yet in main: 
node-mj-context-menu. It is a small library, developed as part of mathjax 
project. The MIR process for it is handled as part of this bug here.
+ 
+ [Standards compliance]
+ - This package correctly follows FHS and Debian Policy
+ 
+ [Maintenance/Owner]
+ - The package is maintained in Debian by the Debian JavaScript team. There is 
no Ubuntu delta.
+ - I (Dmitry Shachnev) am subscribed to bugs in Ubuntu.
+ - The package has a vendored copy of mhchemparser, it can be updated using 
standard tooling (debian/watch).
+ - The package has been built within the last 3 months in the archive.
+ 
+ [Background information]
+ - The Package description explains the package well.
+ - Upstream Name is MathJax.
+ - Link to upstream project: https://github.com/mathjax/MathJax
+ 
  This upload is stuck in the proposed pocket:
  
  sphinx (8.1.3-5) unstable; urgency=medium
  
-   * Switch from MathJax 2 to MathJax 3.
-   * Sort Build-Depends with wrap-and-sort from devscripts ≥ 2.24.8.
+   * Switch from MathJax 2 to MathJax 3.
+   * Sort Build-Depends with wrap-and-sort from devscripts ≥ 2.24.8.
  
-  -- Dmitry Shachnev <mity...@debian.org>  Fri, 31 Jan 2025 13:28:15
+  -- Dmitry Shachnev <mity...@debian.org>  Fri, 31 Jan 2025 13:28:15
  +0300
  
  All of the autopkgtests on the excuses page (and there are a handful)
  pass. It's just blocked on this:
  
  sphinx (8.1.3-4 to 8.1.3-5)
  
-     Migration status for sphinx (8.1.3-4 to 8.1.3-5): BLOCKED: 
Rejected/violates migration policy/introduces a regression
-     Issues preventing migration:
-     sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe
-     Impossible Depends: sphinx -> node-mathjax-full/3.2.2+~cs4.2.1-4/amd64 
+     Migration status for sphinx (8.1.3-4 to 8.1.3-5): BLOCKED: 
Rejected/violates migration policy/introduces a regression
+     Issues preventing migration:
+     sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe
+     Impossible Depends: sphinx -> node-mathjax-full/3.2.2+~cs4.2.1-4/amd64
  
  Could the team responsible for sphinx please clarify whether node-
  mathjax-full will receive a promotion, this upload will get reverted +
  we carry a delta, or whether sphinx-doc should be demoted?
  
  Thanks in advance.

** Package changed: sphinx (Ubuntu) => node-mathjax-full (Ubuntu)

** Also affects: node-mj-context-menu (Ubuntu)
   Importance: Undecided
       Status: New

** Summary changed:

- sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe
+ MIR: node-mathjax-full, node-mj-context-menu

** Description changed:

  [Availability]
  - The package node-mathjax-full is already in Ubuntu universe.
  - The package node-mathjax-full builds only architecture-independent packages 
and successfully builds on amd64.
  - Link to package: https://launchpad.net/ubuntu/+source/node-mathjax-full
  
  [Rationale]
  - The package node-mathjax-full is required in Ubuntu main for sphinx.
- - It is the new version of src:mathjax (from the same upstream), which is 
already in main. The source and binary package names are different, because 
upstream rewrote this project in TypeScript and changed API in an incompatible 
way.
+ - It is the new version of src:mathjax (from the same upstream), which is 
already in main (MIR bug 1878937). The source and binary package names are 
different, because upstream rewrote this project in TypeScript and changed API 
in an incompatible way.
  
  [Security]
  - Had 2 security issues in the past (one of them disputed): 
https://ubuntu.com/security/cves?package=mathjax
  - However, both issues apply to 2.x branch, which is src:mathjax and already 
in main.
  - No security issues for the 3.x branch.
  
  - no `suid` or `sgid` binaries
  - no executables in `/sbin` and `/usr/sbin`
  - Package does not install services, timers or recurring jobs
  - Package does not open privileged ports (ports < 1024).
  - Package does not expose any external endpoints
  - Package does not contain extensions to security-sensitive software
  
  [Quality assurance - function/usage]
  - The package works well right after install
  
  [Quality assurance - maintenance]
  - The package is maintained well in Debian/Ubuntu/Upstream and does not have 
too many, long-term & critical, open bugs
  - Ubuntu: https://bugs.launchpad.net/ubuntu/+source/node-mathjax-full
  - Debian: https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=node-mathjax-full
  - Upstream's bug tracker: https://github.com/mathjax/MathJax/issues
  
  [Quality assurance - testing]
  - The package does not run tests at build time because upstream does not 
provide a test suite, and testing is non-trivial because this library only 
works in a browser.
  - The package can be tested manually e.g. by installing sphinx-doc, opening 
file:///usr/share/doc/sphinx-doc/html/usage/restructuredtext/roles.html#math in 
a browser and making sure that the Pythagoras theorem is displayed correctly.
  
  [Quality assurance - packaging]
  - debian/watch is present and works
  - debian/control defines a correct Maintainer field
  - Lintian overrides are not present
  - This package does not rely on obsolete or about to be demoted packages.
  - This package has no python2 or GTK2 dependencies
  - The package will not be installed by default
  - Packaging and build is easy, link to debian/rules: 
https://salsa.debian.org/js-team/node-mathjax-full/-/blob/master/debian/rules
  
  [UI standards]
  - Application is end-user facing
  - Translation is possible via https://github.com/mathjax/MathJax-i18n but not 
packaged
  
  [Dependencies]
  - There is one further dependency that is not yet in main: 
node-mj-context-menu. It is a small library, developed as part of mathjax 
project. The MIR process for it is handled as part of this bug here.
  
  [Standards compliance]
  - This package correctly follows FHS and Debian Policy
  
  [Maintenance/Owner]
  - The package is maintained in Debian by the Debian JavaScript team. There is 
no Ubuntu delta.
  - I (Dmitry Shachnev) am subscribed to bugs in Ubuntu.
  - The package has a vendored copy of mhchemparser, it can be updated using 
standard tooling (debian/watch).
  - The package has been built within the last 3 months in the archive.
  
  [Background information]
  - The Package description explains the package well.
  - Upstream Name is MathJax.
  - Link to upstream project: https://github.com/mathjax/MathJax
  
  This upload is stuck in the proposed pocket:
  
  sphinx (8.1.3-5) unstable; urgency=medium
  
    * Switch from MathJax 2 to MathJax 3.
    * Sort Build-Depends with wrap-and-sort from devscripts ≥ 2.24.8.
  
   -- Dmitry Shachnev <mity...@debian.org>  Fri, 31 Jan 2025 13:28:15
  +0300
  
  All of the autopkgtests on the excuses page (and there are a handful)
  pass. It's just blocked on this:
  
  sphinx (8.1.3-4 to 8.1.3-5)
  
      Migration status for sphinx (8.1.3-4 to 8.1.3-5): BLOCKED: 
Rejected/violates migration policy/introduces a regression
      Issues preventing migration:
      sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe
      Impossible Depends: sphinx -> node-mathjax-full/3.2.2+~cs4.2.1-4/amd64
  
  Could the team responsible for sphinx please clarify whether node-
  mathjax-full will receive a promotion, this upload will get reverted +
  we carry a delta, or whether sphinx-doc should be demoted?
  
  Thanks in advance.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2101889

Title:
  MIR: node-mathjax-full, node-mj-context-menu

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/node-mathjax-full/+bug/2101889/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to