So I have some review notes I performed looking at the bug and dotnet9 source package:
- We have added some notes to changelogs. The upstream release notes are incredibly frustrating because they don't say anything. The release notes direct you to the blog post and the blog post to the release notes, but neither describes the changes in the release. The merge requests in the github post help. - The upstream QA process probably is reasonably there, but it's pretty hard to tell since dotnet is a bit all over the place. - I'm reasonably confident from the little Microsoft tells us that this doesn't contain new features but only bug fixes; in theory patch releases are allowed to add support for new platforms, so each point release needs to be checked individually. - The tarballs I traced back to the private https://github.com/canonical/dotnet-source-build-security/actions. Due to various reasons the tarballs are only available to partners, and the watch file in the package doesn't work. - I verified that https://github.com/canonical/dotnet-source-build- security/actions/runs/15896932202 is the tarball used in dotnet9 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2115830 Title: [SRU] New upstream microrelease .NET 9.0.108/9.0.7 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet9/+bug/2115830/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
