On Sun, Dec 30, 2018 at 01:29:11PM -0500, Leo Famulari wrote: > There is a new release of Qt, 5.11.3, which is strictly a bug-fix > release: > > https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ > > It includes several important security-related fixes. > > We should try updating it. > > `guix refresh -l qtbase` says that 471 packages will need to be rebuilt. > Maybe we can do the work on a special 'qt-updates' branch. > > Would anyone like to lead this work? I normally end up doing the qt updates. my work flow is to download the md5sum file and use grep, awk or parallel, and aria2 to download the files. After updating all the qt packages building them all (and qtwebkit) takes hours, and then another day or two to fix build/test errors. If you check, for example, the source for qtscript¹, it has barely changed in the past year, so most of the updates are fairly straightforward. Of course the fun part is figuring out all the dependant packages and why they suddenly fail. ¹https://code.qt.io/cgit/qt/qtscript.git/log/ -- Efraim Flashner אפרים פלשנר GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted