From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id 6Nv4JAPXn2LHIAAAbAwnHQ (envelope-from ) for ; Wed, 08 Jun 2022 00:53:55 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id 2PLEJAPXn2LOjQAAauVa8A (envelope-from ) for ; Wed, 08 Jun 2022 00:53:55 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 372D49075 for ; Wed, 8 Jun 2022 00:53:55 +0200 (CEST) Received: from localhost ([::1]:54144 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nyi5B-0007QQ-Ng for larch@yhetil.org; Tue, 07 Jun 2022 18:53:53 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:50260) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nygxH-0007qK-8p for guix-devel@gnu.org; Tue, 07 Jun 2022 17:41:39 -0400 Received: from xavier.telenet-ops.be ([2a02:1800:120:4::f00:14]:60228) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nygxD-0001WP-JK for guix-devel@gnu.org; Tue, 07 Jun 2022 17:41:38 -0400 Received: from ptr-bvsjgyhxw7psv60dyze.18120a2.ip6.access.telenet.be ([IPv6:2a02:1811:8c09:9d00:3c5f:2eff:feb0:ba5a]) by xavier.telenet-ops.be with bizsmtp id gMhX2700M4UW6Th01MhXHo; Tue, 07 Jun 2022 23:41:32 +0200 Message-ID: <1ed616ad1fc08da06f77b8c27a956fbc9b75f00f.camel@telenet.be> Subject: Re: Repology and outdated packages From: Maxime Devos To: kiasoc5@disroot.org, guix-devel@gnu.org Date: Tue, 07 Jun 2022 23:41:31 +0200 In-Reply-To: References: Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-RwR+/lTbkY5DJrBgcXDY" User-Agent: Evolution 3.38.3-1 MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r22; t=1654638092; bh=PTUF3vceOGB3JXzdiTiBB79TI+mEz70JWKVT5yz9bhg=; h=Subject:From:To:Date:In-Reply-To:References; b=loXpzTfqQVet0CaSbBuzxJXDV+Xx6nQQ4OMssu49WWPgvs3GjYnfdE8lCawqDz9D9 PnCIpZy6mIg1dt1/aQOtZsPkVMRHYWPKNBKZZj+s1JLPsAKxjvhvoXJjOP8vJOwYry IHVUJ76E1Ej4Efq7fSYTmOm/TEINuspBkRX8iNI8UcjsPWtZJKFGx76Qmx4653ekTI DwsZ4FzxzjZehZtSiMVtlC28+cY4VWqedHZya9lJzHFMQsoPBiffRrpKj9mgB6690G nbtN0KUNErTtWcPxRhNqOXnd4svu0Nc1WKOSPPjKfC2gn2Ww8KVuqC5081lNxWwH+l FZkFh4FOqbrWw== Received-SPF: pass client-ip=2a02:1800:120:4::f00:14; envelope-from=maximedevos@telenet.be; helo=xavier.telenet-ops.be X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1654642435; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=PTUF3vceOGB3JXzdiTiBB79TI+mEz70JWKVT5yz9bhg=; b=YjREdyXPMvNMYVfTZN8TddnaPNZXlIKtWDRY0TT3yPq5UTcJZLimN5R9abjK4sREiYXuO7 ddoF6qC11OGr0DmgR6+RlkI5jUW7pqoRn6SxqB1qi5QlV8ePfBeLOodWNTpp8Q8R3lAjQB AalIL8Q6yDHWh4c0xhJLJ3RxW2IdTIbQkrp/93p7vckvh6QbyGNs9H5/NBhg00g+pXmOWi TXnOcHfWjdNuRwtQDxCW9QbBdv6/gyVwcK3GDeMrl2tPwFnsYpWLJQ9ZQTGEDm2yrz2MtO 7IBxF3krALpu0wQwQyaJL9gF9gYx8wXsP7RIXdwM+B7LIwUDfmshHYBd9PzC+Q== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1654642435; a=rsa-sha256; cv=none; b=cHV7CU2TjHChxcDcGyrlzf5uzaxaVlyuLvLRbOvtWsKus9UgURR8k37Ys9oG7c5BsBp9HA jjC8SsYL5HRUBvH22Ze4H5WCrquqgNoSQ9LcHFLg44fndIDYAeDMnmXqbUy+9ZeLCrdzX5 coD2ByFcJp00qMymDlQY5uDrOfDJUQzj3mHu983d/i+16X+KqPJFWQVGQY/6BrMc6Dtp4f 03uaTlCItTD5e9Nj9ZNi6y5A5vP9Kg+reG0/x/rnv8Wodg3/weCcI2yASweDIT5Pui0f00 ipnblnEIzKZuxLs3TvbArakXoNIk6d+3PvnR1lLjkvGKVFF7HymZgfFIphbHXA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=telenet.be header.s=r22 header.b=loXpzTfq; dmarc=pass (policy=none) header.from=telenet.be; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -7.60 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=telenet.be header.s=r22 header.b=loXpzTfq; dmarc=pass (policy=none) header.from=telenet.be; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 372D49075 X-Spam-Score: -7.60 X-Migadu-Scanner: scn0.migadu.com X-TUID: Xp15++7ynOLa --=-RwR+/lTbkY5DJrBgcXDY Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable kiasoc5@disroot.org schreef op di 07-06-2022 om 18:39 [+0000]: > - we package their dependencies separately (eg Rust crates, Go modules), = these are a significant portion of Guix that cannot be constantly updated e= asily > - the Guix 1.4 release is coming soon so more time may be spent debugging= that instead of updating the package archives [...] > However I hope that faster package reviews can mean we stay updated faste= r without compromising package quality. FWIW, antioxidant removes most of the complexity of Rust's dependency system, which should help with packaging and reviewing. No need to package old versions to satisfy Cargo and making sure the old version builds, has an appropriate synopsis/description, doesn't introduce malware, ... Theoretically (currently untested!) faster build times, no need to package Windows or redox crates. The cost is that, as you seem to write, that the dependent might not support the old version of the dependency, but updating is something upstream needs to do eventually anyway, and (antioxidant) in theory (untested) supports working with multiple versions. There's also the option of making some compatibility changes in the Guix version of the dependency (undoing a removal of a function, or adding some aliases, etc.). Greetings, Maxime --=-RwR+/lTbkY5DJrBgcXDY Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iI0EABYKADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYp/GCxccbWF4aW1lZGV2 b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7i+JAQDHS4o5xlQwZvRomIMaMRH23ubC Xcnrj9ay/04v/DJURQD+P+r0ANeHOqq3FoJppSfxTyEsbwbDkrGDov2R4mVYqQI= =2Pfi -----END PGP SIGNATURE----- --=-RwR+/lTbkY5DJrBgcXDY--