From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id OBFSKNbATWf92wAA62LTzQ:P1 (envelope-from ) for ; Mon, 02 Dec 2024 14:14:46 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id OBFSKNbATWf92wAA62LTzQ (envelope-from ) for ; Mon, 02 Dec 2024 15:14:46 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gnu.org header.s=fencepost-gnu-org header.b=br4Grb8+; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1733148886; a=rsa-sha256; cv=none; b=Li9oQtKJoATaWI5ZIqf+cH/n8Efa+dc/KL9Bx7zk6nrpr5MIFDq8DykdwaBqWE3wV3FwSq Sp5z0N32OHhPqSep5W27OtwO5ee5wGmzVfEyW06XIALjU0Yd7LP7mTph2qIHQJujuLIt2l hOIHVA+VOBl3mlxlhy4YJIqJ/24c8pnd3mqigy94OfknOj7sZUa7JMPRabU7BsOmZcqrgI jS4MGls48kZMsvBvGce7roNr3cHxKjX9OoPba6X5dheqT+W4R83cGR75SZDd/QPHv+J87S igcx4Qa3ClYBWVqjibrFTDw/GszW9IybnL9urFOW3KFx6GrQ5NX/JYMNy4Cseg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gnu.org header.s=fencepost-gnu-org header.b=br4Grb8+; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1733148886; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=3Hijr3bBZpjyA7KgVEhgIBL1nkJ6yUY/oEYU9den7ew=; b=eGqri1DEgfGyPyPFRbK4uDI2s/T20Th6jNn9NN6BfzQPaGaZZshEg89YgqLUzJtkErdp35 AQtDoX3rp3maNgBOojr+OXv/zSbSRVaM+U1yD2lyFEEQX0vsGM+5CEUfD8pvo0OjaKvWws pke0WndrzprN3lkUb4EbGHjB5N4nD30nuHORna2cdpMPrY1AIyp4BpO+0rfxFbGBugLvQi RQRKhYHSKRs+fWssiH5WsLgmHHZCfYYHW2FJunFAj+K5PEpsukA1mjYFcj/TMJaQgqCe4z ks40qEDtZJWM47F28zw/qeBp0K/XsEyx2qMKznq49qYDas2fIprmklCpjgIW1A== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 7797A649B0 for ; Mon, 02 Dec 2024 15:14:45 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tI6jO-00027B-LR; Mon, 02 Dec 2024 08:44:55 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tI6ix-00022u-6a for guix-devel@gnu.org; Mon, 02 Dec 2024 08:44:28 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tI6iw-0006NB-E7 for guix-devel@gnu.org; Mon, 02 Dec 2024 08:44:26 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:Subject:To:From:in-reply-to: references; bh=3Hijr3bBZpjyA7KgVEhgIBL1nkJ6yUY/oEYU9den7ew=; b=br4Grb8+0bo4A0 JaaHNzJjlZNEwmzrzIkh3R+bG9eluyIK4PC2epOr2SRSNK7mMgaUIC8C3VdUWqpmga16NT3r2MfJv EybQWWpUdT4YPx04OuY/wP4hueMxfdUqCAz9xtN4/KS2/kaw4dHX+iunegjzlCbJnpLNcqwlzcr/y ys3D5CzNRNvdPiXo1n2E/eHRf5lXL+UDRTIHhRhTG6T1efRPe2JZsSIauRhmtU58rsZ8a4ni5pnPu m2GIAT0tEwlmn950+HHlwmImsVDq0B5ecdU8t6uqNQ47p2g3z+Oc4LmvgObHpHEVlxAC14igNpPWv j+H7kYAEbVmS3rreWNsQ==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: guix-devel Subject: Automatically testing package updates X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: Duodi 12 Frimaire an 233 de la =?utf-8?Q?R=C3=A9volu?= =?utf-8?Q?tion=2C?= jour du Raifort X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Mon, 02 Dec 2024 14:44:10 +0100 Message-ID: <87iks2urmd.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -3.21 X-Spam-Score: -3.21 X-Migadu-Queue-Id: 7797A649B0 X-Migadu-Scanner: mx12.migadu.com X-TUID: b9pox+yMmbC7 Hello Guix! A new patch series that has just landed=C2=B9 adds a =E2=80=98--dependents= =E2=80=99 flag (and also =E2=80=98--development=E2=80=99) to =E2=80=98guix build=E2=80=99, whic= h makes it easier to build dependents when modifying a package. It also adds =E2=80=98etc/upgrade-manifest.scm=E2=80=99, a manifest that gr= abs and returns the latest upstream version of a few security-critical packages. More precisely, it returns two things: 1. Individual package updates. Update each of libgcrypt, libgit2, etc. independently and return the updated packages together with their direct dependents. 2. Joint package updates. Update all these packages at once and return their dependents at distance two. The result can be seen here (x86_64-linux only): https://ci.guix.gnu.org/jobset/security-updates You can go to the dashboard: https://ci.guix.gnu.org/eval/latest/dashboard?spec=3Dsecurity-updates =E2=80=A6 and type, for example, =E2=80=9Clatest-libgpg-error=E2=80=9D (to = view the libgpg-error update and its dependents) or =E2=80=9Cfull-upgrade=E2=80=9D (to view all t= he dependents of that set of packages). Some examples: =E2=80=A2 guile-ssh fails to build with the latest libssh: . =E2=80=A2 libgcrypt cannot be upgraded without libgpg-error: . =E2=80=A2 libgcrypt 1.11.0 builds fine when upgraded jointly with its dependents: =E2=80=A2 gnutls 3.8.8 has one test failure: . =E2=80=A2 curl 8.11.0 has one test failure: . This manifest is just an example. We could come up with manifests targeting package collections like CRAN packages, astronomy packages, and so on. Feedback welcome! Ludo=E2=80=99. =C2=B9 https://issues.guix.gnu.org/74542