From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id iBNvLPRAZ2QTFwAASxT56A (envelope-from ) for ; Fri, 19 May 2023 11:27:16 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id 0HNjK/RAZ2TyBQEAG6o9tA (envelope-from ) for ; Fri, 19 May 2023 11:27:16 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 5ED22AA61 for ; Fri, 19 May 2023 11:27:16 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pzwNp-0000vx-2v; Fri, 19 May 2023 05:26:45 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pzwNl-0000vm-Jf for guix-devel@gnu.org; Fri, 19 May 2023 05:26:41 -0400 Received: from hera.aquilenet.fr ([2a0c:e300::1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pzwNj-0005Iu-Ho for guix-devel@gnu.org; Fri, 19 May 2023 05:26:41 -0400 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id ABCEE1D0D; Fri, 19 May 2023 11:26:33 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at hera.aquilenet.fr Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M0o9uAxJTRt1; Fri, 19 May 2023 11:26:33 +0200 (CEST) Received: from jurong (unknown [IPv6:2001:861:c4:f2f0::c64]) by hera.aquilenet.fr (Postfix) with ESMTPSA id 28B921E6; Fri, 19 May 2023 11:26:33 +0200 (CEST) Date: Fri, 19 May 2023 11:26:31 +0200 From: Andreas Enge To: Remco van 't Veer Cc: guix-devel@gnu.org, Christopher Baines Subject: Re: nudging patches Message-ID: References: <87lehn9giz.fsf@remworks.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <87lehn9giz.fsf@remworks.net> Received-SPF: pass client-ip=2a0c:e300::1; envelope-from=andreas@enge.fr; helo=hera.aquilenet.fr X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Seal: i=1; s=key1; d=yhetil.org; t=1684488436; a=rsa-sha256; cv=none; b=Z+XATT1Cz96LRHO6P3LYiZntYhvGYmEndWnpOKVkvU+SsAFHZRn0opoOHlj+M5G5Hl+BMJ 5TQHL4vtlDR4p1bl/tcMiTxXQSoakQl71hjfI1r3E7RkIbvLCFkIUpESldHJmdbWkLdcpK nxBLgEiW2t1tdGU1Dw9hR1CVC6CldlT8W5qLUhNsyvJRx0w73uyMbmc0/D6c1e3HEunYTW OuraKwtA1R48mOdxXJyhXsMuazVrZZmuvrvDGtZcgA5+aQ9hgWi7tCJlsPhKwP3EamyXZR YVcTJMnNTEcxdjwlmaHnGcMgOod0wEDxrNn57nviuAHrg634Z+YgkWqNEAXVgQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1684488436; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=fOmsEa0+GCldrB8yruRgVVwX3yJsGOIpLDWW3g6V6sg=; b=A6MMIgI5NQ0xDYPi9gTUXE01I3xpUc30UgTVZnPdLokUdw4JP6EBGXhEKqK74jJaBvFWZM OuMl/TGj0lddPw4sDGGRP8jOD4LGXnNVziRkjRtU0jDZUIMkZBif425u4YlHiwzID3KbPS DYraGcD7EgMqgXfkL9Ps2rBWdRvXM62e3iJ2B1mt7vBEdUFhwQIdoiMlbpFXlisxdzl/qe bbFokgXOVPF8Qe8hCtD+CRSS2JRV6ivV91ADyySbcHEutkhwRhlbixa2rfkgCb5ayMkwms pp5oVsAEiva7LqVHMi9+XLfBg6Ka+6h4U9dg+fMPnjmvNi0JCOuIv1oat50y+g== X-Migadu-Scanner: scn1.migadu.com Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -0.99 X-Spam-Score: -0.99 X-Migadu-Queue-Id: 5ED22AA61 X-TUID: 4cr5xfdOtDsp Am Wed, May 17, 2023 at 04:30:44PM +0200 schrieb Remco van 't Veer: > What's the preferred / politest way to draw attention to patches (and / > or bugs) which seem to have been overlooked? No idea, ideally it should not be necessary ;-) There is a certain backlog in the QA process so that your patches were not built out on the build farm. Otherwise I think someone would have applied (most of) them already. > And while I have your attention and you're wondering which patches I'd > like to promote.. 😉 > - #62557 [guix-patches] > [PATCH] gnu: ruby-2.7-fixed: Upgrade to 2.7.8 [fixes CVE-2023-{28755, 28756}] > - #62558 [guix-patches] > [PATCH] gnu: ruby-3.0: Upgrade to 3.0.6 [fixes CVE-2023-{28755, 28756}]. > - #62559 [guix-patches] > [PATCH] gnu: ruby-3.1: Upgrade to 3.1.4 [fixes CVE-2023-{28755, 28756}]. > - #62561 [guix-patches] > [PATCH] gnu: ruby-3.2: Upgrade to 3.2.2 [fixes CVE-2023-{28755, 28756}]. I applied the last three ones, but not the first one, as it requires a very big amount of rebuilds (more than 8000 dependent packages). Maybe this could be an occasion for the ruby team to tidy up the packages. We currently have five publicly visible ruby versions: $ ./pre-inst-env guix package -A ^ruby$ ruby 3.1.4 out gnu/packages/ruby.scm:232:2 ruby 2.7.6 out gnu/packages/ruby.scm:163:2 ruby 3.2.2 out gnu/packages/ruby.scm:246:2 ruby 2.6.10 out gnu/packages/ruby.scm:110:2 ruby 3.0.6 out gnu/packages/ruby.scm:215:2 Could the three middle ones be dropped? Then there is an internal version ruby/fixed, which is very old, but, strangely, ahead of the public minor ruby version, @2.7.7. Could the remainder of ruby and other packages be made dependent on @3.2 instead of @2.7? Andreas