From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id SGJWO3n6UGD8OwAA0tVLHw (envelope-from ) for ; Tue, 16 Mar 2021 18:35:37 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id wO0VN3n6UGDbGwAAB5/wlQ (envelope-from ) for ; Tue, 16 Mar 2021 18:35:37 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id A4A9020339 for ; Tue, 16 Mar 2021 19:35:37 +0100 (CET) Received: from localhost ([::1]:49448 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lMEXY-00081C-J1 for larch@yhetil.org; Tue, 16 Mar 2021 14:35:36 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:56374) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lME75-0004uD-Mg for guix-devel@gnu.org; Tue, 16 Mar 2021 14:08:17 -0400 Received: from mail.zaclys.net ([178.33.93.72]:46303) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lME71-00041C-1W for guix-devel@gnu.org; Tue, 16 Mar 2021 14:08:13 -0400 Received: from [192.168.0.44] (82-64-145-38.subs.proxad.net [82.64.145.38]) (authenticated bits=0) by mail.zaclys.net (8.14.7/8.14.7) with ESMTP id 12GI82WL007618 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Tue, 16 Mar 2021 19:08:02 +0100 DMARC-Filter: OpenDMARC Filter v1.3.2 mail.zaclys.net 12GI82WL007618 Authentication-Results: mail.zaclys.net; spf=fail smtp.mailfrom=lle-bout@zaclys.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zaclys.net; s=default; t=1615918082; bh=ZRPwGxYl6YLOk3il0LZV+786EDZn7RRMpCTq41SMNwI=; h=Subject:From:To:Cc:Date:In-Reply-To:References:From; b=bKl81u9mdu0veCgeXgdy5M69PZJ0fFIMqMSV2sIFfj0+OljiSCxcnRqJQJQofVt67 afqPo2Yk1VpkmpcDWaMEQsoMZLt518I8JF7nxgf5Q+IoiK2/Y8c4Wn2G0rpvQ2VXPb LqkVd26CRZDDAffBcAgmpRcx2a96jPLaZFex7vqI= Message-ID: Subject: Re: Release 1.2.1: zstd 1.4.4 -> 1.4.9: grafting or core-updates? From: =?ISO-8859-1?Q?L=E9o?= Le Bouter To: Leo Famulari , zimoun Cc: Guix Devel Date: Tue, 16 Mar 2021 19:08:02 +0100 In-Reply-To: References: <91998d12df3c4a279f46cf50b15d47c99e064a46.camel@zaclys.net> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-kqQhydWYArnMRXKmhTnP" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 Received-SPF: pass client-ip=178.33.93.72; envelope-from=lle-bout@zaclys.net; helo=mail.zaclys.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1615919737; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=ZRPwGxYl6YLOk3il0LZV+786EDZn7RRMpCTq41SMNwI=; b=KxxL/iIbfFgH1YLweXufdPL+rk6SIDrQIsRHW+WV7Yh843LS98aAtXbfQdfGnEHY6Wmu9F twLqWoQWeQgTaYS6hboqZ+hR/mFjACYjQF539GbzWMofGy/o1ciBnoTA/3vCgijEMrB8uT cBQ5UwKpM6SY9mRY9VlWHMStLwc68o71+CIRs7aQLy6noJcjZUy7jHyZ2z2lTmEUHwpOCo wRMsSQdIbGI3qzBO+UZrf9VTiLoi/0fRMR6LTtL3azkKiSsvqVB0bcTmUYx+x4oBbjUAAy 9jo3BhtMwiBiNHH9tpCEMxKpK7p+vXfhnFy0MteTzJYFZF/WL4cfAbPmpnJ+Vw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1615919737; a=rsa-sha256; cv=none; b=c095atVaOpiRT6PusXTAGYBS58G18rIbdKXra3EMjXQ82sto8+/fe0tFTOSTW9g8cAE3sw lCdWITbOf1NJWlTgPlPBTeoGef/EKcI+X1/UWxWF9GzBXvDN1nOh7o174LmHdhUigjxDB3 5c53Om7dvYzxcABvvjfRQaFG2Nb5xfdBfKEqvhqkytemOD74WJD2h0GiOx7V24Ie35sZi2 fAqE7uCC4+CnzVb3Fiiy/6HP9cH1TY/q1M/xyI8P9M54MTumNrcUpLGd8VKUkcIbaBRAyd 2S+TtYn5b7WXXHhnjkpVKLJQx1mvKf+JBe2fN9WVymnXG5QaDOnXOilhdipMWA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=bKl81u9m; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -4.20 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=bKl81u9m; dmarc=pass (policy=reject) header.from=zaclys.net; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: A4A9020339 X-Spam-Score: -4.20 X-Migadu-Scanner: scn0.migadu.com X-TUID: GTONUafewZP1 --=-kqQhydWYArnMRXKmhTnP Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, 2021-03-16 at 13:55 -0400, Leo Famulari wrote: > I do agree that updating this program 5 versions in a graft was > perhaps > too much. >=20 > We should always try to cherry-pick bug-fix patches when grafting. >=20 > Otherwise the risk of breakage is too high. At least, these types of > patches should be reviewed on guix-patches. L=C3=A9o, can you send them t= o > guix-patches in the future? >=20 > Sometimes it is okay to update things in a graft, but it depends on > the > situation. 1.4.4 and 1.4.9 are ABI compatible? At least that's the reason I believed it wasnt risky. I can send them to the mailing list especially with such a core package (GNU Guix dependency). But often it stays there and no one is looking so. E.g. the unzip vulnerability patches, nobody looked until I actually pushed them out of waiting for reviews, I tried to hint multiple people on IRC during several days, no answer still, so I ended up pushing it, turns out I had several mistakes in it and because it was pushed well some people looked at it and helped fixing which was welcome. --=-kqQhydWYArnMRXKmhTnP Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEFIvLi9gL+xax3g6RRaix6GvNEKYFAmBQ9AIACgkQRaix6GvN EKblRQ/+KyzTHABTP59k++GvzMmI07ok1R5cK1drEpyBGSXPO3281eLpdPS3rmWf J80xIcrZYivxP/ZHpMr4Ln3T5zSEs8FKlLUtVlta5MYED2Sq7dVe96dRSQ53EMp+ Za3wpVC+JoYdHwMBD3JfyYgmlPcw4P1A14u6I47r8GlpnVEUyNusny0pXK3gy172 RjEmqFZJ/r3le15tM9QfcFrJoEzUNwq/muYQAYCToQsvE6r1d3k7M3y4Nb9HqU2a K8e30NSEJxiEvesXKgCvPGbZyXcYVAX0b9Svw8vy3d/nH6WzWOgaM1kvkY/2Spd9 7hwPojsfMeeFzTY4+XTTzkQxS6hl85HFMGUtIO9to1X+i9m5WgEyH6n/owX+s8/q 6bw3Z+ydWxw2WmPGaTaipIRRmJfTlQpJfij82IqMEQynkWjkRzEGcJQsXLOo4xCx y5z8VJPoxMmZd+IM6PLMSvT2g1hJnNi4H3n9jJ2rJTK2aWUutpH0S1t3KcBrvnQ8 k0V0z4vqWmQprF6G9zMf4yGG9AotxViO0c2RIXuZSgpYxh48wht4ssUryNCTUli6 g9MuO7/qAg50NyQsrPPAZmN4A3uSaQt2UJZ/JHxYhM7dgMr+cgozmcoAZjXwcZ4C epJ6r4fzHTJDjWxNScN0x+LYCtkAbb3qa3/id29xWpGcTFXkfTA= =phU0 -----END PGP SIGNATURE----- --=-kqQhydWYArnMRXKmhTnP--