From nobody Sun Jun 16 11:08:53 2024 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4W29Hw3jYqz5NZp9 for ; Sun, 16 Jun 2024 11:09:00 +0000 (UTC) (envelope-from daniel.engberg.lists@pyret.net) Received: from smtp-bc0a.mail.infomaniak.ch (smtp-bc0a.mail.infomaniak.ch [IPv6:2001:1600:4:17::bc0a]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "relay.mail.infomaniak.ch", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4W29Hw19jkz4qXp for ; Sun, 16 Jun 2024 11:09:00 +0000 (UTC) (envelope-from daniel.engberg.lists@pyret.net) Authentication-Results: mx1.freebsd.org; none Received: from smtp-4-0001.mail.infomaniak.ch (smtp-4-0001.mail.infomaniak.ch [10.7.10.108]) by smtp-3-3000.mail.infomaniak.ch (Postfix) with ESMTPS id 4W29Hn71jgzvJ; Sun, 16 Jun 2024 13:08:53 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pyret.net; s=20231006; t=1718536133; bh=7vBs79jaOfKheThffWCHNuIyqA2v3VCnIhe670Ez4SI=; h=Date:Subject:From:Reply-To:To:Cc:References:In-Reply-To:From; b=N4Bra8R1WGO/vOcuKtMZ4YzRDhaaYkKBwVIaor1wOcTlSCi4wojsFnh/PUJLp1U7P +3wtIGTJQZiblC/g/Z/0Q8rzyTmcoIROsHgRWjraxDycLFo61bcXsendT3j7Bud3Ln lmqs8AajJCCmLlG/qkIJauR4+rE4gpHWhjl2FHkDGSt4Ta/LQFXSNmyAKMJm3Xv/Mw dwN9YToR8YLRFfZPax7E1DHIX1o/9KYxy7z4q6Mqhbo9QugkNy2efs/FIaWBbU/x0X UaJq6QUcz4NmF2NwUtlYvVgu9wTDlmsPKUaEXteWg2zAk0VMWvqx8LNMeoFprkdEPm bN7x7uSwyEkpg== Received: from unknown by smtp-4-0001.mail.infomaniak.ch (Postfix) with ESMTPA id 4W29Hn35Rlzwy7; Sun, 16 Jun 2024 13:08:53 +0200 (CEST) Message-ID: Date: Sun, 16 Jun 2024 13:08:53 +0200 Subject: Re: Another berserker victim: 03b36d9 textproc/obsidian: Remove expired port From: Daniel Engberg Reply-To: Daniel Engberg To: Gleb Popov Cc: Harry Schmalzbauer , freebsd-ports@freebsd.org, Rene Ladan List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-ports@freebsd.org Sender: owner-freebsd-ports@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="_=_swift_1718536133_dd074ea5afe65c052e00854bd1dc6d23_=_" X-WS-User-Origin: eyJpdiI6IkgwT3dPeXZBTDY3cXZtUDUvbEl4Snc9PSIsInZhbHVlIjoiMkZqUHNYUWJmNU9hU3ZZM3FYU29NQT09IiwibWFjIjoiMDc2ZjQzZjA0NTI5ZWQwNTVjN2ZkNThlOTJiMDJkZWI1NTI4ZjAwZWFmMmIyYTlkMGM0ZGIzNjllMmZiMzNlMyIsInRhZyI6IiJ9 X-WS-User-Mbox: eyJpdiI6IkkvS1hOUGlhdlZFNy9iMG1HTUZscHc9PSIsInZhbHVlIjoidzhPQjhQNnRKQ2JMT2JSLytXR1Rxdz09IiwibWFjIjoiMjM3NGMxZTJlOGRlMjZmZGNlODYxODViMWUxMzE5YTlhNTFlOWU2MmZmMDg3NjcyYWJlZTI0NzczNGE5OTZkNiIsInRhZyI6IiJ9 X-WS-Location: eJxzKUpMKykGAAfpAmU- X-Mailer: Infomaniak Workspace (1.3.699) References: In-Reply-To: X-Infomaniak-Routing: alpha X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:29222, ipnet:2001:1600::/32, country:CH] X-Rspamd-Queue-Id: 4W29Hw19jkz4qXp --_=_swift_1718536133_dd074ea5afe65c052e00854bd1dc6d23_=_ Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 2024-06-16T12:37:28.000+02:00, Gleb Popov wrote:= >=C2=A0This=C2=A0is=C2=A0partly=C2=A0my=C2=A0fault=C2=A0as=C2=A0a= =C2=A0maintainer.=C2=A0We've=C2=A0updated=C2=A0Obsidian=C2=A0in=C2=A0our = >=C2=A0 >=C2=A0$WORK=C2=A0tree,=C2=A0but=C2=A0I=C2=A0forgot=C2=A0to=C2= =A0upstream=C2=A0it. >=C2=A0 >=C2=A0But=C2=A0I=C2=A0also=C2=A0agree= =C2=A0that=C2=A0we=C2=A0should=C2=A0make=C2=A0an=C2=A0exception=C2=A0for= =C2=A0Electron=C2=A0ports,=C2=A0because >=C2=A0 >=C2=A0-=C2=A0Electron= =C2=A0itself=C2=A0is=C2=A0pretty=C2=A0fast-moving,=C2=A0but=C2=A0at=C2= =A0the=C2=A0same=C2=A0time=C2=A0has=C2=A0a >=C2=A0 >=C2=A0lot=C2=A0of= =C2=A0commercial=C2=A0consumers=C2=A0that=C2=A0aren't=C2=A0that=C2=A0keen= =C2=A0for=C2=A0keeping=C2=A0up=C2=A0with >=C2=A0 >=C2=A0its=C2=A0pace= >=C2=A0 >=C2=A0-=C2=A0We=C2=A0only=C2=A0have=C2=A0electron=C2=A0packag= e=C2=A0building=C2=A0on=C2=A0the=C2=A0cluster,=C2=A0so=C2=A0it >=C2=A0 = >=C2=A0wouldn't=C2=A0hurt=C2=A0package=C2=A0building=C2=A0side=C2=A0of= =C2=A0things=C2=A0anyway. >=C2=A0 >=C2=A0What=C2=A0do=C2=A0you=C2=A0thi= nk,=C2=A0Rene? The thing is that they're very heavy, tends to accumula= te CVEs quite fast and have a lot of dependencies that we need to maintai= n (since it's EoL upstream). We already have 4 versions in tree which is = quite a lot already.and likely quite time-consuming to maintain as it is.= >From what I can tell it also appears that almost every other distro ha= ve dropped Electron 25 as it been EoL for 6 months already. https://forum= .obsidian.md/t/electron-25-is-now-eol-please-upgrade-to-a-newer-version/728= 78 Given upstream's versioning I guess upstream recently started sup= porting a more recent version as 1.6 was released about a week ago and th= ere's an alpha release using Electron 30. I do think the correct decis= ion here was to remove it despite not having a "fix" for all consumers th= ough. Best regards, Daniel --_=_swift_1718536133_dd074ea5afe65c052e00854bd1dc6d23_=_ Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
On 2024-06-16T12:37:28.000+02:00, Gleb Popov <arrowd@fr= eebsd.org> wrote:


This is partly my fault as a=
 maintainer. We've updated Obsidian in our
$WORK tree, but I =
forgot to upstream it.

But I also agree that w=
e should make an exception for Electron ports, because
- Elec=
tron itself is pretty fast-moving, but at the same time has a
lot of commercial consumers that aren't that keen for keeping up with
<=
/div>
its pace
- We only have electron package building o=
n the cluster, so it
wouldn't hurt package building side of t=
hings anyway.

What do you think, Rene?
The thing is that they're very heavy, tends= to accumulate CVEs quite fast and have a lo= t of dependencies that we need to maintain (since it's EoL upstream). We al= ready have 4 versions in tree which is quite a lot already.an= d likely quite time-consuming to maintain as it is. From what I can tell it= also appears that almost every other distro have dropped Electron 25 as it= been EoL for 6 months already. https://forum.obsidian= .md/t/electron-25-is-now-eol-please-upgrade-to-a-newer-version/72878

Given upstream's versioning I guess upstream rec= ently started supporting a more recent version as 1.6 was released about a = week ago and there's an alpha release using Electron 30.

=
I do think the correct decision here was to remove it despite no= t having a "fix" for all consumers though.

Bes= t regards,
Daniel
--_=_swift_1718536133_dd074ea5afe65c052e00854bd1dc6d23_=_--