This bug was fixed in the package ubuntu-advantage-tools - 35.1ubuntu0~24.10
--------------- ubuntu-advantage-tools (35.1ubuntu0~24.10) oracular; urgency=medium * Backport 35.1ubuntu0 to oracular (LP: #2106660) ubuntu-advantage-tools (35.1ubuntu0) plucky; urgency=medium * apt: support ESM snapshots by adding snapshot URLs for ESM repositories to the authentication file (released in version 35) * lxd: store the configuration in /var/lib/ubuntu-advantage instead of /var/lib/ubuntu-pro (LP: #2106660) ubuntu-advantage-tools (35) plucky; urgency=medium * d/tests/usage: add more scenarios to dep8 tests * d/control: drop strict dependency on python3-pkg-resources (LP: #2083665) * d/rules: add conditional python3-pkg-resources dependency up to noble * d/ubuntu-pro-client.postrm: remove /var/lib/ubuntu-pro cache dir on purge * New upstream release 35: (LP: #2083973) - api: + new endpoints: * u.pro.attach.guest.get_guest_token.v1: Get the Pro client guest token * u.pro.security.cves.v1: List the fixable CVEs that affect the system + u.pro.packages.updates.v1: create new package status: upgrade_available_not_preferred (GH: #3184) + fixes for u.unattended_upgrades.status.v1: * do not crash when a Unattended-Upgrade config is missing * do not report unattended-upgrade disabled if any config is false * report missing Unattended-Upgrade configs as turned off - apt: + always ensure the ESM cache is present (GH: #3132) + fix permission warning when fetching apt-news (GH: #3209, LP: #2070095) + update logging for apt errors (GH: #3299) + only run the apt upgrade hook when run as root (LP: #2084677) - auto-attach: + aws: skip operation if no product codes found + gcp: add minimal image license codes - cli: + add support for vulnerability commands: * pro cves: List cves in the machine * pro cve: Show information about a specific cve + deduplicate entries in 'pro help' output (LP: #2091327) - config: add option lxd_guest_attach to control LXD integration with Pro - contract: + check onlySeries on reboot (GH: #3189) + collect cpu type for activity info - landscape: + update message if service not available through Pro (GH: #3331) - livepatch: do not enable livepatch on wsl (GH: #3156) - lxd: allow pro auto-attach to work on a LXD container -- Renan Rodrigo <renanrodr...@canonical.com> Thu, 10 Apr 2025 10:38:44 -0300 ** Changed in: ubuntu-advantage-tools (Ubuntu Oracular) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/2083665 Title: ubuntu-pro-client has an unnecessary dependency on python3-pkg- resources Status in ubuntu-advantage-tools package in Ubuntu: Fix Released Status in ubuntu-advantage-tools source package in Xenial: Fix Released Status in ubuntu-advantage-tools source package in Bionic: Fix Released Status in ubuntu-advantage-tools source package in Focal: Fix Released Status in ubuntu-advantage-tools source package in Jammy: Fix Released Status in ubuntu-advantage-tools source package in Noble: Fix Released Status in ubuntu-advantage-tools source package in Oracular: Fix Released Bug description: [ Impact ] The Client had an unnecessary dependency on python3-pkg-resources. This was bringing in many unwanted dependencies to seeds after Oracular. There is a code snippet autogenerated by setuptools which imports pkg_resources, and that is actually needed up to Focal. Jammy and greater only rely on pkg_resources as a fallback to importlib - which does not justify it's inclusion as a depndency. This was fixed in Oracular by just removing the dependency in version 34.1. However, that change would potentially break Xenial, Bionic and Focal. So, for version 35, a new patch has been applied, implementing a conditional dependency on the package. As of v35, the pro client will keep depending on pkg-resources up to Noble, but not for any subsequent release. [ Test Plan ] As the dependency was used directly in /usr/bin/pro, all pro commands must work after the patch exactly the same. Thus, it's possible to claim that the acceptance tests that will be considered as validation for #2083973 also cover this bug. Adittionally, on Oracular, we can verify that ubuntu-pro-client is installed and the dependency is not there, using `apt show`. [ Where problems could occur ] As this is a conditional dependency, mistakes in the implementation could lead to: - python3-pkg-resources being present as a dependency on Oracular+ : which would bring more dependencies as explained above - python3-pkg-resources being absent as a dependency on -Focal: which would break /usr/bin/pro. This is covered by the integration test suite. [ Original Description ] ubuntu-pro-client has an unnecessary dependency on python3-pkg-resources, at least grepping the source for pkg_resources doesn't show anything. Please remove it. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2083665/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp