Xiyue Deng <[email protected]> writes:

> Hi Sean,
>
> Sean Whitton <[email protected]> writes:
>
>> Hello,
>>
>> On Fri 04 Jul 2025 at 11:47am -07, Xiyue Deng wrote:
>>
>>> I think there are values for including other packages which helps with
>>> security updates.  For example, we have Org 7.9.11 shipped with Emacs
>>> 30.1; later if a security bug is found in 7.9.11, and Emacs 30.2 ships a
>>> newer version of Org to fix that, this gets automatically taken care of
>>> by this.
>>
>> We would have to upload security updates for both packages anyway,
>> though.
>>
>
> Yes.  Still, if we get this now, there's less work in future ;)
>

FYI, upstream merged my proposed patch in bug#78844[1].  I'd still
advocate for its inclusion in Trixie to make the upgrade experience
smoother for dropped packages (e.g. eglot, project, etc.)  Though I do
acknowledge that we are already in the late stage of the Trixie release
cycle, and it's probably safe to maintain the status quo.  If the latter
is chosen, I wonder whether this may still be a good candidate for a
future stable update, or only be suitable for a backport?

> [...]

[1] https://debbugs.gnu.org/78844

-- 
Regards,
Xiyue Deng

Attachment: signature.asc
Description: PGP signature

Reply via email to