In fact it's on https://ubuntu-archive-team.ubuntu.com/component-
mismatches-proposed.html

duktape: duktape-dev libduktape207
MIR: #1997417 (In Progress)
[Reverse-Depends: Rescued from duktape (Uploader: seb128), polkitd (MAIN)]

I'm doing the promotion now

Override component to main
duktape 2.7.0+tests-0ubuntu2 in mantic: universe/misc -> main
duktape-dev 2.7.0+tests-0ubuntu2 in mantic amd64: 
universe/interpreters/optional/100% -> main
duktape-dev 2.7.0+tests-0ubuntu2 in mantic arm64: 
universe/interpreters/optional/100% -> main
duktape-dev 2.7.0+tests-0ubuntu2 in mantic armhf: 
universe/interpreters/optional/100% -> main
duktape-dev 2.7.0+tests-0ubuntu2 in mantic i386: 
universe/interpreters/optional/100% -> main
duktape-dev 2.7.0+tests-0ubuntu2 in mantic ppc64el: 
universe/interpreters/optional/100% -> main
duktape-dev 2.7.0+tests-0ubuntu2 in mantic riscv64: 
universe/interpreters/optional/100% -> main
duktape-dev 2.7.0+tests-0ubuntu2 in mantic s390x: 
universe/interpreters/optional/100% -> main
libduktape207 2.7.0+tests-0ubuntu2 in mantic amd64: universe/libs/optional/100% 
-> main
libduktape207 2.7.0+tests-0ubuntu2 in mantic arm64: universe/libs/optional/100% 
-> main
libduktape207 2.7.0+tests-0ubuntu2 in mantic armhf: universe/libs/optional/100% 
-> main
libduktape207 2.7.0+tests-0ubuntu2 in mantic i386: universe/libs/optional/100% 
-> main
libduktape207 2.7.0+tests-0ubuntu2 in mantic ppc64el: 
universe/libs/optional/100% -> main
libduktape207 2.7.0+tests-0ubuntu2 in mantic riscv64: 
universe/libs/optional/100% -> main
libduktape207 2.7.0+tests-0ubuntu2 in mantic s390x: universe/libs/optional/100% 
-> main
Override [y|N]? y



** Changed in: duktape (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to duktape in Ubuntu.
https://bugs.launchpad.net/bugs/1997417

Title:
  [MIR] duktape

Status in duktape package in Ubuntu:
  Fix Released

Bug description:
  [Availability]
  The package duktape is already in Ubuntu universe.
  The package duktape build for the architectures it is designed to work on.
  It currently builds and works for architetcures: amd64 arm64 armhf ppc64el 
riscv64 s390x
  Link to package https://launchpad.net/ubuntu/+source/duktape

  [Rationale]
  - The package duktape is required in Ubuntu main for updating polkit.
    Upstream polkit landed an alternative option to use duktape instead
    of mozjs.  duktape is a much smaller JavaScript implementation and
    simpler code-base to maintain than mozjs, and Debian is going to use
    it.
    - Support for JavaScript-based rules in polkit have also been
      requested in enterprise desktop use-cases.

  - The package duktape is required in Ubuntu main no later than Feb 23
    due to feature freeze.

  [Security]
  - Had 1 security issue in the past
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46322
    - https://ubuntu.com/security/CVE-2021-46322

    - no `suid` or `sgid` binaries
    - no executables in `/sbin` and `/usr/sbin`
    - Package does not install services, timers or recurring jobs
    - Packages does not open privileged ports (ports < 1024)
    - Packages does not contain extensions to security-sensitive software
      (filters, scanners, plugins, UI skins, ...)

  [Quality assurance - function/usage]
  - The package works well right after install

  [Quality assurance - maintenance]
  - The package is maintained well in Debian/Ubuntu, and currently has
    only one normal and one wishlist bug open
    and long term critical bugs open
    - Ubuntu https://bugs.launchpad.net/ubuntu/+source/duktape/+bugs
    - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=duktape
      https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=951902
      https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906201
  - The package does not deal with exotic hardware we cannot support

  [Quality assurance - testing]
  - The package does not run a test at build time because it currently
    does not have a test suite (duktape itself does, but not its Debian
    package).

  - The package does not run an autopkgtest because it doesn't have one.

  - The package does not have failing autopkgtests right now.

  - The package can not be tested at build time because upstream does
    not include tests in their release tarballs, which is what the
    Debian packaging uses -- though I've opened an upstream issue for
    this, requesting inclusion of their test suite in release tarballs:
    https://github.com/svaarala/duktape/issues/2523
    For now, in lieu of that, there is a test plan and example test
    logs, as well as a proposed autopkgtest, included in a separate
    comment below.

  [Quality assurance - packaging]
  - debian/watch is present and works

  - debian/control defines a correct Maintainer field

  - This package does not yield massive lintian Warnings, Errors
  - Link to a recent build log of the package
    
https://launchpad.net/ubuntu/+source/duktape/2.7.0-1/+build/23197556/+files/buildlog_ubuntu-jammy-amd64.duktape_2.7.0-1_BUILDING.txt.gz
  - Full output from `lintian --pedantic` attached as an extra post.
  - Lintian overrides are not present

  - This package does not rely on obsolete or about to be demoted packages.
  - This package has no python2 or GTK2 dependencies

  - The package will be installed by default, but does not ask debconf
    questions higher than medium

  - Packaging and build is easy, link to d/rules
    https://salsa.debian.org/debian-iot-team/duktape/-/blob/master/debian/rules

  [UI standards]
  - Application is not end-user facing (does not need translation)

  [Dependencies]
  - No further depends or recommends dependencies that are not yet in main

  [Standards compliance]
  - This package correctly follows FHS and Debian Policy

  [Maintenance/Owner]
  - Owning Team will be desktop-packages
  - Team is not yet, but will subscribe to the package before promotion

  - This does not use static builds

  - This does not use vendored code

  - This package is not rust based

  - The package has been built in the archive more recently than the last
    test rebuild

  [Background information]
  The Package description explains the package well
  Upstream Name is Duktape
  Link to upstream project https://duktape.org

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/duktape/+bug/1997417/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to