On 08/03/16 18:55, Orion Poplawski wrote: > On 03/08/2016 10:42 AM, Brian Bouterse wrote: >> This removal has been problematic for a lot of software including >> the listed EPEL dependencies and anything those depend on. I >> propose the following be done: >> >> - Temporarily un-retire Django14 in EPEL6, and allow a planned >> sunset after some period of time. It would not receive updates >> during this time since upstream Django deprecated it already. >> >> - Add python-django[0] from EPEL7 (python-django-1.6.11-5.el7) to >> EPEL6 in a way that has allows some time overlap with Django14 >> being also available. During that time other packages can switch to >> using python-django gracefully. This should be feasible because >> Django 1.6 is the last Django Y release which will run on Python >> 2.6 making it feasible to run on EL6. >> >> Other ideas or suggestions are welcome. >> >> [0]: >> https://admin.fedoraproject.org/pkgdb/package/rpms/python-django/ >> >> -Brian > > With the relatively fast moving nature of django, I'm wondering if > any django package in EPEL should be unversioned. It seems like we > should have python-djangoXX instead. Although I have no idea how > easy it is to implement that. > > Also, while Matthias has issued an update recently for 1.6 in EPEL7, > it looks like its days are numbered as upstream has dropped it as > well: https://www.djangoproject.com/download/ > > Hopefully Matthias will chime in with his thoughts. >
Hello, I'm very sorry about this, and I should have communicated at all. Upstream django releases about every 9 months a new release, they're announcing deprecations as soon as they know in advance, leaving enough time to adapt. Unfortunately, there are downstreams struggling with the speed of development. So, matter of fact is, Django version 1.4 was the last LTS version being able to run on python-2.6. I had to make a cut here, since there were discovered 4 security issues in later django versions. Django-1.4.x was out of support by upstream already, thus, nobody really looked at that, if it's vulnerable. I wouldn't really consider Django-1.6 to be an alternative here, that was being deprecated around 9 months before Django-1.4. I may be stopping support on Django-1.6 in the near future. For epel7, the better candidate for LTS is Django-1.8. Speaking of python-djangoxx: I have been there, it's a pain as well. And that will eventually let the packet space explode, i.e you would have to have something like python26-django14-tagging (or whatever). Situation is not ideal anyways. My proposal would be, to un-retire Django14 for EPEL6. Looking at the long list of (now broken) dependencies, I would expect lots of leaf packages, living there because someone thought it'd be nice to have it. But, in fact, one should seriously think to retire those packages. Matthias _______________________________________________ epel-devel mailing list [email protected] http://lists.fedoraproject.org/admin/lists/[email protected]
