Bug#980032: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5
Quoting Pirate Praveen (2021-01-13 13:42:22) > > > On Wed, Jan 13, 2021 at 12:22 pm, Xavier wrote: > > CC to pkg-javascript-devel for node-yarnpkg elements > > > We can try to update yarnpkg to version 2 by building corepack [1]. > > I need help with these packages, > > New modules: clipanion terser-webpack-plugin ts-loader > @zkochan/cmd-shim > > Update terser to 4.8 at least Draft of node-terser 4.8.0 is now pushed to Salsa - help making it work is quite welcome, just please do *not* introduce pkg-js-tools. > I'm currently trying to update node-babel7 in buster-backports and it > can take some more time before I can get to these. > > We can embed a copy of request in yarnpkg as a last resort. Do *not* embed for the reason of hiding obsoletion! If node-request cannot be removed then do not remove it! Instead, place it in package section oldlibs, change package description to clarify its deprecated state and strongly warn against relying on it, and file RC bugreports against any package that rely on it anyway. Then each such RC bug can be treated individually. Either lowered to non-RC, or better: keep it RC and request an exception from release managers. - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: signature
Bug#980032: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5
On Wed, Jan 13, 2021 at 12:22 pm, Xavier wrote: CC to pkg-javascript-devel for node-yarnpkg elements We can try to update yarnpkg to version 2 by building corepack [1]. I need help with these packages, New modules: clipanion terser-webpack-plugin ts-loader @zkochan/cmd-shim Update terser to 4.8 at least I'm currently trying to update node-babel7 in buster-backports and it can take some more time before I can get to these. We can embed a copy of request in yarnpkg as a last resort. [1] https://github.com/nodejs/corepack
Bug#980032: RM: node-request/2.88.1-5
On Wed, Jan 13, 2021 at 12:22:09PM +0100, Xavier wrote: > > Hi, Hi Xavier, > last node-jsdom moved node-request to recommended dependency and no more > build-depends on it (16.4.0+~cs77.17.35-3). Some features won't work but > this features are not used to build and autopkgtest anything, so last > node-jsdom works fine to build and test Bullseye without node-request > (no network access needed). Do you prefer I remove this recommended > dependency (and open a non-RC bug against node-jsdom for missing features)? I am not a member of the release team, so my personal opinion won't matter that much. > CC to pkg-javascript-devel for node-yarnpkg elements This and some other "Remove dependency to node-request" bugs are not even at release critical severity, correcting the severity to serious would be a good first step. > Cheers, > Xavier cu Adrian
Bug#980032: RM: node-request/2.88.1-5
Le 13/01/2021 à 11:56, Adrian Bunk a écrit : > On Wed, Jan 13, 2021 at 09:37:52AM +0100, Xavier Guimard wrote: >> Package: release.debian.org >> Severity: normal >> User: release.debian@packages.debian.org >> Usertags: rm >> X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org >> >> Hi, >> >> node-request is deprecated (#956423) and won't be part of Bullseye. I'd >> like to see it removed from testing after node-jsdom migration. > > Popcon is low enough that #956423 should start autoremoval as soon > as no key package [1] is left in testing that (build) depends on it > without any action from the release team. > > > bunk@coccia:~$ dak rm -p -R -n -s bullseye node-request > ... > Checking reverse dependencies... > # Broken Depends: > node-gyp: node-gyp > node-jsdom: node-jsdom > node-matrix-js-sdk: node-matrix-js-sdk > node-millstone: node-millstone > node-yarnpkg: yarnpkg > > # Broken Build-Depends: > node-jsdom: node-request > node-matrix-js-sdk: node-request > node-opencv: node-request > node-request-promise-core: node-request > node-yarnpkg: node-request (>= 2.88.1-5~) > > > Fixing node-yarnpkg (#958686) would be the next step. > > From a quick look node-jsdom and node-yarnpkg are the only key packages > still (build) depending on node-request in testing, if this is true then > having both fixed in testing should start autoremoval of node-request > and all reverse (build) dependencies in testing. Hi, last node-jsdom moved node-request to recommended dependency and no more build-depends on it (16.4.0+~cs77.17.35-3). Some features won't work but this features are not used to build and autopkgtest anything, so last node-jsdom works fine to build and test Bullseye without node-request (no network access needed). Do you prefer I remove this recommended dependency (and open a non-RC bug against node-jsdom for missing features)? CC to pkg-javascript-devel for node-yarnpkg elements Cheers, Xavier
Bug#980032: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5
Le 13/01/2021 à 12:22, Xavier a écrit : > Le 13/01/2021 à 11:56, Adrian Bunk a écrit : >> On Wed, Jan 13, 2021 at 09:37:52AM +0100, Xavier Guimard wrote: >>> Package: release.debian.org >>> Severity: normal >>> User: release.debian@packages.debian.org >>> Usertags: rm >>> X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org >>> >>> Hi, >>> >>> node-request is deprecated (#956423) and won't be part of Bullseye. I'd >>> like to see it removed from testing after node-jsdom migration. >> >> Popcon is low enough that #956423 should start autoremoval as soon >> as no key package [1] is left in testing that (build) depends on it >> without any action from the release team. >> >> >> bunk@coccia:~$ dak rm -p -R -n -s bullseye node-request >> ... >> Checking reverse dependencies... >> # Broken Depends: >> node-gyp: node-gyp >> node-jsdom: node-jsdom >> node-matrix-js-sdk: node-matrix-js-sdk >> node-millstone: node-millstone >> node-yarnpkg: yarnpkg >> >> # Broken Build-Depends: >> node-jsdom: node-request >> node-matrix-js-sdk: node-request >> node-opencv: node-request >> node-request-promise-core: node-request >> node-yarnpkg: node-request (>= 2.88.1-5~) >> >> >> Fixing node-yarnpkg (#958686) would be the next step. >> >> From a quick look node-jsdom and node-yarnpkg are the only key packages >> still (build) depending on node-request in testing, if this is true then >> having both fixed in testing should start autoremoval of node-request >> and all reverse (build) dependencies in testing. > > Hi, > > last node-jsdom moved node-request to recommended dependency and no more > build-depends on it (16.4.0+~cs77.17.35-3). Some features won't work but > this features are not used to build and autopkgtest anything, so last > node-jsdom works fine to build and test Bullseye without node-request > (no network access needed). Do you prefer I remove this recommended > dependency (and open a non-RC bug against node-jsdom for missing features)? > > CC to pkg-javascript-devel for node-yarnpkg elements > > Cheers, > Xavier node-gyp is fixed too
Bug#980032: RM: node-request/2.88.1-5
On Wed, Jan 13, 2021 at 09:37:52AM +0100, Xavier Guimard wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: rm > X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org > > Hi, > > node-request is deprecated (#956423) and won't be part of Bullseye. I'd > like to see it removed from testing after node-jsdom migration. Popcon is low enough that #956423 should start autoremoval as soon as no key package [1] is left in testing that (build) depends on it without any action from the release team. bunk@coccia:~$ dak rm -p -R -n -s bullseye node-request ... Checking reverse dependencies... # Broken Depends: node-gyp: node-gyp node-jsdom: node-jsdom node-matrix-js-sdk: node-matrix-js-sdk node-millstone: node-millstone node-yarnpkg: yarnpkg # Broken Build-Depends: node-jsdom: node-request node-matrix-js-sdk: node-request node-opencv: node-request node-request-promise-core: node-request node-yarnpkg: node-request (>= 2.88.1-5~) Fixing node-yarnpkg (#958686) would be the next step. >From a quick look node-jsdom and node-yarnpkg are the only key packages still (build) depending on node-request in testing, if this is true then having both fixed in testing should start autoremoval of node-request and all reverse (build) dependencies in testing. > Cheers, > Xavier cu Adrian [1] https://udd.debian.org/cgi-bin/key_packages.yaml.cgi
Bug#980032: RM: node-request/2.88.1-5
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: rm X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org Hi, node-request is deprecated (#956423) and won't be part of Bullseye. I'd like to see it removed from testing after node-jsdom migration. Cheers, Xavier