Bug#980032: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Jonas Smedegaard
Quoting Pirate Praveen (2021-01-13 13:42:22)
> 
> 
> On Wed, Jan 13, 2021 at 12:22 pm, Xavier  wrote:
> > CC to pkg-javascript-devel for node-yarnpkg elements
> 
> 
> We can try to update yarnpkg to version 2 by building corepack [1].
> 
> I need help with these packages,
> 
> New modules: clipanion terser-webpack-plugin  ts-loader 
> @zkochan/cmd-shim
> 
> Update terser to 4.8 at least

Draft of node-terser 4.8.0 is now pushed to Salsa - help making it work 
is quite welcome, just please do *not* introduce pkg-js-tools.


> I'm currently trying to update node-babel7 in buster-backports and it 
> can take some more time before I can get to these.
> 
> We can embed a copy of request in yarnpkg as a last resort.

Do *not* embed for the reason of hiding obsoletion!

If node-request cannot be removed then do not remove it!

Instead, place it in package section oldlibs, change package description 
to clarify its deprecated state and strongly warn against relying on it, 
and file RC bugreports against any package that rely on it anyway.

Then each such RC bug can be treated individually.  Either lowered to 
non-RC, or better: keep it RC and request an exception from release 
managers.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

signature.asc
Description: signature


Bug#980032: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Pirate Praveen




On Wed, Jan 13, 2021 at 12:22 pm, Xavier  wrote:

CC to pkg-javascript-devel for node-yarnpkg elements



We can try to update yarnpkg to version 2 by building corepack [1].

I need help with these packages,

New modules: clipanion terser-webpack-plugin  ts-loader 
@zkochan/cmd-shim


Update terser to 4.8 at least

I'm currently trying to update node-babel7 in buster-backports and it 
can take some more time before I can get to these.


We can embed a copy of request in yarnpkg as a last resort.

[1] https://github.com/nodejs/corepack



Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Adrian Bunk
On Wed, Jan 13, 2021 at 12:22:09PM +0100, Xavier wrote:
> 
> Hi,

Hi Xavier,

> last node-jsdom moved node-request to recommended dependency and no more
> build-depends on it (16.4.0+~cs77.17.35-3). Some features won't work but
> this features are not used to build and autopkgtest anything, so last
> node-jsdom works fine to build and test Bullseye without node-request
> (no network access needed). Do you prefer I remove this recommended
> dependency (and open a non-RC bug against node-jsdom for missing features)?

I am not a member of the release team, so my personal opinion won't 
matter that much.

> CC to pkg-javascript-devel for node-yarnpkg elements

This and some other "Remove dependency to node-request" bugs are not 
even at release critical severity, correcting the severity to serious 
would be a good first step.

> Cheers,
> Xavier

cu
Adrian



Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Xavier
Le 13/01/2021 à 11:56, Adrian Bunk a écrit :
> On Wed, Jan 13, 2021 at 09:37:52AM +0100, Xavier Guimard wrote:
>> Package: release.debian.org
>> Severity: normal
>> User: release.debian@packages.debian.org
>> Usertags: rm
>> X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org
>>
>> Hi,
>>
>> node-request is deprecated (#956423) and won't be part of Bullseye. I'd
>> like to see it removed from testing after node-jsdom migration.
> 
> Popcon is low enough that #956423 should start autoremoval as soon 
> as no key package [1] is left in testing that (build) depends on it
> without any action from the release team.
> 
> 
> bunk@coccia:~$ dak rm -p -R -n -s bullseye node-request
> ...
> Checking reverse dependencies...
> # Broken Depends:
> node-gyp: node-gyp
> node-jsdom: node-jsdom
> node-matrix-js-sdk: node-matrix-js-sdk
> node-millstone: node-millstone
> node-yarnpkg: yarnpkg
> 
> # Broken Build-Depends:
> node-jsdom: node-request
> node-matrix-js-sdk: node-request
> node-opencv: node-request
> node-request-promise-core: node-request
> node-yarnpkg: node-request (>= 2.88.1-5~)
> 
> 
> Fixing node-yarnpkg (#958686) would be the next step.
> 
> From a quick look node-jsdom and node-yarnpkg are the only key packages 
> still (build) depending on node-request in testing, if this is true then
> having both fixed in testing should start autoremoval of node-request 
> and all reverse (build) dependencies in testing.

Hi,

last node-jsdom moved node-request to recommended dependency and no more
build-depends on it (16.4.0+~cs77.17.35-3). Some features won't work but
this features are not used to build and autopkgtest anything, so last
node-jsdom works fine to build and test Bullseye without node-request
(no network access needed). Do you prefer I remove this recommended
dependency (and open a non-RC bug against node-jsdom for missing features)?

CC to pkg-javascript-devel for node-yarnpkg elements

Cheers,
Xavier



Bug#980032: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Xavier
Le 13/01/2021 à 12:22, Xavier a écrit :
> Le 13/01/2021 à 11:56, Adrian Bunk a écrit :
>> On Wed, Jan 13, 2021 at 09:37:52AM +0100, Xavier Guimard wrote:
>>> Package: release.debian.org
>>> Severity: normal
>>> User: release.debian@packages.debian.org
>>> Usertags: rm
>>> X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org
>>>
>>> Hi,
>>>
>>> node-request is deprecated (#956423) and won't be part of Bullseye. I'd
>>> like to see it removed from testing after node-jsdom migration.
>>
>> Popcon is low enough that #956423 should start autoremoval as soon 
>> as no key package [1] is left in testing that (build) depends on it
>> without any action from the release team.
>>
>>
>> bunk@coccia:~$ dak rm -p -R -n -s bullseye node-request
>> ...
>> Checking reverse dependencies...
>> # Broken Depends:
>> node-gyp: node-gyp
>> node-jsdom: node-jsdom
>> node-matrix-js-sdk: node-matrix-js-sdk
>> node-millstone: node-millstone
>> node-yarnpkg: yarnpkg
>>
>> # Broken Build-Depends:
>> node-jsdom: node-request
>> node-matrix-js-sdk: node-request
>> node-opencv: node-request
>> node-request-promise-core: node-request
>> node-yarnpkg: node-request (>= 2.88.1-5~)
>>
>>
>> Fixing node-yarnpkg (#958686) would be the next step.
>>
>> From a quick look node-jsdom and node-yarnpkg are the only key packages 
>> still (build) depending on node-request in testing, if this is true then
>> having both fixed in testing should start autoremoval of node-request 
>> and all reverse (build) dependencies in testing.
> 
> Hi,
> 
> last node-jsdom moved node-request to recommended dependency and no more
> build-depends on it (16.4.0+~cs77.17.35-3). Some features won't work but
> this features are not used to build and autopkgtest anything, so last
> node-jsdom works fine to build and test Bullseye without node-request
> (no network access needed). Do you prefer I remove this recommended
> dependency (and open a non-RC bug against node-jsdom for missing features)?
> 
> CC to pkg-javascript-devel for node-yarnpkg elements
> 
> Cheers,
> Xavier

node-gyp is fixed too



Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Adrian Bunk
On Wed, Jan 13, 2021 at 09:37:52AM +0100, Xavier Guimard wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: rm
> X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org
> 
> Hi,
> 
> node-request is deprecated (#956423) and won't be part of Bullseye. I'd
> like to see it removed from testing after node-jsdom migration.

Popcon is low enough that #956423 should start autoremoval as soon 
as no key package [1] is left in testing that (build) depends on it
without any action from the release team.


bunk@coccia:~$ dak rm -p -R -n -s bullseye node-request
...
Checking reverse dependencies...
# Broken Depends:
node-gyp: node-gyp
node-jsdom: node-jsdom
node-matrix-js-sdk: node-matrix-js-sdk
node-millstone: node-millstone
node-yarnpkg: yarnpkg

# Broken Build-Depends:
node-jsdom: node-request
node-matrix-js-sdk: node-request
node-opencv: node-request
node-request-promise-core: node-request
node-yarnpkg: node-request (>= 2.88.1-5~)


Fixing node-yarnpkg (#958686) would be the next step.

>From a quick look node-jsdom and node-yarnpkg are the only key packages 
still (build) depending on node-request in testing, if this is true then
having both fixed in testing should start autoremoval of node-request 
and all reverse (build) dependencies in testing.


> Cheers,
> Xavier

cu
Adrian

[1] https://udd.debian.org/cgi-bin/key_packages.yaml.cgi



Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Xavier Guimard
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: rm
X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org

Hi,

node-request is deprecated (#956423) and won't be part of Bullseye. I'd
like to see it removed from testing after node-jsdom migration.

Cheers,
Xavier