Re: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Jonas Smedegaard
Quoting Pirate Praveen (2021-01-13 13:42:22)
> 
> 
> On Wed, Jan 13, 2021 at 12:22 pm, Xavier  wrote:
> > CC to pkg-javascript-devel for node-yarnpkg elements
> 
> 
> We can try to update yarnpkg to version 2 by building corepack [1].
> 
> I need help with these packages,
> 
> New modules: clipanion terser-webpack-plugin  ts-loader 
> @zkochan/cmd-shim
> 
> Update terser to 4.8 at least

Draft of node-terser 4.8.0 is now pushed to Salsa - help making it work 
is quite welcome, just please do *not* introduce pkg-js-tools.


> I'm currently trying to update node-babel7 in buster-backports and it 
> can take some more time before I can get to these.
> 
> We can embed a copy of request in yarnpkg as a last resort.

Do *not* embed for the reason of hiding obsoletion!

If node-request cannot be removed then do not remove it!

Instead, place it in package section oldlibs, change package description 
to clarify its deprecated state and strongly warn against relying on it, 
and file RC bugreports against any package that rely on it anyway.

Then each such RC bug can be treated individually.  Either lowered to 
non-RC, or better: keep it RC and request an exception from release 
managers.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

signature.asc
Description: signature
-- 
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel

Re: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Pirate Praveen



On Wed, Jan 13, 2021 at 12:22 pm, Xavier  wrote:

CC to pkg-javascript-devel for node-yarnpkg elements



We can try to update yarnpkg to version 2 by building corepack [1].

I need help with these packages,

New modules: clipanion terser-webpack-plugin  ts-loader 
@zkochan/cmd-shim


Update terser to 4.8 at least

I'm currently trying to update node-babel7 in buster-backports and it 
can take some more time before I can get to these.


We can embed a copy of request in yarnpkg as a last resort.

[1] https://github.com/nodejs/corepack



--
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel

Re: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Adrian Bunk
On Wed, Jan 13, 2021 at 12:22:09PM +0100, Xavier wrote:
> 
> Hi,

Hi Xavier,

> last node-jsdom moved node-request to recommended dependency and no more
> build-depends on it (16.4.0+~cs77.17.35-3). Some features won't work but
> this features are not used to build and autopkgtest anything, so last
> node-jsdom works fine to build and test Bullseye without node-request
> (no network access needed). Do you prefer I remove this recommended
> dependency (and open a non-RC bug against node-jsdom for missing features)?

I am not a member of the release team, so my personal opinion won't 
matter that much.

> CC to pkg-javascript-devel for node-yarnpkg elements

This and some other "Remove dependency to node-request" bugs are not 
even at release critical severity, correcting the severity to serious 
would be a good first step.

> Cheers,
> Xavier

cu
Adrian

-- 
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel

Re: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Xavier
Le 13/01/2021 à 12:22, Xavier a écrit :
> Le 13/01/2021 à 11:56, Adrian Bunk a écrit :
>> On Wed, Jan 13, 2021 at 09:37:52AM +0100, Xavier Guimard wrote:
>>> Package: release.debian.org
>>> Severity: normal
>>> User: release.debian@packages.debian.org
>>> Usertags: rm
>>> X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org
>>>
>>> Hi,
>>>
>>> node-request is deprecated (#956423) and won't be part of Bullseye. I'd
>>> like to see it removed from testing after node-jsdom migration.
>>
>> Popcon is low enough that #956423 should start autoremoval as soon 
>> as no key package [1] is left in testing that (build) depends on it
>> without any action from the release team.
>>
>>
>> bunk@coccia:~$ dak rm -p -R -n -s bullseye node-request
>> ...
>> Checking reverse dependencies...
>> # Broken Depends:
>> node-gyp: node-gyp
>> node-jsdom: node-jsdom
>> node-matrix-js-sdk: node-matrix-js-sdk
>> node-millstone: node-millstone
>> node-yarnpkg: yarnpkg
>>
>> # Broken Build-Depends:
>> node-jsdom: node-request
>> node-matrix-js-sdk: node-request
>> node-opencv: node-request
>> node-request-promise-core: node-request
>> node-yarnpkg: node-request (>= 2.88.1-5~)
>>
>>
>> Fixing node-yarnpkg (#958686) would be the next step.
>>
>> From a quick look node-jsdom and node-yarnpkg are the only key packages 
>> still (build) depending on node-request in testing, if this is true then
>> having both fixed in testing should start autoremoval of node-request 
>> and all reverse (build) dependencies in testing.
> 
> Hi,
> 
> last node-jsdom moved node-request to recommended dependency and no more
> build-depends on it (16.4.0+~cs77.17.35-3). Some features won't work but
> this features are not used to build and autopkgtest anything, so last
> node-jsdom works fine to build and test Bullseye without node-request
> (no network access needed). Do you prefer I remove this recommended
> dependency (and open a non-RC bug against node-jsdom for missing features)?
> 
> CC to pkg-javascript-devel for node-yarnpkg elements
> 
> Cheers,
> Xavier

node-gyp is fixed too

-- 
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel

Re: [Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Xavier
Le 13/01/2021 à 11:56, Adrian Bunk a écrit :
> On Wed, Jan 13, 2021 at 09:37:52AM +0100, Xavier Guimard wrote:
>> Package: release.debian.org
>> Severity: normal
>> User: release.debian@packages.debian.org
>> Usertags: rm
>> X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org
>>
>> Hi,
>>
>> node-request is deprecated (#956423) and won't be part of Bullseye. I'd
>> like to see it removed from testing after node-jsdom migration.
> 
> Popcon is low enough that #956423 should start autoremoval as soon 
> as no key package [1] is left in testing that (build) depends on it
> without any action from the release team.
> 
> 
> bunk@coccia:~$ dak rm -p -R -n -s bullseye node-request
> ...
> Checking reverse dependencies...
> # Broken Depends:
> node-gyp: node-gyp
> node-jsdom: node-jsdom
> node-matrix-js-sdk: node-matrix-js-sdk
> node-millstone: node-millstone
> node-yarnpkg: yarnpkg
> 
> # Broken Build-Depends:
> node-jsdom: node-request
> node-matrix-js-sdk: node-request
> node-opencv: node-request
> node-request-promise-core: node-request
> node-yarnpkg: node-request (>= 2.88.1-5~)
> 
> 
> Fixing node-yarnpkg (#958686) would be the next step.
> 
> From a quick look node-jsdom and node-yarnpkg are the only key packages 
> still (build) depending on node-request in testing, if this is true then
> having both fixed in testing should start autoremoval of node-request 
> and all reverse (build) dependencies in testing.

Hi,

last node-jsdom moved node-request to recommended dependency and no more
build-depends on it (16.4.0+~cs77.17.35-3). Some features won't work but
this features are not used to build and autopkgtest anything, so last
node-jsdom works fine to build and test Bullseye without node-request
(no network access needed). Do you prefer I remove this recommended
dependency (and open a non-RC bug against node-jsdom for missing features)?

CC to pkg-javascript-devel for node-yarnpkg elements

Cheers,
Xavier

-- 
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel

[Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

2021-01-13 Thread Xavier Guimard
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: rm
X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org

Hi,

node-request is deprecated (#956423) and won't be part of Bullseye. I'd
like to see it removed from testing after node-jsdom migration.

Cheers,
Xavier

-- 
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel