Package: release.debian.org Severity: normal User: release.debian....@packages.debian.org Usertags: unblock
Please unblock package python-uflash [ Reason ] The upload fixes RC bug #991280. Source package python-uflash provides a convenience package (firmware-microbit-micropython-dl) which downloads a pre-compiled MicroPython runtime for the micro:bit computer. The downloaded file is checksummed to ensure it is compatible with the installed version of python3-uflash; the package will fail to install on checksum error (as seen in the bug report). During the bullseye hard freeze, upstream replaced this file with a new runtime that supports a new version of the micro:bit computer that is not supported by our packages in bullseye. The changed file has a different checksum, and fails to install, causing the package installation to abort. Bug report #991280 was received after bullseye went into full freeze. [ Impact ] Very serious for users of mu-editor, as the editor would be removed from bullseye as a result of its dependency on python3-uflash. mu-editor is a popular editor used globally by children and adults learning Python, with increasing popularity indicated by popcon. Bullseye provides the separate firmware-microbit-micropython package, which is a Recommended dependency of python3-uflash and which almost all users will install. Only a tiny proportion of users install the affected -dl package. However, all mu-editor users will be affected if the updated package does not migrate and mu-editor is removed from bullseye. [ Tests ] The firmware-microbit-micropython-dl binary package has been tested locally to ensure that it downloads the correct runtime file. There are no upstream code changes at all; autopkgtests are unaffected and still pass. [ Risks ] The debdiff is trivial: one updated URL to ensure the correct file is downloaded on package installation. There are no changes to any upstream code. No other packages are impacted by this change. The affected binary package (firmware-microbit-micropython-dl) is a leaf package, and is only Suggested by python3-uflash. [ Checklist ] [x] all changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in testing [ Other info ] The offending binary package (firmware-microbit-micropython-dl) was added to Debian during the buster development cycle to improve the end-user experience whilst the firmware-microbit-micropython package was being developed. Most mu-editor/uflash users will not install it. unblock python-uflash/1.2.4+dfsg-8
diff -Nru python-uflash-1.2.4+dfsg/debian/changelog python-uflash-1.2.4+dfsg/debian/changelog --- python-uflash-1.2.4+dfsg/debian/changelog 2021-02-07 09:27:01.000000000 +0000 +++ python-uflash-1.2.4+dfsg/debian/changelog 2021-07-30 04:26:04.000000000 +0100 @@ -1,3 +1,10 @@ +python-uflash (1.2.4+dfsg-8) unstable; urgency=medium + + * d/firmware-microbit-micropython-dl.postinst: + - Update firmware URL (Closes: #991280) + + -- Nick Morrott <ni...@debian.org> Fri, 30 Jul 2021 04:26:04 +0100 + python-uflash (1.2.4+dfsg-7) unstable; urgency=medium * d/python-uflash-doc.links: diff -Nru python-uflash-1.2.4+dfsg/debian/firmware-microbit-micropython-dl.postinst python-uflash-1.2.4+dfsg/debian/firmware-microbit-micropython-dl.postinst --- python-uflash-1.2.4+dfsg/debian/firmware-microbit-micropython-dl.postinst 2021-02-07 09:27:01.000000000 +0000 +++ python-uflash-1.2.4+dfsg/debian/firmware-microbit-micropython-dl.postinst 2021-07-30 04:26:04.000000000 +0100 @@ -4,7 +4,7 @@ # Adapted from firmware downloader for bladeRF (source package: bladerf) -UPSTREAM='https://raw.githubusercontent.com/ntoll/uflash/master/firmware.hex' +UPSTREAM='https://github.com/ntoll/uflash/raw/867468d386da0aa20212b69a152ce8bfc0972366/firmware.hex' CHECKSUM='81d92bccd9f26046aa3ba6a43ec553e0' DATAFILE='/usr/share/firmware-microbit-micropython/firmware.hex' DESCRIPT='micro:bit MicroPython runtime'