Re: (when?) do we (still) contact maintainers?

2019-02-07 Thread Ola Lundqvist
Hi Antoine It is my fault that python developers were not contacted. I added the package to dla-needed.txt yesterday (or possibly the day before) and planned to contact the maintainers. But before I had the chance to do so the package was already fixed and then it did not feel appropriate to conta

Re: (when?) do we (still) contact maintainers?

2019-02-07 Thread Antoine Beaupré
On 2019-02-07 18:32:39, Markus Koschany wrote: > Please do not CC me. I am subscribed. > > Am 07.02.19 um 18:23 schrieb Antoine Beaupré: > [...] >> Well, I don't think we should make such calls without announcing it and >> documenting the new workflow clearly, first off. >> >> Second, I think I mo

Re: (when?) do we (still) contact maintainers?

2019-02-07 Thread Markus Koschany
Please do not CC me. I am subscribed. Am 07.02.19 um 18:23 schrieb Antoine Beaupré: [...] > Well, I don't think we should make such calls without announcing it and > documenting the new workflow clearly, first off. > > Second, I think I mostly agree with you, but we need to be certain we > won't

Re: (when?) do we (still) contact maintainers?

2019-02-07 Thread Antoine Beaupré
On 2019-02-07 17:58:48, Markus Koschany wrote: > Hello, > > Am 07.02.19 um 17:32 schrieb Antoine Beaupré: > [...] >> Am I missing something here? Did we change this practice, or is this an >> oversight? > > I have been part of the team for three years now, from my experience > almost all people are

Re: (when?) do we (still) contact maintainers?

2019-02-07 Thread Markus Koschany
Hello, Am 07.02.19 um 17:32 schrieb Antoine Beaupré: [...] > Am I missing something here? Did we change this practice, or is this an > oversight? I have been part of the team for three years now, from my experience almost all people are very happy when someone else fixes bugs in oldstable. Most o

(when?) do we (still) contact maintainers?

2019-02-07 Thread Antoine Beaupré
Hi, I was under the impression that we were supposed to contact maintainers when we add packages to dla-needed.txt, as part of the triage work. That is, at least, the method documented here: https://wiki.debian.org/LTS/Development#Triage_new_security_issues Confident that people doing the triage