Re: python-urllib3 1.25.6 uploaded to experimental (closes CVE-2019-11236) but fails build tests

2019-10-13 Thread Drew Parsons
Daniele wrote: I hope to have the time to investigate also this: urllib3/contrib/pyopenssl.py contains code to have SSL with SNI_-support for Python 2 and it depends on pyOpenSSL, cryptography and idna. Maybe looking at them can give us more clues. Also, could you see if using Python3 the con

Requesting a sponsor for my package

2019-10-13 Thread Gabe Livengood
I would like to ask any Debian Developers on this mailing list to consider sponsoring my package (https://mentors.debian.net/package/css-html-js-minify). It is a streamlined minifier written in Python 3 that targets CSS, JS, and HTML. It is a single script, pretty easy to put together, but it has h

Re: Requesting a sponsor for my package

2019-10-13 Thread Thomas Goirand
On 10/14/19 12:36 AM, Gabe Livengood wrote: > I would like to ask any Debian Developers on this mailing list to > consider sponsoring my package > (https://mentors.debian.net/package/css-html-js-minify). It is a > streamlined minifier written in Python 3 that targets CSS, JS, and HTML. > It is a si

Raising severity to serious for some Python 2 leaf packages with no Python 3 support upstream

2019-10-13 Thread Thomas Goirand
Hi, In some cases I've seen, particularly in the med or science team, switching some packages to Python 3 requires a significant effort. For example, today I looked into removing Python 2 from python-cogent. Running sixer on all files lead to a huge log of problems to solve by hand. There's no up

Re: Python2 removal: package with low-popcon reverse dependencies

2019-10-13 Thread Thomas Goirand
On 10/11/19 9:26 PM, Christian Kastner wrote: > On 11.10.19 19:47, Matthias Klose wrote: >> On 11.10.19 18:27, Christian Kastner wrote: >>> This would nevertheless be a case for the "py2keep", right? >> >> No. >> >> #933348 is another bug for removed packages (mopidy-scrobler). Do you >> really wan

Re: Raising severity to serious for some Python 2 leaf packages with no Python 3 support upstream

2019-10-13 Thread Nicholas D Steeves
Hi Thomas and Python Team, Thomas Goirand writes: > For example, today I looked into removing Python 2 from python-cogent. > Running sixer on all files lead to a huge log of problems to solve by > hand. There's no upstream support for Python 3 on that one. > > For this kind of package, I see no

Re: Raising severity to serious for some Python 2 leaf packages with no Python 3 support upstream

2019-10-13 Thread Scott Kitterman
On Sunday, October 13, 2019 10:52:17 PM EDT Thomas Goirand wrote: > Hi, > > In some cases I've seen, particularly in the med or science team, > switching some packages to Python 3 requires a significant effort. > > For example, today I looked into removing Python 2 from python-cogent. > Running s