** Description changed:

  [Availability]
  The package libgav1 is already in Ubuntu universe.
  The package libgav1 builds for the architectures it is designed to
  work on.
  It currently builds and works for architectures: amd64, amd64v3,
  arm64, armhf, i386, ppc64el, riscv64
  (s390x is not supported by design as libgav1 Build-Depends on
  architecture-is-little-endian, so the big-endian s390x build stays in
  dependency-wait)
  Link to package: https://launchpad.net/ubuntu/+source/libgav1
  
  [Rationale]
  - The package libgav1 is required in Ubuntu main as an AV1 decoder
    backend that the binary package libavif16 is linked against. libavif
    is itself being promoted to main to provide AVIF image format
    support to python3-pil (pillow), which is already in main and widely
    used.
  - The package libgav1 will not generally be useful for a large part of
    our user base, but is important/helpful still because libavif16 (a
    new main candidate) is compiled with libgav1 as one of its AV1
    decoder backends, and libavif16 is in turn required by python3-pil
    for AVIF image support
  - The package libgav1 is a new runtime dependency of package libavif,
    which we are bringing into main (see LP: #2130005)
  - The binary package libgav1-2 needs to be in main to achieve the
    above. All other binary packages built by libgav1 (libgav1-dev,
    libgav1-bin) should remain in universe
  - There is no other/better way to solve this that is already in main
    or should go universe->main instead of this. libavif supports
    several AV1 codec backends (dav1d, libgav1, rav1e, svt-av1) and the
    Debian/Ubuntu libavif binaries are linked against all of them, so
    each enabled backend libavif16 links must also be in main. dav1d is
    the primary/fastest AV1 decoder, but the current libavif build also
    enables libgav1 (Google's reference AV1 decoder) as an additional
    decoder backend. So, as long as libavif16 keeps that backend,
    libgav1 must be in main too. (If the libavif build were changed to
    drop the libgav1 backend this MIR would no longer be needed, see the
    libavif MIR for that overall decision)
  - This is the first time the package will be in main
  
  - The package libgav1 is required in Ubuntu main no later than the
    26.10 release, in lockstep with the libavif MIR, in order to drop
    the Ubuntu delta in pillow and enable AVIF image support, which is
    available upstream but currently disabled due to libavif (and its
    codec backends) being in universe
  
  [Security]
  - No known CVEs / security issues in this software in the past:
    - No matches in the National Vulnerability Database for "libgav1"
    - https://ubuntu.com/security/cve?package=libgav1
    - https://security-tracker.debian.org/tracker/source-package/libgav1
  
  - no `suid` or `sgid` binaries
  - no executables in `/sbin` and `/usr/sbin`
  - Package does not install services, timers or recurring jobs
  - Packages does not open privileged ports (ports < 1024)
  - Package does not expose any external endpoints
  - Packages does not contain extensions to security-sensitive software
    (filters, scanners, plugins, UI skins, ...)
  - No deprecated security algorithms
  
  [Quality assurance - function/usage]
  - The package works well right after install
  
  [Quality assurance - maintenance]
  - The package is maintained well in Debian/Ubuntu/Upstream and does
    not have too many, long-term & critical, open bugs
    - Ubuntu https://bugs.launchpad.net/ubuntu/+source/libgav1
    - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libgav1
      (1 open Debian bug, not critical)
    - Upstream bug tracker (Google issue tracker):
      https://issuetracker.google.com/issues?q=componentid:750480
  - The package does not deal with exotic hardware we cannot support
  
  [Quality assurance - testing]
  - The package runs a test suite on build time, if it fails it makes
    the build fail. The build runs `ctest --force-new-ctest-process
    --verbose` over the upstream googletest-based test suite (56 tests,
    all passing in the latest build). Link to build log:
    * amd64:
      
https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024677/+files/buildlog_ubuntu-stonking-amd64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz
    * amd64v3:
      
https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024678/+files/buildlog_ubuntu-stonking-amd64v3.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz
    * arm64:
      
https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024679/+files/buildlog_ubuntu-stonking-arm64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz
    * armhf:
      
https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024680/+files/buildlog_ubuntu-stonking-armhf.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz
    * i386:
      
https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024681/+files/buildlog_ubuntu-stonking-i386.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz
    * ppc64el:
      
https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024682/+files/buildlog_ubuntu-stonking-ppc64el.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz
    * riscv64:
      
https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024683/+files/buildlog_ubuntu-stonking-riscv64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz
  
  - One upstream unit test (the CPU feature-detection test) is
    temporarily disabled via 
debian/patches/0004-Temporarily-disable-CPU-test.patch;
    all other tests run and must pass for the build to succeed.
  
  - The package runs an autopkgtest, and is currently passing on the
    following list of architectures, link to test logs:
-   * amd64: TBD
+   * amd64: TBD, queued
    * amd64v3:
      
https://autopkgtest.ubuntu.com/results/autopkgtest-stonking/stonking/amd64v3/libg/libgav1/20260630_213441_ef79b@/log.gz
-   * arm64:
-     
https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024679/+files/buildlog_ubuntu-stonking-arm64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz
+   * arm64:
+     
https://autopkgtest.ubuntu.com/results/autopkgtest-stonking/stonking/arm64/libg/libgav1/20260701_074911_1e9bd@/log.gz
    * armhf:
      
https://autopkgtest.ubuntu.com/results/autopkgtest-stonking/stonking/armhf/libg/libgav1/20260630_203426_d6255@/log.gz
    * i386:
      
https://autopkgtest.ubuntu.com/results/autopkgtest-stonking/stonking/i386/libg/libgav1/20260630_214835_30079@/log.gz
    * ppc64el:
      
https://autopkgtest.ubuntu.com/results/autopkgtest-stonking/stonking/ppc64el/libg/libgav1/20260630_223209_12a00@/log.gz
  
  - The package does not have failing build-time tests right now.
  
  [Quality assurance - packaging]
  - A mechanism to detect and fetch new upstream versions is present and
    works
  - debian/control defines a correct Maintainer field (Debian Multimedia
    Maintainers; the Ubuntu delta is a no-change rebuild only, so the
    Debian maintainer is retained)
  - This package does not yield massive lintian Warnings, Errors
  - Recent build log of the package:
    
https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024677/+files/buildlog_ubuntu-stonking-amd64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz
  - ```lintian --pedantic
    P: libgav1 source: maintainer-manual-page [debian/gav1_decode.1]
    P: libgav1 source: redundant-priority-optional-field [debian/control:3]
    P: libgav1 source: trailing-whitespace [debian/changelog:92]
    ```
  - Lintian overrides are not present
  
  - This package does not rely on obsolete or about to be demoted
    packages
  - This package has no python2 or GTK2 dependencies
  - The package will not be installed by default
  
  - Packaging and build is easy: debian/rules is short and only sets
    hardening + LTO, disables non-baseline SIMD (SSE4.1/AVX2 on x86,
    selectively NEON on arm) to meet Debian's ISA baseline, links
    -latomic on a few arches, and enables shared-library builds. Link to
    debian/rules:
    https://git.launchpad.net/ubuntu/+source/libgav1/tree/debian/rules
  
  [UI standards]
  - Application is not end-user facing (does not need translation)
  
  [Dependencies]
  - Used check-mir from ubuntu-dev-tools to validate all dependencies or
    recommends are in main.
  
  [Standards compliance]
  - This package correctly follows FHS and Debian Policy
  
  [Maintenance/Owner]
  - The owning team will be ~debcrafters-packages and I have their
    acknowledgment for that commitment
  - The future owning team is already subscribed to the package before
    promotion
  
  - This does not use static builds
  - This does not use vendored code
  - This package is not rust based
  
  - The package has been built within the last 3 months in the archive
  - Build link on launchpad:
    https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1
  
  - This change will not impact other teams (it only adds an AV1 decoder
    backend used by libavif)
  
  [Background information]
  The Package description explains the package well
  Upstream Name is libgav1
  Link to upstream project: https://chromium.googlesource.com/codecs/libgav1/

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2158712

Title:
  [MIR] libgav1 (libavif dependency)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libgav1/+bug/2158712/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to