--- /dev/null
+Title: Free software activity in October 2025
+Slug: activity-2025-10
+Date: 2025-11-09 15:33:33 +00:00
+Category: columbiform
+Tags: activity, columbiform, freexian, planet-debian, planet-ubuntu
+Summary: OpenSSH 10.1p1/10.2p1, ansible-core autopkgtests, and the start of Python 3.14 packaging work.
+Mastodon-ID: 115520466936682306
+
+About 95% of my Debian contributions this month were
+[sponsored](https://www.freexian.com/about/debian-contributions/) by
+Freexian.
+
+You can also support my work directly via
+[Liberapay](https://liberapay.com/cjwatson) or [GitHub
+Sponsors](https://github.com/sponsors/cjwatson).
+
+## OpenSSH
+
+OpenSSH upstream released
+[10.1p1](https://www.openssh.org/releasenotes.html#10.1) this month, so I
+upgraded to that. In the process, I reverted a Debian patch that changed IP
+quality-of-service defaults, which [made sense at the
+time](https://bugs.debian.org/923879) but has since been reworked upstream
+anyway, so it makes sense to find out whether we still have similar
+problems. So far I haven't heard anything bad in this area.
+
+10.1p1 caused a regression in the ssh-agent-filter package's tests, which I
+[bisected and chased up with
+upstream](https://bugzilla.mindrot.org/show_bug.cgi?id=3877).
+
+10.1p1 also had a few other user-visible regressions
+([#1117574](https://bugs.debian.org/1117574),
+[#1117594](https://bugs.debian.org/1117594),
+[#1117638](https://bugs.debian.org/1117638),
+[#1117720](https://bugs.debian.org/1117720)); I upgraded to
+[10.2p1](https://www.openssh.org/releasenotes.html#10.2) which fixed some of
+these, and [contributed some upstream debugging
+help](https://bugzilla.mindrot.org/show_bug.cgi?id=3879#c10) to clear up the
+rest. While I was there, I also fixed [ssh-session-cleanup: fails due to
+wrong $ssh\_session\_pattern](https://bugs.debian.org/1117965) in our
+packaging.
+
+Finally, I got all this into trixie-backports, which I intend to keep up to
+date throughout the forky development cycle.
+
+## Python packaging
+
+For some time, ansible-core has had occasional autopkgtest failures that
+usually go away before anyone has a chance to look into them properly. I
+ran into these via openssh recently and decided to track them down. It
+turns out that they only happened when the `libpython3.13-stdlib` package
+had different versions in testing and unstable, because an integration test
+setup script made a change that would be reverted if that package was ever
+upgraded in the testbed, and one of the integration tests accidentally
+failed to disable system apt sources comprehensively enough while testing
+the behaviour of the `ansible.builtin.apt` module. I [fixed this in
+Debian](https://salsa.debian.org/python-team/packages/ansible-core/-/compare/debian%2F2.19.3-1...debian%2F2.19.3-2?from_project_id=58498)
+and [contributed the relevant part
+upstream](https://github.com/ansible/ansible/pull/86050).
+
+We've started working on enabling Python 3.14 as a supported version in
+Debian. I fixed or helped to fix a number of packages for this:
+
+* [cxxopt](https://bugs.debian.org/1117894)
+* [cython](https://bugs.debian.org/1117978)
+* [m2crypto](https://bugs.debian.org/1117891)
+* [pymongo](https://bugs.debian.org/1117899) (already fixed by Alexandre
+ Detiste, but after checking this I took the opportunity to simplify its
+ arrangements for disabling broken tests and to switch to
+ autopkgtest-pkg-pybuild)
+* [python-cytoolz](https://bugs.debian.org/1117902)
+* [python-lz4](https://bugs.debian.org/1117907)
+* [python-msgspec](https://bugs.debian.org/1117910)
+
+I upgraded these packages to new upstream versions:
+
+* aiomysql (fixing [CVE-2025-62611](https://bugs.debian.org/1118754))
+* audioread
+* bitstruct
+* black (fixing a [build failure](https://bugs.debian.org/1114067))
+* blake3-py
+* buildbot (fixing a [regression](https://bugs.debian.org/1117640))
+* cxxopt
+* django-cte
+* django-pipeline
+* django-q
+* isort
+* khard
+* lazy-object-proxy (fixing a [build
+ failure](https://bugs.debian.org/1117892))
+* psycopg3 (fixing a [build failure](https://bugs.debian.org/1117367))
+* pydantic
+* pydantic-core
+* pydantic-extra-types
+* pytest-mock
+* pytest-rerunfailures
+* python-bcrypt
+* python-bitarray
+* python-confluent-kafka ([#1089748](https://bugs.debian.org/1089748))
+* python-crispy-bootstrap4
+* python-crispy-bootstrap5
+* python-django-mptt
+* python-ewoksppf (fixing a [build
+ failure](https://bugs.debian.org/1115134))
+* python-greenlet (fixing a [build failure on
+ powerpc](https://bugs.debian.org/1082800) and a [Python 3.14 build
+ failure](https://bugs.debian.org/1117906))
+* python-gssapi
+* python-holidays
+* python-persistent
+* python-pyluach
+* python-pytest-asyncio
+* python-pytest-run-parallel
+* python-pytokens ([contributed supporting fix
+ upstream](https://github.com/tusharsadhwani/pytokens/pull/11))
+* python-semantic-release
+* python-stdlib-list
+* python-tblib
+* python-telethon
+* python-treq
+* python-typing-inspection
+* python-watchfiles
+* pyupgrade
+* rpds-py (fixing a [build failure](https://bugs.debian.org/1114347))
+* zope.hookable
+* zope.schema
+* zope.testrunner (removing [run-time dependency on
+ setuptools](https://bugs.debian.org/1084020))
+
+I packaged [python-blockbuster](https://bugs.debian.org/1110998) and
+[python-pytokens](https://bugs.debian.org/1116692), needed as new
+dependencies of various other packages.
+
+Santiago Vila filed a [batch of
+bugs](https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=debian-qa@lists.debian.org&tag=ftbfs-nocheck-profile)
+about packages that fail to build when using the [`nocheck` build
+profile](https://wiki.debian.org/BuildProfileSpec), and I fixed several of
+these (generally just a matter of adjusting build-dependencies):
+
+* pastedeploy ([#1116833](https://bugs.debian.org/1116833))
+* python-ewokscore ([#1116858](https://bugs.debian.org/1116858))
+* python-ewoksdask ([#1116859](https://bugs.debian.org/1116859))
+* python-ewoksorange ([#1116862](https://bugs.debian.org/1116862))
+* python-odmantic ([#1116866](https://bugs.debian.org/1116866))
+* python-processview ([#1116871](https://bugs.debian.org/1116871))
+* python-semantic-release ([#1116881](https://bugs.debian.org/1116881))
+* sqlfluff ([#1116916](https://bugs.debian.org/1116916))
+
+I helped out with the [scikit-learn 1.7
+transition](https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=debian-science@lists.debian.org&tag=scikit-learn-1.7):
+
+* [python-gplearn](https://bugs.debian.org/1117991) ([contributed
+ upstream](https://github.com/trevorstephens/gplearn/pull/305))
+* [scikit-optimize](https://bugs.debian.org/1117992) ([contributed
+ upstream](https://github.com/holgern/scikit-optimize/pull/8))
+* [sklearn-pandas](https://bugs.debian.org/1117989)
+
+I fixed or helped to fix several other build/test failures:
+
+* [beangulp](https://bugs.debian.org/1118418) ([contributed
+ upstream](https://github.com/beancount/beangulp/pull/193))
+* [beanquery](https://bugs.debian.org/1117386)
+* [buildbot](https://bugs.debian.org/1117391) ([contributed
+ upstream](https://github.com/buildbot/buildbot/pull/8707))
+* [celery](https://bugs.debian.org/1118419) ([contributed
+ upstream](https://github.com/celery/celery/pull/9968))
+* [cython](https://bugs.debian.org/1114604) (only on i386; involved a rather
+ slow bisection process first)
+* [django-measurement](https://bugs.debian.org/1118305)
+* [django-select2](https://bugs.debian.org/1118306)
+* [ocrmypdf](https://bugs.debian.org/1118170) (partial investigation, still
+ open)
+* [poetry-plugin-export](https://bugs.debian.org/1117421)
+* [pytest-aiohttp](https://bugs.debian.org/1114282)
+* [python-aiohttp-session](https://bugs.debian.org/1117423)
+* [python-cups](https://bugs.debian.org/1107129) (cross-building)
+* [python-django-postgres-extra](https://bugs.debian.org/1117647) (actually
+ needed a fix in python-django)
+* [python-fabio](https://bugs.debian.org/1114715)
+* [python-jellyfish](https://bugs.debian.org/1114308) ([contributed
+ upstream](https://codeberg.org/jpt/jellyfish/pulls/232))
+* [python-maturin](https://bugs.debian.org/1117369) (thanks to a patch from
+ Peter Michael Green in [#1115459](https://bugs.debian.org/1115459))
+* [python-requests-oauthlib](https://bugs.debian.org/1114330)
+* [python-telethon](https://bugs.debian.org/1115760)
+* [python-webargs](//bugs.debian.org/1115756)
+* [silx](https://bugs.debian.org/1114379)
+* [sphinx-inline-tabs](https://salsa.debian.org/python-team/packages/sphinx-inline-tabs/-/compare/debian%2F2023.4.21-2...debian%2F2023.4.21-3?from_project_id=75611)
+
+I fixed some other bugs:
+
+* [cython: The man page is `/usr/bin/env: 'python': No such file or
+ directory`](https://bugs.debian.org/1105905)
+* [depthcharge-tools: SyntaxWarnings with Python 3.12 about invalid escape
+ sequences](https://bugs.debian.org/1078006) ([contributed
+ upstream](https://github.com/alpernebbi/depthcharge-tools/pull/9) a while
+ ago)
+* [django-auditlog: Please drop dependencies on
+ python3-pytzdata](https://bugs.debian.org/1112509)
+* [pysmi: Might trigger: AttributeError: module 'importlib' has no attribute
+ 'machinery'](https://bugs.debian.org/1118055) ([attempted to contribute
+ upstream](https://github.com/etingof/pysmi/pull/74), although that
+ repository is dead)
+* [python-msgspec: Please use pseudo-packages for architecture
+ whitelisting](https://bugs.debian.org/1115274)
+* [python-tomlkit: Binary package rejected](https://bugs.debian.org/1118582)
+
+I investigated a [python-py build failure](https://bugs.debian.org/1117768),
+which turned out to have been fixed in Python 3.13.9.
+
+I adopted [zope.hookable](https://bugs.debian.org/948809) and
+[zope.location](https://bugs.debian.org/948812) for the Python team.
+
+Following an IRC question, I [ported linux-gpib-user to
+pybuild-plugin-pyproject](https://salsa.debian.org/electronics-team/linux-gpib-user/-/merge_requests/1),
+and added tests to make sure the resulting binary package layout is correct.
+
+## Rust packaging
+
+Another Pydantic upgrade meant I had to upgrade a corresponding stack of
+Rust packages to new upstream versions:
+
+* rust-idna
+* rust-jiter
+* rust-pyo3
+* rust-regex
+* rust-regex-automata
+* rust-speedate
+* rust-uuid
+
+I also upgraded rust-archery and rust-rpds.
+
+## Other bits and pieces
+
+I fixed a few bugs in other packages I maintain:
+
+* [halibut: FTCBFS: passes host flags to the build
+ compiler](https://bugs.debian.org/1117014)
+* [iprutils: No package available for other
+ architectures](https://bugs.debian.org/1117112)
+
+I investigated a [malware report against
+tini](https://bugs.debian.org/1118530), which I think we can prove to be a
+false positive (at least under the reasonable assumption that there isn't
+malware hiding in libgcc or glibc). Yay for reproducible builds!
+
+I noticed and fixed a [small UI deficiency in
+debbugs](https://salsa.debian.org/debbugs-team/debbugs/-/merge_requests/25),
+making the checkboxes under "Misc options" on package pages easier to hit.
+This is merged but we haven't yet deployed it.
+
+I notced and fixed a
+[typo](https://salsa.debian.org/debian/developers-reference/-/merge_requests/73)
+in the [Being kind to
+porters](https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#being-kind-to-porters)
+section of the Debian Developer's Reference.
+
+## Code reviews
+
+* [base-passwd: Add clock
+ group](https://salsa.debian.org/debian/base-passwd/-/merge_requests/17)
+ (rejected)
+* [debbugs: Fix dep8 autopkgtests, make Salsa CI fully
+ green](https://salsa.debian.org/debbugs-team/debbugs/-/merge_requests/24)
+ (reviewed, awaiting revisions)
+* [python-gmpy2: FTBFS](https://bugs.debian.org/1117764) (sponsored fix for
+ Martin Kelly)
~cjwatson / blog.git / commitdiff