--- /dev/null
+Title: Free software activity in July 2026
+Slug: activity-2026-07
+Date: 2026-08-11 11:42:43 +01:00
+Category: columbiform
+Tags: activity, columbiform, freexian, planet-debian
+Summary: More preparations for OpenSSH GSS-API split; the usual round of Python packaging work.
+Mastodon-ID: 117076461830593665
+
+About 95% of my Debian contributions this month were [sponsored](https://www.freexian.com/about/debian-contributions/) by Freexian.
+
+You can also support my work directly via [Liberapay](https://liberapay.com/cjwatson) or [GitHub Sponsors](https://github.com/sponsors/cjwatson).
+
+## OpenSSH
+
+Now that Ubuntu 26.04 LTS has been released, I've been getting back to the [GSS-API key exchange package split](https://lists.debian.org/debian-devel/2024/04/msg00044.html) in our OpenSSH packaging. Once I started testing my draft `openssh-gssapi` source package, I realized that I needed to make some changes in the main `openssh` source package first in order to support it. The dependency from `openssh-server` to `openssh-client` was awkward, as was the (related) fact that `openssh-client` contained shared documentation for other OpenSSH binary packages. After some thought, I created a new `openssh-common` binary package, moved shared documentation and the `ssh-keygen` program to that, and dropped dependencies on `openssh-client` which were no longer necessary (fixing [#699473](https://bugs.debian.org/699473) and [#1070098](https://bugs.debian.org/1070098) in the process).
+
+This caused a couple of regressions ([#1141420](https://bugs.debian.org/1141420) and [#1141550](https://bugs.debian.org/1141550)) that I had to fix, and more subtly it also caused a number of autopkgtest regressions in other packages because `openssh-client` is no longer in base images as a result of a dependency from `openssh-server`. I believe I have fixes for all of these either pending review or merged (one of which I did in August rather than July):
+
+ * [curl](https://salsa.debian.org/debian/curl/-/merge_requests/65)
+ * [diffoscope](https://salsa.debian.org/reproducible-builds/diffoscope/-/merge_requests/170)
+ * [glome](https://salsa.debian.org/debian/glome/-/merge_requests/1)
+ * [golang-github-appleboy-easyssh-proxy](https://salsa.debian.org/go-team/packages/golang-github-appleboy-easyssh-proxy/-/merge_requests/4)
+ * [parsyncfp2](https://salsa.debian.org/debian/parsyncfp2/-/merge_requests/1)
+ * [rsync](https://salsa.debian.org/debian/rsync/-/merge_requests/41)
+
+I upgraded from 10.3p1 to 10.4p1, and in the process [contributed a GSS-API option handling fix upstream](https://bugzilla.mindrot.org/show_bug.cgi?id=3974).
+
+I made openssh-ssh1's package description [more accurately describe the package](https://bugs.debian.org/1123609), thanks to suggestions from Matthias Lang.
+
+## Python packaging
+
+New upstream versions:
+
+ * cryptodatahub (fixing a [build failure](https://bugs.debian.org/1140974))
+ * dep-logic
+ * django-q
+ * flufl.lock
+ * more-itertools
+ * multipart
+ * pyasn1 (fixing [CVE-2026-59884, CVE-2026-59885, and CVE-2026-59886](https://bugs.debian.org/1142388))
+ * pytest-rerunfailures
+ * python-auditwheel
+ * python-build
+ * python-certifi
+ * python-datamodel-code-generator (fixing a [build failure](https://bugs.debian.org/1141004), and an [incompatibility with pydantic 2.13](https://github.com/koxudaxi/datamodel-code-generator/issues/3578) that I reported upstream)
+ * python-django-parler
+ * python-httplib2
+ * python-pgbouncer
+ * python-time-machine
+ * python-treq
+ * python-typing-extensions
+ * python-wheezy.template
+ * storm
+ * ubelt
+ * webpy
+ * zope.testing
+
+Other build/test failures:
+
+ * [django-q: autopkgtest failure with Python 3.14](https://bugs.debian.org/1131792) ([reported upstream](https://github.com/django-q2/django-q2/issues/334))
+ * [httpx: FTBFS: E assert \[('uvicorn.ac...1.1 200 OK"')\] == \[('httpx', 20...1.1 200 OK"')\]](https://bugs.debian.org/1140980)
+ * [libntruprime: autopkgtest failures with Python 3.14](https://bugs.debian.org/1141778)
+ * [pygments: Handle None object before HTML escaping](https://bugs.debian.org/1141791) (fixed build failures in cmd2, gunicorn, python-inline-snapshot, and python-openapi-core)
+ * [python-authlib: some of tests/flask/test_oauth2/rfc9068/ failed](https://bugs.debian.org/1142205)
+ * [python-click: autopkgtest regression with pytest 9.1](https://bugs.debian.org/1140873) ([contributed upstream](https://github.com/pallets/click/pull/3656))
+ * [python-httplib2: FTBFS: ERROR tests/test_proxy.py - Failed: 'forked' not found in `markers` configuration option](https://bugs.debian.org/1141010)
+ * [python-maturin: Please upgrade goblin dependency to 0.10](https://bugs.debian.org/1143139)
+ * [python-memray: FTBFS on armhf (segfault)](https://bugs.debian.org/1140692)
+ * [python-mne: FTBFS: E pytest.PytestRemovedIn10Warning: Passing a non-Collection iterable to parametrize is deprecated](https://bugs.debian.org/1141210) (actually fixed in scikit-learn; [contributed upstream](https://github.com/scikit-learn/scikit-learn/pull/34448))
+ * [python-softlayer: autopkgtest fails with python3-click 8.3.3](https://bugs.debian.org/1142373) ([contributed upstream](https://github.com/softlayer/softlayer-python/pull/2262))
+ * [python-urllib3: FAILED test/contrib/test_pyopenssl.py](https://bugs.debian.org/1142214)
+
+I fixed some other bugs:
+
+ * [django-pipeline: Fails to build source after successful build](https://bugs.debian.org/1044278)
+ * [more-itertools: Please mark python3-more-itertools with M-A: foreign](https://bugs.debian.org/1078037)
+
+I adopted [transaction](https://bugs.debian.org/980407) for the Python team.
+
+I attended the [Python BoF](https://debconf26.debconf.org/talks/32-debian-python-bof/) at DebConf remotely, although a badly-timed fibre outage in the village I live in really didn't help.
+
+## Code reviews
+
+ * [openssh: sshd-session built without crypt(), breaking UsePAM=no password auth](https://bugs.debian.org/1142354) (merged and uploaded)
+ - [openssh: Slovak debconf templates translation](https://bugs.debian.org/1142938) (merged and uploaded)
+ * [python-treq: Fails to build source after successful build](https://bugs.debian.org/1045463) (merged and uploaded)
+ * [python-better-exceptions: FTBFS: failing tests](https://bugs.debian.org/1129141) (sponsored upload for Seyed Mohamad Amin Modaresi)
+
+## Other bits and pieces
+
+Dan Poltawski pointed out in a [Fediverse post](https://fedi.talktodan.com/@dan/116982771943815387) that the project history didn't list Sruthi as the current DPL. I [fixed that](https://salsa.debian.org/publicity-team/debian-history/-/merge_requests/30), although it doesn't look as though the fix is in the published version yet.
~cjwatson / blog.git / commitdiff