--- /dev/null
+Title: Free software activity in December 2024
+Slug: activity-2024-12
+Date: Thu, 02 Jan 2025 00:16:14 +0000
+Category: columbiform
+Tags: activity, columbiform, freexian, planet-debian, planet-ubuntu
+Summary: OpenSSH, debconf, Python 3.13; about 70 RC bugs fixed.
+Mastodon-ID: 113755882100773577
+
+Most of my Debian contributions this month were
+[sponsored](https://www.freexian.com/about/debian-contributions/) by
+Freexian, as well as one direct donation via
+[Liberapay](https://liberapay.com/cjwatson) (thanks!).
+
+## OpenSSH
+
+I issued a [bookworm
+update](https://tracker.debian.org/news/1592591/accepted-openssh-192p1-2deb12u4-source-into-proposed-updates/)
+with a number of fixes that had accumulated over the last year, especially
+fixing GSS-API key exchange which
+[was](https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2053146)
+[quite](https://bugs.debian.org/1041521)
+[broken](https://bugs.debian.org/1088248) in bookworm.
+
+## base-passwd
+
+A few months ago, the adduser maintainer started a discussion with me (as
+the base-passwd maintainer) and the shadow maintainer about bringing all
+three source packages under one team, since they often need to cooperate on
+things like user and group names. I agreed, but hadn't got round to doing
+anything about it until recently. I've now officially moved it under team
+maintenance.
+
+## debconf
+
+Gioele Barabucci has been working on eliminating duplicated code between
+debconf and cdebconf, ultimately with the goal of migrating to cdebconf
+(which I'm not sure I'm convinced of as a goal, but if we can make
+improvements to both packages as part of working towards it then there's no
+harm in that). I finally got round to reviewing and merging confmodule
+changes in each of
+[debconf](https://salsa.debian.org/pkg-debconf/debconf/-/merge_requests/13)
+and
+[cdebconf](https://salsa.debian.org/installer-team/cdebconf/-/merge_requests/19).
+This caused an [installer regression](https://bugs.debian.org/1091366) due
+to a weirdness in cdebconf-udeb's packaging, which I fixed - sorry about
+that!
+
+I've also been dealing with a few patch submissions that had been in my
+queue for a long time, but more on that next month if all goes well.
+
+## CI issues
+
+I noticed and fixed a [problem with `Restrictions:
+needs-sudo`](https://salsa.debian.org/ci-team/autopkgtest/-/merge_requests/497)
+in autopkgtest.
+
+I fixed [broken aptly
+images](https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/572)
+in the Salsa CI pipeline.
+
+## Python team
+
+[Last month]({filename}/activity-2024-11.md), I mentioned some progress on
+sorting out the multipart vs. python-multipart name conflict in Debian
+([#1085728](https://bugs.debian.org/1085728)), and said that I thought we'd
+be able to finish it soon. I was right! We got it all done this month:
+
+* [gavodachs](https://bugs.debian.org/1088642)
+* [matrix-synapse](https://bugs.debian.org/1088647) (uploaded by Andrej
+ Shadura)
+* [Packaged multipart](https://bugs.debian.org/1088869)
+* [Converted python-wadllib to use the packaged version of
+ multipart](https://salsa.debian.org/python-team/packages/python-wadllib/-/commit/a8a9d7a5b2473099138295258bb7e73098632dfa)
+* [Made trac (build-)depend on python3-multipart, fixing build failures in
+ trac-customfieldadmin and trac-wysiwyg](https://bugs.debian.org/1082321)
+
+The Python 3.13 transition continues, and last month we were able to add it
+to the supported Python versions in testing. (The next step will be to make
+it the default.) I fixed lots of problems in aid of this, including:
+
+* [audioread](https://bugs.debian.org/1082047)
+* [celery](https://bugs.debian.org/1089102)
+* [cloud-sptheme](https://bugs.debian.org/1088224)
+* [djangorestframework](https://bugs.debian.org/1088246)
+* [dominate](https://bugs.debian.org/1088247)
+* [fenics-basix](https://bugs.debian.org/1090766) (investigated and
+ suggested a fix, although it hasn't yet been uploaded)
+* [ipykernel](https://bugs.debian.org/1088315)
+* [ipython](https://bugs.debian.org/1088322)
+* [jupyter-server](https://bugs.debian.org/1088366) ([contributed
+ upstream](https://github.com/jupyter-server/jupyter_server/pull/1477))
+* [mdp](https://bugs.debian.org/1088752) ([contributed
+ upstream](https://github.com/mdp-toolkit/mdp-toolkit/pull/104))
+* [pastescript](https://bugs.debian.org/1088763) ([contributed
+ upstream](https://github.com/pasteorg/pastescript/pull/15))
+* [pypandoc](https://bugs.debian.org/1088768) ([contributed
+ upstream](https://github.com/JessicaTegner/pypandoc/pull/384))
+* [python-aiosmtpd](https://bugs.debian.org/1082193)
+* [python-cheroot](https://bugs.debian.org/1089026)
+* [python-hjson](https://bugs.debian.org/1090275)
+* [python-miio](https://bugs.debian.org/1090278)
+* [python-pyramid](https://bugs.debian.org/1082259)
+* [python-trustme](https://bugs.debian.org/1089664) (uploaded by Robie
+ Basak)
+* [rich](https://bugs.debian.org/1082290) (investigated and tested; uploaded
+ by Sandro Tosi)
+* [supervisor](https://bugs.debian.org/1089058)
+* [tomopy](https://bugs.debian.org/1089068)
+
+Sphinx 8.0 [removed some old `intersphinx_mapping`
+syntax](https://github.com/sphinx-doc/sphinx/pull/12083) which turned out to
+still be in use by many packages in Debian. The fixes for this were
+individually trivial, but there were a lot of them:
+
+* [alot](https://bugs.debian.org/1090088)
+* [dot2tex](https://bugs.debian.org/1090097) ([contributed
+ upstream](https://github.com/xyz2tex/dot2tex/pull/116))
+* [flask-paginate](https://bugs.debian.org/1090098) ([contributed
+ upstream](https://github.com/lixxu/flask-paginate/pull/115))
+* [ipython](https://bugs.debian.org/1090234)
+* [klepto](https://bugs.debian.org/1090103)
+* [nose](https://bugs.debian.org/1090111)
+* [pathos](https://bugs.debian.org/1090113)
+* [pox](https://bugs.debian.org/1090087)
+* [ppft](https://bugs.debian.org/1090116)
+* [psycopg3](https://bugs.debian.org/1090263)
+* [pybindgen](https://bugs.debian.org/1090117) ([contributed
+ upstream](https://github.com/gjcarneiro/pybindgen/pull/56))
+* [pyina](https://bugs.debian.org/1090118)
+* [pyrr](https://bugs.debian.org/1090122) ([contributed
+ upstream](https://github.com/adamlwgriffiths/Pyrr/pull/128))
+* [pytest-mpi](https://bugs.debian.org/1090127) ([contributed
+ upstream](https://github.com/aragilar/pytest-mpi/pull/53))
+* [python-aiohttp-security](https://bugs.debian.org/1090129) ([contributed
+ upstream](https://github.com/aio-libs/aiohttp-security/pull/832))
+* [python-aiohttp-session](https://bugs.debian.org/1090128) ([contributed
+ upstream](https://github.com/aio-libs/aiohttp-session/pull/1047))
+* [python-anyqt](https://bugs.debian.org/1090131) ([contributed
+ upstream](https://github.com/ales-erjavec/anyqt/pull/8))
+* [python-argon2](https://bugs.debian.org/1090133)
+* [python-cai](https://bugs.debian.org/1090135) ([contributed
+ upstream](https://github.com/Benjamin-Lee/CodonAdaptationIndex/pull/16))
+* [python-django-analytical](https://bugs.debian.org/1090138) ([contributed
+ upstream](https://github.com/jazzband/django-analytical/pull/230))
+* [python-iptables](https://bugs.debian.org/1090146) ([contributed
+ upstream](https://github.com/ldx/python-iptables/pull/349))
+* [python-nacl](https://bugs.debian.org/1090152)
+* [python-pygtrie](https://bugs.debian.org/1090157)
+* [python-proto-plus](https://bugs.debian.org/1090156) ([contributed
+ upstream](https://github.com/googleapis/proto-plus-python/pull/509))
+* [python-requests-toolbelt](https://bugs.debian.org/1090160)
+* [python-tinycss](https://bugs.debian.org/1090163)
+* [python-whoosh](https://bugs.debian.org/1090164)
+* [symmetrize](https://bugs.debian.org/1090172) ([contributed
+ upstream](https://github.com/RealPolitiX/symmetrize/pull/23))
+* [vcr.py](https://bugs.debian.org/1090175)
+* [wtforms-components](https://bugs.debian.org/1090177)
+* [wtforms-test](https://bugs.debian.org/1090179)
+* [yoyo](https://bugs.debian.org/1090178)
+* [zope.deferredimport](https://bugs.debian.org/1090180)
+
+I found that twisted 24.11.0 broke tests in
+[buildbot](https://salsa.debian.org/python-team/packages/buildbot/-/commit/e6318ddf6be6db950ea8e07041f0115af1064e1d)
+and
+[wokkel](https://salsa.debian.org/python-team/packages/wokkel/-/commit/a386fb1a35922e1ebd32e05e9a760b7e971a6b42),
+and fixed those.
+
+I packaged [python-flatdict](https://bugs.debian.org/1089014), needed for a
+new upstream version of python-semantic-release.
+
+I tracked down a [test failure](https://bugs.debian.org/1088043) in
+vdirsyncer (which [I've been using for some
+years]({filename}/new-address-book.md), but had never previously needed to
+modify) and [contributed a fix
+upstream](https://github.com/pimutils/vdirsyncer/pull/1153).
+
+I fixed some packages to tolerate future versions of dh-python that will
+drop their dependency on python3-setuptools:
+
+* [pyfribidi](https://bugs.debian.org/1080705)
+* [pylibmc](https://bugs.debian.org/1080709)
+* [python-mkdocs](https://bugs.debian.org/1072850)
+
+I fixed [django-cte](https://bugs.debian.org/1018341) to remove a
+build-dependency on the obsolete python3-nose package.
+
+I added Django 5.1 support to django-polymorphic. (There are a number of
+other packages that still need work here.)
+
+I fixed various other build/test failures:
+
+* [black](https://bugs.debian.org/1091135)
+* datalad-next: [#1080969](https://bugs.debian.org/1080969) and
+ [#1088038](https://bugs.debian.org/1088038) ([contributed
+ upstream](https://github.com/datalad/datalad-next/pull/768))
+* [dipy](https://bugs.debian.org/1090768) (uploaded by Andreas Tille)
+* [pyfribidi](https://bugs.debian.org/1087453)
+* [pylibmc](https://bugs.debian.org/1090196), fixing a build failure in
+ cachelib
+* [pympress](https://bugs.debian.org/1076908)
+* [pytest-forked](https://salsa.debian.org/python-team/packages/pytest-forked/-/commit/01697be93cdef9bcb751ba4cc8bfc13ec29cb26b)
+ ([contributed
+ upstream](https://github.com/pytest-dev/pytest-forked/pull/93))
+* python-mongomock:
+ [c03f91b51048](https://salsa.debian.org/python-team/packages/python-mongomock/-/commit/c03f91b51048e87d20035cbabd0a89bd6f041cf8)
+ and
+ [c485fb8fef23](https://salsa.debian.org/python-team/packages/python-mongomock/-/commit/c485fb8fef2383b35cd00b4f14f7c1af9e6438b4)
+* [python-nox](https://bugs.debian.org/1090281)
+
+I upgraded these packages to new upstream versions:
+
+* aioftp
+* alot
+* astroid
+* buildbot
+* cloudpickle (fixing a [Python 3.13
+ failure](https://bugs.debian.org/1088227))
+* django-countries
+* django-sass-processor
+* djoser (fixing [CVE-2024-21543](https://bugs.debian.org/1089915))
+* ipython
+* jsonpickle
+* lazr.delegates
+* loguru (fixing a [Python 3.13 failure](https://bugs.debian.org/1088751))
+* netmiko
+* pydantic
+* pydantic-core
+* pydantic-settings
+* pydoctor
+* pygresql
+* pylint (fixing Python 3.13 failures
+ [#1089758](https://bugs.debian.org/1089758) and
+ [#1091029](https://bugs.debian.org/1091029))
+* pypandoc (fixing a [Python 3.12 warning](https://bugs.debian.org/1083204))
+* python-aiohttp (fixing [CVE-2024-52303](https://bugs.debian.org/1088108)
+ and [CVE-2024-52304](https://bugs.debian.org/1088109)
+* python-aiohttp-security
+* python-argcomplete
+* python-asyncssh
+* python-click
+* python-cytoolz
+* python-jira (fixing a [Python 3.13
+ failure](https://bugs.debian.org/1084531))
+* python-limits
+* python-line-profiler
+* python-mkdocs
+* python-model-bakery
+* python-pgspecial
+* python-pyramid (fixing [CVE-2023-40587](https://bugs.debian.org/1050740))
+* python-pythonjsonlogger
+* python-semantic-release
+* python-utils
+* python-venusian
+* pyupgrade
+* pyzmq
+* quart
+* six
+* sqlparse
+* twisted
+* vcr.py
+* vulture
+* yoyo
+* zope.configuration
+* zope.testrunner
+
+I updated the team's [library style
+guide](https://wiki.debian.org/Python/LibraryStyleGuide) to remove material
+related to Python 2 and early versions of Python 3, which is no longer
+relevant to any current Python packaging work.
+
+## Other Python upstream work
+
+I happened to notice a [Twisted upstream
+issue](https://github.com/twisted/twisted/issues/12396) requesting the
+removal of the deprecated `twisted.internet.defer.returnValue`, realized it
+was still used in many places in Debian, and went on a PR-filing spree
+informed by [codesearch](https://codesearch.debian.net/) to try to reduce
+the future impact of such a change on Debian:
+
+* [foolscap](https://github.com/warner/foolscap/pull/114)
+* [gnome-keysign](https://github.com/gnome-keysign/gnome-keysign/pull/122)
+* [magic-wormhole](https://github.com/magic-wormhole/magic-wormhole/pull/564)
+* [matrix-synapse](https://github.com/element-hq/synapse/pull/18020)
+* [python-autobahn](https://github.com/crossbario/autobahn-python/pull/1651)
+* [python-testtools](https://github.com/testing-cabal/testtools/pull/413)
+* [python-treq](https://github.com/twisted/treq/pull/404)
+* tahoe-lafs: [Inconclusive
+ investigation](https://github.com/twisted/twisted/pull/12395#issuecomment-2529868689)
+* [txtorcon](https://github.com/meejah/txtorcon/pull/403)
+
+## Other small fixes
+
+Santiago Vila has been [building the archive with `make
+--shuffle`](https://people.debian.org/~sanvila/make-shuffle/) (also see [its
+author's
+explanation](https://trofi.github.io/posts/238-new-make-shuffle-mode.html)).
+I fixed associated bugs in cccc ([contributed
+upstream](https://github.com/sarnold/cccc/pull/46)), groff, and spectemu.
+
+I backported an upstream patch to putty to fix [undefined behaviour that
+affected use of the "small keypad"](https://bugs.debian.org/1087844).
+
+I removed groff's `Recommends: libpaper1`
+([#1091375](https://bugs.debian.org/1091375),
+[#1091376](https://bugs.debian.org/1091376)), since it isn't currently all
+that useful and was getting in the way of a transition to libpaper2. I
+filed an [upstream bug](https://savannah.gnu.org/bugs/?66597) suggesting
+better integration in this area.
~cjwatson / blog.git / commitdiff