From: Colin Watson Date: Sun, 9 Nov 2025 15:35:11 +0000 (+0000) Subject: Free software activity in October 2025 X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~cjwatson/git?a=commitdiff_plain;h=0d941fa15aef095dfedbfb41302d4b702c209c5b;p=blog.git Free software activity in October 2025 --- diff --git a/content/activity-2025-10.md b/content/activity-2025-10.md new file mode 100644 index 00000000..5ec27662 --- /dev/null +++ b/content/activity-2025-10.md @@ -0,0 +1,267 @@ +Title: Free software activity in October 2025 +Slug: activity-2025-10 +Date: 2025-11-09 15:33:33 +00:00 +Category: columbiform +Tags: activity, columbiform, freexian, planet-debian, planet-ubuntu +Summary: OpenSSH 10.1p1/10.2p1, ansible-core autopkgtests, and the start of Python 3.14 packaging work. +Mastodon-ID: 115520466936682306 + +About 95% of my Debian contributions this month were +[sponsored](https://www.freexian.com/about/debian-contributions/) by +Freexian. + +You can also support my work directly via +[Liberapay](https://liberapay.com/cjwatson) or [GitHub +Sponsors](https://github.com/sponsors/cjwatson). + +## OpenSSH + +OpenSSH upstream released +[10.1p1](https://www.openssh.org/releasenotes.html#10.1) this month, so I +upgraded to that. In the process, I reverted a Debian patch that changed IP +quality-of-service defaults, which [made sense at the +time](https://bugs.debian.org/923879) but has since been reworked upstream +anyway, so it makes sense to find out whether we still have similar +problems. So far I haven't heard anything bad in this area. + +10.1p1 caused a regression in the ssh-agent-filter package's tests, which I +[bisected and chased up with +upstream](https://bugzilla.mindrot.org/show_bug.cgi?id=3877). + +10.1p1 also had a few other user-visible regressions +([#1117574](https://bugs.debian.org/1117574), +[#1117594](https://bugs.debian.org/1117594), +[#1117638](https://bugs.debian.org/1117638), +[#1117720](https://bugs.debian.org/1117720)); I upgraded to +[10.2p1](https://www.openssh.org/releasenotes.html#10.2) which fixed some of +these, and [contributed some upstream debugging +help](https://bugzilla.mindrot.org/show_bug.cgi?id=3879#c10) to clear up the +rest. While I was there, I also fixed [ssh-session-cleanup: fails due to +wrong $ssh\_session\_pattern](https://bugs.debian.org/1117965) in our +packaging. + +Finally, I got all this into trixie-backports, which I intend to keep up to +date throughout the forky development cycle. + +## Python packaging + +For some time, ansible-core has had occasional autopkgtest failures that +usually go away before anyone has a chance to look into them properly. I +ran into these via openssh recently and decided to track them down. It +turns out that they only happened when the `libpython3.13-stdlib` package +had different versions in testing and unstable, because an integration test +setup script made a change that would be reverted if that package was ever +upgraded in the testbed, and one of the integration tests accidentally +failed to disable system apt sources comprehensively enough while testing +the behaviour of the `ansible.builtin.apt` module. I [fixed this in +Debian](https://salsa.debian.org/python-team/packages/ansible-core/-/compare/debian%2F2.19.3-1...debian%2F2.19.3-2?from_project_id=58498) +and [contributed the relevant part +upstream](https://github.com/ansible/ansible/pull/86050). + +We've started working on enabling Python 3.14 as a supported version in +Debian. I fixed or helped to fix a number of packages for this: + +* [cxxopt](https://bugs.debian.org/1117894) +* [cython](https://bugs.debian.org/1117978) +* [m2crypto](https://bugs.debian.org/1117891) +* [pymongo](https://bugs.debian.org/1117899) (already fixed by Alexandre + Detiste, but after checking this I took the opportunity to simplify its + arrangements for disabling broken tests and to switch to + autopkgtest-pkg-pybuild) +* [python-cytoolz](https://bugs.debian.org/1117902) +* [python-lz4](https://bugs.debian.org/1117907) +* [python-msgspec](https://bugs.debian.org/1117910) + +I upgraded these packages to new upstream versions: + +* aiomysql (fixing [CVE-2025-62611](https://bugs.debian.org/1118754)) +* audioread +* bitstruct +* black (fixing a [build failure](https://bugs.debian.org/1114067)) +* blake3-py +* buildbot (fixing a [regression](https://bugs.debian.org/1117640)) +* cxxopt +* django-cte +* django-pipeline +* django-q +* isort +* khard +* lazy-object-proxy (fixing a [build + failure](https://bugs.debian.org/1117892)) +* psycopg3 (fixing a [build failure](https://bugs.debian.org/1117367)) +* pydantic +* pydantic-core +* pydantic-extra-types +* pytest-mock +* pytest-rerunfailures +* python-bcrypt +* python-bitarray +* python-confluent-kafka ([#1089748](https://bugs.debian.org/1089748)) +* python-crispy-bootstrap4 +* python-crispy-bootstrap5 +* python-django-mptt +* python-ewoksppf (fixing a [build + failure](https://bugs.debian.org/1115134)) +* python-greenlet (fixing a [build failure on + powerpc](https://bugs.debian.org/1082800) and a [Python 3.14 build + failure](https://bugs.debian.org/1117906)) +* python-gssapi +* python-holidays +* python-persistent +* python-pyluach +* python-pytest-asyncio +* python-pytest-run-parallel +* python-pytokens ([contributed supporting fix + upstream](https://github.com/tusharsadhwani/pytokens/pull/11)) +* python-semantic-release +* python-stdlib-list +* python-tblib +* python-telethon +* python-treq +* python-typing-inspection +* python-watchfiles +* pyupgrade +* rpds-py (fixing a [build failure](https://bugs.debian.org/1114347)) +* zope.hookable +* zope.schema +* zope.testrunner (removing [run-time dependency on + setuptools](https://bugs.debian.org/1084020)) + +I packaged [python-blockbuster](https://bugs.debian.org/1110998) and +[python-pytokens](https://bugs.debian.org/1116692), needed as new +dependencies of various other packages. + +Santiago Vila filed a [batch of +bugs](https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=debian-qa@lists.debian.org&tag=ftbfs-nocheck-profile) +about packages that fail to build when using the [`nocheck` build +profile](https://wiki.debian.org/BuildProfileSpec), and I fixed several of +these (generally just a matter of adjusting build-dependencies): + +* pastedeploy ([#1116833](https://bugs.debian.org/1116833)) +* python-ewokscore ([#1116858](https://bugs.debian.org/1116858)) +* python-ewoksdask ([#1116859](https://bugs.debian.org/1116859)) +* python-ewoksorange ([#1116862](https://bugs.debian.org/1116862)) +* python-odmantic ([#1116866](https://bugs.debian.org/1116866)) +* python-processview ([#1116871](https://bugs.debian.org/1116871)) +* python-semantic-release ([#1116881](https://bugs.debian.org/1116881)) +* sqlfluff ([#1116916](https://bugs.debian.org/1116916)) + +I helped out with the [scikit-learn 1.7 +transition](https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=debian-science@lists.debian.org&tag=scikit-learn-1.7): + +* [python-gplearn](https://bugs.debian.org/1117991) ([contributed + upstream](https://github.com/trevorstephens/gplearn/pull/305)) +* [scikit-optimize](https://bugs.debian.org/1117992) ([contributed + upstream](https://github.com/holgern/scikit-optimize/pull/8)) +* [sklearn-pandas](https://bugs.debian.org/1117989) + +I fixed or helped to fix several other build/test failures: + +* [beangulp](https://bugs.debian.org/1118418) ([contributed + upstream](https://github.com/beancount/beangulp/pull/193)) +* [beanquery](https://bugs.debian.org/1117386) +* [buildbot](https://bugs.debian.org/1117391) ([contributed + upstream](https://github.com/buildbot/buildbot/pull/8707)) +* [celery](https://bugs.debian.org/1118419) ([contributed + upstream](https://github.com/celery/celery/pull/9968)) +* [cython](https://bugs.debian.org/1114604) (only on i386; involved a rather + slow bisection process first) +* [django-measurement](https://bugs.debian.org/1118305) +* [django-select2](https://bugs.debian.org/1118306) +* [ocrmypdf](https://bugs.debian.org/1118170) (partial investigation, still + open) +* [poetry-plugin-export](https://bugs.debian.org/1117421) +* [pytest-aiohttp](https://bugs.debian.org/1114282) +* [python-aiohttp-session](https://bugs.debian.org/1117423) +* [python-cups](https://bugs.debian.org/1107129) (cross-building) +* [python-django-postgres-extra](https://bugs.debian.org/1117647) (actually + needed a fix in python-django) +* [python-fabio](https://bugs.debian.org/1114715) +* [python-jellyfish](https://bugs.debian.org/1114308) ([contributed + upstream](https://codeberg.org/jpt/jellyfish/pulls/232)) +* [python-maturin](https://bugs.debian.org/1117369) (thanks to a patch from + Peter Michael Green in [#1115459](https://bugs.debian.org/1115459)) +* [python-requests-oauthlib](https://bugs.debian.org/1114330) +* [python-telethon](https://bugs.debian.org/1115760) +* [python-webargs](//bugs.debian.org/1115756) +* [silx](https://bugs.debian.org/1114379) +* [sphinx-inline-tabs](https://salsa.debian.org/python-team/packages/sphinx-inline-tabs/-/compare/debian%2F2023.4.21-2...debian%2F2023.4.21-3?from_project_id=75611) + +I fixed some other bugs: + +* [cython: The man page is `/usr/bin/env: 'python': No such file or + directory`](https://bugs.debian.org/1105905) +* [depthcharge-tools: SyntaxWarnings with Python 3.12 about invalid escape + sequences](https://bugs.debian.org/1078006) ([contributed + upstream](https://github.com/alpernebbi/depthcharge-tools/pull/9) a while + ago) +* [django-auditlog: Please drop dependencies on + python3-pytzdata](https://bugs.debian.org/1112509) +* [pysmi: Might trigger: AttributeError: module 'importlib' has no attribute + 'machinery'](https://bugs.debian.org/1118055) ([attempted to contribute + upstream](https://github.com/etingof/pysmi/pull/74), although that + repository is dead) +* [python-msgspec: Please use pseudo-packages for architecture + whitelisting](https://bugs.debian.org/1115274) +* [python-tomlkit: Binary package rejected](https://bugs.debian.org/1118582) + +I investigated a [python-py build failure](https://bugs.debian.org/1117768), +which turned out to have been fixed in Python 3.13.9. + +I adopted [zope.hookable](https://bugs.debian.org/948809) and +[zope.location](https://bugs.debian.org/948812) for the Python team. + +Following an IRC question, I [ported linux-gpib-user to +pybuild-plugin-pyproject](https://salsa.debian.org/electronics-team/linux-gpib-user/-/merge_requests/1), +and added tests to make sure the resulting binary package layout is correct. + +## Rust packaging + +Another Pydantic upgrade meant I had to upgrade a corresponding stack of +Rust packages to new upstream versions: + +* rust-idna +* rust-jiter +* rust-pyo3 +* rust-regex +* rust-regex-automata +* rust-speedate +* rust-uuid + +I also upgraded rust-archery and rust-rpds. + +## Other bits and pieces + +I fixed a few bugs in other packages I maintain: + +* [halibut: FTCBFS: passes host flags to the build + compiler](https://bugs.debian.org/1117014) +* [iprutils: No package available for other + architectures](https://bugs.debian.org/1117112) + +I investigated a [malware report against +tini](https://bugs.debian.org/1118530), which I think we can prove to be a +false positive (at least under the reasonable assumption that there isn't +malware hiding in libgcc or glibc). Yay for reproducible builds! + +I noticed and fixed a [small UI deficiency in +debbugs](https://salsa.debian.org/debbugs-team/debbugs/-/merge_requests/25), +making the checkboxes under "Misc options" on package pages easier to hit. +This is merged but we haven't yet deployed it. + +I notced and fixed a +[typo](https://salsa.debian.org/debian/developers-reference/-/merge_requests/73) +in the [Being kind to +porters](https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#being-kind-to-porters) +section of the Debian Developer's Reference. + +## Code reviews + +* [base-passwd: Add clock + group](https://salsa.debian.org/debian/base-passwd/-/merge_requests/17) + (rejected) +* [debbugs: Fix dep8 autopkgtests, make Salsa CI fully + green](https://salsa.debian.org/debbugs-team/debbugs/-/merge_requests/24) + (reviewed, awaiting revisions) +* [python-gmpy2: FTBFS](https://bugs.debian.org/1117764) (sponsored fix for + Martin Kelly) diff --git a/posted_on_Mastodon.txt b/posted_on_Mastodon.txt index c569edf1..ed1ad690 100644 --- a/posted_on_Mastodon.txt +++ b/posted_on_Mastodon.txt @@ -18,6 +18,7 @@ activity-2025-06.html activity-2025-07.html activity-2025-08.html activity-2025-09.html +activity-2025-10.html apt-resolver-bugs.html automatic-installability-checking.html binfmt-support-2.2.0.html