From c32816becd3cd086128a54683dd1cf90ed5906a5 Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Wed, 10 Jun 2026 16:10:52 +0100 Subject: [PATCH] Free software activity in May 2026 --- content/activity-2026-05.md | 104 ++++++++++++++++++++++++++++++++++++ posted_on_Mastodon.txt | 1 + 2 files changed, 105 insertions(+) create mode 100644 content/activity-2026-05.md diff --git a/content/activity-2026-05.md b/content/activity-2026-05.md new file mode 100644 index 00000000..7f33a625 --- /dev/null +++ b/content/activity-2026-05.md @@ -0,0 +1,104 @@ +Title: Free software activity in May 2026 +Slug: activity-2026-05 +Date: 2026-06-10 16:10:16 +01:00 +Category: columbiform +Tags: activity, columbiform, freexian, planet-debian +Summary: OpenSSH security and IPQoS backports; the usual Python packaging work. +Mastodon-ID: 116726443832752209 + +My Debian contributions this month were all [sponsored](https://www.freexian.com/about/debian-contributions/) by Freexian. + +You can also support my work directly via [Liberapay](https://liberapay.com/cjwatson) or [GitHub Sponsors](https://github.com/sponsors/cjwatson). + +## OpenSSH + +I backported various security fixes from 10.3 to [trixie](https://bugs.debian.org/1135624), [bookworm](https://bugs.debian.org/1135658), and [bullseye](https://lists.debian.org/debian-lts-announce/2026/05/msg00030.html). For trixie, I also backported several IPQoS fixes to line up with upstream's traffic management settings and drop a rather hacky Debian-specific patch; this needed a [quick follow-up fix](https://bugs.debian.org/1135798). + +I upgraded trixie-backports to 10.3. + +I fixed [openssh uses pidof but does not depend on procps](https://bugs.debian.org/1136545). + +## PuTTY + +I upgraded from 0.83 to 0.84. + +## Python packaging + +New upstream versions: + +* bitstruct +* ormar +* pdm (fixing a [build failure](https://bugs.debian.org/1134304)) +* pydantic +* pydantic-core +* pydantic-settings +* pyglet (fixing a [build failure](https://bugs.debian.org/1137404)) +* python-asyncssh +* python-bitarray +* python-btrees +* python-build +* python-certifi +* python-charset-normalizer (fixing a [build failure](https://bugs.debian.org/1135452)) +* python-fakeredis ([contributed supporting fix upstream](https://github.com/cunla/fakeredis-py/pull/485)) +* python-holidays +* python-jsonschema-path +* python-memray (fixing a [build failure](https://bugs.debian.org/1135455) and [CVE-2026-32722](https://bugs.debian.org/1131372)) +* python-openapi-schema-validator +* python-pathable +* python-persistent +* python-persistent +* python-pyftpdlib +* python-pytest-run-parallel +* sorl-thumbnail +* twisted +* zope.interface +* zope.interface +* zope.proxy + +Other build/test failures: + +* [beets](https://bugs.debian.org/1137485) +* [buildbot](https://bugs.debian.org/1135497) ([contributed upstream](https://github.com/buildbot/buildbot/pull/9051)) +* [dep-logic](https://bugs.debian.org/1131097) ([contributed upstream](https://github.com/pdm-project/dep-logic/pull/17)) +* [diskcache](https://bugs.debian.org/1135392) +* [khard](https://bugs.debian.org/1135500) +* [matplotlib](https://bugs.debian.org/1137583) +* [mkdocs-rss-plugin](https://bugs.debian.org/1137488) +* ormar: compatibility with [fastapi 0.125](https://bugs.debian.org/1133964) and [pydantic 2.13](https://bugs.debian.org/1136865) +* [pgzero](https://bugs.debian.org/1135445) +* [py7zr](https://bugs.debian.org/1137501) +* [pydantic-extra-types](https://salsa.debian.org/python-team/packages/pydantic-extra-types/-/commit/858c65cb47b4fe03b080f79c99fa785282fd740c) ([contributed upstream](https://github.com/pydantic/pydantic-extra-types/pull/394)) +* [pydata-sphinx-theme](https://bugs.debian.org/1136922) +* [python-invocations](https://bugs.debian.org/1135454) ([contributed upstream](https://github.com/pyinvoke/invocations/pull/47)) +* [python-localzone](https://bugs.debian.org/1134305) +* [python-maturin](https://bugs.debian.org/1135831) +* [python-nacl](https://bugs.debian.org/1135447) +* [python-pampy](https://bugs.debian.org/1123283) +* [python-treq](https://bugs.debian.org/1135507) ([contributed upstream](https://github.com/twisted/treq/pull/426), including [fixing some CI bitrot](https://github.com/twisted/treq/pull/428)) +* [python-txrequests](https://bugs.debian.org/1122914) ([contributed upstream](https://github.com/tardyp/txrequests/pull/11)) + +Other bugs: + +* [buildbot: (Build-)depends on deprecated module python3-pkg-resources](https://bugs.debian.org/1083325) ([contributed upstream](https://github.com/buildbot/buildbot/pull/9048)) +* [pysodium: Depends on cruft package libsodium](https://bugs.debian.org/1135182) +* [python-fakeredis: lua support not working, breaking django-redis cache locking](https://bugs.debian.org/1106749) +* [python3.14: Drop libnsl-dev build-dependency](https://salsa.debian.org/cpython-team/python3/-/merge_requests/43) + +I updated python-treq upstream to [stop vendoring multipart](https://github.com/twisted/treq/pull/430), now that the packaging issues with that have been sorted out. + +## Code reviews + +* [debmirror: User-Agent blocked by Ubuntu/Launchpad repositories](https://bugs.debian.org/1135891) (uploaded, and [cherry-picked into trixie](https://bugs.debian.org/1135937)) +* [pydantic: Fix CVE-2024-3772 in bookworm](https://salsa.debian.org/python-team/packages/pydantic/-/merge_requests/1) (merged and uploaded) +* [pyodbc: Run SQLite tests](https://salsa.debian.org/python-team/packages/pyodbc/-/merge_requests/3) (merged and uploaded) +* [python-jsonschema-path: Transition to starlette 1.0](https://salsa.debian.org/python-team/packages/python-jsonschema-path/-/merge_requests/1) (merged and uploaded) +* [python-maison: FTBFS with the nocheck build profile](https://bugs.debian.org/1131976) (followed up to fix the `nodoc` build profile as well) +* [python-openapi-core: Transition to starlette 1.0](https://salsa.debian.org/python-team/packages/python-openapi-core/-/merge_requests/1) +* [python-openapi-schema-validator: Transition to starlette 1.0](https://salsa.debian.org/python-team/packages/python-openapi-schema-validator/-/merge_requests/1) (merged and uploaded) +* [python-openapi-spec-validator: Transition to starlette 1.0](https://salsa.debian.org/python-team/packages/python-openapi-spec-validator/-/merge_requests/1) (merged and uploaded) +* [python-pathable: Transition to starlette 1.0](https://salsa.debian.org/python-team/packages/python-pathable/-/merge_requests/1) (merged and uploaded) +* [python-rich-argparse: New upstream version 1.8.0](https://salsa.debian.org/python-team/packages/python-rich-argparse/-/merge_requests/3) (merged and uploaded) + +## Other bits and pieces + +I contributed a debian-policy patch to [fix several links related to build profiles](https://bugs.debian.org/1138005). diff --git a/posted_on_Mastodon.txt b/posted_on_Mastodon.txt index 4b0845d2..52291d78 100644 --- a/posted_on_Mastodon.txt +++ b/posted_on_Mastodon.txt @@ -25,6 +25,7 @@ activity-2026-01.html activity-2026-02.html activity-2026-03.html activity-2026-04.html +activity-2026-05.html apt-resolver-bugs.html automatic-installability-checking.html binfmt-support-2.2.0.html -- 2.30.2