<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le mer. 3 juil. 2024 à 23:04, Andres Salomon <<a href="mailto:dilinger@queued.net">dilinger@queued.net</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br>
<br>
On 6/25/24 16:34, Jérémy Lal wrote:<br>
> <br>
> <br>
> Le mar. 25 juin 2024 à 22:22, Salvatore Bonaccorso <<a href="mailto:carnil@debian.org" target="_blank">carnil@debian.org</a> <br>
> <mailto:<a href="mailto:carnil@debian.org" target="_blank">carnil@debian.org</a>>> a écrit :<br>
[...]<br>
> <br>
> Thanks a lot for your work Adrian. Please note that there is currently<br>
> a nodejs upload pending for releasing via a DSA, which will rebase<br>
> nodejs to 18.20.3+dfsg-1~deb12u1 so this might invalidate those<br>
> changes.<br>
> <br>
> Jérémy, Aron is that something you want to have included in your<br>
> prepared update?<br>
> <br>
> <br>
> Indeed, it's applied to 18.20.3+dfsg-1~deb12u1, along with other skipped <br>
> tests.<br>
> I'll resume work on this by the end of the week.<br>
> <br>
<br>
While we wait for this, is there any reason to keep the existing <br>
18.20.3+dfsg-1~deb12u1 upload in the embargoed security queue? Security <br>
packages are actively building against it, which is a bit of a problem <br>
for reproducibility. Someone actually asked me about oddities in the <br>
chromium package that was originally built for bookworm-security, and <br>
now sits in the 12.6 point release. It turns out that it built against <br>
the embargoed nodejs, but since that nodejs package was never released, <br>
they can't use it to reproduce the chromium in 12.6.<br>
<br>
If there's a new nodejs bookworm-security package being uploaded at some <br>
point and the currently embargoed nodejs package will never be released, <br>
perhaps we should REJECT it now?<br></blockquote><div><br></div><div>Sorry, probably me being overbooked here.</div><div>I was supposed to check the regressions against it, and been on another job since then.</div><div> </div></div></div>