[Pkg-auth-maintainers] Some help for coordinated uploads needed

[Florian Schlichting]

Hi Tobias,

incidentally, I started looking into updating yubikey-manager yesterday.
I have done some testing with both old and new versions of fido2 and
yubikey-manager, and they seem to go along well. This is somewhat
expected as yubikey-manager already specifies the dependency as
"python3-fido2 (>= 0.9), python3-fido2 (<< 2.0)". However
yubikey-manager-qt seems to need an update for the newer
yubikey-manager, and I haven't had time to look into that yet.

So I think the API differences in fido2 between 0.9 and 1.0 / 1.1 are
not too big, even though https://github.com/solokeys/solo1-cli/pull/152
may not be enough to restore compatibility in solo1-cli. This and
https://github.com/solokeys/solo1-cli/issues/157, which you mentioned in
d/changelog, have been open for over a year without seeing much
progress. So I'm wondering about the status of that package - is your
upstream dead, Philip? What do you think about updating python3-fido2 in
unstable?

Florian


On Tue, Oct 10, 2023 at 03:36:22PM +0200, Dr. Tobias Quathamer wrote:
> Dear Pkg-auth-maintainers,
> 
> I've recently been added to your salsa group and did some work on
> python-fido2 and yubikey-manager.
> 
> I'd like to get some input from you for the next steps, because it seems to
> me that the packages in the salsa group are dependent on very specific
> versions of each other.
> 
> The latest upstream of python-fido2 seems to build fine (in experimental
> now). However, an upload to unstable would break solo1-cli, because it's not
> yet ready for the new API of python-fido2 (>=1.0).
> 
> Also, I'm wondering about the yubikey-manager. There's a new upstream
> version (5.2) which seems to require python-fido2 (>=1.0), so that should be
> fine. However, I don't own a yubikey and cannot test if everything works as
> expected.
> 
> Does anyone on this list have a yubikey available and some time to build and
> test the new yubikey-manager 5.2?
> 
> Regards,
> Tobias




> _______________________________________________
> Pkg-auth-maintainers mailing list
> Pkg-auth-maintainers at alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-auth-maintainers