[Pkg-rust-maintainers] Bug#1009888: rust-h2, existing version is badly broken, new upstream needs new package

[Jonas Smedegaard]

Quoting Peter Michael Green (2022-04-20 00:33:07)
> I noticed that Jonas had set a number of bugs about broken rust 
> packages as blockers of 900928, so I decided to take a look at some of 
> them. I fixed up bytemuck, image and related packages.

Thanks, much appreciated.


> I feel I need to comment on the technical details of the NMU, I should 
> preface this by saying that I don't think it's unreasonable to 0-day 
> NMU a minimal fix for a long term RC issue, even if (as was not the 
> case here but was the case for some of the other NMUs noone ever 
> bothered to actually file the RC bug).
> 
> However, this NMU did considerably more than just add a minimal fix 
> for the rc issue. Most painfullly, the "orig" tarball for the new 
> upstream version appears to have been derived from upstream git rather 
> than from crates.io and this breaks our workflow. If you are going to 
> 0-day stuff please keep your uploads minimal. If you want to do more 
> invasive NMUs please give the maintainers a chance to respond.

Thanks for elaborating on the kinds of pain my NMU caused.  That is 
helpful.

(In hindsight I could have made a smaller non-problematic NMU by fixing 
only the FTBFS issue, ignoring the security issue)


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-rust-maintainers/attachments/20220420/a9501e16/attachment.sig>