[MIR] libpanel

[Jeremy Bícha]

[Availability]
The package libpanel is already in Ubuntu universe.
The package libpanel build for the architectures it is designed to work on.
It currently builds and works for all Ubuntu architectures except for i386.
Link to package https://launchpad.net/ubuntu/+source/libpanel

[Rationale]
- The package libpanel is required in Ubuntu main because it is a runtime dependency of sysprof (MIR LP: #2066269)
- There is no other/better way to solve this that is already in main or should go universe->main instead of this.
- The package libpanel is required in Ubuntu main no later than August 15 due to a Ubuntu Desktop goal of including sysprof in the default 24.10 install

[Security]
- No CVEs/security issues in this software in the past
+ https://security-tracker.debian.org/tracker/source-package/libpanel
+ https://ubuntu.com/security/cves?package=libpanel

- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Package does not open privileged ports (ports < 1024).
- Package does not expose any external endpoints
- Package does not contain extensions to security-sensitive software (filters, scanners, plugins, UI skins, ...)

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/libpanel/
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libpanel
- Upstream https://gitlab.gnome.org/GNOME/libpanel/-/issues
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails it makes the build fail, link to build log
https://launchpad.net/ubuntu/+source/libpanel/1.6.0-1build1

- The package does not run an autopkgtest. See next lines.

- This package is minimal and will be tested in a more wide reaching solution.
+ libpanel is only used by sysprof and gnome-builder. In addition to the existing build tests for libpanel, we will also do manual testing for Sysprof and GNOME Builder.

https://wiki.ubuntu.com/DesktopTeam/TestPlans/Sysprof
https://wiki.ubuntu.com/DesktopTeam/TestPlans/GnomeBuilder

[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field
- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the package
https://launchpad.net/ubuntu/+source/libpanel/1.6.0-1build1
- Please attach the full output you have got from `lintian --pedantic` as an extra post to this bug.
- Lintian overrides are not present

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- The package will be installed by default, but does not ask debconf questions
- Packaging and build is easy, link to debian/rules https://salsa.debian.org/gnome-team/libpanel/-/blob/debian/latest/debian/rules

[UI standards]
- Application is end-user facing, Translation is present, via standard
gettext build and runtime internationalization system

- End-user applications without desktop file, not needed because this is a UI library (with translatable strings) but is not actually an app itself so no need for a .desktop

[Dependencies]
- No further depends or recommends dependencies that are not yet in main

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- The owning team will be Ubuntu Desktop (~desktop-packages) and I have their acknowledgement for that commitment
- The future owning team is not yet subscribed, but will subscribe to the package before promotion

- This does not use static builds
- This does not use vendored code
- This package is not rust based

- The package has been built in the archive more recently than the last test rebuild

[Background information]
- The Package description explains the package well
- Upstream Name is libpanel
- Link to upstream project https://gitlab.gnome.org/GNOME/libpanel

[Jeremy Bícha (jbicha)]

W: libpanel source: newer-standards-version 4.7.0 (current is 4.6.2)
W: libpanel-doc: stray-devhelp-documentation [usr/share/doc/panel-1.0/panel-1.0.devhelp2]
I: libpanel-doc: possible-documentation-but-no-doc-base-registration

The latest Debian Policy is 4.7.0 but lintian has not been updated since that version was released. https://tracker.debian.org/pkg/debian-policy

The devhelp warning is a false warning. Many GNOME modules have switched to gi-docgen to build help and it does things differently that the older gtk-doc-tools. The devhelp app was updated to support devhelp2 files being located in this location.

doc-base is a Debianism that I believe to only barely be used.

[Lukas Märdian (slyon)]

At first glance, this looks like it does not need security-review. I'll do a full MIR review later.