| 2023-07-07 21:43:04 |
Lena Voytek |
description |
This MIR will allow packages in main to migrate from depending on lua5.3 to lua5.4. Since lua5.3 doesn't have an MIR bug listed I created this as a new one.
[Availability]
The package lua5.4 is already in Ubuntu universe.
The package lua5.4 build for the architectures it is designed to work on.
It currently builds and works for architectures: amd64, arm64, armhf, i386, ppc64el, riscv64, s390x
Link to package https://launchpad.net/ubuntu/+source/lua5.4
[Rationale]
- The package lua5.4 is required in Ubuntu main for migrating our standard version of lua from 5.3 to 5.4
- The package lua5.4 will generally be useful for a large part of our user base
- Additionally multiple packages will no longer need forced compatibility with lua5.3
- There is no other/better way to solve this that is already in main or should go universe->main instead of this.
- The package lua5.4 is required in Ubuntu main no later than the release of mantic to make it our main supported version in 23.10
[Security]
- Had 13 security issues in the past
- links to such security issues in trackers
- https://ubuntu.com/security/cves?package=lua5.4
- https://security-tracker.debian.org/tracker/source-package/lua5.4
- Issues often fixed quickly by upstream
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Packages does not open privileged ports (ports < 1024)
- Packages does not contain extensions to security-sensitive software
[Quality assurance - function/usage]
- The package works well right after install
[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/lua5.4/+bug
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=lua5.4
- Upstream's bug tracker - https://www.lua.org/bugs.html
- The package does not deal with exotic hardware we cannot support
[Quality assurance - testing]
- The package does not run a full test suite at build time as one is not provided upstream
- The package does not run any autopkgtests
[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field (Currently Debian Lua Team)
- This package does not yield massive lintian Warnings, Errors
- Link to a recent build log of the package https://launchpadlibrarian.net/613445220/buildlog_ubuntu-kinetic-amd64.lua5.4_5.4.4-3_BUILDING.txt.gz
- Full output from `lintian --pedantic`:
P: lua5.4 source: insecure-copyright-format-uri http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ [debian/copyright]
P: lua5.4 source: package-uses-old-debhelper-compat-version 12
P: lua5.4 source: silent-on-rules-requiring-root [debian/control]
P: lua5.4 source: trailing-whitespace debian/control (line 70)
P: lua5.4 source: uses-debhelper-compat-file [debian/compat]
- Lintian overrides are not present
- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies
- The package will not be installed by default
- Packaging and build is easy, although there are a large number of commands in override_dh_auto_install, link to debian/rules https://git.launchpad.net/ubuntu/+source/lua5.4/tree/debian/rules
[UI standards]
- Application is not end-user facing (does not need translation) (other than lua shell, but this has limited text)
[Dependencies]
- No further depends or recommends dependencies that are not yet in main
[Standards compliance]
- This package correctly follows FHS and Debian Policy
[Maintenance/Owner]
- Owning Team will be Ubuntu Server
- Team is not yet, but will subscribe to the package before promotion
- This does not use static builds
- This does not use vendored code
- This package is not rust based
- The package successfully built during the most recent test rebuild
[Background information]
The Package description explains the package well
Upstream Name is lua
https://www.lua.org/source/5.4/ |
This MIR will allow packages in main to migrate from depending on lua5.3 to lua5.4. Since lua5.3 doesn't have an MIR bug listed I created this as a new one.
[Availability]
The package lua5.4 is already in Ubuntu universe.
The package lua5.4 build for the architectures it is designed to work on.
It currently builds and works for architectures: amd64, arm64, armhf, i386, ppc64el, riscv64, s390x
Link to package https://launchpad.net/ubuntu/+source/lua5.4
[Rationale]
- The package lua5.4 is required in Ubuntu main for migrating our standard version of lua from 5.3 to 5.4
- The package lua5.4 will generally be useful for a large part of our user base
- Additionally multiple packages will no longer need forced compatibility with lua5.3
- There is no other/better way to solve this that is already in main or should go universe->main instead of this.
- The package lua5.4 is required in Ubuntu main no later than the release of mantic to make it our main supported version in 23.10
[Security]
- Had 13 security issues in the past
- links to such security issues in trackers
- https://ubuntu.com/security/cves?package=lua5.4
- https://security-tracker.debian.org/tracker/source-package/lua5.4
- Issues often fixed quickly by upstream
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Packages does not open privileged ports (ports < 1024)
- Packages does not contain extensions to security-sensitive software
[Quality assurance - function/usage]
- The package works well right after install
[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/lua5.4/+bug
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=lua5.4
- Upstream's bug tracker - https://www.lua.org/bugs.html
- The package does not deal with exotic hardware we cannot support
[Quality assurance - testing]
- The package does not run a full test suite at build time as one is not provided upstream
- The package does not run any autopkgtests, but it would be useful to add some. There is a bug from lua5.2 that notes this - https://bugs.launchpad.net/ubuntu/+source/lua5.2/+bug/1679332. If needed I can work on this as a part of this MIR
[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field (Currently Debian Lua Team)
- This package does not yield massive lintian Warnings, Errors
- Link to a recent build log of the package https://launchpadlibrarian.net/613445220/buildlog_ubuntu-kinetic-amd64.lua5.4_5.4.4-3_BUILDING.txt.gz
- Full output from `lintian --pedantic`:
P: lua5.4 source: insecure-copyright-format-uri http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ [debian/copyright]
P: lua5.4 source: package-uses-old-debhelper-compat-version 12
P: lua5.4 source: silent-on-rules-requiring-root [debian/control]
P: lua5.4 source: trailing-whitespace debian/control (line 70)
P: lua5.4 source: uses-debhelper-compat-file [debian/compat]
- Lintian overrides are not present
- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies
- The package will not be installed by default
- Packaging and build is easy, although there are a large number of commands in override_dh_auto_install, link to debian/rules https://git.launchpad.net/ubuntu/+source/lua5.4/tree/debian/rules
[UI standards]
- Application is not end-user facing (does not need translation) (other than lua shell, but this has limited text)
[Dependencies]
- No further depends or recommends dependencies that are not yet in main
[Standards compliance]
- This package correctly follows FHS and Debian Policy
[Maintenance/Owner]
- Owning Team will be Ubuntu Server
- Team is not yet, but will subscribe to the package before promotion
- This does not use static builds
- This does not use vendored code
- This package is not rust based
- The package successfully built during the most recent test rebuild
[Background information]
The Package description explains the package well
Upstream Name is lua
https://www.lua.org/source/5.4/ |
|
