| 2024-01-09 09:41:20 |
Lukas Märdian |
bug |
|
|
added bug |
| 2024-01-09 09:41:29 |
Lukas Märdian |
bug task added |
|
lxml (Ubuntu) |
|
| 2024-01-09 09:41:36 |
Lukas Märdian |
lxml (Ubuntu): assignee |
|
Ubuntu Foundations Bugs (foundations-bugs) |
|
| 2024-01-09 09:42:56 |
Lukas Märdian |
bug |
|
|
added subscriber MIR approval team |
| 2024-01-09 09:43:57 |
Lukas Märdian |
description |
lxml grew a new Recommends on python3-cssselect.
Apparently "cssselect" was split out of lxml back in 2012 (https://lxml.de/3.0/changes-3.0alpha1.html).
It was developed in parallel since then.
According to this bug report (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017067), it is not really an optional dependency, but rather crashes if cssselect is not installed. So we should either:
1/ MIR python-cssselect (and make it a real "Depends")
=> Seems plausible, as cssselect is a leaf package, without further dependency, providing test coverage.
2/ Change lxml to make cssselect an actually optional dependency, and downgrade it to "Suggests" |
lxml grew a new Recommends on python3-cssselect, that leads to a new component-mismatch in Ubuntu.
Apparently "cssselect" was split out of lxml back in 2012 (https://lxml.de/3.0/changes-3.0alpha1.html).
It was developed in parallel since then.
According to this bug report (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017067), it is not really an optional dependency, but rather crashes if cssselect is not installed. So we should either:
1/ MIR python-cssselect (and make it a real "Depends")
=> Seems plausible, as cssselect is a leaf package, without further dependency, providing test coverage.
2/ Change lxml to make cssselect an actually optional dependency, and downgrade it to "Suggests" |
|
| 2024-01-09 10:29:28 |
Lukas Märdian |
bug watch added |
|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017067 |
|
| 2024-01-09 10:29:28 |
Lukas Märdian |
bug task added |
|
lxml (Debian) |
|
| 2024-01-09 11:12:45 |
Bug Watch Updater |
lxml (Debian): status |
Unknown |
Fix Released |
|
| 2024-01-11 16:22:34 |
Julian Andres Klode |
python-cssselect (Ubuntu): assignee |
|
Mate Kukri (mkukri) |
|
| 2024-01-11 16:22:52 |
Julian Andres Klode |
tags |
noble rls-nn-incoming |
foundations-todo noble |
|
| 2024-01-12 11:08:23 |
Mate Kukri |
description |
lxml grew a new Recommends on python3-cssselect, that leads to a new component-mismatch in Ubuntu.
Apparently "cssselect" was split out of lxml back in 2012 (https://lxml.de/3.0/changes-3.0alpha1.html).
It was developed in parallel since then.
According to this bug report (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017067), it is not really an optional dependency, but rather crashes if cssselect is not installed. So we should either:
1/ MIR python-cssselect (and make it a real "Depends")
=> Seems plausible, as cssselect is a leaf package, without further dependency, providing test coverage.
2/ Change lxml to make cssselect an actually optional dependency, and downgrade it to "Suggests" |
[Availability]
- The package python-cssselect is already in Ubuntu universe:
https://launchpad.net/ubuntu/+source/python-cssselect
- The package python-cssselect is an architecture independent Python package.
[Rationale]
- python-csselect is currently a build dependency of lxml in main.
- python3-lxml doesn't work without it (#1017067) and it should be
promoted to dependency.
[Security]
- No CVEs/security issues in this software in the past
[Quality assurance - function/usage]
- The package works well right after install
[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does
not have too many, long-term & critical, open bugs
- Upstream maintainers are the same as lxml, package was split from lxml
in 2012: https://lxml.de/3.0/changes-3.0alpha1.html
[Quality assurance - testing]
- The package runs its Python unittests as autopkgtest
[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field
- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the package:
https://launchpadlibrarian.net/645210260/buildlog_ubuntu-lunar-amd64.python-cssselect_1.2.0-2_BUILDING.txt.gz
- Packaging and build is easy, debian/rules is trivial
[Dependencies]
- No further depends or recommends dependencies that are not yet in main
[Standards compliance]
- This package correctly follows FHS and Debian Policy
[Maintenance/Owner]
- I Suggest the owning team to be Ubuntu Foundations
- Package is in Debian, and currently in sync with no Ubuntu changes
[Background information]
- Upstream Name is "cssselect"
- Upstream is: https://github.com/scrapy/cssselect |
|
| 2024-01-12 11:09:47 |
Mate Kukri |
python-cssselect (Ubuntu): status |
Incomplete |
Confirmed |
|
| 2024-01-16 09:50:44 |
Lukas Märdian |
python-cssselect (Ubuntu): assignee |
Mate Kukri (mkukri) |
|
|
| 2024-01-16 15:37:51 |
Christian Ehrhardt |
python-cssselect (Ubuntu): assignee |
|
Christian Ehrhardt (paelzer) |
|
| 2024-01-16 15:38:54 |
Christian Ehrhardt |
python-cssselect (Ubuntu): assignee |
Christian Ehrhardt (paelzer) |
Ioanna Alifieraki (joalif) |
|
| 2024-01-22 10:19:54 |
Mate Kukri |
description |
[Availability]
- The package python-cssselect is already in Ubuntu universe:
https://launchpad.net/ubuntu/+source/python-cssselect
- The package python-cssselect is an architecture independent Python package.
[Rationale]
- python-csselect is currently a build dependency of lxml in main.
- python3-lxml doesn't work without it (#1017067) and it should be
promoted to dependency.
[Security]
- No CVEs/security issues in this software in the past
[Quality assurance - function/usage]
- The package works well right after install
[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does
not have too many, long-term & critical, open bugs
- Upstream maintainers are the same as lxml, package was split from lxml
in 2012: https://lxml.de/3.0/changes-3.0alpha1.html
[Quality assurance - testing]
- The package runs its Python unittests as autopkgtest
[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field
- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the package:
https://launchpadlibrarian.net/645210260/buildlog_ubuntu-lunar-amd64.python-cssselect_1.2.0-2_BUILDING.txt.gz
- Packaging and build is easy, debian/rules is trivial
[Dependencies]
- No further depends or recommends dependencies that are not yet in main
[Standards compliance]
- This package correctly follows FHS and Debian Policy
[Maintenance/Owner]
- I Suggest the owning team to be Ubuntu Foundations
- Package is in Debian, and currently in sync with no Ubuntu changes
[Background information]
- Upstream Name is "cssselect"
- Upstream is: https://github.com/scrapy/cssselect |
[Availability]
- The package python-cssselect is already in Ubuntu universe.
- The package python-cssselect build for the architectures it is designed to work on.
- It currently builds and works for architectures: all
- Link to package https://launchpad.net/ubuntu/+source/python-cssselect
[Rationale]
- The package python-csselect is currently a build dependency of lxml in Ubuntu
main. However python-lxml doesn't work without it (#1017067) and it should be
promoted to runtime dependency.
- Demoting python-lxml, or modifying it to not require this package seems to
be more work than maintaining an extra small package in sync with Debian.
- It would be great and useful to community/processes to have the
package python-cssselect in Ubuntu main, but there is no definitive deadline.
[Security]
- No CVEs/security issues in this software in the past
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Security has been kept in mind and common isolation/risk-mitigation
patterns are in place utilizing the following features:
The package is a Python library and doesn't perform any risky actions by
itself.
- Packages does not open privileged ports (ports < 1024).
- Packages does not contain extensions to security-sensitive software
(filters, scanners, plugins, UI skins, ...)
[Quality assurance - function/usage]
- The package works well right after install
[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does
not have too many, long-term & critical, open bugs
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/python-cssselect/+bug
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=python-cssselect
- https://github.com/scrapy/cssselect/issues
- The package does not deal with exotic hardware we cannot support
[Quality assurance - testing]
- The package does not run a test at build time because it runs its test
suite as autopkgtest.
This is fine, because build is architecture independent and only done once,
versus autopkgtest is run on all architectures.
- The package runs an autopkgtest, and is currently passing on
all architectures except i386: https://autopkgtest.ubuntu.com/packages/python-cssselect
- The package does have failing autopkgtests tests right now, but since
they always failed they are handled as "ignored failure".
This is ok because this is only on i386, and not all its dependencies are
available for i386
[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field
- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the package
https://launchpadlibrarian.net/645210260/buildlog_ubuntu-lunar-amd64.python-cssselect_1.2.0-2_BUILDING.txt.gz
- The output from `lintian --pedantic` is empty
- Lintian overrides are not present
- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies
- The package will not be installed by default
- Packaging and build is easy, debian/rules is trivial
https://git.launchpad.net/ubuntu/+source/python-cssselect/tree/debian/rules?h=debian/sid
[UI standards]
- Application is not end-user facing (does not need translation)
(Not even an application, the package is a Python library)
[Dependencies]
- No further depends or recommends dependencies that are not yet in main
[Standards compliance]
- This package correctly follows FHS and Debian Policy
[Maintenance/Owner]
- I Suggest the owning team to be Foundations
- The future owning team is not yet subscribed, but will subscribe to
the package before promotion
- This does not use static builds
- This does not use vendored code
- This package is not rust based
- The package was test rebuilt in PPA or sbuild recently (provide link/logs)
https://launchpadlibrarian.net/710552022/buildlog_ubuntu-noble-amd64.python-cssselect_1.2.0-2~ppa1_BUILDING.txt.gz
[Background information]
- The Package description explains the package well
- Upstream Name is cssselect
- Link to upstream project https://github.com/scrapy/cssselect
- Maintainers are the same as lxml, package was split from lxml in 2012:
https://lxml.de/3.0/changes-3.0alpha1.html |
|
| 2024-01-23 16:59:29 |
Ioanna Alifieraki |
python-cssselect (Ubuntu): assignee |
Ioanna Alifieraki (joalif) |
|
|
| 2024-01-23 16:59:39 |
Ioanna Alifieraki |
python-cssselect (Ubuntu): assignee |
|
Ubuntu Security Team (ubuntu-security) |
|
| 2024-01-23 20:34:34 |
Mark Esler |
tags |
foundations-todo noble |
foundations-todo noble sec-3619 |
|
| 2024-02-09 03:58:25 |
Nishit Majithia |
python-cssselect (Ubuntu): status |
Confirmed |
In Progress |
|
| 2024-02-09 03:58:32 |
Nishit Majithia |
python-cssselect (Ubuntu): assignee |
Ubuntu Security Team (ubuntu-security) |
|
|
| 2024-02-09 03:59:09 |
Nishit Majithia |
bug |
|
|
added subscriber Nishit Majithia |
| 2024-02-13 10:01:46 |
Lukas Märdian |
python-cssselect (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2024-02-13 10:01:52 |
Lukas Märdian |
bug |
|
|
added subscriber Ubuntu Package Archive Administrators |
| 2024-02-13 10:02:11 |
Lukas Märdian |
lxml (Ubuntu): status |
New |
Invalid |
|
| 2024-02-14 08:46:23 |
Christian Ehrhardt |
python-cssselect (Ubuntu): status |
Fix Committed |
Fix Released |
|
