* Re: [PR PATCH] [Updated] [RFC] python3-Django: remove package.
2021-02-01 13:41 [PR PATCH] [RFC] python3-Django: remove package ericonr
@ 2021-02-01 13:42 ` ericonr
2021-02-01 13:45 ` ericonr
` (3 subsequent siblings)
4 siblings, 0 replies; 6+ messages in thread
From: ericonr @ 2021-02-01 13:42 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 2053 bytes --]
There is an updated pull request by ericonr against master on the void-packages repository
https://github.com/ericonr/void-packages djangorm
https://github.com/void-linux/void-packages/pull/28383
[RFC] python3-Django: remove package.
Not maintained properly and a security risk.
I don't even know how useful this package is without any of the plugins. Anyway, it has CVEs from September (https://github.com/django/django/blob/stable/3.0.x/docs/releases/3.0.10.txt) and new ones now (https://github.com/django/django/blob/stable/3.0.x/docs/releases/3.0.12.txt) which prompted me to open this PR. If no one is going to maintain it properly, I don't think it should be in repos.
<!-- Mark items with [x] where applicable -->
#### General
- [ ] This is a new package and it conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements)
#### Have the results of the proposed changes been tested?
- [ ] I use the packages affected by the proposed changes on a regular basis and confirm this PR works for me
- [ ] I generally don't use the affected packages but briefly tested this PR
<!--
If GitHub CI cannot be used to validate the build result (for example, if the
build is likely to take several hours), make sure to
[skip CI](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration).
When skipping CI, uncomment and fill out the following section.
Note: for builds that are likely to complete in less than 2 hours, it is not
acceptable to skip CI.
-->
<!--
#### Does it build and run successfully?
(Please choose at least one native build and, if supported, at least one cross build. More are better.)
- [ ] I built this PR locally for my native architecture, (ARCH-LIBC)
- [ ] I built this PR locally for these architectures (if supported. mark crossbuilds):
- [ ] aarch64-musl
- [ ] armv7l
- [ ] armv6l-musl
-->
A patch file from https://github.com/void-linux/void-packages/pull/28383.patch is attached
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-djangorm-28383.patch --]
[-- Type: text/x-diff, Size: 2631 bytes --]
From e1bc89ba277eef57553150220536caffb1c9bbd7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89rico=20Rolim?= <erico.erc@gmail.com>
Date: Mon, 1 Feb 2021 10:35:25 -0300
Subject: [PATCH 1/2] python3-Django: remove package.
Not maintained properly and a security risk.
---
srcpkgs/python3-Django/template | 21 ---------------------
srcpkgs/python3-Django/update | 1 -
2 files changed, 22 deletions(-)
delete mode 100644 srcpkgs/python3-Django/template
delete mode 100644 srcpkgs/python3-Django/update
diff --git a/srcpkgs/python3-Django/template b/srcpkgs/python3-Django/template
deleted file mode 100644
index 23a383b915d..00000000000
--- a/srcpkgs/python3-Django/template
+++ /dev/null
@@ -1,21 +0,0 @@
-# Template file for 'python3-Django'
-pkgname=python3-Django
-version=3.0.7
-revision=2
-wrksrc="Django-${version}"
-build_style=python3-module
-hostmakedepends="python3-setuptools"
-depends="python3-pytz python3-setuptools"
-short_desc="High-level Python3 Web framework"
-maintainer="Orphaned <orphan@voidlinux.org>"
-license="BSD-3-Clause"
-homepage="https://www.djangoproject.com/"
-distfiles="https://media.djangoproject.com/releases/3.0/Django-${version}.tar.gz"
-checksum=5052b34b34b3425233c682e0e11d658fd6efd587d11335a0203d827224ada8f2
-alternatives="django:django-admin:/usr/bin/django-admin3"
-
-post_install() {
- vlicense LICENSE
- rm -f ${DESTDIR}/usr/bin/django-admin.py*
- mv ${DESTDIR}/usr/bin/django-admin{,3}
-}
diff --git a/srcpkgs/python3-Django/update b/srcpkgs/python3-Django/update
deleted file mode 100644
index 25ef51d109a..00000000000
--- a/srcpkgs/python3-Django/update
+++ /dev/null
@@ -1 +0,0 @@
-ignore="*a* *b* *rc*"
From 94a4355ae4e7c1adf7b2e5af6398bb95b5200a08 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89rico=20Rolim?= <erico.erc@gmail.com>
Date: Mon, 1 Feb 2021 10:42:27 -0300
Subject: [PATCH 2/2] removed-packages: add python3-Django.
---
srcpkgs/removed-packages/template | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/srcpkgs/removed-packages/template b/srcpkgs/removed-packages/template
index 225594dc4b8..0d88a06aa38 100644
--- a/srcpkgs/removed-packages/template
+++ b/srcpkgs/removed-packages/template
@@ -1,7 +1,7 @@
# Template file for 'removed-packages'
pkgname=removed-packages
version=0.1
-revision=18
+revision=19
build_style=meta
short_desc="Uninstalls packages removed from repository"
maintainer="Piotr Wójcik <chocimier@tlen.pl>"
@@ -179,6 +179,7 @@ replaces="
python-pyenet<=1.3.13.post7_2
python-pyside<=1.2.2_7
python-pytest-relaxed<=1.1.2_2
+ python3-Django<=3.0.7_2
qimageblitz<=0.0.6_4
qucs<=0.0.19_2
qt<=4.8.7_29
^ permalink raw reply [flat|nested] 6+ messages in thread* Re: [PR PATCH] [Updated] [RFC] python3-Django: remove package.
2021-02-01 13:41 [PR PATCH] [RFC] python3-Django: remove package ericonr
2021-02-01 13:42 ` [PR PATCH] [Updated] " ericonr
@ 2021-02-01 13:45 ` ericonr
2021-02-01 13:58 ` ericonr
` (2 subsequent siblings)
4 siblings, 0 replies; 6+ messages in thread
From: ericonr @ 2021-02-01 13:45 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 2053 bytes --]
There is an updated pull request by ericonr against master on the void-packages repository
https://github.com/ericonr/void-packages djangorm
https://github.com/void-linux/void-packages/pull/28383
[RFC] python3-Django: remove package.
Not maintained properly and a security risk.
I don't even know how useful this package is without any of the plugins. Anyway, it has CVEs from September (https://github.com/django/django/blob/stable/3.0.x/docs/releases/3.0.10.txt) and new ones now (https://github.com/django/django/blob/stable/3.0.x/docs/releases/3.0.12.txt) which prompted me to open this PR. If no one is going to maintain it properly, I don't think it should be in repos.
<!-- Mark items with [x] where applicable -->
#### General
- [ ] This is a new package and it conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements)
#### Have the results of the proposed changes been tested?
- [ ] I use the packages affected by the proposed changes on a regular basis and confirm this PR works for me
- [ ] I generally don't use the affected packages but briefly tested this PR
<!--
If GitHub CI cannot be used to validate the build result (for example, if the
build is likely to take several hours), make sure to
[skip CI](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration).
When skipping CI, uncomment and fill out the following section.
Note: for builds that are likely to complete in less than 2 hours, it is not
acceptable to skip CI.
-->
<!--
#### Does it build and run successfully?
(Please choose at least one native build and, if supported, at least one cross build. More are better.)
- [ ] I built this PR locally for my native architecture, (ARCH-LIBC)
- [ ] I built this PR locally for these architectures (if supported. mark crossbuilds):
- [ ] aarch64-musl
- [ ] armv7l
- [ ] armv6l-musl
-->
A patch file from https://github.com/void-linux/void-packages/pull/28383.patch is attached
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-djangorm-28383.patch --]
[-- Type: text/x-diff, Size: 2643 bytes --]
From bc29906c1035a2cb14beffb0bcc6dbefd26d8d49 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89rico=20Rolim?= <erico.erc@gmail.com>
Date: Mon, 1 Feb 2021 10:35:25 -0300
Subject: [PATCH 1/2] python3-Django: remove package.
Not maintained properly and a security risk.
---
srcpkgs/python3-Django/template | 21 ---------------------
srcpkgs/python3-Django/update | 1 -
2 files changed, 22 deletions(-)
delete mode 100644 srcpkgs/python3-Django/template
delete mode 100644 srcpkgs/python3-Django/update
diff --git a/srcpkgs/python3-Django/template b/srcpkgs/python3-Django/template
deleted file mode 100644
index 23a383b915d..00000000000
--- a/srcpkgs/python3-Django/template
+++ /dev/null
@@ -1,21 +0,0 @@
-# Template file for 'python3-Django'
-pkgname=python3-Django
-version=3.0.7
-revision=2
-wrksrc="Django-${version}"
-build_style=python3-module
-hostmakedepends="python3-setuptools"
-depends="python3-pytz python3-setuptools"
-short_desc="High-level Python3 Web framework"
-maintainer="Orphaned <orphan@voidlinux.org>"
-license="BSD-3-Clause"
-homepage="https://www.djangoproject.com/"
-distfiles="https://media.djangoproject.com/releases/3.0/Django-${version}.tar.gz"
-checksum=5052b34b34b3425233c682e0e11d658fd6efd587d11335a0203d827224ada8f2
-alternatives="django:django-admin:/usr/bin/django-admin3"
-
-post_install() {
- vlicense LICENSE
- rm -f ${DESTDIR}/usr/bin/django-admin.py*
- mv ${DESTDIR}/usr/bin/django-admin{,3}
-}
diff --git a/srcpkgs/python3-Django/update b/srcpkgs/python3-Django/update
deleted file mode 100644
index 25ef51d109a..00000000000
--- a/srcpkgs/python3-Django/update
+++ /dev/null
@@ -1 +0,0 @@
-ignore="*a* *b* *rc*"
From 92725ec132a4fc855e6eb1e8de10fa5b4f344944 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89rico=20Rolim?= <erico.erc@gmail.com>
Date: Mon, 1 Feb 2021 10:42:27 -0300
Subject: [PATCH 2/2] removed-packages: add python3-Django.
---
srcpkgs/removed-packages/template | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/srcpkgs/removed-packages/template b/srcpkgs/removed-packages/template
index 7ccbf196372..5aba9f12cf8 100644
--- a/srcpkgs/removed-packages/template
+++ b/srcpkgs/removed-packages/template
@@ -1,7 +1,7 @@
# Template file for 'removed-packages'
pkgname=removed-packages
version=0.1
-revision=19
+revision=20
build_style=meta
short_desc="Uninstalls packages removed from repository"
maintainer="Piotr Wójcik <chocimier@tlen.pl>"
@@ -179,6 +179,7 @@ replaces="
python-pyenet<=1.3.13.post7_2
python-pyside<=1.2.2_7
python-pytest-relaxed<=1.1.2_2
+ python3-Django<=3.0.7_2
python3-pyPEG2<=2.15.2_7
qimageblitz<=0.0.6_4
qucs<=0.0.19_2
^ permalink raw reply [flat|nested] 6+ messages in thread* Re: [RFC] python3-Django: remove package.
2021-02-01 13:41 [PR PATCH] [RFC] python3-Django: remove package ericonr
2021-02-01 13:42 ` [PR PATCH] [Updated] " ericonr
2021-02-01 13:45 ` ericonr
@ 2021-02-01 13:58 ` ericonr
2021-02-03 4:42 ` [PR PATCH] [Updated] " ericonr
2021-02-03 14:15 ` [PR PATCH] [Merged]: " ericonr
4 siblings, 0 replies; 6+ messages in thread
From: ericonr @ 2021-02-01 13:58 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 272 bytes --]
New comment by ericonr on void-packages repository
https://github.com/void-linux/void-packages/pull/28383#issuecomment-770875777
Comment:
@fnogcps and @svenper were the last to update this (in June 2020), so I'm tagging you.
Considering removal some 3 days from now.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PR PATCH] [Updated] [RFC] python3-Django: remove package.
2021-02-01 13:41 [PR PATCH] [RFC] python3-Django: remove package ericonr
` (2 preceding siblings ...)
2021-02-01 13:58 ` ericonr
@ 2021-02-03 4:42 ` ericonr
2021-02-03 14:15 ` [PR PATCH] [Merged]: " ericonr
4 siblings, 0 replies; 6+ messages in thread
From: ericonr @ 2021-02-03 4:42 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 2053 bytes --]
There is an updated pull request by ericonr against master on the void-packages repository
https://github.com/ericonr/void-packages djangorm
https://github.com/void-linux/void-packages/pull/28383
[RFC] python3-Django: remove package.
Not maintained properly and a security risk.
I don't even know how useful this package is without any of the plugins. Anyway, it has CVEs from September (https://github.com/django/django/blob/stable/3.0.x/docs/releases/3.0.10.txt) and new ones now (https://github.com/django/django/blob/stable/3.0.x/docs/releases/3.0.12.txt) which prompted me to open this PR. If no one is going to maintain it properly, I don't think it should be in repos.
<!-- Mark items with [x] where applicable -->
#### General
- [ ] This is a new package and it conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements)
#### Have the results of the proposed changes been tested?
- [ ] I use the packages affected by the proposed changes on a regular basis and confirm this PR works for me
- [ ] I generally don't use the affected packages but briefly tested this PR
<!--
If GitHub CI cannot be used to validate the build result (for example, if the
build is likely to take several hours), make sure to
[skip CI](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration).
When skipping CI, uncomment and fill out the following section.
Note: for builds that are likely to complete in less than 2 hours, it is not
acceptable to skip CI.
-->
<!--
#### Does it build and run successfully?
(Please choose at least one native build and, if supported, at least one cross build. More are better.)
- [ ] I built this PR locally for my native architecture, (ARCH-LIBC)
- [ ] I built this PR locally for these architectures (if supported. mark crossbuilds):
- [ ] aarch64-musl
- [ ] armv7l
- [ ] armv6l-musl
-->
A patch file from https://github.com/void-linux/void-packages/pull/28383.patch is attached
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-djangorm-28383.patch --]
[-- Type: text/x-diff, Size: 2643 bytes --]
From cc134bfe97e022692aa66df87e42817b3ba60a18 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89rico=20Rolim?= <erico.erc@gmail.com>
Date: Mon, 1 Feb 2021 10:35:25 -0300
Subject: [PATCH 1/2] python3-Django: remove package.
Not maintained properly and a security risk.
---
srcpkgs/python3-Django/template | 21 ---------------------
srcpkgs/python3-Django/update | 1 -
2 files changed, 22 deletions(-)
delete mode 100644 srcpkgs/python3-Django/template
delete mode 100644 srcpkgs/python3-Django/update
diff --git a/srcpkgs/python3-Django/template b/srcpkgs/python3-Django/template
deleted file mode 100644
index 23a383b915d..00000000000
--- a/srcpkgs/python3-Django/template
+++ /dev/null
@@ -1,21 +0,0 @@
-# Template file for 'python3-Django'
-pkgname=python3-Django
-version=3.0.7
-revision=2
-wrksrc="Django-${version}"
-build_style=python3-module
-hostmakedepends="python3-setuptools"
-depends="python3-pytz python3-setuptools"
-short_desc="High-level Python3 Web framework"
-maintainer="Orphaned <orphan@voidlinux.org>"
-license="BSD-3-Clause"
-homepage="https://www.djangoproject.com/"
-distfiles="https://media.djangoproject.com/releases/3.0/Django-${version}.tar.gz"
-checksum=5052b34b34b3425233c682e0e11d658fd6efd587d11335a0203d827224ada8f2
-alternatives="django:django-admin:/usr/bin/django-admin3"
-
-post_install() {
- vlicense LICENSE
- rm -f ${DESTDIR}/usr/bin/django-admin.py*
- mv ${DESTDIR}/usr/bin/django-admin{,3}
-}
diff --git a/srcpkgs/python3-Django/update b/srcpkgs/python3-Django/update
deleted file mode 100644
index 25ef51d109a..00000000000
--- a/srcpkgs/python3-Django/update
+++ /dev/null
@@ -1 +0,0 @@
-ignore="*a* *b* *rc*"
From 56de1d1d6bf32392be61cfbe6493798d808b7c92 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89rico=20Rolim?= <erico.erc@gmail.com>
Date: Mon, 1 Feb 2021 10:42:27 -0300
Subject: [PATCH 2/2] removed-packages: add python3-Django.
---
srcpkgs/removed-packages/template | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/srcpkgs/removed-packages/template b/srcpkgs/removed-packages/template
index cef8a752e46..c8d8b81e966 100644
--- a/srcpkgs/removed-packages/template
+++ b/srcpkgs/removed-packages/template
@@ -1,7 +1,7 @@
# Template file for 'removed-packages'
pkgname=removed-packages
version=0.1
-revision=21
+revision=22
build_style=meta
short_desc="Uninstalls packages removed from repository"
maintainer="Piotr Wójcik <chocimier@tlen.pl>"
@@ -182,6 +182,7 @@ replaces="
python-pyenet<=1.3.13.post7_2
python-pyside<=1.2.2_7
python-pytest-relaxed<=1.1.2_2
+ python3-Django<=3.0.7_2
python3-pyPEG2<=2.15.2_7
qimageblitz<=0.0.6_4
qucs<=0.0.19_2
^ permalink raw reply [flat|nested] 6+ messages in thread* Re: [PR PATCH] [Merged]: [RFC] python3-Django: remove package.
2021-02-01 13:41 [PR PATCH] [RFC] python3-Django: remove package ericonr
` (3 preceding siblings ...)
2021-02-03 4:42 ` [PR PATCH] [Updated] " ericonr
@ 2021-02-03 14:15 ` ericonr
4 siblings, 0 replies; 6+ messages in thread
From: ericonr @ 2021-02-03 14:15 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 1896 bytes --]
There's a merged pull request on the void-packages repository
[RFC] python3-Django: remove package.
https://github.com/void-linux/void-packages/pull/28383
Description:
Not maintained properly and a security risk.
I don't even know how useful this package is without any of the plugins. Anyway, it has CVEs from September (https://github.com/django/django/blob/stable/3.0.x/docs/releases/3.0.10.txt) and new ones now (https://github.com/django/django/blob/stable/3.0.x/docs/releases/3.0.12.txt) which prompted me to open this PR. If no one is going to maintain it properly, I don't think it should be in repos.
<!-- Mark items with [x] where applicable -->
#### General
- [ ] This is a new package and it conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements)
#### Have the results of the proposed changes been tested?
- [ ] I use the packages affected by the proposed changes on a regular basis and confirm this PR works for me
- [ ] I generally don't use the affected packages but briefly tested this PR
<!--
If GitHub CI cannot be used to validate the build result (for example, if the
build is likely to take several hours), make sure to
[skip CI](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration).
When skipping CI, uncomment and fill out the following section.
Note: for builds that are likely to complete in less than 2 hours, it is not
acceptable to skip CI.
-->
<!--
#### Does it build and run successfully?
(Please choose at least one native build and, if supported, at least one cross build. More are better.)
- [ ] I built this PR locally for my native architecture, (ARCH-LIBC)
- [ ] I built this PR locally for these architectures (if supported. mark crossbuilds):
- [ ] aarch64-musl
- [ ] armv7l
- [ ] armv6l-musl
-->
^ permalink raw reply [flat|nested] 6+ messages in thread