Feeds

FTP master

This month I accepted 347 and rejected 49 packages. The overall number of packages that got accepted was 348.

Debian LTS

This was my hundred-nineteenth month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian.

During my allocated time I uploaded or worked on:

• [#1070154] bullseye-pu: qtbase-opensource-src/5.15.2+dfsg-9+deb11u1 package upload
• [#1064550] bullseye-pu: libjwt 1.10.2-1+deb11u1 has been marked for accept
• [#1067544] bullseye-pu: libmicrohttpd 0.9.72-2+deb11u1 has been marked for accept

I also continued to work on tiff and last but not least did a week of FD and attended the monthly LTS/ELTS meeting.

Unfortunately I used lots of time to debug an issue with nghttp2. Please see my odyssey below.

Debian ELTS

This month was the seventieth ELTS month. During my allocated time I uploaded:

• [ELA-1104-1-1]nghttp2 security update for one CVEs to fix an DoS resulting from bad handling of CONTINUATION frames in Stretch

For some tests I installed the new nghttp2 package on my Stretch VM and started the daemon. Unfortunately I got an unexpected error from getaddrinfo() about ai_socktype not supported. The daemon was configured to listen on lo, the device was available, but the error remained. I was pretty sure that my patch was not the reason for this and indeed the unpatched version showed this error as well. I didn’t want to release an untested package, so nghttp2 had to start at least! Therefore I built a minimal example to reproduce the issue. getaddrinfo() failed for hints.ai_socktype=SOCK_STREAM and a numerical IP address. Having no hints at all or “localhost” instead of “127.0.0.1” made the error disappear (as a remark: “localhost” resolves to 127.0.0.1, the ipv6 variant is “ip6-localhost”). I could see that in nghttp2 as well. Configuring it with “localhost” let the error vanish but the daemon still exited due to other reasons. After some time of debugging, I added another network interface to my VM and configured it with a dummy IPv4 address. Voila, everything worked as expected. According to Wikipedia, IPv6 was ratified as standard in 2017 and Stretch was also released in 2017. No wonder that a IPv6-only-VM had problems back then and these problems survived to the present.

I also continued to work on an update for tiff in Jessie and Stretch, did a week of FD and attended the LTS/ELTS meeting.

Debian Printing

This month I uploaded new upstream or bugfix versions of:

• … cups-bjnp

This work is generously funded by Freexian!

Debian Astro

This month I uploaded a new upstream or bugfix version of:

• … astap
• … astap-cli
• … c-munipack
• … libahp-xc
• … planetary-system-stacker
• … fxload
• … virtualgps

Debian IoT

This month I uploaded new upstream or bugfix versions of:

• … pywws
• … openzwave
• … openoverlayrouter

Debian Mobcom

Due to more and more problems with time_t, I removed osmo-iuh and all dependencies from armel, armhf and i386, sorry. If there is really anybody using this software on 32-bit architectures don’t hesitate to get in touch.

It is official now, the GSoC student working on the Mobcom packages is Nathan Doris. He already finished the hardest part of the job and I could upload the latest version of libosmocore. I really enjoy working with him and look forward to a pleasant SoC :-).

misc

This month I uploaded new upstream or bugfix versions of:

• … dateutils
• … chktex
• … liburjtag
• … pollinate
• … usb-modeswitch
• … greylistd
• … entropybroker

Did I already mention that I love lists with topics I can work on. I print out such lists and enjoy checking off one after the other. End of May Helmut told me that I am a bit lazy and gave me such a list with all my packages that have one or the other issue with /usr-move. Most of the uploads above are packages on that list and I could check off a lot :-).

Welcome to the May 2024 report from the Reproducible Builds project! In these reports, we try to outline what we have been up to over the past month and highlight news items in software supply-chain security more broadly. As ever, if you are interested in contributing to the project, please visit our Contribute page on our website.

Table of contents:

1. A peek into build provenance for Homebrew
2. Distribution news
3. Mailing list news
4. Miscellaneous news
5. Two new academic papers
6. diffoscope
7. Website updates
8. Upstream patches
9. Reproducibility testing framework

A peek into build provenance for Homebrew

Joe Sweeney and William Woodruff on the Trail of Bits blog wrote an extensive post about build provenance for Homebrew, the third-party package manager for MacOS. Their post details how each “bottle” (i.e. each release):

[…] built by Homebrew will come with a cryptographically verifiable statement binding the bottle’s content to the specific workflow and other build-time metadata that produced it. […] In effect, this injects greater transparency into the Homebrew build process, and diminishes the threat posed by a compromised or malicious insider by making it impossible to trick ordinary users into installing non-CI-built bottles.

The post also briefly touches on future work, including work on source provenance:

Homebrew’s formulae already hash-pin their source artifacts, but we can go a step further and additionally assert that source artifacts are produced by the repository (or other signing identity) that’s latent in their URL or otherwise embedded into the formula specification.

Distribution news

In Debian this month, Johannes Schauer Marin Rodrigues (aka josch) noticed that the Debian binary package bash version 5.2.15-2+b3 was “uploaded to the archive twice. Once to bookworm and once to sid but with differing content.” This is problem for reproducible builds in Debian due its assumption that the package name, version and architecture triplet is unique. However, josch highlighted that

This example with bash is especially problematic since bash is Essential:yes, so there will now be a large portion of .buildinfo files where it is not possible to figure out with which of the two differing bash packages the sources were compiled.

In response to this, Holger Levsen performed an analysis of all .buildinfo files and found that this needs almost 1,500 binNMUs to fix the fallout from this bug.

Elsewhere in Debian, Vagrant Cascadian posted about a Non-Maintainer Upload (NMU) sprint to take place during early June, and it was announced that there is now a #debian-snapshot IRC channel on OFTC to discuss the creation of a new source code archiving service to, perhaps, replace snapshot.debian.org. Lastly, 11 reviews of Debian packages were added, 15 were updated and 48 were removed this month adding to our extensive knowledge about identified issues. A number of issue types have been updated by Chris Lamb as well. […][…]

Elsewhere in the world of distributions, deep within a larger announcement from Colin Percival about the release of version 14.1-BETA2, it was mentioned that the FreeBSD kernels are now built reproducibly.

In Fedora, however, the change proposal mentioned in our report for April 2024 was approved, so, per the ReproduciblePackageBuilds wiki page, the add-determinism tool is now running in new builds for Fedora 41 (‘rawhide’). The add-determinism tool is a Rust program which, as its name suggests, adds determinism to files that are given as input by “attempting to standardize metadata contained in binary or source files to ensure consistency and clamping to $SOURCE_DATE_EPOCH in all instances”. This is essentially the Fedora version of Debian’s strip-nondeterminism. However, strip-nondeterminism is written in Perl, and Fedora did not want to pull Perl in the buildroot for every package. The add-determinism tool eliminates many causes of non-determinism and work is ongoing to continue the scope of packages it can operate on.

Mailing list news

On our mailing list this month, regular contributor kpcyrd wrote to the list with an update on their source code indexing project, whatsrc.org. The whatsrc.org project, which was launched last month in response to the XZ Utils backdoor, now contains and indexes almost 250,000 unique source code archives. In their post, kpcyrd gives an example of its intended purpose, noting that it shown that whilst “there seems to be consensus about [the] source code for zsh 5.9” in various Linux distributions, it “does not align with the contents of the zsh Git repository”.

Holger Levsen also posted to the list with a ‘pre-announcement’ of sorts for the 2024 Reproducible Builds summit. In particular:

[Whilst] the dates and location are not fixed yet, however if you don’ help us with finding a suitable location soon, it is very likely that we’ll meet again in Hamburg in the 2nd half of September 2024 […].

Lastly, Frederic-Emmanuel Picca wrote to the list asking for help understanding the “non-reproducible status of the Debian silx package” and received replies from both Vagrant Cascadian and Chris Lamb.

Miscellaneous news

strip-nondeterminism is our tool to remove specific non-deterministic results from a completed build. This month strip-nondeterminism version 1.14.0-1 was uploaded to Debian unstable by Chris Lamb chiefly to incorporate a change from Alex Muntada to avoid a dependency on Sub::Override to perform monkey-patching and break circular dependencies related to debhelper […]. Elsewhere in our tooling, Jelle van der Waa modified reprotest because the pipes module will be removed in Python version 3.13 […].

It was also noticed that a new blog post by Daniel Stenberg detailing “How to verify a Curl release” mentions the SOURCE_DATE_EPOCH environment variable. This is because:

The [curl] release tools document also contains another key component: the exact time stamp at which the release was done – using integer second resolution. In order to generate a correct tarball clone, you need to also generate the new version using the old version’s timestamp. Because the modification date of all files in the produced tarball will be set to this timestamp.

Furthermore, Fay Stegerman filed a bug against the Signal messenger app for Android to report that their ‘reproducible’ builds cannot, in fact, be reproduced. However, Fay is quick to note that she has:

… found zero evidence of any kind of compromise. Some differences are yet unexplained but everything I found seems to be benign. I am disappointed that Reproducible Builds have been broken for months but I have zero reason to doubt Signal’s security in any way.

Lastly, it was observed that there was a concise and diagrammatic overview of “supply chain threats” on the SLSA website.

Two new academic papers

Two new scholarly papers were published this month.

Firstly, Mathieu Acher, Benoît Combemale, Georges Aaron Randrianaina and Jean-Marc Jézéquel of University of Rennes on Embracing Deep Variability For Reproducibility & Replicability. The authors describe their approach as follows:

In this short [vision] paper we delve into the application of software engineering techniques, specifically variability management, to systematically identify and explicit points of variability that may give rise to reproducibility issues (e.g., language, libraries, compiler, virtual machine, OS, environment variables, etc.). The primary objectives are: i) gaining insights into the variability layers and their possible interactions, ii) capturing and documenting configurations for the sake of reproducibility, and iii) exploring diverse configurations to replicate, and hence validate and ensure the robustness of results. By adopting these methodologies, we aim to address the complexities associated with reproducibility and replicability in modern software systems and environments, facilitating a more comprehensive and nuanced perspective on these critical aspects.

(A PDF of this article is available.)

Secondly, Ludovic Courtès, Timothy Sample, Simon Tournier and Stefano Zacchiroli have collaborated to publish a paper on Source Code Archiving to the Rescue of Reproducible Deployment. Their paper was motivated because:

The ability to verify research results and to experiment with methodologies are core tenets of science. As research results are increasingly the outcome of computational processes, software plays a central role. GNU Guix is a software deployment tool that supports reproducible software deployment, making it a foundation for computational research workflows. To achieve reproducibility, we must first ensure the source code of software packages Guix deploys remains available.

(A PDF of this article is also available.)

diffoscope

diffoscope is our in-depth and content-aware diff utility that can locate and diagnose reproducibility issues. This month, Chris Lamb made a number of changes such as uploading versions 266, 267, 268 and 269 to Debian, making the following changes:

• New features:

  • Use xz --list to supplement output when comparing .xz archives; essential when metadata differs. (#1069329)
  • Include xz --verbose --verbose (ie. double) output. (#1069329)
  • Strip the first line from the xz --list output. […]
  • Only include xz --list --verbose output if the xz has no other differences. […]
  • Actually append the xz --list after the container differences, as it simplifies a lot. […]

• Testing improvements:

  • Allow Debian testing to fail right now. […]
  • Drop apktool from Build-Depends; we can still test APK functionality via autopkgtests. (#1071410)
  • Add a versioned dependency for at least version 5.4.5 for the xz tests as they fail under (at least) version 5.2.8. (#374)
  • Fix tests for 7zip 24.05. […][…]
  • Fix all tests after additon of xz --list. […][…]

• Misc:

  • Update copyright years. […]

In addition, James Addison fixed an issue where the HTML output showed only the first difference in a file, while the text output shows all differences […][…][…], Sergei Trofimovich amended the 7zip version test for older 7z versions that include the string “[64]“ […][…] and Vagrant Cascadian relaxed the versioned dependency to allow version 5.4.1 for the xz tests […] and proposed updates to guix for versions 267, 268 and pushed version 269 to Guix. Furthermore, Eli Schwartz updated the diffoscope.org website in order to explain how to install diffoscope on Gentoo […].

Website updates

There were a number of improvements made to our website this month, including Chris Lamb making the “print” CSS stylesheet nicer […]. Fay Stegerman made a number of updates to the page about the SOURCE_DATE_EPOCH environment variable […][…][…] and Holger Levsen added some of their presentations to the “Resources” page. Furthermore, IOhannes zmölnig stipulated support for SOURCE_DATE_EPOCH in clang version 16.0.0+ […], Jan Zerebecki expanded the “Formal definition” page and fixed a number of typos on the “Buy-in” page […] and Simon Josefsson fixed the link to Trisquel GNU/Linux on the “Projects” page […].

Upstream patches

This month, we wrote a number of patches to fix specific reproducibility issues, including:

• Bernhard M. Wiedemann:

  • nauty (CPU-detection issue)
  • emacs (ASLR)

• Chris Lamb:

  • #1070754 filed against gensio.
  • #1071064 filed against tkgate.
  • #1072094 filed against ruby-pgplot.

Reproducibility testing framework

The Reproducible Builds project operates a comprehensive testing framework running primarily at tests.reproducible-builds.org in order to check packages and other artifacts for reproducibility. In May, a number of changes were made by Holger Levsen:

• Debian-related changes:

  • Enable the rebuilder-snapshot API on osuosl4. […]
  • Schedule the i386 architecture a bit more often. […]
  • Adapt cleanup_nodes.sh to the new way of running our build services. […]
  • Add 8 more workers for the i386 architecture. […]
  • Update configuration now that the infom07 and infom08 nodes have been reinstalled as “real” i386 systems. […]
  • Make diffoscope timeouts more visible on the #debian-reproducible-changes IRC channel. […]
  • Mark the cbxi4a-armhf node as down. […][…]
  • Only install the hdmi2usb-mode-switch package only on Debian bookworm and earlier […] and only install the haskell-platform package on Debian bullseye […].

• Misc:

  • Install the ntpdate utility as we need it later. […]
  • Document the progress on the i386 architecture nodes at Infomaniak. […]
  • Drop an outdated and unnoticed notice. […]
  • Add live_setup_schroot to the list of so-called “zombie” jobs. […]

In addition, Mattia Rizzolo reinstalled the infom07 and infom08 nodes […] and Vagrant Cascadian marked the cbxi4a node as online […].

If you are interested in contributing to the Reproducible Builds project, please visit our Contribute page on our website. However, you can get in touch with us via:

• IRC: #reproducible-builds on irc.oftc.net.

• Twitter: @ReproBuilds

• Mastodon: @reproducible_builds@fosstodon.org

• Mailing list: rb-general@lists.reproducible-builds.org

There hasn't been a boom like the AI boom since the .com days. And it may look like a space destined to be controlled by a couple of tech giants. But Ines Montani thinks open source will play an important role in the future of AI. I hope you join us for this excellent conversation about the future of AI and open source.<br/> <br/> <strong>Episode sponsors</strong><br/> <br/> <a href='https://talkpython.fm/sentry'>Sentry Error Monitoring, Code TALKPYTHON</a><br> <a href='https://talkpython.fm/porkbun'>Porkbun</a><br> <a href='https://talkpython.fm/training'>Talk Python Courses</a><br/> <br/> <strong>Links from the show</strong><br/> <br/> <div><b>Ines Montani on Twitter</b>: <a href="https://twitter.com/_inesmontani" target="_blank" rel="noopener">@_inesmontani</a><br/> <b>spaCy</b>: <a href="https://spacy.io" target="_blank" rel="noopener">spacy.io</a><br/> <b>Prodigy App</b>: <a href="https://prodi.gy" target="_blank" rel="noopener">prodi.gy</a><br/> <b>Ines' presentation at PyCon Lithuania</b>: <a href="https://www.youtube.com/watch?v=SsnDN7LI7IY" target="_blank" rel="noopener">youtube.com</a><br/> <b>LM Studio</b>: <a href="https://lmstudio.ai" target="_blank" rel="noopener">lmstudio.ai</a><br/> <b>Little Bobby Tables</b>: <a href="https://xkcd.com/327/" target="_blank" rel="noopener">xkcd.com</a><br/> <br/> <b>spaCy and NLP course</b>: <a href="https://talkpython.fm/spacy" target="_blank" rel="noopener">talkpython.fm</a><br/> <b>Watch this episode on YouTube</b>: <a href="https://www.youtube.com/watch?v=zaZrWZwKJH4" target="_blank" rel="noopener">youtube.com</a><br/> <b>Episode transcripts</b>: <a href="https://talkpython.fm/episodes/transcript/465/the-ai-revolution-wont-be-monopolized" target="_blank" rel="noopener">talkpython.fm</a><br/> <br/> <b>--- Stay in touch with us ---</b><br/> <b>Subscribe to us on YouTube</b>: <a href="https://talkpython.fm/youtube" target="_blank" rel="noopener">youtube.com</a><br/> <b>Follow Talk Python on Mastodon</b>: <a href="https://fosstodon.org/web/@talkpython" target="_blank" rel="noopener"><i class="fa-brands fa-mastodon"></i>talkpython</a><br/> <b>Follow Michael on Mastodon</b>: <a href="https://fosstodon.org/web/@mkennedy" target="_blank" rel="noopener"><i class="fa-brands fa-mastodon"></i>mkennedy</a><br/></div>

A week ago I attended the 22. Gulaschprogrammiernacht (GPN22) in Karlsruhe, Germany. That’s a bit of a smaller version of the Chaos Communication Congress, although with 1000+ attendees “small” doesn’t really do it justice. Below are some of my notes from conversations I had there.

ⓒ Entropia e.V. KDE Itinerary Debugging other people’s trips

Occasionally Itinerary produces weird results in its timeline for complex trips, and this can be hard to debug remotely without asking for a full export of all the personal data in there. Meeting users and contributors at events is a good opportunity to look at such issues on their devices and analyze the problems together.

Some things could be fixed on the spot, and verified shortly afterwards on the affected installations:

• Improved trip grouping for incomplete trips and closely adjacent trips.
• Improved recovery from wrong timezone information in manually added entries.
• Fixed timeline ordering with location change elements without arrival time.

Data syncing via Matrix

Syncing multiple Itinerary instances is an often requested feature. One of the most promising approaches is doing this via Matrix. An in-depth discussion on that at least gave me a much more refined idea on how that could look like, and what we’d need in order to get there.

Specifically:

• Use a special room type for this, so it’s not cluttering the room list in “normal” chat clients.
• Use one room per trip rather than one room for the entire data set. This avoids scalability problems with state events, and would allow sharing individual trips with other people for joint planning and traveling together.
• Use one state event per timeline element, so that there is always a known latest state without having to load/replay the entire room history.

iOS port

I also met someone looking into an iOS port of Itinerary. Obviously that’s in a very early exploratory state, but should that turn out viable it would probably also benefit many other KDE applications.

Project management

We also talks about how to clean up and revive task tracking for Itinerary. For various historic reasons relevant tasks are currently spread over two Phabricator boards, a Gitlab board, tasks in Itinerary’s Gitlab project and Bugzilla, neither of which is perfectly maintained, current nor complete.

Not sure yet how to best structure this, but it clearly needs to change, and I need to more actively use this rather than having things in my local notes.

KDE Platform & Frameworks Password and credential management

How could credential/secrets storage/management look like for our platform in a world beyond KWallet? KWallet’s design, UX and security model goes back more than 20 years by now, and it shows. And since this is a sensitive and complex topic to touch, it’s probably worth working out first how we would want this to look like eventually.

Things to consider include:

• Standardized access APIs for applications like XDG portals or the secret service API.
• Data exchange formats with other password management systems.
• Integration with cloud-based password managers for synchronization between different devices.
• Supporting external hardware tokens and TPMs.
• Supporting Passkeys and WebAuthn.
• Unlocking UI nicely integrated into the shell, and also supporting e.g. biometric unlocking.
• Hiding the complexity of all that from the user during setup to the extend possible.
• Browser integration and integration with SSH and GPG key stores.
• Should 2FA tools like Keysmith use this or remain separate?
• Minimizing the need for configuration, while keeping much of the above opt-in.

Given the complexity we probably should find a place to collect all the ideas and requirements, and then get a few interested people together for a few days to turn this into a plan.

Application debug and support infrastructure

We do have functionality in Frameworks to help us diagnosing issues happening on a user’s device, most prominently KCrash. Some of our applications have additional custom-built diagnostic functions as well though, such as:

• NeoChat has some debug output capturing system.
• Itinerary has a “debug mode” that shows some additional diagnostics and test functions.

Would it make sense to generalize/standardize some of this and upstream it to Frameworks?

Emergency and weather alerts

One of my main agenda points was meeting with FOSS Warn again, for our joint work on an emergency and weather alert aggregation server.

Topcis included:

• Quality metrics and monitoring of the input feeds. While we have feeds from 100+ countries, the activity on those ranges between 10+k alerts in the last 30 days to none. The latter could be valid for a small island nation with stable weather recently, but for a larger country this raises questions on how well that feed is maintained.
• The data format and data model for feed metadata and API to query that, something my prototype didn’t do at all. This is useful to show in clients what kinds of alerts (or any at all) could be expected for an area of interest.
• How to deal with split-up multilingual feeds. The Common Alerting Protocol (CAP) has support for multilingual entries, but in at least two cases (Russia and Saudi Arabia) those seem to be provided in separate single-language feeds instead.

Transitous

Improvements for Transitous also came out of this.

Chatting with a bunch of people the acquisition of Greyhound by FlixBus was mentioned, leading to somebody raising the question whether that would mean Transitous includes the Greyhound network (given FlixBus in Europe is covered). That turned out to not be the case, so the next person started to do a quick web search finding data for North America as well. Yet another person who had recently travelled that way was able to confirm that to be valid and current. A pull request for Transitous followed soon after, and within less than an hour this was available on the production instance.

Barely four months after this all started at FOSDEM this was just awesome to watch.

And that’s probably the biggest value of such events, a random hallway conversation can result in a significant improvement to public transport routing connectivity on another continent :)

Sorry for the interruption last week; I was on vacation. While I was vacating, my colleagues were in full-on fix-everything mode in preparation for the upcoming Plasma 6.1 release in a little over a week. And what a release it promises to be! I think this is going to be a good one, folks. Lots of great features, improved performance and smoothness, and oodles of fixes for all kinds of strange bugs with your wild and wacky hardware devices!

New Features

Plasma’s Networks widget now supports WebAuth for SAML-based authentication. I don’t know what this means, but if you do, that probably means you’re happy about it! (Joel Holdsworth, Plasma 6.2.0 Link)

The network QR code that you can show in Plasma’s Networks widget is now draggable, so you can get an image file out of it wherever you want! (Fushan Wen, Plasma 6.2.0. Link)

System Monitor’s data backend now supports getting CPU/memory/IO/etc. pressure data from /proc/pressure/ (when supported by the Linux kernel) and displaying it in sensors. Hopefully this data will start to show up in user-facing features soon! (Adrian Edwards, Plasma 6.2.0 Link)

UI Improvements

Dolphin once again recommends installing Filelight if you try to get information about free space but it’s not installed (Felix Ernst, Dolphin 24.08.0. Link)

Passwords copied from KWalletManager no longer appear visible in the Clipboard widget (Weng Xuetian, KWalletManager 24.08.0. Link)

Plasma’s Panel Settings dialog no longer obscures the hover pop-ups for individual widgets while it’s open (David Edmundson, Plasma 6.1.0. Link)

In Plasma’s Sticky Notes widget, the colors of the inline buttons already change with the system color scheme. Now they also change appropriately based on the color scheme you select for the sticky note itself! (Evgeniy Harchenko, Plasma 6.1.0. Link)

Removed the “Hide utility windows for inactive applications” option, because it was broken and apparently nobody had noticed or reported this, and also it’s kind of a weird thing to exist in the first place. This also fixes a Plasma panel auto-hide bug caused by using it (Xaver Hugl, Plasma 6.1.0. Link 1 and link 2)

Searching in System Settings no longer sometimes returns nonsensical matches based on keywords that got implicitly joined together in ways that didn’t make sense (Harald Sitter, Plasma 6.1.0. Link)

A better cursor icon is now used when dragging windows (Vlad Zahorodnii, Plasma 6.1.0. Link)

On X11 with an NVIDIA GPU, a floating panel, and adaptive panel transparency, an unfortunate bug in the NVIDIA driver causes windows to lag when moved and resized. For now we’ve added a warning in the panel settings dialog about this (Ivan Tkachenko, Plasma 6.2.0. Link)

Improved the accessibility of the common Kirigami.PlaceholderMessage UI component (Aleix Pol Gonzalez, Frameworks 6.4. Link)

The custom accent color feature (including “accent color from wallpaper”) now does a better job of picking colors for links that will be readable, no matter what colors your base color scheme uses (Akseli Lahtinen, Plasma 6.1.0. Link)

Bug Fixes

Fixed an unusual issue in Elisa that could cause it to not launch when certain DBus setups on certain distros (Jack Hill, Elisa 24.05.1. Link)

Fixed Elisa not launching at all on Windows after a Windows integration library we were using was removed (Jack Hill, Elisa 24.05.1. Link)

Elisa no longer crashes when you try to enqueue the contents of filesystem folders that don’t actually have any music in them (Jack Hill, Elisa 24.05.1. Link)

Spectacle’s highlight annotation once again actually highlights (Noah Davis, Spectacle 24.05.1. Link)

Fixed a way that KWin could crash after the system wakes from sleep with weird screens that turn on strangely (Vlad Zahorodnii, Plasma 6.1.0. Link)

KWin should no longer crash when apps do weird things and for some reason two drag operations end up happening at once (Vlad Zahorodnii, Plasma 6.1.0. Link)

Fixed a way that KWin could crash on X11 when you change Global Themes (Xaver Hugl, Plasma 6.1.0. Link)

Fixed a weird crash in KWin that could happen when you’re pressing keys on the keyboard during the exact moment that XWayland disconnects (David Edmundson, Plasma 6.1.0. Link)

Fixed a cause of Plasma using too much memory and/or freezing due to system notifications containing certain sizes of images (Akseli Lahtinen, Plasma 6.1.0. Link)

Changing a System Monitor widget located on a thick panel to the “Application Table” or “Process Table” display style no longer causes Plasma to freeze (Akseli Lahtinen, Plasma 6.1.0. Link)

Fixed the most common crash in System Settings’ Firewall page which could be experienced by changing settings and then switching pages (Nicolas Fella, Plasma 6.1.0. Link)

Fixed an extremely esoteric Plasma crash that was caused by repeatedly wiggling the pointer over certain menu items of the context menu of the sub-folder popup of a folder located on the desktop (Akseli Lahtinen, Plasma 6.1.0. Link)

When you try to add a sensor to System Monitor or one of its so-named widgets that you’ve already added, you’re now warned and prevented from doing so, instead of being allowed to continue, which would silently break the display of all sensors (Arjen Hiemstra, Plasma 6.1.0. Link)

Connected devices that are nice enough to report battery information to Plasma no longer sometimes randomly get disconnected for no good reason (Ivan Tkachenko, Plasma 6.1.0. Link)

Some monitors that do unusual and exotic things under the hood no longer get their resolutions set to 640×480 after resuming from sleep (Xaver Hugl, Plasma 6.1.0. Link)

The “Allow restore on future sessions” checkbox on the screen sharing dialog once again works (Nicolas Fella, Plasma 6.1.0. Link)

Titlebar context menus of non-maximized Aurorae-decorated windows are no longer misplaced on Wayland (Vlad Zahorodnii, Plasma 6.1.0. Link)

Kicker’s panel button is no longer too large with a thin panel, which was a regression caused by me trying to keep it from getting too large with thick panels! (Niccolò Venerandi, Plasma 6.1.0. Link)

Connecting a new screen that’s larger than any of the current screens no longer causes it to get a small constrained version of the default wallpaper; now it gets the correct size (Marco Martin, Plasma 6.1.0. Link)

When you’ve got a floating Plasma panel on a screen edge that’s shared with another screen, it no longer pushes an odd blurry rectangle onto that adjacent screen when it de-floats (Niccolò Venerandi, Plasma 6.1.0. Link)

Using the “Application” or “Window” layout switching mode no longer causes Plasma’s System Tray popup to close immediately when you try to open it while the widget is located on a panel on the bottom or right screen edge (Marco Martin, Plasma 6.1.0. Link)

Shutting down, restarting, etc. from within KWin’s Overview effect no longer causes it to freeze for 45 seconds before completing the operation (David Edmundson, Plasma 6.2.0. Link)

Fixed a bug that caused items on the Plasma desktop to disappear until Plasma was restarted after their icons changed, either because you changed them manually, or they got automatically changed by something else automatically—for example by putting items into the trash (Akseli Lahtinen, Frameworks 6.4. Link)

Worked around a Qt regression that prevented toolbar buttons in QtQuick apps from showing that they have keyboard focus (Aleix Pol Gonzales, Frameworks 6.4. Link)

Other bug information of note:

• 5 Very high priority Plasma bugs (up from 3 two weeks ago). Current list of bugs
• 33 15-minute Plasma bugs (down from 36 two weeks ago). Current list of bugs
• 294 KDE bugs of all kinds fixed over the last two weeks. Full list of bugs

Performance & Technical

Improved the performance of basically everything for cases where the ~/.cache folder is located on a slow disk, such as a hard drive (David Edmundson, Plasma 6.1.0. Link)

Plasma and KWin no longer rocket up in CPU usage for no good reason when using the using “Keep the selection and clipboard the same” and “Text selection: Always save in history” Clipboard widget settings (David Edmundson, Plasma 6.1.0. Link)

Re-enabled hardware-accelerated cursor support for Intel GPUs, since the bugs that were causing us to disable it have since been resolved. This should make cursors more responsive and not increase CPU usage when moving it (Vlad Zahorodnii, Plasma 6.2.0. Link)

Implemented Breeze styling for movable splitters in QML software, so we can now start porting things to use it. This will eventually result in, for example, resizable sidebars in places where you’d expect for sidebars to be resizable—imagine that! (Ivan Tkachenko, Frameworks 6.4. Link)

Automation & Systematization

Turned a manual test for the Plasma System Tray into an automatic one, so now it actually gets run regularly (Fushan Wen, link)

Added a few autotests for the Plasma Clipboard widget to verify recent fixes (Fushan Wen, link)

…And Everything Else

This blog only covers the tip of the iceberg! If you’re hungry for more, check out https://planet.kde.org, where you can find more news from other KDE contributors.

How You Can Help

The KDE organization has become important in the world, and your time and labor have helped to bring it there! But as we grow, it’s going to be equally important that this stream of labor be made sustainable, which primarily means paying for it. Right now the vast majority of KDE runs on labor not paid for by KDE e.V. (the nonprofit foundation behind KDE, of which I am a board member), and that’s a problem. We’ve taken steps to change this with paid technical contractors — but those steps are small due to growing but still limited financial resources. If you’d like to help change that, consider donating today!

Otherwise, visit https://community.kde.org/Get_Involved to discover other ways to be part of a project that really matters. Each contributor makes a huge difference in KDE; you are not a number or a cog in a machine! You don’t have to already be a programmer, either. I wasn’t when I got started. Try it, you’ll like it! We don’t bite!

GNUnet 0.21.2

This is a bugfix release for gnunet 0.21.1. It primarily addresses some connectivity issues introduced with our new transport subsystem.

Links

• Source: https://ftpmirror.gnu.org/gnunet/gnunet-0.21.2.tar.gz ( https://ftpmirror.gnu.org/gnunet/gnunet-0.21.2.tar.gz.sig )
• Source (meson): https://buildbot.gnunet.org/gnunet-0.21.2-meson.tar.gz ( https://buildbot.gnunet.org/gnunet-0.21.2-meson.tar.gz.sig )
• Detailed list of changes: https://git.gnunet.org/gnunet.git/log/?h=v0.21.2
• NEWS: https://git.gnunet.org/gnunet.git/tree/NEWS?h=v0.21.2
• The list of closed issues in the bug tracker: https://bugs.gnunet.org/changelog_page.php?version_id=440

The GPG key used to sign is: 3D11063C10F98D14BD24D1470B0998EF86F59B6A

Note that due to mirror synchronization, not all links may be functional early after the release. For direct access try https://ftp.gnu.org/gnu/gnunet/

Ansible Playbooks is the known term, now there is a new term which is being floted in the project, which is Ansible Rulebooks. Today we are going to discuss about Ansible&aposs journey from Playbook to Rulebook rather Playbook with Rulebook.

What is Event Driven Ansible?

What is Event Driven Ansible? In simple terms, some action is triggered by some events. The idea of EDA comes from Event driven architecture. Event driven ansible runs code automatically based on received event notifications.

Some important terms:

What is event in Event Driven Ansible?

The event is the notification of a certain incident.

Where do we get the events from?

We get the events from event sources. Ansible EDA provides different pulgins to support various event sources. There are several event source plugins such as :
url_check (checking the http status code), webhook (providing and checking events from webhook), journald (monitoring the journald logs) and the list goes on.

When to take actions?

Rulebook defines conditions and actions in case of fulfilling those actions. Conditions use operators as strings, boolean and numerical data. And actions are occurrence of events once the conditions are met. Running a playbook, setting a fact, running a module etc.

Small example Project

Here is a small example of Event Driven Ansible and how it is run. The idea is on receiving of a message (here the number 42) a playbook will run in the host. There are the following 3 files :

demo_rule.yml --- - name: Listen for events on a webhook hosts: all sources: - ansible.eda.webhook: host: 0.0.0.0 port: 8000 rules: - name: Say thank you condition: event.payload.message == "42" action: run_playbook: name: demo.yml

This is the rulebook. We are using the webhook plugin here as the event source. As a rule in the event of receiving the message 42 as json payload in the webhook, we run the playbook called demo.yml

demo.yml - hosts: localhost connection: local tasks: - debug: msg: "Thank you for the answer."

demo.yml, the playbook which run on the occurrence of the event mentioned in the rulebook and prints a debug message.

--- local: hosts: localhost

inventory.yml mentions the hosts to run the action against.

Further there are 2 files to one to test 42.json and 43.json to test the code.

{ "message" : "42" } { "message" : "43" }

First we have to install all related dependencies before we can run the rulebook.

$ python -m venv .venv $ source .venv/bin/activate $ python -m pip install ansible ansible-rulebook ansible-runner psycopg $ ansible-galaxy collection install ansible.eda $ ansible-rulebook --rulebook demo_rule.yml -i inventory.yml --verbose

Go to another terminal and on the same directory path and run the following command to test the Rulebook. After receiving the message, the playbook runs.

curl -X POST -H "Content-Type: application/json" -d @42.json 127.0.0.1:8000/endpoint Output 2024-06-07 16:48:53,868 - ansible_rulebook.app - INFO - Starting sources 2024-06-07 16:48:53,868 - ansible_rulebook.app - INFO - Starting rules ... TASK [debug] ******************************************************************* ok: [localhost] => { "msg": "Thank you for the answer." } PLAY RECAP ********************************************************************* localhost : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2024-06-07 16:50:08,224 - ansible_rulebook.action.runner - INFO - Ansible runner Queue task cancelled 2024-06-07 16:50:08,225 - ansible_rulebook.action.run_playbook - INFO - Ansible runner rc: 0, status: successful

Now if we run the other json file 43.json we see that the playbook does not run even after the http status code being 200.

curl -X POST -H "Content-Type: application/json" -d @43.json 127.0.0.1:8000/endpoint

Output :

2024-06-07 18:20:37,633 - aiohttp.access - INFO - 127.0.0.1 [07/Jun/2024:17:20:37 +0100] "POST /endpoint HTTP/1.1" 200 159 "-" "curl/8.2.1"

You can try this yourself follwoing this git repository.

PHPCamp 2024 in Pune offers an immersive experience where PHP developers of all levels can enhance their skills, expand their knowledge, and connect with a vibrant community. Attendees will engage in hands-on workshops, explore the latest trends, and network with industry leaders in a collaborative and inclusive environment. This event is a unique opportunity for developers to be part of a groundbreaking gathering that fosters innovation and professional growth.

How do you effectively break a software problem into individual steps? What are signs you're writing overly clever code? Christopher Trudeau is back on the show this week, bringing another batch of PyCoder's Weekly articles and projects.

[ Improve Your Python With 🐍 Python Tricks 💌 – Get a short & sweet Python Trick delivered to your inbox every couple of days. >> Click here to learn more and see examples ]

Discover DrupalX with Jay Callicott on Medium, a toolkit tailored for enterprise website development. Learn how DrupalX integrates Bootstrap 5 and Storybook to empower developers to effortlessly create scalable, visually stunning websites.

Dear Translators:

Recently, the Licensing and Compliance Lab provided guidelines
for writing copyright notices in www.gnu.org translations:

https://www.gnu.org/s/trans-coord/w/Copyright-Notices.html

Please take them into account.

After received 2 translators‘ feedback plus my thought, I would put the following as advice for new translations:

1. add your name in the copyright notices in the translation if you think your contribution is enough for an article, like

Copyright &copy; 2024 Free Software Foundation, Inc.<br></br>
Copyright &copy; 2024 XIE Wensheng (translation)<

2. or optionally add your name in the TRANSLATOR'S CREDITS part as we always do.

<b>翻译</b>：李凡希，2010。<br></br>
<b>审校</b>：<a href="mailto:1945649519@qq.com">&lt;Nios34&gt;</a>，2020。<br></br>
<b>翻译团队</b>：<a rel="team" href="https://savannah.gnu.org/projects/www-zh-cn/">&lt;CTT&gt;</a>，2017-2024。<

best regards,
wxie

Let’s go for my web review for the week 2024-23.

Alice in Wonderland: Simple Tasks Showing Complete Reasoning Breakdown in State-Of-the-Art Large Language Models

Tags: tech, ai, gpt, machine-learning, safety, research

Another cruel reminder that basic reasoning is not to be expected from LLMs. Here is a quote from the conclusion of the paper which makes it clear:

“We think that observations made in our study should serve as strong reminder that current SOTA LLMs are not capable of sound, consistent reasoning, as shown here by their breakdown on even such a simple task as the presented AIW problem, and enabling such reasoning is still subject of basic research. This should be also a strong warning against overblown claims for such models beyond being basic research artifacts to serve as problem solvers in various real world settings, which are often made by different commercial entities in attempt to position their models as a strong mature product for end-users. […] Observed breakdown of basic reasoning capabilities, coupled with such public claims (which are also based on standardized benchmarks), present an inherent safety problem. Models with insufficient basic reasoning are inherently unsafe, as they will produce wrong decisions in various important scenarios that do require intact reasoning.”

https://arxiv.org/abs/2406.02061

A critique of Cara.app: the ‘No AI’ Instagram and Artstation copycat child. - David Revoy

Tags: tech, social-media, art, criticism

Interesting critique of this new platform… it’s the beginning of the hype cycle but will probably exhibit the same decay phenomenon than other platforms.

https://www.davidrevoy.com/article1032/a-critique-of-caraapp-the-no-ai-instagram-and-artstation-copycat-child

Why are vulnerabilities out of control in 2024? – Open Source Security

Tags: tech, foss, security, data, data-science

The more releases out there the more vulnerabilities are (and could be) discovered. Some actions are necessary to get things under control properly.

https://opensourcesecurity.io/2024/06/03/why-are-vulnerabilities-out-of-control-in-2024/

Engineering for Slow Internet

Tags: tech, networking, reliability

A good reminder of everything which might go wrong when connectivity is bad. Most tools let you down in such a case.

https://brr.fyi/posts/engineering-for-slow-internet

Why do CPUs have multiple cache levels? | The ryg blog

Tags: tech, hardware, cpu

Very nice explanation and metaphors on how CPUs cache levels work.

https://fgiesen.wordpress.com/2016/08/07/why-do-cpus-have-multiple-cache-levels/

BenchExec: A Framework for Reliable Benchmarking and Resource Measurement

Tags: tech, benchmarking, tools

Looks like an interesting benchmarking tool. To keep an eye on.

https://github.com/sosy-lab/benchexec

TIL #099 – order values of dictionary by iterable of keys with operator.itemgetter | mathspp

Tags: tech, programming, python

Definitely a nice Python trick. Fairly elegant, I’ll try to remember it.

https://mathspp.com/blog/til/order-values-of-dictionary-by-iterable-of-keys-with-operator.itemgetter

Message authentication codes for safer distributed transactions

Tags: tech, filesystem, distributed, safety, cryptography

Interesting use of cryptography without a security concern. It’s more about safety and ensuring something wasn’t missed by mistake.

https://mazzo.li/posts/mac-distributed-tx.html

The state of Vulkan apps in 2024

Tags: tech, 3d, vulkan, portability

The difficult path for Vulkan. The data obviously is biased since it includes games and most of them are still targeting Windows and so DirectX. I’d be curious to see something similar excluding games (and so focusing on medical, industrial etc.).

https://www.carette.xyz/posts/state_of_vulkan_2024/

How I learned Vulkan and wrote a small game engine with it

Tags: tech, 3d, game, vulkan

Interesting dive into the experience of writing a small Vulkan engine (almost) from scratch.

https://edw.is/learning-vulkan/

How to Build Engineering Strategy

Tags: tech, management, strategy, vision

Packed with useful information. Clearly some things I’m eager to test in there.

https://blog.practicalengineering.management/how-to-build-engineering-strategy-42e464018177

xkcd: Earth Temperature Timeline

Tags: science, history, data-visualization

So yes, the climate changed before… now slowly scroll until the end to appreciate how brutal it is this time.

https://xkcd.com/1732/

Bye for now!

Wordpress (Gutenberg) page editor in Drupal Zé Fri, 06/07/2024 - 08:34 Wordpress (Gutenberg) page editor in Drupal

WP's default Gutenberg editor is an intuitive, yet highly flexible page editor that exists as an independent open-source project, and has meanwhile matured and become popular, with integration into Drupal as well.

We are happy to announce the release of Qt Creator 13.0.2!

Version 2.8 of the GNU Scientific Library (GSL) has been released.
Thank you to all who helped test the library prior to the release, and
thank you to everyone for using the library and giving feedback and
reports. The following changes have been added to the library:

• What is new in gsl-2.8:

** apply patch for bug #63679 (F. Weimer)

** updated multilarge TSQR method to store ||z_2|| and
   provide it to the user

** add routines for Hermite B-spline interpolation

** fix for bug #59624

** fix for bug #59781 (M. Dunlap)

** bug fix #61094 (reported by A. Cheylus)

** add functions:
   - gsl_matrix_complex_conjugate
   - gsl_vector_complex_conj_memcpy
   - gsl_vector_complex_div_real
   - gsl_linalg_QR_lssolvem_r
   - gsl_linalg_complex_QR_lssolvem_r
   - gsl_linalg_complex_QR_QHmat_r
   - gsl_linalg_QR_UR_lssolve
   - gsl_linalg_QR_UR_lssvx
   - gsl_linalg_QR_UR_QTvec
   - gsl_linalg_QR_UU_lssvx
   - gsl_linalg_QR_UD_lssvx
   - gsl_linalg_QR_UD_QTvec
   - gsl_linalg_complex_cholesky_{decomp2,svx2,solve2,scale,scale_apply}
   - gsl_linalg_SV_{solve2,lssolve}
   - gsl_rstat_norm

** add Lebedev quadrature (gsl_integration_lebedev)

** major overhaul to the B-spline module to add
   new functionality

Learn how to streamline your web application's user experience by running batch processes through AJAX requests. This approach prevents page redirection and keeps users on the current interface, enhancing usability and performance. The guide covers key techniques including setting up AJAX calls, handling server responses, and ensuring smooth operation without disrupting user interactions. Discover best practices for error handling, progress updates, and optimizing batch processing for a seamless and efficient workflow.

Contributing to Debian is part of Freexian’s mission. This article covers the latest achievements of Freexian and their collaborators. All of this is made possible by organizations subscribing to our Long Term Support contracts and consulting services.

DebConf Bursary updates, by Utkarsh Gupta

Utkarsh is the bursaries team lead for DebConf 24. Bursary requests are dispatched to a team of volunteers to review. The results are collated, adjusted and merged to produce priority lists of requests to fund. Utkarsh raised the team, coordinated the review, and issued bursaries to attendees.

/usr-move, by Helmut Grohne

More and more, the /usr-move transition is being carried out by multiple contributors and many performed around a hundred of the requested uploads. Of these, Helmut contributed five patches and two uploads. As a result, there are less than 350 packages left to be converted, and all of the non-trivial cases have patches. We started with three times that number. Thanks to everyone involved for supporting this effort.

For people interested in background information of this transition, Helmut gave a presentation at MiniDebConf Berlin 2024 (slides).

sbuild, by Helmut Grohne

While unshare mode of sbuild has existed for quite a while, it is now getting significant use in Debian, and new problems are popping up. Helmut looked into an apparmor-related failure and provided a diagnosis. While relevant code would detect the chroot nature of a schroot backend and skip apparmor tests, the unshare environment would be just good enough to run and fail the test. As sbuild exposes fewer special kernel filesystems, the tests will be skipped again.

Another problem popped up when gobject-introspection added a dependency on the host architecture Python interpreter in a cross build environment. sbuild would prefer installing (and failing) a host architecture Python to installing the qemu alternative. Attempts to fix this would result in systemd killing sbuild. ischroot as used by libc6.postinst would not classify the unshare environment as a chroot. Therefore libc6.postinst would run telinit which would kill the build process. This is a complex interaction problem that shall eventually be solved by providing triggers from libc6 to be implemented by affected init systems.

Salsa CI updates, by Santiago Ruano Rincón

Several issues arose about Salsa CI last month, and it is probably worth mentioning part of the challenges of defining its framework in YAML. With the upcoming end-of-support of Debian 10 “buster” as LTS, armel was removed from deb.debian.org, making the jobs that build images for buster/armel to fail. While the removal of buster/armel from the repositories is a natural change, it put some light on the “flaws” in the Salsa CI design regarding the support of the different Debian releases. Currently, the images are defined like these (from .images-debian.yml):

.all-supported-releases: &all-supported-releases - stretch - stretch-backports - buster - bullseye - bullseye-backports - bookworm - bookworm-backports - trixie - sid - experimental

And from them, different images are built according to the different jobs and how they are supported, for example:

images-prod-arm: stage: build extends: .build_template tags: - $SALSA_CI_ARM_RUNNER_TAG parallel: matrix: # Base image, all releases, all arches - IMAGE_NAME: base ARCH: - arm32v5 - arm32v7 - arm64v8 RELEASE: *all-supported-releases

The removal of buster/armel could be easily reflected as:

images-prod-arm: stage: build extends: .build_template tags: - $SALSA_CI_ARM_RUNNER_TAG parallel: matrix: # Base image, fully supported releases, all arches - IMAGE_NAME: base ARCH: - arm32v5 - arm32v7 - arm64v8 RELEASE: - stretch - buster - bullseye - bullseye-backports - bookworm - bookworm-backports - trixie - sid - experimental # buster only supports armhf and arm64 - IMAGE_NAME: base ARCH: - arm32v7 - arm64v8 RELEASE: buster

Evidently, this increases duplication of the release support data, which is of course not optimal and it is error prone when changing the data about supported releases. A better approach would be to have two different YAML lists, such as:

# releases that have partial support. E.g.: buster is transitioning to # Debian LTS, and buster armel is no longer found in deb.debian.org .old-releases: &old-releases - stretch - buster .currently-supported-releases: &currently-supported-releases - bullseye - bullseye-backports - bookworm - bookworm-backports - trixie - sid - experimental

and then a unified list:

.all-supported-releases: &all-supported-releases - *old-releases - *currently-supported-releases

that could be used in the matrix of the jobs that build all the images available in the pipeline container registry.

However, due to limitations in GitLab, it is not possible to expand the variables or mapping values in a parallel:matrix context. At least not in an elegant fashion.

This is the kind of issue that recently arose and that Santiago is currently working to solve, in the simplest possible way.

Astute readers would notice that stretch is listed in the fully supported releases. And there is no problem with stretch, because it is built from archive.debian.org. Otto actually has tried to fix the broken image build job doing the same, but it is still incorrect, because the security repository is not (yet) available in archive.debian.org.

Additionally, Santiago has also worked on other merge requests, such as:

1. support branch/tags as target head in the test projects,
2. build autopkgtest image on top of stable
3. Add .yamllint and make it happy in the autopkgtest-lxc project
4. enable FF_SCRIPT_SECTIONS to log multiline commands, among others.

Archiving DebConf Websites, by Stefano Rivera

DebConf, the annual Debian conference, has its own new website every year. These are typically complex dynamic web applications (featuring registration, call for papers, scheduling, etc.) Once the conference is over, there is no need to keep maintaining these applications, so we archive the sites off as static HTML, and serve them from Debian’s static CDN.

Stefano archived the websites for the last two DebConfs.

The schedule system behind DebConf 14 and 15’s websites was a derivative of Canonical’s summit system. This was only used for a couple of years before migrating to wafer, the current system. Archiving summit content has been on the “nice to have” list for years, but nobody has ever tackled it. The machine that served the sites went away a couple of years ago. After much digging, a backup of the database was found, and Stefano got this code running on an ancient Python 2.7. Recently Stefano put this all together and hooked in an archive export to finally get this content preserved.

Python 3.x and pypy3 security bug triage, by Stefano Rivera

Stefano Rivera triaged all the open security bugs against the Python 3.x and PyPy3 packages for Debian’s stable and LTS releases. Several had been fixed but this wasn’t recorded in the security tracker.

Linux livepatching support for Debian, by Santiago Ruano Rincón

In collaboration with Emmanuel Arias, Santiago filed ITP bug #1070494. As stated in the bug, more than an Intent to Package, it is an Intent to Design and Implement live patching support for the Linux kernel in Debian. For now, Emmanuel and Santiago have done exploratory work and they are working to understand the different possibilities to implement livepatching. One possible direction is to rely on kpatch, and the other is to package the modules using regular packaging tools. Also, it is needed to evaluate if it is possible to rely on distributing the modules via packages, or instead as a service, as it is done by some commercial distributions.

Miscellaneous contributions

• Thorsten Alteholz uploaded cups-bjnp to improve packaging.
• Colin Watson tracked down a baffling CI issue in openssh to unblock several merge requests, removed the user_readenv=1 option from its PAM configuration, and started on the first stage of his plan to split out GSS-API key exchange support to separate packages.
• Colin did his usual routine work on the Python team, upgrading 26 packages to new upstream versions, and cherry-picking an upstream PR to fix a pytest 8 incompatibility in ipywidgets.
• Colin NMUed a couple of packages to reduce the need for explicit overrides in Packages-arch-specific, and removed some other obsolete entries from there.
• Emilio managed various library transitions, and helped finish a few of the remaining t64 transitions.
• Helmut sent a patch for enabling piuparts to work as a regular user building on earlier work.
• Helmut sent patches for 7 cross build failures, 6 other debian bugs and fixed an infrastructure problem in crossqa.debian.net.
• Nicholas worked on a sponsored package upload, and discovered the blhc tool for diagnosing build hardening.
• Stefano Rivera started and completed the re2 transition. The release team suggested moving to a virtual package scheme that includes the absl ABI (as re2 now depends on it). Adopted this.
• Stefano continued to work on DebConf 24 planning.
• Santiago continued to work on DebConf24 Content tasks as well as Debconf25 organisation.

Friday, 7 June 2024

KDE today announces the release of KDE Frameworks 6.3.0.

KDE Frameworks are 72 addon libraries to Qt which provide a wide variety of commonly needed functionality in mature, peer reviewed and well tested libraries with friendly licensing terms. For an introduction see the KDE Frameworks release announcement.

This release is part of a series of planned monthly releases making improvements available to developers in a quick and predictable manner.

New in this version Baloo

• Qml: don't do blocking DBus calls in Baloo.Monitor. Commit. Fixes bug #487064
• Remove explicit maintainer from metainfo. Commit.

Bluez Qt

• Remove explicit maintainer from metainfo. Commit.

Breeze Icons

• Use normal resource adding, big resource variant has issue with LTO. Commit.
• Kmahjongg app icon: drop broken entries href'ing to non-existing id. Commit.
• Fix remaining missing semicolons. Commit.
• Fix missing semicolon. Commit.
• Fix path styling. Commit.
• Treat hicolor as "no fallback theme set" too. Commit.
• Ensure we fallback to breeze, if no user fallback is set. Commit.
• Fix dark icon generation. Commit.
• Revert "ensure we fallback to breeze, if no user fallback is set". Commit.
• Ensure we fallback to breeze, if no user fallback is set. Commit.
• Avoid to generate dead links. Commit.
• Remove duplicate of window.svg. Commit.
• Better duplicate checking. Commit.
• Stricter external link check. Commit.
• Integrate better test for whitespace of any kind. Commit.
• Fix escape sequences. Commit.
• Do full link checking for git win links, too. Commit.
• Do full symlink checking during resource creation. Commit.
• Better name for windows link resolving. Commit.
• Remove recently-added process-working-symbolic icons. Commit.
• Replace dialog-* icons with data-* icons. Commit.
• Add symbolic icons as symlink to existing monochrome icons. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Remove copy/pasted 16px go/lua/scala icons from mimetypes/22. Commit.
• Fix actions/22/fingerprint viewBox. Commit.
• Include duplication check. Commit.
• Let Qt do the simple XML linting. Commit.
• Add my copyright, too. Commit.
• Add more comments and use better function name. Commit.
• Reenable x24 icons on Windows. Commit.
• Try to ensure we really run late enough. Commit.
• Run resource file generator on dark, too, for checks. Commit.
• Generate icon 24 gen dir always. Commit.
• Move more helpers to same dir. Commit.
• Split files to avoid dep cycles. Commit.
• Pack in generated icons. Commit.
• Add symlinks for new ISO MIME type names. Commit.
• Use rcc like we do it in other frameworks. Commit.
• Move helper, simplify deps searching. Commit.
• Avoid the copying. Commit.
• Add back BINARY_ICONS_RESOURCE for breeze only. Commit.
• Fix qrc generation for system with symlinks and always build the library. Commit.
• Remove BINARY_ICONS_RESOURCE. Commit.

Extra CMake Modules

• Skip app template packaging when cross-compiling. Commit.
• Remove explicit maintainer from metainfo. Commit.
• ECMQueryQt: Provide better error message when Qt6 qpaths is not found. Commit.

Framework Integration

• Remove wrong note from metainfo. Commit.
• Remove explicit maintainer from metainfo. Commit.

KAPIDox

• Don't show maintainers for frameworks. Commit.
• Don't show framework type in frameworks list. Commit.

KArchive

• Require unit tests to pass on Windows. Commit.
• It compiles fine without qt6.7 deprecated methods. Commit.
• Add missing includes. Commit.

KAuth

• Remove explicit maintainer from metainfo. Commit.

KBookmarks

• It compiles fine without qt6.7 deprecated methods. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.

KCalendarCore

• Tests: Remove workaround not needed anymore after 80f7731c591dfe656d8c6769fa2efba9256a60f4. Commit.
• CI: Require passing tests on Linux and Windows. Commit.
• Adapt date/time output for tests to Qt 6.7 formatting behavior changes. Commit.
• Remove explicit maintainer from metainfo. Commit.

KCMUtils

• It compiles fine without qt6.7 deprecated methods. Commit.
• AbstractKCM,SimpleKCM: Stop overlapping the 1px of content with a header Separator. Commit.
• SimpleKCM: Port header's wrapper from QQC2.Control to Kirigami.Padding. Commit.
• SimpleKCM: Drop unnecessary id qualifier from the bindings at the top-level component. Commit.
• AbstractKCM,SimpleKCM: Unify header/footer content swapping. Commit.
• AbstractKCM,SimpleKCM: Unify OverlaySheet detection, port to cool iterators. Commit.

KColorScheme

• Allow to bundle color schemes with applications inside resources. Commit.
• Remove explicit maintainer from metainfo. Commit.

KCompletion

• It compiles fine without qt6.7 deprecated methods. Commit.
• Remove explicit maintainer from metainfo. Commit.

KConfig

• Ensure test works with Qt 6.7 on Windows. Commit.
• Use QT_TRANSLATE_NOOP instead of QT_TR_NOOP for KStandardActions. Commit.
• Add helper method to fully move a group to another. Commit.
• Deprecate ctor that takes a backend. Commit.
• Move parts of KStandardAction to KConfigGui. Commit.
• Remove KConfigBackend abstraction. Commit.
• Add a mutex to protect globalData. Commit.
• Kconfigxt: Remove docs for SourceExtension parameter which was removed in KF6. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.

KConfigWidgets

• Add api to have a style chooser. Commit.
• KStandardAction: reduce allocation by using view type. Commit.
• Add KStyleManager::initStyle to enforce proper application style. Commit.
• KConfigDialogManager: port to non-deprecated QCheckBox signal. Commit.
• KCommandBar: Better UI. Commit.

KContacts

• Add SPDX license/copyright information for new CMakeLists.txt as well. Commit.
• Properly expose address format API to QML. Commit.
• Add qml module. Commit.
• Update feature documentation. Commit.
• Remove explicit maintainer from metainfo. Commit.

KCoreAddons

• Not all distros have /bin/true, e.g. NixOS lacks it. Commit.
• Bundle license texts inside resource. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Kfilesystem: recognize nfs4 as KFileSystemType::Nfs. Commit.
• Replace KAboutDialog with KAboutApplicationDialog. Commit.

KCrash

• Handle kwin's wayland qpa as wayland platform. Commit.

KDBusAddons

• It compiles fine without qt6.7 deprecated methods. Commit.

KDeclarative

• KeySequenceItem: Fix height management. Commit.
• Remove useless note from metainfo. Commit.
• Fix tier in metainfo. Commit.
• Remove explicit maintainer from metainfo. Commit.

KDNSSD

• Remove explicit maintainer from metainfo. Commit.

KDocTools

• Remove explicit maintainer from metainfo. Commit.

KFileMetaData

• Remove explicit maintainer from metainfo. Commit.

KGlobalAccel

• Improve metainfo.yaml. Commit.

KGuiAddons

• Deprecated KColorCollection. Commit.

KHolidays

• Remove custom definitions of pi. Commit.
• Proofreading. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Latvia holiday grammar corrections. Commit.

KI18n

• Remove explicit maintainer from metainfo. Commit.

KIconThemes

• Add missing include. Commit.
• KIconDialog: Prevent briefly visible mini-window from showing up. Commit. Fixes bug #487762
• Update file kicontheme.cpp. Commit.
• Include only if needed, avoid extra define. Commit.
• Set QML module base version to 1.0. Commit.
• Windows tests work now. Commit.
• Use Qt to fill in the generic mime-type icon information. Commit.
• Use Qt to fill in the generic mime-type icon information. Commit.
• Ensure tests pass locally with KDE platform theme, too. Commit.
• Ensure we not clash with breeze from resource. Commit.
• Adapt test to fact we now have Breeze with hicolor inherits. Commit.
• Remove not used files. Commit.
• Remove my old rcc test, no longer done. Commit.
• Always require the icon library. Commit.
• Add KIconTheme::initTheme() to configure proper icon set as opt-in. Commit.

KImageformats

• Remove explicit maintainer from metainfo. Commit.
• Ensure dependencies are provided on Android. Commit.

KIO

• KAbstractFileItemActionPlugin: Remove wrong sentence in documentation. Commit. See bug #425997
• Don't install header for pure dbus class if no dbus. Commit.
• Disable dbus not only for android but windows & mac, too. Commit.
• Drop errorpage handling from worker. Commit.
• [http] Implement resuming at offset again. Commit. Fixes bug #480506
• CI: Require passing tests on Linux and FreeBSD. Commit.
• Deprecate KFileWidget::readConfig. Commit.
• SSL Info UI file: use notr="true" instead of old comment="KDE::DoNotExtract". Commit.
• Kfileitem: cache group names. Commit. Fixes bug #486956
• Move HAVE_STATX cmake test to core. Commit. Fixes bug #487015
• Remove unused includes. Commit.
• Properties dialogue URL tab: Fix vertical alignment. Commit.
• Systemdprocessrunner: change the order launchmodes are returned. Commit.
• Systemdprocessrunner: change env var names. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.
• Kprocessrunner: add third parameter to a connect. Commit.

Kirigami

• Revert "icon: Remove the node with lowest opacity when animation end". Commit. Fixes bug #487577
• ImageColors: Rework the example app. Commit.
• ImageColors: Remove unused QTimer member. Commit.
• ImageColors: Remove an unused variable. Commit.
• ImageColors: Disconnect the old QFutureWatcher. Commit.
• ImageColors: Mark internal function as static. Commit.
• ImageColors: Do not grab an item without a window or with an invisible window. Commit.
• ImageColors: Port QVariantList to a typed and named gadget. Commit.
• ImageColors: Fix multi-threading crash. Commit.
• Use consistent import alias for QtQuick.Controls. Commit.
• Drop all QML import versions. Commit.
• Doc: Improve FormData.label example. Commit.
• Fix typo in docs. Commit.
• Introduce the layouts submodule. Commit.
• SearchDialog: Expose search field placeholder text. Commit.
• Per default DBus only enabled on systems that use it. Commit.
• SearchDialog: Add page up/page down key navigation. Commit.
• Move dialog stuff in a new dialogs submodule. Commit.
• Card: emit toggled() when the user clicks on the header checkbox. Commit. Fixes bug #481461
• SearchDialog: Improve up/down item navigation. Commit.
• PromptDialog: adjust label spacing to conform to new HIG. Commit.
• Icon: Remove the node with lowest opacity when animation end. Commit.
• Remove custom backgrounds. Commit.
• Add SearchDialog. Commit.
• Always color icons. Commit. Fixes bug #485801
• PromptDialog: Fix regression where content is not scrollable. Commit.
• Add README.md for delegates and primitives modules. Commit.
• Delegates: Use relative imports for types from the same module. Commit.
• Delegates: Use Platform/Primitives directly instead of main Kirigami module. Commit.
• Add Platform and Primitives modules as dependencies for Delegates module. Commit.
• Introduce a "primitives" submodule that contains primitive types. Commit.
• Move ColorUtils to Platform. Commit.
• CMake: Change variable name for install() command. Commit.
• FormLayout: Compare types against base TextEdit instead of styled QQC2 component. Commit.
• Improve metainfo.yaml. Commit.
• TitleSubtitle Title Accessiblity. Commit.
• Don't include CPack. Commit.
• Don't include quiet package in feature_summary. Commit.
• Revert "PageRow: Rework page component caching". Commit.
• Revert "Dialog: Always use an overlay as visual parent". Commit.
• GlobalDrawer: Fix up code example in docs. Commit.
• OverlaySheet: Fix typo in docs. Commit.
• [inlineviewheader] Qualify property lookup. Commit.
• Add frame contrast. Commit.
• [dialog] Qualify property access. Commit.
• [dialog] Fix signal handler. Commit.
• FormLayout: Fix QML imports in doc example. Commit.
• FormLayout: Annotate function parameters. Commit.
• FormLayout: Qualify property access. Commit.
• PageRow: Rework page component caching. Commit.
• KirigamiPrivatePlugin: Reformat CMake into multi-line statements. Commit.
• Fix Dialog parenting. Commit.
• Dialog: Expand past preferred size to implicit size, as documented. Commit.
• Fix all occurrence of UnusedImports. Commit.
• Add config file for qmllint. Commit.
• PromptDialog: Don't use qualified property access in top-level expressions. Commit.
• Add support for global smooth scroll setting. Commit.
• Fix scrollable dialogs. Commit.
• Revert change to OverlaySheet. Commit.
• Update design of dialogs. Commit.
• GlobalDrawer: Clip content in more cases to fix overflowing header. Commit.

KItemModels

• Revert "KSelectionProxyModelTest: Skip tests broken by upstream changes". Commit.

KItemViews

• KWidgetItemDelegatePoolPrivate: remove unused allocatedWidgets member. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.

KJobWidgets

• KUiServerV2JobTracker: prevent a crash. Commit. Fixes bug #471531. Fixes bug #483582

KNewStuff

• Remove explicit maintainer from metainfo. Commit.
• Action: Fix type of transientParent property. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.
• ItemsModel: Fix up docs after refactoring. Commit.
• Fix the "Use" label on certain delegates. Commit.
• QuestionAsker: Remove broken sizing bindings. Commit.
• Explicitly set QQC2.Overlay.overlay as a parent for popups. Commit.
• DownloadItemsSheet: Port from OverlaySheet to Kirigami.Dialog for file selection dialog. Commit.
• DownloadItemsSheet: Wrap the file names of entries instead of eliding. Commit.
• ProvidersModel: Redo the engine property in a way which doesn't break ABI. Commit.
• Register properties as properly typed. Commit.
• Qtquick: Clean up unused #includes. Commit.
• UploadPage: Fix engine property binding. Commit.
• UploadsPage: Fix punctuation in a user-visible string. Commit.
• Comments: Manage ListView's delegate width & position correctly. Commit.
• ConditionalLoader: Drop meaningless checks and unused root id. Commit.
• Don't manage visibility of a BusyIndicator. Commit.
• QML: Don't abuse implicit casting of binding values to bool property. Commit.
• QML: Port Qt.rgba to the new Qt.alpha. Commit.
• QML: Port to strict === JavaScript equality operator. Commit.
• QML: Drop import alias for QtQuick.Layouts module. Commit.
• QML: Normalize QtQuick.Templates import aliases as T. Commit.
• QML: Normalize QtQuick.Controls import aliases as QQC2. Commit.
• QML: Add missing Kirigami import alias. Commit.
• QML: Normalize QtQuick.Controls import aliases as QQC2. Commit.
• QML: Remove unused imports. Commit.
• QML: Drop all import versions. Commit.
• QML: Drop major version from Kirigami imports. Commit.
• QML: Throw QtQuick.Window out of the window. Commit.
• QML: Clean up whitespace-related code style issues. Commit.
• QML: Remove superfluous trailing semicolons from bindings. Commit.
• QML: Explicitly specify arguments in signal handlers. Commit.

KNotifications

• Don't include quiet package in feature_summary. Commit.
• Notifybysnore: correct action buttons. Commit. Fixes bug #486911
• Remove explicit maintainer from metainfo. Commit.

KNotifyConfig

• Remove explicit maintainer from metainfo. Commit.

KPackage

• It compiles fine without qt6.7 deprecated methods. Commit.
• Remove explicit maintainer from metainfo. Commit.

KParts

• Only use KDirNotify if existing. Commit.
• Docs: KMimeTypeTrader no longer exists. Commit.
• Use QUrl::PreferLocalFile for URL emitted with Part::setWindowCaption. Commit.

KPeople

• Fix tier information. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Port to ecm_add_qml_module and declarative type registration. Commit.

KQuickCharts

• Set a better default size for the example application. Commit.
• Don't crash if we try to access an item from an empty ArraySource. Commit.
• Enable highlighting for most pages in the charts example. Commit.
• Port example pages to use ChartPage. Commit.
• Add a common base type for pages in the chart example. Commit.
• Remove API selection from charts example. Commit.
• Convert chart example to use an executable QML module. Commit.
• Expose highlight property on PieChartControl. Commit.
• Support highlighting in LineChartControl. Commit.
• Controls: Add support for highlighting hovered items in Legend. Commit.
• Fix normalized line size calculation in LineChartNode. Commit.
• Support highlight in BarChart. Commit.
• Support highlight in PieChart. Commit.
• Support highlight property in LineChart. Commit.
• Add a protected method to Chart to deemphasise non-highlighted items. Commit.
• Add a highlight property to Chart. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Controls: Ceil all components of preferredWidth in LegendDelegate contents. Commit. Fixes bug #486411

KRunner

• Fix X-KDE-ConfigModule not working for DBus runners. Commit.
• Fix same query not yielding results in new match session. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Templates/runner6python: Only depend on shebang line for executing. Commit.
• Rename entrypoint file to always be main.py. Commit.
• Document krunner-plugininstallerrc file. Commit.
• Document how AbstractRunner::config is resolved. Commit.
• Runnercontext: Fix saving the launch counts. Commit.

KSVG

• Support for fractional scaling. Commit.
• Color also absolute path images. Commit. Fixes bug #485801
• Reapply "Port to declarative type registration". Commit.

KTextEditor

• Ensure the color name text is visible. Commit. Fixes bug #487068
• Ensure we not reset the dynamic word wrap state. Commit. Fixes bug #487216
• Port to KStandardActions. Commit.
• Never remove trailing spaces on diff file type. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Screenshot dialog: support drag of image. Commit.
• Make tests independent of the user's environment. Commit.
• Modernize use designated init. Commit.
• Do not display diff result in script tests when -silent is used. Commit.
• Fix raw string indentation with cstyle + C++. Commit.
• Screenshot dialog: omit ellipsis from window title. Commit.
• Screenshot dialog: use default QFileDialog::getSaveFileName window title. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.

KTextTemplate

• Remove explicit maintainer from metainfo. Commit.

KTextWidgets

• Use ellipsis character instead of three dots in UI strings. Commit.

KUnitConversion

• Remove explicit maintainer from metainfo. Commit.

KUserFeedback

• CI: Require tests to pass on Linux and FreeBSD. Commit.
• Add homepage url, CI was complaining. Commit.
• Fix target names in metainfo. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.

KWallet

• Fix secrets portal wallet access. Commit. Fixes bug #487348
• Remove explicit maintainer from metainfo. Commit.

KWidgetsAddons

• Fix KMessageWidget background color. Commit.
• KMessageWidget: Avoid calling polish() inside of palette update. Commit. Fixes bug #487247
• Revert "KMessageWidget: Set the palette to work with non-KStyle styles". Commit.
• KMessageWidget: Set the palette to work with non-KStyle styles. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.
• Skip tests that need GUI on Windows CI. Commit.
• KViewStateSerializer: fix docu: setTreeView -> setView. Commit.
• KBusyIndicatorWidget: fix warning when hiding on startup. Commit.

KWindowSystem

• Update to plasma window management v17. Commit.

KXMLGUI

• It compiles fine without qt6.7 deprecated methods. Commit.
• [kactioncollection] Add addAction for KStandardActions without name. Commit.
• Add KStandardActions::StandardActions overload. Commit.
• Remove icon fallback setting. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.
• Work with a local copy of container when removing elements. Commit.
• Skip tests that need GUI on Windows CI. Commit.

Prison

• Restore compatibility with older ZXing versions. Commit.
• It compiles fine without qt6.7 deprecated methods. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Enable exceptions where needed by ZXing. Commit.
• Add image barcode scanning API. Commit.

Purpose

• Remove explicit maintainer from metainfo. Commit.

QQC2 Desktop Style

• Fix rendering the focus of our items. Commit. Fixes bug #486041
• Update background of Dialog. Commit.
• TreeViewDelegate: Replace top/bottom padding with vertical. Commit.
• TreeViewDelegate: Add return type annotations to methods. Commit.
• TreeViewDelegate: Make it actually vertically centered. Commit.
• Remove explicit maintainer from metainfo. Commit.
• TextArea, TextField: Fix position of a "selection end" cursor. Commit.
• TextField: Fix mobile cursor positioning for fields with custom padding. Commit.
• Context Menus: Port to pragma ComponentBehavior: Bound. Commit.
• Context Menus: Use controls directly instead of via QQC2. Commit.
• MobileTextActionsToolBar: Slightly refactor expressions. Commit.
• MobileTextActionsToolBar: Set text and display mode for action buttons. Commit.
• MobileTextActionsToolBar: Use symbolic versions of icons. Commit.
• ComboBox: Clip the ListView when its relevant. Commit.
• ComboBox: Use strict === equality operator. Commit.
• ComboBox: Replace magic numbers with standard named units. Commit.
• [TextArea] Access controlRoot directly. Commit.
• [TextArea] Enabled ComponentBehavior: Bound. Commit.
• [Combobox] Use Popup directly instead of via QQC2. Commit.
• DialogButtonBox: Use largeSpacing as padding. Commit.

Sonnet

• Remove explicit maintainer from metainfo. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.

Syndication

• Remove explicit maintainer from metainfo. Commit.

Syntax Highlighting

• Updates to Catppuccin themes. Commit.
• Nix: Version 2 -> 3. Commit.
• Nix: Correctly highlight first key in set when it is quoted. Commit.
• Nix: Correctly highlight bare ${}. Commit.
• Nix: More correctly model inherit syntax. Commit.
• Build with QT_NO_CONTEXTLESS_CONNECT. Commit.
• Remove explicit maintainer from metainfo. Commit.
• Use ellipsis character instead of three dots in UI strings. Commit.
• Xml: add fictionbook format. Commit.

Threadweaver

• Remove explicit maintainer from metainfo. Commit.

The diffoscope maintainers are pleased to announce the release of diffoscope version 271. This version includes the following changes:

[ Chris Lamb] * Drop Build-Depends on liblz4-tool. Thanks, Chris Peterson. (Closes: #1072575) * Update tests to support zipdetails version 4.004 shipped with Perl 5.40. (Closes: reproducible-builds/diffoscope#377)

You find out more by visiting the project homepage.

I'm pleased to announce the release of Python 3.12.4:

https://www.python.org/downloads/release/python-3124/

 This is the third maintenance release of Python 3.12

Python 3.12 is the newest major release of the Python programming language, and it contains many new features and optimizations. 3.12.4 is the latest maintenance release, containing more than 250 bugfixes, build improvements and documentation changes since 3.12.3.

 Major new features of the 3.12 series, compared to 3.11  New features

• More flexible f-string parsing, allowing many things previously disallowed (PEP 701).
• Support for the buffer protocol in Python code (PEP 688).
• A new debugging/profiling API (PEP 669).
• Support for isolated subinterpreters with separate Global Interpreter Locks (PEP 684).
• Even more improved error messages. More exceptions potentially caused by typos now make suggestions to the user.
• Support for the Linux perf profiler to report Python function names in traces.
• Many large and small performance improvements (like PEP 709 and support for the BOLT binary optimizer), delivering an estimated 5% overall performance improvement.

Type annotations

• New type annotation syntax for generic classes (PEP 695).
• New override decorator for methods (PEP 698).

Deprecations

• The deprecated wstr and wstr_length members of the C implementation of unicode objects were removed, per PEP 623.
• In the unittest module, a number of long deprecated methods and classes were removed. (They had been deprecated since Python 3.1 or 3.2).
• The deprecated smtpd and distutils modules have been removed (see PEP 594 and PEP 632. The setuptools package continues to provide the distutils module.
• A number of other old, broken and deprecated functions, classes and methods have been removed.
• Invalid backslash escape sequences in strings now warn with SyntaxWarning instead of DeprecationWarning, making them more visible. (They will become syntax errors in the future.)
• The internal representation of integers has changed in preparation for performance enhancements. (This should not affect most users as it is an internal detail, but it may cause problems for Cython-generated code.)

For more details on the changes to Python 3.12, see What’s new in Python 3.12.

 More resources

• Online Documentation.
• PEP 693, the Python 3.12 Release Schedule.
• Report bugs via GitHub Issues.
• Help fund Python directly or via GitHub Sponsors, and support the Python community.

 Enjoy the new releases

Thanks to all of the many volunteers who help make Python Development and these releases possible! Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

Your release team,
Thomas Wouters
Łukasz Langa
Ned Deily
Steve Dower