From unknown Fri Jun 13 11:01:46 2025 X-Loop: help-debbugs@gnu.org Subject: bug#40478: feature request/idea: guix pull --news should show information about new package replacements Resent-From: Jack Hill Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 07 Apr 2020 01:18:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 40478 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 40478@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.158622224315107 (code B ref -1); Tue, 07 Apr 2020 01:18:02 +0000 Received: (at submit) by debbugs.gnu.org; 7 Apr 2020 01:17:23 +0000 Received: from localhost ([127.0.0.1]:49397 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jLcrj-0003va-3k for submit@debbugs.gnu.org; Mon, 06 Apr 2020 21:17:23 -0400 Received: from lists.gnu.org ([209.51.188.17]:55703) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jLcrg-0003vS-QU for submit@debbugs.gnu.org; Mon, 06 Apr 2020 21:17:21 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:34023) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jLcrf-0005w8-Pq for bug-guix@gnu.org; Mon, 06 Apr 2020 21:17:20 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50 autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1jLcre-0005y2-OL for bug-guix@gnu.org; Mon, 06 Apr 2020 21:17:19 -0400 Received: from minsky.hcoop.net ([104.248.1.95]:38804) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1jLcre-0005xc-La for bug-guix@gnu.org; Mon, 06 Apr 2020 21:17:18 -0400 Received: from marsh.hcoop.net ([45.55.52.66]) by minsky.hcoop.net with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1jLcre-0003jx-00 for bug-guix@gnu.org; Mon, 06 Apr 2020 21:17:17 -0400 Date: Mon, 6 Apr 2020 21:17:17 -0400 (EDT) From: Jack Hill X-X-Sender: jackhill@marsh.hcoop.net Message-ID: User-Agent: Alpine 2.20 (DEB 67 2015-01-07) MIME-Version: 1.0 Content-Type: multipart/mixed; BOUNDARY="925712948-1330485592-1586222237=:5735" X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 104.248.1.95 X-Spam-Score: 0.2 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.8 (/) This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --925712948-1330485592-1586222237=:5735 Content-Type: text/plain; format=flowed; charset=UTF-8 Content-Transfer-Encoding: 8BIT Hi Guix, I'm an avid reader of `guix pull --news`. I like learning about new and updated software. However, I noticed that when a package gains a new replacement (e.g. for a security fix via grafting), it is not mentioned. We do not show all changes to package definitions in the new, but since a new replacement is often for a security fix, I think it is significant enough to warrant showing in the news. I'm imagining something like: """ n packages with new replacements: gnutls, … """ or perhaps: """ n packages with new grafts: libxml, … """ I haven't yet though about the implementation of this. I would want to avoid doing too much extra work for `guix pull --news`. What do you think? Best, Jack --925712948-1330485592-1586222237=:5735-- From unknown Fri Jun 13 11:01:46 2025 X-Loop: help-debbugs@gnu.org Subject: bug#40478: feature request/idea: guix pull --news should show information about new package replacements Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 07 Apr 2020 09:55:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 40478 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Jack Hill Cc: 40478@debbugs.gnu.org Received: via spool by 40478-submit@debbugs.gnu.org id=B40478.158625327317527 (code B ref 40478); Tue, 07 Apr 2020 09:55:02 +0000 Received: (at 40478) by debbugs.gnu.org; 7 Apr 2020 09:54:33 +0000 Received: from localhost ([127.0.0.1]:49579 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jLkwC-0004YY-CA for submit@debbugs.gnu.org; Tue, 07 Apr 2020 05:54:33 -0400 Received: from eggs.gnu.org ([209.51.188.92]:50854) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jLkwB-0004YB-NH for 40478@debbugs.gnu.org; Tue, 07 Apr 2020 05:54:31 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:52737) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1jLkw6-0006PG-EB; Tue, 07 Apr 2020 05:54:26 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=45718 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1jLkw5-0005sX-RF; Tue, 07 Apr 2020 05:54:26 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 19 Germinal an 228 de la =?UTF-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Tue, 07 Apr 2020 11:54:24 +0200 In-Reply-To: (Jack Hill's message of "Mon, 6 Apr 2020 21:17:17 -0400 (EDT)") Message-ID: <87y2r7aaen.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Hi, Jack Hill skribis: > I'm an avid reader of `guix pull --news`. I like learning about new > and updated software. However, I noticed that when a package gains a > new replacement (e.g. for a security fix via grafting), it is not > mentioned. We do not show all changes to package definitions in the > new, but since a new replacement is often for a security fix, I think > it is significant enough to warrant showing in the news. I'm imagining > something like: > > """ > n packages with new replacements: gnutls, =E2=80=A6 > """ > > or perhaps: > > """ > n packages with new grafts: libxml, =E2=80=A6 > """ > > I haven't yet though about the implementation of this. I would want to > avoid doing too much extra work for `guix pull --news`. > > What do you think? I think it=E2=80=99s a great idea! It would be even better if the message were higher-level: The following security issues were fixed: CVE-XYZ (gnutls), CVE-123 (icecat), etc. The (guix cve) module would come in handy but it would be hard to implement efficiently, I think. Ludo=E2=80=99.