Hello.

With the recent discussions about provenpackagers in Fedora, I recently got an idea.

One of the common needs for provenpackagers is to simply "bump and rebuild" a set of dependencies.

All packagers are already able to build anything (except a very specific and small set of specially-signed packages). However, to bump the package, they need commit rights. For that reason, provenpackager rights are often required.

With the wide adoption of %autorelease, such bump commits are empty, which should be easy to verify.

What if we allowed all packagers to push empty commit to any package? That should eliminate *some* need for provenpackager access. We would also communicate in our policies that such bumps do not require prior agreement with the maintainers to avoid confusion about "what are we allowed to do".

--
Miro Hrončok
--
Phone: +420777974800
Fedora Matrix: mhroncok

--
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to