Re: Transition from libcommons-httpclient-java to libhttpclient-java

2015-09-30 Thread Emmanuel Bourg
Le 30/09/2015 20:19, Markus Koschany a écrit : > I think we should file bug reports and start replacing > libcommons-httpclient-java with libhttpclient-java. I'm not convinced by the need to force this transition. Patching the rare security issues requires much less resources than rewriting and t

Transition from libcommons-httpclient-java to libhttpclient-java

2015-09-30 Thread Markus Koschany
Hi, I think we should file bug reports and start replacing libcommons-httpclient-java with libhttpclient-java. Reasoning: commons-httpclient is obsolete and has been EOL since 2011. It is no longer supported and was/is affected by multiple security issues. [1] I suggest to file bug reports with

Re: [Reproducible-builds] libibatis-java changed in testing: reproducible -> FTBFS

2015-09-30 Thread Mattia Rizzolo
On Wed, Sep 30, 2015 at 11:26:39AM -0300, Miguel Landaeta wrote: > BTW, can another builds be retried? yes, every team member has a mean to schedule packages for building. > I was interested on retriggering jruby build since is tagged as FTBFS > since some days ago and I know for sure is not FTBF

Re: [Reproducible-builds] Usefulness of periodic reproducible builds e-mails

2015-09-30 Thread Markus Koschany
Am 30.09.2015 um 16:15 schrieb Mattia Rizzolo: [...] > This wouldn't work with the current implementation, which is emailing > $p...@packages.debian.org. Anyway, I received a suggestion of setting up > a new PTS keyword, so then people can go and subscribe there, maybe > using the team facility of

Re: [Reproducible-builds] Usefulness of periodic reproducible builds e-mails

2015-09-30 Thread Mattia Rizzolo
On Wed, Sep 30, 2015 at 11:13:40AM -0300, Miguel Landaeta wrote: > On Wed, Sep 30, 2015 at 02:27:18PM +0200, Emmanuel Bourg wrote: > > > > Markus (and the others), do you think it's ok to keep the notifications > > if they are limited to unstable ? Or would you prefer disabling them > > completely

Re: Usefulness of periodic reproducible builds e-mails

2015-09-30 Thread Miguel Landaeta
On Wed, Sep 30, 2015 at 02:27:18PM +0200, Emmanuel Bourg wrote: > > Markus (and the others), do you think it's ok to keep the notifications > if they are limited to unstable ? Or would you prefer disabling them > completely until the build environment stabilizes? I think there is value in receivi

Re: [Reproducible-builds] Usefulness of periodic reproducible builds e-mails

2015-09-30 Thread Emmanuel Bourg
Le 30/09/2015 13:00, Markus Koschany a écrit : > We have never discussed this before as a team. I vote for unsubscribing > pkg-java because of the issues that were pointed out already. I did request the notifications for the team, but I didn't really expect so many false positives. Sorry for the

Re: [Reproducible-builds] Usefulness of periodic reproducible builds e-mails

2015-09-30 Thread Markus Koschany
Hi, Am 30.09.2015 um 12:30 schrieb Holger Levsen: > Hi, > > (mostly ignoring the rest as this has been addressed already.) > > On Dienstag, 29. September 2015, Markus Koschany wrote: >> I understand that everything is still in development. However I don't >> think a public mailing list is a suit

Re: [Reproducible-builds] Usefulness of periodic reproducible builds e-mails

2015-09-30 Thread Holger Levsen
Hi, (mostly ignoring the rest as this has been addressed already.) On Dienstag, 29. September 2015, Markus Koschany wrote: > I understand that everything is still in development. However I don't > think a public mailing list is a suitable testbed. My preferred solution > would be to make receivin