[sage-devel] Re: New contributor experience

2019-07-06 Thread Jerry James
On Saturday, July 6, 2019 at 4:54:45 AM UTC-6, Samuel Lelievre wrote: > > Dear Jerry, > > thanks for reporting. We should make the change you suggest. > > At some point we had a bot that transformed pull requests > on the SageMath repo at *GitHub* into Sage Trac tickets but > the code for this bot

[sage-devel] Re: constant function which can be evaluated for any value but cannot be integrated numerically

2019-07-06 Thread Emmanuel Charpentier
This seems to be a follow-up to this ask.sahemath.org question. 1. As already pointed out by Serge Lelièvre, this anomaly doesn't happent in a Python3-based Sage. Possibly, the behaviour of floats raised

[sage-devel] Re: patchbot security

2019-07-06 Thread 'Jonathan Kliem' via sage-devel
Thanks, I have to see what I can do about it (I went through all the tickets I tested and it looks things are fine). Am Samstag, 6. Juli 2019 14:50:51 UTC+2 schrieb Volker Braun: > > The patchbot configuration has some options for trusting specific user > accounts. > > Having said that, you are

[sage-devel] Re: patchbot security

2019-07-06 Thread Volker Braun
The patchbot configuration has some options for trusting specific user accounts. Having said that, you are correct in that it executes code submitted by strangers over the internet. At the very least make a separate user account for running the patchbot. You might want to add an additional cont

[sage-devel] Re: New contributor experience

2019-07-06 Thread Samuel Lelievre
Le samedi 6 juillet 2019 00:56:40 UTC+2, Jerry James a écrit : > > Greetings, > > I help out with maintaining the sagemath package and many of its > dependencies for the Fedora Linux distribution. While performing > maintenance activities, I have produced a handful of patches that I would > l

[sage-devel] patchbot security

2019-07-06 Thread 'Jonathan Kliem' via sage-devel
Hi, I'm wondering what safety measures are taken for distributing code to the patchbot clients. E.g. if I where to register a new github account and create a ticket that uploads all files from the user to a server of my choice (maybe via a malicous doctest), is that ticket still going to be di

[sage-devel] Re: patchbot server down

2019-07-06 Thread 'Jonathan Kliem' via sage-devel
In my case it crashed (might have been because I tried to start it during downtime). By looking at https://patchbot.sagemath.org/machines I'm having the impression that I'm not the only one, where this happened. Am Samstag, 6. Juli 2019 07:46:41 UTC+2 schrieb Frédéric Chapoton: > > No. No need