| 18 Feb 2026 |
Julien | Great thanks! | 10:03:17 |
hexa | We need someone to update the RFC39 tooling. GitHub has deprecated the API we use to manage team members and the GitHub bindings (hubcaps) are unmaintained since 2020. | 16:22:33 |
hexa | https://github.com/NixOS/rfc39 | 16:22:41 |
hexa | also all of the dependencies are stuck in like 2018 | 16:23:58 |
emily | I have some thoughts on the RFC 39 things I plan to post soon | 16:24:13 |
hexa | You mean the process? | 16:24:38 |
emily | it is probably a bad idea to have a long-lived token that powerful lying around. it probably makes sense to do it from within GHA or to move to a more self-service model where any committer can invite people to the maintainers team and merging new maintainers blocks on that | 16:25:16 |
emily | (I believe that the rfc39 bot could most likely arbitrarily make any GitHub user committer right now?) | 16:26:01 |
hexa | No idea, I never looked at that token | 16:27:30 |
hexa | But given that no bot account has the maintainer role on the maintainers team, probably | 16:27:54 |
hexa | hm, it's an app apparently | 16:30:31 |
| 19 Feb 2026 |
toonn | This comment does claim that the app only needs `Members: Read and Write` permissions, https://github.com/NixOS/rfc39/blob/master/src/main.rs#L42-L46. | 14:08:00 |
toonn | emily: I think that at least addresses your concern about permissions? | 14:08:29 |
emily | I'm pretty sure "Members: Write" is the permission that lets you make anyone a Nixpkgs committer. | 14:11:04 |
toonn | Ah, it's org-level, not team-level permissions? That makes sense, I guess. Wouldn't GHA require the same privilege level though? | 14:14:54 |
emily | yeah, but all changes to our GHA machinery go through our normal review, and if tokens leak unexpectedly from GHA then GitHub has bigger problems | 14:39:40 |
hexa | I' | 14:45:05 |
hexa | * I'm super fine with giving it up | 14:45:09 |
| 22 May 2021 |
| @grahamc:nixos.org set the history visibility to "world_readable". | 17:01:28 |
| @grahamc:nixos.org changed the room name to "" from "". | 17:01:28 |
| cole-h joined the room. | 17:03:05 |
| andi- joined the room. | 17:18:59 |
| Sandro joined the room. | 17:21:35 |
| hexa joined the room. | 17:22:33 |
| 7c6f434c joined the room. | 17:24:51 |
| colemickens 🏳️🌈 joined the room. | 17:26:27 |
| Alyssa Ross joined the room. | 18:02:00 |
| toonn joined the room. | 18:54:47 |
| 23 May 2021 |
| lukegb (he/him) joined the room. | 00:25:48 |
| sterni joined the room. | 00:32:36 |