| 15 Dec 2025 |
 Fabián Heredia | https://github.com/NixOS/nixpkgs/commit/3dd12c46719c52e75d9f86998de15db82d27a6df | 07:33:14 |
| Fabián Heredia | git log origin/master..origin/staging --grep CVE
Only shows:
- gnutls (low and on 25.11)
- libpng 1.6.51 (highs and on 25.11)
- django_4 (moderate and on 25.11)
- libpng: 1.6.52 (highs and on 25.11)
- xkbcomp (moderates and on 25.11)
- libarchive (no CVEs and not on 25.11)
- glib (highs and not on 25.11)
| 07:42:00 |
 Vladimír Čunát | There was a 25.05 cycle, so perhaps that's what you mistaked for it. | 07:53:08 |
| Vladimír Čunát | * There was a 25.05 cycle, so perhaps that's what you mistook for it. | 07:53:22 |
| Fabián Heredia | yeah, just double checked and there hasn't been a staging-next cycle not part of 25.11 | 07:53:55 |
 Yureka (she/her) | https://github.com/NixOS/nixpkgs/issues/470961 | 08:42:31 |
| Yureka (she/her) | https://github.com/NixOS/nixpkgs/issues/470962 | 08:44:32 |
| Yureka (she/her) | https://github.com/NixOS/nixpkgs/issues/470964 | 08:46:34 |
 Grimmauld (any/all) | In reply to @yuka:yuka.dev
https://github.com/NixOS/nixpkgs/issues/470964 This one looks like an XML parser fail, but we didn't touch libxml2 this time, wtf???? | 08:48:50 |
 K900 | "fuzz" in the name | 08:49:05 |
| K900 | I wonder if they're actually fuzzing it | 08:49:09 |
| Grimmauld (any/all) | Oh god | 08:49:18 |
 ghpzin | That is some new python version thing (just linked in issue):
https://bugs.launchpad.net/beautifulsoup/+bug/2134393 | 08:53:16 |
| K900 | Ah | 08:53:43 |
| K900 | Minor Python version updates breaking libraries | 08:53:51 |
| K900 | Must be a day that ends in Y | 08:53:54 |
| ghpzin | * That is some new python version thing (just linked in issue):
https://bugs.launchpad.net/beautifulsoup/+bug/2134393
https://git.launchpad.net/beautifulsoup/commit/?id=55f655ffb7ef03bdd1df0f013743831fe54e3c7a | 08:54:23 |
| Vladimír Čunát | It's normal for patch-level python3 updates to break some stuff. | 08:59:37 |
| Vladimír Čunát | Always at least a few tests in python3Packages. | 08:59:51 |
| Vladimír Čunát | * It's normal for patch-level python3 updates to break some stuff, sadly. | 09:00:04 |
|  Capypara joined the room. | 09:23:27 |
|  Jules Lamur joined the room. | 10:11:33 |
|  Artem Leshchev joined the room. | 18:48:09 |
| Fabián Heredia | Re: short 25.11-analog staging-next for unstable
I think the only high >= severity security fix would be libpng and others would be delayed glib which probably has more usage)
If that short staging-next cycle would be about a couple of days the next staging-next cycle would start around holidays (navidad + new year in my case) and I would rather do any pending gcc fixes before then to have less to think about during winter holidays xd | 19:58:24 |
| Fabián Heredia | * Re: short 25.11-analog staging-next for unstable
I think the only high >= severity security fix would be libpng and others would be delayed like glib which probably has more usage)
If that short staging-next cycle would be about a couple of days the next staging-next cycle would start around holidays (navidad + new year in my case) and I would rather do any pending gcc fixes before then to have less to think about during winter holidays xd | 19:58:47 |
| Fabián Heredia | * Re: short 25.11-analog staging-next for unstable
I think the only high >= severity security fix would be libpng (and others would be delayed like glib which probably has more usage)
If that short staging-next cycle would be about a couple of days the next staging-next cycle would start around holidays (navidad + new year in my case) and I would rather do any pending gcc fixes before then to have less to think about during winter holidays xd | 19:58:58 |
| Grimmauld (any/all) | i'll be doing more nix again starting next week | 20:34:16 |
| Grimmauld (any/all) | i can pick up some of the gcc fallout, but not all of course | 20:34:43 |
| ghpzin | Do we know that fallout better than results from last run of jobset ?
Unfortunately top 15 deps on last eval were 12631 out of 13188 failures, so it is hard to measure what is in there. | 20:52:04 |
| Fabián Heredia | it was a single shot to fix some of the most prominent fallout but doing other evals would be expensive and no show stoppers appeared on that attempt so now it would be more on the normal staging-next cycle side | 20:53:33 |
