| 18 Oct 2024 |
 emily | almost done with my OpenJDK/OpenJFX deduplication PR | 16:47:06 |
| emily | after several long yak shaves | 16:47:11 |
| emily | still need to do a big refactor after but I'm doing as much as I can with 0 rebuilds first | 16:47:26 |
| 21 Oct 2024 |
|  moved to @amadaluzia:tchncs.de changed their display name from (lambda (f l) (format nil "~a ~a")) "Artur" "Manuel" to (artur 'manuel). | 20:03:25 |
| 23 Oct 2024 |
|  @luna-null:matrix.org changed their display name from Autumn to luna-null. | 09:49:25 |
| emily | it is time https://github.com/NixOS/nixpkgs/pull/350736 | 15:43:56 |
| 25 Oct 2024 |
|  @lholh:matrix.org joined the room. | 03:54:16 |
| @lholh:matrix.org left the room. | 22:42:31 |
| 29 Oct 2024 |
|  eva removed their profile picture. | 22:26:33 |
| eva set a profile picture. | 22:26:42 |
| 30 Oct 2024 |
|  Tomodachi94 (they/them) joined the room. | 01:26:47 |
| Tomodachi94 (they/them) | What are our thoughts about dropping gradle_6 after the feature freeze? Support ended almost two years ago: https://endoflife.date/gradle | 04:37:03 |
 Infinidoge 🏳️⚧️ | Sounds reasonable to me | 04:37:53 |
| Tomodachi94 (they/them) | Additionally, it is very insecure, with four CVEs that are only patched in v7 or higher: https://github.com/NixOS/nixpkgs/pull/352236 | 04:38:02 |
| Tomodachi94 (they/them) | Only three packages are using it | 04:38:44 |
| Tomodachi94 (they/them) | * Only three packages are using it afaict | 04:40:18 |
| emily | usually we just list CVE identifiers with no explanation I think | 04:41:58 |
| emily | I think we can drop now, before release. | 04:43:13 |
| emily | dropping packages came up in #nixos-release-management:nixos.org recently, it's fine until the release, and security trumps freeze anyway | 04:43:32 |
| emily | do any of the three users work with a newer gradle? | 04:44:21 |
| Tomodachi94 (they/them) | Yes, one does. Upstream fixed it but hasn't released yet; I PRed a patch at https://github.com/NixOS/nixpkgs/pull/352275 | 04:45:12 |
| Tomodachi94 (they/them) | armitage looks like upstream might have been abandoned; no commits in two years | 04:46:34 |
| Tomodachi94 (they/them) | jd-gui also looks abandoned upstream, no commits since 2019 | 04:47:19 |
| emily | ok, let's merge the vulns PR to get it backported, and that fix | 04:47:20 |
| emily | then let's work on removal | 04:47:25 |
| emily | how complicated do the other two failures look? | 04:50:30 |
| emily | jd-gui AUR package uses 7: https://aur.archlinux.org/packages/jd-gui | 04:50:53 |
| Tomodachi94 (they/them) | In reply to@emilazy:matrix.org
how complicated do the other two failures look? Unsure, I'll start the builds and have them use latest gradle | 04:51:00 |
| emily | jackpot: https://aur.archlinux.org/cgit/aur.git/plain/gradle-7-build.patch?h=jd-gui&id=7748f3a58e1e1d85d1558fae35d79350ed0a93bb | 04:51:31 |
| emily | hope we weren't using that macOS .app code 😅 | 04:52:15 |
