[Bug 2101889] Re: sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe

Tue Mar 11 17:14:00 UTC 2025

** Description changed:

+ [Availability]
+ - The package node-mathjax-full is already in Ubuntu universe.
+ - The package node-mathjax-full builds only architecture-independent packages and successfully builds on amd64.
+ - Link to package: https://launchpad.net/ubuntu/+source/node-mathjax-full
+ 
+ [Rationale]
+ - The package node-mathjax-full is required in Ubuntu main for sphinx.
+ - It is the new version of src:mathjax (from the same upstream), which is already in main. The source and binary package names are different, because upstream rewrote this project in TypeScript and changed API in an incompatible way.
+ 
+ [Security]
+ - Had 2 security issues in the past (one of them disputed): https://ubuntu.com/security/cves?package=mathjax
+ - However, both issues apply to 2.x branch, which is src:mathjax and already in main.
+ - No security issues for the 3.x branch.
+ 
+ - no `suid` or `sgid` binaries
+ - no executables in `/sbin` and `/usr/sbin`
+ - Package does not install services, timers or recurring jobs
+ - Package does not open privileged ports (ports < 1024).
+ - Package does not expose any external endpoints
+ - Package does not contain extensions to security-sensitive software
+ 
+ [Quality assurance - function/usage]
+ - The package works well right after install
+ 
+ [Quality assurance - maintenance]
+ - The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs
+ - Ubuntu: https://bugs.launchpad.net/ubuntu/+source/node-mathjax-full
+ - Debian: https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=node-mathjax-full
+ - Upstream's bug tracker: https://github.com/mathjax/MathJax/issues
+ 
+ [Quality assurance - testing]
+ - The package does not run tests at build time because upstream does not provide a test suite, and testing is non-trivial because this library only works in a browser.
+ - The package can be tested manually e.g. by installing sphinx-doc, opening file:///usr/share/doc/sphinx-doc/html/usage/restructuredtext/roles.html#math in a browser and making sure that the Pythagoras theorem is displayed correctly.
+ 
+ [Quality assurance - packaging]
+ - debian/watch is present and works
+ - debian/control defines a correct Maintainer field
+ - Lintian overrides are not present
+ - This package does not rely on obsolete or about to be demoted packages.
+ - This package has no python2 or GTK2 dependencies
+ - The package will not be installed by default
+ - Packaging and build is easy, link to debian/rules: https://salsa.debian.org/js-team/node-mathjax-full/-/blob/master/debian/rules
+ 
+ [UI standards]
+ - Application is end-user facing
+ - Translation is possible via https://github.com/mathjax/MathJax-i18n but not packaged
+ 
+ [Dependencies]
+ - There is one further dependency that is not yet in main: node-mj-context-menu. It is a small library, developed as part of mathjax project. The MIR process for it is handled as part of this bug here.
+ 
+ [Standards compliance]
+ - This package correctly follows FHS and Debian Policy
+ 
+ [Maintenance/Owner]
+ - The package is maintained in Debian by the Debian JavaScript team. There is no Ubuntu delta.
+ - I (Dmitry Shachnev) am subscribed to bugs in Ubuntu.
+ - The package has a vendored copy of mhchemparser, it can be updated using standard tooling (debian/watch).
+ - The package has been built within the last 3 months in the archive.
+ 
+ [Background information]
+ - The Package description explains the package well.
+ - Upstream Name is MathJax.
+ - Link to upstream project: https://github.com/mathjax/MathJax
+ 
  This upload is stuck in the proposed pocket:

  sphinx (8.1.3-5) unstable; urgency=medium

-   * Switch from MathJax 2 to MathJax 3.
-   * Sort Build-Depends with wrap-and-sort from devscripts ≥ 2.24.8.
+   * Switch from MathJax 2 to MathJax 3.
+   * Sort Build-Depends with wrap-and-sort from devscripts ≥ 2.24.8.

-  -- Dmitry Shachnev <mitya57 at debian.org>  Fri, 31 Jan 2025 13:28:15
+  -- Dmitry Shachnev <mitya57 at debian.org>  Fri, 31 Jan 2025 13:28:15
  +0300

  All of the autopkgtests on the excuses page (and there are a handful)
  pass. It's just blocked on this:

  sphinx (8.1.3-4 to 8.1.3-5)

-     Migration status for sphinx (8.1.3-4 to 8.1.3-5): BLOCKED: Rejected/violates migration policy/introduces a regression
-     Issues preventing migration:
-     sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe
-     Impossible Depends: sphinx -> node-mathjax-full/3.2.2+~cs4.2.1-4/amd64 
+     Migration status for sphinx (8.1.3-4 to 8.1.3-5): BLOCKED: Rejected/violates migration policy/introduces a regression
+     Issues preventing migration:
+     sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe
+     Impossible Depends: sphinx -> node-mathjax-full/3.2.2+~cs4.2.1-4/amd64

  Could the team responsible for sphinx please clarify whether node-
  mathjax-full will receive a promotion, this upload will get reverted +
  we carry a delta, or whether sphinx-doc should be demoted?

  Thanks in advance.

** Package changed: sphinx (Ubuntu) => node-mathjax-full (Ubuntu)

** Also affects: node-mj-context-menu (Ubuntu)
   Importance: Undecided
       Status: New

** Summary changed:

- sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe
+ MIR: node-mathjax-full, node-mj-context-menu

** Description changed:

  [Availability]
  - The package node-mathjax-full is already in Ubuntu universe.
  - The package node-mathjax-full builds only architecture-independent packages and successfully builds on amd64.
  - Link to package: https://launchpad.net/ubuntu/+source/node-mathjax-full

  [Rationale]
  - The package node-mathjax-full is required in Ubuntu main for sphinx.
- - It is the new version of src:mathjax (from the same upstream), which is already in main. The source and binary package names are different, because upstream rewrote this project in TypeScript and changed API in an incompatible way.
+ - It is the new version of src:mathjax (from the same upstream), which is already in main (MIR bug 1878937). The source and binary package names are different, because upstream rewrote this project in TypeScript and changed API in an incompatible way.

  [Security]
  - Had 2 security issues in the past (one of them disputed): https://ubuntu.com/security/cves?package=mathjax
  - However, both issues apply to 2.x branch, which is src:mathjax and already in main.
  - No security issues for the 3.x branch.

  - no `suid` or `sgid` binaries
  - no executables in `/sbin` and `/usr/sbin`
  - Package does not install services, timers or recurring jobs
  - Package does not open privileged ports (ports < 1024).
  - Package does not expose any external endpoints
  - Package does not contain extensions to security-sensitive software

  [Quality assurance - function/usage]
  - The package works well right after install

  [Quality assurance - maintenance]
  - The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs
  - Ubuntu: https://bugs.launchpad.net/ubuntu/+source/node-mathjax-full
  - Debian: https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=node-mathjax-full
  - Upstream's bug tracker: https://github.com/mathjax/MathJax/issues

  [Quality assurance - testing]
  - The package does not run tests at build time because upstream does not provide a test suite, and testing is non-trivial because this library only works in a browser.
  - The package can be tested manually e.g. by installing sphinx-doc, opening file:///usr/share/doc/sphinx-doc/html/usage/restructuredtext/roles.html#math in a browser and making sure that the Pythagoras theorem is displayed correctly.

  [Quality assurance - packaging]
  - debian/watch is present and works
  - debian/control defines a correct Maintainer field
  - Lintian overrides are not present
  - This package does not rely on obsolete or about to be demoted packages.
  - This package has no python2 or GTK2 dependencies
  - The package will not be installed by default
  - Packaging and build is easy, link to debian/rules: https://salsa.debian.org/js-team/node-mathjax-full/-/blob/master/debian/rules

  [UI standards]
  - Application is end-user facing
  - Translation is possible via https://github.com/mathjax/MathJax-i18n but not packaged

  [Dependencies]
  - There is one further dependency that is not yet in main: node-mj-context-menu. It is a small library, developed as part of mathjax project. The MIR process for it is handled as part of this bug here.

  [Standards compliance]
  - This package correctly follows FHS and Debian Policy

  [Maintenance/Owner]
  - The package is maintained in Debian by the Debian JavaScript team. There is no Ubuntu delta.
  - I (Dmitry Shachnev) am subscribed to bugs in Ubuntu.
  - The package has a vendored copy of mhchemparser, it can be updated using standard tooling (debian/watch).
  - The package has been built within the last 3 months in the archive.

  [Background information]
  - The Package description explains the package well.
  - Upstream Name is MathJax.
  - Link to upstream project: https://github.com/mathjax/MathJax

  This upload is stuck in the proposed pocket:

  sphinx (8.1.3-5) unstable; urgency=medium

    * Switch from MathJax 2 to MathJax 3.
    * Sort Build-Depends with wrap-and-sort from devscripts ≥ 2.24.8.

   -- Dmitry Shachnev <mitya57 at debian.org>  Fri, 31 Jan 2025 13:28:15
  +0300

  All of the autopkgtests on the excuses page (and there are a handful)
  pass. It's just blocked on this:

  sphinx (8.1.3-4 to 8.1.3-5)

      Migration status for sphinx (8.1.3-4 to 8.1.3-5): BLOCKED: Rejected/violates migration policy/introduces a regression
      Issues preventing migration:
      sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe
      Impossible Depends: sphinx -> node-mathjax-full/3.2.2+~cs4.2.1-4/amd64

  Could the team responsible for sphinx please clarify whether node-
  mathjax-full will receive a promotion, this upload will get reverted +
  we carry a delta, or whether sphinx-doc should be demoted?

  Thanks in advance.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sphinx in Ubuntu.
https://bugs.launchpad.net/bugs/2101889

Title:
  MIR: node-mathjax-full, node-mj-context-menu

Status in node-mathjax-full package in Ubuntu:
  Confirmed
Status in node-mj-context-menu package in Ubuntu:
  New

Bug description:
  [Availability]
  - The package node-mathjax-full is already in Ubuntu universe.
  - The package node-mathjax-full builds only architecture-independent packages and successfully builds on amd64.
  - Link to package: https://launchpad.net/ubuntu/+source/node-mathjax-full

  [Rationale]
  - The package node-mathjax-full is required in Ubuntu main for sphinx.
  - It is the new version of src:mathjax (from the same upstream), which is already in main (MIR bug 1878937). The source and binary package names are different, because upstream rewrote this project in TypeScript and changed API in an incompatible way.

  [Security]
  - Had 2 security issues in the past (one of them disputed): https://ubuntu.com/security/cves?package=mathjax
  - However, both issues apply to 2.x branch, which is src:mathjax and already in main.
  - No security issues for the 3.x branch.

  - no `suid` or `sgid` binaries
  - no executables in `/sbin` and `/usr/sbin`
  - Package does not install services, timers or recurring jobs
  - Package does not open privileged ports (ports < 1024).
  - Package does not expose any external endpoints
  - Package does not contain extensions to security-sensitive software

  [Quality assurance - function/usage]
  - The package works well right after install

  [Quality assurance - maintenance]
  - The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs
  - Ubuntu: https://bugs.launchpad.net/ubuntu/+source/node-mathjax-full
  - Debian: https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=node-mathjax-full
  - Upstream's bug tracker: https://github.com/mathjax/MathJax/issues

  [Quality assurance - testing]
  - The package does not run tests at build time because upstream does not provide a test suite, and testing is non-trivial because this library only works in a browser.
  - The package can be tested manually e.g. by installing sphinx-doc, opening file:///usr/share/doc/sphinx-doc/html/usage/restructuredtext/roles.html#math in a browser and making sure that the Pythagoras theorem is displayed correctly.

  [Quality assurance - packaging]
  - debian/watch is present and works
  - debian/control defines a correct Maintainer field
  - Lintian overrides are not present
  - This package does not rely on obsolete or about to be demoted packages.
  - This package has no python2 or GTK2 dependencies
  - The package will not be installed by default
  - Packaging and build is easy, link to debian/rules: https://salsa.debian.org/js-team/node-mathjax-full/-/blob/master/debian/rules

  [UI standards]
  - Application is end-user facing
  - Translation is possible via https://github.com/mathjax/MathJax-i18n but not packaged

  [Dependencies]
  - There is one further dependency that is not yet in main: node-mj-context-menu. It is a small library, developed as part of mathjax project. The MIR process for it is handled as part of this bug here.

  [Standards compliance]
  - This package correctly follows FHS and Debian Policy

  [Maintenance/Owner]
  - The package is maintained in Debian by the Debian JavaScript team. There is no Ubuntu delta.
  - I (Dmitry Shachnev) am subscribed to bugs in Ubuntu.
  - The package has a vendored copy of mhchemparser, it can be updated using standard tooling (debian/watch).
  - The package has been built within the last 3 months in the archive.

  [Background information]
  - The Package description explains the package well.
  - Upstream Name is MathJax.
  - Link to upstream project: https://github.com/mathjax/MathJax

  This upload is stuck in the proposed pocket:

  sphinx (8.1.3-5) unstable; urgency=medium

    * Switch from MathJax 2 to MathJax 3.
    * Sort Build-Depends with wrap-and-sort from devscripts ≥ 2.24.8.

   -- Dmitry Shachnev <mitya57 at debian.org>  Fri, 31 Jan 2025 13:28:15
  +0300

  All of the autopkgtests on the excuses page (and there are a handful)
  pass. It's just blocked on this:

  sphinx (8.1.3-4 to 8.1.3-5)

      Migration status for sphinx (8.1.3-4 to 8.1.3-5): BLOCKED: Rejected/violates migration policy/introduces a regression
      Issues preventing migration:
      sphinx-doc/amd64 in main cannot depend on node-mathjax-full in universe
      Impossible Depends: sphinx -> node-mathjax-full/3.2.2+~cs4.2.1-4/amd64

  Could the team responsible for sphinx please clarify whether node-
  mathjax-full will receive a promotion, this upload will get reverted +
  we carry a delta, or whether sphinx-doc should be demoted?

  Thanks in advance.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/node-mathjax-full/+bug/2101889/+subscriptions