[Bug 1758196] Re: SRU fdroidserver 1.0.8-3 (universe) to bionic from cosmic or Debian/testing (main)

[Robie Basak]

I think you misunderstand me. A backport via the backports pocket
(feature updates that are opt in for users) is fine. But we can also
ship a backport via the updates pocket (updates that are recommended for
automatic upgrade by users). In this case it looks like it'll meet the
stricter requirements of the updates pocket as it'd a bugfix-only
backport.

My point was that you can't do a "sync"; you have to do a "backport" of
the package (by adding another changelog entry with a bug reference etc)
and get that sponsored/uploaded in order for me (in the SRU team) to be
able to accept it. This is distinct from the backports process, which is
a separate process to provide opt-in feature enhancements.

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1758196

Title:
  SRU fdroidserver 1.0.8-3 (universe) to bionic from cosmic or
  Debian/testing (main)

Status in fdroidserver package in Ubuntu:
  Confirmed

Bug description:
  Please include fdroidserver 1.0.8-3 (universe) in Ubuntu/bionic LTS as
  a Stable Release Update.  It can be sourced from Debian testing (main)
  and Ubuntu cosmic (universe).

  [Impact]

  We (the Debian Android Tools Team) did a bunch of testing related to
  the Ubuntu/bionic release.  This package also received a full third
  party security audit after the DebianImportFreeze.  Then there was a
  focused effort to get the full test suite running in autopkgtest.
  These changes were mostly done upstream.  These are the final round of
  bugfixes from both those efforts.

  This also fixes:
  * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1763090
  * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1762183

  
  [Test Case]

  The security issues fixed will be documented once we publicly publish
  the security audit report.  That report includes issues in other
  F-Droid packages, so even though all fdroidserver issues have been
  fixed, we can't yet publish the full report.

  The upstream dev process includes a large test suite:
  https://gitlab.com/fdroid/fdroidserver/pipelines/25114656

  It also now has autopkgtest passing on ARM and x86
  https://autopkgtest.ubuntu.com/packages/fdroidserver

  Also in Debian:
  https://ci.debian.net/packages/f/fdroidserver/testing/amd64/

  
  The test suite has never 100% passed for ppc64el and s390x, due to issues in the dependencies.  Therefore, autopkgtest is still failing on those arches.  Fixing them would require complicated fixes to dependencies.


  [Regression Potential]

  The regression potential is basically zero.  Upstream focused
  development on making this package work well with Ubuntu/bionic, and
  new features have not been added since bionic has been released.  The
  existing, extensive, upstream test suite is now run via autopkgtest.
  The changes were only to fix release-critical bugs.  I'm also part of
  upstream on this package.

  
  [Other Info]

  Changelog entries since current bionic version 1.0.2-1:

  fdroidserver (1.0.8-3) unstable; urgency=medium

    * hack to get autopkgtest to skip failing gpg test

   -- Hans-Christoph Steiner <hans at eds.org>  Wed, 27 Jun 2018 21:03:54
  +0200

  fdroidserver (1.0.8-2) unstable; urgency=medium

    * autopkgtest: explicitly purge gnupg so tests pass

   -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 23:28:06
  +0200

  fdroidserver (1.0.8-1) unstable; urgency=medium

    * New upstream version
    * remove python3-distutils, it is no longer needed

   -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:21
  +0200

  fdroidserver (1.0.7-2) unstable; urgency=medium

    * Depends: python3-distutils so its always there

   -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:19
  +0200

  fdroidserver (1.0.7-1) unstable; urgency=medium

    * New upstream release
    * fix autopkgtest

   -- Hans-Christoph Steiner <hans at eds.org>  Wed, 20 Jun 2018 22:27:59
  +0200

  fdroidserver (1.0.6-1) unstable; urgency=medium

    * New upstream release

   -- Hans-Christoph Steiner <hans at eds.org>  Fri, 25 May 2018 17:15:51
  +0200

  fdroidserver (1.0.4-3) unstable; urgency=medium

    * fix autopkgtest run: working dir, and UTF-8 environment

   -- Hans-Christoph Steiner <hans at eds.org>  Fri, 18 May 2018 10:54:26
  +0200

  fdroidserver (1.0.4-2) unstable; urgency=medium

    * run upstream testsuite using autopkgtest

   -- Hans-Christoph Steiner <hans at eds.org>  Thu, 17 May 2018 12:17:12
  +0200

  fdroidserver (1.0.4-1) unstable; urgency=medium

    * New upstream version 1.0.4
    * Standards-Version: 4.1.4 no changes
    * support all the Java 10 and 11 packages
    * works with only androguard, removed optional deps
    * add debian/upstream/metadata file
    * Depends: androguard only on arches where it works

   -- Hans-Christoph Steiner <hans at eds.org>  Tue, 15 May 2018 14:04:05
  +0200

  fdroidserver (1.0.3-2) unstable; urgency=medium

    * only depend on aapt/androguard/zipalign on arches where available

   -- Hans-Christoph Steiner <hans at eds.org>  Fri, 23 Mar 2018 13:01:27
  +0100

  fdroidserver (1.0.3-1) unstable; urgency=medium

    * New upstream version
    * tighten up Depends to install fewer packages

   -- Hans-Christoph Steiner <hans at eds.org>  Thu, 22 Mar 2018 23:25:49
  +0100

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1758196/+subscriptions