RE: Drop support for building with mingw v1?

2023-03-02 Thread Daniel Stenberg via curl-library

On Thu, 2 Mar 2023, Marcel Raad wrote:


Apart from that, I'd personally be in favor of removing it.


Viktor also spoke up in favor of removing it: 
https://github.com/curl/curl/pull/10651#discussion_r1123599554


I worked around my immediate issue in #10651, so let's drop mingw v1 slowly 
and carefully:


1. Add a mention to DEPRECATE.md
2. Make configure detect it and refuse to build (unless a separate option is
   set)
3. By September 2023 we drop support completely, remove the CI jobs and remove
   the separate configure option.

Any good suggestion how we detect mingw v1 in configure?

--

 / daniel.haxx.se
 | Commercial curl support up to 24x7 is available!
 | Private help, bug fixes, support, ports, new features
 | https://curl.se/support.html
--
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html


RE: Drop support for building with mingw v1?

2023-03-02 Thread Marcel Raad via curl-library
Hi,

> From: curl-library  On Behalf Of Daniel 
> Stenberg via curl-library
> Sent: Thursday, 2 March 2023 17:51
> To: libcurl hacking 
> Cc: Daniel Stenberg 
> Subject: Drop support for building with mingw v1?
>
> Can we drop support for building with mingw v1?
>
> It would make it slightly easier to get things to build.
>
> Who would be sad, upset or angry if we remove support for this?

FTR, pretty much the same as I wrote on GitHub and speaking from my experience 
with other open
source projects:

The only reason to support original MinGW I see is that people new to software 
development on
Windows seem to often find the original MinGW first. That, in combination with 
the habit of asking
for help instead of reading documentation, led to a lot of noisy questions, in 
the same way as the
recurring linking errors when linking statically without setting the respective 
define on the consumer
side.

Apart from that, I'd personally be in favor of removing it. And with it maybe 
also support for Windows
2000, which I'd only keep so far because original MinGW targets it by default.

Marcel
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html


Re: Drop support for building with mingw v1?

2023-03-02 Thread Dan Fandrich via curl-library
On Thu, Mar 02, 2023 at 05:51:07PM +0100, Daniel Stenberg via curl-library 
wrote:
> Today I fell into an issue with PR #10651 where everything builds fine,
> execpt on Windows with mingw v1.
> 
> There's really nothing unusual with that while working on a PR, but this
> time it struck that I should at least ask the question:
> 
> Can we drop support for building with mingw v1?

Is this from msys (not msys2)? The job configuration hints at it. My
understanding is that msys is well and truly obsolete and I doubt anyone would
notice if it were dropped. Additionally, it uses gcc 9.2 which is 4 years old
and no longer supported upstream. But, I'm far from a Windows toolchain subject
expert.
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html


Drop support for building with mingw v1?

2023-03-02 Thread Daniel Stenberg via curl-library

Hi,

mingw seems to exist in a v1 and a v2, and we run CI jobs to verify that curl 
builds fine with both.


Today I fell into an issue with PR #10651 where everything builds fine, execpt 
on Windows with mingw v1.


There's really nothing unusual with that while working on a PR, but this time 
it struck that I should at least ask the question:


Can we drop support for building with mingw v1?

It would make it slightly easier to get things to build.

Who would be sad, upset or angry if we remove support for this?

--

 / daniel.haxx.se
 | Commercial curl support up to 24x7 is available!
 | Private help, bug fixes, support, ports, new features
 | https://curl.se/support.html
--
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html


Re: The curl nuget story

2023-03-02 Thread Daniel Stenberg via curl-library

On Thu, 2 Mar 2023, Kamil Dudka wrote:

They were able to fix it really fast for a company of this size in my 
opinion.


Absolutely, they were really fast. After I took it to Twitter.

--

 / daniel.haxx.se
 | Commercial curl support up to 24x7 is available!
 | Private help, bug fixes, support, ports, new features
 | https://curl.se/support.html
--
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html


Re: The curl nuget story

2023-03-02 Thread Kamil Dudka via curl-library
On Thursday, March 2, 2023 9:44:46 AM CET Daniel Stenberg via curl-library 
wrote:
> Hi friends,
> 
> The last few days I've worked with nuget and them offering a curl package 
> from 
> 2013. tldr: that package is now delisted.
> 
> The longer version of the story: 
> https://daniel.haxx.se/blog/2023/03/02/the-curl-nuget-story/

I do not want to defend Microsoft but ... you reported a ten years old problem
on February 27th and today (March 2nd) I can see zero packages at the page you
refer to:

https://www.nuget.org/profiles/coapp

They were able to fix it really fast for a company of this size in my opinion.

Kamil


-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html


Re: The curl nuget story

2023-03-02 Thread Jeffrey Walton via curl-library
On Thu, Mar 2, 2023 at 3:44 AM Daniel Stenberg via curl-library
 wrote:
>
> The last few days I've worked with nuget and them offering a curl package from
> 2013. tldr: that package is now delisted.
>
> The longer version of the story:
> https://daniel.haxx.se/blog/2023/03/02/the-curl-nuget-story/

This sounds like the Maven Insecurity problem playing out with Nuget.
How little we learned in all those years...

The next problem is GitHub clones. They take the Maven Insecurity
problem and exponentiate it. Instead of one site providing insecure
software (like Maven or NuGet), forks ensure there are hundreds or
thousands of insecure copies of software available.

cURL has 5.6k forks according to GitHub. I wonder how many of them
have downlevel versions of the library.

Jeff
-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html


The curl nuget story

2023-03-02 Thread Daniel Stenberg via curl-library

Hi friends,

The last few days I've worked with nuget and them offering a curl package from 
2013. tldr: that package is now delisted.


The longer version of the story: 
https://daniel.haxx.se/blog/2023/03/02/the-curl-nuget-story/


--

 / daniel.haxx.se
 | Commercial curl support up to 24x7 is available!
 | Private help, bug fixes, support, ports, new features
 | https://curl.se/support.html
--
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html