On Mon, Sep 3, 2012 at 4:20 AM, Erik Hesselink wrote:
> I think that the eventual situation should have per-package uploaders.
> It just seems to dangerous for anyone to be able to upload any
> package, especially heavily-used ones.
I think you underestimate the power of non-technical security
On Mon, Sep 3, 2012 at 12:50 PM, Mikhail Glushenkov
wrote:
> -It's just that I had a version using install already working. It'll
> take me a bit more time to make it use configure/build/register
> instead. I'm a bit busy right now, so this will have to wait until
> next week.
No problem. There's
Hi Johan,
On Mon, Sep 3, 2012 at 6:10 PM, Johan Tibell wrote:
>
> That's true. However, I don't think we should install dependencies at
> sandbox initialization time, but at build time and hence build will
> have to take configure flags.
Sure, this would work fine too.
>>> Andres might protest
On Mon, Sep 3, 2012 at 2:24 AM, Mikhail Glushenkov
wrote:
> OK. If we decide to make sandbox-init install the dependencies, it'll
> have to accept configure flags.
That's true. However, I don't think we should install dependencies at
sandbox initialization time, but at build time and hence build
On Mon, Sep 03, 2012 at 03:52:32PM +0100, Erik Hesselink wrote:
> On Mon, Sep 3, 2012 at 4:38 PM, Ross Paterson wrote:
> > In Hackage 1 packages can be deprecated, optionally indicating a
> > recommended replacement (the "deprecated" and "superseded by" fields of
> > the per-package "tags" file),
On Mon, Sep 3, 2012 at 4:38 PM, Ross Paterson wrote:
> In Hackage 1 packages can be deprecated, optionally indicating a
> recommended replacement (the "deprecated" and "superseded by" fields of
> the per-package "tags" file), e.g. partial-lens and binary-strict-0.3.1.
> These don't seem to be in H
A few minor issues:
In Hackage 1 packages can be deprecated, optionally indicating a
recommended replacement (the "deprecated" and "superseded by" fields of
the per-package "tags" file), e.g. partial-lens and binary-strict-0.3.1.
These don't seem to be in Hackage 2.
Several packages lack document
Hi Johan,
On Mon, Sep 3, 2012 at 2:04 AM, Johan Tibell wrote:
>
> In general lets just have sandboxes behave exactly as non-sandbox
> builds, with the exception of the separate package DB and rebuilding
> add-source deps, for now. This will get something useful into users'
> hands quicker.
OK. I
On Sat, Sep 1, 2012 at 5:10 PM, Ian Lynagh wrote:
> On Fri, Aug 31, 2012 at 01:57:55AM +0100, Ian Lynagh wrote:
>>
>> On Thu, Aug 30, 2012 at 08:13:01PM -0400, Leon Smith wrote:
>> > Ok, I tried to upload the most recent version of postgresql-simple, and I
>> > couldn't because I'm not the mainta
