Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-26 Thread Uwe Kleine-König
Hello Raphael, On 05/24/2017 09:46 PM, Raphael Hertzog wrote: > On Wed, 24 May 2017, Uwe Kleine-König wrote: >> With my model that would be: >> >> - sid/testing has both, latest version and latest LTS (including >>security) >> - jessie-backports strictly follows django-lts and so shouldn't

[Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-26 Thread Debian FTP Masters
Signature for changes file was already seen at 2017-05-20 15:05:48.551935. Please refresh the signature of the changes file if you want to upload it again. === Please feel free to respond to this email if you don't understand why your files were rejected, or if you upload new files which

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-25 Thread Ian Campbell
On Thu, 2017-05-25 at 17:41 +1000, Brian May wrote: > Ian Campbell writes: > > > Yet 1.10.x is going to be in Stretch, according to [0]? If users > > want > > LTS then why aren't we shipping that in our upcoming stable release > > (whether its instead of or in addition to the

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-25 Thread Adrian Bunk
On Thu, May 25, 2017 at 05:41:39PM +1000, Brian May wrote: > Ian Campbell writes: > > > Yet 1.10.x is going to be in Stretch, according to [0]? If users want > > LTS then why aren't we shipping that in our upcoming stable release > > (whether its instead of or in addition to the

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-25 Thread Brian May
Ian Campbell writes: > Yet 1.10.x is going to be in Stretch, according to [0]? If users want > LTS then why aren't we shipping that in our upcoming stable release > (whether its instead of or in addition to the latest release)? In general the Django LTS releases occur after on

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Russ Allbery
Jan Ingvoldstad writes: > As a Debian user, I have learned not to use backports for anything > important because, let's face it, I'm *toast* if I do so. > I have griped about the backports security policy years ago, and others > have, too, but you and Alexander shoot any

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
On Wed, 24 May 2017, Uwe Kleine-König wrote: > With my model that would be: > > - sid/testing has both, latest version and latest LTS (including >security) > - jessie-backports strictly follows django-lts and so shouldn't be >much of a headache. - $stable has both - $oldstable has

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Uwe Kleine-König
Hello Raphael, On 05/24/2017 09:15 PM, Raphael Hertzog wrote: > On Wed, 24 May 2017, Uwe Kleine-König wrote: >> An alternative idea would be to have two separate (source) packages in >> sid: django and django-lts. Then django-lts could be put into backports >> and so maintained according to the

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
Hello, On Wed, 24 May 2017, Uwe Kleine-König wrote: > An alternative idea would be to have two separate (source) packages in > sid: django and django-lts. Then django-lts could be put into backports > and so maintained according to the backport policy. I don't really like the idea of a separate

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
On Wed, 24 May 2017, Rhonda D'Vine wrote: > > Then we have similar issues as the ones raised by Raphael, where the life > > of the package maintainer is made difficult. > > He actively chose to ignore the guidelines, and actively chose to not > communicate about that. That's very disappointing,

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Thorsten Glaser
On Wed, 24 May 2017, Alexander Wirt wrote: > The policy is pretty clear. Backporting 1.10 and backport the other packages > too. > > It is maybe a problem and maybe we should get the policy changed - I > personally don't think too. I don't wan't software that isn't in testing in > backports - but

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Jan Ingvoldstad
On Wed, May 24, 2017 at 1:12 PM, Rhonda D'Vine wrote: > * Jan Ingvoldstad [2017-05-24 12:02:18 CEST]: > > On Wed, May 24, 2017 at 11:54 AM, Rhonda D'Vine wrote: > > > * Jan Ingvoldstad [2017-05-24 11:37:49 CEST]: > > > >

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Ian Campbell
On Wed, 2017-05-24 at 12:53 +0200, Raphael Hertzog wrote: > On Wed, 24 May 2017, Holger Levsen wrote: > > On Wed, May 24, 2017 at 12:32:13PM +0200, Raphael Hertzog wrote: > > > Right now, I'm maintaining 1.8.x in jessie-backports, we have > > > 1.10.x in > > > stretch. If I disappear and nobody

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Jan Ingvoldstad
On Wed, May 24, 2017 at 1:34 PM, Adrian Bunk wrote: > On Wed, May 24, 2017 at 01:00:41PM +0200, Raphael Hertzog wrote: > > On Wed, 24 May 2017, Adrian Bunk wrote: > >... > > > Imagine someone else would have done the python-django backport, > > > and would upload 1.10 to

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Adrian Bunk
On Wed, May 24, 2017 at 01:00:41PM +0200, Raphael Hertzog wrote: > On Wed, 24 May 2017, Adrian Bunk wrote: >... > > Imagine someone else would have done the python-django backport, > > and would upload 1.10 to jessie-backports today. > > What would you as user do? > > You are again diverting the

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Rhonda D'Vine
* Raphael Hertzog [2017-05-24 13:00:41 CEST]: > On Wed, 24 May 2017, Adrian Bunk wrote: > > If the person who did two years ago the jessie backport of a package > > used by DSA retired from Debian a year ago or is one of the many MIA > > developers, how are the machines

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
On Wed, 24 May 2017, Ian Campbell wrote: > Yet 1.10.x is going to be in Stretch, according to [0]? If users want > LTS then why aren't we shipping that in our upcoming stable release > (whether its instead of or in addition to the latest release)? Because of miscommunication between the Django

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Rhonda D'Vine
* Jan Ingvoldstad [2017-05-24 12:02:18 CEST]: > On Wed, May 24, 2017 at 11:54 AM, Rhonda D'Vine wrote: > > * Jan Ingvoldstad [2017-05-24 11:37:49 CEST]: > > > Basically: if you need security updates, don't rely on backports, don't > > put >

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
On Wed, 24 May 2017, Adrian Bunk wrote: > > This is because backports maintainers are expected to keep the packages > > they upload there as secure. > > "are expected" != "are actually doing" > > > If the rules are not allowing us to do that, then the rules are bad. > > The biggest general

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
On Wed, 24 May 2017, Holger Levsen wrote: > On Wed, May 24, 2017 at 12:32:13PM +0200, Raphael Hertzog wrote: > > Right now, I'm maintaining 1.8.x in jessie-backports, we have 1.10.x in > > stretch. If I disappear and nobody else is willing to maintain 1.8.x, you > > can just backport 1.10.x from

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Adrian Bunk
On Wed, May 24, 2017 at 11:55:45AM +0200, Raphael Hertzog wrote: > On Wed, 24 May 2017, Jan Ingvoldstad wrote: > > Basically: if you need security updates, don't rely on backports, don't put > > things in backports. The backport policy is incompatible with keeping > > systems up-to-date and

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Holger Levsen
On Wed, May 24, 2017 at 12:32:13PM +0200, Raphael Hertzog wrote: > Right now, I'm maintaining 1.8.x in jessie-backports, we have 1.10.x in > stretch. If I disappear and nobody else is willing to maintain 1.8.x, you > can just backport 1.10.x from stretch into jessie-backports and you will > be

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Holger Levsen
Dear Raphael, what I miss in your reactions here is an apology for not discussing this with the backports admins before uploading those backports. (And the point is *not* to apologize but rather to acknowledge that this was the wrong cause of action.) Of course rules might have flaws and should

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
On Wed, 24 May 2017, Adrian Bunk wrote: > This part of the policy continues with: > > If your package had a security update you can upload a new backport > even if its not yet in testing. If you have good reasons to update a > package which is already is in backports with a newer version

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
Hi, I'm ignoring the personal attack and threats of ACL removal because that does not bring the discussion further, but I want to highlight that you could have avoided this, I have not said anything bad about your work, I'm just discussing the policy. On Wed, 24 May 2017, Rhonda D'Vine wrote: >

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Adrian Bunk
On Wed, May 24, 2017 at 11:40:54AM +0200, Raphael Hertzog wrote: > On Wed, 24 May 2017, Adrian Bunk wrote: > > The maintainer of the python-django backport not acting according to > > policy is what started this discussion. > > Let's speak of the policy. It says this: > > To guarantee an upgrade

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Rhonda D'Vine
* Jan Ingvoldstad [2017-05-24 11:37:49 CEST]: > Basically: if you need security updates, don't rely on backports, don't put > things in backports. The backport policy is incompatible with keeping > systems up-to-date and secure. That's a highly unfair statement. The

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Rhonda D'Vine
Hi, * Raphael Hertzog [2017-05-24 10:25:19 CEST]: > On Wed, 24 May 2017, Alexander Wirt wrote: > > It is maybe a problem and maybe we should get the policy changed - I > > personally don't think too. I don't wan't software that isn't in testing in > > backports - but

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
On Wed, 24 May 2017, Adrian Bunk wrote: > The maintainer of the python-django backport not acting according to > policy is what started this discussion. Let's speak of the policy. It says this: > To guarantee an upgrade path from stable+backports to the next stable, the > package should be in

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Jan Ingvoldstad
On Wed, May 24, 2017 at 11:17 AM, Adrian Bunk wrote: > On Wed, May 24, 2017 at 11:01:41AM +0200, Raphael Hertzog wrote: > > On Wed, 24 May 2017, Adrian Bunk wrote: > > > What is the minimum amount of technical checking that has to be in > place > > > before something like this

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Adrian Bunk
On Wed, May 24, 2017 at 11:01:41AM +0200, Raphael Hertzog wrote: > On Wed, 24 May 2017, Adrian Bunk wrote: > > What is the minimum amount of technical checking that has to be in place > > before something like this could be done? > > For the backports team, none. For the maintainer, he must know

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
On Wed, 24 May 2017, Adrian Bunk wrote: > What is the minimum amount of technical checking that has to be in place > before something like this could be done? For the backports team, none. For the maintainer, he must know this policy and act accordingly. If someone reports that it does not

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Adrian Bunk
On Wed, May 24, 2017 at 10:25:19AM +0200, Raphael Hertzog wrote: > On Wed, 24 May 2017, Alexander Wirt wrote: > > It is maybe a problem and maybe we should get the policy changed - I > > personally don't think too. I don't wan't software that isn't in testing in > > backports - but doing it

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Alexander Wirt
On Wed, 24 May 2017, Raphael Hertzog wrote: > On Wed, 24 May 2017, Alexander Wirt wrote: > > It is maybe a problem and maybe we should get the policy changed - I > > personally don't think too. I don't wan't software that isn't in testing in > > backports - but doing it behinds our back is not an

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-24 Thread Raphael Hertzog
On Wed, 24 May 2017, Alexander Wirt wrote: > It is maybe a problem and maybe we should get the policy changed - I > personally don't think too. I don't wan't software that isn't in testing in > backports - but doing it behinds our back is not an option. How do we fix the policy then?

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-23 Thread Alexander Wirt
On Tue, 23 May 2017, Scott Kitterman wrote: > > > On May 23, 2017 5:28:04 PM EDT, Alexander Wirt wrote: > >On Tue, 23 May 2017, Raphael Hertzog wrote: > > > >> (please cc me on answers) > >> > >> On Tue, 23 May 2017, Debian FTP Masters wrote: > >> > please take the

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-23 Thread Scott Kitterman
On May 23, 2017 5:28:04 PM EDT, Alexander Wirt wrote: >On Tue, 23 May 2017, Raphael Hertzog wrote: > >> (please cc me on answers) >> >> On Tue, 23 May 2017, Debian FTP Masters wrote: >> > please take the version from testing, not a version that never was >in the archive

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-23 Thread Alexander Wirt
On Tue, 23 May 2017, Raphael Hertzog wrote: > (please cc me on answers) > > On Tue, 23 May 2017, Debian FTP Masters wrote: > > please take the version from testing, not a version that never was in the > > archive > > I have been maintaining the 1.8.x LTS version of Django in jessie-backports

Re: [Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-23 Thread Raphael Hertzog
(please cc me on answers) On Tue, 23 May 2017, Debian FTP Masters wrote: > please take the version from testing, not a version that never was in the > archive I have been maintaining the 1.8.x LTS version of Django in jessie-backports since December 2015. Except the very first, none of the

[Python-modules-team] python-django_1.8.18-1~bpo8+1_amd64.changes REJECTED

2017-05-23 Thread Debian FTP Masters
please take the version from testing, not a version that never was in the archive === Please feel free to respond to this email if you don't understand why your files were rejected, or if you upload new files which address our concerns. ___