On Mon, Jan 28, 2019, at 2:39 PM, Jonas Meurer wrote:
Abhilash Raj:
On Sat, Jan 26, 2019, at 5:10 AM, Jonas Meurer wrote:
Hey Abhilash,
Thanks a lot for your work on mailman3!
Abhilash Raj:
I am very pleased to announce (a bit late) that Postorius 1.2.3 and MailmanClient 3.2.1 is now out.
The full set of changelog can be found in the documentation[1][2]. The most notable feature that I can think of is non-member management in Postorius.
New releases are available on PyPI[3][4].
For earlier releases, you provided GnuPG signature files to cryptographically verify that the release files were not tampered with.
I couldn't find such signature files for the two latest releases. Would you mind adding them? When packaging for Debian, I prefer to check the GnuPG signatures before uploading new releases. Also, the signature files get uploaded to the Debian archive as well so they can be checked by everybody. That way we can cryptographically proof that the Debian package is based on the original tarball that got packaged and signed by upstream.
Ah, sorry about that. I completely forgot about that.
I am not sure if I can upload signatures after uploading the tarballs, I'll try to find out if that is possible.
Thanks a lot, that would be awesome. I'll wait for it before doing the Debian package uploads.
If it is not possible to upload signatures, I'll bump up patch versions and push out new tarballs with signatures.
Just to let you know: we're close to soft freeze in Debian, so in order to get those uploads into the next stable release (Buster), they'll have to be uploaded rather soon.
Can you give a rough estimate on how long do we have before the freeze?
The same holds for other pending releases of Mailman3 components: Just in case you plan to do new upstream releases anytime soon, it's still possible to upload them to Debian in time for Buster.
I'll see if we can get other releases out too. Core doesn't yet have any backwards incompatible changes, so I might end up bumping minor version and doing a new release. Not sure much has changed in other components, but I can do a release if there are enough changes.
-- thanks, Abhilash Raj (maxking)