Postorius 1.2.3 and MailmanClient 3.2.1 is now out
Hi All,
I am very pleased to announce (a bit late) that Postorius 1.2.3 and MailmanClient 3.2.1 is now out.
The full set of changelog can be found in the documentation1. The most notable feature that I can think of is non-member management in Postorius.
New releases are available on PyPI3.
Thanks to all the contributors who made this release possible! :)
-- thanks, Abhilash Raj (maxking)
Hey Abhilash,
Thanks a lot for your work on mailman3!
Abhilash Raj:
I am very pleased to announce (a bit late) that Postorius 1.2.3 and MailmanClient 3.2.1 is now out.
The full set of changelog can be found in the documentation[1][2]. The most notable feature that I can think of is non-member management in Postorius.
New releases are available on PyPI[3][4].
For earlier releases, you provided GnuPG signature files to cryptographically verify that the release files were not tampered with.
I couldn't find such signature files for the two latest releases. Would you mind adding them? When packaging for Debian, I prefer to check the GnuPG signatures before uploading new releases. Also, the signature files get uploaded to the Debian archive as well so they can be checked by everybody. That way we can cryptographically proof that the Debian package is based on the original tarball that got packaged and signed by upstream.
Cheers jonas
On Sat, Jan 26, 2019, at 5:10 AM, Jonas Meurer wrote:
Hey Abhilash,
Thanks a lot for your work on mailman3!
Abhilash Raj:
I am very pleased to announce (a bit late) that Postorius 1.2.3 and MailmanClient 3.2.1 is now out.
The full set of changelog can be found in the documentation[1][2]. The most notable feature that I can think of is non-member management in Postorius.
New releases are available on PyPI[3][4].
For earlier releases, you provided GnuPG signature files to cryptographically verify that the release files were not tampered with.
I couldn't find such signature files for the two latest releases. Would you mind adding them? When packaging for Debian, I prefer to check the GnuPG signatures before uploading new releases. Also, the signature files get uploaded to the Debian archive as well so they can be checked by everybody. That way we can cryptographically proof that the Debian package is based on the original tarball that got packaged and signed by upstream.
Ah, sorry about that. I completely forgot about that.
I am not sure if I can upload signatures after uploading the tarballs, I'll try to find out if that is possible.
-- thanks, Abhilash Raj (maxking)
Abhilash Raj:
On Sat, Jan 26, 2019, at 5:10 AM, Jonas Meurer wrote:
Hey Abhilash,
Thanks a lot for your work on mailman3!
Abhilash Raj:
I am very pleased to announce (a bit late) that Postorius 1.2.3 and MailmanClient 3.2.1 is now out.
The full set of changelog can be found in the documentation[1][2]. The most notable feature that I can think of is non-member management in Postorius.
New releases are available on PyPI[3][4].
For earlier releases, you provided GnuPG signature files to cryptographically verify that the release files were not tampered with.
I couldn't find such signature files for the two latest releases. Would you mind adding them? When packaging for Debian, I prefer to check the GnuPG signatures before uploading new releases. Also, the signature files get uploaded to the Debian archive as well so they can be checked by everybody. That way we can cryptographically proof that the Debian package is based on the original tarball that got packaged and signed by upstream.
Ah, sorry about that. I completely forgot about that.
I am not sure if I can upload signatures after uploading the tarballs, I'll try to find out if that is possible.
Thanks a lot, that would be awesome. I'll wait for it before doing the Debian package uploads.
Just to let you know: we're close to soft freeze in Debian, so in order to get those uploads into the next stable release (Buster), they'll have to be uploaded rather soon.
The same holds for other pending releases of Mailman3 components: Just in case you plan to do new upstream releases anytime soon, it's still possible to upload them to Debian in time for Buster.
Cheers jonas
On Mon, Jan 28, 2019, at 2:39 PM, Jonas Meurer wrote:
Abhilash Raj:
On Sat, Jan 26, 2019, at 5:10 AM, Jonas Meurer wrote:
Hey Abhilash,
Thanks a lot for your work on mailman3!
Abhilash Raj:
I am very pleased to announce (a bit late) that Postorius 1.2.3 and MailmanClient 3.2.1 is now out.
The full set of changelog can be found in the documentation[1][2]. The most notable feature that I can think of is non-member management in Postorius.
New releases are available on PyPI[3][4].
For earlier releases, you provided GnuPG signature files to cryptographically verify that the release files were not tampered with.
I couldn't find such signature files for the two latest releases. Would you mind adding them? When packaging for Debian, I prefer to check the GnuPG signatures before uploading new releases. Also, the signature files get uploaded to the Debian archive as well so they can be checked by everybody. That way we can cryptographically proof that the Debian package is based on the original tarball that got packaged and signed by upstream.
Ah, sorry about that. I completely forgot about that.
I am not sure if I can upload signatures after uploading the tarballs, I'll try to find out if that is possible.
Thanks a lot, that would be awesome. I'll wait for it before doing the Debian package uploads.
If it is not possible to upload signatures, I'll bump up patch versions and push out new tarballs with signatures.
Just to let you know: we're close to soft freeze in Debian, so in order to get those uploads into the next stable release (Buster), they'll have to be uploaded rather soon.
Can you give a rough estimate on how long do we have before the freeze?
The same holds for other pending releases of Mailman3 components: Just in case you plan to do new upstream releases anytime soon, it's still possible to upload them to Debian in time for Buster.
I'll see if we can get other releases out too. Core doesn't yet have any backwards incompatible changes, so I might end up bumping minor version and doing a new release. Not sure much has changed in other components, but I can do a release if there are enough changes.
-- thanks, Abhilash Raj (maxking)
Abhilash Raj:
On Mon, Jan 28, 2019, at 2:39 PM, Jonas Meurer wrote:
Abhilash Raj:
On Sat, Jan 26, 2019, at 5:10 AM, Jonas Meurer wrote:
Hey Abhilash,
Thanks a lot for your work on mailman3!
Abhilash Raj:
I am very pleased to announce (a bit late) that Postorius 1.2.3 and MailmanClient 3.2.1 is now out.
The full set of changelog can be found in the documentation[1][2]. The most notable feature that I can think of is non-member management in Postorius.
New releases are available on PyPI[3][4].
For earlier releases, you provided GnuPG signature files to cryptographically verify that the release files were not tampered with.
I couldn't find such signature files for the two latest releases. Would you mind adding them? When packaging for Debian, I prefer to check the GnuPG signatures before uploading new releases. Also, the signature files get uploaded to the Debian archive as well so they can be checked by everybody. That way we can cryptographically proof that the Debian package is based on the original tarball that got packaged and signed by upstream.
Ah, sorry about that. I completely forgot about that.
I am not sure if I can upload signatures after uploading the tarballs, I'll try to find out if that is possible.
Thanks a lot, that would be awesome. I'll wait for it before doing the Debian package uploads.
If it is not possible to upload signatures, I'll bump up patch versions and push out new tarballs with signatures.
Perfect, thanks a lot!
Just to let you know: we're close to soft freeze in Debian, so in order to get those uploads into the next stable release (Buster), they'll have to be uploaded rather soon.
Can you give a rough estimate on how long do we have before the freeze?
See https://release.debian.org/buster/freeze_policy.html. For getting new releases into Buster, the full-freeze (2019-03-12) is relevant. Since packages per default take five days to transition from Unstable to Testing, 2019-03-06 would be the last day to upload. But given that we're all busy with other things and stuff, we better not calculate that tightly ;)
The same holds for other pending releases of Mailman3 components: Just in case you plan to do new upstream releases anytime soon, it's still possible to upload them to Debian in time for Buster.
I'll see if we can get other releases out too. Core doesn't yet have any backwards incompatible changes, so I might end up bumping minor version and doing a new release. Not sure much has changed in other components, but I can do a release if there are enough changes.
Sure, that would be awesome. Ideally after my recent merge requests got accepted ;)
Cheers jonas
Jonas Meurer:
Abhilash Raj:
On Mon, Jan 28, 2019, at 2:39 PM, Jonas Meurer wrote:
Abhilash Raj:
On Sat, Jan 26, 2019, at 5:10 AM, Jonas Meurer wrote:
Hey Abhilash,
Thanks a lot for your work on mailman3!
Abhilash Raj:
I am very pleased to announce (a bit late) that Postorius 1.2.3 and MailmanClient 3.2.1 is now out.
The full set of changelog can be found in the documentation[1][2]. The most notable feature that I can think of is non-member management in Postorius.
New releases are available on PyPI[3][4].
For earlier releases, you provided GnuPG signature files to cryptographically verify that the release files were not tampered with.
I couldn't find such signature files for the two latest releases. Would you mind adding them? When packaging for Debian, I prefer to check the GnuPG signatures before uploading new releases. Also, the signature files get uploaded to the Debian archive as well so they can be checked by everybody. That way we can cryptographically proof that the Debian package is based on the original tarball that got packaged and signed by upstream.
Ah, sorry about that. I completely forgot about that.
I am not sure if I can upload signatures after uploading the tarballs, I'll try to find out if that is possible.
Thanks a lot, that would be awesome. I'll wait for it before doing the Debian package uploads.
If it is not possible to upload signatures, I'll bump up patch versions and push out new tarballs with signatures.
Perfect, thanks a lot!
For the record: Abhilash released mailmanclient 3.2.2 and postorius 1.2.4 with tarball signatures in the meantime. Thanks a lot for doing this, Abhilash! Both are uploaded to Debian already.
Cheers jonas
participants (2)
-
Abhilash Raj -
Jonas Meurer