-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Thu, 2017-10-12 at 17:34 -0700, Adam Williamson wrote: > There are currently separate updates for nss 3.33.0 and nspr 4.17.0 > in > both Fedora 26 and 27. However, nss 3.33.0 requires nspr 4.17.0. > > As a reminder, this is a violation of the Updates Policy: > > https://fedoraproject.org/wiki/Updates_Policy#Updating_inter-dependen > t_packages > > "When one updated package requires another (or more than one other), > the packages should be submitted together as a single update." The problem I face myself is when update requires new packages. And in that case what kind of "type" should I choose? enhancement or newpackage? > > The problem with doing things this way is that, if the nss update > happened to be pushed stable before the nspr update (which could > easily > happen due to human error, network issues etc. even if the maintainer > *intends* to push them together!), the dependencies in the stable > repository will be broken; nss will not be installable. > > In this case there's an even worse consequence; if you do attempt to > update to nss 3.33.0 without nspr 4.17.0 dnf will 'skip' *most* of > the > nss packages (as it notices that they are missing dependencies), but > it > *will* install nss-softokn-freebl . With this mix of packages (most > of > nss at 3.32.0, but nss-softokn-freebl at 3.33.0), nss and anything > that > depends on it just fails to work at all - e.g. curl and dnf...so > that's > an extremely bad outcome. > > If both packages are in a single update, we cannot run into this > problem; either both packages get pushed stable or neither does. That > is why updates to interdependent packages should *always* be grouped > together. Please remember this, package maintainers. Thanks! > > (note: this issue was caught by openQA, which tests individual > updates > from updates-testing, rather than enabling the repository wholesale, > so > it catches things like this.) > -- > Adam Williamson > Fedora QA Community Monkey > IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . > net > http://www.happyassassin.net > _______________________________________________ > devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx - -- - -Igor Gnatenko -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhLFO09aHZVqO+CM6aVcUvRu8X0wFAlngWlkACgkQaVcUvRu8 X0yx+RAAqecZPJyN1NrGnFwvT8WmRxTed4oP0dsfzz7mdvuuQKDcJClx7y4BxfP7 rQYy4xQwa7rbLRPMd86mnS69VQ+fm1cQp0VzunAqnCAI4+4Ra1BrTmDo+lp8rq9x W0qxQuK+rbUxPv8P45w8HxZQNLT/xUtgEnPTG5eZBHzBmB05iIxS9Um8gvcoSkgQ x7hm5f6qGIGsQO7QoG8YguLl9Me/6CWnza3ucBkUSVAQlgkJn3J3lKHP5cMSsfEz Y1toLL5zsCHrngiJNq38DBzTTarpryzsWYpen2Z95FOnQ3/8LqxaEukSe2PTp5Ka IYuAUnayRlR2l3JXFmSYNm7s+nKKRt+Uls37YvrZQEfoxDFoGZOl36WT8vEHwBQd BByeG1n61V0Xu5DlgdVPIFRvFcw/tP8D8BY46nfvCLMBeYozDew9WOWr8ZGFhk/L yfVufslG7w/d37e10ORWezyxVJDc6GtoXzkwcPJVIYCk8+ShfRZxsbtWnFbOPNy7 mmqqRpPEJLoNPN6YWhmFjdgXZPVNd2viIGf4ww5XRlO0LX6h7bRCHpj2h22fEM7o fKAR6lu5uVJUcgRxOfGKHH67qcZby9mgpEtrbqaOTc+4pMHIcvrIZ4MdUQxsU8Hu lR/4KoFGwb+QQF1CE62Jzl4759nGaoWMKXLepHK8VwRZZAufOOE= =SZdk -----END PGP SIGNATURE----- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
