On Mon, Jan 23, 2023 at 11:08:39AM -0500, Travis Sidelinger wrote: > Thanks Petr. > > I was able to find the package at that location, download them, and build a > local repo. > <https://koji.fedoraproject.org/koji/packageinfo?packageID=4106>. > > So why are older package versions being removed? Why not keep them? > Yum/rpm can handle that quite well. There's 3 big reasons: 1. Including everyhing would make updates repos really really big and cause problems for our mirror network. 2. Our tooling. Updates repos aren't 'added to', they are created completely with every push. Our buildsystem has no concept of 'newer' or 'older' only whats tagged into a tag and what order it's tagged. So, to include the previous version we would have to rework how our tools work. 3. There has been reistance in the past to including old versions because they may well be insecure/have serious bugs. If you then get someone to downgrade to that version they become vulnerable or hit the big bug. In short, it's just not easy... but perhaps we will revisit it someday. kevin
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ packaging mailing list -- packaging@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to packaging-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/packaging@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
