Re: CVS commit: pkgsrc/www/firefox

[Alistair Crooks <agc%pkgsrc.org@localhost>]

On Fri, Sep 20, 2013 at 09:03:22AM +0900, Ryo ONODERA wrote:
> Hi,
> 
> From: Alistair Crooks <agc%pkgsrc.org@localhost>, Date: Thu, 19 Sep 2013 
> 18:11:39 +0200
> 
> > On Thu, Sep 19, 2013 at 12:37:50PM +0000, Ryo ONODERA wrote:
> >> Module Name:       pkgsrc
> >> Committed By:      ryoon
> >> Date:              Thu Sep 19 12:37:50 UTC 2013
> >> 
> >> Log Message:
> >> [...]
> >> Update to 24.0, ESR edition.
> >> 
> >> * Merge some patches via FreeBSD ports.
> >> * Tested on NetBSD/amd64 6.99.23 and DragonFly/amd64 3.4.1.
> >> * Use system hunspell dictionaries.
> >> * DuckDuckGo search window.
> >> * Enable system icu support.
> > 
> > Well, thanks, but aren't we supposed to be concentrating on what's in
> > pkgsrc already, rather than upgrading packages, especially to a .0
> > version?
> > 
> > Yes, rhetorical, but I saw no discussion of this beforehand.
> > 
> > Please get approval in advance for any update to packages, so that the
> > changes don't get reverted.
> 
> Updating leaf package should be approved in advance?
> I have never heard such rule for frozen pkgsrc.

Well, we encourage people to ask in advance in general - and I would
have expected some mail before updating an important package like
this, 5 days into a freeze.

Now the reason we have freezes in general is to keep the
infrastructure steady and the main packages stable, and fix up around
that, where needed.  The branch is designed to last 3 months without
any updates needed, except where necessary for security reasons.  If
something went way wrong with this package - not that it will, but
just hypothetically - we'd have to update on the branch - not
something I'd like to do.

As developers, we have to take a decision about whether to upgrade a
package or not.  I see the leaf/non-leaf part is guidance, not a hard
and fast rule.  We also ask people to ask in advance if they're
unsure.  Obviously you're sure - equally some others see some risk in
upgrading.

Now it may be that this is all fine, and that's great - but there is
some risk attached, hence my mail.

Regards,
Alistair