Hi,

I have tried to contact the package maintaner for the arch linux packages and haven't gotten any
answers yet.
The archlinux@sr.ht addresse listed in the packages bounces, and the person I have previously
interacted with regarding sourcehut related packages has not answered and I am not even sure if they
really are the maintainer or if it was just for the python dependencies.

Here's the message I sent:

> Hi,
>
> Over a month ago now, a message was sent out warning about a
> vulnerability in git.sr.ht and hg.sr.ht. It was recommended to upgrade
> the packages to respectively 0.83.5 and 0.32.3. Since then there has
> been no new version of the package though, and now the python
> dependencies have een moved to python 3.11 wich breaks most of
> sourcehut.
> Would it be possible to update all the sr.ht packages please. (All the
> one which have new versions at least)
>
> Respectfully,
> Nicolai Dagestad

Are there any issues preventing the upgrade I don't know about and that need to be resolved for the
packages to be updated ?

Thanks,
Nicolai Dagestad

Hey,

On 5/28/23 14:01, Nicolai Dagestad wrote:
> Hi,
> 
> I have tried to contact the package maintaner for the arch linux packages and haven't gotten any
> answers yet.
> The archlinux@sr.ht addresse listed in the packages bounces, and the person I have previously
> interacted with regarding sourcehut related packages has not answered and I am not even sure if they
> really are the maintainer or if it was just for the python dependencies.

That address is currently not set up, I guess it would make sense to do 
so, but that's a decision that Drew would ultimately have to make. 
AFAIK, Eli Schwartz is the maintainer of the Arch packages, both the 
actual sourcehut packages as well as the python packages needed in 
addition to what is available upstream. I think he's quite busy, but 
there is a branch `staging` in sr.ht-pkgbuilds where he commited the 
update to Python 3.11 ~two weeks ago. He also seems to be active on Github.

That's about all I can tell you, as the Arch packages are not an 
official SourceHut thing, it's basically just Eli as a volunteer. I too 
have occasionally not heard from him for a while, but that's just the 
way things are in FOSS sometimes... :)

Hope that helps,
Conrad

On Tue May 30, 2023 at 4:09 PM CEST, Conrad Hoffmann wrote:
> Hey,
>
> That address is currently not set up, I guess it would make sense to do 
> so, but that's a decision that Drew would ultimately have to make. 
> AFAIK, Eli Schwartz is the maintainer of the Arch packages, both the 
> actual sourcehut packages as well as the python packages needed in 
> addition to what is available upstream. I think he's quite busy, but 
> there is a branch `staging` in sr.ht-pkgbuilds where he commited the 
> update to Python 3.11 ~two weeks ago. He also seems to be active on Github.
>
> That's about all I can tell you, as the Arch packages are not an 
> official SourceHut thing, it's basically just Eli as a volunteer. I too 
> have occasionally not heard from him for a while, but that's just the 
> way things are in FOSS sometimes... :)
>
> Hope that helps,
> Conrad

Thanks for the reply, he actually answered during the weekend and I forgot to 
follow up here about it. The updates will come eventually, I just wanted to be 
sure somebody was aware of the issue.

Like I told him, I can wait 👍

Didn't know about the staging branch though, so I might try to build from there to 
have somwhere to sync my repos until the pseudofficial arch packages are realeased 🙃

Thanks for the work everybody is putting into sourcehut and more generally the 
sourcehut extended universe (including names, search and all the other cool projects in 
the work) it's very nice!

Nicolai

The maintainer is Eli Schwartz <eschwartz@archlinux.org>. The packages
should probably be signed with his key and should use his email address.
Added to Cc.