denials to patch make_release so that it sets the eg_version var on the upgrade scripts: Done via 367f0ad2b9 and 2e10326b
GSoC reports
[placeholder]
Security release process post-mortem
The good
We found and fixed security holes. Thanks to folks like dbwells and miker for actually providing code to fix the security problems!
The not-so-good
I (dbs) for one felt completely exhausted going through the last round of security releases - and the concurrent cold/flu I was working through was just one small part of that.
The biggest problem is that it felt like berick and I were going through the bulk of the QA effort ourselves - that is, the actual testing of the install & upgrade processes on different distros. Which is a huge problem from the potential for burnout, fatigue, overlooking gotchas and mistakes, etc. We collectively have to take the security fixes all the way to the finish line by testing & documenting & wrapping it up in coherent releases.
If we're going to do closed security releases, more members of the dev/security team need to participate than just the release maintainers, as we're not able to follow the normal community process of getting feedback on betas/RCs/release announcements/upgrade documentation/automated testing platforms etc. It should *not* be the role of the release maintainer to also do all of the distro testing.
Release info
OpenSRF
[placeholder]
Evergreen
Ancient version of Dojo
What is the plan for merging Joseph Lewis' work? Moving up to 1.6 would be better than being stuck at 1.3.
If we want the development community to grow, shouldn't we be prioritizing getting efforts from new contributors into the actual codebase? If that means taking things the last mile with testing and polishing, core dev team members need to step up for that.
New proposal: Only support server editions
Development community intends to support the server editions (rather than desktop, ARM, etc.) of given Linux distributions.
Switch focus to testing and support for specific server images.
If community members are passionate about a particular distro, we need them to step up and provide ongoing support: Makefile_DISTRO.install, docs, testing, and participation on the mailing lists.
When last we talked about what bug fixes we could merge for QueryParser & the driver, eeevil pointed at working/user/miker/QP-for-2-3 - but that has a problem: the unit test for QueryParser is failing rather miserably (run "prove -l lib t/21-QueryParser.t" to see)
Would it be possible for the people working in that area to agree on what the expected output should be and fix up the test accordingly?
Continuing hack-a-way efforts towards more testable code
1066888 Expand and modularize concerto test data set
1066329 Add is_tt2() like is_json() to database, constraint on atevdef.template
1066226 More tests: Perl-Critic and TT2 template parsing
Any progress on the litmus-like documented manual test cases?
Ripping out JSPAC
There are still some rumblings of discontent about killing off JSPAC until there's absolutely no loss of features
Assuming that there are no dev team members that actually want to maintain JSPAC in 2.4, this might be another area to focus on.