July 2023 - cabal-devel

20/07/2023 Cabal meeting minutes
by Theophile Hécate Choutri 20 Jul '23

20 Jul '23

Hi everyone You will find below the minutes of the Cabal meeting that was held on the 20/07/2023. This meeting occurs every two weeks and is absolutely open to developers, newcomers and stakeholders. Do contact the dev team if you want an invitation to the event. --- # 3.10 backports * https://github.com/haskell/cabal/pull/9141 * https://github.com/haskell/cabal/pull/9088 ## Future work wishlist Gershom would like to have an override of cabal.project imports. There are many code paths that are not always entirely lined up. Hécate would like to refactor some of the code paths that live independently of each-other, do the same things, but output different observable results when called the same way. The typical case is one code path living in lib:Cabal, another living in cabal-install, and they could be factored. # Current progress Francesco A. is looking at #7544, to see whether it fits `cabal check` needs. Kristen is reviewing https://github.com/haskell/cabal/pull/9134 Suganya is waiting for #9018 to be merged and working in parallel to typify other errors. Good job Suganya! We discussed the relationship between GHC 9.8 and the accompanying Cabal release. Ben suggested that the Cabal release could be a minor release. However, given that in 9.8 we have `jsem` which requires Cabal support, it seems appropriate for this to be a major release (Cabal-3.12). Hecate agreed. We will try to have a major release branch for GHC 9.8 alpha 3 in late August Ben enquired about the "inplace" flag and its semantics, related to a bug encountered during GHC development: https://gitlab.haskell.org/ghc/ghc/-/issues/23594

1 0

Fwd: Cabal/ | Repository mirroring paused
by Mikolaj Konarski 11 Jul '23

11 Jul '23

Hello, Any idea what this is about? I guess the mirror of cabal's github repo on gitlab? Did anything change there? Cheers, Mikolaj ---------- Forwarded message --------- From: GitLab <gitlab(a)gitlab.haskell.org> Date: Tue, Jul 4, 2023 at 11:11 PM Subject: Cabal/ | Repository mirroring paused To: <mikolaj.konarski(a)gmail.com> Repository mirroring on haskell/cabal has been paused due to too many failures. The last failure was: 13:updating ref with hooks: running pre-receive hooks: GitLab: You are not allowed to push code to protected branches on this project.. To resume mirroring update your repository mirroring settings. —

3 6

A pure Matrix room for Hackage/Cabal
by Artem Pelenitsyn 03 Jul '23

03 Jul '23

Dear Hackage/Cabal devs, geekosaur created a purely Matrix room for us and shared the admin bit with me: https://matrix.to/#/#hackage:matrix.org We'd be happy to share more and have you there, at the least! This is prompted by the announcement earlier today: https://libera.chat/news/matrix-deportalling tldr; is that the "portal mode" where you can participate in an IRC-first room from Matrix transparently will be decommissioned by the end of the month. Other options are on the table. E.g. I think @fgaz is researching the "plumbing mode" where you have a pure-Matrix room with a connection to a IRC-native room like #hackage(a)libera.chat, but I don't know enough about it. As far as I understand, this new room I'm announcing here does not close any doors. Personally, I'd hope that we all just move to Matrix and forget the IRC horror where we suggest newcomers to use a paid (!!!) solution like IRCCloud if they want to address a question to Cabal devs (who only hang out on IRC) and have a better than 1970s-experience (and a mobile client). -- Kind regards, Artem

1 0

Fwd: Cabal security advisory proposal
by Theophile Hécate Choutri 02 Jul '23

02 Jul '23

Hi everyone, We have received another proposal regarding the Sovereign Tech Fund grants. I'd be happy to spend some time on Thursday to make sure we're on the same page. In the meantime, please do not hesitate to provide feedback. Cheers, Hécate ---------- Forwarded message --------- From: Trevis Elser <trevis(a)flipstone.com> Date: Sun, 2 Jul 2023 at 17:27 Subject: Cabal security advisory proposal To: hecate(a)haskell.foundation <hecate(a)haskell.foundation> Hi there! You may have heard the German government is accepting proposals to work on OSS (https://sovereigntechfund.de/en/challenges/) I'm working on putting together a submission for my employer, Flipstone, to add a cabal feature allowing a check of dependencies against the new security advisories database. @David Thrane Christiansen Suggested reaching out to you to get any suggestions in submitting this and to see if you might have anything for us to add particularly to the section that is as follows: "Describe your relationship to the maintainers of this technology. Are you yourself the maintainer? Do they know you plan to do this work and do they support it? Please tell us more about how you obtained their support and how you plan to work together to make sure your contributions are accepted." For what it's worth my thought is that we'd use the external command functionality that I've seen you've contributed to at https://github.com/haskell/cabal/pull/9063 to at least initially build this out and then perhaps work to get it merged or not. Finally, I'd love to hear if you have thoughts on accurately representing cabal for the questions: "How are decisions regarding this technology's development made? Please describe the project's governance model." and "How does this project handle security risks? Are there policies, procedures, or tools in place to minimize the introduction of vulnerabilities or undesired contributions?" Thanks so much for your time! -- Trevis Elser | Chair Stability Working Group | Software Engineer

1 0