| *** tkajinam is now known as Guest5435 | 07:14 | |
| *** Guest5435 is now known as tkajinam | 07:36 | |
| fungi | vishalmanchanda: amotoki: do you know if e0ne is still the primary point of contact for horizon security vulnerabilities, as indicated at https://wiki.openstack.org/wiki/CrossProjectLiaisons#Vulnerability_management ? | 12:12 |
|---|---|---|
| fungi | also https://launchpad.net/~horizon-coresec/+members seems to list a lot of people who, i get the impression, are no longer active in horizon (except maybe amotoki) | 12:12 |
| amotoki | fungi: thanks for raising it. e0ne is no longer active in horizon and we also need to update the list. | 12:17 |
| amotoki | fungi: perhaps the list needs to be updated to match the active current horizon cores | 12:17 |
| amotoki | fungi: I will raise this topic to the team meeting tomorrow and update the list accordingly. | 12:18 |
| vishalmanchanda | fungi: thanks, ack. | 12:19 |
| amotoki | fungi: I think we need a new primary contact for horizon sec issues. Where is the primary contact defined? | 12:19 |
| fungi | amotoki: in that wiki article i linked | 12:21 |
| fungi | also please take a look at https://launchpad.net/horizon/+bugs?field.information_type%3Alist=PRIVATESECURITY when you have time | 12:21 |
| amotoki | fungi: thanks. | 12:23 |
| amotoki | fungi: I am aware of a bug you linked. perhaps I can look into it tomorrow (it is already at night here) | 12:23 |
| fungi | thanks, there's no rush, the reporter was just hoping for an update | 12:24 |
| coreycb | hi all, is any work in progress to get to django 4.x? | 12:43 |
| coreycb | amotoki: ^ | 12:43 |
| amotoki | coreycb: I think the only work is what zigo proposed. horizon team does not focus on non-LTS versions of Django, so djnago 4.0 support really depends on best effort | 12:45 |
| zigo | FYI, as much as I can see, Horizon now works with 4.0, so nothing to worry about. I'll do more tests with Zed, and we'll be good ... | 12:45 |
| coreycb | zigo: ok thanks. are those all up for review or did they get merged. I hit a "KeyError: 'collectstatic'" building from the tip of master yesterday. | 12:50 |
| coreycb | zigo: amotoki: I've put up some django 4.x changes up as well - https://review.opendev.org/q/owner:corey.bryant%2540canonical.com | 20:33 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!