| Time |
Nick |
Message |
| 05:05 |
|
Bmagic joined #evergreen |
| 05:05 |
|
dickreckard joined #evergreen |
| 05:05 |
|
mnsri_away joined #evergreen |
| 05:06 |
|
gmcharlt joined #evergreen |
| 05:06 |
|
phasefx_ joined #evergreen |
| 05:07 |
|
JBoyer joined #evergreen |
| 05:07 |
|
rashma_away joined #evergreen |
| 05:10 |
|
dbs joined #evergreen |
| 05:10 |
|
berick joined #evergreen |
| 05:55 |
|
remingtron_ joined #evergreen |
| 06:00 |
pinesol |
News from qatests: Testing Success <http://testing.evergreen-ils.org/~live> |
| 07:12 |
|
rjackson_isl joined #evergreen |
| 07:19 |
|
rfrasur joined #evergreen |
| 08:41 |
|
mmorgan joined #evergreen |
| 08:42 |
|
alynn26 joined #evergreen |
| 08:51 |
|
mantis1 joined #evergreen |
| 09:05 |
|
dbwells joined #evergreen |
| 09:15 |
|
sandbergja_ joined #evergreen |
| 09:15 |
|
yboston joined #evergreen |
| 09:22 |
|
jvwoolf joined #evergreen |
| 09:30 |
|
Dyrcona joined #evergreen |
| 10:05 |
|
mmorgan1 joined #evergreen |
| 10:30 |
|
mmorgan joined #evergreen |
| 10:39 |
|
sandbergja_ joined #evergreen |
| 11:02 |
|
mmorgan1 joined #evergreen |
| 11:33 |
|
Christineb joined #evergreen |
| 11:39 |
Dyrcona |
Can we *all* just stop using npm already? https://www.zdnet.com/article/npm-team-warns-of-new-binary-planting-bug/ |
| 11:48 |
|
mmorgan joined #evergreen |
| 12:15 |
|
jihpringle joined #evergreen |
| 12:31 |
|
khuckins joined #evergreen |
| 13:55 |
dbs |
Dyrcona: unfortunately, it seems unlikely :/ |
| 14:17 |
|
khuckins joined #evergreen |
| 14:26 |
jeffdavis |
As much as I dislike npm, I don't know if it's substantially worse on security etc than any other tools/libraries that we use. |
| 14:27 |
Dyrcona |
I think it is worse than apt, but I have little proof. There's a real problem of trust, and I trust npm much less than I do apt. |
| 14:28 |
Dyrcona |
Also, I think I understand why chromium and firefox were added to the distro *-developer Makefile.install targets, but I'm not so sure I like that, either. If I'm installing via git in production, which I do, and I'm not gonna run tests, those packages are dead weight. |
| 14:29 |
Dyrcona |
Not to mention all of the dependencies on those packages. |
| 14:30 |
Dyrcona |
I guess that's yet-another-local-patch-branch to maintain..... |
| 14:37 |
Dyrcona |
I thought we jumped to Node v12 lately? Is that just in master? |
| 14:37 |
berick |
just master |
| 14:37 |
berick |
for ang8 |
| 14:37 |
Dyrcona |
berick++ # I was just about to compare 3.4.1 and master. |
| 14:41 |
Dyrcona |
Am I right that upgrading npm breaks the Evergreen install process? |
| 14:41 |
jeffdavis |
The browsers were added because they were the best alternative for running tests. There was some discussion about separating out a -tester target but you want devs to run tests; maybe there should be a -developer-minimal target or something instead to allow installing from git without the test stuff. |
| 14:43 |
Dyrcona |
jeffdavis: Yes, that's my understanding, and I didn't say much during the discussion. I'm not sure that I want a new dependency target, so I'll live with it for now. |
| 14:44 |
Dyrcona |
Hmm... could be a *-git target that is made a requirement of the *-developer targets..... |
| 15:39 |
|
gerlevi joined #evergreen |
| 15:53 |
|
mantis1 left #evergreen |
| 15:58 |
|
jvwoolf joined #evergreen |
| 16:22 |
|
sandbergja_ joined #evergreen |
| 17:03 |
|
mmorgan left #evergreen |
| 18:00 |
pinesol |
News from qatests: Testing Success <http://testing.evergreen-ils.org/~live> |
| 22:13 |
|
cmalm joined #evergreen |
| 22:14 |
|
sandbergja_ joined #evergreen |
| 22:34 |
|
cmalm joined #evergreen |
| 22:55 |
|
cmalm joined #evergreen |
| 23:10 |
|
sandbergja_ joined #evergreen |
| 23:19 |
|
sandbergja_ joined #evergreen |
| 23:23 |
|
cmalm joined #evergreen |
| 23:30 |
|
cmalm joined #evergreen |
| 23:50 |
|
cmalm joined #evergreen |
