| timplunkett (he/him) |
#3300061: [policy, no patch] Determine Composer validation rules for installing through Composer |
| timplunkett (he/him) |
@chrisfromredfin I assigned it to you for now |
| chrisfromredfin |
Will look at this asap but next week at the latest. |
| chrisfromredfin |
Only Drupal modules and themes are that secure according to drupal.org Update XML will be allowed to have there [sic] version affected during an update.Remind me are we talking secure by project "opted into security coverage" or by release "do not allow from 1.1 to 1.2 if 1.2 is not secure" or more like "do not allow from 1.9 to 2.0 if 2.0 is not secure" |
| chrisfromredfin |
I think I'm reading this that it's per-release: The security advisory coverage for the release. If covered, with a covered="1" attribute. Contains human-readable explanation like "Covered by Drupal's security advisory policy," "Project has not opted into security advisory coverage!" or "Beta releases are not covered by Drupal security advisories." |
| chrisfromredfin |
ok #3300061: [policy, no patch] Determine Composer validation rules for installing through Composer#comment-14692938 added my $0.02 here. I sort of "talked out loud" in that comment, but I think in general my understanding is that this validation is sufficient but there may be some "next level" stuff that we will want to confirm before applying things. |
| chrisfromredfin |
There's still an open issue to come up with a test plan for Project Browser. Sort of, how to spin it up and play with it. However, it's much easier than Automatic Updates was, especially if they go the Gitpod route. We're going to encourage people to play with it and file issues (esp usability issues) at the presentation/session. |
| Gábor Hojtsy (he/him) |
Do you think that will happen organically or would it be better to sit down with people at a specific time and get feedback? |
| chrisfromredfin |
I think I'm hoping it will happen organically, but I'm betting we'd do better if it were some more formal time. |
| Gábor Hojtsy (he/him) |
Since you planned to sit in contribution for an extended time, what about moving an hour of that into yet another BoF? 🙂 “Project Browser UI testing” or something along those lines? |
| chrisfromredfin |
do you think earlier or later is better? like first morning of the conference, or last morning of the conference? Or, we could have a dedicated spot on contribution day? |
| chrisfromredfin |
@leslieg any thoughts? |
| leslieg |
AT DrupalCamp Colorado I had listening sessions during the Contribution day with folks new to Project Browser where they tested out the UI and gave me feedback. It was an adhoc thing for when someone new was looking for something to work on (edited) |
| chrisfromredfin |
That might be the one of the best ways to welcome newcomers into Contribution Day. ? |
| leslieg |
I was thinking about setting up dedicated time during contribution to work as a group on reviewing what folks had suggested for logos, short descriptions and comments. Tuesday 15:00-17:00 CEST might work - it's right after initiative keynote |
| leslieg |
@chrisfromredfin thinking this would be a good way to get that review moving faster |
| Gábor Hojtsy (he/him) |
That UI listening session sounds wonderful. Exactly what I had in mind as it would be minimal prep work required and still lots of potential for getting value. |
| Gábor Hojtsy (he/him) |
So you propose to have that on Tue at 3pm to 5pm? |
| chrisfromredfin |
I could definitely be available to help people get set up and start testing the UI, yeah. Should we do that in general contrib room or somewhere else? |
| chrisfromredfin |
bof room maybe? |
| Gábor Hojtsy (he/him) |
Bof shows up on the in-person BOF board and mobile apps and/or online schedule of folks that use the site or installed the mobile app |
| Gábor Hojtsy (he/him) |
Also can be put in their personal schedule. All in all much better visibility IMHO. |
| chrisfromredfin |
should i / can i still just propsoe a bof? |
| Gábor Hojtsy (he/him) |
Bofs that were submitted on time earlier even got into the printed program. While that ship has sailed, the digital benefits as well as BoF board visibility are still in it's favour. |
| Gábor Hojtsy (he/him) |
Yes you should/can :) |
| chrisfromredfin |
k, will do! |
| Gábor Hojtsy (he/him) |
I would love to add it to my initiative post so looking forward to it :) |
| chrisfromredfin |
OK those are both submitted. Not sure why they wouldn't be accepted. There wasn't really a slot for 1500-1700 so i submitted two bofs in two slots for part (1) and (2) |
| Gábor Hojtsy (he/him) |
yay! |
| Gábor Hojtsy (he/him) |
reloading https://events.drupal.org/prague2022/schedule/all multiple times to see these pop up so I can add them to https://docs.google.com/document/d/1gNlU7xj80Ipx06GPe2nvl0bXQtzrMuofVFiT... 🙂 I was hoping to publish that last week to get better awareness 🙂 if there is a next time, it would be great to coordinate earlier 🙂 |
| leslieg |
Thanks @chrisfromredfin for adding those BoFs. I am swampred with urgent client work. @Gábor Hojtsy (he/him) I |
| leslieg |
I'll get my keynote slides to you tonight |
| chrisfromredfin |
Yeah, still no confirmation from Kuoni |
| chrisfromredfin |
I'll ping you here as soon as I get one |
| chrisfromredfin |
@Gábor Hojtsy (he/him) they're up! |
| Gábor Hojtsy (he/him) |
Added to the doc, thanks! |
Comments
Comment #3
chrisfromredfinComment #8
chrisfromredfinComment #9
chrisfromredfin