Automatic Updates Initiative meeting on July 11, 2023 [#3373956]

This meeting:
➤ Is for core developers, initiative contributors, the Drupal Association and anyone interested in the initiative.
➤ Usually happens every other Tuesday at 1700 UTC.
➤ Is done over chat.
➤ Happens in threads, which you can follow to be notified of new replies even if you don’t comment in the thread. You may also join the meeting later and participate asynchronously!
➤ Has a public agenda anyone can add to
➤ *Transcript will be exported and posted* to the agenda issue. For anonymous comments, start with a :bust_in_silhouette: emoji. To take a comment or thread off the record, start with a :no_entry_sign: emoji.

Transcript

0️⃣ Who is here today? Comment in the thread below to introduce yourself and tell us why you are joining us.

hestenet (he/him)	Tim from the DA :wave::skin-tone-3:
dts	Hi Tim (and anyone else who joins)
tedbow	Ted at Acquia:wave:

1️⃣ Do you have any topics to propose for the meeting today? Feel free to propose them in this thread, and then I will give them their own unique threads for discussion. Conversation moving slow? Go ahead and open your own thread in the next numeric order.

2️⃣ Security Audit - non-Drupal ComponentsI'm actively awaiting an update from the OSTIF team - the RFP was released to their partners who had done previous TUF work - trying to get something signed soon. We applied to https://sovereigntechfund.de/en/challenges/ Challenge #2 to help cover cost

3️⃣ Security Audit - Drupal Components

hestenet (he/him)

I know @mlhess has been taking on the task of identifying someone for this. This is less urgent than item 2 above, but still something we want to get on the books quickly.

4️⃣ Bug: some signing targets missed:https://gitlab.com/rugged/rugged/-/issues/139@ergonlogic has an MR in progressDrumm returns tomorrow and can help re-initialize when ready.

ergonlogic	The functional fixes appear to be working. However, the tests are a bit tricky, as they sometimes hit a race conditions
ergonlogic	so, I'm continuing to work on those, before merging
hestenet (he/him)	Thanks very much!

Participants:

hestenet, ergonlogic