orphaned packages with infra-sig listed as co-maintaner

[Mattia Verga]

Looking at the most recent list of orphaned packages, I see there are a
few with infra-sig listed as co-maintainer:

- python-cornice-sphinx: it was once required by Bodhi to generate docs
about REST APIs, but it's no more, since it's broken with Sphinx 4 and
upstream is almost dead. I think we can let it go:
$ sudo dnf repoquery --whatrequires python3-cornice-sphinx
<EMPTY_RESULT>

- python-oauthlib: can't find any reference in ansible that points to
it, may be a chained dependency of something else:
$ sudo dnf repoquery --whatrequires python3-oauthlib
cloud-init-0:22.2-4.fc37.noarch
python3-keystoneclient-tests-1:4.4.0-3.fc37.noarch
python3-lazr-restfulclient-0:0.14.4-4.fc37.noarch
python3-oauthlib+rsa-0:3.2.1-1.fc37.noarch
python3-oauthlib+signals-0:3.2.1-1.fc37.noarch
python3-oauthlib+signedtoken-0:3.2.1-1.fc37.noarch
python3-requests-oauthlib-0:1.3.1-3.fc37.noarch
python3-ring-doorbell-0:0.7.1-5.fc37.noarch
python3-smart-gardena-0:0.7.10-7.fc37.noarch
python3-social-auth-core-0:4.3.0-3.fc37.noarch
python3-tweepy-0:4.7.0-4.fc37.noarch

- python-requests-oauthlib: can't find any reference in ansible that
points to it, may be a chained dependency of something else:
$ sudo dnf repoquery --whatrequires python3-request-oauthlib
<EMPTY_RESULT>

- python-venusian: can't find any reference in ansible that points to
it, it is a dependency of cornice and pyramid, so we can't let it go:
$ sudo dnf repoquery --whatrequires python3-venusian
python3-cornice-0:6.0.1-3.fc37.noarch
python3-pyramid-0:1.10.5-7.fc37.noarch

I have taken python-venusian.

There are some other packages which are chained dependencies of other tools:
infra-sig: python-requests-oauthlib, python-cornice-sphinx,
golang-github-fvbommel-sortorder, golang-github-mitchellh-cli,
python-multilib,
python-venusian, python-oauthlib, golang-github-hanwen-fuse,
golang-github-tonistiigi-rosetta, ibus-table-others, python-requests-mock,
python-argon2-cffi, golang-github-containerd-stargz-snapshotter

The golang-* stuff are required by reg (I suppose). Not sure about hte
others.

Mattia

[Kevin Fenzi]

On Tue, Dec 06, 2022 at 08:38:16AM +0000, Mattia Verga wrote:
> Looking at the most recent list of orphaned packages, I see there are a
> few with infra-sig listed as co-maintainer:

Thanks for looking at these.
> python-cornice-sphinx: it was once required by Bodhi to generate docs
>
> about REST APIs, but it's no more, since it's broken with Sphinx 4 and
> upstream is almost dead. I think we can let it go:
> $ sudo dnf repoquery --whatrequires python3-cornice-sphinx
>
> <EMPTY_RESULT>

Great.
> python-oauthlib: can't find any reference in ansible that points to
>
> it, may be a chained dependency of something else:
> $ sudo dnf repoquery --whatrequires python3-oauthlib
> cloud-init-0:22.2-4.fc37.noarch
> python3-keystoneclient-tests-1:4.4.0-3.fc37.noarch
> python3-lazr-restfulclient-0:0.14.4-4.fc37.noarch
> python3-oauthlib+rsa-0:3.2.1-1.fc37.noarch
> python3-oauthlib+signals-0:3.2.1-1.fc37.noarch
> python3-oauthlib+signedtoken-0:3.2.1-1.fc37.noarch
> python3-requests-oauthlib-0:1.3.1-3.fc37.noarch
> python3-ring-doorbell-0:0.7.1-5.fc37.noarch
> python3-smart-gardena-0:0.7.10-7.fc37.noarch
> python3-social-auth-core-0:4.3.0-3.fc37.noarch
> python3-tweepy-0:4.7.0-4.fc37.noarch

We used to (I think) use social auth with mailman?
> python-requests-oauthlib: can't find any reference in ansible that
>
> points to it, may be a chained dependency of something else:
> $ sudo dnf repoquery --whatrequires python3-request-oauthlib
>
> <EMPTY_RESULT>
> python-venusian: can't find any reference in ansible that points to
>
> it, it is a dependency of cornice and pyramid, so we can't let it go:
> $ sudo dnf repoquery --whatrequires python3-venusian
> python3-cornice-0:6.0.1-3.fc37.noarch
> python3-pyramid-0:1.10.5-7.fc37.noarch
>
> I have taken python-venusian.

Thanks.
> There are some other packages which are chained dependencies of other tools:
> infra-sig: python-requests-oauthlib, python-cornice-sphinx,
> golang-github-fvbommel-sortorder, golang-github-mitchellh-cli,
> python-multilib,
> python-venusian, python-oauthlib, golang-github-hanwen-fuse,
> golang-github-tonistiigi-rosetta, ibus-table-others, python-requests-mock,
> python-argon2-cffi, golang-github-containerd-stargz-snapshotter
>
> The golang-* stuff are required by reg (I suppose). Not sure about hte
> others.

Yeah, me either.

kevin