= Warehouse core developers' meeting = Monday, 19 March, 2018 == Present == * Dustin * Sumana * Laura * Mark * Nicole * Ernest * Donald == Reschedule Monday March 26 meeting? == No, don't reschedule. Nicole unavailable; Dustin can join == Working on/blocked/announcements == ''Reminder: last week of March & first week of April, lots of unavailability'' * Sumana: * writing LWN article, draft this Thursday * helped volunteers, triaged bugs, improved docs, supported users, tested Warehouse * non-MOSS: improved Twine & releasing 1.11.0 today (now done https://pypi.org/project/twine/1.11.0/ ) Dustin * Last of the camo changes to show message for big images * Added ability to add classifiers in the admin UI (and took care of some classifier requests) * Load testing support * Non-MOSS: Description-Content-Type / Markdown Support U0001f389U0001f389U0001f389 * Will be "out" all of next week (non-billing, but still can attend this meeting & will be doing some light volunteer work / responding to messages) Mark: * PEP 541 ready for vote (sending e-mail today [now sent]), Nick made a couple edits last week. * Facebook Grant Working document (will send e-mail to packaging-wg on feedback today) [link] due March 31 Ernest: * Kubernetes is live on AWS! Cabotage is live on Kubernetes! Warehouse Live on Cabotage! * Monitoring/Metrics added as we go, have deployment notifications and major alerts in Slack now #pypa-feed - may add to IRC * Screencast link to be shared after upload * Focusing on monitoring, stability, and performance this week with a focus on XMLRPC in Warehouse - biggest remaining blocker for switching over PyPI * Runbooks/Docs on kubernetes installation/cabotage * Plan to continue testing traffic redirects tomorrow. XMLRPC traffic "replay" can happen in the background without impacting users. * We can continue redirect testing now that pip 9.0.2 is shipped, we can exclude Artifactory, and pip 1.5.4 (Ubuntu 14.04) confirmed fixed. - redirect people if they get an error * Recurse Center: April 2-6, I'll be MIA * no blockers Laura: * Has been reviewing PRs * testing 566 compliance Nicole * reviewing PRs * PR - upgrade way to make dropdowns work better * of UX issues, issues [[https://github.com/pypa/warehouse/issues/2612|2612]], [[https://github.com/pypa/warehouse/issues/3194|3194]], [[https://github.com/pypa/warehouse/issues/3062|3062]], [[https://github.com/pypa/warehouse/issues/1317|1317]] -- very much need to be done -- most other stuff is nice-to-haves * 2 volunteers for user testing - would like to run another run of tests on package detail page but may need more funds? * no blockers Donald * helping with load testing * working on releasing pip 9.0.2 https://pypi.org/project/pip/9.0.2/ - may need 0.3 * Warehouse brownouts ? == Followup from past meetings == Mark, Ernest & Donald: When can we announce [redacted] credits? * Ernest: still need logo for footer... no? * Publicize before getting logo? * DI - remove sponsors that are no longer sponsoring * need [redacted] transparent logo from Donald * Donald - no reason to wait * Mark will take care of announcement/logo Mark: grant proposals for future grants? Sumana: talk with Eric about sponsorship outreach & future fundraising - cc Betsy Nicole & Ernest: ask volunteer contributors for more code review? (Dustin scaling back on PR review) * yeraydiazdiaz - good front end contributions * Alan Bato - good front end * Al Mazan * DI - follow up Nicole: how much Nicole time left on grant? * discuss after Mark: PEP 541? (addressing) Mark: Open Tech Fund? * Formal determination message within the next 2 weeks. * May take some time to iterate through their process and create a finished proposal with them == Beta & redirect schedule == * Should the China CAPTCHA issue be in our beta milestone? https://github.com/pypa/warehouse/issues/3174 * Ernest: looking like it's time to switch from reCAPTCHA to some other service...? * DI - we may need external help or try to find another captcha service * Donald - not part of beta but we should try to fix it * Ernest - try to find a known good captcha instead of Google * DI & EWDIII will take care of captcha Who wants to review announcements Sumana writes this week? * Nicole can review Who's available & interested in being on podcasts in April? * DI * Ernest * Sumana * Nicole - user experience focused podcasts == Bug triage == * Set samesite=lax on session cookies #3221 https://github.com/pypa/warehouse/issues/3221 * Sumana asks: I think this is not urgent. Correct? Post-shutdown milestone? * We should do this but it is blocked on Pyramid supporting it * is there an upstream bug already filed against Pyramid? is it https://github.com/Pylons/pyramid/issues/2733 ? * Not urgent - defense in depth - nice to have but we can wait until Pyramid supports it should Warehouse guard against people uploading broken-description wheels made with an old version of `wheel`? https://github.com/pypa/warehouse/issues/3084 * Sumana asks: want Twine to check for this? How urgent? Doesn't feel like MOSS work * Not twine's job, not in scope of MOSS, not a priority, but a nice-to-have #3275 Artifactory https://github.com/pypa/warehouse/issues/3275 * Sumana asks: do we have someone at JFrog we can/should reach out to? * Actually is "Artifactory does not like externally hosted files" * Will follow up with initial reporter to see if we can get JFrog involved. Design question for Nicole on ISO dates https://github.com/pypa/warehouse/issues/3010 * Progress? This week == Ask Donald for: == nothing this week == TODO == * Ernest: DI, Mark, Donald logins for Cabotage/Tectonic