Please do not reply directly to this email. All additional comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=457343
François Kooman fkooman@tuxed.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends on| |634911
--- Comment #10 from François Kooman fkooman@tuxed.net 2011-08-19 13:22:54 EDT ---
Like I say, I'm not using jquery now so I don't know the extent of the sizzle problem. Does jquery actually require sizzle? Is it something that gets included into jquery when jquery is "built"? Need more information here....
Yeah, it gets included during "build". It can be extracted (i.e.: not included during building with some Makefile modifications), but I guess you need to then include "js/sizzle.js" before including "js/jquery.js" in your application. Would that be an acceptable requirement for packagers?
What "static linking" adds is the ability to track what libraries (and depending on the actual deps that we use, also their versions) are being used by an application. That way if foo was using jquery-1.0 and jquery-1.1 is released that fixes an issue (security, major bugfix, change to a more permissive license, etc) found in jquery-1.0 we'd know what software was using the old jquery and be able to rebuild them with the new version.
Above you suggested to copy the jquery.js in the package itself. Would requiring a specific version of jquery (the one currently available in the distro you are packaging for) already be enough? So in the spec you can say:
Requires: jquery = 1.6.2
That will take care of screaming when the jquery package gets updated and force the application packager to take action... Annoying if there is a new version every month...
It would probably be good to have both minified and "source" versions installed. GPL compliance would make this a requirement for some libraries... (possibly if it was the app was GPL although I'm very unclear on this.)
Yep, that was the intention anyway...
Yeah -- I think we should have multiple packages. whether that's one for the current version and one for all older versions or one for each older version I'm not sure. And how to set those up internally I'm not sure.
That is a big issue, not sure a correct answer exists. I saw Debian ships quite a few js libs, including jquery named libjs-jquery. It seems they just have one version and keep that for the life of the distro... That would also be an option, only upgrade the package in rawhide and never upgrade the released distro after it is released. I'm not sure in the case of jquery there are any security updates to old versions of jquery anyway...
Hmm... If jquery is being shipped minified, we'd have to create that minified version from the source version no matter what.
It ships both minified and unminified. But I guess if we want to provide the minified version as well we need to "translate" it ourselves.
nodejs was under review but Lubomir seems to have disappeared: https://bugzilla.redhat.com/show_bug.cgi?id=634911
Added this bug to depend on 634911.