13:00:22 <FranciscoD_> #startmeeting NeuroFedora - 2022-08-01
13:00:22 <zodbot> Meeting started Mon Aug  1 13:00:22 2022 UTC.
13:00:22 <zodbot> This meeting is logged and archived in a public location.
13:00:22 <zodbot> The chair is FranciscoD_. Information about MeetBot at https://fedoraproject.org/wiki/Zodbot#Meeting_Functions.
13:00:22 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
13:00:22 <zodbot> The meeting name has been set to 'neurofedora_-_2022-08-01'
13:00:27 <FranciscoD_> #meetingname neurofedora
13:00:27 <zodbot> The meeting name has been set to 'neurofedora'
13:00:38 <FranciscoD_> Please refer to this table for meeting related commands folks: https://fedoraproject.org/wiki/Meeting:Guide#MeetBot_Commands
13:01:51 <FranciscoD_> #chair music vanessa_kris Alessio achilleas hardeborlaa achillion davdunc davdunc HafsatAjia-Egbey kamdard VRaj[m] lbazan major Luna Jernberg
13:01:51 <zodbot> Current chairs: Alessio FranciscoD_ HafsatAjia-Egbey Jernberg Luna VRaj[m] achilleas achillion davdunc hardeborlaa kamdard lbazan major music vanessa_kris
13:01:58 <FranciscoD_> if I've missed anyone, please do let me know
13:02:05 * FranciscoD_ wishes there was a "chair everyone" command :D
13:02:12 <FranciscoD_> .members neuro-sig
13:02:13 <zodbot> FranciscoD_: Members of neuro-sig: sagitter, ignatenkobrain, bt0dotninja, zbyszek, sergiopr, blackfile, ankursinha, lbazan, ilgrad, gicmo, alciregi, bizdelnick, nerdsville, mhough, victortyau, music, major, fangq, anilbey, iztokf, aekoroglu, shaneallcroft, hardeborlaa, vanessakris
13:02:14 <aekoroglu> :)
13:02:35 <music[m]> Hello!
13:02:44 <aekoroglu> good afternoon everyone
13:02:55 <FranciscoD_> o/
13:02:58 <FranciscoD_> #topic Agenda
13:03:14 <FranciscoD_> #info The agenda is published on the blog, and included in the reminder e-mails:  https://neuroblog.fedoraproject.org/2022/07/28/next-open-neurofedora-meeting-1-August-1300-utc.html
13:03:19 <FranciscoD_> #info New introductions and roll call
13:03:27 <FranciscoD_> #info Tasks from last meeting
13:03:33 <FranciscoD_> #info Open Pagure tickets
13:03:38 <FranciscoD_> #info Packages health check
13:03:46 <FranciscoD_> #info Open package reviews check
13:03:56 <FranciscoD_> #info Comp Neuro lab image compose check
13:04:04 <FranciscoD_> #info Neuroscience query of the week
13:04:13 <FranciscoD_> #info Next meeting day/time/chair
13:04:15 <FranciscoD_> #info Open floor
13:04:21 <FranciscoD_> #topic New introductions and roll call
13:04:45 <FranciscoD_> #info Ankur Sinha (ankursinha; FranciscoD): UTC+1, Packaging, NeuroFedora, Fedora Join, Docs, etc.
13:04:58 <FranciscoD_> Please do a quick info for the logs folks ^
13:06:11 * FranciscoD_ will wait a few minutes for folks to join before proceeding
13:07:02 <vanessa_kris[m]> Vanessa Christopher (vanessakris) UTC+1, packaging.
13:07:18 <vanessa_kris[m]> * #info Vanessa Christopher
13:07:42 <hardeborlaa[m]> #info Adeleye Opeyemi (hardeborlaa)  UTC+1, Packaging
13:07:50 <music[m]> #info Ben Beasley (music): UTC-4, Packaging, NeuroFedora, Python SIG, FESCo, etc.
13:08:35 <FranciscoD_> #chair zbyszek[m] principis1 omnidapps2 omnidapps[m] MeWjOr Nishant Mishra oluyosola OluyosolaAfolabi Oluyosola Afolabi
13:08:35 <zodbot> Current chairs: Afolabi Alessio FranciscoD_ HafsatAjia-Egbey Jernberg Luna MeWjOr Mishra Nishant Oluyosola OluyosolaAfolabi VRaj[m] achilleas achillion davdunc hardeborlaa kamdard lbazan major music oluyosola omnidapps2 omnidapps[m] principis1 vanessa_kris zbyszek[m]
13:08:58 <FranciscoD_> hello hardeborlaa music vanessa_kris aekoroglu , welcome :)
13:09:02 <FranciscoD_> hope you're all doing well :)
13:09:18 <FranciscoD_> #topic Tasks from last meeting
13:09:20 <vanessa_kris[m]> Thank you! Doing great 👍
13:09:33 <FranciscoD_> #info Minutes from last meeting are here on the shiny new meetbot website: https://meetbot.fedoraproject.org/fedora-neuro/2022-07-18/neurofedora.2022-07-18-13.01.html
13:09:44 <hardeborlaa[m]> Doing great 👍
13:09:52 <FranciscoD_> #info omnidapps to follow up on Pluto migration from Venus -> WIP
13:10:13 <aekoroglu> +1 doing great
13:10:30 <FranciscoD_> being discussed on the infrastructure team mailing list to, if anyone is interested: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org/message/OKKBJFPZCZHW664NNPWWKKHCDEJIQHFJ/
13:10:40 <FranciscoD_> I'll reassign this
13:10:49 <FranciscoD_> #action omnidapps to follow up on Pluto migration from Venus
13:11:03 <FranciscoD_> #info FranciscoD fix arbor and genesis FTBFS bugs -> WIP
13:11:13 <FranciscoD_> also WIP, worked on some other packages, but didnt' reach these. They're next on my list
13:11:23 <FranciscoD_> #action FranciscoD fix arbor and genesis FTBFS bugs
13:11:37 <FranciscoD_> vanessa_kris check on status of python-pyABF review
13:11:48 <FranciscoD_> vanessa_kris: did we complete/import/build/push updates for pyABF?
13:12:12 <FranciscoD_> or is it still in review?
13:13:28 <FranciscoD_> hrm, bugzilla is being super slow for me
13:13:33 <FranciscoD_> This is the bug: https://bugzilla.redhat.com/show_bug.cgi?id=2050281
13:13:59 <vanessa_kris[m]> Checking
13:14:02 <FranciscoD_> is it loading for anyone else?
13:14:04 <FranciscoD_> thanks vanessa_kris
13:14:28 <FranciscoD_> ah, finally loaded
13:14:53 <FranciscoD_> vanessa_kris: looks like you need to include a patch to fix the failing test: https://bugzilla.redhat.com/show_bug.cgi?id=2050281#c8
13:15:58 <FranciscoD_> I'll reassign it to you and we can look at what else needs to be done to complete the review later
13:16:25 <FranciscoD_> #action vanessa_kris update python-pyABF as noted in review (apply patch to fix failing tests etc.)
13:16:42 <FranciscoD_> vanessa_kris give neuro-sig permissions to python-ephyviewer repo
13:17:02 <FranciscoD_> hrm, pending at the mo, vanessa_kris : https://src.fedoraproject.org/rpms/python-ephyviewer
13:17:04 <vanessa_kris[m]> Added those already I wonder why I halted I’ll rebuild
13:17:29 <FranciscoD_> vanessa_kris[m]: ah, cool,
13:17:47 <FranciscoD_> could you give neuro-sig admin/commit rights to python-ephyviewer if you have a minute now please?
13:18:25 <FranciscoD_> also for python-astor: https://src.fedoraproject.org/rpms/python-astor
13:18:46 <FranciscoD_> and python-neatdend: https://src.fedoraproject.org/rpms/python-neatdend
13:19:25 <FranciscoD_> that way they are listed in our packages and get added to koschei etc. automatically, and folks can help with PRs etc. more easily
13:20:03 <FranciscoD_> #action vanessa_kris add neuro-sig to python-ephyviewer, python-astor, python-neatdend
13:20:59 <FranciscoD_> #action ALL MEMBERS: check that neuro-sig is added to all neuro related packages
13:21:12 <FranciscoD_> #topic Open Pagure tickets
13:21:30 <FranciscoD_> #info Any tickets tagged for discussion are to be discussed: https://pagure.io/neuro-sig/NeuroFedora/issues?status=Open&tags=S%3A+Next+meeting
13:21:35 <FranciscoD_> #info No tickets to discuss
13:21:52 <FranciscoD_> #topic Packages health check
13:22:05 <FranciscoD_> #info Check package status on our packager dashboard at https://packager-dashboard.fedoraproject.org/dashboard?users=neuro-sig
13:22:52 <FranciscoD_> #info Prioritise fails to build from source (FTBFS) and fails to install (FTI) bugs before updates and new packages, to ensure that already included packages are all installable by users
13:25:11 <FranciscoD_> hrm, we still have a few FTI/FTBFS issues from the looks of it. Please work on any FTI/FTBFS bugs that have been filed, and then look at ones where they're marked but no bug has been filed
13:26:04 <FranciscoD_> #info A few packages are still FTI/FTBFS, need looking into
13:26:33 <FranciscoD_> I thought I'd fixed python-mne etc., but I see it's FTBFS here
13:27:31 <FranciscoD_> it's because python-pyedflib excludes s390x..
13:27:34 <FranciscoD_> https://bugzilla.redhat.com/show_bug.cgi?id=2027046
13:29:07 <music[m]> You did a conditional BR on it, but it doesn’t work because the base package is noarch.
13:30:39 <FranciscoD_> Ah, yes, here it is: https://src.fedoraproject.org/rpms/python-mne/blob/rawhide/f/python-mne.spec#_63
13:31:27 <music[m]> I’m guessing the presence of the pyedflib BR doesn’t affect the binary RPMs (e.g. it’s not a runtime dependency that has to be patched out), so the package really is still noarch?
13:32:20 <music[m]> In that case you could `ExcludeArch: s390x`, and it wouldn’t be built there but as a `noarch` package would still end up shipping for all of the architectures; or, you could do the trick where the base package is arched but python3-mne is noarch.
13:32:46 <music[m]> That would allow the `%ifarch` to work and would give you a better heads-up to architecture-dependent issues by building and testing on every architecture every time.
13:34:11 <FranciscoD_> Yeh, let's go with the second option?
13:34:58 <FranciscoD_> #action FranciscoD make python-mne base package archful and sub-package noarch to ensure it's built + tested on all arches and conditional BR on python-pyedflib is taken into account
13:35:28 <FranciscoD_> Another one that I wanted some thought on is this: https://bugzilla.redhat.com/show_bug.cgi?id=2080613
13:36:01 <FranciscoD_> Should we wait for the 3.6.8 update, or go ahead with 3.6.7 now because it contains CVE (security) fixes?
13:36:49 <FranciscoD_> the annoying thing with dcmtk is that each patch release also includes a soname bump, so we need to rebuild dependent packages too
13:36:55 <FranciscoD_> thankfully, there are only 2
13:38:59 <FranciscoD_> note that upstream says even numbered releases are considered stable, while odd numbers are not, but they don't note when the next release will be
13:39:40 <FranciscoD_> https://github.com/DCMTK/dcmtk/tags -> new releases are not frequent
13:44:06 <music[m]> Have you been able to identify the commit(s) for the CVE fix? Is there any chance of a backport?
13:45:05 <FranciscoD_> Not done that yet, no, searching the repo for "CVE" doesn't return anything, unfortunately
13:46:02 <FranciscoD_> don't see a changelog either..
13:46:30 <music[m]> Is https://nvd.nist.gov/vuln/detail/CVE-2022-2119 the only CVE in question?
13:47:06 <music[m]> That one appears to be fixed in https://github.com/DCMTK/dcmtk/commit/f06a867513524664a1b03dfcf812d8b60fdd02cc
13:47:13 <FranciscoD_> 3 of them from what Ben (the reporter) noted: https://www.tenable.com/plugins/nessus/162601
13:49:26 <FranciscoD_> hrm, if the links in the CVEs are to be belived, all of them refer to the one bug and the one fix: https://www.cisa.gov/uscert/ics/advisories/icsma-22-174-01
13:49:39 <music[m]> Ok, the same commit touches the SCP and SCU classes, so that’s https://nvd.nist.gov/vuln/detail/CVE-2022-2120 covered as well
13:50:13 <music[m]> https://nvd.nist.gov/vuln/detail/CVE-2022-2121 is different; it’s a NULL pointer dereference
13:50:37 <music[m]> fixed in https://github.com/DCMTK/dcmtk/commit/3e996a2749a9355c9b680fa464ecfd9ab9ff567f
13:50:53 <FranciscoD_> yeh, but if you click on the link in reference, that also goes to bug #1021 ..
13:51:15 <FranciscoD_> https://www.tenable.com/cve/CVE-2022-2121 -> https://www.cisa.gov/uscert/ics/advisories/icsma-22-174-01 -> https://support.dcmtk.org/redmine/issues/1021
13:52:04 <music[m]> Those two commits look backport-able. At a glance, I think the result should even be ABI-compatible.
13:52:43 <FranciscoD_> ok, let's try the backport first and see if that helps then
13:52:58 <FranciscoD_> #action FranciscoD backport commits fixing CVEs to dcmtk and push update
13:53:02 <music[m]> OK, ping me if I can help with something.
13:53:19 <FranciscoD_> sure thing, will do
13:53:27 <FranciscoD_> should hopefully be straightforward
13:53:47 <FranciscoD_> lets go on to next topics, and try to finish on time :)
13:53:57 <FranciscoD_> #topic  Open package reviews check.
13:54:31 <FranciscoD_> #info Neuro SIG tracker bug is here: https://bugzilla.redhat.com/show_bug.cgi?id=fedora-neuro  (please click "show advanced fields" to see what review bugs *block* this tracker bug)
13:54:48 <FranciscoD_> #info only python-pyABF review remains, we're already looking into it
13:55:03 <FranciscoD_> #topic CompNeuro lab compose status check for Fedora 36/37.
13:55:21 <FranciscoD_> #info Check the latest compose task here: https://koji.fedoraproject.org/koji/packageinfo?packageID=30691 (green tick means all good!)
13:55:25 <FranciscoD_> #info Green tick: all good!
13:55:35 <FranciscoD_> #topic Neuroscience query of the week
13:56:13 <FranciscoD_> I'd found a few of general interest, that I put on our reading list ticket:
13:56:13 <FranciscoD_> https://www.sciencenews.org/article/dog-smell-new-nose-brain-connection
13:56:13 <FranciscoD_> https://www.sciencenews.org/article/covid-vaccine-little-kids-side-effects-parents-questions
13:56:28 <FranciscoD_> If you find anything worth sharing (on our planets, for example), please do share them here in the channel and on the ticket
13:56:55 <FranciscoD_> #info https://neuroblog.fedoraproject.org/planet-neuroscientists/ -> collection of neuroscience related blogs, great source of info
13:57:07 <FranciscoD_> #topic Next meeting day, and chair.
13:57:13 <FranciscoD_> Same time in 2 weeks?
13:57:17 <FranciscoD_> Any takers for chair? :)
13:57:30 * FranciscoD_ is default chair if no one else can take it up
13:57:55 <aekoroglu> 2 week is good
13:58:28 <FranciscoD_> let's do that, and I can be chair for the time being, and someone else can take over if they wish
13:58:36 <FranciscoD_> #info Next meeting in 2 weeks at same time
13:58:40 <FranciscoD_> #action FranciscoD to chair next meeting
13:58:44 <FranciscoD_> #topic Open floor
13:58:49 <FranciscoD_> 2 minutes for open floor folks ;)
13:59:02 <FranciscoD_> Just saw this, may be worth reading:
13:59:02 <FranciscoD_> https://www.sciencenews.org/article/long-covid-definition-symptoms-treatment-coronavirus
13:59:16 <FranciscoD_> that's all I have for today
13:59:24 <FranciscoD_> if there's nothing else, I'll end the meeting at the hour mark
13:59:31 <FranciscoD_> (and keep up our record of being on time :D)
14:00:21 <aekoroglu> I'll have sometime this week to test and update plotly (5.10.0)
14:00:53 <FranciscoD_> oo, is 5.10.0 out? I just worked on updating to 5.9.0 yesterday
14:01:05 <aekoroglu> yeap
14:01:14 <FranciscoD_> pypi doesn't show it yet: https://pypi.org/project/plotly/#history
14:01:26 <aekoroglu> https://github.com/plotly/plotly.py/releases/tag/v5.10.0
14:01:26 <FranciscoD_> github only release? :(
14:01:46 <FranciscoD_> sigh
14:02:05 <aekoroglu> I dont like pypi :)
14:02:14 <FranciscoD_> I've already got the 5.9.0 one almost done aekoroglu , so I might as well do an extra hour and do 5.10.0
14:02:30 <aekoroglu> sure np
14:04:09 <aekoroglu> so I can go for jupyterlab then
14:04:21 <aekoroglu> I think we dont have it on fedora right ?
14:04:21 <tg-fedneuro> <b​ittin1> #endmeeting ?
14:05:12 <FranciscoD_> I'll try and throw up a PR and we can see if anything else is required
14:05:13 <FranciscoD_> #endmeeting