group.of.nepali.translators team mailing list archive
-
group.of.nepali.translators team
-
Mailing list archive
-
Message #49290
[Bug 2083665] Re: ubuntu-pro-client has an unnecessary dependency on python3-pkg-resources
This bug was fixed in the package ubuntu-advantage-tools -
35.1ubuntu0~20.04
---------------
ubuntu-advantage-tools (35.1ubuntu0~20.04) focal; urgency=medium
* Backport 35.1ubuntu0 to focal (LP: #2106660)
ubuntu-advantage-tools (35.1ubuntu0) plucky; urgency=medium
* apt: support ESM snapshots by adding snapshot URLs for ESM repositories
to the authentication file (released in version 35)
* lxd: store the configuration in /var/lib/ubuntu-advantage instead of
/var/lib/ubuntu-pro (LP: #2106660)
ubuntu-advantage-tools (35) plucky; urgency=medium
* d/tests/usage: add more scenarios to dep8 tests
* d/control: drop strict dependency on python3-pkg-resources (LP: #2083665)
* d/rules: add conditional python3-pkg-resources dependency up to noble
* d/ubuntu-pro-client.postrm: remove /var/lib/ubuntu-pro cache dir on purge
* New upstream release 35: (LP: #2083973)
- api:
+ new endpoints:
* u.pro.attach.guest.get_guest_token.v1: Get the Pro client guest
token
* u.pro.security.cves.v1: List the fixable CVEs that affect the system
+ u.pro.packages.updates.v1: create new package status:
upgrade_available_not_preferred (GH: #3184)
+ fixes for u.unattended_upgrades.status.v1:
* do not crash when a Unattended-Upgrade config is missing
* do not report unattended-upgrade disabled if any config is false
* report missing Unattended-Upgrade configs as turned off
- apt:
+ always ensure the ESM cache is present (GH: #3132)
+ fix permission warning when fetching apt-news (GH: #3209, LP: #2070095)
+ update logging for apt errors (GH: #3299)
+ only run the apt upgrade hook when run as root (LP: #2084677)
- auto-attach:
+ aws: skip operation if no product codes found
+ gcp: add minimal image license codes
- cli:
+ add support for vulnerability commands:
* pro cves: List cves in the machine
* pro cve: Show information about a specific cve
+ deduplicate entries in 'pro help' output (LP: #2091327)
- config: add option lxd_guest_attach to control LXD integration with Pro
- contract:
+ check onlySeries on reboot (GH: #3189)
+ collect cpu type for activity info
- landscape:
+ update message if service not available through Pro (GH: #3331)
- livepatch: do not enable livepatch on wsl (GH: #3156)
- lxd: allow pro auto-attach to work on a LXD container
ubuntu-advantage-tools (34.1.3) plucky; urgency=medium
* apt-hook: set C++ standards version to c++17 for APT 2.9.30 compatibility
(LP: #2098862)
* tests: remove argparse error tests from unit tests (LP: #2098862)
ubuntu-advantage-tools (34.1.2build1) plucky; urgency=high
* No change rebuild against libapt-pkg7.0.
ubuntu-advantage-tools (34.1.2) oracular; urgency=medium
* check-versions-are-consistent.py: fix regexp to cope with X.Y.Z version
formats
* version.py: bump to 34.1.2
ubuntu-advantage-tools (34.1.1) oracular; urgency=medium
* Bump version.py.
ubuntu-advantage-tools (34.1) oracular; urgency=medium
* Drop direct dependency on python3-pkg-resources to resolve priority
mismatch (LP: #2083665)
-- Renan Rodrigo <renanrodrigo@xxxxxxxxxxxxx> Thu, 10 Apr 2025
10:38:36 -0300
** Changed in: ubuntu-advantage-tools (Ubuntu Bionic)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/2083665
Title:
ubuntu-pro-client has an unnecessary dependency on python3-pkg-
resources
Status in ubuntu-advantage-tools package in Ubuntu:
Fix Released
Status in ubuntu-advantage-tools source package in Xenial:
Fix Released
Status in ubuntu-advantage-tools source package in Bionic:
Fix Released
Status in ubuntu-advantage-tools source package in Focal:
Fix Released
Status in ubuntu-advantage-tools source package in Jammy:
Fix Released
Status in ubuntu-advantage-tools source package in Noble:
Fix Released
Status in ubuntu-advantage-tools source package in Oracular:
Fix Released
Bug description:
[ Impact ]
The Client had an unnecessary dependency on python3-pkg-resources. This was bringing in many unwanted dependencies to seeds after Oracular.
There is a code snippet autogenerated by setuptools which imports
pkg_resources, and that is actually needed up to Focal. Jammy and
greater only rely on pkg_resources as a fallback to importlib - which
does not justify it's inclusion as a depndency.
This was fixed in Oracular by just removing the dependency in version
34.1. However, that change would potentially break Xenial, Bionic and
Focal. So, for version 35, a new patch has been applied, implementing
a conditional dependency on the package.
As of v35, the pro client will keep depending on pkg-resources up to
Noble, but not for any subsequent release.
[ Test Plan ]
As the dependency was used directly in /usr/bin/pro, all pro commands must work after the patch exactly the same.
Thus, it's possible to claim that the acceptance tests that will be considered as validation for #2083973 also cover this bug.
Adittionally, on Oracular, we can verify that ubuntu-pro-client is installed and the dependency is not there, using `apt show`.
[ Where problems could occur ]
As this is a conditional dependency, mistakes in the implementation could lead to:
- python3-pkg-resources being present as a dependency on Oracular+ : which would bring more dependencies as explained above
- python3-pkg-resources being absent as a dependency on -Focal: which would break /usr/bin/pro. This is covered by the integration test suite.
[ Original Description ]
ubuntu-pro-client has an unnecessary dependency on python3-pkg-resources, at least grepping the source for pkg_resources doesn't show anything. Please remove it.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2083665/+subscriptions