launchpad-reviewers team mailing list archive

[Guruprasad <mp+444264@xxxxxxxxxxxxxxxxxx>]

Guruprasad has proposed merging ~lgp171188/lpci:document-security-fixes-rebuild-process into lpci:main.

Commit message:
Document how to rebuild the lpci snap for security fixes

Requested reviews:
  Launchpad code reviewers (launchpad-reviewers)

For more details, see:
https://code.launchpad.net/~lgp171188/lpci/+git/lpcraft/+merge/444264
-- 
Your team Launchpad code reviewers is requested to review the proposed merge of ~lgp171188/lpci:document-security-fixes-rebuild-process into lpci:main.

diff --git a/docs/release-process.rst b/docs/release-process.rst
index 16eeb73..8f5f27d 100644
--- a/docs/release-process.rst
+++ b/docs/release-process.rst
@@ -55,3 +55,17 @@ Some additional information
 
 - most users, as well as default CI builds in Launchpad,
   should use the stable channel rather than the auto-built ``edge`` channel
+
+Rebuilding for security fixes
+*****************************
+
+We often receive notification from the Snap Store about the ``lpci`` snap being
+built with packages from the Ubuntu archive that have since received security
+updates.
+
+To address this, we have to rebuild the snap from the `Launchpad recipe
+<https://launchpad.net/~launchpad/lpci/+snap/lpci>`_ page by requesting new builds.
+
+Once the builds have been completed and published to the Snap Store, follow the steps
+in the ``How to create a new release`` section above, starting from the 3rd step,
+to test and publish the updated snap package.