Bug 2497351

Summary: Review Request: rust-glycin-external - Sandboxed image decoding
Product: [Fedora] Fedora Reporter: Fabio Valentini <decathorpe>
Component: Package ReviewAssignee: Michel Lind <michel>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: package-review
Target Milestone: ---Flags: michel: fedora-review+
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2026-08-11 10:50:32 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2492988    

Description Fabio Valentini 2026-07-06 13:57:44 UTC
Spec URL: https://decathorpe.fedorapeople.org/rust-glycin-external.spec
SRPM URL: https://decathorpe.fedorapeople.org/rust-glycin-external-4.0.0~alpha-1.fc44.src.rpm
Upstream URL: https://crates.io/crates/glycin-external

Description:
Sandboxed image decoding.

Fedora Account System Username: decathorpe

Comment 1 Fabio Valentini 2026-07-06 13:58:21 UTC
A successful build with all dependencies present is available in COPR:
https://copr.fedorainfracloud.org/coprs/decathorpe/glycin-next/monitor/

rust2rpm.toml config file:

```
[package]
license-files = ["LICENSE-LGPL-2.1", "LICENSE-MPL-2.0"]

[[package.extra-sources]]
number = 2
file = "https://gitlab.gnome.org/GNOME/glycin/-/raw/2.2.alpha.4/LICENSE-LGPL-2.1"
comments = ["https://gitlab.gnome.org/GNOME/glycin/-/work_items/305"]

[[package.extra-sources]]
number = 3
file = "https://gitlab.gnome.org/GNOME/glycin/-/raw/2.2.alpha.4/LICENSE-MPL-2.0"
comments = ["https://gitlab.gnome.org/GNOME/glycin/-/work_items/305"]

[features]
# either the "async-io" or "tokio" backend needs to be enabled
enable = ["async-io"]

[scripts]
prep.post = ["cp -pav %{SOURCE2} %{SOURCE3} ."]
```

Comment 2 Michel Lind 2026-07-24 16:52:20 UTC
Missing licenses included by hand, reported, and have been fixed in git. Please update when landing the whole stack

===

Package was generated with rust2rpm, simplifying the review.

✅ package contains only permissible content
✅ package builds and installs without errors on rawhide
✅ test suite is run and all unit tests pass
🫤 latest version of the crate is packaged (spec: 4.0.0~alpha; crates.io: 4.0.0-alpha.7 — update)
✅ license matches upstream specification and is acceptable for Fedora (spec & Cargo.toml: MPL-2.0 OR LGPL-2.1-or-later)
🫤 license file is included with %license in %files (included manually)
✅ package complies with Rust Packaging Guidelines

Package APPROVED.

===

Recommended post-import rust-sig tasks:

- set up package on release-monitoring.org:
  project: glycin-external
  homepage: https://crates.io/crates/glycin-external
  backend: crates.io
  version scheme: semantic
  version filter (*NOT* pre-release filter): alpha;beta;rc;pre
  distro: Fedora
  Package: rust-glycin-external

- add @rust-sig with "commit" access as package co-maintainer
  (should happen automatically)

- set bugzilla assignee overrides to @rust-sig (optional)

- track package in koschei for all built branches
  (should happen automatically once rust-sig is co-maintainer)

Comment 3 Fabio Valentini 2026-07-30 12:40:01 UTC
Thank you for the review!
I'll import and build when the whole stack is ready to avoid breaking the existing GNOME packages in rawhide.

Comment 4 Fedora Admin user for bugzilla script actions 2026-07-30 15:21:14 UTC
The Pagure repository was created at https://src.fedoraproject.org/rpms/rust-glycin-external
Monitoring:
Wasn't able to create project in Anitya. You can create it manually on: `https://release-monitoring.org`

Comment 5 Fabio Valentini 2026-08-11 10:50:32 UTC
Imported and built:
https://bodhi.fedoraproject.org/updates/FEDORA-2026-592ddc83fc

Update to the latest version will be handled as part of the work for glycin 2.2.beta and loupe 51.beta.