Bug 2497349 - Review Request: rust-glycin-builtin - Sandboxed image decoding
Summary: Review Request: rust-glycin-builtin - Sandboxed image decoding
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Michel Lind
QA Contact: Fedora Extras Quality Assurance
URL: https://crates.io/crates/glycin-builtin
Whiteboard:
Depends On:
Blocks: 2492988
TreeView+ depends on / blocked
 
Reported: 2026-07-06 13:55 UTC by Fabio Valentini
Modified: 2026-08-11 10:50 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2026-08-11 10:50:00 UTC
Type: ---
Embargoed:
michel: fedora-review+


Attachments (Terms of Use)

Description Fabio Valentini 2026-07-06 13:55:17 UTC
Spec URL: https://decathorpe.fedorapeople.org/rust-glycin-builtin.spec
SRPM URL: https://decathorpe.fedorapeople.org/rust-glycin-builtin-4.0.0~alpha-1.fc44.src.rpm
Upstream URL: https://crates.io/crates/glycin-builtin

Description:
Sandboxed image decoding.

Fedora Account System Username: decathorpe

Comment 1 Fabio Valentini 2026-07-06 13:56:12 UTC
A successful build with all dependencies present is available in COPR:
https://copr.fedorainfracloud.org/coprs/decathorpe/glycin-next/monitor/

rust2rpm.toml config file:

```
[package]
license-files = ["LICENSE-LGPL-2.1", "LICENSE-MPL-2.0"]

[[package.extra-sources]]
number = 2
file = "https://gitlab.gnome.org/GNOME/glycin/-/raw/2.2.alpha.4/LICENSE-LGPL-2.1"
comments = ["https://gitlab.gnome.org/GNOME/glycin/-/work_items/305"]

[[package.extra-sources]]
number = 3
file = "https://gitlab.gnome.org/GNOME/glycin/-/raw/2.2.alpha.4/LICENSE-MPL-2.0"
comments = ["https://gitlab.gnome.org/GNOME/glycin/-/work_items/305"]

[features]
# either the "async-io" or "tokio" backend needs to be enabled
enable = ["async-io"]

[scripts]
prep.post = ["cp -pav %{SOURCE2} %{SOURCE3} ."]
```

Comment 2 Michel Lind 2026-07-24 16:08:57 UTC
issue already filed for the missing license files, and this has been fixed in git - all good. Please rebase to the latest once the whole stack is ready

===

Package was generated with rust2rpm, simplifying the review.

✅ package contains only permissible content
✅ package builds and installs without errors on rawhide
✅ test suite is run and all unit tests pass
🫤 latest version of the crate is packaged (spec: 4.0.0~alpha; crates.io: 4.0.0-alpha.7 — update)
✅ license matches upstream specification and is acceptable for Fedora (spec & Cargo.toml: MPL-2.0 OR LGPL-2.1-or-later)
🫤 license file is included with %license in %files (included manually)
✅ package complies with Rust Packaging Guidelines

Package APPROVED.

===

Recommended post-import rust-sig tasks:

- set up package on release-monitoring.org:
  project: glycin-builtin
  homepage: https://crates.io/crates/glycin-builtin
  backend: crates.io
  version scheme: semantic
  version filter (*NOT* pre-release filter): alpha;beta;rc;pre
  distro: Fedora
  Package: rust-glycin-builtin

- add @rust-sig with "commit" access as package co-maintainer
  (should happen automatically)

- set bugzilla assignee overrides to @rust-sig (optional)

- track package in koschei for all built branches
  (should happen automatically once rust-sig is co-maintainer)

Comment 3 Fabio Valentini 2026-07-30 12:41:19 UTC
Thank you for the review!
I'll import and build when the whole stack is ready to avoid breaking the existing GNOME packages in rawhide.

Comment 4 Fedora Admin user for bugzilla script actions 2026-07-30 15:23:01 UTC
The Pagure repository was created at https://src.fedoraproject.org/rpms/rust-glycin-builtin
Monitoring:
Wasn't able to create project in Anitya. You can create it manually on: `https://release-monitoring.org`

Comment 5 Fabio Valentini 2026-08-11 10:50:00 UTC
Imported and built:
https://bodhi.fedoraproject.org/updates/FEDORA-2026-592ddc83fc

Update to the latest version will be handled as part of the work for glycin 2.2.beta and loupe 51.beta.


Note You need to log in before you can comment on or make changes to this bug.