Bug 2497351 - Review Request: rust-glycin-external - Sandboxed image decoding
Summary: Review Request: rust-glycin-external - Sandboxed image decoding
Keywords:
Status: RELEASE_PENDING
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Michel Lind
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 2492988
TreeView+ depends on / blocked
 
Reported: 2026-07-06 13:57 UTC by Fabio Valentini
Modified: 2026-07-30 15:21 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:
michel: fedora-review+


Attachments (Terms of Use)

Description Fabio Valentini 2026-07-06 13:57:44 UTC
Spec URL: https://decathorpe.fedorapeople.org/rust-glycin-external.spec
SRPM URL: https://decathorpe.fedorapeople.org/rust-glycin-external-4.0.0~alpha-1.fc44.src.rpm
Upstream URL: https://crates.io/crates/glycin-external

Description:
Sandboxed image decoding.

Fedora Account System Username: decathorpe

Comment 1 Fabio Valentini 2026-07-06 13:58:21 UTC
A successful build with all dependencies present is available in COPR:
https://copr.fedorainfracloud.org/coprs/decathorpe/glycin-next/monitor/

rust2rpm.toml config file:

```
[package]
license-files = ["LICENSE-LGPL-2.1", "LICENSE-MPL-2.0"]

[[package.extra-sources]]
number = 2
file = "https://gitlab.gnome.org/GNOME/glycin/-/raw/2.2.alpha.4/LICENSE-LGPL-2.1"
comments = ["https://gitlab.gnome.org/GNOME/glycin/-/work_items/305"]

[[package.extra-sources]]
number = 3
file = "https://gitlab.gnome.org/GNOME/glycin/-/raw/2.2.alpha.4/LICENSE-MPL-2.0"
comments = ["https://gitlab.gnome.org/GNOME/glycin/-/work_items/305"]

[features]
# either the "async-io" or "tokio" backend needs to be enabled
enable = ["async-io"]

[scripts]
prep.post = ["cp -pav %{SOURCE2} %{SOURCE3} ."]
```

Comment 2 Michel Lind 2026-07-24 16:52:20 UTC
Missing licenses included by hand, reported, and have been fixed in git. Please update when landing the whole stack

===

Package was generated with rust2rpm, simplifying the review.

✅ package contains only permissible content
✅ package builds and installs without errors on rawhide
✅ test suite is run and all unit tests pass
🫤 latest version of the crate is packaged (spec: 4.0.0~alpha; crates.io: 4.0.0-alpha.7 — update)
✅ license matches upstream specification and is acceptable for Fedora (spec & Cargo.toml: MPL-2.0 OR LGPL-2.1-or-later)
🫤 license file is included with %license in %files (included manually)
✅ package complies with Rust Packaging Guidelines

Package APPROVED.

===

Recommended post-import rust-sig tasks:

- set up package on release-monitoring.org:
  project: glycin-external
  homepage: https://crates.io/crates/glycin-external
  backend: crates.io
  version scheme: semantic
  version filter (*NOT* pre-release filter): alpha;beta;rc;pre
  distro: Fedora
  Package: rust-glycin-external

- add @rust-sig with "commit" access as package co-maintainer
  (should happen automatically)

- set bugzilla assignee overrides to @rust-sig (optional)

- track package in koschei for all built branches
  (should happen automatically once rust-sig is co-maintainer)

Comment 3 Fabio Valentini 2026-07-30 12:40:01 UTC
Thank you for the review!
I'll import and build when the whole stack is ready to avoid breaking the existing GNOME packages in rawhide.

Comment 4 Fedora Admin user for bugzilla script actions 2026-07-30 15:21:14 UTC
The Pagure repository was created at https://src.fedoraproject.org/rpms/rust-glycin-external
Monitoring:
Wasn't able to create project in Anitya. You can create it manually on: `https://release-monitoring.org`


Note You need to log in before you can comment on or make changes to this bug.