[QGIS-Developer] A load of updates in OSGeo4W

Jürgen E. Fischer jef at norbit.de
Thu Apr 18 06:37:42 PDT 2024


Hi Julien,

On Thu, 18. Apr 2024 at 12:27:43 +0200, Julien Moura (Oslandia) via QGIS-Developer wrote:
> Does this mean that the version of Python and other dependencies will change
> in the current LTR or not (installed via msi or osgeo4w)?

That should not be necessary anymore.  The dependencies should be fine for a
while now.  Some of them were behind and complaints about that were increasing.

Some with regard to security, although some if not all just based on plain scan
results and not on actual assessments of the real severity of vulnerabilities -
which should have been low in the context of QGIS Desktop.  Still they were
valid.

We were still using OpenSSL 1 (no complaints about that though), which both Qt5
and Python were build against.  So both were blocking the update to OpenSSL 3.
And Qt6 needed to be introduced, preferably not built against the old OpenSSL -
although that would probably still have been a possibility.

So Python and Qt5 had to be rebuilt along with there reverse dependencies,
which almost is everything else there is.  So that was a good time to also
update.

> To what extent is this linked to https://github.com/qgis/QGIS/issues/54491?

To some.


> Also, how are these massive OSGeo4W updates discussed and decided?  Is it on
> the OSGeo discourse or on the mailing list or somewhere else?

There's not much discussion about OSGeo4W.  There's is a bug tracker
https://trac.osgeo.org/osgeo4w and a mailing list
https://lists.osgeo.org/pipermail/osgeo4w-dev/


Jürgen

-- 
Jürgen E. Fischer           norBIT GmbH             Tel. +49-4931-918175-31
Dipl.-Inf. (FH)             Rheinstraße 13          Fax. +49-4931-918175-50
Software Engineer           D-26506 Norden            https://www.norbit.de
QGIS release manager (PSC)  Germany                 IRC: jef on Libera|OFTC
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/qgis-developer/attachments/20240418/be06f2cb/attachment-0001.sig>


More information about the QGIS-Developer mailing list