Skip to content

Conversation

@ariel-anieli
Copy link
Contributor

Every two months, a scheduler will align the OTP matrix with Debian.

An example of a run.

For that, bump-otp-matrix.py is introduced.

When new versions are available, the GitHub workflow will be updated; therefore a token with workflow permissions is needed.

GH issue: #179

This was referenced Jun 3, 2025
@ferd
Copy link
Collaborator

ferd commented Jun 3, 2025

Since this would open a PR I think this makes sense, but we should be stricter on the dependency image we use to avoid situations where someone publishing compromised code can backwards break versions like we saw happen with opentelemetry a few months ago.

@ariel-anieli
Copy link
Contributor Author

Thanks for having looked into the PR; I augmented the PR with your feedback.
Of which OpenTelemetry issue were you talking about? I have not followed the repo lately.

@ariel-anieli ariel-anieli requested a review from ferd June 3, 2025 18:56
@ariel-anieli ariel-anieli requested a review from ferd June 3, 2025 19:07
Every two months, a scheduler will align the OTP matrix with Debian.

For that, bump-otp-matrix.py is introduced.

When new versions are available, the GitHub workflow will be updated;
therefore a token with workflow permissions is needed.

GH issue: erlware#179
Link: https://packages.debian.org/search?keywords=erlang
Signed-off-by: Ariel Otilibili <otilibil@eurecom.fr>
@ariel-anieli
Copy link
Contributor Author

Ready for review; the rebase was for an extra space in the Python script (next time will use a BEAM language).

@ferd ferd merged commit 6cff2a5 into erlware:master Jun 3, 2025
4 checks passed
@ariel-anieli ariel-anieli deleted the otp-bump-workflow branch June 4, 2025 10:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants