Standup Notes 2021 01 26

Participants (alphabetical): Allie, Conor, Erik, John, Kevin, Mickael, Ro

Topics and Call-outs

CI fixes

• Fix for CI in develop https://github.com/freedomofpress/securedrop/pull/5749
• Backport approved when CI passes
• dh-virtualenv install breakage in sid repo, getting from Ubuntu 20.10 for now in container
• Unbreaking bandit in dev container involved dropping sudo, not sure why it was there to begin with. Looks like it broke for lots of folks today, unclear on underlying issue.

1.7.0

Release issue: https://github.com/freedomofpress/securedrop/issues/5689

Allie was able to verify that some issues we discovered in QA are also present in 1.6.0.

i18n: a few languages left to review, should have translations merged by 1:30 Eastern.

- Our policy is that we don't release if we don't have 100% language coverage, but we may make exceptions for languages that are not used by any known production instance. A good post-release discussion -- when do we offboard/re-evaluate languages?

- Untranslated strings will fall back to English.

- Merge is into develop, then backport.

Docs/messaging:

• Final 1.7.0 release messaging awaiting review
• Upgrade guide awaiting review: https://github.com/freedomofpress/securedrop-docs/pull/139 <- Kev will review
• Advisory awaiting final review -> Proposal is to post 1) advisory + tweets, 2) release blog post, around release time.

Aiming for release logistics to start around ~4PM EST. Conor available to take over in the evening EST.

Post-release

Pile-up in ready for review, please help clear backlog as we come up for air

Allie

Yesterday:

• SecureDrop 1.6.0 downgrading fun and testing
• Comparing pyside2, pyside6, pyqt - what are the actual benefits to switching to pyside?

Today:

• Review final 1.7.0 release messaging awaiting review
• Release SecureDrop 1.7.0

Blockers or Asks:

• None

Conor

Yesterday:

• Reproducible wheels PRs merged, see https://github.com/freedomofpress/securedrop-debian-packaging/pull/213

Today:

• Quick docs PR for "release" branch on apt-qa.freedom.press, non-blocking on release
• Review and merge https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/pull/27
• Kernel source request
• Hardware wrangling: 10th-gen T490, possibly NUC10
• Stretch goal: review Qubes testinfra tests https://github.com/freedomofpress/securedrop/pull/5712

Blockers or Asks:

• None

Erik

Yesterday:

• Backlog grooming and associated follow-up
• Finish release messaging

Today:

• i18n credits for release messaging, release comms
• Back to securedrop-admin as time permits

Blockers or Asks: None

John

Yesterday:

Today:

• i18n fun
• Review, Focal install

Blockers or Asks: None

Kev

Yesterday:

• QA for 1.7.0

Today:

• Safe Deletion work
• Review upgrade guide

Blockers or Asks: None

Kushal

Time off

Mickael

Yesterday:

• ci fix, builder image updates Today:
• review advisory for 1604 and v2 onion servies
• rm tasks as needed
• maybe focal install on hardware tomorrow Blockers or Asks:
• none

Ro

Yesterday:

Today:

Blockers or Asks: