From e1ff97f15755963b4dd19aba052d4321af0c58f1 Mon Sep 17 00:00:00 2001 From: Cary Phillips Date: Tue, 24 Sep 2019 21:30:59 -0700 Subject: [PATCH] TSC meeting notes for the last 3 weeks Signed-off-by: Cary Phillips --- ASWF/tsc-meetings/2019-09-17.md | 49 +++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 ASWF/tsc-meetings/2019-09-17.md diff --git a/ASWF/tsc-meetings/2019-09-17.md b/ASWF/tsc-meetings/2019-09-17.md new file mode 100644 index 0000000000..cbd5c3fb96 --- /dev/null +++ b/ASWF/tsc-meetings/2019-09-17.md @@ -0,0 +1,49 @@ +# 9/17/2019 + +### Attendees: + +* Cary Phillips +* Christina Tempelaar-Lietz +* Rod Bogart +* Kimball Thurston +* Peter Hillman +* Joseph Goldstone + +### Discussion + +* Beta v2.4.0-beta.1 is ready for official release. + +* Next up: + + * finish off the CII best practices badge. + + * fix sonar bugs + + * request updates to mitre.org CVE entries. + + * Still waiting on Lucasfilm Business Affairs to configure EasyCLA; + repo move is blocked until that happens. + + * Start port of PyImath to pybind11, which is going to be a lot of work. + + * clang-format (not to be confused with clang-tidy, which is + different) - Larry has a setup on OIIO that runs clang-format on + PR, rejects if the formatting is off but also posts a diff, so the + submitter can get the formatting right even if they don't have + clang installed. + +* CVE's: + + * CVE-2016-4629 and CVE-2016-4629 were fixed by Apple in the OS. + + * CVE-2006-2277 - the link on the mitre.org page is broken, but the + offending .exr is available on the internet archive wayback + machine here: + https://web.archive.org/web/20060520062054/http://w148.de/~cmertes/nachbarhaus1.exr + +* Christina gives an overview of SonarCloud set-up. Read the YAML + documentation here: + https://docs.microsoft.com/en-us/azure/devops/pipelines/yaml-schema?view=azure-devops&tabs=schema + +* Joseph: We should reach out to distro packagers and + request/encourage/help them to update to the new release.