aristidb / aws

Amazon Web Services for Haskell
BSD 3-Clause "New" or "Revised" License
238 stars 107 forks source link

Allow bytestring-0.11 + support aeson-2.0 #276

Closed Bodigrim closed 2 years ago

Bodigrim commented 2 years ago

Ping @aristidb

bytestring bump is important, because aws is one of the last blockers for a wider adoption of bytestring-0.11. It also paves way for future GHC 9.2.

aeson bump allows aeson-2.0, which fixes a grave DoS vulnerability. It's important for clients to be able to build against aeson-2.0.

Bodigrim commented 2 years ago

As a Hackage Trustee, I made a revision to allow bytestring-0.11: https://hackage.haskell.org/package/aws-0.22/revisions/

aristidb commented 2 years ago

@Bodigrim I do not really have time to maintain this package anymore, but if somebody trustworthy steps up to do so I would be happy to transfer ownership.

Bodigrim commented 2 years ago

@aristidb unfortunately I know too little about AWS. Did you consider sending an email to libraries@haskell.org and/or haskell-cafe@haskell.org to find a new maintainer?

aristidb commented 2 years ago

@Bodigrim Do I need to subscribe to those mailing lists to send a mail there? Or will it send me replies to this inquiry without having to subscribe?

Bodigrim commented 2 years ago

You need to subscribe first: https://mail.haskell.org/cgi-bin/mailman/listinfo/libraries https://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe

aristidb commented 2 years ago

@Bodigrim Not joining mailing lists, but if you could please retweet this it might help? https://twitter.com/aristidb/status/1455273103278346244?s=21

cartazio commented 2 years ago

I might be interested in this, though it depends on a few life things i'm juggling this fall settling down over the next few weeks

aristidb commented 2 years ago

@cartazio Please do let me know once it's clear, I would be happy to transfer the project to you as I know that you've been in the Haskell community for quite a few years.

Bodigrim commented 2 years ago

As a Hackage trustee I made one more revision, this time allowing attoparsec-0.14: https://hackage.haskell.org/package/aws-0.22/revisions/

Bodigrim commented 2 years ago

I prefer to keep a list of my PRs actionable, so closing this as stalled.