search

keybase / client

Keybase Go Library, Client, Service, OS X, iOS, Android, Electron
BSD 3-Clause "New" or "Revised" License
8.83k stars 1.22k forks source link

Cut a release that builds with a currently supported version of Electron #26791

Open alerque opened 2 months ago

alerque commented 2 months ago

I'm the packager for the official Arch Linux packages for Keybase. They are terribly out of date because all current builds have been failing to build on any currently supported version of Electron for some time. At the time the current 6.2.x releases were made Electron26 was supported, but it went EOL shortly afterwards and we were never able to get it build. The package is currently stuck on 6.0.x, and even at that the relic of an Electron package it depends on is going to get dropped soon.

If we don't get a solution for building with current dependencies then it is going to get downgraded from official package status to an AUR package where end users have to build it themselves and work out the mess on their own.

Current supported versions are 28, 29, and 30. Please make a bump to something that is not EOL a priority so that downstream packaging can happen smoothly.

Looking around the issue tracker it looks like Fedora and others are having trouble because of this too and just using a current Electron build should make a lot of issues go away.

For a security focused app ecosystem it is unreasonable to expect people to run it on an EOL version of Electron & Chromium that is no longer being patched for known security issues.

compuguy commented 2 months ago

Honestly the fact that the Keybase-client dependencies are horridly out of date is becoming an issue on all Linux distros. The Debian/Ubuntu package depends on packages that are no longer available in Ubuntu 23.10, nor 24.04.

maxbloch commented 2 months ago

This is sad, Ubuntu 24.04 is lacking the needed dependencies libappindicator1 | libayatana-appindicator1 and libgconf-2-4 to install Keybase. Ever since Keybase was sold to Zoom, it seems like Keybase is dying a slow death. What do you guys think the chances are that maintenance will catch up soon? Maybe it is time to leave the sinking boat? I am sad, loving Keybase and have been using it for many many years.

alerque commented 2 months ago

The fact that this repos issues and issue comments are full of crypto scammers and nobody is even bothering to do issue triage and report the bad comments does not speak well of how this project is being managed.