# HG changeset patch # User John Rouillard # Date 1752287535 14400 # Node ID 118897c90d4ede88dbdc28a3f935ce057a3e8c8a # Parent edc69df0efeb58b8035a67f6a8e63d1ae57e7f7b build: remove python 2.x directions; other notes/clarifications diff -r edc69df0efeb -r 118897c90d4e RELEASE.txt --- a/RELEASE.txt Fri Jul 11 22:31:07 2025 -0400 +++ b/RELEASE.txt Fri Jul 11 22:32:15 2025 -0400 @@ -147,10 +147,10 @@ 11. Unpack the new tarball created in dist/roundup-.tar.gz file in /tmp then - a) run tests using installed pytest run under python2 and - python3. (python2 -m pytest test/; python3 -m pytest test/) + a) run tests using installed pytest run under + python3. (python3 -m pytest test/) b) demo.py - with all available Python versions. + with all available Python 3 versions. 11a. (TBD how to test wheel binary distribution before uploading.) 11b. Generate GPG signature file @@ -269,12 +269,26 @@ You may need to explicitly update/refresh the scanners with: "docker pull anchore/grype:latest" and similarly for aquasec/trivy if used. + + Note that some security issues may show up. If they are in the + underlying OS package we can't do anything but make sure the + latest python:3-alpine package is used to build the image. Look + at the index digest on the image release page and compare it to + the sha256 at the top of the Dockerfile. + 17d. test roundup in demo mode: docker run -it --rm -p 8917:8080 \ -v $PWD/tracker:/usr/src/app/tracker \ rounduptracker/roundup:2.4.0 demo + FIXME: right now the external port number (8917) in the above + command is hardcoded in DOCKER. It can be overridden usng + PORT_8080=9017 for example. However the host is always + localhost. Consider replacing PORT_8080 with ORIGIN="host:port" + or ORIGIN="port" so that the web URL can be made correct when + running docker on a remote server. + 17e. push to DockerHub login (login using 'docker login ' first and user must be member of rounduptracker org with ability to publish). Replace -N with the release number (e.g. -1, -2, -3...)