15:00:15 <tmazur> #startmeeting horizon 15:00:15 <opendevmeet> Meeting started Wed Jun 26 15:00:15 2024 UTC and is due to finish in 60 minutes. The chair is tmazur. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:15 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:15 <opendevmeet> The meeting name has been set to 'horizon' 15:00:38 <tmazur> Welcome to the weekly meeting! 15:01:17 <tmazur> Let's begin 15:01:44 <tmazur> #topic Notices 15:02:06 <tmazur> Traditional schedule reminder: 15:02:14 <tmazur> This week is R-14. 15:02:24 <tmazur> Dalmatian release schedule: https://releases.openstack.org/dalmatian/schedule.html 15:03:38 <tmazur> The next OpenInfra PTG dates were announced. It will take place October 21-25, 2024 virtually. 15:03:55 <tmazur> PTG Site: https://openinfra.dev/ptg/ 15:04:50 <tmazur> I signed up our team. 15:05:32 <tmazur> Information about signing up for time slots will be sent to moderators after the team signup deadline, which is August, 30th. 15:06:01 <tmazur> I am thinking of requesting our usual time slots. 15:07:23 <tmazur> Tuesday 14 UTC - 16 UTC and Wednesday 16 UTC -17 UTC. 15:07:35 <tmazur> But we will discuss it closer to the date 15:08:58 <tmazur> Moving to the next topic. 15:09:11 <tmazur> #topic Open discussion 15:10:14 <vishalmanchanda> I have one topic for today. 15:10:25 <tmazur> Please go ahead 15:10:31 <vishalmanchanda> thanks 15:11:37 <vishalmanchanda> I opened a new bug for 2 Xstatic pypi XStatic-jquery-ui and XStatic-JQuery.quicksearch 15:12:46 <vishalmanchanda> Horizon is still using older version of these pypi, I will try to update these pypi package. 15:13:06 <vishalmanchanda> and update horizon code to work with there latest version. 15:13:10 <tmazur> Thank you very much vishalmanchanda! 15:13:16 <vishalmanchanda> https://bugs.launchpad.net/horizon/+bug/2070439 15:13:25 <vishalmanchanda> https://bugs.launchpad.net/horizon/+bug/2070486 15:13:46 <rdopiera> let me know if you run into any problems or have any questions 15:14:07 <vishalmanchanda> rdopiera: sure, will ask you if need any help. 15:14:27 <tmazur> Yes, please. 15:14:39 <vishalmanchanda> rdopiera: one question how can we check if horizon is using any Xstatic packages or not? 15:15:35 <vishalmanchanda> like there many Xstatic packages in horizon ``requirement.txt`` file as of now https://github.com/openstack/horizon/blob/master/requirements.txt#L35-L62 15:16:12 <rdopiera> they are configured in https://github.com/openstack/horizon/blob/master/openstack_dashboard/utils/settings.py#L231 15:16:22 <rdopiera> this is what is getting loaded into the browser 15:16:47 <rdopiera> but whether the js in the browser is making use of it -- I suppose we could try disabling a module to see what breaks 15:18:38 <vishalmanchanda> how we do that? I mean do you think we have enough test cases in our CI jobs which will detect these issue if we disable it. 15:19:18 <rdopiera> ¯\_(ツ)_/¯ 15:19:36 <rdopiera> the other possibility is to grep for their functions in the js code 15:19:36 <tmazur> Some of the dependencies are for jasmine only, it seems 15:20:04 <vishalmanchanda> ok 15:20:22 <vishalmanchanda> second question: In your organization, are you using any tools to check if there is any CVE issue in the code like for static code analysis. 15:20:23 <rdopiera> some of those modules might have only been used in the panels that are now angularized 15:20:46 <vishalmanchanda> rdopiera: ok. 15:21:04 <rdopiera> you mean reported CVEs, or potential security holes? 15:21:08 <vishalmanchanda> yes 15:21:20 <rdopiera> yes which one 15:21:48 <rdopiera> we do track all reported CVEs at Red Hat, and they get assigned to corresponding teams 15:22:08 <rdopiera> and we backport fixes for them in our packages 15:22:33 <rdopiera> it's not a single tool, rather a company-wide process 15:23:00 <vishalmanchanda> ok, got it. 15:24:23 <rdopiera> I would like to propose removing the old integration tests job from the gate, to conserve resources. 15:24:42 <rdopiera> It's been failing anyways. 15:24:54 <vishalmanchanda> yeah we can do that. 15:25:00 <tmazur> Let's do it 15:25:02 <janjasek> +1 15:25:33 <rdopiera> And I would also like to remove the code at some point too, so that we don't keep dead code. But that's not urgent. 15:25:45 <tmazur> We have the new job running for quite a while already, and it is stable and covers pretty much everything 15:25:55 <vishalmanchanda> +1. 15:25:56 <rdopiera> we always have history in git if we ever need to check that code again 15:26:24 <janjasek> yep, agree 15:27:02 <tmazur> We can remove the old job from the gate now and plan removing the code for the next cycle 15:27:22 <rdopiera> I also noticed that the chair is wrong on https://meetings.opendev.org/#Horizon_Team_Meeting 15:27:36 <rdopiera> And we are not updating the agenda anymore 15:29:35 <tmazur> I need to look into that, thanks rdopiera 15:30:59 <vishalmanchanda> tmazur: for your reference https://review.opendev.org/c/opendev/irc-meetings/+/795110 15:32:46 <tmazur> Thanks! 15:34:48 <tmazur> Does anyone have anything else to discuss? 15:35:22 <rdopiera> I don't 15:35:36 <vishalmanchanda> nothing from my side. 15:35:44 <janjasek> no :) 15:35:54 <omcgonag> first time on the channel, nothing from my :) 15:36:12 <tmazur> Ok. Then there's a friendly reminder to take a look at the patches we have on review :) 15:36:32 <tmazur> And we have one from our Outreachy intern: https://review.opendev.org/c/openstack/horizon/+/922788 15:36:42 <tmazur> So please take a look when you have time 15:38:32 <tmazur> And thanks everyone for joining! Let's end the meeting. 15:38:43 <tmazur> #endmeeting