Am Sonntag, den 09.05.2021, 16:27 +0200 schrieb Maxime Devos: > Leo Famulari schreef op zo 09-05-2021 om 10:05 [-0400]: > > On Sun, May 09, 2021 at 01:27:29AM +0200, Leo Prikler wrote: > > > * gnu/packages/xml.scm (expat-2.3.0): New variable. > > > (expat)[replacement]: Add it. > > > > Nitpick: It should be > > > > (expat)[replacement]: New field. > > > > Otherwise, looks okay assuming ABI compatibility, but we only use > > grafts > > for security updates. > > The maintainer of expat will release a 2.4.0 with security fixes > soon. > > Greetings, > Maxime. Indeed, the mail they dropped over at guix-devel made it seem as though not being on 2.3.0 was a security risk already. The ChangeLog does mention some items worth fuzzing over. That said, I simply wanted to claim a bug ID for this and let people check whether the update really breaks nothing. The list of dependants is far too big for me to handle. Regards, Leo