Kunal Mehta

Treat @inheritDoc the same as @inheritdoc for PHP

10

I'm upstreaming this from https://phabricator.wikimedia.org/T219001 `@inheritDoc` (capital D) is being standardized in PHP, per the (draft) PSR-5 [1] and recent versions of phpDocumentor [2]. It would be nice if doxygen...

Support installing SecureDrop from Qubes

2

## Description After #7572 is done, we'll work on getting installing working in Qubes, which needs SSH-over-LAN access (and then optionally switches to SSH-over-Tor).

Support admin tools in Qubes (except install)

2

## Description Support the non-install admin tools in Qubes / a Debian bookworm VM. As an initial step, we're focusing on those that will work with SSH-over-Tor and don't need...

Disable noble migration at end of June 2025

2

Focal will go end-of-life at the end of May, at which point the SI will disable itself. We'll give people a 1-month grace period to use the noble migration to...

## Description ``` $ curl -I 'https://demo.securedrop.org/' HTTP/2 200 date: Tue, 20 May 2025 22:01:59 GMT content-type: text/html content-length: 3997 last-modified: Wed, 27 Apr 2022 16:23:45 GMT etag: "62696e11-f9d" accept-ranges:...

## Description We've seen a few CI failures where the reproducible debs job fails on ossec-agent. E.g. https://github.com/freedomofpress/securedrop/actions/runs/14985066932/job/42097649556?pr=7278 We also need to install `binutils` to get useful diffs via readelf...

humantime Rust dependency is unmaintained

1

## Description ``` error: 1 denied warning found! Crate: humantime Version: 2.1.0 Warning: unmaintained Title: humantime is unmaintained Date: 2025-03-08 ID: RUSTSEC-2025-0014 URL: https://rustsec.org/advisories/RUSTSEC-2025-0014 Dependency tree: humantime 2.1.0 └── env_logger...

Switch Ubuntu APT sources to use HTTPS

1

## Status Ready for review ## Description of Changes Ubuntu now supports HTTPS on their primary mirrors, including archive.ubuntu.com and security.ubuntu.com. While APT verifies integrity using PGP signatures, there have...

Investigate using apt's phased updates post-focal

1

In https://github.com/freedomofpress/securedrop/issues/7333#issuecomment-2474235833 @cfm wrote: > It looks like [APT has built-in support for phased updates](https://documentation.ubuntu.com/server/explanation/software/about-apt-upgrade-and-phased-updates/). Could that work for us, so we don't have to implement it ourselves? (This might...

noble staging failure in CI for test_all_packages_updated

3

## Description `assert "0 upgraded, 0 newly installed, 0 to remove" in c.stdout` fails for: ``` NOTE: This is only a simulation! apt-get needs root privileges for real execution. Keep...