Open Source Release

[scy]

This issue is supposed to provide an overview of the open source release timeline and tasks.

📆 Timeline

• Dec 16: final coordination meeting
• Dec 19: last day of actual work
• Dec 20: tag 4.0.0, roll out to production server, test
• Dec 28: make GitHub repo public
• Dec 28, 17:00 CET: 38C3 session

This timeline contains some buffer for if things go wrong.

☑️ Tasks

• fix security issues
  • no significant ones left in the frontend
  • Dependabot doesn't work for the backend anymore (no uv support), but uv run --with pip-audit pip-audit -s osv seems to be a good replacement for now; maybe cross-reference with what Dependabot originally produced
• complete or postpone issues in the 4.0 milestone
• tag 4.0
• roll out to production and test
• make repo public

🗨️ Communication

There is the repo and its readmes, along with the website. Does the website need updating?

I've tagged a number of issues with flag:caveat; these are open issues that early adopter third-party users should be aware about, either because some feature that they are expecting might still be missing, or because they make setting up or maintaining DearMEP a bit more bumpy than we'd like.

📦 Post-Release

Do we want to provide support to people who are interested in using the project or contributing to it? GitHub Discussions? Public Signal group? IRC?

[scy]

All done! 🎉

Check out the release announcement.