Nixpkgs: QtWebKit needs to be deprecated

[veprbl]

QtWebKit was deprecated in Qt 5.6. We are now using an outdated unofficial port:

https://github.com/NixOS/nixpkgs/blob/b0705bcbcebfea359643112fd200b549035d9503/pkgs/development/libraries/qt-5/5.12/default.nix#L40-L49

In some cases, applications already provide support for using QtWebEngine instead, we just need to enable it. The advantage of using QtWebEngine is that it is supported by the Qt upstream.

This issue is to track progress (or lack thereof) in deprecation of QtWebKit.

Overview

Legend: ✔︎ - dependency can be removed, ✘ - no straightforward solution was found, ? - dependency can be removed at a cost

• [ ] apitrace - ✔︎ judging by upstream git master it doesn't need qtwebkit
• [ ] apmplanner2
• [ ] bibletime
• [ ] blink - python
• [ ] cadence - python
• [x] calibre - #79608 #92118
• [ ] calligra - #102490 ? ["QWebPage needed for webpage plugin"] (https://github.com/KDE/calligra/blob/2c601b660e8845ca3ffeeb1509db386bfcddec70/CMakeLists.txt#L1023)
• [ ] capybara-webkit - ruby
• [ ] cb2bib - ✔︎ https://www.molspaces.com/cb2bib/doc/overview/ Requirements: "QtWebKit or QtWebEngine library (optional) to compile cb2Bib Annote viewer"
• [ ] copyq - ? https://github.com/hluk/CopyQ/issues/540 . Also in readme it says following about the dependencies: "Optionally QtWebKit (more advanced HTML rendering)"
• [ ] brewtarget - ✔︎ qtwebkit is not in the list of the dependencies
• [x] digikam - #53083
• [x] freecad - #98845
• [x] frescobaldi - #76889
• [x] ghostwriter - 6b73aa91e0438f5d84c1d4d1ff1e648b9f554d29
• [ ] google-musicmanager - ✘ see comment below
• [x] golden-cheetah - #76172
• [ ] goldendict - ✘ https://github.com/goldendict/goldendict/issues/677
• kde
  
  
  
  • [ ] alkimia
  
  
  • [x] k3b - #103164
  
  
  • [x] kdenlive - 2ff2ef1a52acb7264f014e6f77bfe2c4776a78e4
  
  
  • [ ] kdevelop5 - ✔︎ both QtWebKit and QtWebEngine are supported https://github.com/KDE/kdevelop/blob/5e17ba4cd7a50816825a279c70a6b1c64a701926/kdevplatform/documentation/CMakeLists.txt#L3-L16
  
  
  • [ ] kdewebkit
  
  
  • [ ] kreport - #102490 https://phabricator.kde.org/T3565
  
  
  • [ ] konqueror - #102490
  
  
  • [x] marble - #94826
  
  
  • [x] messagelib - c2366ae35036be6e1b26ec36ad6c9cf4d346ed27
  
  
  • [ ] rocs - #102490
  
  
• [ ] kexi - ✘ upstream task https://phabricator.kde.org/T10389
• [x] ksysguard, libksysguard - 505f0c2232b9b09b259e2c3279fd3c0d5a67cbfb
• [ ] lsd2dsl
• [ ] mendeley - ✔︎ our current expression depends on both qtwebkit and qtwebengine, AUR manages with qtwebengine only https://aur.archlinux.org/packages/mendeleydesktop/
• [ ] merkaartor - ✔︎ use USEWEBENGINE=1 https://github.com/openstreetmap/merkaartor/issues/107
• [ ] mindforger - ✔︎ "qmake CONFIG+=mfwebengine ... build project w/ Qt WebEngine instead of Qt WebKit"
• [ ] minizincide - expression we have depends on both qtwebengine and qtwebkit
• [x] musescore - #52835
• [ ] mythtv - ✘ https://github.com/MythTV/mythtv/blob/master/mythtv/configure#L6526
• [x] nextcloud-client - #75202
• [ ] nixnote2 - ✔︎ should be already using QtWebEngine https://github.com/notepadqq/notepadqq/projects/1
• [x] nmapsi4 - #59266
• [ ] notepadqq - ✔︎ should be using qtwebengine already https://github.com/notepadqq/notepadqq/blob/master/README.md#build-it-yourself
• [ ] oilrush
• [ ] openshot-qt - https://github.com/OpenShot/openshot-qt/pull/2512
• [x] owncloud-client - #75206
• [ ] p4v
• [ ] phantomjs2 - ✘ https://github.com/ariya/phantomjs/issues/14366
• [x] psi-plus - 8f5bafe599fff1917130d2fa8cc7080bfc44ed2e
• [x] rstudio - #59512
• [ ] shotcut - ✘ https://forum.shotcut.org/t/is-that-any-plan-for-porting-from-qt-webkit-to-qt-webengine/5816
• [ ] scudcloud - ✘ python, abandonware https://github.com/raelgc/scudcloud/issues/628
• [ ] sigil - ✘ no port to QtWebEngine so far
• [x] skrooge - #55930
• [ ] sleepyhead - ✔︎ very light use of QWebView can be fixed to use QtWebEngine with some simple patches from https://gitlab.com/sleepyhead/sleepyhead-code/merge_requests/21
• [ ] smtube - ✘ no traces of QtWebEngine support in svn trunk
• [ ] subsurface - ? "QtWebKit is needed, if you want to print"
• [x] supercollider - #63812
• [ ] swift-im - ✘ dependency on QtWebKit is mentioned in https://github.com/swift/swift/blob/master/README.md and https://wiki.xmpp.org/web/Summer_of_Code_2017#Design_a_Chat_View_Free_of_QtWebKit.2FQtWebEngine
• [ ] teamviewer - ✘ checked version 15.0.8397: still links to libQt5WebKitWidgets.so.5 libQt5WebKit.so.5
• [x] toggldesktop - #54587
• [ ] trojita - ✘ https://bugs.kde.org/show_bug.cgi?id=365299
• [ ] qlandkartegt - ✔︎
• [ ] qmc2 - ✘ no traces of QtWebEngine support in SVN trunk
• [x] qsyncthingtray - supports qtwebkit optionally
• [ ] qtwebkit-plugins
• [ ] quiterss - ? migrate to https://github.com/QuiteRSS/quiterss2 ?
• [ ] wkhtmltopdf - ✘ https://github.com/wkhtmltopdf/wkhtmltopdf/issues/3391, needs to be ported to qt5 though
• [ ] yacas - ✔︎ https://github.com/grzegorzmazur/yacas/commit/b8581b42eb0b9994ea7f8bfc709c0beaf39f7226
• [x] zeal - ✔︎ https://github.com/zealdocs/zeal/pull/1125

How to help?

1. Take an open item from the list that doesn't have a comment, google "\
2. Take an open item from the list that does have a comment and ping a maintainer if the fix is possible. Alternatively try fixing it yourself.

[bhipple]

I don't think we'll be able to kill the dependency easily in google-musicmanager, since we're already on Google's latest release, which lists this as an explicit dependency:

$ curl http://dl.google.com/linux/musicmanager/deb/dists/stable/main/binary-amd64/Packages
Package: google-musicmanager-beta
Version: 1.0.467.4929-r0
Architecture: amd64
Maintainer: Google Music Team <[email protected]>
Installed-Size: 16766
Pre-Depends: dpkg (>= 1.14.0)
Depends: libc6 (>= 2.16), libexpat1 (>= 2.0.1), libflac8 (>= 1.3.0), libgcc1 (>= 1:4.1.1), libidn11 (>= 1.13), libqt5core5a (>= 5.2.0), libqt5gui5 (>= 5.0.2) | libqt5gui5-gles (>= 5.0.2), libqt5network5 (>= 5.0.2), libqt5webkit5, libqt5widgets5 (>= 5.2.0), libstdc++6 (>= 4.6), libvorbisfile3 (>= 1.1.2), xdg-utils (>= 1.0.2)

[KAMiKAZOW]

We are now using an outdated unofficial port

Not unofficial – endorsed by Qt: https://code.qt.io/cgit/qt/qtwebkit.git/ And currently in the process of a massive overhaul thanks to Patreon funding.

[veprbl]

@KAMiKAZOW This is definitely a good news for qtwebkit and its users. However, we are using a specific 5.212-alpha version that is outdated and contains known CVE's. Looking at the repo at your link, it doesn't seem to contain any significant update to address those issues. I doubt anyone would endorse this software in its current state.

[KAMiKAZOW]

Looking at the repo at your link, it doesn't seem to contain any significant update to address those issues.

The development happens here on Github. "My" link was solely a reference proving that it's not unofficial but instead adopted by upstream Qt.

As you can read under https://github.com/qtwebkit/qtwebkit/blob/qtwebkit-dev/ReadMe.md#this-repository-development the qtwebkit-dev branch is the update to current WebKit master.

[sikmir]

zeal ported to qtwebengine (https://github.com/zealdocs/zeal/pull/1125), not released yet.

[bachp]

Freecad will be ported with the 0.19 release https://github.com/FreeCAD/FreeCAD/commit/75fd7231e05be6a7fcd76cd2c00f9eda0bef2f28, not released yet

[bachp]

messagelib no longer depends on qtwebengine since https://github.com/NixOS/nixpkgs/commit/c2366ae35036be6e1b26ec36ad6c9cf4d346ed27

[gebner]

freecad no longer depends on qtwebkit since we switched to the 0.19 prerelease in #98845/#100972.