Void-packages: [TRACKING] removal of webkitgtk{,2} package

Created on 7 Sep 2018  路  17Comments  路  Source: void-linux/void-packages

webkitgtk2 had its last release 2,5 years ago. Since then various bugs in webkit came up. To reduce the attack surface of applications using webkitgtk we should replace it with its successor webkit2gtk or ultimatively remove applications that depend on webkitgtk. Namely those packages are:

$ xbps-query -RX webkitgtk2
````
* [x] geany-plugins-extra-1.33.0_2
* [x] libgnucash-2.6.19_1
* [x] python-webkit-1.1.8_1
* [x] webkitgtk2-devel-2.4.11_6
* [x] wxWidgets-3.0.4_7
* [x] yad-0.40.3_1

$ xbps-query -RX webkitgtk
```

  • [x] balsa-2.5.6_1
  • [x] birdie-1.1_3
  • [x] dwb-2014.03.07_4
  • [x] foobnix-3.1.01_2
  • [x] lightdm-webkit-greeter-2.0.0_2
  • [x] uzbl-0.9.1_4
  • [x] webkitgtk-devel-2.4.11_6

All 17 comments

lightdm-webkit-greeter can be replaced by Antergos web-greeter. I made a template for it already a few month ago https://github.com/Johnnynator/void-packages/commits/lightdm-webkit2

No other package depends on libgnucash according to xbps-query -RX so it's a matter of updating the gnucash package to the 3.x release which is able to use webkit2gtk. My last attempt at updating that package failed because of issues with some google library. I will try again with the current release.

wxWidgets can at least partially be replaced by the -gtk3 version which can provide the webview functionality using webkit2gtk. I havent tried if all packages that currently are compiled against the gtk2 version will work with the gtk3 version yet. The PR for that is https://github.com/void-linux/void-packages/pull/2433 . If the ultimate goal is removal of the wxWidgets package, I will modify that to build the -common package from the -gtk3 sourcepkg instead of the wxWidgets package to make removal of it later easier.

EDIT: wxWidgets is now built without webview functionality.

working on uzbl

uzbl is still working on webkit2gtk

'dwb` seems to be dead, last commit was on 2016

birdie has support upstream but needs a new tagged release.

yad has support upstream but needs a new tagged release.

dwb also segfaults so i can say nobody is using it or somebody is using it but never ran xbps-install -Su

Removing webkit dependency on handbrake (#2728) , apparently it never had that dependency to begin with.

Removing webkit dependency on rhythmbox (#2729), it was removed on 3.4 with this message.

  • No longer uses webkit (partly due to OpenBSD W^X enforcement)

Removing webkit dependency on cinnamon (#2730), it was removed on 3.2.0 with this message.

[ itzexor ]

  • cinnamon-settings: remove unused webkit code and dependency

removing webkit dependency on apvlv (#2731), it is guarded behind a switch that is OFF by default and we never touched it, so there is no loss in removing it.

See the debian changelog for the switch info.

Regarding python-webkit: I could not find any package that depends on it and the git repository at https://git.savannah.gnu.org/cgit/pythonwebkit.git lists no changes for the last 7 years. It looks to me like the package could just be removed.

python-webkit (aka pywebkitgtk) is old and dead upstream. Can be safely removed.

python-webkit was removed on #2782

Proposal:

  • remove yad. There's zenity, kdialog, dialog,..
  • remove lightdm-webkit-greeter; add lightdm-webkit-greeter as suggested by @Johnnynator
  • remove uzbl
  • remove foobnix
  • remove birdie

This https://github.com/void-linux/void-packages/pull/4157 removes uzbl foobnix birdie and lightdm-webkit-greeter.

currently webkitgtk fails to build on armv7l-musl and it is blocking the ICU update on that arch.

webkitgtk has been removed :+1:

Was this page helpful?
0 / 5 - 0 ratings