conda-forge core meeting 2024-04-03

Add new agenda items under the Your __new__() agenda items heading

• Zoom link
• What time is the meeting in my time zone
• Previous meetings

Attendees

Name	Initials	GitHub ID	Affiliation
Klaus Zimmermann	KZ	zklaus	Quansight
wolfv	WV	wolfv	prefix.dev
Daniel Ching	DJC	carterbox	Argonne
John Kirkham	JK	jakirkham	NVIDIA/cf
Jaime Rodríguez-Guerra	JRG	jaimergp	Quansight/cf
Nichita Morcotilo	NM	nichmor	prefix.dev
Matthew R Becker	MRB	beckermr	cf
Jannis Leidel	JL	jezdez	Anaconda/cf
Marcel Bargull	MB	mbargull	Bioconda/cf

10 people total

Standing items

• [ ]

From previous meeting(s)

• [ ]

Active votes

• [ ]

Introductions

• Dasha, new community manager at Anaconda.

Your new() agenda items

• (JK) xz CVE
  • (JL) FYI: https://www.anaconda.com/blog/anaconda-not-affected-by-malicious-xz-code
  • https://conda-forge.org/blog/2024/04/02/xz-backdoor/
  • Related libarchive issues:
    • https://github.com/conda-forge/libarchive-feedstock/issues/84 + https://github.com/conda-forge/libarchive-feedstock/issues/85
  • xz feedstock is archived
    • https://github.com/conda-forge/xz-feedstock/issues/41
• (JK) NumPy 2
  • Bringup discussion
    • https://github.com/conda-forge/conda-forge.github.io/issues/1997
  • NumPy 2.0.0rc1
    • https://github.com/conda-forge/numpy-feedstock/issues/311
  • Ecosystem NumPy update tracker
    • https://github.com/numpy/numpy/issues/26191
• (NM) rattler-build integration in conda-smithy
  • https://github.com/conda-forge/conda-smithy/pull/1876
• (WV) pixi release with more PyPI integration
• (MB) Still ongoing anaconda.org issues?
  • https://github.com/conda/infrastructure/issues/899

Pushed to next meeting

• [ ]

CFEPs

• [ ]