Launchpad now supports bug tracking for Personal Package Archives (PPAs). You can report and track issues against a PPA, individual source packages within it, and specific Ubuntu releases. This brings bug reports closer to the packages they concern, giving users a place to report …
Read more of Bug Tracking for PPAs Is Now Available in Launchpad →
Supply-chain attacks that harvest developer credentials are on the rise. The Shai-Hulud campaign, for example, used automated scanners to sweep up any secrets they could find in files and keyrings. If you use Launchpad’s API, one of those secrets is your API token – and …
Read more of Protect your Launchpad API tokens with a security key →
We would like to share an update regarding our plans for the Blueprints and Translations features in Launchpad. Retiring Launchpad Blueprints Launchpad Blueprints are lightweight feature specifications attached to projects and distributions. As the usage of Blueprints has …
Read more of Launchpad product roadmap updates – Blueprints and Translations →
Launchpad Merge Proposals, a VS Code extension for reviewing Launchpad merge proposals, is now available on the Visual Studio Marketplace as a preview release. The extension brings the review into the editor. It finds the merge proposals for the branch you have checked out, …
Maintainers can now merge changes (merge proposals) directly from the Launchpad UI. The new Request merge button is available to anyone with permission to push to the target branch. Launchpad enables it if the merge proposal has: An active status and an up-to-date diff No …
Read more of Merge Launchpad merge proposals with one click →
PPA maintainers now have more control over where their build dependencies come from. With PPA dependency pinning, you can assign priorities to the PPAs your builds depend on, helping ensure that your packages build against the software you intend to use. Whether you are testing a …
The Launchpad team will host its eighth public documentation office hour this Friday, September 4th, from 1330 UTC. In this session, we will be conducting a documentation clinic for projects hosted on Launchpad. If your project is on Launchpad and you’d like some guidance on …
Read more of Launchpad documentation office hour #8: Documentation clinic →
Launchpad builds charm recipes and uploads them to Charmhub on your behalf. Up until now, the uploads were authorized via Candid. Charmhub is retiring Candid and moving to Ubuntu One SSO, which is the same sign-on service that Launchpad already uses for snap recipes. We have …
Read more of Charm recipe uploads now authorize with Ubuntu SSO →
We received a private report from a security researcher describing a vulnerability affecting Launchpad. The vulnerability involved the unsafe processing of tar files at build upload and custom upload. We investigated promptly and deployed a fix shortly after the report. The …
Read more of Launchpad security advisory: Fix applied for unsafe tar file extraction vulnerability →
As part of our ongoing commitment to security and transparency, we are pleased to announce an improved approach to snap manifest generation for private projects. This update specifically addresses the long-standing technical block that suppressed the creation of manifest.yaml …