Comment 5 for bug 1953341

Thanks for the review Ioanna!

Comments about the TODO list:

1. The 2 packages you mentioned will not require promotion. I still need to prepare an upload to Ubuntu with some changes, but let me explain the rationale:

- ruby-open4: This ruby gem is not well maintained upstream (the last commit is from many years ago), so we decided to work with upstream to move to a more well maintained gem. We decided then to use childprocess, I submitted a patch upstream with the replace and it was already merged:

https://github.com/ClusterLabs/pcs/pull/568

I need to apply this patch to our pcs package and upload to Lunar, this is in my TODO list and will be done soon. FWIW the ruby-childprocess MIR is also ongoing, waiting for the Security team review.

- python3-pyagentx: This is a dependency only for pcs-snmp, and as I explicitly mentioned in the last paragraph of the "Rationale" section in the bug description, we do not want to promote pcs-snmp, only pcs.

2. As you may know, all the mentioned MIRs are ongoing and hopefully everything will be ready to be promoted soon.

3. The Server team is already subscribed to the package.

With all the explaination above, could we assign the bug to the Security team so they can perform the needed review?