Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:127155 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id AF70E1A00BC for ; Sat, 19 Apr 2025 14:40:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1745073467; bh=tU6YTQewRRzHuRuEkzjxWRhjOM6wOcw5e/VND3N/+L4=; h=References:In-Reply-To:From:Date:Subject:To:Cc:From; b=bVPaYiL0GD+lSjSc1fokGz0Sdopg5qzpLGw+DUl+eawHOJVi1WCEJkk//tVJVPghx gaYhjYC0rF/dxCb4e2hwftp3gvgJ+1CbGotIXgwpTxuK85r1qb6w8iUH61kyrn2qgq NaV2h9+99p2Xpk+DWE3bcUiJZ/BDrTaRb39BpNOPJ8gqeYQdh3xvMKON6GOrIHGKDr rUDcOEuW+tdNPp/pUo8SzZe2X0FjSaIgYaoRVO4JBom09daicr9UJyJhapHVlcRQEq hvTZ93gvbSKnQ290OtNXZrdgwmRRimLYW9Dsi68vMs8dVpRINUFY+Gr0DsXosRL4K4 vytci4p/FoF2g== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 287FB180055 for ; Sat, 19 Apr 2025 14:37:47 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: * X-Spam-Status: No, score=1.7 required=5.0 tests=BAYES_50,DMARC_NONE, FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS, HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from mail-oo1-f48.google.com (mail-oo1-f48.google.com [209.85.161.48]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Sat, 19 Apr 2025 14:37:46 +0000 (UTC) Received: by mail-oo1-f48.google.com with SMTP id 006d021491bc7-601a891ab8fso1752256eaf.1 for ; Sat, 19 Apr 2025 07:40:07 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1745073607; x=1745678407; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=tU6YTQewRRzHuRuEkzjxWRhjOM6wOcw5e/VND3N/+L4=; b=QPasOxuL9M1trdRwfcX1srUBL7G+hwL/NdEDY6u015MRvEzQc3rzyhDgFYQBuf3pdw 709F8l1FmxMeDJeyYbMLfawbTev6C6ckdEu//WLiECa7o1FFpj3+Yl2MBEsTwrnlKS4Q 7vSAE0rzNPKQxFy1Abxe2MPNaE/UQkz+qJNHsHtWzN/5gNuC0TaNUVg2VFZ2n/wbjcEa gbu3j6AmOJ1KC0JgRArI8b3zTAzTquKwb0EBu8cktMLw/eQFrEdsOY5uL6pHI2HB/394 XxeXQhSWveQeRPVTwDjL5fZ8aRMsTOvgitn0ExU8VwvhSYsvcNAPFTy5BmZbVhzgXhFz PcDw== X-Gm-Message-State: AOJu0YxBIWOgd+UAGNXBayCp2WuBebz/JxTgk40NL1fUe/+4yuYfxPnW tBTuhgiaH6PCxhMfnCYIkG5p53oqep1PZVXm6MopCsuSAUTDeNv2Tz7Uwg0eDeeqqn+UMrMO/r3 LVHlRcknU2KcKoMOGB0sh8gD32+s= X-Gm-Gg: ASbGncttjF1gaMp9iLp0OGCwUdmyE5zDRwpC78WhvI8k88qLx23PQLuT2/mfCjAjJ2f HAtev+RxMn9t96QAU66Tg6uhnyvkb//Q6CAYPkoHZ4BiS/WSf5u5++O1Pom8m0lvaBBv2dpAj6d kXM7jg4FRF/yNJPhFq4qMW X-Google-Smtp-Source: AGHT+IFEBLXTDjTG76eE2Jt8CrATC3vCOR5ge7LsnILX+FqaeBamApiYUxr0hwEbEjtViHP6apPiYf72fGedSlIXEWA= X-Received: by 2002:a05:6820:2705:b0:600:5673:69ef with SMTP id 006d021491bc7-60600b85e09mr3401169eaf.1.1745073606787; Sat, 19 Apr 2025 07:40:06 -0700 (PDT) Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net x-ms-reactions: disallow MIME-Version: 1.0 References: In-Reply-To: Date: Sat, 19 Apr 2025 16:39:55 +0200 X-Gm-Features: ATxdqUFn6htqjtoi8h15fnhqEBVz5UA4yeFdef3YlbUgeFSsV0NLe_zE7J3Yk-Q Message-ID: Subject: Re: [PHP-DEV] Requiring DCO (Developer Certificate of Origin) To: Pierre Joye Cc: PHP internals list Content-Type: multipart/alternative; boundary="0000000000007089ad0633229cbd" From: bukka@php.net (Jakub Zelenka) --0000000000007089ad0633229cbd Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, Apr 19, 2025 at 6:02=E2=80=AFAM Pierre Joye = wrote: > On Fri, Apr 18, 2025 at 11:41=E2=80=AFPM Jakub Zelenka wr= ote: > > > That said we also need to think about the project and possible risk tha= t > this can also bring. One of those is potentially hiding the identity > because the author does not have rights to contribute (e.g. their employe= r > has that right). Even though this unlikely, it's a problem that we should > consider. There is quite easy solution for such problem though - it's a > Developer Certificate of Origin. It's pretty easy to integrate and I put > together a quick PR to add it: https://github.com/php/php-src/pull/18350 = . > > I wonder where these new names come from for many things existing > since long under clear, wide spread and understood names. In this > specific case, and please correct me if that's not the reason for this > initiative, it is called a Common License Agreement (CLA). Which we > always opposed to have, and I still do, strongly :). > > I think the name is different because it does not require explicitly signed document but just provide personal hint to the commits providing some sort of personal attestation of that particular commit. You can probably google it to get more details - it's Linux Foundation thing that is used by many projects. Anyway after getting some feedback I decided not to proceed with this and just proposing much lighter variant which is purely updating the CONTRIBUTING.md : https://github.com/php/php-src/pull/18356 . I don't think this update really needs an RFC as it's not really a policy change so if there are no objections, I will merge it in the next few weeks. Kind regards Jakub --0000000000007089ad0633229cbd Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Sat, Apr 19, 2025 at 6:02=E2=80=AFAM P= ierre Joye <pierre.php@gmail.com= > wrote:
On Fri, Apr 18, 2025 at 11:41= =E2=80=AFPM Jakub Zelenka <bukka@php.net> wrote:

> That said we also need to think about the project and possible risk th= at this can also bring. One of those is potentially hiding the identity bec= ause the author does not have rights to contribute (e.g. their employer has= that right). Even though this unlikely, it's a problem that we should = consider. There is quite easy solution for such problem though - it's a= Developer Certificate of Origin. It's pretty easy to integrate and I p= ut together a quick PR to add it: https://github.com/php/ph= p-src/pull/18350 .

I wonder where these new names come from for many things existing
since long under clear, wide spread and understood names. In this
specific case, and please correct me if that's not the reason for this<= br> initiative, it is called a Common License Agreement (CLA). Which we
always opposed to have, and I still do, strongly :).


I think the name is different because it does not require= explicitly signed document but just provide personal hint to the commits p= roviding some sort of personal attestation of that particular commit. You c= an probably google it to get more details - it's Linux Foundation thing= that is used by many projects.

Anyway after getti= ng some feedback I decided not to proceed with this and just proposing much= lighter variant which is purely updating the CONTRIBUTING.md :=C2=A0https://github.com/php/php-= src/pull/18356 . I don't think this update really needs an RFC as i= t's not really a policy change so if there are no objections, I will me= rge it in the next few weeks.

Kind regards

Jakub=C2=A0
--0000000000007089ad0633229cbd--