cordova-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jesse <purplecabb...@gmail.com>
Subject Re: Cordova Hangout, January 29 2014 -- Meeting Notes
Date Wed, 29 Jan 2014 21:02:06 GMT
Thanks Michal,

I have reposted the meeting notes to the wiki:
https://wiki.apache.org/cordova/2014%20Kickoff%20Hangout



@purplecabbage
risingj.com


On Wed, Jan 29, 2014 at 12:29 PM, Michal Mocny <mmocny@google.com> wrote:

> Monthly Hangout?
>  - Good idea, ML message to establish time
>
> SSL Cert Pinning.
>  - Android APIs are just not good enough?
>  - Andrew asked the Android WebView team if there was any way to do this
> with existing WebView: no :(
>    - We can write a custom plugin to do one off special type of requests?
>  - Don't embed content?  Network cannot reasonable be locked down.  Welcome
> to the web.
>  - Could add a bit more cert pinning to FileTransfer plugin if we wanted?
>  - Brian: Crazy alternative?! local web server proxy?
>    - Andrew: We used to do this in the bridge.  Other bugs make this not
> work. (Specific to 4.0?)
>
> Configuration files situation
>  - Too many files?
>  - We don't control the underlying O/S so we just inevitably have lots of
> files
>    - Most of this is hidden to the user, though
>  - Some config for build (cordova-cli's config), some for runtime
> (config.xml)
>  - Converting XML to JSON?
>    - Current tools are tightly coupled with XML config editing
>    - plugin.xml is already XML and we are *not* changing that
>    - cost/benefit smells un-worth-it
>  - CLI hooks can help manage the platform manifests for those who want --
> but its an expert friendly feature
>  - icons and splashscreens
>   - cca tool supports this now, Andrew has the caveats in his head
> - Top level config.xml:
>    - Add support for <platform> and <config-file> tags to top-level app
> config.xml?
>    - Rename top-level config.xml?
>    - json or xml?
>    - Brian: package.json?
>      - Will that conflict with node?  Engine tag?  Worth investigating.
>    - SysApps *new* json based app manifest?  Way too early to chase that.
>  - JBoss tools use a single config.xml on all platforms
>  - Lets move proposals to the list.  Going in circles here.
>  - Short term: lets take another looks at the docs to see what need to be
> approved
>    - But if the right answer isn't apparent, no amount of docs will help
>
> Cordova.js refactoring
>  - Ditch our own module format?
>    - node package format with Browserify for concat?
>  - 44k vs 10k?
>  - Browser as a platform VS Ripple as a tool?
>    - Goal of this refactor is full backwards compatibility with browser
>    - Great idea.  Plugin vendors can target the browser with a shim of
> their plugin this way, instead of ripple devs reverse engineering.
>  - Require syntax is changing to node-style
>    - Anis using browserify with plugins' js-module editing of the require
> statement in a preprocess step during prepare
>    - Final artifact is a single cordova.js
>  - moving cordova.js outside of root of www
>
> Testing and Medic
>  - Who is currently running CI
>    - Google in Canada
>    - Microsoft in Russia
>    - (Ubuntu in Russia as well? -- sorry I missed this)
>    - IBM has had it for a while, but fallen off the radar a bit (thought
> they will recover that)
>  - Bits and pieces have changed.  Need newest versions.
>  - CI to use less magic, use more cordova-cli commands
>  - Microsoft wants a way to report when the windows platform breaks
>  - Marcel wants a way to test on a huge suite of platforms and devices,
> after testing on a small set of devices locally
>  - Buildbot is running medic in order to group sets of commits together
>  - Microsoft not running buildbot, just medic directly
>    - We ran in to issues with buildbot on !linux as well.  You can run BB
> master on linux and have all build slaves on other platforms, even in a VM.
>    - Biggest issue is that the test suite crashes hard and CI needs poking
> if tests fail (sometimes)
>  - No shared master at this point for security reasons.  (Adobe and Google
> and Apache have not followed through with hopes of supplying a common
> machine for this, yet)
>   - Instead, lets work on a common reporting mechanism.
>   - Right now: manually emailing the list when you notice something
> locally.  You should do this too if you have CI running on your platform.
>  - ios-deploy is borked.  Shaz is investigating.
>   - Still using FruitStrap.  Recently updated to use lldb (as of Xcode 5),
> and that part of the problem.
>   - Xcode can deploy as long as we make your app into a unit test.  Sounds
> crazy.. but worth investigating?
>   - appium from selenium guys as an alternative?
>     - emulators only atm, but they promise devices?
>     - iOS and android only
>     - Also supports user actions like button presses.
>  - New MobileSpec:
>    - jasmine-2 launched!
>    - Last year at face2face a bunch of people contributed
>    - cdvtest branch on various plugins and cordova-labs repo
>    - No manual tests support yet, working on that in near future
>
> Plugin Repo
>  - Nodejitsu just lost most plugins :(
>    - iris couch?
>  - Do we migrate to host anywhere else?
>  - Apache server to host ourselves?
>  - Set up our own couch db as replication
>  - Migrating to cloudant?
>  - Steven has been working on redesign of the website!
>    - Angular for fronted! Topcoat! Flexbox Grid, mobile first!
>    - Missing Search, downloads
>    - Demo time!
>      - Repo, issue tracker links integrated
>    - Getting Started instructions going to be improved so we can run it
> locally
>      - Steven will walk you through if you want to pitch in!
>    - Its a couch app!  Will run inside the DB.  Run on the same server as
> cordova.apache.org?
>  - <resource-file> tag available for iOS but not Android, wth?
>    - Someone already patched this!
>    - Joe used to use <source-file> for this, why did we need a new tag?
>  Anyway.. we are using it now.
>
> iOS
>  - Not much going on, Shaz triaged for 3.4 release
>  - New features like multitasking support for ios7 in the pipeline
>  - keyboard / status bar plugin most of the work recently
>  - CLI run command big deal
>  - Apple: new guidelines for app store for Feb 1st
>    - Xcode 5 is now required.
>  - Do we want to support arm64? (yes..?)
>  - Remove support for iOS5? (yes..? but IBM will still test it for a while)
>  - JIRA Bugreport to move to using Xcode workspaces..
>    - no one has any experience here
>
> Android
>  - Security vulnerability with whitelists
>    - Need to respond to the guys who found the vulnerability and handle the
> situation
>    - Blogpost to our users
>    - Publish better guidance overall, as per earlier conversation
>  - Camera plugin
>    - Not working on KK :(
>    - Bug where File picker is returning a file URL which it (webview?)
> cannot consume
>      - Andrew wants to investigate and poke Android team
>    - Fix the issue with a MAJOR version bump of plugin which is not
> compatible.
>      - See how crazy users consider that.
>      - Useful to have a plugin website that supports multiple versions
>  - KitKat issues:
>    - Key Events
>    - Canvas is slow, software mode, bad viewport tags can make it a lot
> worse than it is
>    - KK WebView is not up-dateable yet, but they are working on it.
>    - CrossWalk has an up-dateable webview
>  - Instantiating CordovaWebView not from main Activity, but manually after
> some delay for whatever reason?
>   - Bunch of talk on this..  There are patches that begin to address this..
> Will put up for review.  Sounds good.
>
> Windows Phone
>  - No issues
>  - Next Release:
>    - Currently no way to load binary assets (DLL plugins etc).  Jesse plans
> to support this
>    - Adobe folk getting WP8 devices, lumia 520
>
> BlackBerry
>  - All Good.
>
> FireFoxOS
>  - No one here for F2F
>  - Pulling in support for plugins
>
> Ubuntu
>  - Active, working towards success.
>
> 3.4 Release
>  - rc out this week
>  - npm issues!
>    - What do we do?  Publish under a different name?
>    - cordova-cli (and titanium, lol) pushed on a bad day and we have a bad
> profile now, Isaac needs to manually fix this
>      - Brian to poke him
>    - npm.. is going through interesting times
>
> ApacheCon
>  - Audience is quite enterprise.  Expensive.
>  - "HadoopCon"
>  - Apache recognizes that Cordova and Couch are breathing new life into
> Apache
>
> Next Big Thing:
>  - Switching WebView's (specifically Android)
>    - CrossWalk, FireOS, GeckoView...
>  - App Harness
>  - MORE on CLI tools, not nearly done here
>    - Make it easier to be "correct" and end-to-end
>    - platform / plugins as artifacts, for real
>    - Even more sharing / compatibility between downstream wrappers (cca,
> phonegap, work light)
>  - Plugins Website up
>  - Browser as a platform
>  - Guidance on app design
>    - Alloy, based on angular, just for cordova
>    - Web Components?
>    - Yeoman
>
> (Last note: CLI template command on BB vs copy-from and link-to)
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message