# Squid Updates This document describes the policy for doing micro-release updates of the Squid package in Ubuntu stable releases. ## About Squid [Squid](http://www.squid-cache.org) is a high-performance proxy caching server for web clients, supporting FTP, gopher, ICY and HTTP data objects. ## Squid Upstream release policy As described in [http://wiki.squid-cache.org/DeveloperResources/ReleaseProcess](http://wiki.squid-cache.org/DeveloperResources/ReleaseProcess) and discussed in the upstream mailing list at [https://ml-archives.squid-cache.org/squid-dev/2015-March/001853.html](https://ml-archives.squid-cache.org/squid-dev/2015-March/001853.html), starting in Squid 4, Squid follows a Major.Point release policy where the Point releases could be considered new upstream microreleases as per [New upstream microreleases](https://documentation.ubuntu.com/project/SRU/reference/requirements.md#reference-criteria-microreleases). This has been recently confirmed through the squid users mailing list in [https://ml-archives.squid-cache.org/squid-users/2023-January/025586.html](https://ml-archives.squid-cache.org/squid-users/2023-January/025586.html) New releases are cut when one of the following criteria is met: - At least one new major, critical, or blocker bug is fixed. - OR, 4 or more less important bugs have been fixed. - OR, 100 lines or more have been changed in the code. **Releases in the X.Y.Z format should be ignored since these are considered beta releases**. ## Ubuntu and Squid releases affected by this MRE Currently, these are the Ubuntu releases and the corresponding Squid package versions affected by this policy: - Kinetic (22.10): Squid 5.x - Jammy (22.04): Squid 5.x This MRE should be also applicable to future Ubuntu releases as long as the Squid release policy is not changed regarding the formats and commitments described above. ## Squid Upstream tests Squid contains an extensive testsuite that is executed during the Ubuntu package build time on all supported architectures. While the downstream test suite (autopkgtest) does contain simple integration tests to ensure the server runs, listens and responds properly, the upstream tests are composed of unit tests checking isolated behaviors and performing code checks. While the test suite is available and the code base is (apparently) extensive, we could not find any benchmarks or coverage data for that. ## Squid Upstream CI ### GitHub Actions All changes to the upstream code base are tested through GitHub Actions before being incorporated. This is done as per [https://github.com/squid-cache/squid/blob/master/.github/workflows/default.yaml](https://github.com/squid-cache/squid/blob/master/.github/workflows/default.yaml). Test results are available at [https://github.com/squid-cache/squid/actions](https://github.com/squid-cache/squid/actions). ## Squid Autopkgtest The package contains two of DEP-8 tests. The first runs the upstream test suite on the installed package. The second runs simple checks to ensure the proxy server is up, running and responding to simple requests. ## Squid Update Process As with regular MREs, we aim to offer bug and security fixes to all supported releases. This will be done by 1. Filing a bug to cover the MRE (e.g. “New upstream microreleases 5.x, y.z”) with one task for each Ubuntu release which will receive a Squid update. This bug should follow the SRU template described below. 2. Uploading the package to the proposed pocket (if it’s a non-security upload), and, once approved, perform all needed verification steps and keep an eye on the excuses page to investigate any DEP8 failures that may occur. ## Squid SRU template ```default This bug tracks the following MRE updates for the Squid package: - [Release codename] ([Release version]): Squid [Squid version] - [...] This update includes bugfixes following the SRU policy exception defined at https://documentation.ubuntu.com/sru/en/latest/reference/exception-Squid-Updates [Upstream changes] TODO: Add a link to the upstream changelog TODO: List the major changes introduced in this release [Test Plan] TODO: link the build log containing all tests being executed TODO: All tests are passing during build time, as shown in the build log (builds would fail otherwise, see LP: #2004050). TODO: add results of local autopkgtest run against all the new Squid versions being uploaded here [Regression Potential] Upstream tests are always executed during build-time. Failures would prevent builds from succeeding. Squid does not have many reverse dependencies. However, any upgrade is a risk to introduce breakage to other packages. Whenever a regression occurs in autopkgtests, we will investigate and provide fixes. TODO: consider any other regression potential specific to the version being updated and list them here if any. [Other Info] TODO-A: No CVEs are being addressed this time. Therefore, this should go through the updates pockets. TODO-B: CVEs TBD are being addressed by these updates. Therefore, this update should go through the security pocket. TODO: list previous MREs for this package, if any. ``` ## Track Record This is a list of the Squid updates performed in the past, following this policy: - 2023, 5.7 to J, K: [https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2013423](https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2013423) - 2024, 5.9 to J: [https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2040470](https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2040470) - 2025, 6.10 to N: [https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2073322](https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2073322) - 2025, 6.13 to N: [https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2085197](https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2085197) - 2026, 6.14 to N, Q: [https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2127669](https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2127669)