September 2023 - openSUSE Commits - openSUSE Mailing Lists

commit mozjs115 for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mozjs115 for openSUSE:Factory checked in at 2023-09-28 00:24:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mozjs115 (Old) and /work/SRC/openSUSE:Factory/.mozjs115.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "mozjs115" Thu Sep 28 00:24:41 2023 rev:3 rq:1113609 version:115.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/mozjs115/mozjs115.changes 2023-09-06 19:01:14.938094453 +0200 +++ /work/SRC/openSUSE:Factory/.mozjs115.new.23327/mozjs115.changes 2023-09-28 00:39:10.730382602 +0200 @@ -1,0 +2,6 @@ +Mon Sep 25 14:52:38 UTC 2023 - Bjørn Lie <bjorn.lie(a)gmail.com> + +- Update to version 115.2.1: + + Security fix: CVE-2023-4863: Heap buffer overflow in libwebp. + +------------------------------------------------------------------- Old: ---- firefox-115.2.0esr.source.tar.xz firefox-115.2.0esr.source.tar.xz.asc New: ---- firefox-115.2.1esr.source.tar.xz firefox-115.2.1esr.source.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mozjs115.spec ++++++ --- /var/tmp/diff_new_pack.uOF0F6/_old 2023-09-28 00:39:15.630560848 +0200 +++ /var/tmp/diff_new_pack.uOF0F6/_new 2023-09-28 00:39:15.634560994 +0200 @@ -41,7 +41,7 @@ %global big_endian 1 %endif Name: mozjs%{major} -Version: 115.2.0 +Version: 115.2.1 Release: 1%{?dist} Summary: SpiderMonkey JavaScript library License: MPL-2.0 ++++++ firefox-115.2.0esr.source.tar.xz -> firefox-115.2.1esr.source.tar.xz ++++++ /work/SRC/openSUSE:Factory/mozjs115/firefox-115.2.0esr.source.tar.xz /work/SRC/openSUSE:Factory/.mozjs115.new.23327/firefox-115.2.1esr.source.tar.xz differ: char 15, line 1

1 0

commit monitoring-plugins-smart for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package monitoring-plugins-smart for openSUSE:Factory checked in at 2023-09-28 00:26:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/monitoring-plugins-smart (Old) and /work/SRC/openSUSE:Factory/.monitoring-plugins-smart.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "monitoring-plugins-smart" Thu Sep 28 00:26:20 2023 rev:11 rq:1113908 version:6.14.1 Changes: -------- --- /work/SRC/openSUSE:Factory/monitoring-plugins-smart/monitoring-plugins-smart.changes 2023-05-13 18:14:55.640817349 +0200 +++ /work/SRC/openSUSE:Factory/.monitoring-plugins-smart.new.23327/monitoring-plugins-smart.changes 2023-09-28 00:39:00.978027855 +0200 @@ -1,0 +2,11 @@ +Wed Sep 20 13:57:46 UTC 2023 - lars(a)linux-schulserver.de - 6.14.1 + +- update to 6.14.1 + + Fix default Percent_Lifetime_Remain threshold handling when -w + is given by @ymartin-ovh , see #93 + + Fix debug output of raw check list when using -l or + ssd-lifetime, see #94 + + Fix --hide-sn when combined with --debug (the smartctl output + still showed the serial number), see #94 + +------------------------------------------------------------------- Old: ---- check_smart-6.14.0.tar.xz New: ---- check_smart-6.14.1.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ monitoring-plugins-smart.spec ++++++ --- /var/tmp/diff_new_pack.o7tVIT/_old 2023-09-28 00:39:02.162070925 +0200 +++ /var/tmp/diff_new_pack.o7tVIT/_new 2023-09-28 00:39:02.162070925 +0200 @@ -17,7 +17,7 @@ Name: monitoring-plugins-smart -Version: 6.14.0 +Version: 6.14.1 Release: 0 Summary: Check SMART status of a given disk License: GPL-3.0-or-later ++++++ check_smart-6.14.0.tar.xz -> check_smart-6.14.1.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/check_smart-6.14.0/check_smart.pl new/check_smart-6.14.1/check_smart.pl --- old/check_smart-6.14.0/check_smart.pl 2023-04-29 11:40:58.000000000 +0200 +++ new/check_smart-6.14.1/check_smart.pl 2023-09-20 14:50:07.000000000 +0200 @@ -58,13 +58,15 @@ # Apr 29, 2023: Nick Bertrand - Show drive(s) causing UNKNOWN status using -g/--global check (6.14.0) # Apr 29, 2023: Claudio Kuenzler - Add possibility to hide serial number (--hide-sn) (6.14.0) # Apr 29, 2023: Claudio Kuenzler - Add default check on Load Cycle Count (ignore using --skip-load-cycles) (6.14.0) +# Sep 20, 2023: Yannick Martin - Fix default Percent_Lifetime_Remain threshold handling when -w is given (6.14.1) +# Sep 20, 2023: Claudio Kuenzler - Fix debug output for raw check list, fix --hide-serial in debug output (6.14.1) use strict; use Getopt::Long; use File::Basename qw(basename); my $basename = basename($0); -my $revision = '6.14.0'; +my $revision = '6.14.1'; # Standard Nagios return codes my %ERRORS=('OK'=>0,'WARNING'=>1,'CRITICAL'=>2,'UNKNOWN'=>3,'DEPENDENT'=>4); @@ -228,7 +230,6 @@ # warning threshold list (for raw checks) my $warn_list = $opt_w // ''; -$warn_list = $opt_w // 'Percent_Lifetime_Remain=90' if $opt_l; my @warn_list = split /,/, $warn_list; my %warn_list; my $warn_key; @@ -237,6 +238,9 @@ ($warn_key, $warn_value) = split /=/, $warn_element; $warn_list{ $warn_key } = $warn_value; } +if ($opt_l && ! exists $warn_list{'Percent_Lifetime_Remain'}) { + $warn_list{'Percent_Lifetime_Remain'} = 90; +} # For backward compatibility, add -b parameter to warning thresholds if ($opt_b) { @@ -280,6 +284,7 @@ warn "###########################################################\n\n\n" if $opt_debug; my $full_command = "$smart_command -d $interface -Hi $device"; + $full_command = "$smart_command -d $interface -Hi $device -q noserial" if $opt_hide_sn; warn "(debug) executing:\n$full_command\n\n" if $opt_debug; my @output = `$full_command`; @@ -470,7 +475,7 @@ @output = `$full_command`; warn "(debug) output:\n@output\n\n" if $opt_debug; my @perfdata = qw//; - warn "(debug) Raw Check List ATA: $raw_check_list\n" if $opt_debug; + warn "(debug) Raw Check List ATA: @raw_check_list\n" if $opt_debug; warn "(debug) Raw Check List NVMe: $raw_check_list_nvme\n" if $opt_debug; warn "(debug) Exclude List for Checks: ", join(",", @exclude_checks), "\n" if $opt_debug; warn "(debug) Exclude List for Perfdata: ", join(",", @exclude_perfdata), "\n" if $opt_debug; @@ -834,7 +839,7 @@ sub print_help { print_revision($basename,$revision); - print "\nUsage: $basename {-d=<block device>|-g=<block device glob>} -i=(auto|ata|scsi|3ware,N|areca,N|hpt,L/M/N|aacraid,H,L,ID|cciss,N|megaraid,N) [-r list] [-w list] [-b N] [-e list] [-E list] [--debug]\n\n"; + print "\nUsage: $basename {-d=<block device>|-g=<block device glob>} -i=(auto|ata|scsi|3ware,N|areca,N|hpt,L/M/N|aacraid,H,L,ID|cciss,N|megaraid,N) [-r list] [-w list] [-b N] [-e list] [-E list] [-s] [-l] [--debug]\n\n"; print "At least one of the below. -d supersedes -g\n"; print " -d/--device: a physical block device to be SMART monitored, eg /dev/sda. Pseudo-device /dev/bus/N is allowed.\n"; print " -g/--global: a glob pattern name of physical devices to be SMART monitored\n";

1 0

commit mold for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mold for openSUSE:Factory checked in at 2023-09-28 00:24:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mold (Old) and /work/SRC/openSUSE:Factory/.mold.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "mold" Thu Sep 28 00:24:58 2023 rev:33 rq:1113750 version:2.2.0 Changes: -------- --- /work/SRC/openSUSE:Factory/mold/mold.changes 2023-08-14 22:35:36.428357922 +0200 +++ /work/SRC/openSUSE:Factory/.mold.new.23327/mold.changes 2023-09-28 00:38:57.405897917 +0200 @@ -1,0 +2,28 @@ +Tue Sep 26 20:11:13 UTC 2023 - Martin Liška <martin.liska(a)hey.com> + +- Add build-blake-3-as-static.patch that builts BLAKE 3 support as static library + into mold. The library is not provided in openSUSE yet. + +------------------------------------------------------------------- +Sun Sep 24 17:50:53 UTC 2023 - Martin Liška <martin.liska(a)hey.com> + +- Update to version 2.2.0 + * We now use BLAKE3 as a cryptographic hash function instead of SHA256. This + change has made --build-id a few percent faster. libssl is no longer a build + dependency. (7f7a744) + * mold is now a few percent faster than the previous version due to an + optimization of string merging code path. (1a13c50) + * mold now emits slightly optimized code for thread-local variable accesses. + (f057fda, d56f528) + * [RISC-V] mold now supports TLSDESC relocations. TLSDESC is a new mechanism for + faster thread-local variable access. We (@ishitatsuyuki) actually led the effort + to ratify the specification (riscv-non-isa/riscv-elf-psabi-doc#373) and + implement it to compiler toolchain including GCC, GNU binutils and, of course, + mold. (141556d) + * mold no longer marks an as-needed .so as "needed" if the .so file is not + directly used by the output file. Previously, mold marked a .so file as "needed" + if the .so file was used by another "needed" .so file. (f02db0f) + * [PPC64] --execute-only now works on 64-bit PowerPC. (ac20d87, 51fec5f) +- Remove openssl dependency. + +------------------------------------------------------------------- Old: ---- mold-2.1.0.tar.gz New: ---- build-blake-3-as-static.patch mold-2.2.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mold.spec ++++++ --- /var/tmp/diff_new_pack.vUzUTe/_old 2023-09-28 00:38:58.501937786 +0200 +++ /var/tmp/diff_new_pack.vUzUTe/_new 2023-09-28 00:38:58.501937786 +0200 @@ -17,13 +17,14 @@ Name: mold -Version: 2.1.0 +Version: 2.2.0 Release: 0 Summary: A Modern Linker (mold) License: MIT Group: Development/Tools/Building URL: https://github.com/rui314/mold Source: https://github.com/rui314/mold/archive/v%{version}/mold-%{version}.tar.gz +Patch0: build-blake-3-as-static.patch BuildRequires: cmake %if %{suse_version} < 1550 BuildRequires: gcc11-c++ @@ -42,7 +43,6 @@ BuildRequires: gdb BuildRequires: glibc-devel-static BuildRequires: libzstd-devel -BuildRequires: openssl-devel %ifnarch ppc64 BuildRequires: valgrind %endif ++++++ build-blake-3-as-static.patch ++++++ diff --git a/third-party/blake3/c/CMakeLists.txt b/third-party/blake3/c/CMakeLists.txt index 3aa6c15..4790918 100644 --- a/third-party/blake3/c/CMakeLists.txt +++ b/third-party/blake3/c/CMakeLists.txt @@ -31,7 +31,7 @@ set(BLAKE3_X86_NAMES i686 x86 X86) set(BLAKE3_ARMv8_NAMES aarch64 AArch64 arm64 ARM64 armv8 armv8a) # library target -add_library(blake3 +add_library(blake3 STATIC blake3.c blake3_dispatch.c blake3_portable.c ++++++ mold-2.1.0.tar.gz -> mold-2.2.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/mold/mold-2.1.0.tar.gz /work/SRC/openSUSE:Factory/.mold.new.23327/mold-2.2.0.tar.gz differ: char 13, line 1

1 0

commit meson for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package meson for openSUSE:Factory checked in at 2023-09-28 00:24:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/meson (Old) and /work/SRC/openSUSE:Factory/.meson.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "meson" Thu Sep 28 00:24:22 2023 rev:99 rq:1113283 version:1.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/meson/meson.changes 2023-08-11 15:55:02.207585222 +0200 +++ /work/SRC/openSUSE:Factory/.meson.new.23327/meson.changes 2023-09-28 00:38:44.577431276 +0200 @@ -1,0 +2,5 @@ +Sat Sep 23 20:58:26 UTC 2023 - Aaron Puchert <aaronpuchert(a)alice-dsl.net> + +- Port back get_llvm_tool_names-llvm17.patch to accept LLVM 17. + +------------------------------------------------------------------- New: ---- get_llvm_tool_names-llvm17.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ meson.spec ++++++ --- /var/tmp/diff_new_pack.3CzKzm/_old 2023-09-28 00:38:46.037484386 +0200 +++ /var/tmp/diff_new_pack.3CzKzm/_new 2023-09-28 00:38:46.037484386 +0200 @@ -50,6 +50,8 @@ Patch1: extend-test-timeout-on-qemu-builds.patch # PATCH-FIX-OPENSUSE meson-distutils.patch -- meson is ring0 and therefor setuptools is not available Patch2: meson-distutils.patch +# PATCH-FIX-UPSTREAM get_llvm_tool_names-llvm17.patch -- Accept LLVM 17. +Patch3: get_llvm_tool_names-llvm17.patch BuildRequires: %{python_module base >= 3.7} BuildRequires: fdupes BuildRequires: python-rpm-macros @@ -172,6 +174,7 @@ %if !%{with setuptools} %patch2 -p1 %endif +%patch3 -p1 %if 0%{?sle_version} >= 150400 && 0%{?sle_version} < 160000 # AddressSanitizer fails here because of ulimit. ++++++ get_llvm_tool_names-llvm17.patch ++++++ From d0b09898c703f6c10ec5a6b2aeace0df2e3570aa Mon Sep 17 00:00:00 2001 From: Christoph Reiter <reiter.christoph(a)gmail.com> Date: Sat, 23 Sep 2023 17:21:43 +0200 Subject: [PATCH] get_llvm_tool_names: add llvm 17 this fixes the "frameworks: 15 llvm" tests with llvm 17 --- mesonbuild/environment.py | 1 + 1 file changed, 1 insertion(+) diff --git a/mesonbuild/environment.py b/mesonbuild/environment.py index 53cb1206fef..5c7d78b9028 100644 --- a/mesonbuild/environment.py +++ b/mesonbuild/environment.py @@ -157,6 +157,7 @@ def get_llvm_tool_names(tool: str) -> T.List[str]: # unless it becomes a stable release. suffixes = [ '', # base (no suffix) + '-17', '17', '-16', '16', '-15', '15', '-14', '14',

1 0

commit maven-enforcer for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package maven-enforcer for openSUSE:Factory checked in at 2023-09-28 00:26:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/maven-enforcer (Old) and /work/SRC/openSUSE:Factory/.maven-enforcer.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "maven-enforcer" Thu Sep 28 00:26:12 2023 rev:4 rq:1113886 version:3.4.1 Changes: -------- --- /work/SRC/openSUSE:Factory/maven-enforcer/maven-enforcer.changes 2022-03-22 19:40:47.747127396 +0100 +++ /work/SRC/openSUSE:Factory/.maven-enforcer.new.23327/maven-enforcer.changes 2023-09-28 00:38:35.541102574 +0200 @@ -1,0 +2,162 @@ +Wed Sep 27 11:39:13 UTC 2023 - Fridrich Strba <fstrba(a)suse.com> + +- Update to version 3.4.1 + * Bug + + MENFORCER-168: In a multi module project "bannedDependencies" + rule tries to resolve project artifacts from external + repository + + MENFORCER-185: Require Release Dependencies ignorant about + aggregator build + + MENFORCER-301: banDuplicatePomDependencyVersions does not + check managementDependencies + + MENFORCER-336: Beanshell rule is not thread-safe + + MENFORCER-346: RequireSnapshotVersion not compatible with CI + Friendly Versions (${revision}) + + MENFORCER-351: NPE when using new <?m2e execute ?> syntax with + maven-enforcer-plugin + + MENFORCER-352: Broken links on Maven Enforcer Plugin site + + MENFORCER-357: RequirePluginVersions not recognizing + versions-from-properties + + MENFORCER-359: [REGRESSION] RequirePluginVersions fails when + versions are inherited + + MENFORCER-364: requireFilesExist rule should be case sensitive + + MENFORCER-366: Broken Links on Project Home Page + + MENFORCER-373: TestRequireOS uses hamcrest via transitive + dependency + + MENFORCER-374: plexus-container-default in enforcer-api is + very outdated + + MENFORCER-381: classifier not included in output of failed + RequireUpperBoundDeps test + + MENFORCER-389: Exclusions are not considered when looking at + parent for requireReleaseDeps + + MENFORCER-391: requireUpperBoundDeps does not fail when + packaging is 'war' + + MENFORCER-394: DependencyConvergence in 3.0.0 fails on + provided scoped dependencies + + MENFORCER-395: NPE on requireReleaseDeps with non-matching + includes + + MENFORCER-402: RequireUpperBoundDeps now follow scope provided + transitive dependencies + + MENFORCER-421: Use currently build artifacts in IT tests + + MENFORCER-378: requireReleaseDeps does not support optional + dependencies or runtime scope + + MENFORCER-407: Enforcer 3.0.0 breaks with Maven 3.8.4 + + MENFORCER-434: Version 3.1.0 is not enforcing + bannedDependencies rules + + MENFORCER-437: DependencyConvergence treats provided + dependencies are runtime dependencies + + MENFORCER-459: Plugin shouldn't use NullPointerException for + non-exceptional code flow + + MENFORCER-461: NPE in RequirePluginVersions + + MENFORCER-462: ReactorModuleConvergence not cached in reactor + + MENFORCER-466: RequireUpperBoundDeps fails on provided + dependencies since 3.2.1 + + MENFORCER-467: Problematic dependency resolution by new + 'banDynamicVersions' rule + + MENFORCER-469: banTransitiveDependencies: failing if a + transitive dependencies has another version than the resolved + one + + MENFORCER-474: Filtering dependency tree by scope + + MENFORCER-393: Upgrading to 3.0.0 causes 'Could not build + dependency tree' with repositories some unknown protocol + + MENFORCER-426: DependencyConvergence in 3.1.0 fails when using + version ranges + + MENFORCER-480: Semantics of 'ignores' parameter of + 'banDynamicVersions' is inverted + + MENFORCER-481: Omission of 'excludedScopes' parameter of + 'banDynamicVersions' causes NPE + + MENFORCER-491: ENFORCER: plugin-info and mojo pages not found + * New Feature + + MENFORCER-358: requireUpperBounds deps should have includes + + MENFORCER-361: Introduce RequireTextFileChecksum with line + separator normalization + + MENFORCER-397: allow no rules + + MENFORCER-398: show rules processed + + MENFORCER-411: DependencyConvergence should support + including/excluding certain dependencies + + MENFORCER-422: Support declaring external banned dependencies + in an external file/URL + + MENFORCER-423: Maven enforcer rule which checks that all + dependencies have an explicit scope set + + MENFORCER-424: Maven enforcer rule which checks that all + dependencies in dependencyManagement don't have an explicit + scope set + + MENFORCER-427: Rule for no version ranges, version + placeholders or SNAPSHOT versions + + MENFORCER-430: Allow one of many files in RequireFiles rules + to pass + + MENFORCER-431: Skip specific rules + + MENFORCER-455: New Enforcer API + + MENFORCER-456: New Enforcer API - RuleConfigProvider + + MENFORCER-458: Move Built-In Rules to new API + * Improvement + + MENFORCER-211: wildcard ignore in requireReleaseDeps + + MENFORCER-245: Improve documentation about writing own + Enforcer Rule + + MENFORCER-257: RequireActiveProfile should respect inherited + activated profiles + + MENFORCER-277: Upgrade maven-dependency-tree to 3.x + + MENFORCER-304: Improve dependency resolving in multiple + modules project + + MENFORCER-313: requireUpperBoundDeps: add [<scope>] and colors + to the output + + MENFORCER-329: Example for writing a custom rule should be + upgraded + + MENFORCER-338: Along with JavaVersion, allow enforcement of + the JavaVendor + + MENFORCER-349: Include Java vendor in display-info output + + MENFORCER-350: requireMavenVersion x.y.z is processed as + (,x.y.z] instead of [x.y.z,) + + MENFORCER-353: Consistently format artifacts same as + dependency:tree + + MENFORCER-355: make build Reproducible + + MENFORCER-376: Add support for excludes/includes in + requireJavaVendor rule + + MENFORCER-384: Introduce Maven Enforcer Extension + + MENFORCER-388: Extends RequirePluginVersions with + banMavenDefaults + + MENFORCER-404: Shared GitHub Actions + + MENFORCER-409: Log at ERROR level when <fail> is set + + MENFORCER-420: Reuse getDependenciesToCheck results across + rules + + MENFORCER-415: Violation messages can be really hard to find + in a multi module project + + MENFORCER-425: Clarify class loading for custom Enforcer rules + + MENFORCER-428: Using junit jupiter bom instead of single + artifacts. + + MENFORCER-435: Get rid of maven-dependency-tree dependency + + MENFORCER-440: Allow 8 as JDK version for requireJavaVersion + + MENFORCER-444: Improve error message for rule + "requireJavaVersion" + + MENFORCER-445: Include Java Home in Message for Java Rule + Failures + + MENFORCER-452: Manage all Maven Core dependencies as provided + + MENFORCER-453: Mange rules configuration by plugin + + MENFORCER-454: Deprecate 'rules' property and introduce + 'enforcer.rules' as a replacement + + MENFORCER-463: Change success message from executed to passed + + MENFORCER-488: EnforcerLogger: Provide isDebugEnabled(), + isErrorEnabled(), isWarnEnabled() and isInfoEnabled() + + MENFORCER-490: Properly declare dependencies + * Test + + MENFORCER-408: Regression test for dependency convergence + problem fixed in 3.0.0 + * Task + + MENFORCER-377: Remove reference to travis or switch to + travis.com + + MENFORCER-380: Fix maven assembly links + + MENFORCER-387: Require Java 8 + + MENFORCER-447: Verify working with Maven 4 + + MENFORCER-450: Code cleanup + + MENFORCER-451: Refresh download page + + MENFORCER-460: Deprecate display-info mojo + + MENFORCER-464: Refresh site descriptors + + MENFORCER-465: Superfluous blanks in + BanDuplicatePomDependencyVersions + + MENFORCER-476: Rename ResolveUtil to ResolverUtil +- Removed patches: + * 0001-Port-to-Maven-3-API.patch + * 0002-Port-to-artifact-transfer-0.11.0.patch + + not needed with this version + +------------------------------------------------------------------- Old: ---- 0001-Port-to-Maven-3-API.patch 0002-Port-to-artifact-transfer-0.11.0.patch enforcer-1.4.1-source-release.zip New: ---- enforcer-3.4.1-source-release.zip ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ maven-enforcer.spec ++++++ --- /var/tmp/diff_new_pack.z6ht4r/_old 2023-09-28 00:38:36.677143898 +0200 +++ /var/tmp/diff_new_pack.z6ht4r/_new 2023-09-28 00:38:36.677143898 +0200 @@ -1,7 +1,7 @@ # # spec file for package maven-enforcer # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,39 +17,34 @@ Name: maven-enforcer -Version: 1.4.1 +Version: 3.4.1 Release: 0 Summary: A build rule execution framework License: Apache-2.0 Group: Development/Libraries/Java URL: https://maven.apache.org/enforcer Source0: https://repo1.maven.org/maven2/org/apache/maven/enforcer/enforcer/%{version… -# TODO forward upstream -# https://issues.apache.org/jira/browse/MENFORCER-267 -Patch0: 0001-Port-to-Maven-3-API.patch -Patch1: 0002-Port-to-artifact-transfer-0.11.0.patch BuildRequires: fdupes BuildRequires: java-devel >= 1.8 BuildRequires: maven-local BuildRequires: unzip BuildRequires: mvn(com.google.code.findbugs:jsr305) -BuildRequires: mvn(commons-lang:commons-lang) -BuildRequires: mvn(org.apache.maven.plugin-testing:maven-plugin-testing-harness) +BuildRequires: mvn(commons-codec:commons-codec) +BuildRequires: mvn(commons-io:commons-io) +BuildRequires: mvn(javax.annotation:javax.annotation-api) +BuildRequires: mvn(org.apache.commons:commons-lang3) BuildRequires: mvn(org.apache.maven.plugin-tools:maven-plugin-annotations) -BuildRequires: mvn(org.apache.maven.plugins:maven-assembly-plugin) BuildRequires: mvn(org.apache.maven.plugins:maven-plugin-plugin) -BuildRequires: mvn(org.apache.maven.shared:maven-artifact-transfer) -BuildRequires: mvn(org.apache.maven.shared:maven-common-artifact-filters) -BuildRequires: mvn(org.apache.maven.shared:maven-dependency-tree) BuildRequires: mvn(org.apache.maven:maven-artifact) -BuildRequires: mvn(org.apache.maven:maven-compat) BuildRequires: mvn(org.apache.maven:maven-core) BuildRequires: mvn(org.apache.maven:maven-parent:pom:) BuildRequires: mvn(org.apache.maven:maven-plugin-api) BuildRequires: mvn(org.beanshell:bsh) -BuildRequires: mvn(org.codehaus.plexus:plexus-container-default) -BuildRequires: mvn(org.codehaus.plexus:plexus-i18n) BuildRequires: mvn(org.codehaus.plexus:plexus-utils) +BuildRequires: mvn(org.eclipse.aether:aether-api) +BuildRequires: mvn(org.eclipse.aether:aether-util) +BuildRequires: mvn(org.eclipse.sisu:sisu-maven-plugin) +BuildRequires: mvn(org.slf4j:slf4j-api) BuildArch: noarch %description @@ -82,30 +77,37 @@ Group: Development/Libraries/Java %description plugin -This component contains the standard Enforcer Rules. +The Enforcer plugin provides goals to control certain environmental +constraints such as Maven version, JDK version and OS family along +with many more built-in rules and user created rules. + +%package extension +Summary: Maven Enforcer Extension +Group: Development/Libraries/Java + +%description extension +The Enforcer Extension provides a way to globally define rules without +making use of pom inheritence. This way you don't have to adjust the +pom.xml, but you can enforce a set of rules. %prep %setup -q -n enforcer-%{version} -%patch0 -p1 -%patch1 -p1 -# Avoid dependency cycle -%pom_xpath_inject pom:build/pom:pluginManagement/pom:plugins " - <plugin> - <artifactId>maven-enforcer-plugin</artifactId> - <version>SYSTEM</version> - </plugin>" - -# Replace plexus-maven-plugin with plexus-component-metadata -sed -e "s|<artifactId>plexus-maven-plugin</artifactId>|<artifactId>plexus-component-metadata</artifactId>|" \ - -e "s|<goal>descriptor</goal>|<goal>generate-metadata</goal>|" \ - -i enforcer-{api,rules}/pom.xml +find -name '*.java' -exec sed -i 's/\r//' {} + + +%pom_remove_dep org.junit:junit-bom + +%pom_add_dep javax.annotation:javax.annotation-api maven-enforcer-plugin + +%pom_add_plugin org.eclipse.sisu:sisu-maven-plugin maven-enforcer-plugin %build %{mvn_build} -s -f -- \ %if %{?pkg_vcmp:%pkg_vcmp java-devel >= 9}%{!?pkg_vcmp:0} -Dmaven.compiler.release=8 \ %endif + -Dversion.maven-enforcer-plugin=SYSTEM \ + -Dproject.build.outputTimestamp=$(date -u -d @${SOURCE_DATE_EPOCH:-$(date +%%s)} +%%Y-%%m-%%dT%%H:%%M:%%SZ) \ -Dsource=8 %install @@ -124,6 +126,8 @@ %files plugin -f .mfiles-maven-enforcer-plugin +%files extension -f .mfiles-maven-enforcer-extension + %files javadoc -f .mfiles-javadoc %license LICENSE %doc NOTICE ++++++ enforcer-1.4.1-source-release.zip -> enforcer-3.4.1-source-release.zip ++++++ ++++ 49437 lines of diff (skipped)

1 0

commit maven-doxia for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package maven-doxia for openSUSE:Factory checked in at 2023-09-28 00:25:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/maven-doxia (Old) and /work/SRC/openSUSE:Factory/.maven-doxia.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "maven-doxia" Thu Sep 28 00:25:16 2023 rev:10 rq:1113754 version:1.12.0 Changes: -------- --- /work/SRC/openSUSE:Factory/maven-doxia/maven-doxia.changes 2023-09-25 20:51:34.262991547 +0200 +++ /work/SRC/openSUSE:Factory/.maven-doxia.new.23327/maven-doxia.changes 2023-09-28 00:38:34.089049756 +0200 @@ -1,0 +2,8 @@ +Tue Sep 26 21:09:43 UTC 2023 - Fridrich Strba <fstrba(a)suse.com> + +- Added patch: + * 0002-Commons-configuration2.patch + + port to commons-configuration2 in order to remove dependency + on old commons-lang + +------------------------------------------------------------------- New: ---- 0002-Commons-configuration2.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ maven-doxia.spec ++++++ --- /var/tmp/diff_new_pack.3fEqR9/_old 2023-09-28 00:38:35.201090207 +0200 +++ /var/tmp/diff_new_pack.3fEqR9/_new 2023-09-28 00:38:35.201090207 +0200 @@ -25,11 +25,11 @@ URL: https://maven.apache.org/doxia/ Source0: https://repo1.maven.org/maven2/org/apache/maven/doxia/doxia/%{version}/doxi… Source1: %{name}-build.tar.xz +Patch0: 0002-Commons-configuration2.patch BuildRequires: ant BuildRequires: apache-commons-cli BuildRequires: apache-commons-collections -BuildRequires: apache-commons-configuration -BuildRequires: apache-commons-lang +BuildRequires: apache-commons-configuration2 BuildRequires: apache-commons-lang3 BuildRequires: apache-commons-text BuildRequires: atinject @@ -185,6 +185,7 @@ %prep %setup -q -n doxia-%{version} -a1 +%patch0 -p1 # we don't have clirr-maven-plugin %pom_remove_plugin org.codehaus.mojo:clirr-maven-plugin pom.xml @@ -206,11 +207,10 @@ mkdir -p lib build-jar-repository -s lib \ atinject \ - apache-commons-lang3 \ apache-commons-text \ commons-cli \ - commons-configuration \ - commons-lang \ + commons-configuration2 \ + commons-lang3 \ guava/guava \ guice/google-guice \ httpcomponents/httpclient \ ++++++ 0002-Commons-configuration2.patch ++++++ --- doxia-1.12.0/doxia-modules/doxia-module-fo/pom.xml.orig 2023-01-09 21:09:18.000000000 -0700 +++ doxia-1.12.0/doxia-modules/doxia-module-fo/pom.xml 2023-06-12 15:58:35.171254714 -0600 @@ -71,9 +71,9 @@ under the License.  <dependency> - <groupId>commons-configuration</groupId> - <artifactId>commons-configuration</artifactId> - <version>1.10</version> + <groupId>org.apache.commons</groupId> + <artifactId>commons-configuration2</artifactId> + <version>2.9.0</version> </dependency> <dependency> <groupId>commons-collections</groupId> --- doxia-1.12.0/doxia-modules/doxia-module-fo/src/main/java/org/apache/maven/doxia/module/fo/FoConfiguration.java.orig 2023-01-09 21:09:18.000000000 -0700 +++ doxia-1.12.0/doxia-modules/doxia-module-fo/src/main/java/org/apache/maven/doxia/module/fo/FoConfiguration.java 2023-06-12 17:00:19.630450286 -0600 @@ -20,14 +20,16 @@ package org.apache.maven.doxia.module.fo */ import java.io.File; +import java.io.FileReader; import java.io.IOException; import java.util.List; import javax.swing.text.MutableAttributeSet; import javax.swing.text.SimpleAttributeSet; -import org.apache.commons.configuration.ConfigurationException; -import org.apache.commons.configuration.XMLConfiguration; +import org.apache.commons.configuration2.XMLConfiguration; +import org.apache.commons.configuration2.ex.ConfigurationException; +import org.apache.commons.configuration2.io.FileLocatorUtils; import org.apache.maven.doxia.sink.impl.SinkUtils; import org.codehaus.plexus.util.ReaderFactory; @@ -55,9 +57,6 @@ public class FoConfiguration { this.config = new XMLConfiguration(); - // necessary because some attributes contain commas: - config.setDelimiterParsingDisabled( true ); - loadDefaultConfig(); } @@ -75,10 +74,11 @@ public class FoConfiguration throws IOException { config.clear(); + config.initFileLocator( FileLocatorUtils.fileLocator().basePath( configFile.getParent() ).fileName( configFile.getName() ).create() ); try { - config.load( configFile ); + config.read( new FileReader(configFile) ); } catch ( ConfigurationException cex ) { @@ -182,9 +182,11 @@ public class FoConfiguration /** Load the default fo configuration file. */ private void loadDefaultConfig() { + config.initFileLocator( FileLocatorUtils.fileLocator().sourceURL( getClass().getResource( "/fo-styles.xslt" ) ).create() ); + try { - config.load( ReaderFactory.newXmlReader( getClass().getResourceAsStream( "/fo-styles.xslt" ) ) ); + config.read( ReaderFactory.newXmlReader( getClass().getResourceAsStream( "/fo-styles.xslt" ) ) ); } catch ( ConfigurationException | IOException cex ) {

1 0

commit maven-dependency-tree for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package maven-dependency-tree for openSUSE:Factory checked in at 2023-09-28 00:26:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/maven-dependency-tree (Old) and /work/SRC/openSUSE:Factory/.maven-dependency-tree.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "maven-dependency-tree" Thu Sep 28 00:26:06 2023 rev:6 rq:1113870 version:3.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/maven-dependency-tree/maven-dependency-tree.changes 2023-09-07 21:13:39.503272954 +0200 +++ /work/SRC/openSUSE:Factory/.maven-dependency-tree.new.23327/maven-dependency-tree.changes 2023-09-28 00:38:32.596995481 +0200 @@ -1,0 +2,37 @@ +Wed Sep 27 11:15:21 UTC 2023 - Fridrich Strba <fstrba(a)suse.com> + +- Update to version 3.2.1 + * Bug + + MSHARED-994: DependencyCollectorBuilder does not collect + dependencies when artifact has 'war' packaging + + MSHARED-1016: Transitive provided dependencies are not + removed from collected dependency graph + * New Feature + + MSHARED-1158: DependencyCollectorBuilder more configurable + * Improvement + + MSHARED-339: DependencyGraphBuilder does not provide verbose + tree + + MSHARED-491: DependencyGraphBuilders shouldn't need + reactorProjects for resolving dependencies + + MSHARED-519: Maven31DependencyGraphBuilder (and others?) + should not download dependencies other than the pom + + MSHARED-657: plexus-component-annotation in line with + plexus-component-metadata + + MSHARED-691: Upgrade parent to 31 + + MSHARED-788: Add functionality to collect raw dependencies + in Maven 3+ + + MSHARED-816: Annotate DependencyNodes with dependency + management metadata + + MSHARED-825: Require Java 8 + + MSHARED-850: Upgrade org.eclipse.aether:aether-util + dependency in org.apache.maven.shared:maven-dependency-tree + + MSHARED-852: Add Exclusions to DependencyNode + + MSHARED-853: make build Reproducible + + MSHARED-1070: Migrate plexus component to JSR-330 + + MSHARED-1071: Drop maven 3.0 compatibility + * Dependency upgrade + + MSHARED-771: Upgrade shared-component to version 33 + + MSHARED-1069: Upgrade Parent to 36 + + MSHARED-1114: Bump maven-shared-components from 36 to 37 + +------------------------------------------------------------------- Old: ---- maven-dependency-tree-3.0.1-source-release.zip New: ---- maven-dependency-tree-3.2.1-source-release.zip ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ maven-dependency-tree.spec ++++++ --- /var/tmp/diff_new_pack.S9EzU9/_old 2023-09-28 00:38:33.733036805 +0200 +++ /var/tmp/diff_new_pack.S9EzU9/_new 2023-09-28 00:38:33.733036805 +0200 @@ -17,7 +17,7 @@ Name: maven-dependency-tree -Version: 3.0.1 +Version: 3.2.1 Release: 0 Summary: Maven dependency tree artifact License: Apache-2.0 @@ -26,27 +26,14 @@ Source0: https://archive.apache.org/dist/maven/shared/%{name}-%{version}-source-rele… Source1: %{name}-build.xml BuildRequires: ant -BuildRequires: apache-commons-cli BuildRequires: atinject BuildRequires: fdupes -BuildRequires: google-guice -BuildRequires: guava BuildRequires: javapackages-local >= 6 -BuildRequires: jdom2 BuildRequires: maven-lib BuildRequires: maven-resolver-api BuildRequires: maven-resolver-util -BuildRequires: objectweb-asm -BuildRequires: plexus-classworlds -BuildRequires: plexus-cli -BuildRequires: plexus-containers-component-annotations -BuildRequires: plexus-metadata-generator -BuildRequires: plexus-utils -BuildRequires: qdox BuildRequires: sisu-inject -BuildRequires: sisu-plexus BuildRequires: unzip -BuildRequires: xbean BuildArch: noarch %description @@ -63,30 +50,17 @@ %setup -q cp %{SOURCE1} build.xml -find -name Maven3DependencyGraphBuilder.java -delete -%pom_remove_dep org.sonatype.aether: - %build mkdir -p lib build-jar-repository -s lib \ atinject \ - commons-cli \ - guice/google-guice-no_aop \ - guava/guava \ - jdom2/jdom2 \ maven/maven-artifact \ maven/maven-core \ + maven/maven-model \ maven-resolver/maven-resolver-api \ maven-resolver/maven-resolver-util \ - objectweb-asm/asm org.eclipse.sisu.inject \ - org.eclipse.sisu.plexus \ - plexus-classworlds \ - plexus/cli \ - plexus-containers/plexus-component-annotations \ - plexus-metadata-generator \ - plexus/utils \ - qdox \ - xbean/xbean-reflect + org.eclipse.sisu.inject \ + slf4j/api %{ant} \ -Dtest.skip=true \ ++++++ maven-dependency-tree-3.0.1-source-release.zip -> maven-dependency-tree-3.2.1-source-release.zip ++++++ ++++ 4682 lines of diff (skipped) ++++++ maven-dependency-tree-build.xml ++++++ --- /var/tmp/diff_new_pack.S9EzU9/_old 2023-09-28 00:38:33.841040734 +0200 +++ /var/tmp/diff_new_pack.S9EzU9/_new 2023-09-28 00:38:33.845040879 +0200 @@ -10,11 +10,12 @@ <property name="project.groupId" value="org.apache.maven.shared"/> <property name="project.artifactId" value="maven-dependency-tree"/> - <property name="project.version" value="3.0.1"/> + <property name="project.version" value="3.2.1"/> <property name="project.name" value="Apache Maven Dependency Tree"/> <property name="project.organization.name" value="The Apache Software Foundation"/> - <property name="compiler.source" value="1.8"/> + <property name="compiler.release" value="8"/> + <property name="compiler.source" value="1.${compiler.release}"/> <property name="compiler.target" value="${compiler.source}"/> <property name="build.finalName" value="${project.artifactId}-${project.version}"/> @@ -63,6 +64,7 @@ encoding="UTF-8" optimize="false" deprecation="true" + release="${compiler.release}" target="${compiler.target}" verbose="false" fork="false" @@ -75,31 +77,25 @@ </target>  -  +   - <target name="plexus" + <target name="sisu" depends="compile" - description="Generate Plexus component.xml"> - <mkdir dir="${build.outputDir}/META-INF/plexus"/> - <java classname="org.codehaus.plexus.metadata.PlexusMetadataGeneratorCli" - failonerror="true" - fork="true"> -  - <classpath> - <path refid="build.classpath"/> - <pathelement location="${build.outputDir}"/> - </classpath> - <arg value="-X"/> - <arg value="-s"/> - <arg value="${build.srcDir}"/> - <arg value="-c"/> - <arg value="${build.outputDir}"/> - <arg value="-m"/> - <arg value="${build.outputDir}/META-INF/plexus"/> - <arg value="-o"/> - <arg value="${build.outputDir}/META-INF/plexus/components.xml"/> - </java> + description="Generate javax.inject.Name index"> + <sequential> + <java classname="org.eclipse.sisu.space.SisuIndex" + failonerror="true" + fork="true"> + <classpath> + <path refid="build.classpath"/> + </classpath> + <arg value="${build.outputDir}"/> + </java> + <move todir="${build.outputDir}/META-INF"> + <fileset dir="META-INF"/> + </move> + </sequential> </target>  @@ -107,7 +103,7 @@  <target name="compile-tests" - depends="plexus" + depends="sisu" description="Compile the test code" unless="test.skip"> <mkdir dir="${build.testOutputDir}"/> @@ -230,7 +226,7 @@   - <target name="package" depends="plexus,test" description="Package the application"> + <target name="package" depends="sisu,test" description="Package the application"> <jar jarfile="${build.dir}/${build.finalName}.jar" compress="true" index="false"

1 0

commit maven-dependency-plugin for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package maven-dependency-plugin for openSUSE:Factory checked in at 2023-09-28 00:26:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/maven-dependency-plugin (Old) and /work/SRC/openSUSE:Factory/.maven-dependency-plugin.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "maven-dependency-plugin" Thu Sep 28 00:26:06 2023 rev:4 rq:1113871 version:3.6.0 Changes: -------- --- /work/SRC/openSUSE:Factory/maven-dependency-plugin/maven-dependency-plugin.changes 2021-01-11 17:18:47.272835624 +0100 +++ /work/SRC/openSUSE:Factory/.maven-dependency-plugin.new.23327/maven-dependency-plugin.changes 2023-09-28 00:38:31.068939898 +0200 @@ -1,0 +2,81 @@ +Wed Sep 27 11:25:29 UTC 2023 - Fridrich Strba <fstrba(a)suse.com> + +- Update to verion 3.6.0 + * Bug + + MDEP-660: Obsolete example of -Dverbose on web page + + MDEP-671: Unsupported verbose option still appears in docs + + MDEP-680: dependency:go-offline does not use repositories from + parent pom in reactor build + + MDEP-700: Fix possible NPE + + MDEP-693: `dependency:analyze-only` goal fails on OpenJDK 14 + + MDEP-698: FileWriter and FileReader should be replaced + + MDEP-739: Dependency Plugin go-offline doesn't respect + artifact classifier + + MDEP-740: analyze-only failed: Unsupported class file major + version 60 (Java 16) + + MDEP-747: analyze-only failed: Unsupported class file major + version 61 (Java 17) + + MDEP-749: copy-dependencies fails when using excludeScope=test + + MDEP-679: mvn dependency:analyze detected wrong transitive + dependency + + MDEP-742: dependency plugin does not work with JDK 16 + + MDEP-752: skip dependency analyze in ear packaging + + MDEP-753: Non-test dependency reported as Non-test scoped test + only dependency + + MDEP-759: 'Dependency not found' with 3.2.0 and Java-17 while + analyzing + + MDEP-761: Tree plugin does not terminate with 3.2.0 + + MDEP-769: Minor improvement - continue + + MDEP-774: analyze-only failed: PermittedSubclasses requires + ASM9 + + MDEP-781: Broken Link to "Introduction to Dependency Mechanism + Page" + + MDEP-783: TreeMojo docs say scope doesn't work due to + MSHARED-4 + + MDEP-786: Sealed classes not supported + + MDEP-806: Dependency tree in verbose mode for war is empty + + MDEP-809: Javadoc was not updated to reflect that :tree's + verbose option is now ok + + MDEP-630: error dependency:list (caused by postgresql + dependency) + + MDEP-842: :list-classes does not skip if skip is set + + MDEP-843: :list-classes does not use GAV parameters + * New Feature + + MDEP-644: Reintroduce the verbose option for dependency:tree + + MDEP-645: List classes in a given artifact + + MDEP-708: dependency:analyze should recommend narrower scope + where possible + + MDEP-714: Add analyze parameter "ignoreUnusedRuntime" + + MDEP-787: Allow ignoring non-test-scoped dependencies + + MDEP-782: Add a <stripType> option to unpack goals + + MDEP-804: Allow auto-ignore of all non-test scoped + dependencies used only in test scope + * Improvement + + MDEP-705: Unused method o.a.m.p.d.t.TreeMojo.containsVersion + + MDEP-763: Minor improvements + + MDEP-768: GitHub Action build improvement + + MDEP-779: dependency:analyze should list the classes that + cause a used undeclared dependency + + MDEP-789: Improve documentation of analyze - Non-test scoped + + MDEP-602: Turn warnings into errors instead of failOnWarning + + MDEP-674: maven-dependency-plugin should leverage + plexus-build-api to support IDEs + + MDEP-716: TestListClassesMojo logs too much + + MDEP-827: Use outputDirectory from AbstractMavenReport + + MDEP-831: Remove not used dependencies / Replace parts + + MDEP-853: list-repositories - improvements + + MDEP-862: warns about depending on plexus-container-default + + MDEP-864: Replace AnalyzeReportView with a new + AnalyzeReportRenderer + * Task + + MDEP-681: Remove no longer required exclusions + + MDEP-760: Java 1.8 as minimum + + MDEP-841: Explicitly start and end tables with Doxia Sinks in + report renderers + + MDEP-849: Replace Maven shared StringUtils with Commons Lang3 + + MDEP-855: Remove unused and ignored parameter - useJvmChmod + + MDEP-857: Remove custom plexus configuration + + MDEP-859: Code refactor - UnpackUtil + + MDEP-866: Refresh download page + +------------------------------------------------------------------- Old: ---- maven-dependency-plugin-3.1.2-source-release.zip New: ---- maven-dependency-plugin-3.6.0-source-release.zip ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ maven-dependency-plugin.spec ++++++ --- /var/tmp/diff_new_pack.OsF8TE/_old 2023-09-28 00:38:32.128978457 +0200 +++ /var/tmp/diff_new_pack.OsF8TE/_new 2023-09-28 00:38:32.132978602 +0200 @@ -1,7 +1,7 @@ # # spec file for package maven-dependency-plugin # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: maven-dependency-plugin -Version: 3.1.2 +Version: 3.6.0 Release: 0 Summary: Plugin to manipulate, copy and unpack local and remote artifacts License: Apache-2.0 @@ -27,32 +27,35 @@ BuildRequires: fdupes BuildRequires: maven-local BuildRequires: unzip -BuildRequires: mvn(classworlds:classworlds) -BuildRequires: mvn(commons-collections:commons-collections) BuildRequires: mvn(commons-io:commons-io) -BuildRequires: mvn(commons-lang:commons-lang) +BuildRequires: mvn(org.apache.commons:commons-collections4) +BuildRequires: mvn(org.apache.commons:commons-lang3) BuildRequires: mvn(org.apache.maven.doxia:doxia-sink-api) -BuildRequires: mvn(org.apache.maven.doxia:doxia-site-renderer) BuildRequires: mvn(org.apache.maven.plugin-tools:maven-plugin-annotations) BuildRequires: mvn(org.apache.maven.plugins:maven-plugin-plugin) BuildRequires: mvn(org.apache.maven.plugins:maven-plugins:pom:) BuildRequires: mvn(org.apache.maven.reporting:maven-reporting-api) BuildRequires: mvn(org.apache.maven.reporting:maven-reporting-impl) -BuildRequires: mvn(org.apache.maven.shared:file-management) BuildRequires: mvn(org.apache.maven.shared:maven-artifact-transfer) BuildRequires: mvn(org.apache.maven.shared:maven-common-artifact-filters) BuildRequires: mvn(org.apache.maven.shared:maven-dependency-analyzer) BuildRequires: mvn(org.apache.maven.shared:maven-dependency-tree) BuildRequires: mvn(org.apache.maven.shared:maven-shared-utils) -BuildRequires: mvn(org.apache.maven.wagon:wagon-http-lightweight) +BuildRequires: mvn(org.apache.maven:maven-aether-provider) BuildRequires: mvn(org.apache.maven:maven-artifact) BuildRequires: mvn(org.apache.maven:maven-core) BuildRequires: mvn(org.apache.maven:maven-model) BuildRequires: mvn(org.apache.maven:maven-plugin-api) BuildRequires: mvn(org.apache.maven:maven-repository-metadata) +BuildRequires: mvn(org.apache.maven:maven-settings) BuildRequires: mvn(org.codehaus.plexus:plexus-archiver) +BuildRequires: mvn(org.codehaus.plexus:plexus-i18n) BuildRequires: mvn(org.codehaus.plexus:plexus-io) BuildRequires: mvn(org.codehaus.plexus:plexus-utils) +BuildRequires: mvn(org.eclipse.aether:aether-api) +BuildRequires: mvn(org.eclipse.aether:aether-util) +BuildRequires: mvn(org.eclipse.sisu:sisu-maven-plugin) +BuildRequires: mvn(org.sonatype.plexus:plexus-build-api) BuildArch: noarch %description @@ -71,17 +74,14 @@ %prep %setup -q -%pom_remove_plugin :maven-enforcer-plugin - -# We don't want to support legacy Maven versions (older than 3.1) -%pom_remove_dep org.sonatype.aether: - %build # Tests require legacy Maven -%{mvn_build} -f \ +%{mvn_build} -f -- \ + -Dproject.build.outputTimestamp=$(date -u -d @${SOURCE_DATE_EPOCH:-$(date +%%s)} +%%Y-%%m-%%dT%%H:%%M:%%SZ) \ %if %{?pkg_vcmp:%pkg_vcmp java-devel >= 9}%{!?pkg_vcmp:0} - -- -Dmaven.compiler.release=7 + -Dmaven.compiler.release=8 \ %endif + -Dsource=8 %install %mvn_install ++++++ maven-dependency-plugin-3.1.2-source-release.zip -> maven-dependency-plugin-3.6.0-source-release.zip ++++++ ++++ 71798 lines of diff (skipped)

1 0

commit maven-dependency-analyzer for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package maven-dependency-analyzer for openSUSE:Factory checked in at 2023-09-28 00:26:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/maven-dependency-analyzer (Old) and /work/SRC/openSUSE:Factory/.maven-dependency-analyzer.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "maven-dependency-analyzer" Thu Sep 28 00:26:07 2023 rev:5 rq:1113872 version:1.13.2 Changes: -------- --- /work/SRC/openSUSE:Factory/maven-dependency-analyzer/maven-dependency-analyzer.changes 2023-09-07 21:13:35.855142541 +0200 +++ /work/SRC/openSUSE:Factory/.maven-dependency-analyzer.new.23327/maven-dependency-analyzer.changes 2023-09-28 00:38:29.684889552 +0200 @@ -1,0 +2,48 @@ +Wed Sep 27 10:34:26 UTC 2023 - Fridrich Strba <fstrba(a)suse.com> + +- Upgrade to upstream version 1.13.2 + * Changes + + MSHARED-761: Make mvn dependency:analyze work with OpenJDK 11 + + MSHARED-786: jdk8 incompatibility at runtime + (NoSuchMethodError) + + MSHARED-870: Upgrade asm to 8.0.1 + + use try with resources to avoid leaks + + MDEP-708: dependency:analyze recommends test scope for + test-only artifacts that have non-test scope + + remove reference to deprecated public mutable field + + MDEP-712: update JIRA URL + + MDEP-708: dependency:analyze should recommend narrower scope + where possible + + MSHARED-932: remove dependency on jmock + + MDEP-753: inline deprecated field + + MDEP-753: add more JavaDoc + + MDEP-753: handle different classes from same artifact used by + model and test code + + MDEP-779: include class names in used undeclared dependencies + + MSHARED-997: Check maximum allowed Maven version + + MSHARED-1035: Get rid of maven-plugin-testing-tools for IT + test + + Require Maven 3.2.5+ + + MSHARED-1036: Analyze project classes only once + + MSHARED-1039: Fix array parsing + + MSHARED-1037: CONSTANT_METHOD_TYPE should not add to classes + + MSHARED-1038: Inner classes are in same compilation unit as + container class + + MSHARED-1085: Upgrade Parent to 36 + + MSHARED-1119: Cleanup IT tests + + MSHARED-894: replace Codehaus Plexus utils with + java.nio.file.Files and Apache Commons + + MDEP-757: bug with "non-test scoped test only dependencies + found" + + MSHARED-1218: Bump asm from 9.4 to 9.5 + + MSHARED-1220: Refresh download page + + MSHARED-1219: Upgrade Parent to 39 + + MSHARED-1205: Build on JDK 19, 20 + + MSHARED-1224: Prefer JDK classes to Plexus utils + + MSHARED-1149: Replace System.out by logger + + MSHARED-1247: java.lang.RuntimeException: Unknown constant + pool type + + MSHARED-1249: Switch to JUnit 5 + + MSHARED-1250: Dependency improvements + +------------------------------------------------------------------- Old: ---- maven-dependency-analyzer-1.10-source-release.zip New: ---- maven-dependency-analyzer-1.13.2-source-release.zip ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ maven-dependency-analyzer.spec ++++++ --- /var/tmp/diff_new_pack.K3TgY0/_old 2023-09-28 00:38:30.748928257 +0200 +++ /var/tmp/diff_new_pack.K3TgY0/_new 2023-09-28 00:38:30.748928257 +0200 @@ -17,7 +17,7 @@ Name: maven-dependency-analyzer -Version: 1.10 +Version: 1.13.2 Release: 0 Summary: Maven dependency analyzer License: Apache-2.0 @@ -26,26 +26,16 @@ Source0: https://repo1.maven.org/maven2/org/apache/maven/shared/%{name}/%{version}/%… Source1: %{name}-build.xml BuildRequires: ant -BuildRequires: apache-commons-cli +BuildRequires: apache-commons-io BuildRequires: apache-commons-lang3 BuildRequires: atinject BuildRequires: fdupes -BuildRequires: google-guice -BuildRequires: guava BuildRequires: javapackages-local >= 6 -BuildRequires: jdom2 BuildRequires: maven-lib BuildRequires: objectweb-asm -BuildRequires: plexus-classworlds -BuildRequires: plexus-cli -BuildRequires: plexus-containers-component-annotations -BuildRequires: plexus-metadata-generator -BuildRequires: plexus-utils -BuildRequires: qdox BuildRequires: sisu-inject -BuildRequires: sisu-plexus +BuildRequires: slf4j BuildRequires: unzip -BuildRequires: xbean BuildArch: noarch %description @@ -67,31 +57,18 @@ %setup -q cp %{SOURCE1} build.xml -# Do not require maven2 -%pom_change_dep :maven-project :maven-core - %build mkdir -p lib build-jar-repository -s lib \ apache-commons-lang3 \ atinject \ - commons-cli \ - guava/guava \ - guice/google-guice-no_aop \ - jdom2/jdom2 \ + commons-io \ maven/maven-artifact \ maven/maven-core \ maven/maven-model \ objectweb-asm/asm \ org.eclipse.sisu.inject \ - org.eclipse.sisu.plexus \ - plexus-classworlds \ - plexus/cli \ - plexus-containers/plexus-component-annotations \ - plexus-metadata-generator \ - plexus/utils \ - qdox \ - xbean/xbean-reflect + slf4j/api %{ant} \ -Dtest.skip=true \ ++++++ maven-dependency-analyzer-1.10-source-release.zip -> maven-dependency-analyzer-1.13.2-source-release.zip ++++++ ++++ 11128 lines of diff (skipped) ++++++ maven-dependency-analyzer-build.xml ++++++ --- /var/tmp/diff_new_pack.K3TgY0/_old 2023-09-28 00:38:30.900933786 +0200 +++ /var/tmp/diff_new_pack.K3TgY0/_new 2023-09-28 00:38:30.904933932 +0200 @@ -8,14 +8,15 @@ <property file="build.properties"/> - <property name="project.version" value="1.10"/> + <property name="project.version" value="1.13.2"/> <property name="project.groupId" value="org.apache.maven.shared"/> <property name="project.artifactId" value="maven-dependency-analyzer"/> <property name="project.name" value="Apache Maven Dependency Analyzer"/> <property name="project.organization.name" value="The Apache Software Foundation"/> - <property name="compiler.source" value="1.8"/> + <property name="compiler.release" value="8"/> + <property name="compiler.source" value="1.${compiler.release}"/> <property name="compiler.target" value="${compiler.source}"/> <property name="build.finalName" value="${project.artifactId}-${project.version}"/> @@ -64,6 +65,7 @@ encoding="UTF-8" optimize="false" deprecation="true" + release="${compiler.release}" target="${compiler.target}" verbose="false" fork="false" @@ -76,31 +78,25 @@ </target>  -  +   - <target name="plexus" + <target name="sisu" depends="compile" - description="Generate Plexus component.xml"> - <mkdir dir="${build.outputDir}/META-INF/plexus"/> - <java classname="org.codehaus.plexus.metadata.PlexusMetadataGeneratorCli" - failonerror="true" - fork="true"> -  - <classpath> - <path refid="build.classpath"/> - <pathelement location="${build.outputDir}"/> - </classpath> - <arg value="-X"/> - <arg value="-s"/> - <arg value="${build.srcDir}"/> - <arg value="-c"/> - <arg value="${build.outputDir}"/> - <arg value="-m"/> - <arg value="${build.outputDir}/META-INF/plexus"/> - <arg value="-o"/> - <arg value="${build.outputDir}/META-INF/plexus/components.xml"/> - </java> + description="Generate javax.inject.Name index"> + <sequential> + <java classname="org.eclipse.sisu.space.SisuIndex" + failonerror="true" + fork="true"> + <classpath> + <path refid="build.classpath"/> + </classpath> + <arg value="${build.outputDir}"/> + </java> + <move todir="${build.outputDir}/META-INF"> + <fileset dir="META-INF"/> + </move> + </sequential> </target>  @@ -108,7 +104,7 @@  <target name="compile-tests" - depends="plexus" + depends="sisu" description="Compile the test code" unless="test.skip"> <mkdir dir="${build.testOutputDir}"/> @@ -232,7 +228,7 @@   - <target name="package" depends="plexus,test" description="Package the application"> + <target name="package" depends="sisu,test" description="Package the application"> <jar jarfile="${build.dir}/${build.finalName}.jar" compress="true" index="false"

1 0

commit matrix-synapse for openSUSE:Factory
by Source-Sync 27 Sep '23

27 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package matrix-synapse for openSUSE:Factory checked in at 2023-09-28 00:25:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/matrix-synapse (Old) and /work/SRC/openSUSE:Factory/.matrix-synapse.new.23327 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "matrix-synapse" Thu Sep 28 00:25:02 2023 rev:85 rq:1113708 version:1.93.0 Changes: -------- --- /work/SRC/openSUSE:Factory/matrix-synapse/matrix-synapse.changes 2023-09-07 21:13:58.339946322 +0200 +++ /work/SRC/openSUSE:Factory/.matrix-synapse.new.23327/matrix-synapse.changes 2023-09-28 00:38:25.552739243 +0200 @@ -1,0 +2,143 @@ +Tue Sep 26 17:35:26 UTC 2023 - Marcus Rueckert <mrueckert(a)suse.de> + +- Update to 1.93.0 + The following issues are fixed in 1.93.0 (and RCs). + + GHSA-4f74-84v3-j9q5 / CVE-2023-41335 — Low Severity + https://github.com/matrix-org/synapse/security/advisories/GHSA-4f74-84v3-j9… + + Temporary storage of plaintext passwords during password changes. + + GHSA-7565-cq32-vx2x / CVE-2023-42453 — Low Severity + https://github.com/matrix-org/synapse/security/advisories/GHSA-7565-cq32-vx… + + Improper validation of receipts allows forged read receipts. + + See the advisories for more details. If you have any questions, email security(a)matrix.org. + + + - Features + - Add automatic purge after all users have forgotten a room. + (#15488) + - Restore room purge/shutdown after a Synapse restart. (#15488) + - Support resolving homeservers using matrix-fed DNS SRV + records from MSC4040. (#16137) + - Add the ability to use G (GiB) and T (TiB) suffixes in + configuration options that refer to numbers of bytes. + (#16219) + - Add span information to requests sent to appservices. + Contributed by MTRNord. (#16227) + - Add the ability to enable/disable registrations when using + CAS. Contributed by Aurélien Grimpard. (#16262) + - Allow the /notifications endpoint to be routed to workers. + (#16265) + - Enable users to easily unsubscribe to notifications emails + via the List-Unsubscribe header. (#16274) + - Report whether a user is locked in the List Accounts admin + API, and exclude locked users by default. (#16328) + - Bugfixes + - Fix a long-standing bug where multi-device accounts could + cause high load due to presence. (#16066, #16170, #16171, + #16172, #16174) + - Fix a long-standing bug where appservices using MSC2409 to + receive to_device messages would only get messages for one + user. (#16251) + - Fix bug when using workers where Synapse could end up + re-requesting the same remote device repeatedly. (#16252) + - Fix long-standing bug where we kept re-requesting a remote + server's key repeatedly, potentially causing delays in + receiving events over federation. (#16257) + - Avoid temporary storage of sensitive information. (#16272) + - Fix bug introduced in Synapse 1.49.0 when using dehydrated + devices (MSC2697) and refresh tokens. Contributed by Hanadi. + (#16288) + - Fix a long-standing bug where invalid receipts would be + accepted. (#16327) + - Use standard name for UTF-8 charset in emails. (#16329) + - Don't try refetching device lists for users on remote hosts + that are marked as "down". (#16298) + - Improved Documentation + - Fix typos in the documentation. (#16282) + - Link to the Alpine Linux community package for Synapse. + (#16304) + - Use string for federation_client_minimum_tls_version + documentation examples. Contributed by @jcgruenhage. (#16353) + - Internal Changes + - Allow modules to delete rooms. (#15997) + - Add GCC and GNU Make to the Nix flake development environment + so that ruff can be compiled. (#16090, #16263) + - Fix type checking when using the new version of Twisted. + (#16235) + - Delete device messages asynchronously and in staged batches + using the task scheduler. (#16240, #16311, #16312, #16313) + - Bump minimum supported Rust version to 1.61.0. (#16248) + - Update rust to version 1.71.1 in the nix development + environment. (#16260) + - Simplify server key storage. (#16261) + - Reduce CPU overhead of change password endpoint. (#16264) + - Stop purging from tables slated for removal. (#16273) + - Improve type hints. (#16276, #16301, #16325, #16326) + - Raise setuptools_rust version cap to 1.7.0. (#16277) + - Fix using the new task scheduler causing lots of CPU to be + used. (#16278) + - Upgrade CI run of Python 3.12 from rc1 to rc2. (#16280) + - Include values in SQL debug when using execute_values with + Postgres. (#16281) + - Enable additional linting checks. (#16283) + - Refactor receipts_graph Postgres transactions to stop error + messages. (#16299) + - Small improvements to logging in replication code. (#16309) + - Remove a reference cycle in background processes. (#16314) + - Only use literal strings for background process names. + (#16315) + - Refactor get_user_by_id. (#16316) + - Speed up task to delete to-device messages. (#16318) + - Avoid patching code in tests. (#16349) + - Test against PostgreSQL 16. (#16351) + +------------------------------------------------------------------- +Mon Sep 25 23:09:42 UTC 2023 - Marcus Rueckert <mrueckert(a)suse.de> + +- Update to 1.92.3 + This release does not affect openSUSE as we do not use the intree + libwebp + + Upstream changes: + This is again a security update targeted at mitigating + CVE-2023-4863. It turns out that libwebp is bundled statically in + Pillow wheels so we need to update this dependency instead of + libwebp package at the OS level. + + Unlike what was advertised in 1.92.2 changelog this release also + impacts PyPI wheels and Debian packages from matrix.org. + + We encourage admins to upgrade as soon as possible. + + Internal Changes + - Pillow 10.0.1 is now mandatory because of libwebp + CVE-2023-4863, since Pillow provides libwebp in the wheels. + (#16347) +- bump all the dependencies which are not available in tumbleweed. + +------------------------------------------------------------------- +Fri Sep 15 13:57:20 UTC 2023 - Marcus Rueckert <mrueckert(a)suse.de> + +- Update to 1.92.2 + Only fix in this is actually changing the upstream docker + configuration to mitigate the webp security bug. Does not affect + our package. + +------------------------------------------------------------------- +Tue Sep 12 20:21:04 UTC 2023 - Marcus Rueckert <mrueckert(a)suse.de> + +- Update to 1.92.1 + - Bugfixes + - Revert MSC3861 introspection cache, admin impersonation and + account lock. (#16258) + - Internal Changes + - Fix incorrect docstring for Ratelimiter. (#16255) + - Update the release script to work on macOS. (#16266) + - Stop building Ubuntu Kinetic since it is EOL and repos seem + to be dead. + +------------------------------------------------------------------- Old: ---- matrix-synapse-1.91.2.obscpio New: ---- matrix-synapse-1.93.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ matrix-synapse-test.spec ++++++ --- /var/tmp/diff_new_pack.28dTFG/_old 2023-09-28 00:38:28.088831494 +0200 +++ /var/tmp/diff_new_pack.28dTFG/_new 2023-09-28 00:38:28.092831640 +0200 @@ -27,7 +27,7 @@ %define pkgname matrix-synapse Name: %{pkgname}-test -Version: 1.91.2 +Version: 1.93.0 Release: 0 Summary: Test package for %{pkgname} License: Apache-2.0 ++++++ matrix-synapse.spec ++++++ --- /var/tmp/diff_new_pack.28dTFG/_old 2023-09-28 00:38:28.136833241 +0200 +++ /var/tmp/diff_new_pack.28dTFG/_new 2023-09-28 00:38:28.140833386 +0200 @@ -21,17 +21,14 @@ # NOTE: Keep this is in the same order as pyproject.toml. %if %{with use_poetry_for_dependencies} %global Jinja2_version 3.1.2 -# TODO: 10.0.0 -%global Pillow_version 9.5.0 -# TODO: 6.0.1 -%global PyYAML_version 6.0 +%global Pillow_version 10.0.1 +%global PyYAML_version 6.0.1 %global Twisted_version 22.10.0 %global attrs_version 23.1.0 %global bcrypt_version 4.0.1 %global bleach_version 5.0.1 %global canonicaljson_version 2.0.0 -# TODO: 41.0.3 -%global cryptography_version 41.0.2 +%global cryptography_version 41.0.3 %global immutabledict_version 3.0.0 %global idna_version 3.4 %global ijson_version 3.2.3 @@ -41,15 +38,14 @@ %global matrix_common_max_version 2 %global msgpack_version 1.0.5 %global netaddr_version 0.8.0 -# TODO: 8.13.14 +# TODO: 8.13.19 %global phonenumbers_version 8.13.18 # TODO: 0.17.1 %global prometheus_client_version 0.17.0 %global psutil_version 2.0.0 %global pyOpenSSL_version 23.0.0 %global pyasn1_version 0.5.0 -# TODO 0.3.0 -%global pyasn1_modules_version 0.2.8 +%global pyasn1_modules_version 0.3.0 %global pymacaroons_version 0.13.0 %global service_identity_version 23.1.0 %global signedjson_version 1.1.4 @@ -61,13 +57,12 @@ %global unpaddedbase64_version 2.1.0 %global matrix_synapse_ldap3_version 0.2.2 %global packaging_version 23.1 -%global psycopg2_version 2.9.6 +%global psycopg2_version 2.9.7 # TODO 7.3.1 %global pysaml2_version 7.2.1 %global Authlib_version 1.2.1 -# TODO 4.9.3 -%global lxml_version 4.9.2 -%global sentry_sdk_version 1.29.2 +%global lxml_version 4.9.3 +%global sentry_sdk_version 1.30.0 %global PyJWT_version 2.4.0 %global jaeger_client_version 4.8.0 %global opentracing_version 2.4.0 @@ -76,12 +71,11 @@ %global txredisapi_version 1.4.9 %global Pympler_version 1.0.1 %global pydantic_version 1.9.1 -# TODO: 2.10.2 -%global pyicu_version 2.10.2 +%global pyicu_version 2.11 %else # some version locks based on poetry.lock %global Jinja2_version 3.0 -%global Pillow_version 5.4.0 +%global Pillow_version 10.0.1 %global PyYAML_version 3.13 %global Twisted_version 18.9.0 %global attrs_version 21.1.1 @@ -160,7 +154,7 @@ %define pkgname matrix-synapse %define eggname matrix_synapse Name: %{pkgname} -Version: 1.91.2 +Version: 1.93.0 Release: 0 Summary: Matrix protocol reference homeserver License: Apache-2.0 @@ -194,11 +188,11 @@ BuildRequires: sysuser-shadow BuildRequires: sysuser-tools BuildRequires: unzip -BuildRequires: (%{use_python}-poetry-core >= 1.0.0 with %{use_python}-poetry-core =< 1.7.0) +BuildRequires: (%{use_python}-poetry-core >= 1.1.0 with %{use_python}-poetry-core =< 1.7.0) %{?systemd_ordering} %{sysusers_requires} %requires_peq %{use_python}-base -BuildRequires: (%{use_python}-setuptools-rust >= 1.3 with %{use_python}-setuptools-rust =< 1.6.0) +BuildRequires: (%{use_python}-setuptools-rust >= 1.3 with %{use_python}-setuptools-rust =< 1.7.0) # NOTE: Keep this is in the same order as pyproject.toml. # some version locks based on poetry.lock BuildRequires: %{use_python}-Jinja2 >= %{Jinja2_version} ++++++ _service ++++++ --- /var/tmp/diff_new_pack.28dTFG/_old 2023-09-28 00:38:28.260837751 +0200 +++ /var/tmp/diff_new_pack.28dTFG/_new 2023-09-28 00:38:28.264837897 +0200 @@ -4,11 +4,11 @@ <param name="versionformat">@PARENT_TAG@</param> <param name="url">https://github.com/matrix-org/synapse.git</param> <param name="scm">git</param> - <param name="revision">v1.91.2</param> + <param name="revision">v1.93.0</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="versionrewrite-replacement">\1</param>  ++++++ matrix-synapse-1.91.2.obscpio -> matrix-synapse-1.93.0.obscpio ++++++ /work/SRC/openSUSE:Factory/matrix-synapse/matrix-synapse-1.91.2.obscpio /work/SRC/openSUSE:Factory/.matrix-synapse.new.23327/matrix-synapse-1.93.0.obscpio differ: char 48, line 1 ++++++ matrix-synapse.obsinfo ++++++ --- /var/tmp/diff_new_pack.28dTFG/_old 2023-09-28 00:38:28.376841971 +0200 +++ /var/tmp/diff_new_pack.28dTFG/_new 2023-09-28 00:38:28.376841971 +0200 @@ -1,5 +1,5 @@ name: matrix-synapse -version: 1.91.2 -mtime: 1694013057 -commit: 9de615b3aa4f20cab182cf3822943b9465a30643 +version: 1.93.0 +mtime: 1695740214 +commit: 88ba67eb91215a708f321e16559fe3c2c0d0a407 ++++++ vendor.tar.zst ++++++ Binary files /var/tmp/diff_new_pack.28dTFG/_old and /var/tmp/diff_new_pack.28dTFG/_new differ

1 0