August 2023 - openSUSE Factory - openSUSE Mailing Lists

New package 'lite-xl-plugin-manager' for Factory
by Scott Bradnick 17 Aug '23

17 Aug '23

I'm requesting that editors/lite-xl-plugin-manager [1] be added to openSUSE:Factory. It makes managing colors and plugins for Lite-XL much easier than the point-in-time -colors,-plugins,-widgets packages I put together before it existed. https://github.com/lite-xl/lite-xl-plugin-manager `lpm` will query the associated repos under the lite-xl umbrella and install requested items on demand, for example: lpm repo update lpm plugin install gitstatus lpm color install dracula I've added Obsoletes tags to the lite-xl.spec so lite-xl[-colors,-plugins,- widgets] should be removed when the associated lite-xl update hits Tumbleweed. [1]: https://build.opensuse.org/package/show/editors/lite-xl-plugin-manager -- ~ Scott Bradnick | Windows Subsystem for Linux (WSL) Developer |- Tumbleweed: |-- Beelink SER6 Pro [AMD Rembrandt [Radeon 680M]] (x86_64) |-- Dell Precision 5540 [NVIDIA Quadro T1000] (x86_64) |-- IceWhale ZimaBoard 832 [Intel HD Graphics 500] (x86_64) |-- WinBook TW100 (x86_64) |- MicroOS: |-- O-DROID H2+ [UHD Graphics 600] (x86_64) https://keys.openpgp.org/ :: DBC5AA9A2D2BAEBC

1 0

systemd-boot support in Tumbleweed
by Ludwig Nussel 17 Aug '23

17 Aug '23

Hi! For those who might be interested in using systemd-boot with btrfs snapshots etc instead of grub, Tumbleweed is somewhat ready for that. Well, at least it works on my systems. Your mileage may vary. Don't use in production yet, it's WIP :-) Here are instructions how to convert an existing system to use systemd-boot: https://en.opensuse.org/Systemd-boot#Installation_with_full_BTRFS_snapshot_… cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.com/ SUSE Software Solutions Germany GmbH; GF: Ivo Totev, Andrew McDonald, Werner Knoblich; HRB 36809 (AG Nürnberg)

4 7

apache2-mod_perl broken
by Uwe Flechsig 17 Aug '23

17 Aug '23

Hello openSUSE, apache2-mod_perl is broken in TW after the perl upgrade to 5.38.0 a couple of days ago. Uwe

2 1

xrdp and sound
by Joe Salmeri 17 Aug '23

17 Aug '23

After Tumbleweed switched from pulseaudio to pipewire, remote desktop sessions ( XRDP ) no longer had sound because that support was based on pulseaudio. The developers have been working on a solution for quite a while now and it appears they have it working again using a new module. https://github.com/matt335672/pipewire-module-xrdp Can we get this new module included in TW ? Thanks! -- Regards, Joe

8 19

New Tumbleweed snapshot 20230816 released!
by Dominique Leuenberger 17 Aug '23

17 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: man (2.10.2 -> 2.11.2) mc (4.8.29 -> 4.8.30) ncurses (6.4.20230715 -> 6.4.20230812) perl-LWP-Protocol-https (6.10 -> 6.110.0) procps python-immutables python-pycups speech-dispatcher (0.11.4 -> 0.11.5) suse-module-tools (16.0.32 -> 16.0.33) yast2-installation (4.6.6 -> 4.6.7) === Details === ==== man ==== Version update (2.10.2 -> 2.11.2) - Update to 2.11.2: * Fix compile and test failures when `troff` is not `groff`. * Fix segfault in typical uses of `man` when `nroff` is not installed. * Fix crash in `mandb` when processing stray cats. * SECURITY: Replace `$` characters in page names with `?` when constructing `less` prompts. * Silence error message when processing an empty manual page hierarchy with a nonexistent cache directory. * `man(1)` now sorts whatis references below real pages, even if the whatis references are from a section with higher priority. * `mandb` now correctly records filters in the database if it uses cached whatis information. * Upgrade Gnulib, fixing syntax error on glibc systems with GCC 11. * The `CATWIDTH` configuration file directive now overrides `MINCATWIDTH` and `MAXCATWIDTH`. * Database entries for links were often incorrectly stored as if they were entries for the ultimate source of the page. They are now stored with the correct type. * Store links in the database using the section and extension of the link rather than of the ultimate source file. * Consider pages for adding to the database even if they seem to already exist; this performance optimization is no longer needed due to caching, and it produced inconsistent results in some unusual cases. * `man` now runs any required preprocessors in the same order that `groff` does, rather than trusting the order of filters in a page's preprocessor string. * Fix building on MinGW. (I haven't been able to test this; help from MinGW experts would be welcome.) Improvements: * Check for stray cats even if no manual pages in a given manpath were changed. * Add section `3type` to the default section list just after `2`. This is used by the Linux man-pages package. * Recognize more Hungarian translations of the `NAME` section. * Add more recognized case variants for localized versions of the `NAME` section. * Maintain multi keys in sorted order, improving database reproducibility. * Pick a more consistent name for the target of a whatis entry in the database. * Extend rules for when to replace one database entry with another, producing more stable behaviour. * Fully reorganize databases after writing them, allowing the reproduction of bitwise-identical databases regardless of scan order (at least with GDBM). - Port patches * man-db-2.6.3-chinese.dif * man-db-2.6.3-listall.dif * man-db-2.7.1-zio.dif * man-db-2.9.4-alternitive.dif * man-db-2.9.4-no-chown.patch * man-db-2.9.4.patch * man-propose-online.patch ==== mc ==== Version update (4.8.29 -> 4.8.30) Subpackages: mc-lang - Update to 4.8.30 - Core * Support PCRE2 as search engine (via ----with-search-engine=pcre2) (#4450) * Implement panelization buffers for both file panels (#4370) - VFS * tar: support extended headers (including long file names and sparse files) (#1952, #2201) * extfs helpers: replace "perl -w" with "use warnings" (MidnightCommander/mc#174) * extfs/patchfs: be more specific in error message (#4485) - Editor * Add syntax highlighting: - Jenkinsfiles (#4469) - B language (#4470) * Improve syntax highlighting: - ECMAScript (MidnightCommander/mc#172) - ECMAScript in TypeScript (MidnightCommander/mc#172) - use diff syntax highlighting for git commit messages (COMMIT_EDITMSG) (MidnightCommander/mc#85) - Misc * Code cleanup (#4426, #4438) * Filehighlight: - recognize vsix files as zip files (MidnightCommander/mc#171) * Skin updates: - julia256 (#4441, #4445) - Fixes * Usage of 'sed' in build system/makefiles is not portable (#4459, #4466) * Unportable '$<' in Makefiles (#4460) * FTBFS if ncurses used without --with-ncurses-includes= configure parameter (#4462) * Ncurses library is duplicated in MCLIBS (#4463, #4465) * FTBFS without ext2fs attributes support (#4464) * Wrong sort order after swapping panels (#4432) * Incorrect time delimiter in the copy/move progress window (#4437) * Incorrect redraw of overlapped file panels (#4408) * Subshell/Command line prompt is empty/missing (#3121) * Find file: relative ignore directory is applied to the start search directory (#4235) * Diff viewer: options are not applied on second run (#4486) * mc.ext.ini: 'Edit' command from 'Default' section is ignored (#4434) * mc.ext.ini: .md files are not recognized as Markdown ones by extension (#4444) * mcedit: off-by-one error in paragraph formatting (#4446) * ftp: incomplete file listing: block and character devices, pipes, sockets are missed (#4472) * Various typos in the source code (MidnightCommander/mc#177, MidnightCommander/mc#178) ==== ncurses ==== Version update (6.4.20230715 -> 6.4.20230812) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230812 + add/use putty+cursor to reflect amending of modified cursor-keys in 2021 -TD + add ecma+strikeout to putty -TD + add functions to query tty-flags in SCREEN (request by Bill Gray). - Add ncurses patch 20230805 + fix a few manpages needing tbl marker, seen by lintian warning. + fixes for compiler-warnings. + minor grammatical fix for manpages (Branden Robinson). - Add ncurses patch 20230729 + improve manpages for wgetnstr() and wget_wnstr(). + modify MinGW configuration to provide for running in MSYS/MSYS2 shells, assuming ConPTY support (patch by Pavel Fedin). + add assignment in CF_MAN_PAGES to fill in value for TERMINFO_DIRS in ncurses, terminfo and tic manpages (patch by Sven Joachim). - Add ncurses patch 20230722 + add "auto" default for --with-xterm-kbs configure option. ==== perl-LWP-Protocol-https ==== Version update (6.10 -> 6.110.0) - Remove CVE-2014-3230.patch, upstream was fixed. CVE-2014-3230, Debian #746576 - Update LWP-Protocol-https-6.09-systemca.diff - updated to 6.11 see /usr/share/doc/packages/perl-LWP-Protocol-https/Changes 6.11 2023-07-09 15:10:30Z - Remove Authority section from dist.ini (GH#64) (Olaf Alders) - Add very basic diagnostic information via test (GH#73) (Olaf Alders) - CVE-2014-3230 - don't disable verification if only hostnames should not (GH#14) (Steffen Ullrich) - Make explicit requirement of Mozilla::CA obsolete (GH#72) (Steffen Ullrich and Olaf Alders) - Remove _in_san and _cn_match. Empty out the _check_sock hook (GH#71) (Chase Whitener) - Use warnings (GH#69) (Pete Houston) ==== procps ==== Subpackages: libprocps8 procps-lang - Add patch CVE-2023-4016.patch * CVE-2023-4016: ps buffer overflow (bsc#1214290) ==== python-immutables ==== - add python312.patch to fix build with python 3.12 ==== python-pycups ==== - build as wheel ==== speech-dispatcher ==== Version update (0.11.4 -> 0.11.5) Subpackages: libspeechd2 python3-speechd - Update to version 0.11.5: * Update CLDR to version 43 and symbols from NVDA. * Fix parsing and emitting space character. * Reduce espeak buffer size to avoid ssml issues. * Add --disable-doc. * Fix spd-conf not being able to set the default module. * Fix pausing without index. ==== suse-module-tools ==== Version update (16.0.32 -> 16.0.33) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.33: * change wording in filesystem blacklist files (gh#openSUSE/suse-module-tools#71) * rpm-script: update bootloader after creating initramfs (boo#1213822) * usrmerge: Drop support for non-usrmerged (boo#1206798) ==== yast2-installation ==== Version update (4.6.6 -> 4.6.7) - Require awk for use in startup scripts (bsc#1214277) - 4.6.7

1 0

New Tumbleweed snapshot 20230813 installs python 3.10 again
by Axel Braun 17 Aug '23

17 Aug '23

Hi, current TW snapshot seems to be a large one again. Strange enough, I had python 3.10 removed from my system weeks ago, and now the latest snapshot wants to install this again. Any indication why? Thx Axel

13 28

Should programs that don't require root permission move out of /usr/sbin?
by xtexChooser＠duck.com 17 Aug '23

17 Aug '23

Hello, Recently, I noticed that the `getcap` program in the `libcap-progs` package is packaged into `/usr/sbin/` directory. However, this program works without root permission. Is this an expected behaviour? or should it be moved? Thanks. -- -- xtex

5 7

New Tumbleweed snapshot 20230815 released!
by Dominique Leuenberger 16 Aug '23

16 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (2.4.0~git18.37ec5cd -> 2.4.0~git74.4297d88) bluez busybox-links ca-certificates-mozilla (2.60 -> 2.62) gdm gnome-disk-utility gtk3 gtk4 (4.10.5 -> 4.12.0) kmod mozjs102 (102.12.0 -> 102.14.0) ndctl (76 -> 78) postgresql15 (15.3 -> 15.4) python-M2Crypto python-PyYAML (6.0 -> 6.0.1) python-alembic (1.11.1 -> 1.11.2) python-cryptography (41.0.2 -> 41.0.3) python-gevent (22.10.2 -> 23.7.0) python-lxml (4.9.2 -> 4.9.3) python-typing_extensions (4.5.0 -> 4.7.1) w3m yast2-trans (84.87.20230729.64eca7e0a1 -> 84.87.20230811.13616e3be9) === Details === ==== 389-ds ==== Version update (2.4.0~git18.37ec5cd -> 2.4.0~git74.4297d88) Subpackages: lib389 libsvrcore0 - Update to version 2.4.0~git74.4297d88: * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897) * Issue i5846 - Crash when lmdb import is aborted (#5881) * Issue 5894 - lmdb import error fails with Could not store the entry (#5895) * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891) * Issue 5082 - slugify: ModuleNotFoundError when running test cases - Update to version 2.4.0~git69.89c2de5: * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888) * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866) * Issue 5872 - part 2 - fix is_dbi regression (#5887) * Issue 4758 - Add tests for WebUI * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849) * Issue 5883 - Remove connection mutex contention risk on autobind (#5886) * Issue 5872 - `dbscan()` in lib389 can return bytes * Bump version to 2.4.3 * Issue 5729 - Memory leak in factory_create_extension (#5814) * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871) ==== bluez ==== Subpackages: bluez-auto-enable-devices bluez-cups bluez-zsh-completion libbluetooth3 - For pushing bluez 5.68 to 15-SP6 (bluez-5.65), sync change log: (jsc#PED-5599) - The avrcp-Fix-crash-while-handling-unsupported-events.patch be merged to bluez-5.67 since 2023. (bsc#1210398)(CVE-2023-27349) ==== busybox-links ==== Subpackages: busybox-bzip2 busybox-coreutils busybox-ed busybox-findutils busybox-gawk busybox-grep busybox-gzip busybox-misc busybox-psmisc busybox-sed busybox-sendmail busybox-tar busybox-which busybox-xz - Check in filelists instead of buildrequiring all non-busybox utils ==== ca-certificates-mozilla ==== Version update (2.60 -> 2.62) - Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248) Added: - Atos TrustedRoot Root CA ECC G2 2020 - Atos TrustedRoot Root CA ECC TLS 2021 - Atos TrustedRoot Root CA RSA G2 2020 - Atos TrustedRoot Root CA RSA TLS 2021 - BJCA Global Root CA1 - BJCA Global Root CA2 - LAWtrust Root CA2 (4096) - Sectigo Public Email Protection Root E46 - Sectigo Public Email Protection Root R46 - Sectigo Public Server Authentication Root E46 - Sectigo Public Server Authentication Root R46 - SSL.com Client ECC Root CA 2022 - SSL.com Client RSA Root CA 2022 - SSL.com TLS ECC Root CA 2022 - SSL.com TLS RSA Root CA 2022 Removed CAs: - Chambers of Commerce Root - E-Tugra Certification Authority - E-Tugra Global Root CA ECC v3 - E-Tugra Global Root CA RSA v3 - Hongkong Post Root CA 1 ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Do not use %autopatch to build on SLE where rpm version is not ready for the macro. ==== gnome-disk-utility ==== Subpackages: gnome-disk-utility-lang - Support build environments like SLE 15 SP5 and Leap 15.5 which had %{_distconfdir) not defined yet. ==== gtk3 ==== Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Do not use %autopatch to build on SLE where rpm version is not ready for the macro. ==== gtk4 ==== Version update (4.10.5 -> 4.12.0) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.12.0: + List widgets: Add scroll_to APIs + GtkFileLauncher: Add an always-ask property + GtkTextView: Make backspace behavior match GtkEntry + gsk: Fix handling of luminance in mask nodes + Text rendering: Automate the setting of gtk-hint-font-metrics from the scale factor. This improves font rendering in flatpaks + Wayland: - Fix behavior of stylus buttons - Support suspended window state + Vulkan: Many improvements + Tools: Add gtk4-rendernode-tool + Debugging: Drop the GTK_DEBUG_TOUCHSCREEN flag + Build: Some build options have been renamed: - gtk_doc -> documentation - update_screenshots -> screenshots - The old names still work + Updated translations. - Update option passed to meson following upstream changes. - Update to version 4.11.4: + GtkFileChooser: - Default to sorting folders first - Fix a crash when visiting recent files + GtkTextView: Fix corner cases in word navigation + GtkMenuButton: Normalize label layout + GtkDropDown: Add support for sections + GtkVideo: Make the overlay icon clickable + GtkWindow: Clear the resize cursors to avoid artifacts + GtkFileDialog: Always set initial-folder + GtkDropDown: Update on expression changes + GtkMapListModel: Implement GtkSectionModel + Accessibility: - Improvements all over the place: GtkButton, GtkPasswordEntry, GtkFontChooserDialog, GtkColorChooserDialog, GtkShortcutsWindow, GtkMenuButton, GtkAboutDialog, GtkFileChooserDialog, GtkStackSidebar, GtkStackSwitcher, GtkMediaControls, GtkColorDialogButton, GtkDropDown, GtkInfoBar, GtkNotebook, GtkPrintUnixDialog, GtkModelButton - Make name computation follow the ARIA spec more closely - Adapt name computation for the common 'nested button' scenario - Change many containers to use `generic` instead of `group` - Use `generic` as the default role - Use `application` instead of `window` for windows - Add properties for accessible names of not directly exposed widgets in GtkListView, GtkGridView and GtkColumnView + DND: Fix criticals when drops are rejected + X11: Fix regressions in GLX setup + Windows: Center newly created transient windows + Vulkan: - Add antialising for gradients - Do less work on clipped away nodes - Redo image uploading - Support different image depths and formats - Add a pipeline cache + Demos: - gtk4-demo: Improve window sizing - gtk4-demo: Improve focus behavior - gtk4-demo: Add many missing a11y properties + Tools: gtk4-builder-tool: Make render an alias screenshot + Inspector: - Show more information in the a11y tab - Add an accessibility overlay with warnings and recommendations - Limit the width of the a11y tab + Build: - Require GLib 2.76 - Make asan builds work again - Fix the build if ld is not ld.bdf + Updated translations. ==== kmod ==== Subpackages: kmod-bash-completion libkmod2 - Remove compatibility patches, add README.usrmerge (boo#1212835). * Delete Provide-fallback-for-successfully-running-make-modules_install.patch * Delete compat-module_directory-module_prefix.patch ==== mozjs102 ==== Version update (102.12.0 -> 102.14.0) - Update to version 102.14.0: + Various security fixes and other quality improvements. + CVE-2023-4045: Offscreen Canvas could have bypassed cross-origin restrictions. + CVE-2023-4046: Incorrect value used during WASM compilation. + CVE-2023-4047: Potential permissions request bypass via clickjacking. + CVE-2023-4048: Crash in DOMParser due to out-of-memory conditions. + CVE-2023-4049: Fix potential race conditions when releasing platform objects. + CVE-2023-4050: Stack buffer overflow in StorageManager. + CVE-2023-4054: Lack of warning when opening appref-ms files. + CVE-2023-4055: Cookie jar overflow caused unexpected cookie jar state. + CVE-2023-4056: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14. - Changes from version 102.13.0: + Various security fixes and other quality improvements. + CVE-2023-37201: Use-after-free in WebRTC certificate generation + CVE-2023-37202: Potential use-after-free from compartment mismatch in SpiderMonkey + CVE-2023-37207: Fullscreen notification obscured + CVE-2023-37208: Lack of warning when opening Diagcab files + CVE-2023-37211: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 ==== ndctl ==== Version update (76 -> 78) - Update to version 78 * Improved CXL support (jsc#PED-5804, jsc#PED-6162) - Remove upstreamed patches - cxl-monitor-fix-include-paths-for-tracefs-and-tracee.patch - cxl-event-trace-use-the-wrapped-util_json_new_u64.patch ==== postgresql15 ==== Version update (15.3 -> 15.4) Subpackages: libpq5 postgresql15-contrib postgresql15-server - Update to 15.4: * bsc#1214059, CVE-2023-39417: Disallow substituting a schema or owner name into an extension script if the name contains a quote, backslash, or dollar sign. * bsc#1214061, CVE-2023-39418: Fix MERGE to enforce row security policies properly. * https://www.postgresql.org/docs/15/release-15-4.html - Restore the independence of mini builds from the main build after the -mini name change from April 4, 2023. - Adjust icu handling to prepare for PostgreSQL 16. - Overhaul postgresql-README.SUSE and move it from the binary package to the noarch wrapper package. - Change the unix domain socket location from /var/run to /run. ==== python-M2Crypto ==== - Make tests running again. ==== python-PyYAML ==== Version update (6.0 -> 6.0.1) - update to 6.0.1: * pin Cython to < 3.0 ==== python-alembic ==== Version update (1.11.1 -> 1.11.2) - update to 1.11.2: * Added typing to the default script mako templates. * Added support in autogenerate for NULLS NOT DISTINCT in * the PostgreSQL dialect. * Fixed format string logged when running a post write hook * Added parameters if_exists and if_not_exists for index operations. ==== python-cryptography ==== Version update (41.0.2 -> 41.0.3) - update to 41.0.3: * Fixed performance regression loading DH public keys. * Fixed a memory leak when using * :class:`~cryptography.hazmat.primitives.ciphers.aead.ChaCha20 Poly1305`. ==== python-gevent ==== Version update (22.10.2 -> 23.7.0) - update to 23.7.0: * Add preliminary support for Python 3.12, using greenlet 3.0a1. * Update the bundled c-ares version to 1.19.1. * Fix an edge case connecting a non-blocking ``SSLSocket`` that could result in an AttributeError. In a change to match the standard library, calling ``sock.connect_ex()`` on a subclass of ``socket`` no longer calls the subclass's ``connect`` method. * Make gevent's ``FileObjectThread`` (mostly used on Windows) implement ``readinto`` cooperatively. * Work around an ``AttributeError`` during cyclic garbage collection when Python finalizers (``__del__`` and the like) attempt to use gevent APIs. This is not a recommended practice, and it is unclear if catching this ``AttributeError`` will fix any problems or just shift them. * Remove support for obsolete Python versions. This is everything prior to 3.8. * Stop using ``pkg_resources`` to find entry points (plugins). Instead, use ``importlib.metadata``. * Honor ``sys.unraisablehook`` when a callback function produces an exception, and handling the exception in the hub * also* produces an exception. - drop skip-tests-in-leap.patch handle-python-ssl-changes.patch (obsolete) ==== python-lxml ==== Version update (4.9.2 -> 4.9.3) - update to 4.9.3: * ``lxml.objectify`` accepted non-decimal numbers like ``Â²Â²Â²`` as integers. * A memory leak in ``lxml.html.clean`` was resolved by switching to Cython 0.29.34+. * GH#348: URL checking in the HTML cleaner was improved. * GH#371, GH#373: Some regex strings were changed to raw strings to fix Python warnings. * Built with Cython 0.29.36 to adapt to changes in Python 3.12. ==== python-typing_extensions ==== Version update (4.5.0 -> 4.7.1) - update to version 4.7.1: - Fix support for `TypedDict`, `NamedTuple` and `is_protocol` on PyPy-3.7 and PyPy-3.8. Patch by Alex Waygood. Note that PyPy-3.7 and PyPy-3.8 are unsupported by the PyPy project. The next feature release of typing-extensions will drop support for PyPy-3.7 and may also drop support for PyPy-3.8. - update to version 4.7.0: - This is expected to be the last feature release supporting Python 3.7, which reaches its end of life on June 27, 2023. Version 4.8.0 will support only Python 3.8.0 and up. - Fix bug where a `typing_extensions.Protocol` class that had one or more non-callable members would raise `TypeError` when `issubclass()` was called against it, even if it defined a custom `__subclasshook__` method. The correct behaviour -- which has now been restored -- is not to raise `TypeError` in these situations if a custom `__subclasshook__` method is defined. Patch by Alex Waygood (backporting https://github.com/python/cpython/pull/105976). - update to version 4.7.0rc1: - Add `typing_extensions.get_protocol_members` and `typing_extensions.is_protocol` (backport of CPython PR #104878). Patch by Jelle Zijlstra. - `typing_extensions` now re-exports all names in the standard library's `typing` module, except the deprecated `ByteString`. Patch by Jelle Zijlstra. - Due to changes in the implementation of `typing_extensions.Protocol`, `typing.runtime_checkable` can now be used on `typing_extensions.Protocol` (previously, users had to use `typing_extensions.runtime_checkable` if they were using `typing_extensions.Protocol`). - Align the implementation of `TypedDict` with the implementation in the standard library on Python 3.9 and higher. `typing_extensions.TypedDict` is now a function instead of a class. The private functions `_check_fails`, `_dict_new`, and `_typeddict_new` have been removed. `is_typeddict` now returns `False` when called with `TypedDict` itself as the argument. Patch by Jelle Zijlstra. - Declare support for Python 3.12. Patch by Jelle Zijlstra. - Fix tests on Python 3.13, which removes support for creating `TypedDict` classes through the keyword-argument syntax. Patch by Jelle Zijlstra. - Fix a regression introduced in v4.6.3 that meant that ``issubclass(object, typing_extensions.Protocol)`` would erroneously raise ``TypeError``. Patch by Alex Waygood (backporting the CPython PR https://github.com/python/cpython/pull/105239). - Allow `Protocol` classes to inherit from `typing_extensions.Buffer` or `collections.abc.Buffer`. Patch by Alex Waygood (backporting https://github.com/python/cpython/pull/104827, by Jelle Zijlstra). - Allow classes to inherit from both `typing.Protocol` and `typing_extensions.Protocol` simultaneously. Since v4.6.0, this caused `TypeError` to be raised due to a metaclass conflict. Patch by Alex Waygood. - Backport several deprecations from CPython relating to unusual ways to create `TypedDict`s and `NamedTuple`s. CPython PRs #105609 and #105780 by Alex Waygood; `typing_extensions` backport by Jelle Zijlstra. - Creating a `NamedTuple` using the functional syntax with keyword arguments (`NT = NamedTuple("NT", a=int)`) is now deprecated. - Creating a `NamedTuple` with zero fields using the syntax `NT = NamedTuple("NT")` or `NT = NamedTuple("NT", None)` is now deprecated. - Creating a `TypedDict` with zero fields using the syntax `TD = TypedDict("TD")` or `TD = TypedDict("TD", None)` is now deprecated. - Fix bug on Python 3.7 where a protocol `X` that had a member `a` would not be considered an implicit subclass of an unrelated protocol `Y` that only has a member `a`. Where the members of `X` are a superset of the members of `Y`, `X` should always be considered a subclass of `Y` iff `Y` is a runtime-checkable protocol that only has callable members. Patch by Alex Waygood (backporting CPython PR https://github.com/python/cpython/pull/105835). - update to version 4.6.3 (June 1, 2023) - Fix a regression introduced in v4.6.0 in the implementation of runtime-checkable protocols. The regression meant that doing `class Foo(X, typing_extensions.Protocol)`, where `X` was a class that had `abc.ABCMeta` as its metaclass, would then cause subsequent `isinstance(1, X)` calls to erroneously raise `TypeError`. Patch by Alex Waygood (backporting the CPython PR https://github.com/python/cpython/pull/105152). - Sync the repository's LICENSE file with that of CPython. `typing_extensions` is distributed under the same license as CPython itself. - Skip a problematic test on Python 3.12.0b1. The test fails on 3.12.0b1 due to a bug in CPython, which will be fixed in 3.12.0b2. The `typing_extensions` test suite now passes on 3.12.0b1. - update to version 4.6.2: - Fix use of `@deprecated` on classes with `__new__` but no `__init__`. Patch by Jelle Zijlstra. - Fix regression in version 4.6.1 where comparing a generic class against a runtime-checkable protocol using `isinstance()` would cause `AttributeError` to be raised if using Python 3.7. - update to version 4.6.1: - Change deprecated `@runtime` to formal API `@runtime_checkable` in the error message. Patch by Xuehai Pan. - Fix regression in 4.6.0 where attempting to define a `Protocol` that was generic over a `ParamSpec` or a `TypeVarTuple` would cause `TypeError` to be raised. Patch by Alex Waygood. - update to version 4.6.0: - `typing_extensions` is now documented at https://typing-extensions.readthedocs.io/en/latest/. Patch by Jelle Zijlstra. - Add `typing_extensions.Buffer`, a marker class for buffer types, as proposed by PEP 688. Equivalent to `collections.abc.Buffer` in Python 3.12. Patch by Jelle Zijlstra. - Backport two CPython PRs fixing various issues with `typing.Literal`: https://github.com/python/cpython/pull/23294 and https://github.com/python/cpython/pull/23383. Both CPython PRs were originally by Yurii Karabas, and both were backported to Python >=3.9.1, but ... changelog too long, skipping 69 lines ... https://github.com/python/cpython/pull/104048). Patch by Alex Waygood. ==== w3m ==== - CVE-2023-38253: out-of-bounds read in growbuf_to_Str() at w3m/indep.c (bsc#1213323) - CVE-2023-38252 out-of-bounds read in Strnew_size() at w3m/Str.c (bsc#1213324) - add 0001-Fix-OOB-access-due-to-multiple-backspaces.patch ==== yast2-trans ==== Version update (84.87.20230729.64eca7e0a1 -> 84.87.20230811.13616e3be9) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230811.13616e3be9: * Translated using Weblate (Georgian) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Czech) * New POT for text domain 'users'. * New POT for text domain 'storage'. * New POT for text domain 'sap-installation-wizard'. * New POT for text domain 'qt-pkg'. * New POT for text domain 'qt'. * New POT for text domain 'pam'. * New POT for text domain 'ncurses'. * New POT for text domain 'migration_sle'. * New POT for text domain 'kdump'. * New POT for text domain 'installation'. * New POT for text domain 'control'.

1 0

openSUSE Release Engineering meeting 16.08.2023
by Lubos Kocman 16 Aug '23

16 Aug '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees DimStar, lkocman, Sarah, Ana, ddemaio, wengel, Richard ## Leap lkocman is on vacation on Thursday The Leap replacement survey for contributors is open till 31st Aug https://survey.opensuse.org/ All reported feature requests against 15.6 were processed. https://code.opensuse.org/leap/features 15.6 the second build is already in openQA, first build had beta identification issues https://openqa.opensuse.org/group_overview/50 openSUSE-repos Discussion regarding slow fetch of repodata via http were resolved issues with duplicate service repo entries in zypper workaround: https://bugzilla.suse.com/show_bug.cgi?id=1214135 https://github.com/openSUSE/openSUSE-repos/pull/36 LeapMicro 5.5 pending openqa setup https://github.com/os-autoinst/openqa-trigger-from-obs/pull/223 15.6 heads up for the packman team to ensure they're aware of the 15.6 roadmap https://code.opensuse.org/leap/features/issue/118 It is ready for download since a few weeks: https://ftp.fau.de/packman/suse/ ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 63 failed 3 unresolvable (last week: 46 failed, 4 unresolvable) https://tinyurl.com/ysy4nnnz * glibc 2.38 was checked in for snapshot 0812; That snapshot was built using rebuild=direct (resulting in a larger snapshot); things take care of the new glibc features if applicable * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks mariadb boo#1213219, ceph boo#1213217 ## Richard (Aeon) Richard's been needing to focus on SUSE ALP topics more than Aeon Not much news this week, more fun with systemd-homed; trying to find a route to making it the default lkocman: If this would be a success we should definitely talk to SUSE IT, to consider home-encryption only as acceptable. As of now it's only FDE on Linux. New aeon-check concept being discussed https://en.opensuse.org/Portal:Aeon/DevelopmentThoughts ## Richard (ALP Architecture) No progress, waiting for the results of the poll https://etherpad.opensuse.org/p/alp-poll ## Max Not available * newer re2 was in, re2-10 got accepted to Backports as well after newer re2, as providing the backward compatibility to build qtwebengine and chromium * s390x build is still a problem, I disabled s390x build in Backports and did a package-groups adjustment to decrease required packages on s390x dvd in order to get a snapshot for testing * openqa jobgroups and sync setup is pending until we have a complete snapshot Wolfgang: LinuxOne was moved to PRG datacenter but it's not yet running. And the current machine in NUE can't keep up with the load. (Technically the LinuxOne is running but it only can be used when the production buildservice OBS/IBS from Nuernberg is switched to Prague. No cross-location support in buildservice yet ;) ) Adrian believes that the situation will be solved until end of the month. For time being we'll have to skip the architecture. "There is a light". Wolfgang: Storage is already there (LinuxOne was upgraded before the move). Max: we could use increased priority for Backport-15-SP6 and openSUSE:Leap:15.6 ## Guillaume - Arm Not available Tumbleweed: * Rolling * gcc13 bug leading to build failure of highway (and maybe more) - A fix is available in master branch of GCC and need to be backported to GCC13 - https://bugzilla.opensuse.org/show_bug.cgi?id=1213647 * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 Leap: * 15.5 aarch64: kernel oops seen on openQA aarch64 workers - https://bugzilla.opensuse.org/show_bug.cgi?id=1213620 * 15.5: port for armv7: containers are currently not building/created. Dirk mentioned that driver in 15.4 was the k3s team. ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server Note: I will miss all next meetings in August. See you in September. ## Sarah - s390x Tumbleweed * no new releases because of missing build nodes for building -> data center move required. Wolfgang: the date of the final move is unfortunatelly not fixed yet. Physical installation issues such as network installation, and IBS/OBS setup in PRG. Definitely not before August. Leap: * running Enablement topics: * MPI is enabled for LLVM (IBMer has forgotten his enablement stuff on the PC) * luajit enablement for s390x available as PR patches (result of Linux Foundation mentorship) -> next step: integration into our packages 1) https://github.com/LuaJIT/LuaJIT/pull/891 2) https://github.com/LuaJIT/LuaJIT/pull/855 ## Doug * Created form template for code.o.o./coc https://code.opensuse.org/project/coc/new_issue * Project Clarity draft still needs some refinement * Background: Establishing a clear understanding of projects the are and are not part of the openSUSE Project * openSUSE.Asia Summit * Checking status of openSUSE.Asia Summit payment * Registrations 16, Submissions 18 * Talks can be onsite or virtual (recorded). * Deadline is August 20. * Submit your proposal at https://events.opensuse.org/ * storage * Returned some items in marketing storage area * Reengaged with facilities on them making a decision * GSoC * Final evaluations due by Sept. 4 by 18:00 UTC * mentors notified * One was extended Static * Checking on FOSDEM stand & devroom - Annoucements likely to come in September * Still need future storage location * AI topics (static) * Nothing new ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling finish Package Hub SLE-15-SP6 product setup this week on IBS to proceed with SCC and CDN availability we need to check orphaned packages that can be removed from Backports before publishing to CDN ## Maintenance team (Marcus or Maurizio (m4u)) Not available No big news Firefox needs updates of dependencies before it can be updated to the current version (Security fixes) libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is OK currently. (snapper was fixed) Some 15.5 updates from between freeze and GA need to be released, WIP for Marcus Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS OBS build power is back to normal after fixing misconfiguration which kept workers busy. Servers for OBS is moving to new datacenters until the end of the month of August AC problems in Nüremberg with openQA servers Wolfgang: The current issue in Server room 1 (OBS/IBS is located there) is a failing A/C unit. We can keep the current number of workers to keep with the current load but we can't enable more workers. ## Open Floor

1 0

New Tumbleweed snapshot 20230814 released!
by Dominique Leuenberger 15 Aug '23

15 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: python-Pygments (2.15.1 -> 2.16.1) python-ldap === Details === ==== python-Pygments ==== Version update (2.15.1 -> 2.16.1) - update to version 2.16.1: * Fix native style missing from style list (#2484) - additional changes from version 2.16.0: * New lexers: + ASN.1 (#2462) + Blueprint (#2434) + BQN (#2472) + DNS zone files (#2464) + GraphQL (#2428) + Linux desktop files (following the specification of the Freedesktop group, formerly known as XDG) (#2470) + NVIDIA PTX (#2432) + OpenSCAD (#2449) + systemd (#2470) + TLS presentation language (#2455) + Verifpal (#2430) + YARA (#2453) * Updated lexers: + ASC: Add application/pem-certificate-chain mimetype (#2471) + C/C++: Refine keyword lists (#2421, #2422) + Carbon: Fix long processing times on invalid input, fix number lexing (#2454, #2456) + Elpi: Handle quotations (#2419) + Go: Support additional built-ins (#2481) + HTTP: Support empty headers (#2461), support more general methods (#2460), also recognize responses in analyse_text implementation (#2460), and highlight URL encoded data (#2465, #1620) + Igor Pro: Update to Igor Pro 9 (#2482) + lean: Recognize expressions nested within attributes (#1817) + Macaulay2: Update builtins (#2457) + Markdown: Allow extra characters after language name in code blocks (#2437) + NestedText: Update to version 3 (#2459) + scdoc: Improve language guessing implementation (#2402) + Spice: Update to latest version (#2476) + Transact SQL: Add Pre-sorted Group keyword (#2417) + Uxntal: Update for current runes (#2424) + Wikitext: Fix templates in wiki links; fix a language converter false positive; add bold italic markup (#2447) * Add Generic.EmphStrong token for bold italic markup (#2444) * Add Lightbulb style (#2474) * Improve contrast in Monokai style (#2448) * Add documentation how to create terminal code highlighting commands (#2131, #2425) * Add support for loading TrueType fonts to the ImageFormatter (#1960) ==== python-ldap ==== - Re-run source download due to file differences.

1 0