Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package perl-Plack-Middleware-Session for openSUSE:Factory checked in at 2025-07-21 20:00:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/perl-Plack-Middleware-Session (Old) and /work/SRC/openSUSE:Factory/.perl-Plack-Middleware-Session.new.8875 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-Plack-Middleware-Session" Mon Jul 21 20:00:49 2025 rev:6 rq:1294555 version:0.350.0 Changes: -------- --- /work/SRC/openSUSE:Factory/perl-Plack-Middleware-Session/perl-Plack-Middleware-Session.changes 2025-01-07 20:53:07.024162305 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Plack-Middleware-Session.new.8875/perl-Plack-Middleware-Session.changes 2025-07-21 20:01:59.167295031 +0200 @@ -1,0 +2,9 @@ +Tue Jul 8 05:36:36 UTC 2025 - Tina Müller <timueller+p...@suse.de> + +- updated to 0.350.0 (0.35) + see /usr/share/doc/packages/perl-Plack-Middleware-Session/Changes + + 0.35 2025-07-07 18:49:59 EDT + - Added secure session ID generation using Crypt::SysRandom (#52) + +------------------------------------------------------------------- Old: ---- Plack-Middleware-Session-0.34.tar.gz New: ---- Plack-Middleware-Session-0.35.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-Plack-Middleware-Session.spec ++++++ --- /var/tmp/diff_new_pack.6CNj1V/_old 2025-07-21 20:02:00.455348633 +0200 +++ /var/tmp/diff_new_pack.6CNj1V/_new 2025-07-21 20:02:00.467349132 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Plack-Middleware-Session # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,10 +18,10 @@ %define cpan_name Plack-Middleware-Session Name: perl-Plack-Middleware-Session -Version: 0.340.0 +Version: 0.350.0 Release: 0 -# 0.34 -> normalize -> 0.340.0 -%define cpan_version 0.34 +# 0.35 -> normalize -> 0.350.0 +%define cpan_version 0.35 License: Artistic-1.0 OR GPL-1.0-or-later Summary: Middleware for session management URL: https://metacpan.org/release/%{cpan_name} @@ -31,21 +31,21 @@ BuildRequires: perl BuildRequires: perl-macros BuildRequires: perl(Cookie::Baker) >= 0.120 -BuildRequires: perl(Digest::HMAC_SHA1) >= 1.03 -BuildRequires: perl(Digest::SHA) +BuildRequires: perl(Crypt::SysRandom) +BuildRequires: perl(Digest::HMAC_SHA1) >= 1.30 BuildRequires: perl(HTTP::Cookies) BuildRequires: perl(HTTP::Request::Common) BuildRequires: perl(LWP::UserAgent) BuildRequires: perl(Module::Build) -BuildRequires: perl(Module::Build::Tiny) >= 0.034 -BuildRequires: perl(Plack) >= 0.9910 -BuildRequires: perl(Test::Fatal) >= 0.006 +BuildRequires: perl(Module::Build::Tiny) >= 0.34 +BuildRequires: perl(Plack) >= 0.991 +BuildRequires: perl(Test::Fatal) >= 0.6 BuildRequires: perl(Test::More) >= 0.88 BuildRequires: perl(Test::Requires) Requires: perl(Cookie::Baker) >= 0.120 -Requires: perl(Digest::HMAC_SHA1) >= 1.03 -Requires: perl(Digest::SHA) -Requires: perl(Plack) >= 0.9910 +Requires: perl(Crypt::SysRandom) +Requires: perl(Digest::HMAC_SHA1) >= 1.30 +Requires: perl(Plack) >= 0.991 Provides: perl(Plack::Middleware::Session) = %{version} Provides: perl(Plack::Middleware::Session::Cookie) Provides: perl(Plack::Session) = %{version} @@ -58,6 +58,7 @@ Provides: perl(Plack::Session::Store::File) = %{version} Provides: perl(Plack::Session::Store::Null) = %{version} %undefine __perllib_provides +Recommends: perl(Crypt::SysRandom::XS) %{perl_requires} %description @@ -74,7 +75,7 @@ of 'plack.session'. %prep -%autosetup -n %{cpan_name}-%{cpan_version} +%autosetup -n %{cpan_name}-%{cpan_version} -p1 find . -type f ! -path "*/t/*" ! -name "*.pl" ! -path "*/bin/*" ! -path "*/script/*" ! -path "*/scripts/*" ! -name "configure" -print0 | xargs -0 chmod 644 ++++++ Plack-Middleware-Session-0.34.tar.gz -> Plack-Middleware-Session-0.35.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/Changes new/Plack-Middleware-Session-0.35/Changes --- old/Plack-Middleware-Session-0.34/Changes 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/Changes 2025-07-08 00:50:00.000000000 +0200 @@ -1,5 +1,8 @@ Revision history for Perl extension Plack::Middleware::Session +0.35 2025-07-07 18:49:59 EDT + - Added secure session ID generation using Crypt::SysRandom (#52) + 0.34 2024-09-23 09:54:12 PDT - Add support for Partitioned cookies (CHIP) #51 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/META.json new/Plack-Middleware-Session-0.35/META.json --- old/Plack-Middleware-Session-0.34/META.json 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/META.json 2025-07-08 00:50:00.000000000 +0200 @@ -36,10 +36,13 @@ } }, "runtime" : { + "recommends" : { + "Crypt::SysRandom::XS" : "0" + }, "requires" : { "Cookie::Baker" : "0.12", + "Crypt::SysRandom" : "0", "Digest::HMAC_SHA1" : "1.03", - "Digest::SHA" : "0", "Plack" : "0.9910" } }, @@ -66,7 +69,7 @@ "web" : "https://github.com/plack/Plack-Middleware-Session" } }, - "version" : "0.34", + "version" : "0.35", "x_contributors" : [ "Alexander Kuehne <alexander.kue...@contacting.de>", "Alex Vandiver <a...@chmrr.net>", @@ -88,6 +91,7 @@ "Olaf Alders <o...@wundersolutions.com>", "rawleyfowler <rawleyfow...@proton.me>", "Rick Myers <r...@jrmyers.net>", + "Robert Rothenberg <r...@cpan.org>", "s-aska <s.aska....@gmail.com>", "Stevan Little <stevan.lit...@iinteractive.com>", "Tatsuhiko Miyagawa <miyag...@bulknews.net>", diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/META.yml new/Plack-Middleware-Session-0.35/META.yml --- old/Plack-Middleware-Session-0.34/META.yml 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/META.yml 2025-07-08 00:50:00.000000000 +0200 @@ -26,16 +26,18 @@ - share - t - xt +recommends: + Crypt::SysRandom::XS: '0' requires: Cookie::Baker: '0.12' + Crypt::SysRandom: '0' Digest::HMAC_SHA1: '1.03' - Digest::SHA: '0' Plack: '0.9910' resources: bugtracker: https://github.com/plack/Plack-Middleware-Session/issues homepage: https://github.com/plack/Plack-Middleware-Session repository: https://github.com/plack/Plack-Middleware-Session.git -version: '0.34' +version: '0.35' x_contributors: - 'Alexander Kuehne <alexander.kue...@contacting.de>' - 'Alex Vandiver <a...@chmrr.net>' @@ -57,6 +59,7 @@ - 'Olaf Alders <o...@wundersolutions.com>' - 'rawleyfowler <rawleyfow...@proton.me>' - 'Rick Myers <r...@jrmyers.net>' + - 'Robert Rothenberg <r...@cpan.org>' - 's-aska <s.aska....@gmail.com>' - 'Stevan Little <stevan.lit...@iinteractive.com>' - 'Tatsuhiko Miyagawa <miyag...@bulknews.net>' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/cpanfile new/Plack-Middleware-Session-0.35/cpanfile --- old/Plack-Middleware-Session-0.34/cpanfile 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/cpanfile 2025-07-08 00:50:00.000000000 +0200 @@ -2,8 +2,9 @@ requires 'Cookie::Baker' => '0.12'; # for session ID gen -requires 'Digest::SHA' => '0'; +requires 'Crypt::SysRandom' => '0'; requires 'Digest::HMAC_SHA1' => '1.03'; +recommends 'Crypt::SysRandom::XS' => '0'; # things the tests need on test => sub { @@ -14,4 +15,3 @@ requires 'HTTP::Cookies'; requires 'HTTP::Request::Common'; }; - diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Middleware/Session.pm new/Plack-Middleware-Session-0.35/lib/Plack/Middleware/Session.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Middleware/Session.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Middleware/Session.pm 2025-07-08 00:50:00.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; use Plack::Util; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Session/Cleanup.pm new/Plack-Middleware-Session-0.35/lib/Plack/Session/Cleanup.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Session/Cleanup.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Session/Cleanup.pm 2025-07-08 00:50:00.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; sub new { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Session/State/Cookie.pm new/Plack-Middleware-Session-0.35/lib/Plack/Session/State/Cookie.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Session/State/Cookie.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Session/State/Cookie.pm 2025-07-08 00:50:00.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; use parent 'Plack::Session::State'; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Session/State.pm new/Plack-Middleware-Session-0.35/lib/Plack/Session/State.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Session/State.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Session/State.pm 2025-07-08 00:50:00.000000000 +0200 @@ -2,10 +2,12 @@ use strict; use warnings; -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; -use Digest::SHA (); +use Crypt::SysRandom (); + +# RECOMMEND PREREQ: Crypt::SysRandom::XS use Plack::Request; use Plack::Util::Accessor qw[ @@ -19,7 +21,7 @@ $params{'session_key'} ||= 'plack_session'; $params{'sid_generator'} ||= sub { - Digest::SHA::sha1_hex(rand() . $$ . {} . time) + unpack('H*', Crypt::SysRandom::random_bytes(20)) }; $params{'sid_validator'} ||= qr/\A[0-9a-f]{40}\Z/; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store/Cache.pm new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store/Cache.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store/Cache.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store/Cache.pm 2025-07-08 00:50:00.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; use Scalar::Util qw[ blessed ]; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store/DBI.pm new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store/DBI.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store/DBI.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store/DBI.pm 2025-07-08 00:50:00.000000000 +0200 @@ -4,7 +4,7 @@ # XXX Is there a notion of auto-expiry? -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; use MIME::Base64 (); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store/File.pm new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store/File.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store/File.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store/File.pm 2025-07-08 00:50:00.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; use Storable (); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store/Null.pm new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store/Null.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store/Null.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store/Null.pm 2025-07-08 00:50:00.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; sub new { bless {} => shift } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store.pm new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Session/Store.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Session/Store.pm 2025-07-08 00:50:00.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; use Plack::Util::Accessor qw[ _stash ]; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Plack-Middleware-Session-0.34/lib/Plack/Session.pm new/Plack-Middleware-Session-0.35/lib/Plack/Session.pm --- old/Plack-Middleware-Session-0.34/lib/Plack/Session.pm 2024-09-23 18:54:14.000000000 +0200 +++ new/Plack-Middleware-Session-0.35/lib/Plack/Session.pm 2025-07-08 00:50:00.000000000 +0200 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.34'; +our $VERSION = '0.35'; our $AUTHORITY = 'cpan:STEVAN'; use Plack::Util::Accessor qw( session options );