Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package heroic-games-launcher for
openSUSE:Factory checked in at 2026-02-23 16:12:16
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/heroic-games-launcher (Old)
and /work/SRC/openSUSE:Factory/.heroic-games-launcher.new.1977 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "heroic-games-launcher"
Mon Feb 23 16:12:16 2026 rev:4 rq:1334332 version:2.20.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/heroic-games-launcher/heroic-games-launcher.changes
2026-02-01 22:06:31.487391365 +0100
+++
/work/SRC/openSUSE:Factory/.heroic-games-launcher.new.1977/heroic-games-launcher.changes
2026-02-23 16:13:31.279741933 +0100
@@ -1,0 +2,44 @@
+Sun Feb 22 01:25:38 UTC 2026 - Jonatas Gonçalves <[email protected]>
+
+- Update to 2.20.0
+ * [FIX] Dropdown vertical scroll by @arielj in #5222
+ * [UI] Set html's "lang" attribute to the current language by @arielj in
#5252
+ * [FIX] Only use fake epic exe when turned on with env variable by @arielj
in #5240
+ (you can remove the USE_FAKE_EPIC_EXE=0 env variable now)
+ * [UI] Fix macOS small icon by @arielj in #5242
+ * Sync Flathub manifest changes with repo template by @CommandMC in #5254
+ * [UI] Fix text wrapping for CJK fonts by @SheffeyG in #5291
+ * [Zoom] Fix conditionals to show zoom by @arielj in #5267
+ * [UI] Fix dropdown style and settings back in RTL layout by @arielj in #5277
+ * [UI/UX] Move FPS limit option to new "Legacy" Game Settings Tab on Linux
by
+ @flavioislima in #5292
+ * [FIX] Launch Epic Games while offline for games that supports it by
@flavioislima in #5302
+ * [UX] Log if a game does not support offlineMode but offlineMode is on by
@arielj in #5318
+ * [UX] Prevent multiple Play clicks by @arielj in #5320
+ * [FIX] Launch options fixes by @flavioislima in #5230
+ * [UX] Better GOG errors handling by @arielj in #5324
+ * [Fix] Don't fail to check for updates if there isn't a beta release by
@CommandMC in #5327
+ * [UI] Hide the Saves-Sync Quick on the game page menu behind a setting by
@flavioislima in #5323
+ * [UX] Fix incorrect loading state in Wine Manager when library was
refreshed by @arielj in #5293
+ * [DOC] Mention projects we use inside Heroic for more visibility by @arielj
in #5274
+ * [FIX] Check alternative folders when installing DXVK by @arielj in #5342
+ * Bump Legendary by @CommandMC in #5341
+ * [UI] Show update message to game cards by @flavioislima in #5325
+ * [i18n] Updated Translations by @weblate in #5244
+ * [UX] Tell users to manually upload log if upload button failed by @arielj
+ in https://github.com/Heroic-Games-Launcher/HeroicGamesLauncher/
+ * [FIX] Fix How Long To Beat implementation by @flavioislima in #5334
+ End of update.
+ * Security: Fix CVE-2026-26278
+ Force fast-xml-parser to 5.3.6 via pnpm override to prevent
+ entity expansion DoS (GHSA-jmr7-xgp7-cmfj).
+ * Change sources to use obscpio
+ * Remove pnpm list and why, this is only for test
+ * Otimize get-sources.sh file
+
+-------------------------------------------------------------------
+Fri Feb 6 22:44:05 UTC 2026 - Jonatas Gonçalves <[email protected]>
+
+- Enforce brace-expansion >= 5.0.1 via pnpm overrides to address
CVE-2026-25547
+
+-------------------------------------------------------------------
Old:
----
heroic-games-launcher-2.19.1.tar.xz
pnpm-offline-store.tar.xz
New:
----
heroic-games-launcher-2.20.0.obscpio
heroic-games-launcher.obsinfo
pnpm-offline-store.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ heroic-games-launcher.spec ++++++
--- /var/tmp/diff_new_pack.icLPGB/_old 2026-02-23 16:13:56.240769635 +0100
+++ /var/tmp/diff_new_pack.icLPGB/_new 2026-02-23 16:13:56.244769799 +0100
@@ -27,13 +27,13 @@
%endif
Name: heroic-games-launcher
-Version: 2.19.1
+Version: 2.20.0
Release: 0
Summary: Native Games launcher for GOG, Epic and Amazon
License: GPL-3.0-only
URL: https://heroicgameslauncher.com/
-Source: %{name}-%{version}.tar.xz
-Source1: pnpm-offline-store.tar.xz
+Source: %{name}-%{version}.tar.gz
+Source1: pnpm-offline-store.tar.gz
Source2: heroic-games-launcher.rpmlintrc
Source3: get-sources.sh
Source4: release_tags
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.icLPGB/_old 2026-02-23 16:13:56.300772106 +0100
+++ /var/tmp/diff_new_pack.icLPGB/_new 2026-02-23 16:13:56.304772270 +0100
@@ -1,5 +1,5 @@
-mtime: 1769948310
-commit: 6bca9684fd2aec65d1c30d7b2233b609a75a284e365bd34b5b86efa4488482d2
+mtime: 1771726237
+commit: f7e1fa11c8ffc6e218aea06c61d692e38fb62fc9215da250e94534d141feddbe
url: https://src.opensuse.org/MaxxedSUSE/heroic-games-launcher
revision: master
++++++ _service ++++++
--- /var/tmp/diff_new_pack.icLPGB/_old 2026-02-23 16:13:56.332773423 +0100
+++ /var/tmp/diff_new_pack.icLPGB/_new 2026-02-23 16:13:56.336773587 +0100
@@ -1,19 +1,19 @@
<services>
- <service name="tar_scm" mode="manual">
+ <service name="obs_scm" mode="manual">
<param
name="url">https://github.com/Heroic-Games-Launcher/HeroicGamesLauncher.git</param>
<param name="scm">git</param>
<param name="submodules">enable</param>
<param name="filename">heroic-games-launcher</param>
- <param name="revision">v2.19.1</param>
+ <param name="revision">v2.20.0</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="versionrewrite-pattern">v([\.\d]+)</param>
<param name="versionrewrite-replacement">\1</param>
</service>
-
- <service name="set_version" mode="manual"/>
- <service name="recompress" mode="manual">
+ <service name="tar" mode="buildtime" />
+ <service name="recompress" mode="buildtime">
<param name="file">*.tar</param>
- <param name="compression">xz</param>
+ <param name="compression">gz</param>
</service>
+ <service name="set_version" mode="manual" />
</services>
++++++ get-sources.sh ++++++
--- /var/tmp/diff_new_pack.icLPGB/_old 2026-02-23 16:13:56.368774905 +0100
+++ /var/tmp/diff_new_pack.icLPGB/_new 2026-02-23 16:13:56.372775070 +0100
@@ -14,8 +14,9 @@
echo "patching service file and downloading sources"
echo "++++++++++++++++++++++++++++++++++++++++++++++"
-sed -i -e 's|<param name="revision">refs/tags/v.*|<param
name="revision">refs/tags/v'${VERSION}'</param>|g' _service
-osc service runall
+sed -i -E 's|(<param name="revision">).*?(</param>)|\1v'"${VERSION}"'\2|'
_service
+osc service mr obs_scm
+osc service mr set_version
if [ -f "pnpm-offline-store.tar.gz" ]; then rm pnpm-offline-store.tar.gz; fi
@@ -48,7 +49,7 @@
"electron-builder": .devDependencies["electron-builder"]
}
- | .packageManager = "pnpm@>=10.17.1"
+ | .packageManager = "[email protected]"
| .scripts.build = "electron-vite build"
| .scripts["dist:linux"] =
@@ -102,7 +103,15 @@
"react-router-dom": "^7.12.0"
}
)
-' package.json > package.json.new && mv package.json.new package.json
+
+ # === CVE-2026-26278: fast-xml-parser DoS fix ===
+ | .pnpm.overrides = (
+ (.pnpm.overrides // {})
+ + {
+ "fast-xml-parser": "5.3.6"
+ }
+ )
+' package.json > temp.json && mv temp.json package.json
echo "++++++++++++++++++++++++++++++++++++++++++++++"
echo "Cleanup Step"
@@ -118,10 +127,9 @@
pnpm config set store-dir .pnpm-store
pnpm install --lockfile-only --force --ignore-scripts
-##npm install --package-lock-only --legacy-peer-deps
--strict-peer-dependencies --no-frozen-lockfile --ignore-scripts
pnpm install --ignore-scripts
-tar cJf ../pnpm-offline-store.tar.xz .pnpm-store node_modules package.json
pnpm-lock.yaml
+tar cJf ../pnpm-offline-store.tar.gz .pnpm-store node_modules package.json
pnpm-lock.yaml
echo "++++++++++++++++++++++++++++++++++++++++++++++"
echo "Done! Have fun building and testing"
++++++ heroic-games-launcher.obsinfo ++++++
name: heroic-games-launcher
version: 2.20.0
mtime: 1771625374
commit: cca9aafd39ca14e1f6c0d91dcd38c83c87203e9a
