Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package perl-XML-LibXML for openSUSE:Factory
checked in at 2026-05-24 19:34:39
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-XML-LibXML (Old)
and /work/SRC/openSUSE:Factory/.perl-XML-LibXML.new.2084 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-XML-LibXML"
Sun May 24 19:34:39 2026 rev:64 rq:1354495 version:2.0212
Changes:
--------
--- /work/SRC/openSUSE:Factory/perl-XML-LibXML/perl-XML-LibXML.changes
2025-10-02 19:19:39.065078825 +0200
+++
/work/SRC/openSUSE:Factory/.perl-XML-LibXML.new.2084/perl-XML-LibXML.changes
2026-05-24 19:35:02.669781611 +0200
@@ -1,0 +2,163 @@
+Thu May 21 13:19:22 UTC 2026 - Tina Müller <[email protected]>
+
+- Remove perl-XML-LibXML-fix-testsuite-with-libxml2-2.14.patch
+ (fixed upstream)
+
+-------------------------------------------------------------------
+Thu May 21 10:06:16 UTC 2026 - Tina Müller <[email protected]>
+
+- updated to 2.0212
+ see /usr/share/doc/packages/perl-XML-LibXML/Changes
+
+ 2.0212 2026-05-19
+ [BUG FIXES]
+ - Ship POD files in the CPAN tarball. The per-class .pod files
+ generated from docs/libxml.dbk were gitignored, and nothing in
+ the dist chain was producing them, so recent tarballs shipped
+ without POD. The .pod files are now tracked in git (bison-style),
+ so `make dist` includes them via MANIFEST and the documentation
+ reaches CPAN consumers again. Also eliminates the bootstrap
+ problem of needing XML::LibXML installed to build XML::LibXML's
+ docs, and silences the "kit incomplete" warning from
+ `perl Makefile.PL` on a fresh checkout.
+ [MAINTENANCE]
+ - Add a `pod-drift` CI job that runs `make pod_docs` and fails on
+ any diff, catching forgotten POD regenerations after edits to
+ docs/libxml.dbk.
+ - Move xmllibxmldocs.pl from example/ to scripts/. It is a
+ maintenance tool that emits source files (POD), not a usage
+ example of XML::LibXML; scripts/ already houses similar
+ build/dev tooling.
+ - Skip t/release-kwalitee.t outside a dist tarball. The
+ Test::Kwalitee `has_meta_yml` check was failing under
+ `make test` in author mode because META.yml is only generated
+ by `make dist`. The test now skips cleanly when META.yml is
+ absent and still runs the full 18-check suite under
+ `make disttest` against the unpacked tarball.
+ 2.0211 2026-05-19
+ [SECURITY / BUG FIXES]
+ - Prevent out-of-bounds UTF-8 read in domParseChar by replacing it
+ with libxml2's xmlValidateName. Truncated multi-byte sequences
+ could cause heap reads past the NUL terminator across five DOM
+ entry points (createElement, createAttribute, setNodeName, etc.).
+ - GH #146, PR #149 CVE-2026-8177 bsc#1264715
+ - Enforce no_network even when a global externalEntityLoader is set.
+ Previously XML_PARSE_NONET was silently ignored once a global
+ callback was installed, enabling SSRF in multi-module applications
+ that combine a third-party entity loader with no_network parsers.
+ - GH #133, PR #143
+ - Prevent integer overflow in SAX CBuffer length tracking. Total
+ character data exceeding INT_MAX (~2GB) overflowed the accumulator
+ causing xmlMalloc to under-allocate and the subsequent memcpy to
+ write past the buffer.
+ - GH #135, PR #142
+ - Proper lifecycle management for externalEntityLoader: the global
+ loader can now be cleared or replaced safely, the previous handler
+ SV is no longer leaked, the returned value is a safe copy rather
+ than the internal global SV, and per-parser ext_ent_handler state
+ is separated from the global slot.
+ - PR #138
+ - Add NULL checks after xmlMalloc returns in SAX CBuffer operations,
+ converting OOM segfaults into catchable Perl exceptions.
+ - GH #136, PR #140
+ - Add NULL check after xmlCopyNamespace in _domReconcileNs, matching
+ the existing guard in _domReconcileNsAttr.
+ - GH #137, PR #139
+ - Plug 11 memory leaks across XS/C code, including setBaseURI,
+ URI/documentURI accessors, load_catalog, PSaxCharactersFlush,
+ createAttributeNS, XPathContext::_find, _newForIO, _toStringC14N,
+ lookupNamespacePrefix, _setNamespace, and the generic XPath
+ extension function dispatcher.
+ - GH #131, PR #132
+ - Handle Apple's local libxml2 patch where xmlSAX2ResolveEntity
+ throws on a NULL URI, so t/13dtd.t no longer dies on macOS.
+ - RT #2021, PR #102
+ - Skip t/50devel.t when mem_used() reports 0 bytes, which happens
+ on Apple's libxml2 (system malloc bypasses the tracking wrappers).
+ - RT #165193, PR #94
+ [IMPROVEMENTS]
+ - Resolve Windows CI test failures and compiler warnings: use the
+ file size (-s) for the byteConsumed test instead of a hardcoded
+ 488 (CRLF inflates the file to 507 bytes), use Perl UV/PTR2UV in
+ PmmRegistryName to avoid pointer truncation under Win64 LLP64,
+ and use const xmlError* for xmlCtxtGetLastError to match the
+ libxml2 2.12+ API.
+ - PR #122
+ - Silence macOS build warnings cleanly by gating the libxml2 memory
+ tracking API behind a HAVE_LIBXML_MEMORY_DEBUG feature macro. The
+ deprecated calls are no longer compiled on systems where the API
+ is gone (Apple SDK, libxml2 >= 2.14), mem_used is only exported
+ when actually defined, and t/50devel.t skips with a clear reason.
+ Also strip the bogus "-L/lib" entries Alien::Base::Wrapper injects
+ into LDFLAGS on macOS.
+ - PR #127
+ - Add a minimal hello-world HTML example (example/hello-world.pl)
+ and add createInternalSubset("html", ...) to both HTML examples
+ so they emit a proper <!DOCTYPE html> declaration.
+ - GH #66, PR #121
+ - Standardize XPath parameter naming to $xpath_expression throughout
+ the DocBook source, matching the XML::LibXML::XPathExpression
+ class name.
+ - GH #64, PR #125
+ - Update outdated and dead references in README.md: point repository
+ URLs at the canonical cpan-authors/XML-LibXML home, drop the
+ defunct ActiveState mailing list, replace the long Windows
+ nmake recipe with a Strawberry Perl note, refresh the macOS
+ section, and bring the Package History up to date.
+ - GH #129, PR #144
+ - Remove the stale "Known Issues" note about push-parser leaks.
+ The leaks it referenced were fixed by Nick Wellnhofer in 2014.
+ - Point distribution metadata at the cpan-authors GitHub repo and
+ add an explicit bugtracker entry so MetaCPAN's "Issues" link
+ goes to GitHub Issues instead of falling back to rt.cpan.org.
+ - Add NamedNodeMap.pod to MANIFEST so the generated POD ships in
+ the CPAN tarball; the L<XML::LibXML::NamedNodeMap> link in
+ Node.pod now resolves on MetaCPAN.
+ - GH #115, PR #118
+ - Update ppport.h and adopt its suggestions to reduce build issues.
+ - Fix test suite with libxml2 2.13.0 and 2.14.0.
+ - Remove tests that disable line numbers (always enabled since
+ libxml2 2.15.0).
+ - Use `our $VERSION` instead of `use vars`.
+ - Fix formatting in docs/libxml.dbk.
+ - GH #85
+ [MAINTENANCE]
+ - Modernize the CI workflow with a dynamic Perl version matrix,
+ centralized cpanfile, and updated action versions.
+ - PR #108
+ - Use cpanm instead of cpm for the Linux CI matrix so jobs on
+ Perl < 5.24 (down through 5.8) no longer fail to install
+ dependencies.
+ - GH #117, PR #119
+ - Expand CI platform coverage: FreeBSD 14.2, OpenBSD 7.6, NetBSD
+ 10.1, Strawberry Perl on Windows, Fedora 43 container,
+ AddressSanitizer, Devel::Cover + Codecov coverage upload, and a
+ downstream XML::LibXSLT compatibility job.
+ - PR #120
+ - Fix BSD CI: use the correct OpenBSD package name (`libxml`, not
+ `libxml2`) and install Perl dependencies explicitly instead of
+ relying on META.json autodiscovery.
+ - PR #124
+ - Parallelize `make` compilation across CI jobs with
+ platform-appropriate CPU detection.
+ - PR #128
+ - Temporarily disable OpenBSD 7.6 CI due to unreliable runners.
+ - PR #130
+ - Re-enable OpenBSD CI on version 7.8 once the runner situation
+ stabilized.
+ - PR #144
+ - Add a CLAUDE.md describing project layout, build/test commands,
+ libxml2 version landscape, and coding conventions.
+ - PR #116
+ - Add contributing guidelines covering CI, scope, MANIFEST, and
+ version/release handling.
+ - PR #126
+ - Add AI_POLICY.md documenting how AI tools are used (and not used)
+ in this project.
+ - Add MANIFEST.SKIP so local files (.hgignore, .tidyallrc, CLAUDE.md,
+ etc.) are kept out of `make manifest` output.
+ - Drop unused dev helper (`tester.sh`) and the stale TODO file.
+ - Rename README to README.md and remove the obsolete Travis CI
+ references.
+
+-------------------------------------------------------------------
Old:
----
XML-LibXML-2.0210.tar.gz
perl-XML-LibXML-fix-testsuite-with-libxml2-2.14.patch
New:
----
XML-LibXML-2.0212.tar.gz
----------(Old B)----------
Old:
- Remove perl-XML-LibXML-fix-testsuite-with-libxml2-2.14.patch
(fixed upstream)
----------(Old E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ perl-XML-LibXML.spec ++++++
--- /var/tmp/diff_new_pack.5aEcuy/_old 2026-05-24 19:35:03.477814672 +0200
+++ /var/tmp/diff_new_pack.5aEcuy/_new 2026-05-24 19:35:03.481814835 +0200
@@ -1,7 +1,7 @@
#
# spec file for package perl-XML-LibXML
#
-# Copyright (c) 2025 SUSE LLC and contributors
+# Copyright (c) 2026 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,69 +18,30 @@
%define cpan_name XML-LibXML
Name: perl-XML-LibXML
-Version: 2.0210
+Version: 2.0212
Release: 0
License: Artistic-1.0 OR GPL-1.0-or-later
Summary: Interface to Gnome libxml2 xml parsing and DOM library
URL: https://metacpan.org/release/%{cpan_name}
-Source0:
https://cpan.metacpan.org/authors/id/S/SH/SHLOMIF/%{cpan_name}-%{version}.tar.gz
+Source0:
https://cpan.metacpan.org/authors/id/T/TO/TODDR/%{cpan_name}-%{version}.tar.gz
Source1: cpanspec.yml
Source100: README.md
-# https://github.com/shlomif/perl-XML-LibXML/pull/87
-Patch1: perl-XML-LibXML-fix-testsuite-with-libxml2-2.14.patch
BuildRequires: perl
BuildRequires: perl-macros
BuildRequires: perl(Alien::Base::Wrapper)
-BuildRequires: perl(Alien::Libxml2) >= 0.14
+BuildRequires: perl(Alien::Libxml2) >= 0.140
BuildRequires: perl(XML::NamespaceSupport) >= 1.07
-BuildRequires: perl(XML::SAX) >= 0.11
+BuildRequires: perl(XML::SAX) >= 0.110
BuildRequires: perl(XML::SAX::Base)
BuildRequires: perl(XML::SAX::DocumentLocator)
BuildRequires: perl(XML::SAX::Exception)
BuildRequires: perl(parent)
Requires: perl(XML::NamespaceSupport) >= 1.07
-Requires: perl(XML::SAX) >= 0.11
+Requires: perl(XML::SAX) >= 0.110
Requires: perl(XML::SAX::Base)
Requires: perl(XML::SAX::DocumentLocator)
Requires: perl(XML::SAX::Exception)
Requires: perl(parent)
-Provides: perl(XML::LibXML) = 2.0209
-Provides: perl(XML::LibXML::Attr)
-Provides: perl(XML::LibXML::AttributeHash) = 2.0209
-Provides: perl(XML::LibXML::Boolean) = 2.0209
-Provides: perl(XML::LibXML::CDATASection)
-Provides: perl(XML::LibXML::Comment)
-Provides: perl(XML::LibXML::Common) = 2.0209
-Provides: perl(XML::LibXML::Devel) = 2.0209
-Provides: perl(XML::LibXML::Document)
-Provides: perl(XML::LibXML::DocumentFragment)
-Provides: perl(XML::LibXML::Dtd)
-Provides: perl(XML::LibXML::Element)
-Provides: perl(XML::LibXML::ErrNo) = 2.0209
-Provides: perl(XML::LibXML::Error) = 2.0209
-Provides: perl(XML::LibXML::InputCallback)
-Provides: perl(XML::LibXML::Literal) = 2.0209
-Provides: perl(XML::LibXML::NamedNodeMap)
-Provides: perl(XML::LibXML::Namespace)
-Provides: perl(XML::LibXML::Node)
-Provides: perl(XML::LibXML::NodeList) = 2.0209
-Provides: perl(XML::LibXML::Number) = 2.0209
-Provides: perl(XML::LibXML::PI)
-Provides: perl(XML::LibXML::Pattern)
-Provides: perl(XML::LibXML::Reader) = 2.0209
-Provides: perl(XML::LibXML::RegExp)
-Provides: perl(XML::LibXML::RelaxNG)
-Provides: perl(XML::LibXML::SAX) = 2.0209
-Provides: perl(XML::LibXML::SAX::AttributeNode)
-Provides: perl(XML::LibXML::SAX::Builder) = 2.0209
-Provides: perl(XML::LibXML::SAX::Generator) = 2.0209
-Provides: perl(XML::LibXML::SAX::Parser) = 2.0209
-Provides: perl(XML::LibXML::Schema)
-Provides: perl(XML::LibXML::Text)
-Provides: perl(XML::LibXML::XPathContext) = 2.0209
-Provides: perl(XML::LibXML::XPathExpression)
-Provides: perl(XML::LibXML::_SAXParser)
-%define __perllib_provides /bin/true
%{perl_requires}
# MANUAL BEGIN
BuildRequires: pkgconfig(libxml-2.0) >= 2.9.0
@@ -105,15 +66,14 @@
%make_build
%check
-%make_build test
+make test
%install
%perl_make_install
%perl_process_packlist
%perl_gen_filelist
-touch example # to have same mtime with+without tests
%files -f %{name}.files
-%doc Changes docs example HACKING.txt README TODO
+%doc AI_POLICY.md Changes docs example HACKING.txt README.md
%license LICENSE
++++++ XML-LibXML-2.0210.tar.gz -> XML-LibXML-2.0212.tar.gz ++++++
++++ 24921 lines of diff (skipped)
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.5aEcuy/_old 2026-05-24 19:35:03.885831367 +0200
+++ /var/tmp/diff_new_pack.5aEcuy/_new 2026-05-24 19:35:03.893831694 +0200
@@ -1,6 +1,6 @@
-mtime: 1758811941
-commit: 6c0d87ac6add8821a535d7bfeec846b0bcbacb01ad2842454a44c7ddc17e5712
-url: https://src.opensuse.org/perl/perl-XML-LibXML.git
-revision: 6c0d87ac6add8821a535d7bfeec846b0bcbacb01ad2842454a44c7ddc17e5712
+mtime: 1779378655
+commit: ab3bce54a52301e19c9a290738defa99ac442ee91561140c70fa8a3984e778fd
+url: https://src.opensuse.org/perl/perl-XML-LibXML
+revision: ab3bce54a52301e19c9a290738defa99ac442ee91561140c70fa8a3984e778fd
projectscmsync: https://src.opensuse.org/perl/_ObsPrj
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-05-21 17:50:55.000000000 +0200
@@ -0,0 +1 @@
+.osc
++++++ cpanspec.yml ++++++
--- /var/tmp/diff_new_pack.5aEcuy/_old 2026-05-24 19:35:04.153842333 +0200
+++ /var/tmp/diff_new_pack.5aEcuy/_new 2026-05-24 19:35:04.169842987 +0200
@@ -4,8 +4,7 @@
#sources:
# - source1
# - source2
-patches:
- perl-XML-LibXML-fix-testsuite-with-libxml2-2.14.patch: -p1
PATCH-FIX-UPSTREAM https://github.com/shlomif/perl-XML-LibXML/pull/87
+#patches:
# bar.patch:
preamble: |-
BuildRequires: pkgconfig(libxml-2.0) >= 2.9.0
