Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package forgejo-longterm for
openSUSE:Factory checked in at 2026-06-11 17:29:45
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/forgejo-longterm (Old)
and /work/SRC/openSUSE:Factory/.forgejo-longterm.new.1981 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "forgejo-longterm"
Thu Jun 11 17:29:45 2026 rev:10 rq:1358692 version:11.0.15
Changes:
--------
--- /work/SRC/openSUSE:Factory/forgejo-longterm/forgejo-longterm.changes
2026-06-08 14:23:19.852107906 +0200
+++
/work/SRC/openSUSE:Factory/.forgejo-longterm.new.1981/forgejo-longterm.changes
2026-06-11 17:30:45.958897927 +0200
@@ -1,0 +2,12 @@
+Thu Jun 11 10:33:20 UTC 2026 - Richard Rahl <[email protected]>
+
+- Update to version 11.0.15:
+ + fix: LFS locks must belong to the intended repo, port from Gitea
+ + fix: prevent unauthorized access to draft releases via API
+ + fix: prevent writes to OpenID visibility which may affect other users
+ + fix: prevent viewing private PRs that are linked to public issues
+ on public projects
+- apparmor profile: allow reading of credential files. This fixes
+ migration of private repositories
+
+-------------------------------------------------------------------
Old:
----
forgejo-src-11.0.14.tar.gz
forgejo-src-11.0.14.tar.gz.asc
node_modules.sums
New:
----
forgejo-src-11.0.15.tar.gz
forgejo-src-11.0.15.tar.gz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ forgejo-longterm.spec ++++++
--- /var/tmp/diff_new_pack.g0ymd8/_old 2026-06-11 17:31:11.887985458 +0200
+++ /var/tmp/diff_new_pack.g0ymd8/_new 2026-06-11 17:31:11.887985458 +0200
@@ -25,7 +25,7 @@
%bcond_without apparmor
%endif
Name: forgejo-longterm
-Version: 11.0.14
+Version: 11.0.15
Release: 0
Summary: Self-hostable forge
License: GPL-3.0-or-later
@@ -46,7 +46,6 @@
Source11: forgejo.firewalld
Source12: forgejo-abstraction.apparmor
Source13: forgejo-hooks-abstraction.apparmor
-Source14: node_modules.sums
Source99: README.SUSE
Patch0: custom-app.ini.patch
BuildRequires: golang(API) >= 1.25
++++++ forgejo-src-11.0.14.tar.gz -> forgejo-src-11.0.15.tar.gz ++++++
/work/SRC/openSUSE:Factory/forgejo-longterm/forgejo-src-11.0.14.tar.gz
/work/SRC/openSUSE:Factory/.forgejo-longterm.new.1981/forgejo-src-11.0.15.tar.gz
differ: char 28, line 1
++++++ forgejo.apparmor ++++++
--- /var/tmp/diff_new_pack.g0ymd8/_old 2026-06-11 17:31:12.047992169 +0200
+++ /var/tmp/diff_new_pack.g0ymd8/_new 2026-06-11 17:31:12.051992337 +0200
@@ -71,6 +71,8 @@
/usr/bin/bash Px -> forgejo//git-bash,
+ owner /tmp/forgejo-clone-credentials-* rwlk,
+
owner @{APP_DATADIR}/data/home/.gitconfig rwlk,
owner @{APP_DATADIR}/data/home/.gitconfig.lock rwlk,
++++++ node_modules.obscpio ++++++
/work/SRC/openSUSE:Factory/forgejo-longterm/node_modules.obscpio
/work/SRC/openSUSE:Factory/.forgejo-longterm.new.1981/node_modules.obscpio
differ: char 112200743, line 383778
++++++ node_modules.spec.inc ++++++
--- /var/tmp/diff_new_pack.g0ymd8/_old 2026-06-11 17:31:12.440008612 +0200
+++ /var/tmp/diff_new_pack.g0ymd8/_new 2026-06-11 17:31:12.444008779 +0200
@@ -114,7 +114,7 @@
Source10113:
https://registry.npmjs.org/@oxc-resolver/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-5.0.1.tgz#/@oxc-resolver-binding-win32-arm64-msvc-5.0.1.tgz
Source10114:
https://registry.npmjs.org/@oxc-resolver/binding-win32-x64-msvc/-/binding-win32-x64-msvc-5.0.1.tgz#/@oxc-resolver-binding-win32-x64-msvc-5.0.1.tgz
Source10115:
https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz#/@pkgjs-parseargs-0.11.0.tgz
-Source10116:
https://registry.npmjs.org/@playwright/test/-/test-1.56.1.tgz#/@playwright-test-1.56.1.tgz
+Source10116:
https://registry.npmjs.org/@playwright/test/-/test-1.60.0.tgz#/@playwright-test-1.60.0.tgz
Source10117:
https://registry.npmjs.org/@popperjs/core/-/core-2.11.8.tgz#/@popperjs-core-2.11.8.tgz
Source10118:
https://registry.npmjs.org/@primer/octicons/-/octicons-19.14.0.tgz#/@primer-octicons-19.14.0.tgz
Source10119:
https://registry.npmjs.org/@rollup/plugin-commonjs/-/plugin-commonjs-22.0.2.tgz#/@rollup-plugin-commonjs-22.0.2.tgz
@@ -850,8 +850,8 @@
Source10849:
https://registry.npmjs.org/pify/-/pify-2.3.0.tgz#/pify-2.3.0.tgz
Source10850:
https://registry.npmjs.org/pirates/-/pirates-4.0.6.tgz#/pirates-4.0.6.tgz
Source10851:
https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz#/pkg-dir-4.2.0.tgz
-Source10852:
https://registry.npmjs.org/playwright/-/playwright-1.56.1.tgz#/playwright-1.56.1.tgz
-Source10853:
https://registry.npmjs.org/playwright-core/-/playwright-core-1.56.1.tgz#/playwright-core-1.56.1.tgz
+Source10852:
https://registry.npmjs.org/playwright/-/playwright-1.60.0.tgz#/playwright-1.60.0.tgz
+Source10853:
https://registry.npmjs.org/playwright-core/-/playwright-core-1.60.0.tgz#/playwright-core-1.60.0.tgz
Source10854:
https://registry.npmjs.org/pluralize/-/pluralize-8.0.0.tgz#/pluralize-8.0.0.tgz
Source10855:
https://registry.npmjs.org/points-on-curve/-/points-on-curve-0.2.0.tgz#/points-on-curve-0.2.0.tgz
Source10856:
https://registry.npmjs.org/points-on-path/-/points-on-path-0.2.1.tgz#/points-on-path-0.2.1.tgz
++++++ package-lock.json ++++++
--- /var/tmp/diff_new_pack.g0ymd8/_old 2026-06-11 17:31:12.496010960 +0200
+++ /var/tmp/diff_new_pack.g0ymd8/_new 2026-06-11 17:31:12.504011296 +0200
@@ -63,7 +63,7 @@
"devDependencies": {
"@axe-core/playwright": "4.10.1",
"@eslint-community/eslint-plugin-eslint-comments": "4.4.1",
- "@playwright/test": "1.56.1",
+ "@playwright/test": "1.60.0",
"@stoplight/spectral-cli": "6.14.3",
"@stylistic/eslint-plugin-js": "4.2.0",
"@stylistic/stylelint-plugin": "3.1.2",
@@ -1827,13 +1827,13 @@
}
},
"node_modules/@playwright/test": {
- "version": "1.56.1",
- "resolved":
"https://registry.npmjs.org/@playwright/test/-/test-1.56.1.tgz";,
- "integrity":
"sha512-vSMYtL/zOcFpvJCW71Q/OEGQb7KYBPAdKh35WNSkaZA75JlAO8ED8UN6GUNTm3drWomcbcqRPFqQbLae8yBTdg==",
+ "version": "1.60.0",
+ "resolved":
"https://registry.npmjs.org/@playwright/test/-/test-1.60.0.tgz";,
+ "integrity":
"sha512-O71yZIbAh/PxDMNGns37GHBIfrVkEVyn+AXyIa5dOTfb4/xNvRWV+Vv/NMbNCtODB/pO7vLlF2OTmMVLhmr7Ag==",
"dev": true,
"license": "Apache-2.0",
"dependencies": {
- "playwright": "1.56.1"
+ "playwright": "1.60.0"
},
"bin": {
"playwright": "cli.js"
@@ -11212,13 +11212,13 @@
}
},
"node_modules/playwright": {
- "version": "1.56.1",
- "resolved":
"https://registry.npmjs.org/playwright/-/playwright-1.56.1.tgz";,
- "integrity":
"sha512-aFi5B0WovBHTEvpM3DzXTUaeN6eN0qWnTkKx4NQaH4Wvcmc153PdaY2UBdSYKaGYw+UyWXSVyxDUg5DoPEttjw==",
+ "version": "1.60.0",
+ "resolved":
"https://registry.npmjs.org/playwright/-/playwright-1.60.0.tgz";,
+ "integrity":
"sha512-hheHdokM8cdqCb0lcE3s+zT4t4W+vvjpGxsZlDnikarzx8tSzMebh3UiFtgqwFwnTnjYQcsyMF8ei2mCO/tpeA==",
"dev": true,
"license": "Apache-2.0",
"dependencies": {
- "playwright-core": "1.56.1"
+ "playwright-core": "1.60.0"
},
"bin": {
"playwright": "cli.js"
@@ -11231,9 +11231,9 @@
}
},
"node_modules/playwright-core": {
- "version": "1.56.1",
- "resolved":
"https://registry.npmjs.org/playwright-core/-/playwright-core-1.56.1.tgz";,
- "integrity":
"sha512-hutraynyn31F+Bifme+Ps9Vq59hKuUCz7H1kDOcBs+2oGguKkWTU50bBWrtz34OUWmIwpBTWDxaRPXrIXkgvmQ==",
+ "version": "1.60.0",
+ "resolved":
"https://registry.npmjs.org/playwright-core/-/playwright-core-1.60.0.tgz";,
+ "integrity":
"sha512-9bW6zvX/m0lEbgTKJ6YppOKx8H3VOPBMOCFh2irXFOT4BbHgrx5hPjwJYLT40Lu+4qtD36qKc/Hn56StUW57IA==",
"dev": true,
"license": "Apache-2.0",
"bin": {
