Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package forgejo-longterm for
openSUSE:Factory checked in at 2026-08-01 18:31:24
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/forgejo-longterm (Old)
and /work/SRC/openSUSE:Factory/.forgejo-longterm.new.16738 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "forgejo-longterm"
Sat Aug 1 18:31:24 2026 rev:12 rq:1368730 version:15.0.6
Changes:
--------
--- /work/SRC/openSUSE:Factory/forgejo-longterm/forgejo-longterm.changes
2026-06-16 14:02:27.219760009 +0200
+++
/work/SRC/openSUSE:Factory/.forgejo-longterm.new.16738/forgejo-longterm.changes
2026-08-01 18:33:57.497389233 +0200
@@ -1,0 +2,32 @@
+Fri Jul 31 05:33:01 UTC 2026 - Richard Rahl <[email protected]>
+
+- Update to version 15.0.6:
+ + fix: disable hooks during diff patch
+ + fix: add CGNAT (100.64.0.0/10) to 'private' hostmatcher rule
+ + fix: prevent arbitrary file reads from org-mode rendering
+ + fix: prevent stored XSS in Actions pre-execution errors
+ + feat(install): fix docker docs link to v15.0
+ + fix(ui): be able to edit a comment if attachment is disabled
+ + chore: document SSH_ALLOW_UNEXPECTED_AUTHORIZED_KEYS
+ + chore: Update link to policy in security.txt
+ + fix: add forgejo_runtime_token to actions context
+
+-------------------------------------------------------------------
+Thu Jul 30 19:02:05 UTC 2026 - Richard Rahl <[email protected]>
+
+- Update to version 15.0.5:
+ + fix: don't terminate subprocesses when SSH connection
+ is closed (internal SSH)
+ + fix: add forgejo_default_actions_url to actions context
+- Update to version 15.0.4:
+ + fix: don't cache write permission on first pushed git reference
+ + fix: ensure migrations allow/deny host lists are applied to
+ onedev, pagure, and codebase migrators
+ + Improved compliance with the config settings
+ [migrations].ALLOWED_DOMAINS, [migrations].BLOCKED_DOMAINS,
+ and [migrations].ALLOW_LOCALNETWORKS, which control the remotes
+ that Forgejo can access for git & LFS migration and mirroring
+ operations, fixing time-of-check vs. time-of-use issue and missing
+ checks in LFS
+
+-------------------------------------------------------------------
Old:
----
forgejo-src-15.0.3.tar.gz
forgejo-src-15.0.3.tar.gz.asc
New:
----
forgejo-src-15.0.6.tar.gz
forgejo-src-15.0.6.tar.gz.asc
node_modules.sums
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ forgejo-longterm.spec ++++++
--- /var/tmp/diff_new_pack.xuyhsh/_old 2026-08-01 18:34:23.290277289 +0200
+++ /var/tmp/diff_new_pack.xuyhsh/_new 2026-08-01 18:34:23.294277427 +0200
@@ -25,7 +25,7 @@
%bcond_without apparmor
%endif
Name: forgejo-longterm
-Version: 15.0.3
+Version: 15.0.6
Release: 0
Summary: Self-hostable forge
License: GPL-3.0-or-later
@@ -34,7 +34,7 @@
Source0:
https://codeberg.org/forgejo/forgejo/releases/download/v%{version}/forgejo-src-%{version}.tar.gz
Source1:
https://codeberg.org/forgejo/forgejo/releases/download/v%{version}/forgejo-src-%{version}.tar.gz.asc
Source2:
https://keys.openpgp.org/vks/v1/by-fingerprint/EB114F5E6C0DC2BCDD183550A4B61A2DC5923710#/forgejo.keyring
-Source3: package-lock.json
+Source3:
https://codeberg.org/forgejo/forgejo/raw/tag/v%{version}/package-lock.json
Source4: node_modules.spec.inc
%include %{_sourcedir}/node_modules.spec.inc
Source5: forgejo.service
@@ -46,6 +46,7 @@
Source11: forgejo.firewalld
Source12: forgejo-abstraction.apparmor
Source13: forgejo-hooks-abstraction.apparmor
+Source98: node_modules.sums
Source99: README.SUSE
Patch0: custom-app.ini.patch
BuildRequires: golang(API) >= 1.25
++++++ _service ++++++
--- /var/tmp/diff_new_pack.xuyhsh/_old 2026-08-01 18:34:23.370280043 +0200
+++ /var/tmp/diff_new_pack.xuyhsh/_new 2026-08-01 18:34:23.374280181 +0200
@@ -1,10 +1,6 @@
<?xml version="1.0" ?>
<services>
- <service name="download_files" mode="manual" />
- <service name="extract_file" mode="manual">
- <param name="archive">forgejo-src-*.tar.gz</param>
- <param name="files">forgejo-src-*/package-lock.json</param>
- </service>
+ <service name="download_files" mode="manual"/>
<service name="node_modules" mode="manual">
<param name="cpio">node_modules.obscpio</param>
<param name="output">node_modules.spec.inc</param>
++++++ forgejo-src-15.0.3.tar.gz -> forgejo-src-15.0.6.tar.gz ++++++
/work/SRC/openSUSE:Factory/forgejo-longterm/forgejo-src-15.0.3.tar.gz
/work/SRC/openSUSE:Factory/.forgejo-longterm.new.16738/forgejo-src-15.0.6.tar.gz
differ: char 12, line 1
++++++ node_modules.obscpio ++++++
/work/SRC/openSUSE:Factory/forgejo-longterm/node_modules.obscpio
/work/SRC/openSUSE:Factory/.forgejo-longterm.new.16738/node_modules.obscpio
differ: char 2442494, line 9115
++++++ node_modules.spec.inc ++++++
++++ 2133 lines (skipped)
++++ between /work/SRC/openSUSE:Factory/forgejo-longterm/node_modules.spec.inc
++++ and
/work/SRC/openSUSE:Factory/.forgejo-longterm.new.16738/node_modules.spec.inc
++++++ node_modules.sums ++++++
++++ 1168 lines (skipped)
++++++ package-lock.json ++++++
++++ 817 lines (skipped)
++++ between /work/SRC/openSUSE:Factory/forgejo-longterm/package-lock.json
++++ and
/work/SRC/openSUSE:Factory/.forgejo-longterm.new.16738/package-lock.json
