Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gleam for openSUSE:Factory checked in at 2026-08-06 16:25:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gleam (Old) and /work/SRC/openSUSE:Factory/.gleam.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gleam" Thu Aug 6 16:25:13 2026 rev:18 rq:1369737 version:1.18.1 Changes: -------- --- /work/SRC/openSUSE:Factory/gleam/gleam.changes 2026-06-04 18:57:25.772589000 +0200 +++ /work/SRC/openSUSE:Factory/.gleam.new.16738/gleam.changes 2026-08-06 16:27:21.147229862 +0200 @@ -1,0 +2,30 @@ +Mon Aug 3 12:58:42 UTC 2026 - Jan Fooken <[email protected]> + +- Update to 1.18.1: + * CVE-2026-59247: insufficient verification of data authenticity + allows a MITM adversary to substitute forged Hex package + contents during dependency resolution (bsc#1272992) + * Set minimum required Erlang version to 26 + * All features and bug fixes are extensively highlighted with + examples in upstream's blog post at + https://gleam.run/news/a-field-day-for-gleams-language-server/ + and changelog at + https://github.com/gleam-lang/gleam/blob/v1.18.1/CHANGELOG.md . + Some of the highlights include: + - A lot of new features for the LSP + - Faster JavaScript using singletons + - Deprecation of ambiguous pipe syntax + - Path support in Git dependencies + - Up to 13% faster compilation + - Fixed various bugs in Erlang and JavaScript code + generation. + - Fixed several bugs in the float handling for the JavaScript + target. + - Fixed a bug in the generation of Erlang .app files. + - Fixed a bug where the formatter would produce invalid code. + - Fixed a bug in the TypeScript type definition generation. + - Fixed a bug where the compiler would evaluate the numerator + and denominator of a division in the wrong order. + - Fixed a bug where gleam docs would not be generated. + +------------------------------------------------------------------- Old: ---- gleam-1.17.0.tar.zst New: ---- gleam-1.18.1.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gleam.spec ++++++ --- /var/tmp/diff_new_pack.cVFnAR/_old 2026-08-06 16:27:24.307339818 +0200 +++ /var/tmp/diff_new_pack.cVFnAR/_new 2026-08-06 16:27:24.311339957 +0200 @@ -17,7 +17,7 @@ Name: gleam -Version: 1.17.0 +Version: 1.18.1 Release: 0 Summary: A friendly language for building type-safe, scalable systems! License: Apache-2.0 @@ -29,9 +29,9 @@ # https://github.com/rust-lang/rust/issues/120301 BuildRequires: cargo >= 1.91.0 # For tests -BuildRequires: erlang +BuildRequires: erlang >= 26 BuildRequires: git-core -Requires: erlang +Requires: erlang >= 26 Requires: erlang-rebar3 ExclusiveArch: %{rust_tier1_arches} @@ -53,7 +53,11 @@ %check # tests::echo requires JavaScript engines that aren't packaged on openSUSE # tests::escript_success_with_dependency requires network access -%{cargo_test} -- --skip tests::echo --skip tests::escript_success_with_dependency +# tests::all_files_have_copyright_notice has a bug where id doesn't handle gleam.lock files +%{cargo_test} -- \ + --skip tests::echo \ + --skip tests::escript_success_with_dependency \ + --skip tests::all_files_have_copyright_notice %files %license LICENCE ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.cVFnAR/_old 2026-08-06 16:27:24.347341199 +0200 +++ /var/tmp/diff_new_pack.cVFnAR/_new 2026-08-06 16:27:24.359341613 +0200 @@ -1,6 +1,6 @@ -mtime: 1780489299 -commit: 8400b2469fb71ad2c07917b45589ab475f20c00167efccd0399b06acafcd228f +mtime: 1785850868 +commit: 793fa87d203658b0133604b59235f857e89d61a1e0e0cf41632e953e0baba2b5 url: https://src.opensuse.org/erlang/gleam -revision: 8400b2469fb71ad2c07917b45589ab475f20c00167efccd0399b06acafcd228f +revision: 793fa87d203658b0133604b59235f857e89d61a1e0e0cf41632e953e0baba2b5 projectscmsync: https://src.opensuse.org/erlang/_ObsPrj.git ++++++ _service ++++++ --- /var/tmp/diff_new_pack.cVFnAR/_old 2026-08-06 16:27:24.383342442 +0200 +++ /var/tmp/diff_new_pack.cVFnAR/_new 2026-08-06 16:27:24.387342579 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/gleam-lang/gleam.git</param> <param name="versionformat">@PARENT_TAG@</param> <param name="scm">git</param> - <param name="revision">v1.17.0</param> + <param name="revision">v1.18.1</param> <param name="match-tag">*</param> <param name="versionrewrite-pattern">v(\d+\.\d+\.\d+)</param> <param name="versionrewrite-replacement">\1</param> ++++++ build.specials.obscpio ++++++ --- old/.gitignore 2026-06-03 14:21:39.000000000 +0200 +++ new/.gitignore 2026-08-04 15:41:08.000000000 +0200 @@ -1 +1,4 @@ -.osc +/*.osc +/*.obscpio +/*.obsinfo +/gleam/ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-08-04 15:41:08.000000000 +0200 @@ -0,0 +1,4 @@ +/*.osc +/*.obscpio +/*.obsinfo +/gleam/ ++++++ gleam-1.17.0.tar.zst -> gleam-1.18.1.tar.zst ++++++ ++++ 114100 lines of diff (skipped) ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/gleam/vendor.tar.zst /work/SRC/openSUSE:Factory/.gleam.new.16738/vendor.tar.zst differ: char 7, line 1
