Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package forgejo for openSUSE:Factory checked in at 2026-08-21 16:56:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/forgejo (Old) and /work/SRC/openSUSE:Factory/.forgejo.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "forgejo" Fri Aug 21 16:56:40 2026 rev:49 rq:1372714 version:16.0.3 Changes: -------- --- /work/SRC/openSUSE:Factory/forgejo/forgejo.changes 2026-07-31 16:07:01.683845746 +0200 +++ /work/SRC/openSUSE:Factory/.forgejo.new.1258/forgejo.changes 2026-08-21 16:58:16.327502237 +0200 @@ -1,0 +2,66 @@ +Thu Aug 20 11:51:19 UTC 2026 - Marcus Rueckert <[email protected]> + +- update to 16.0.3: + - Security bug fixes + - PR: - fix: public-only and repo-specific access to + /repos/{owner}/{repo}/pulls/{index}/update + - PR: - fix: expand local reusable workflows from base branch + w/ pull_request_target + - PR: - fix: disallow owner as collaboration access mode + - User Interface bug fixes + - PR (backported): fix(ui): hashbox alignment + - PR (backported): fix: adopt repositories from user settings + - Localization + - Translations updates from Codeberg Translate: #13958 + (backport of #13467) + - Bug fixes + - PR (backported): fix: do not read past the last line when + formatting zoekt search results + - PR (backported): fix(api): mark fields for issue + dependencies/blocks as required + - PR (backported): fix(conda): parse null dependencies as empty + array + - PR (backported): webhook(matrix): fix stateKey collision + swallowing messages + - PR (backported): fix: expire task logs even if there is no + log file + - PR (backported): fix(api): unblock fall-through to urlencoded + names in wiki + - PR (backported): fix: prevent Actions trigger pull_request + from drifting + - PR (backported): fix(package/pypi): response header based on + PEP691 + - PR (backported): fix: bump minimum version to use git-replay + on + - PR (backported): fix: use HTML link for pull request webhook + - PR (backported): fix: exclude deleted artifacts when + calculating storage consumption + - PR (backported): fix: error when replying to comments on + removed lines-of-code in review + - PR (backported): fix: send 401 responses when accessing + endpoints that don't support session auth + - PR (backported): fix: trigger Actions for original commits + (#13706) + - PR (backported): fix: bad quoting in hook scripts allow word + splitting, leading to hook script errors + - PR (backported): fix: prevent panic by returning error if + dbfs file does not exist + - Included for completeness but not user-facing (chores, etc.) + - PR: Update go toolchain directive to v1.26.7 (v16.0/forgejo) + - PR: Update module golang.org/x/image to v0.45.0 [SECURITY] + (v16.0/forgejo) + - PR: Update golang.org/x/mod (indirect) to v0.40.0 [SECURITY] + (v16.0/forgejo) + - PR: Update go toolchain directive to v1.26.6 [SECURITY] + (v16.0/forgejo) + - PR (backported): Fix TestCannotCreatePrivateKey in Guix + container. + - PR (backported): chore: retry diff page load on + TestPullRequestCommentPlacement when expected commit isn't + matched + - PR: Update dependency mermaid to v11.16.1 [SECURITY] + (v16.0/forgejo) + - PR: Update dependency postcss to v8.5.23 [SECURITY] + (v16.0/forgejo) + +------------------------------------------------------------------- Old: ---- forgejo-src-16.0.2.tar.gz forgejo-src-16.0.2.tar.gz.asc New: ---- forgejo-src-16.0.3.tar.gz forgejo-src-16.0.3.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ forgejo.spec ++++++ --- /var/tmp/diff_new_pack.VC2Slj/_old 2026-08-21 16:58:31.301034503 +0200 +++ /var/tmp/diff_new_pack.VC2Slj/_new 2026-08-21 16:58:31.303034574 +0200 @@ -25,7 +25,7 @@ %bcond_without apparmor %endif Name: forgejo -Version: 16.0.2 +Version: 16.0.3 Release: 0 Summary: Self-hostable forge License: GPL-3.0-or-later ++++++ forgejo-src-16.0.2.tar.gz -> forgejo-src-16.0.3.tar.gz ++++++ /work/SRC/openSUSE:Factory/forgejo/forgejo-src-16.0.2.tar.gz /work/SRC/openSUSE:Factory/.forgejo.new.1258/forgejo-src-16.0.3.tar.gz differ: char 112, line 2 ++++++ node_modules.obscpio ++++++ /work/SRC/openSUSE:Factory/forgejo/node_modules.obscpio /work/SRC/openSUSE:Factory/.forgejo.new.1258/node_modules.obscpio differ: char 236397298, line 820792 ++++++ node_modules.spec.inc ++++++ ++++ 1309 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/forgejo/node_modules.spec.inc ++++ and /work/SRC/openSUSE:Factory/.forgejo.new.1258/node_modules.spec.inc ++++++ package-lock.json ++++++ --- /var/tmp/diff_new_pack.VC2Slj/_old 2026-08-21 16:58:31.778051459 +0200 +++ /var/tmp/diff_new_pack.VC2Slj/_new 2026-08-21 16:58:31.788051815 +0200 @@ -56,11 +56,11 @@ "idiomorph": "0.3.0", "jquery": "3.7.1", "katex": "0.17.0", - "mermaid": "11.15.0", + "mermaid": "11.16.1", "mini-css-extract-plugin": "2.10.0", "minimatch": "10.2.5", "pdfobject": "2.3.0", - "postcss": "8.5.18", + "postcss": "8.5.23", "postcss-loader": "8.2.1", "postcss-nesting": "14.0.0", "pretty-ms": "9.0.0", @@ -2821,12 +2821,12 @@ } }, "node_modules/@mermaid-js/parser": { - "version": "1.1.1", - "resolved": "https://registry.npmjs.org/@mermaid-js/parser/-/parser-1.1.1.tgz";, - "integrity": "sha512-VuHdsYMK1bT6X2JbcAaWAhugTRvRBRyuZgd+c22swUeI9g/ntaxF7CY7dYarhZovofCbUNO0G7JesfmNtjYOCw==", + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/@mermaid-js/parser/-/parser-1.2.0.tgz";, + "integrity": "sha512-oYPyv8A4As1yH5Bx+04iQEQxXuIQDe0GKCNSRgao6z8AM9jixXIfP0vsppRLvGf+nKIOb9/LdpWA4YuJiVvESA==", "license": "MIT", "dependencies": { - "@chevrotain/types": "~11.1.1" + "@chevrotain/types": "~11.1.2" } }, "node_modules/@monogrid/gainmap-js": { @@ -11573,26 +11573,26 @@ } }, "node_modules/mermaid": { - "version": "11.15.0", - "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-11.15.0.tgz";, - "integrity": "sha512-pTMbcf3rWdtLiYGpmoTjHEpeY8seiy6sR+9nD7LOs8KfUbHE4lOUAprTRqRAcWSQ6MQpdX+YEsxShtGsINtPtw==", + "version": "11.16.1", + "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-11.16.1.tgz";, + "integrity": "sha512-TQsq6u22fAn3rek5VOubrhKPo1g5hwC3FXUN9hiyupTckcYiGuuKGkNQrKYwGJkXUxZdojwRG46gsSCFZMDp4g==", "license": "MIT", "dependencies": { - "@braintree/sanitize-url": "^7.1.1", + "@braintree/sanitize-url": "^7.1.2", "@iconify/utils": "^3.0.2", - "@mermaid-js/parser": "^1.1.1", + "@mermaid-js/parser": "^1.2.0", "@types/d3": "^7.4.3", "@upsetjs/venn.js": "^2.0.0", - "cytoscape": "^3.33.1", + "cytoscape": "^3.33.3", "cytoscape-cose-bilkent": "^4.1.0", "cytoscape-fcose": "^2.2.0", "d3": "^7.9.0", "d3-sankey": "^0.12.3", "dagre-d3-es": "7.0.14", - "dayjs": "^1.11.19", - "dompurify": "^3.3.1", + "dayjs": "^1.11.20", + "dompurify": "^3.3.3", "es-toolkit": "^1.45.1", - "katex": "^0.16.25", + "katex": "^0.16.45", "khroma": "^2.1.0", "marked": "^16.3.0", "roughjs": "^4.6.6", @@ -11610,6 +11610,12 @@ "node": ">= 12" } }, + "node_modules/mermaid/node_modules/dayjs": { + "version": "1.11.21", + "resolved": "https://registry.npmjs.org/dayjs/-/dayjs-1.11.21.tgz";, + "integrity": "sha512-98IT+HOahAisibz/yjKbzuOBwYcjJ7BCLPzARyHiyEBmRz4fatF+KPJszEHXsGYjUG234aH/cOjW1wwTbKUZlA==", + "license": "MIT" + }, "node_modules/mermaid/node_modules/katex": { "version": "0.16.47", "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.47.tgz";, @@ -12316,9 +12322,9 @@ } }, "node_modules/nanoid": { - "version": "3.3.12", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.12.tgz";, - "integrity": "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==", + "version": "3.3.17", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz";, + "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==", "funding": [ { "type": "github", @@ -13003,9 +13009,9 @@ } }, "node_modules/postcss": { - "version": "8.5.18", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.18.tgz";, - "integrity": "sha512-xdB1oSLHbz1vRWgCDalrCqEFTWzFlhqFC5tIHLMOSUIjhm3XXQ1qrFy8S/ESr1JYRRXqM3c1QFiMZUJdUTqyMQ==", + "version": "8.5.23", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.23.tgz";, + "integrity": "sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==", "funding": [ { "type": "opencollective", @@ -13022,7 +13028,7 @@ ], "license": "MIT", "dependencies": { - "nanoid": "^3.3.12", + "nanoid": "^3.3.16", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" },
