Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package AppStream for openSUSE:Factory checked in at 2026-09-18 22:03:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/AppStream (Old) and /work/SRC/openSUSE:Factory/.AppStream.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "AppStream" Fri Sep 18 22:03:28 2026 rev:63 rq:1375046 version:1.2.0 Changes: -------- --- /work/SRC/openSUSE:Factory/AppStream/AppStream.changes 2026-07-28 17:49:31.774890990 +0200 +++ /work/SRC/openSUSE:Factory/.AppStream.new.383539/AppStream.changes 2026-09-18 22:03:59.820202514 +0200 @@ -1,0 +2,130 @@ +Sun Aug 30 07:41:50 UTC 2026 - Christophe Marin <[email protected]> + +- Update to 1.2.0 + * This release marks the libappstream-compose API as stable. + * This release introduces a new, lightly sandboxed (on Linux) + media worker for appstream-compose and switches to VIPS for + image processing. + * This release introduces <heading>My headline!</heading> markup + for AppStream descriptions. Older versions will remove this + markup, so only use it if your target clients have a recent + version of AppStream. + Features: + * compose: Create AscMedia for isolated out-of-process media + handling using asc-mediaworker + * compose: Process images, fonts & videos via the media worker + * Generalize path segment validation, use it in the compose + media worker + * compose: Switch from using GdkPixbuf to VIPS for image + processing + * compose: Harmonize supported formats, don't read XPM/TIFF/BMP + * compose: Make JPEG-XL the default image output format + * compose: Implement basic support for FreeBSD + * compose: Rely on VIPS for SVG support, drop our dedicated + librsvg path + * compose: Make image-targets and image batch-processing + public API + * compose: Expose the source-icon convention and a hint-tag + lookup as public API + * compose: Drop unstable-API marker + * compose: Don't create image thumbnails that aren't + substantially smaller + * compose: Only transfer pre-opened fds and no more directory + fd to the worker + * compose: Implement a basic sandbox for the mediaworker + using Landlock + * compose: Use RESTRICT_SELF_TSYNC and block UDP access on + newer Landlock + * compose: Mix the output image format type into the GCID + * compose: Make AscUnit a proper abstract class + * compose: Improve API documentation + * Always sanitize whitespaces in keywords and drop empty ones + * Assume a language element without percentage means full + translation + * news-to-metainfo: Support a details URL in the YAML variant + * news-convert: Support inline Markdown in news text + * news-convert: Support headers in XML<->YAML/NEWS/Markdown + conversions + * ascli: news-convert: Support standalone release XML as + source/target + * Whitespace-sanitize all description markup we read + * Output descriptions as literals in YAML and wrap markup + ourselves + Specification: + * docs: Document the appstreamcli news file conversion helper + * Implement support for headings in description markup + Bugfixes: + * meson: Set _POSIX_C_SOURCE on Linux only + * compose: Fix a race where units were deleting each other's + icon directories + * compose: Fix documentation and introspection annotation + issues + * compose: Drop dead public API, make some API private + * compose: Sharpen with libvips instead of a hand-rolled + unsharp mask + * compose: Only read AVIF from HEIF containers, never HEIC + * compose: Fix double-free crash when processing fonts + * compose: Guard against bad locale in path names + * compose: Ensure component-IDs are safe to use in filesystem + paths + * compose: Escape values for HTML reports, and create proper + plain-text if needed + * compose: Make missing-launchable-desktop-file an error + * Fix a few translator hints that weren't picked up properly + * Don't accept empty strings as URLs + * its: Fix description inline markup translation for release + data + * validator: Fix improper use of variadic arguments + * validator: Properly validate component-IDs with random + UTF-8 characters + * validator: Abort ID validation after the first invalid + character + * pool: Resolve crash if data locations are changed on a + loaded pool + * Fix wrong string comparison when detecting arm64 machines + * ascli: Resolve crash when selection is cancelled in + install/remove + * Fix another crash when converting invalid description markup + to Markdown + * apt: Treat icon tarballs as hostile, instead of trusted + * apt: Fix empty-directory check nuking the icon cache on + every refresh + * utils: Ensure we never ever follow symlinks when recursively + deleting caches + * xml: Only emit description enumerations for locales that are + in them + * cache: Never infinite-recurse when resolving addons for + a component + * yaml: Don't leave old header data around when parsing + multiple YAML catalogs + Miscellaneous: + * compose: Stop leaking private symbols out of the shared library + * compose: Make hint tag/severity/explanation setters private API + * compose: Seal the global settings explicitly on start + * ascli: Refactor subcommand dispatch + * meson: Disable analyzer-infinite-loop more broadly for + static analysis + +------------------------------------------------------------------- +Thu Aug 13 06:44:25 UTC 2026 - Christophe Marin <[email protected]> + +- Update to 1.1.6 + Features: + * validator: Ensure description markup has no invalid attributes set + * validator: Validate bundle/pkgname values for allowed characters + Bugfixes: + * xml: Sanitize description markup when reading and writing it + * yaml/json: Ensure description markup is sanitized when loading/saving it + * meson: Work around wrong library linkage when linking Qt tests + * Allow sealing of component-IDs to safely use them in hash tables and indices + * Ensure we never emit or read an invalid data origin + * Prevent crash when comparing bad version strings that have an epoch after rev + * Fix potential out-of-bounds read in OARS mapping table + * apt: yaml: Harden against potential corrupted YAML / YAML-headers + * compose: Guess a filename even from invalid URLs instead of crashing + * compose: Confine directory unit data reads to the unit's root directory + * compose: Refactor directory unit to use openat2, if possible + * news-convert: Don't crash in case we receive bad freeform YAML news input + * ascli: Guard against bad bundle values when calling "install" + +------------------------------------------------------------------- Old: ---- AppStream-1.1.5.tar.xz AppStream-1.1.5.tar.xz.asc New: ---- AppStream-1.2.0.tar.xz AppStream-1.2.0.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ AppStream.spec ++++++ --- /var/tmp/diff_new_pack.g6Nlnc/_old 2026-09-18 22:04:00.475229966 +0200 +++ /var/tmp/diff_new_pack.g6Nlnc/_new 2026-09-18 22:04:00.478230092 +0200 @@ -18,8 +18,6 @@ %define min_qt_version 6.4.2 -%bcond_without vala -# %if 0%{?suse_version} == 1600 %bcond_without gcc15 %endif @@ -31,9 +29,9 @@ %define rname AppStream %define libappstream_sover 5 %define libAppStreamQt_sover 3 -%define libappstream_compose_sover 0 +%define libappstream_compose_sover 1 Name: AppStream -Version: 1.1.5 +Version: 1.2.0 Release: 0 Summary: Tools and libraries to work with AppStream metadata License: LGPL-2.1-or-later @@ -41,46 +39,40 @@ Source0: https://www.freedesktop.org/software/appstream/releases/%{rname}-%{version}.tar.xz Source1: https://www.freedesktop.org/software/appstream/releases/%{rname}-%{version}.tar.xz.asc Source2: AppStream.keyring -BuildRequires: cairo-devel BuildRequires: docbook5-xsl-stylesheets %if %{with gcc15} BuildRequires: gcc15 BuildRequires: gcc15-PIE BuildRequires: gcc15-c++ %endif -%if 0%{?suse_version} > 1600 -BuildRequires: bubblewrap -BuildRequires: glycin-loaders -%else -BuildRequires: gdk-pixbuf-loader-rsvg -%endif BuildRequires: gettext-devel BuildRequires: gperf BuildRequires: itstool -BuildRequires: meson >= 0.59 +BuildRequires: meson BuildRequires: pkgconfig -%if %{with vala} BuildRequires: vala -%endif BuildRequires: xsltproc BuildRequires: pkgconfig(bash-completion) >= 2.0 -BuildRequires: pkgconfig(gdk-pixbuf-2.0) +BuildRequires: pkgconfig(cairo) >= 1.12 +BuildRequires: pkgconfig(fontconfig) +BuildRequires: pkgconfig(freetype2) BuildRequires: pkgconfig(gio-2.0) BuildRequires: pkgconfig(glib-2.0) >= 2.62 BuildRequires: pkgconfig(gobject-introspection-1.0) %if %{with libblake3} BuildRequires: pkgconfig(libblake3) %endif -BuildRequires: pkgconfig(Qt6Core) >= %{min_qt_version} -BuildRequires: pkgconfig(Qt6Test) >= %{min_qt_version} -BuildRequires: pkgconfig(libcurl) -BuildRequires: pkgconfig(libfyaml) -BuildRequires: pkgconfig(librsvg-2.0) +BuildRequires: pkgconfig(libcurl) >= 7.62 +BuildRequires: pkgconfig(libfyaml) >= 0.8 BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libxml-2.0) +BuildRequires: pkgconfig(libzstd) BuildRequires: pkgconfig(pango) +BuildRequires: pkgconfig(Qt6Core) >= %{min_qt_version} +BuildRequires: pkgconfig(Qt6Test) >= %{min_qt_version} +BuildRequires: pkgconfig(vips) >= 8.14 +BuildRequires: pkgconfig(wayland-client) >= 1.15 BuildRequires: pkgconfig(xmlb) >= 0.3.14 -BuildRequires: pkgconfig(wayland-client) Recommends: curl %description @@ -117,11 +109,6 @@ Summary: Support for appstreamcli compose License: GPL-2.0-or-later AND LGPL-2.1-or-later Requires: AppStream = %{version} -%if 0%{?suse_version} > 1600 -Requires: glycin-loaders -%else -Requires: gdk-pixbuf-loader-rsvg -%endif %description compose This package contains all necessary files, libraries, @@ -172,7 +159,6 @@ %package -n typelib-1_0-AppStream-compose-1.0 Summary: Introspection bindings for AppStream Compose License: LGPL-2.1-or-later -Group: System/Libraries %description -n typelib-1_0-AppStream-compose-1.0 GObject introspection bindings for interfaces provided by AppStream Compose @@ -180,7 +166,6 @@ %package -n typelib-1_0-AppStream-1.0 Summary: Introspection bindings for AppStream License: LGPL-2.1-or-later -Group: System/Libraries %description -n typelib-1_0-AppStream-1.0 GObject introspection bindings for interfaces provided by AppStream. @@ -192,18 +177,14 @@ %build %define common_options -Ddocs=false -Dapidocs=false -Dstemming=false -%if %{with vala} -%define build_vapi true -%else -%define build_vapi false -%endif + %if %{with libblake3} %define blake3_support true %else %define blake3_support false %endif -%define options -Dqt=true -Dcompose=true -Dvapi=%{build_vapi} -Dblake3-support=%{blake3_support} +%define options -Dqt=true -Dcompose=true -Dvapi=true -Dblake3-support=%{blake3_support} %if %{with gcc15} export CC=gcc-15 CXX=g++-15 @@ -259,6 +240,8 @@ %files compose %{_datadir}/metainfo/org.freedesktop.appstream.compose.metainfo.xml +%dir %{_libdir}/ascompose +%{_libdir}/ascompose/asc-mediaworker %{_libexecdir}/appstreamcli-compose %{_mandir}/man1/appstreamcli-compose*.1.gz @@ -278,12 +261,10 @@ %{_includedir}/appstream/ %{_datadir}/gir-1.0/AppStream-1.0.gir %{_datadir}/gettext/ -%if %{with vala} %dir %{_datadir}/vala/ %dir %{_datadir}/vala/vapi/ %{_datadir}/vala/vapi/appstream.deps %{_datadir}/vala/vapi/appstream.vapi -%endif %files doc %{_datadir}/doc/appstream ++++++ AppStream-1.1.5.tar.xz -> AppStream-1.2.0.tar.xz ++++++ ++++ 177973 lines of diff (skipped)
