Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package forgejo for openSUSE:Factory checked in at 2026-09-21 12:15:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/forgejo (Old) and /work/SRC/openSUSE:Factory/.forgejo.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "forgejo" Mon Sep 21 12:15:56 2026 rev:50 rq:1379269 version:16.0.5 Changes: -------- --- /work/SRC/openSUSE:Factory/forgejo/forgejo.changes 2026-08-21 16:58:16.327502237 +0200 +++ /work/SRC/openSUSE:Factory/.forgejo.new.383539/forgejo.changes 2026-09-21 12:16:22.191110937 +0200 @@ -1,0 +2,65 @@ +Thu Sep 17 16:30:26 UTC 2026 - Marcus Rueckert <[email protected]> + +- update to 16.0.5: + - Security bug fixes + - PR: Critical: fix: prevent ApplyDiffPatch from mutating bare + repo config. When a patch is applied to a Forgejo repo + through Forgejo's Web UI, Web cherry-pick, or /diffpatch API, + a git apply --index command-line is executed to apply the + patch to a temporary bare git repository. An unusual + behaviour of git apply can cause arbitrary files the working + direction to be changed, which is within the bare repository, + and that behaviour can be abused by a malicious user to + perform unexpected operations on the Forgejo host. This + vulnerability allows execution of arbitrary processes on the + Forgejo host as a remote code execution attack. The issue has + been addressed by ensuring that the working directory is an + unrelated temporary directory. This vulnerability is a + variation on PR 13705, a vulnerability that was fixed in + Forgejo v15.0.6. This variation was not detected at that + time. + - PR: prevent CSRF attacks on OpenID identity associations. + When OpenID sign-in is enabled on a Forgejo host, a logged-in + user can add an additional OpenID address to their user + account in the /user/settings/security page. The HTTP + endpoint responsible for registering an OpenID address is an + HTTP GET request, as required by the OpenID specification. + The endpoint was vulnerable to a CSRF attack where an + unexpected GET request generated by a user's browser can + register an unexpected OpenID identity on their currently + logged-in Forgejo account. The vulnerability has been + remediated by validating that a request to add an OpenID + identity is initiated by the currently logged-in user. + - Features + - PR (backported): feat: add support in Forgejo's update + checker for LTS and multiple releases + - Bug fixes + - PR (backported): PATCH /orgs/{org} responds with 200 but + discards visibility public + - PR (backported): PATCH /orgs/{org} would reset all unset + attributes to their default values + - PR (backported): fix: adjust checks for Arch Linux package + names and versions corresponding to specs + - Included for completeness but not user-facing (chores, etc.) + - PR: Update dependency sharp to v0.35.4 [SECURITY] + (v16.0/forgejo) + - PR (backported): fix: prevent rollback of git commits during + push mirror operations + - PR: Update dependency svgo to v4.1.0 [SECURITY] + (v16.0/forgejo) + - PR: Update google.golang.org/grpc (indirect) to v1.83.2 + [SECURITY] (v16.0/forgejo) + +------------------------------------------------------------------- +Sun Sep 13 08:20:13 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 16.0.4: + * Security: block template expansion from planting a .git dir + (remote code execution via malicious template repos) + * Security: honor API token restrictions in PR maintainer-edit + checks; hide draft-release attachments from readers + * Bug fixes: access-table recalculation, quota double-count, + job logs, org admin team permissions, hashbox UI +- spec cleanup: drop Group tag, use pkgconfig(libapparmor) + +------------------------------------------------------------------- Old: ---- forgejo-src-16.0.3.tar.gz forgejo-src-16.0.3.tar.gz.asc New: ---- forgejo-src-16.0.5.tar.gz forgejo-src-16.0.5.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ forgejo.spec ++++++ --- /var/tmp/diff_new_pack.cIbuEw/_old 2026-09-21 12:17:42.803480529 +0200 +++ /var/tmp/diff_new_pack.cIbuEw/_new 2026-09-21 12:17:42.806480654 +0200 @@ -25,18 +25,16 @@ %bcond_without apparmor %endif Name: forgejo -Version: 16.0.3 +Version: 16.0.5 Release: 0 Summary: Self-hostable forge License: GPL-3.0-or-later -Group: Development/Tools/Version Control URL: https://forgejo.org Source0: https://codeberg.org/forgejo/forgejo/releases/download/v%{version}/forgejo-src-%{version}.tar.gz Source1: https://codeberg.org/forgejo/forgejo/releases/download/v%{version}/forgejo-src-%{version}.tar.gz.asc Source2: https://keys.openpgp.org/vks/v1/by-fingerprint/EB114F5E6C0DC2BCDD183550A4B61A2DC5923710#/forgejo.keyring Source3: https://codeberg.org/forgejo/forgejo/raw/tag/v%{version}/package-lock.json Source4: node_modules.spec.inc -%include %{_sourcedir}/node_modules.spec.inc Source5: forgejo.service Source6: forgejo.sysusers Source7: forgejo.fc @@ -48,14 +46,6 @@ Source13: forgejo-hooks-abstraction.apparmor Source99: README.SUSE Patch0: custom-app.ini.patch -BuildRequires: golang(API) >= 1.25 -## node >= 20 -%if 0%{?suse_version} == 1500 -BuildRequires: nodejs-devel-default -BuildRequires: npm-default -%else -BuildRequires: nodejs-packaging -%endif BuildRequires: fdupes BuildRequires: firewall-macros BuildRequires: firewalld @@ -63,28 +53,37 @@ BuildRequires: make BuildRequires: systemd-rpm-macros BuildRequires: sysuser-tools +BuildRequires: golang(API) >= 1.25 Requires: git-core Requires: git-lfs Requires: (forgejo-apparmor if apparmor-abstractions) Requires: (forgejo-firewalld if firewalld) Requires: (forgejo-selinux if selinux-policy-targeted) Conflicts: forgejo-longterm +%include %{_sourcedir}/node_modules.spec.inc +%systemd_requires +%sysusers_requires +## node >= 20 +%if 0%{?suse_version} == 1500 +BuildRequires: nodejs-devel-default +BuildRequires: npm-default +%else +BuildRequires: nodejs-packaging +%endif %if %{with apparmor} BuildRequires: apparmor-abstractions BuildRequires: apparmor-rpm-macros -BuildRequires: libapparmor-devel +BuildRequires: pkgconfig(libapparmor) %endif %if %{with selinux} BuildRequires: checkpolicy BuildRequires: selinux-policy-devel %endif -%{systemd_requires} -%{sysusers_requires} %package firewalld Summary: Firewalld profile for %{name} -BuildArch: noarch Conflicts: forgejo-longterm-firewalld +BuildArch: noarch %description firewalld This package adds a firewalld service profile to %{name} @@ -92,9 +91,9 @@ %if %{with apparmor} %package apparmor Summary: Apparmor profile for %{name} -BuildArch: noarch -Conflicts: forgejo-longterm-apparmor Requires: %{name} = %{version}-%{release} +Conflicts: forgejo-longterm-apparmor +BuildArch: noarch %description apparmor This package adds the Apparmor profile to %{name} @@ -103,10 +102,10 @@ %if %{with selinux} %package selinux Summary: Selinux support for %{name} -BuildArch: noarch -Conflicts: forgejo-longterm-selinux Requires: %{name} = %{version}-%{release} Requires: selinux-policy-targeted +Conflicts: forgejo-longterm-selinux +BuildArch: noarch %description selinux This package adds SELinux enforcement to %{name}. @@ -114,8 +113,8 @@ %package environment-to-ini Summary: Configuration params via environment variables for %{name} -Conflicts: forgejo-longterm-environment-to-ini Requires: %{name} = %{version}-%{release} +Conflicts: forgejo-longterm-environment-to-ini %description environment-to-ini OCI Container users can change arbitrary configuration ++++++ _service ++++++ --- /var/tmp/diff_new_pack.cIbuEw/_old 2026-09-21 12:17:42.883483874 +0200 +++ /var/tmp/diff_new_pack.cIbuEw/_new 2026-09-21 12:17:42.893484292 +0200 @@ -5,6 +5,7 @@ <param name="cpio">node_modules.obscpio</param> <param name="output">node_modules.spec.inc</param> <param name="source-offset">10000</param> + <param name="legacy-container">true</param> </service> </services> ++++++ forgejo-src-16.0.3.tar.gz -> forgejo-src-16.0.5.tar.gz ++++++ /work/SRC/openSUSE:Factory/forgejo/forgejo-src-16.0.3.tar.gz /work/SRC/openSUSE:Factory/.forgejo.new.383539/forgejo-src-16.0.5.tar.gz differ: char 13, line 1 ++++++ node_modules.obscpio ++++++ /work/SRC/openSUSE:Factory/forgejo/node_modules.obscpio /work/SRC/openSUSE:Factory/.forgejo.new.383539/node_modules.obscpio differ: char 2622688, line 9883 ++++++ node_modules.spec.inc ++++++ --- /var/tmp/diff_new_pack.cIbuEw/_old 2026-09-21 12:17:43.126494035 +0200 +++ /var/tmp/diff_new_pack.cIbuEw/_new 2026-09-21 12:17:43.137494495 +0200 @@ -57,7 +57,7 @@ Source10056: https://registry.npmjs.org/@dual-bundle/import-meta-resolve/-/import-meta-resolve-4.2.1.tgz#/@dual-bundle-import-meta-resolve-4.2.1.tgz Source10057: https://registry.npmjs.org/@emnapi/core/-/core-1.10.0.tgz#/@emnapi-core-1.10.0.tgz Source10058: https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.10.0.tgz#/@emnapi-runtime-1.10.0.tgz -Source10059: https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.0.tgz#/@emnapi-runtime-1.11.0.tgz +Source10059: https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz#/@emnapi-runtime-1.11.3.tgz Source10060: https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz#/@emnapi-wasi-threads-1.2.1.tgz Source10061: https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.27.7.tgz#/@esbuild-aix-ppc64-0.27.7.tgz Source10062: https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.27.7.tgz#/@esbuild-android-arm-0.27.7.tgz @@ -108,32 +108,32 @@ Source10107: https://registry.npmjs.org/@iconify/types/-/types-2.0.0.tgz#/@iconify-types-2.0.0.tgz Source10108: https://registry.npmjs.org/@iconify/utils/-/utils-3.1.3.tgz#/@iconify-utils-3.1.3.tgz Source10109: https://registry.npmjs.org/@img/colour/-/colour-1.1.0.tgz#/@img-colour-1.1.0.tgz -Source10110: https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.1.tgz#/@img-sharp-darwin-arm64-0.35.1.tgz -Source10111: https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.1.tgz#/@img-sharp-darwin-x64-0.35.1.tgz -Source10112: https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.1.tgz#/@img-sharp-freebsd-wasm32-0.35.1.tgz -Source10113: https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.0.tgz#/@img-sharp-libvips-darwin-arm64-1.3.0.tgz -Source10114: https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.0.tgz#/@img-sharp-libvips-darwin-x64-1.3.0.tgz -Source10115: https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.0.tgz#/@img-sharp-libvips-linux-arm-1.3.0.tgz -Source10116: https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.0.tgz#/@img-sharp-libvips-linux-arm64-1.3.0.tgz -Source10117: https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.0.tgz#/@img-sharp-libvips-linux-ppc64-1.3.0.tgz -Source10118: https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.0.tgz#/@img-sharp-libvips-linux-riscv64-1.3.0.tgz -Source10119: https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.0.tgz#/@img-sharp-libvips-linux-s390x-1.3.0.tgz -Source10120: https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.0.tgz#/@img-sharp-libvips-linux-x64-1.3.0.tgz -Source10121: https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.0.tgz#/@img-sharp-libvips-linuxmusl-arm64-1.3.0.tgz -Source10122: https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.0.tgz#/@img-sharp-libvips-linuxmusl-x64-1.3.0.tgz -Source10123: https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.1.tgz#/@img-sharp-linux-arm-0.35.1.tgz -Source10124: https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.1.tgz#/@img-sharp-linux-arm64-0.35.1.tgz -Source10125: https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.1.tgz#/@img-sharp-linux-ppc64-0.35.1.tgz -Source10126: https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.1.tgz#/@img-sharp-linux-riscv64-0.35.1.tgz -Source10127: https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.1.tgz#/@img-sharp-linux-s390x-0.35.1.tgz -Source10128: https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.1.tgz#/@img-sharp-linux-x64-0.35.1.tgz -Source10129: https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.1.tgz#/@img-sharp-linuxmusl-arm64-0.35.1.tgz -Source10130: https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.1.tgz#/@img-sharp-linuxmusl-x64-0.35.1.tgz -Source10131: https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.1.tgz#/@img-sharp-wasm32-0.35.1.tgz -Source10132: https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.1.tgz#/@img-sharp-webcontainers-wasm32-0.35.1.tgz -Source10133: https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.1.tgz#/@img-sharp-win32-arm64-0.35.1.tgz -Source10134: https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.1.tgz#/@img-sharp-win32-ia32-0.35.1.tgz -Source10135: https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.1.tgz#/@img-sharp-win32-x64-0.35.1.tgz +Source10110: https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.4.tgz#/@img-sharp-darwin-arm64-0.35.4.tgz +Source10111: https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.4.tgz#/@img-sharp-darwin-x64-0.35.4.tgz +Source10112: https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.4.tgz#/@img-sharp-freebsd-wasm32-0.35.4.tgz +Source10113: https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.3.tgz#/@img-sharp-libvips-darwin-arm64-1.3.3.tgz +Source10114: https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.3.tgz#/@img-sharp-libvips-darwin-x64-1.3.3.tgz +Source10115: https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.3.tgz#/@img-sharp-libvips-linux-arm-1.3.3.tgz +Source10116: https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.3.tgz#/@img-sharp-libvips-linux-arm64-1.3.3.tgz +Source10117: https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.3.tgz#/@img-sharp-libvips-linux-ppc64-1.3.3.tgz +Source10118: https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.3.tgz#/@img-sharp-libvips-linux-riscv64-1.3.3.tgz +Source10119: https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.3.tgz#/@img-sharp-libvips-linux-s390x-1.3.3.tgz +Source10120: https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.3.tgz#/@img-sharp-libvips-linux-x64-1.3.3.tgz +Source10121: https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.3.tgz#/@img-sharp-libvips-linuxmusl-arm64-1.3.3.tgz +Source10122: https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.3.tgz#/@img-sharp-libvips-linuxmusl-x64-1.3.3.tgz +Source10123: https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.4.tgz#/@img-sharp-linux-arm-0.35.4.tgz +Source10124: https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.4.tgz#/@img-sharp-linux-arm64-0.35.4.tgz +Source10125: https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.4.tgz#/@img-sharp-linux-ppc64-0.35.4.tgz +Source10126: https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.4.tgz#/@img-sharp-linux-riscv64-0.35.4.tgz +Source10127: https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.4.tgz#/@img-sharp-linux-s390x-0.35.4.tgz +Source10128: https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.4.tgz#/@img-sharp-linux-x64-0.35.4.tgz +Source10129: https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.4.tgz#/@img-sharp-linuxmusl-arm64-0.35.4.tgz +Source10130: https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.4.tgz#/@img-sharp-linuxmusl-x64-0.35.4.tgz +Source10131: https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.4.tgz#/@img-sharp-wasm32-0.35.4.tgz +Source10132: https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.4.tgz#/@img-sharp-webcontainers-wasm32-0.35.4.tgz +Source10133: https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.4.tgz#/@img-sharp-win32-arm64-0.35.4.tgz +Source10134: https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.4.tgz#/@img-sharp-win32-ia32-0.35.4.tgz +Source10135: https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.4.tgz#/@img-sharp-win32-x64-0.35.4.tgz Source10136: https://registry.npmjs.org/@isaacs/balanced-match/-/balanced-match-4.0.1.tgz#/@isaacs-balanced-match-4.0.1.tgz Source10137: https://registry.npmjs.org/@isaacs/brace-expansion/-/brace-expansion-5.0.1.tgz#/@isaacs-brace-expansion-5.0.1.tgz Source10138: https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz#/@isaacs-cliui-8.0.2.tgz @@ -463,10 +463,10 @@ Source10462: https://registry.npmjs.org/css/-/css-3.0.0.tgz#/css-3.0.0.tgz Source10463: https://registry.npmjs.org/css-functions-list/-/css-functions-list-3.3.3.tgz#/css-functions-list-3.3.3.tgz Source10464: https://registry.npmjs.org/css-loader/-/css-loader-7.1.3.tgz#/css-loader-7.1.3.tgz -Source10465: https://registry.npmjs.org/css-select/-/css-select-5.2.2.tgz#/css-select-5.2.2.tgz +Source10465: https://registry.npmjs.org/css-select/-/css-select-6.0.0.tgz#/css-select-6.0.0.tgz Source10466: https://registry.npmjs.org/css-tree/-/css-tree-2.2.1.tgz#/css-tree-2.2.1.tgz Source10467: https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz#/css-tree-3.2.1.tgz -Source10468: https://registry.npmjs.org/css-what/-/css-what-6.2.2.tgz#/css-what-6.2.2.tgz +Source10468: https://registry.npmjs.org/css-what/-/css-what-7.0.0.tgz#/css-what-7.0.0.tgz Source10469: https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz#/cssesc-3.0.0.tgz Source10470: https://registry.npmjs.org/csso/-/csso-5.0.5.tgz#/csso-5.0.5.tgz Source10471: https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz#/csstype-3.2.3.tgz @@ -999,18 +999,18 @@ Source10998: https://registry.npmjs.org/safe-stable-stringify/-/safe-stable-stringify-1.1.1.tgz#/safe-stable-stringify-1.1.1.tgz Source10999: https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz#/safer-buffer-2.1.2.tgz Source11000: https://registry.npmjs.org/sax/-/sax-1.2.4.tgz#/sax-1.2.4.tgz -Source11001: https://registry.npmjs.org/sax/-/sax-1.6.0.tgz#/sax-1.6.0.tgz +Source11001: https://registry.npmjs.org/sax/-/sax-1.6.1.tgz#/sax-1.6.1.tgz Source11002: https://registry.npmjs.org/schema-utils/-/schema-utils-4.3.3.tgz#/schema-utils-4.3.3.tgz Source11003: https://registry.npmjs.org/scslre/-/scslre-0.3.0.tgz#/scslre-0.3.0.tgz Source11004: https://registry.npmjs.org/semver/-/semver-7.7.4.tgz#/semver-7.7.4.tgz -Source11005: https://registry.npmjs.org/semver/-/semver-7.8.4.tgz#/semver-7.8.4.tgz +Source11005: https://registry.npmjs.org/semver/-/semver-7.8.5.tgz#/semver-7.8.5.tgz Source11006: https://registry.npmjs.org/seroval/-/seroval-1.5.4.tgz#/seroval-1.5.4.tgz Source11007: https://registry.npmjs.org/seroval-plugins/-/seroval-plugins-1.5.4.tgz#/seroval-plugins-1.5.4.tgz Source11008: https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz#/set-function-length-1.2.2.tgz Source11009: https://registry.npmjs.org/set-function-name/-/set-function-name-2.0.2.tgz#/set-function-name-2.0.2.tgz Source11010: https://registry.npmjs.org/set-proto/-/set-proto-1.0.0.tgz#/set-proto-1.0.0.tgz Source11011: https://registry.npmjs.org/shallow-clone/-/shallow-clone-3.0.1.tgz#/shallow-clone-3.0.1.tgz -Source11012: https://registry.npmjs.org/sharp/-/sharp-0.35.1.tgz#/sharp-0.35.1.tgz +Source11012: https://registry.npmjs.org/sharp/-/sharp-0.35.4.tgz#/sharp-0.35.4.tgz Source11013: https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz#/shebang-command-2.0.0.tgz Source11014: https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz#/shebang-regex-3.0.0.tgz Source11015: https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz#/side-channel-1.1.0.tgz @@ -1070,7 +1070,7 @@ Source11069: https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-3.2.0.tgz#/supports-hyperlinks-3.2.0.tgz Source11070: https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz#/supports-preserve-symlinks-flag-1.0.0.tgz Source11071: https://registry.npmjs.org/svg-tags/-/svg-tags-1.0.0.tgz#/svg-tags-1.0.0.tgz -Source11072: https://registry.npmjs.org/svgo/-/svgo-4.0.2.tgz#/svgo-4.0.2.tgz +Source11072: https://registry.npmjs.org/svgo/-/svgo-4.1.0.tgz#/svgo-4.1.0.tgz Source11073: https://registry.npmjs.org/swagger-ui-dist/-/swagger-ui-dist-5.32.6.tgz#/swagger-ui-dist-5.32.6.tgz Source11074: https://registry.npmjs.org/sync-fetch/-/sync-fetch-0.4.5.tgz#/sync-fetch-0.4.5.tgz Source11075: https://registry.npmjs.org/table/-/table-6.9.0.tgz#/table-6.9.0.tgz ++++++ package-lock.json ++++++ ++++ 611 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/forgejo/package-lock.json ++++ and /work/SRC/openSUSE:Factory/.forgejo.new.383539/package-lock.json
