Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package perl-Dancer2 for openSUSE:Factory checked in at 2026-10-20 12:40:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/perl-Dancer2 (Old) and /work/SRC/openSUSE:Factory/.perl-Dancer2.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-Dancer2" Tue Oct 20 12:40:21 2026 rev:11 rq:1386249 version:2.2.2 Changes: -------- --- /work/SRC/openSUSE:Factory/perl-Dancer2/perl-Dancer2.changes 2025-01-12 11:20:42.774613277 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Dancer2.new.3698736/perl-Dancer2.changes 2026-10-20 12:41:47.986221774 +0200 @@ -1,0 +2,183 @@ +Tue Sep 29 11:23:26 UTC 2026 - Tina Müller <[email protected]> + +- updated to 2.2.2 + see /usr/share/doc/packages/perl-Dancer2/Changes + + 2.2.2 2026-09-28 19:45:16-04:00 America/New_York + [ SECURITY ] + * None + [ BUG FIXES ] + * GH #1837: Fix class-method serializer crash (David Precious) + * GH #1843: Fix cpantesters, Debian build issues in gen.t + (David Precious) + [ ENHANCEMENTS ] + * None + [ DOCUMENTATION ] + * PR #1844: Update Patch's name (Nova Patch) + [ DEPRECATED ] + * None + [ MISC ] + * None + 2.2.1 2026-09-18 21:12:29-04:00 America/New_York + [ SECURITY ] + * PR #1838: Serializer::YAML refuses blessed objects and code in + request bodies; raise min YAML version to 1.30 (David Precious) + * PR #1839: Serializer::YAML also zeroes $YAML::UseCode, which + otherwise reopens the code eval (David Precious) + [ BUG FIXES ] + * GH #1840: Specify min version of CLI::Osprey needed (Jason A. Crome) + [ ENHANCEMENTS ] + * None + [ DOCUMENTATION ] + * None + [ DEPRECATED ] + * None + [ MISC ] + * None + 2.2.0 2026-09-16 07:58:19-04:00 America/New_York + [ SECURITY ] + * PR #1836: Fix path traversal in Dancer2::Handler::File, which + served files from outside public_dir; see GHSA-6xw8-v24c-m783 + (David Precious) CVE-2026-93712 bsc#1282295 + * PR #1836: A halting on_hook_exception handler no longer lets the + route the hook refused run anyway; see GHSA-v527-r4px-7vx7 + (David Precious) CVE-2026-93710 bsc#1282293 + * GH #1822: Strip CR and LF from response header names, as was + already done for header values (David Precious) CVE-2026-93711 bsc#1282294 + * GH #1823: AutoPage no longer serves a layout as a page on + case-insensitive filesystems (David Precious) CVE-2026-93709 bsc#1282292 + [ BUG FIXES ] + * GH #1781: Fix directory detection heuristic (Jason A. Crome) + * GH #1784: Fix UTF-8 handling in Serializer::JSON for readonly + values (Russell @veryrusty Jenkins) + * GH #1790: Fix infinite recursion into blessed objects in JSON + Serializer (Russell @veryrusty Jenkins) + * PR #1791: Send correct error codes in send_file (Anton Lundin) + * PR #1797: Fix path()/dirname() DSL keywords dropping their first + argument (Mike Weisenborn) + * PR #1801: Fix failing CI (Jason A. Crome) + * PR #1804: Make session ID generation always use Crypt::URandom and + harden validate_id against invalid session IDs (David Precious) + * GH #1824: Encode each response content assignment on its own + merits, not just the first (David Precious) + * GH #1825: Serializer::Mutable now ignores content type parameters + such as charset when choosing a format (David Precious) + * GH #1826: uri_for_route accepts a route parameter of 0, and + refuses an empty one with a clearer message (David Precious) + * GH #1827: Hooks are compiled exactly once however many times + to_app is called (David Precious) + * GH #1828: A NUL byte in a static file request no longer warns once + per request (David Precious) + * GH #1829: dancer2 gen -g (and -r) no longer dies after writing the + application (David Precious) + * GH #1830: dancer2 gen names the application directory after the + dashed distribution name (David Precious) + * GH #1831: dancer2 gen appends a relative, matchable pattern to + MANIFEST.SKIP (David Precious) + [ ENHANCEMENTS ] + * None + [ DOCUMENTATION ] + * GH #1832: Document Serializer::Mutable's actual header precedence + in each direction (David Precious) + * GH #1833: Remove %D from the documented log_format characters; it + was never implemented (David Precious) + [ DEPRECATED ] + * PR #1821: Remove Data::Dumper serializer from Dancer2 core, along + with from_dumper/to_dumper keywords, tests (David Precious) + [ MISC ] + * GH #1834: Rename share/.gitignore so git stops applying it to this + distribution's own share/ tree (David Precious) + * GH #1835: Add a characterization test suite under t/unit, + t/integration and t/e2e (David Precious) + * With thanks to Curtis "Ovid" Poe, whose generated test suite from + PAAD for Dancer2 found the defects fixed above + 2.1.0 2026-03-11 21:29:26-04:00 America/New_York + [ BUG FIXES ] + * GH #686: Fix: to_json is double encoding UTF8 (Sawyer X) + * GH #863: Fix case insensitive system confusion (Sawyer X) + * GH #1124: Fix: charset config option is mostly ignored (Sawyer X) + * GH #1143: Fix utf8 in URL (Sawyer X, Sorin Pop) + * GH #1449, 1630: Make plugin DSL keyword app-specific (Sawyer X) + * GH #1772: t/dsl/send_file.t fails with content_type-related errors + (Sawyer X) + * GH #1773: t/dsl/send_as.t throws json-related warnings (Jason + A. Crome) + * GH #1774: t/hooks.t throws void warnings (Jason A. Crome) + * GH #1777: Properly unlink file uploads on Windows (Sawyer X) + [ ENHANCEMENTS ] + * GH #763: Strict config mode; warn on unknown config keys with + opt-out (Sawyer X) + * GH #763: Default strict config to off, but scaffold new apps with + stict config enabled (Jason A. Crome) + * GH #1073: Get multiple session cookie values at once with clear + method (Sawyer X) + * GH #1264: Move to Path::Tiny (Sawyer X) + * GH #1323: Allow fully qualified namespaces for all engines (Russell + @veryrusty Jenkins) + * GH #1594: Use Unicode::UTF8 if available (Sawyer X) + * GH #1664: Stop sending double server headers (Sawyer X) + * GH #1709: `send_as` should use the full serializer, including hooks + (Sawyer X) + * PR #1757: Remove api_version, improve dispatching loop (Sawyer X) + * PR #1758: Move MIME ownership to app (Sawyer X) + * PR #1767: Turn off strict_config for noisy tests (Jason A. Crome) + * PR #1780: Add package name capability to logger output (Mikko + Koivunalho) + [ DOCUMENTATION ] + * GH #1431: Better document behavior of views setting (Jason A. Crome) + * PR #1749, #1750: Fix broken manual and tutorial links (Gil Magno, + Jason A. Crome) + * PR #1753: Fix structure of config docs (Mikko Koivunalho) + * PR #1762: Remove keyword logger from DSL document (Mikko Koivunalho) + [ DEPRECATED ] + * None + [ MISC ] + * PR #1776: Remove "Powered by..." from the error page (Jason A. Crome) + 2.0.1 2025-10-22 18:13:37-04:00 America/New_York + [ BUG FIXES ] + * None + [ ENHANCEMENTS ] + * None + [ DOCUMENTATION ] + * GH #1745: Fix cookbook link in README (icyavocado) + * PR #1748: Various documentation fixes (Jason A. Crome) + [ DEPRECATED ] + * None + [ MISC ] + * None + 2.0.0 2025-09-15 17:49:26-04:00 America/New_York + [ BUG FIXES ] + * GH #1701: Split cookie values on & only (Yanick Champoux) + [ ENHANCEMENTS ] + * GH #530: Make data censoring configurable (Yanick Champoux, David + Precious) + * GH #850: Scaffold tutorial app; allow multiple apps to be scaffolded + in core Dancer2 (Jason A. Crome) + * GH #1512: Log hook entries as they are executed (Yanick Champoux) + * GH #1615: Remove Dancer2::Template::Simple from Dancer2 core (Jason + A. Crome) + * PR #1637: New, extendable configuration system (Mikko Koivunalho) + * GH #1723: Enable use of a different Template Toolkit base class + (Andy Beverley) + * PR #1727: Don't create CPAN package files when generating new apps + (Jason A. Crome) + * PR #1731: Retire Template::Tiny fork, use CPAN's (Jason A. Crome, + Karen Etheridge, Damien Krotkine, Yanick Champoux) + * PR #1736: Allow config system to bootstrap itself (Yanick Champoux) + * GH #1737: Add on_hook_exception for errors during hook processing + (Andy Beverley) + * PR #1739: Add source to on_hook_exception (Andy Beverley) + * PR #1742: Refactor CLI for future expansion (Jason A. Crome) + [ DOCUMENTATION ] + * GH #1342: Document skipping private methods in pod coverage tests + (Jason A. Crome) + * PR #1721: New Dancer2 docs, reorganization of all documentation; + from TPRF grant (Jason A. Crome) + * PR #1741: Cover items missed in earlier documentation branch (Jason + A. Crome) + [ DEPRECATED ] + * None + [ MISC ] + * None + +------------------------------------------------------------------- Old: ---- Dancer2-1.1.2.tar.gz New: ---- Dancer2-2.2.2.tar.gz README.md _scmsync.obsinfo build.specials.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-Dancer2.spec ++++++ --- /var/tmp/diff_new_pack.bNKVX6/_old 2026-10-20 12:41:48.634248895 +0200 +++ /var/tmp/diff_new_pack.bNKVX6/_new 2026-10-20 12:41:48.637249020 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Dancer2 # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,30 +18,33 @@ %define cpan_name Dancer2 Name: perl-Dancer2 -Version: 1.1.2 +Version: 2.2.2 Release: 0 License: Artistic-1.0 OR GPL-1.0-or-later Summary: Lightweight yet powerful web application framework URL: https://metacpan.org/release/%{cpan_name} Source0: https://cpan.metacpan.org/authors/id/C/CR/CROMEDOME/%{cpan_name}-%{version}.tar.gz Source1: cpanspec.yml +Source100: README.md BuildArch: noarch BuildRequires: perl BuildRequires: perl-macros -BuildRequires: perl(CLI::Osprey) +BuildRequires: perl(CLI::Osprey) >= 0.90 BuildRequires: perl(CPAN::Meta::Requirements) >= 2.121 -BuildRequires: perl(Capture::Tiny) >= 0.12 +BuildRequires: perl(Capture::Tiny) >= 0.120 BuildRequires: perl(Clone) BuildRequires: perl(Config::Any) +BuildRequires: perl(Crypt::URandom) >= 0.360 +BuildRequires: perl(Data::Censor) >= 0.40 BuildRequires: perl(Digest::SHA) BuildRequires: perl(Exporter::Tiny) BuildRequires: perl(File::Share) -BuildRequires: perl(File::ShareDir::Install) >= 0.06 +BuildRequires: perl(File::ShareDir::Install) >= 0.60 BuildRequires: perl(File::Which) BuildRequires: perl(HTTP::Cookies) BuildRequires: perl(HTTP::Date) BuildRequires: perl(HTTP::Headers) -BuildRequires: perl(HTTP::Headers::Fast) >= 0.21 +BuildRequires: perl(HTTP::Headers::Fast) >= 0.210 BuildRequires: perl(HTTP::Tiny) BuildRequires: perl(Hash::Merge::Simple) BuildRequires: perl(Hash::MultiValue) @@ -52,36 +55,40 @@ BuildRequires: perl(Module::Metadata) BuildRequires: perl(Module::Pluggable) BuildRequires: perl(Module::Runtime) -BuildRequires: perl(Moo) >= 2.000000 +BuildRequires: perl(Moo) >= 2.0 BuildRequires: perl(Moo::Role) BuildRequires: perl(Path::Tiny) -BuildRequires: perl(Plack) >= 1.0040 +BuildRequires: perl(Plack) >= 1.4 BuildRequires: perl(Plack::Middleware::FixMissingBodyInRedirect) BuildRequires: perl(Plack::Middleware::RemoveRedundantBody) BuildRequires: perl(Pod::Simple::SimpleTree) BuildRequires: perl(Ref::Util) BuildRequires: perl(parent) -#BuildRequires: perl(Role::Tiny) >= 2.000000 +#BuildRequires: perl(Role::Tiny) >= 2.0 BuildRequires: perl(Safe::Isa) BuildRequires: perl(Sub::Quote) +BuildRequires: perl(Sub::Util) BuildRequires: perl(Template) -BuildRequires: perl(Template::Tiny) +BuildRequires: perl(Template::Tiny) >= 1.160 BuildRequires: perl(Test::EOL) +BuildRequires: perl(Test::Exception) BuildRequires: perl(Test::Fatal) BuildRequires: perl(Test::More) >= 0.92 -BuildRequires: perl(Type::Tiny) >= 1.000006 +BuildRequires: perl(Type::Tiny) >= 1.0.6 BuildRequires: perl(Types::Standard) BuildRequires: perl(URI::Escape) -BuildRequires: perl(YAML) >= 0.86 -Requires: perl(CLI::Osprey) +BuildRequires: perl(YAML) >= 1.300 +Requires: perl(CLI::Osprey) >= 0.90 Requires: perl(Clone) Requires: perl(Config::Any) +Requires: perl(Crypt::URandom) >= 0.360 +Requires: perl(Data::Censor) >= 0.40 Requires: perl(Digest::SHA) Requires: perl(Exporter::Tiny) Requires: perl(File::Share) Requires: perl(File::Which) Requires: perl(HTTP::Date) -Requires: perl(HTTP::Headers::Fast) >= 0.21 +Requires: perl(HTTP::Headers::Fast) >= 0.210 Requires: perl(HTTP::Tiny) Requires: perl(Hash::Merge::Simple) Requires: perl(Hash::MultiValue) @@ -91,10 +98,10 @@ Requires: perl(MIME::Base64) >= 3.13 Requires: perl(Module::Pluggable) Requires: perl(Module::Runtime) -Requires: perl(Moo) >= 2.000000 +Requires: perl(Moo) >= 2.0 Requires: perl(Moo::Role) Requires: perl(Path::Tiny) -Requires: perl(Plack) >= 1.0040 +Requires: perl(Plack) >= 1.4 Requires: perl(Plack::Middleware::FixMissingBodyInRedirect) Requires: perl(Plack::Middleware::RemoveRedundantBody) Requires: perl(Ref::Util) @@ -102,20 +109,19 @@ #Requires: perl(Role::Tiny) >= 2.000000 Requires: perl(Safe::Isa) Requires: perl(Sub::Quote) +Requires: perl(Sub::Util) Requires: perl(Template) -Requires: perl(Template::Tiny) +Requires: perl(Template::Tiny) >= 1.160 Requires: perl(Test::More) >= 0.92 -Requires: perl(Type::Tiny) >= 1.000006 +Requires: perl(Type::Tiny) >= 1.0.6 Requires: perl(Types::Standard) Requires: perl(URI::Escape) -Requires: perl(YAML) >= 0.86 +Requires: perl(YAML) >= 1.300 Recommends: perl(CGI::Deurl::XS) Recommends: perl(Class::XSAccessor) Recommends: perl(Cpanel::JSON::XS) -Recommends: perl(Crypt::URandom) Recommends: perl(HTTP::XSCookies) >= 0.0.15 Recommends: perl(HTTP::XSHeaders) -Recommends: perl(Math::Random::ISAAC::XS) Recommends: perl(MooX::TypeTiny) Recommends: perl(Pod::Simple::Search) Recommends: perl(Pod::Simple::SimpleTree) @@ -126,24 +132,36 @@ %{perl_requires} %description -Dancer2 is the new generation of Dancer, the lightweight web-framework for +(If you're looking for the dancer2 command documentation via CLI, try +'perldoc -F $(which dancer2)'.) + +Dancer2 is the new generation of Dancer, the lightweight web framework for Perl. Dancer2 is a complete rewrite based on Moo. Dancer2 can optionally use XS modules for speed, but at its core remains -fatpackable (packable by App::FatPacker) so you could easily deploy Dancer2 +fatpackable (via App::FatPacker), enabling you to easily deploy Dancer2 applications on hosts that do not support custom CPAN modules. -Dancer2 is easy and fun: +Creating web applications with Dancer2 is easy and fun: + + #!/usr/bin/env perl + package HelloWorld; use Dancer2; - get '/' => sub { "Hello World" }; - dance; + + get '/' => sub { + return "Hello, world!"; + }; + + true; + + HelloWorld->to_app; This is the main module for the Dancer2 distribution. It contains logic for creating a new Dancer2 application. %prep -%autosetup -n %{cpan_name}-%{version} +%autosetup -n %{cpan_name}-%{version} -p1 find . -type f ! -path "*/t/*" ! -name "*.pl" ! -path "*/bin/*" ! -path "*/script/*" ! -path "*/scripts/*" ! -name "configure" -print0 | xargs -0 chmod 644 ++++++ Dancer2-1.1.2.tar.gz -> Dancer2-2.2.2.tar.gz ++++++ ++++ 37890 lines of diff (skipped) ++++++ README.md ++++++ ## Build Results Current state of perl in openSUSE:Factory is  The current state of perl in the devel project build (devel:languages:perl)  ++++++ _scmsync.obsinfo ++++++ mtime: 1792409280 commit: c4914527bef4a52e29df14d132cd7b7c22c0ed88a3c9dc82f45abc6e9e631838 url: https://src.opensuse.org/perl/perl-Dancer2 revision: c4914527bef4a52e29df14d132cd7b7c22c0ed88a3c9dc82f45abc6e9e631838 projectscmsync: https://src.opensuse.org/perl/_ObsPrj ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-19 13:28:00.000000000 +0200 @@ -0,0 +1 @@ +.osc
