Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package agama-web-ui for openSUSE:Factory checked in at 2026-11-05 18:28:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/agama-web-ui (Old) and /work/SRC/openSUSE:Factory/.agama-web-ui.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "agama-web-ui" Thu Nov 5 18:28:37 2026 rev:56 rq:1394998 version:0 Changes: -------- --- /work/SRC/openSUSE:Factory/agama-web-ui/agama-web-ui.changes 2026-10-24 22:04:15.616681260 +0200 +++ /work/SRC/openSUSE:Factory/.agama-web-ui.new.3759290/agama-web-ui.changes 2026-11-05 18:28:51.941081387 +0100 @@ -1,0 +2,90 @@ +Wed Nov 4 09:04:37 UTC 2026 - Michal Filka <[email protected]> + +- bsc#1278291 (CVE-2026-84369), bsc#1278292 (CVE-2026-84370) + - svgo version 3.3.5 + +------------------------------------------------------------------- +Wed Nov 4 08:50:12 UTC 2026 - Ladislav Slezák <[email protected]> + +- Load the terminal component only when needed (lazy loading) + to decrease the used browser memory. + +------------------------------------------------------------------- +Tue Nov 3 18:06:14 UTC 2026 - Imobach Gonzalez Sosa <[email protected]> + +- Use "ka-GE" instead of the wrong language id "ka-KZ" + (related to gh#agama-project/agama#4178). + +------------------------------------------------------------------- +Mon Nov 2 10:36:43 UTC 2026 - Michal Filka <[email protected]> + +- bsc#1283415, bsc#1283398 (CVE-2026-102277, CVE-2026-102278) + - brace-expansion upgraded to 5.0.12 + +------------------------------------------------------------------- +Sat Oct 31 17:43:12 UTC 2026 - Michal Filka <[email protected]> + +- bsc#1277423, bsc#1278439, bsc#1278442, bsc#1280783, bsc#1286307 + (CVE-2026-110725,CVE-2026-110306,CVE-2026-110095,CVE-2026-110180, + CVE-2026-86472, CVE-2026-84394, CVE-2026-84292, CVE-2026-76172, + CVE-2026-75899, CVE-2026-75975, CVE-2026-75931) + - fast-uri upgraded to 3.1.9 + +------------------------------------------------------------------- +Fri Oct 30 17:18:10 UTC 2026 - Balsa Asanovic <[email protected]> + +- Let Tab move focus in multi-value fields, and update the helper texts + so they no longer advertise Tab for adding values (bsc#1280715, + gh#agama-project/agama#4113). + +------------------------------------------------------------------- +Fri Oct 30 09:20:02 UTC 2026 - David Díaz <[email protected]> + +- Drop the final period from the login error title + (gh#agama-project/agama#4161). + +------------------------------------------------------------------- +Thu Oct 29 19:32:20 UTC 2026 - Michal Filka <[email protected]> + +- bsc#1286292 (CVE-2026-111755) + - upgrade follow-redirects to at least 1.16.1 +- bsc#1288801 (CVE-2026-116689) + - upgrade follow-redirects to at least 1.16.2 + +------------------------------------------------------------------- +Thu Oct 29 13:00:00 UTC 2026 - Knut Anderssen <[email protected]> + +- Allow disabling the IPv4 or the IPv6 configuration of a + connection, and keep it disabled when editing a connection that + already has it (bsc#1288233, gh#agama-project/agama#3994). + +------------------------------------------------------------------- +Thu Oct 29 12:19:20 UTC 2026 - Akshat Lakhera <[email protected]> + +- Label the mode shown in the "Current selection" card when + changing the product, so it is not read as part of the product + (gh#agama-project/agama#4142). + +------------------------------------------------------------------- +Thu Oct 29 09:57:13 UTC 2026 - Michal Filka <[email protected]> + +- bsc#1286904 (CVE-2026-111756) + - upgrade follow-redirects to at least 1.16.1 + +------------------------------------------------------------------- +Tue Oct 27 12:08:59 UTC 2026 - Knut Anderssen <[email protected]> + +- Update the configured connection when connecting, disconnecting + or deleting it from the connections table, instead of sending the + state reported by the system (gh#agama-project/agama#3995). + +------------------------------------------------------------------- +Tue Oct 27 09:04:07 UTC 2026 - Michal Filka <[email protected]> + +- bsc#1287867 (CVE-2026-115897) +- bsc#1287878 (CVE-2026-115754) + - upgrade of serialize-javascript to version at least 7.1.3 +- bsc#1287340 (CVE-2026-111181) + - upgrade of body-parser to version at least 1.20.9 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ agama.obscpio ++++++ ++++ 9267 lines of diff (skipped) ++++++ agama.obsinfo ++++++ --- /var/tmp/diff_new_pack.L5zBXK/_old 2026-11-05 18:29:05.059626605 +0100 +++ /var/tmp/diff_new_pack.L5zBXK/_new 2026-11-05 18:29:05.063626771 +0100 @@ -1,5 +1,5 @@ name: agama -version: 25+3.ca3b0768b -mtime: 1792676209 -commit: ca3b0768b76685c2d200eedfa74e028a480ffd68 +version: 25+475.275dd4727 +mtime: 1793788299 +commit: 275dd4727aaca1529dc5dbffea0575202b864efc ++++++ node_modules.obscpio ++++++ Binary files old/fast-uri-3.1.7.tgz and new/fast-uri-3.1.7.tgz differ Binary files old/fast-uri-3.1.9.tgz and new/fast-uri-3.1.9.tgz differ Binary files old/follow-redirects-1.16.0.tgz and new/follow-redirects-1.16.0.tgz differ Binary files old/follow-redirects-1.16.2.tgz and new/follow-redirects-1.16.2.tgz differ Binary files old/serialize-javascript-7.1.1.tgz and new/serialize-javascript-7.1.1.tgz differ Binary files old/serialize-javascript-7.1.4.tgz and new/serialize-javascript-7.1.4.tgz differ ++++++ node_modules.spec.inc ++++++ --- /var/tmp/diff_new_pack.L5zBXK/_old 2026-11-05 18:29:06.421683123 +0100 +++ /var/tmp/diff_new_pack.L5zBXK/_new 2026-11-05 18:29:06.425683289 +0100 @@ -265,7 +265,7 @@ Source1264: https://registry.npmjs.org/events/-/events-3.3.0.tgz#/events-3.3.0.tgz Source1265: https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz#/fast-deep-equal-3.1.3.tgz Source1266: https://registry.npmjs.org/fast-sort/-/fast-sort-3.4.1.tgz#/fast-sort-3.4.1.tgz -Source1267: https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz#/fast-uri-3.1.7.tgz +Source1267: https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz#/fast-uri-3.1.9.tgz Source1268: https://registry.npmjs.org/fastest-levenshtein/-/fastest-levenshtein-1.0.16.tgz#/fastest-levenshtein-1.0.16.tgz Source1269: https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz#/fdir-6.5.0.tgz Source1270: https://registry.npmjs.org/file-selector/-/file-selector-2.1.2.tgz#/file-selector-2.1.2.tgz @@ -273,7 +273,7 @@ Source1272: https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz#/find-up-5.0.0.tgz Source1273: https://registry.npmjs.org/flat/-/flat-5.0.2.tgz#/flat-5.0.2.tgz Source1274: https://registry.npmjs.org/focus-trap/-/focus-trap-7.6.6.tgz#/focus-trap-7.6.6.tgz -Source1275: https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz#/follow-redirects-1.16.0.tgz +Source1275: https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.2.tgz#/follow-redirects-1.16.2.tgz Source1276: https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz#/form-data-4.0.6.tgz Source1277: https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz#/function-bind-1.1.2.tgz Source1278: https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz#/gensync-1.0.0-beta.2.tgz @@ -427,7 +427,7 @@ Source1426: https://registry.npmjs.org/schema-utils/-/schema-utils-4.3.3.tgz#/schema-utils-4.3.3.tgz Source1427: https://registry.npmjs.org/semver/-/semver-6.3.1.tgz#/semver-6.3.1.tgz Source1428: https://registry.npmjs.org/semver/-/semver-7.8.5.tgz#/semver-7.8.5.tgz -Source1429: https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.1.1.tgz#/serialize-javascript-7.1.1.tgz +Source1429: https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.1.4.tgz#/serialize-javascript-7.1.4.tgz Source1430: https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.7.2.tgz#/set-cookie-parser-2.7.2.tgz Source1431: https://registry.npmjs.org/shallow-clone/-/shallow-clone-3.0.1.tgz#/shallow-clone-3.0.1.tgz Source1432: https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz#/shebang-command-2.0.0.tgz ++++++ package-lock.json ++++++ --- /var/tmp/diff_new_pack.L5zBXK/_old 2026-11-05 18:29:06.464684908 +0100 +++ /var/tmp/diff_new_pack.L5zBXK/_new 2026-11-05 18:29:06.471685198 +0100 @@ -7592,9 +7592,9 @@ } }, "node_modules/body-parser": { - "version": "1.20.6", - "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.6.tgz";, - "integrity": "sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==", + "version": "1.20.9", + "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.9.tgz";, + "integrity": "sha512-FISIQxV5u91Y9gvuFq3q/tA/qTqLJn3AhRcEvyozyhJTh5OBFFtv827AdHU7Rbyct4r+Ba1/99oFa1Y3yuFsdw==", "license": "MIT", "optional": true, "dependencies": { @@ -7606,7 +7606,7 @@ "http-errors": "~2.0.1", "iconv-lite": "~0.4.24", "on-finished": "~2.4.1", - "qs": "~6.15.1", + "qs": "~6.16.0", "raw-body": "~2.5.3", "type-is": "~1.6.18", "unpipe": "~1.0.0" @@ -7646,6 +7646,23 @@ "license": "MIT", "optional": true }, + "node_modules/body-parser/node_modules/qs": { + "version": "6.16.1", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.1.tgz";, + "integrity": "sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==", + "license": "BSD-3-Clause", + "optional": true, + "dependencies": { + "es-define-property": "^1.0.1", + "side-channel": "^1.1.1" + }, + "engines": { + "node": ">=0.6" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb"; + } + }, "node_modules/bonjour-service": { "version": "1.4.4", "resolved": "https://registry.npmjs.org/bonjour-service/-/bonjour-service-1.4.4.tgz";, @@ -7665,9 +7682,9 @@ "license": "ISC" }, "node_modules/brace-expansion": { - "version": "5.0.9", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz";, - "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", + "version": "5.0.12", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz";, + "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==", "license": "MIT", "optional": true, "dependencies": { @@ -10394,9 +10411,9 @@ "license": "MIT" }, "node_modules/fast-uri": { - "version": "3.1.7", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz";, - "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==", + "version": "3.1.9", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz";, + "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==", "devOptional": true, "funding": [ { @@ -10613,9 +10630,9 @@ } }, "node_modules/follow-redirects": { - "version": "1.16.0", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz";, - "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==", + "version": "1.16.2", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.2.tgz";, + "integrity": "sha512-/kVP2U8z596Ia0gwFrwyIeo74ta5aVmSeU1FfAUMAmcEP5EP7zydmag3SLiN64NaRKef3lxsq7i/g7ltJQDGow==", "funding": [ { "type": "individual", @@ -16978,9 +16995,9 @@ "optional": true }, "node_modules/serialize-javascript": { - "version": "7.1.1", - "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.1.1.tgz";, - "integrity": "sha512-k3CMsaIvvdSwm8oLB4MXSl0wH2/cwlH7xGcnRd2DaeRmBkbzYmyT8j0tsX60DwD1eRwHTpNpH8ljKu9oUT1MeQ==", + "version": "7.1.4", + "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.1.4.tgz";, + "integrity": "sha512-FqlEuoTq/zRmA4Lg6aOqyH3lCHbUtCB0bmHCeFniX2GBdDqMJM3FwdvEhlE5Pim1dlt2FfBdVPmUNNiGhhKqpw==", "dev": true, "license": "BSD-3-Clause", "engines": {
