Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libcotp for openSUSE:Factory checked in at 2022-05-19 22:49:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libcotp (Old) and /work/SRC/openSUSE:Factory/.libcotp.new.1538 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libcotp" Thu May 19 22:49:52 2022 rev:4 rq:978115 version:1.2.6 Changes: -------- --- /work/SRC/openSUSE:Factory/libcotp/libcotp.changes 2021-12-30 15:56:14.420692468 +0100 +++ /work/SRC/openSUSE:Factory/.libcotp.new.1538/libcotp.changes 2022-05-19 22:50:26.954421728 +0200 @@ -1,0 +2,6 @@ +Thu May 19 11:42:24 UTC 2022 - Paolo Stivanin <[email protected]> + +- Update to 1.2.6: + * fix pkg-config file generation (#32) + +------------------------------------------------------------------- Old: ---- v1.2.4.tar.gz v1.2.4.tar.gz.asc New: ---- v1.2.6.tar.gz v1.2.6.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libcotp.spec ++++++ --- /var/tmp/diff_new_pack.7VcQVE/_old 2022-05-19 22:50:27.386422281 +0200 +++ /var/tmp/diff_new_pack.7VcQVE/_new 2022-05-19 22:50:27.394422291 +0200 @@ -1,7 +1,7 @@ # # spec file for package libcotp # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -21,7 +21,7 @@ %global debug_package %{nil} %endif Name: libcotp -Version: 1.2.4 +Version: 1.2.6 Release: 0 Summary: C library for generating TOTP and HOTP License: Apache-2.0 ++++++ v1.2.4.tar.gz -> v1.2.6.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libcotp-1.2.4/.circleci/build_and_tests.sh new/libcotp-1.2.6/.circleci/build_and_tests.sh --- old/libcotp-1.2.4/.circleci/build_and_tests.sh 1970-01-01 01:00:00.000000000 +0100 +++ new/libcotp-1.2.6/.circleci/build_and_tests.sh 2022-05-18 16:27:42.000000000 +0200 @@ -0,0 +1,7 @@ +#!/bin/bash + +mkdir build && cd "$_" +cmake .. -DCMAKE_INSTALL_PREFIX=/usr -DBUILD_TESTING=ON +make +make install +./tests/test_all diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libcotp-1.2.4/.circleci/build_only.sh new/libcotp-1.2.6/.circleci/build_only.sh --- old/libcotp-1.2.4/.circleci/build_only.sh 1970-01-01 01:00:00.000000000 +0100 +++ new/libcotp-1.2.6/.circleci/build_only.sh 2022-05-18 16:27:42.000000000 +0200 @@ -0,0 +1,6 @@ +#!/bin/bash + +mkdir build && cd "$_" +cmake .. -DCMAKE_INSTALL_PREFIX=/usr +make +make install diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libcotp-1.2.4/.circleci/config.yml new/libcotp-1.2.6/.circleci/config.yml --- old/libcotp-1.2.4/.circleci/config.yml 1970-01-01 01:00:00.000000000 +0100 +++ new/libcotp-1.2.6/.circleci/config.yml 2022-05-18 16:27:42.000000000 +0200 @@ -0,0 +1,37 @@ +version: 2.0 + +jobs: + debianLatestStable: + docker: + - image: debian:latest + steps: + - checkout + - run: apt update && apt -y install git gcc clang cmake libcriterion-dev libbaseencode-dev + - run: chmod +x .circleci/build_and_tests.sh + + fedoraLatestStable: + docker: + - image: fedora:latest + steps: + - checkout + - run: dnf -y update && dnf -y install git gcc cmake make libgcrypt-devel + - run: chmod +x .circleci/install_deps.sh + - run: chmod +x .circleci/build_only.sh + + archlinux: + docker: + - image: archlinux:latest + steps: + - checkout + - run: pacman -Syu --noconfirm && pacman -S --noconfirm pkg-config git gcc cmake make + - run: chmod +x .circleci/install_deps.sh + - run: chmod +x .circleci/build_only.sh + +workflows: + version: 2 + build: + jobs: + - debianLatestStable + - fedoraLatestStable + - archlinux + diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libcotp-1.2.4/.circleci/install_deps.sh new/libcotp-1.2.6/.circleci/install_deps.sh --- old/libcotp-1.2.4/.circleci/install_deps.sh 1970-01-01 01:00:00.000000000 +0100 +++ new/libcotp-1.2.6/.circleci/install_deps.sh 2022-05-18 16:27:42.000000000 +0200 @@ -0,0 +1,9 @@ +set -e + +git clone https://github.com/paolostivanin/libbaseencode.git +cd libbaseencode && mkdir build && cd "$_" + cmake .. -DCMAKE_INSTALL_PREFIX=/usr + make -j2 + make install +cd ../.. + diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libcotp-1.2.4/.github/workflows/codeql-analysis.yml new/libcotp-1.2.6/.github/workflows/codeql-analysis.yml --- old/libcotp-1.2.4/.github/workflows/codeql-analysis.yml 1970-01-01 01:00:00.000000000 +0100 +++ new/libcotp-1.2.6/.github/workflows/codeql-analysis.yml 2022-05-18 16:27:42.000000000 +0200 @@ -0,0 +1,54 @@ +name: "CodeQL" + +on: + push: + branches: [ master ] + pull_request: + # The branches below must be a subset of the branches above + branches: [ master ] + schedule: + - cron: '16 8 * * 2' + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + matrix: + language: [ 'cpp' ] + # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] + # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support + + steps: + - name: Checkout repository + uses: actions/checkout@v3 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v2 + with: + languages: ${{ matrix.language }} + + - name: Install Dependencies + run: | + sudo apt update && DEBIAN_FRONTEND=noninteractive sudo apt -y install git gcc cmake libgcrypt20-dev + git clone https://github.com/paolostivanin/libbaseencode ./be_dir && cd be_dir + mkdir build && cd build + cmake -DCMAKE_INSTALL_PREFIX=/usr .. + make + sudo make install + cd ../.. + + - name: Build + run: | + mkdir build && cd $_ + cmake .. + make + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v2 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libcotp-1.2.4/CMakeLists.txt new/libcotp-1.2.6/CMakeLists.txt --- old/libcotp-1.2.4/CMakeLists.txt 2021-12-29 09:35:40.000000000 +0100 +++ new/libcotp-1.2.6/CMakeLists.txt 2022-05-18 16:27:42.000000000 +0200 @@ -3,6 +3,8 @@ set(CMAKE_MODULE_PATH ${CMAKE_MODULE_PATH} ${CMAKE_CURRENT_SOURCE_DIR}/cmake) +include(GNUInstallDirs) + find_package(PkgConfig REQUIRED) find_package(Gcrypt 1.6.0 REQUIRED) pkg_check_modules(BASEENCODE REQUIRED baseencode>=1.0.5) @@ -17,7 +19,7 @@ # set up versioning. set(BUILD_MAJOR "1") set(BUILD_MINOR "2") -set(BUILD_VERSION "4") +set(BUILD_VERSION "6") set(BUILD_VERSION ${BUILD_MAJOR}.${BUILD_MINOR}.${BUILD_VERSION}) set(CMAKE_C_STANDARD 11) @@ -34,21 +36,34 @@ set_target_properties(cotp PROPERTIES VERSION ${BUILD_VERSION} SOVERSION ${BUILD_MAJOR}${BUILD_MINOR}) -include(GNUInstallDirs) -set(LIB_INSTALL_DIR "${CMAKE_INSTALL_LIBDIR}") # "lib" or "lib64" +set(COTP_LIB_DIR "${CMAKE_INSTALL_LIBDIR}") +set(COTP_INC_DIR "${CMAKE_INSTALL_INCLUDEDIR}") install( TARGETS cotp - ARCHIVE DESTINATION ${LIB_INSTALL_DIR} - LIBRARY DESTINATION ${LIB_INSTALL_DIR} + ARCHIVE DESTINATION ${COTP_LIB_DIR} + LIBRARY DESTINATION ${COTP_LIB_DIR} COMPONENT library ) install( FILES ${COTP_HEADERS} - DESTINATION include + DESTINATION ${COTP_INC_DIR} ) +# Allow adding prefix if CMAKE_INSTALL_INCLUDEDIR not absolute. +if(IS_ABSOLUTE "${CMAKE_INSTALL_INCLUDEDIR}") + set(PKGCONFIG_TARGET_INCLUDES "${CMAKE_INSTALL_INCLUDEDIR}") +else() + set(PKGCONFIG_TARGET_INCLUDES "\${prefix}/${CMAKE_INSTALL_INCLUDEDIR}") +endif() +# Allow adding prefix if CMAKE_INSTALL_LIBDIR not absolute. +if(IS_ABSOLUTE "${CMAKE_INSTALL_LIBDIR}") + set(PKGCONFIG_TARGET_LIBS "${CMAKE_INSTALL_LIBDIR}") +else() + set(PKGCONFIG_TARGET_LIBS "\${exec_prefix}/${CMAKE_INSTALL_LIBDIR}") +endif() + configure_file("cotp.pc.in" "cotp.pc" @ONLY) install(FILES "${CMAKE_CURRENT_BINARY_DIR}/cotp.pc" DESTINATION ${CMAKE_INSTALL_LIBDIR}/pkgconfig/) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libcotp-1.2.4/SECURITY.md new/libcotp-1.2.6/SECURITY.md --- old/libcotp-1.2.4/SECURITY.md 1970-01-01 01:00:00.000000000 +0100 +++ new/libcotp-1.2.6/SECURITY.md 2022-05-18 16:27:42.000000000 +0200 @@ -0,0 +1,20 @@ +# Security Policy + +## Supported Versions + +The following list describes whether a version is eligible or not for security updates. + +| Version | Supported | EOL | +| ------- | ------------------ |-------------| +| 1.2.x | :heavy_check_mark: | - | +| 1.1.x | :x: | 31-Dec-2021 | +| 1.0.x | :x: | 31-Dec-2021 | + +## Reporting a Vulnerability + +Should you find a vulnerability, please report it privately to me via [e-mail](mailto:[email protected]). +The following is the workflow: +- security issue is found, an e-mail is sent to me +- within 24 hours I will reply to your e-mail with some info like, for example, whether it actually is a security issue and how serious it is +- within 7 days I will develop and ship a fix +- once the update is out I will open a [security advisory](https://github.com/paolostivanin/OTPClient/security/advisories) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libcotp-1.2.4/cotp.pc.in new/libcotp-1.2.6/cotp.pc.in --- old/libcotp-1.2.4/cotp.pc.in 2021-12-29 09:35:40.000000000 +0100 +++ new/libcotp-1.2.6/cotp.pc.in 2022-05-18 16:27:42.000000000 +0200 @@ -1,10 +1,11 @@ prefix=@CMAKE_INSTALL_PREFIX@ exec_prefix=${prefix} -libdir=${prefix}/@CMAKE_INSTALL_LIBDIR@ -includedir=${prefix}/@CMAKE_INSTALL_INCLUDEDIR@ +libdir=@PKGCONFIG_TARGET_LIBS@ +includedir=@PKGCONFIG_TARGET_INCLUDES@ Name: libcotp Description: C library that generates TOTP and HOTP Version: @BUILD_VERSION@ +URL: URL: https://github.com/paolostivanin/libcotp Libs: -L${libdir} -lcotp Cflags: -I${includedir} ++++++ v1.2.4.tar.gz.asc -> v1.2.6.tar.gz.asc ++++++
