Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs-electron for openSUSE:Factory checked in at 2024-01-18 21:52:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs-electron (Old) and /work/SRC/openSUSE:Factory/.nodejs-electron.new.16006 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs-electron" Thu Jan 18 21:52:22 2024 rev:96 rq:1139553 version:27.2.3 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs-electron/nodejs-electron.changes 2024-01-11 21:05:38.363584050 +0100 +++ /work/SRC/openSUSE:Factory/.nodejs-electron.new.16006/nodejs-electron.changes 2024-01-18 21:52:40.111168958 +0100 @@ -1,0 +2,12 @@ +Wed Jan 17 22:17:15 UTC 2024 - Bruno Pitrus <brunopit...@hotmail.com> + +- New upstream release 27.2.3 + * Security fixes for V8 (bsc#1218892): + CVE-2024-0517 CVE-2024-0518 +- Use system spirv on 15.6 +- Build using gcc13 on Leap + * drop keyboard_util-gcc12-invalid-constexpr.patch +- Drop support for 15.4 and Fedora 37 + and remove relevant vendored libraries from tarball. + +------------------------------------------------------------------- Old: ---- electron-27.2.2.tar.zst keyboard_util-gcc12-invalid-constexpr.patch New: ---- electron-27.2.3.tar.zst BETA DEBUG BEGIN: Old:- Build using gcc13 on Leap * drop keyboard_util-gcc12-invalid-constexpr.patch - Drop support for 15.4 and Fedora 37 BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs-electron.spec ++++++ --- /var/tmp/diff_new_pack.3GAnEa/_old 2024-01-18 21:52:46.871412895 +0100 +++ /var/tmp/diff_new_pack.3GAnEa/_new 2024-01-18 21:52:46.871412895 +0100 @@ -115,29 +115,25 @@ %endif -%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150500 || 0%{?fedora} %bcond_without system_crc32c %bcond_without system_dav1d %bcond_without system_highway %bcond_without system_nvctrl + +%if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150600 || 0%{?fedora} +%bcond_without system_spirv %else -%bcond_with system_crc32c -%bcond_with system_dav1d -%bcond_with system_highway -%bcond_with system_nvctrl +%bcond_with system_spirv %endif - %if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150700 || 0%{?fedora} %bcond_without harfbuzz_5 %bcond_without link_vulkan %bcond_without ffmpeg_5 -%bcond_without system_spirv %else %bcond_with harfbuzz_5 %bcond_with link_vulkan %bcond_with ffmpeg_5 -%bcond_with system_spirv %endif %if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150700 || 0%{?fedora} >= 38 @@ -240,7 +236,7 @@ Name: nodejs-electron -Version: 27.2.2 +Version: 27.2.3 Release: 0 Summary: Build cross platform desktop apps with JavaScript, HTML, and CSS License: AFL-2.0 AND Apache-2.0 AND blessing AND BSD-2-Clause AND BSD-3-Clause AND BSD-Protection AND BSD-Source-Code AND bzip2-1.0.6 AND IJG AND ISC AND LGPL-2.0-or-later AND LGPL-2.1-or-later AND MIT AND MIT-CMU AND MIT-open-group AND (MPL-1.1 OR GPL-2.0-or-later OR LGPL-2.1-or-later) AND MPL-2.0 AND OpenSSL AND SGI-B-2.0 AND SUSE-Public-Domain AND X11 @@ -362,7 +358,6 @@ Patch2040: build-without-extensions.patch Patch2041: chromium-117-blink-BUILD-mnemonic.patch Patch2042: brotli-remove-shared-dictionary.patch -Patch2043: keyboard_util-gcc12-invalid-constexpr.patch Patch2044: computed_style_base-nbsp.patch Patch2045: libxml-2.12-xmlCtxtGetLastError-const.patch @@ -659,6 +654,7 @@ %if %{with link_vulkan} BuildRequires: pkgconfig(vulkan) >= 1.3 %endif +BuildRequires: pkgconfig(wayland-protocols) BuildRequires: pkgconfig(xkbcommon) BuildRequires: pkgconfig(xshmfence) BuildRequires: pkgconfig(zlib) @@ -673,11 +669,11 @@ %endif %if %{without clang} %if 0%{?suse_version} >= 1550 || 0%{?sle_version} >= 150700 || 0%{?fedora} -BuildRequires: gcc >= 12 -BuildRequires: gcc-c++ >= 12 +BuildRequires: gcc >= 13 +BuildRequires: gcc-c++ >= 13 %else -BuildRequires: gcc12-PIE -BuildRequires: gcc12-c++ +BuildRequires: gcc13-PIE +BuildRequires: gcc13-c++ %endif %endif %if %{with pipewire} @@ -734,7 +730,6 @@ # Use stable path to source to make use of ccache %autosetup -n src -p1 - # Sanity check if macro corresponds to the actual ABI test $(grep ^node_module_version electron/build/args/all.gn | sed 's/.* = //') = %abi_version @@ -783,7 +778,7 @@ ln -svfT %{_datadir}/wayland third_party/wayland/src/protocol #mkdir -p third_party/wayland-protocols/mesa -#ln -svfT %{_datadir}/wayland-protocols third_party/wayland-protocols/src +ln -svfT %{_datadir}/wayland-protocols third_party/wayland-protocols/src #ln -svfT %{_datadir}/wayland-eglstream third_party/wayland-protocols/mesa/wayland-drm ln -svfT %{_datadir}/plasma-wayland-protocols third_party/wayland-protocols/kde/src/protocols @@ -923,11 +918,11 @@ export NM=gcc-nm export RANLIB=gcc-ranlib %else -export CC=gcc-12 -export CXX=g++-12 -export AR=gcc-ar-12 -export NM=gcc-nm-12 -export RANLIB=gcc-ranlib-12 +export CC=gcc-13 +export CXX=g++-13 +export AR=gcc-ar-13 +export NM=gcc-nm-13 +export RANLIB=gcc-ranlib-13 %endif # endif with clang ++++++ create_tarball.sh ++++++ --- /var/tmp/diff_new_pack.3GAnEa/_old 2024-01-18 21:52:47.015418092 +0100 +++ /var/tmp/diff_new_pack.3GAnEa/_new 2024-01-18 21:52:47.015418092 +0100 @@ -173,7 +173,6 @@ third_party/abseil-cpp #Leap and fc36 too old. third_party/angle # ANGLE is an integral part of chrome and is not available as a shared library. third_party/angle/src/third_party/ceval #not in any distro - third_party/angle/src/third_party/libXNVCtrl #Not in 15.4 third_party/angle/src/third_party/volk #replacement vulkan loader. Drop it when Leap has new enough libvulkan third_party/blink #Integral part of chrome third_party/boringssl #Factory has an ancient version, but upstream seems to have gave up on making it a shared library @@ -200,10 +199,8 @@ third_party/crashpad #Integral part of chrome third_party/crashpad/crashpad/third_party/lss #Derived code, not vendored dependency. third_party/crashpad/crashpad/third_party/zlib #Derived code, not vendored dependency. - third_party/crc32c #Not in Leap third_party/cros_system_api #Integral part of Chrome. Needed. third_party/d3 #javascript - third_party/dav1d #Leap and fc36 too old third_party/dawn #Integral part of chrome, Needed even if you're building chrome without webgpu third_party/dawn/third_party/gn/webgpu-cts #Integral part of chrome, Needed even if you're building chrome without webgpu third_party/devtools-frontend #Javascript code, integral part of chrome @@ -219,7 +216,6 @@ third_party/electron_node #Integral part of electron third_party/emoji-segmenter #not available as a shared library third_party/fdlibm #derived code, not vendored dep - third_party/highway #Not in 15.4 third_party/hunspell #heavily forked version third_party/iccjpeg #not in any distro third_party/inspector_protocol #integral part of chrome @@ -296,7 +292,7 @@ third_party/vulkan-deps/spirv-headers #Leap too old third_party/vulkan-deps/spirv-tools #Leap too old third_party/vulkan-deps/vulkan-headers #Leap too old. CONSIDER UNBUNDLING when all distros have new enough vulkan sdk - third_party/vulkan_memory_allocator #not in any distro + third_party/vulkan_memory_allocator #not in Factory third_party/webgpu-cts #Javascript code. Needed even if you're building chrome without webgpu third_party/webrtc #Integral part of chrome third_party/webrtc/common_audio/third_party/ooura #derived code, not vendored dep @@ -310,8 +306,7 @@ third_party/widevine #Integral part of chrome. Needed. third_party/wayland/wayland_scanner_wrapper.py #wrapper script third_party/wayland-protocols/gtk/gdk/wayland/protocol #Imagine downloading 100MB of gtk source just to get one file. - third_party/wayland-protocols/mesa #egl-wayland-devel (Fedora) / libnvidia-egl-wayland1 (Tumbleweed). 15.4 has an old version that misses the file we need. - third_party/wayland-protocols/src #pkgconfig(wayland-protocols) â 15.4 too old CONSIDER UNBUNDLING once we drop it + third_party/wayland-protocols/mesa #egl-wayland-devel (Fedora) / libnvidia-egl-wayland1 (Tumbleweed). 15.6 has an old version that misses the file we need. third_party/wayland-protocols/unstable #unknown origin. not in wayland-protocol-devel or elsewhere third_party/wuffs #not in any distro third_party/x11proto #derived code, not vendored dep