Hi Mark!
For glib, IIRC, we updated package to latest version and guix lint didn't show any more CVEs. Also, I think the change was added as part of the cosmetic change commit, to cleanly apply succeeding patches.For cairo, let me get back to you.
Okay, I was able to retrace. When Leo and I were working outside savannah, there was master --> core-updates merge. Leo made these changes when he committed to his repo (https://logs.guix.gnu.org/guix/2021-03-26.log#000811), from which I pulled then format-patched and sent it to guix-patches (https://issues.guix.gnu.org/42958#64). From guix-patches it was then pushed to core-updates (https://issues.guix.gnu.org/42958#67), from where I cherry-picked into wip-gnome.
It seems Leo made these for ungrafting. I not familiar with ungrafting, so I have to let Leo explain.
P.SThe commit title for these commits were initially "Ungraft and make some cosmetic changes.", I must have screwed up the tile while moving the patches. For that my apologies.
[1] https://git.sr.ht/~lle-bout/guix/commit/6477daa338fbf1c9edacfc3690aca77cacfe0008 [2] https://git.sr.ht/~lle-bout/guix/commit/a045a48dd961f0c5c3d536dcc3fd21d9c08d2d50
Regards, RG.
OpenPGP_signature
Description: OpenPGP digital signature
