Bug#927716: [Pkg-javascript-devel] Bug#927716: CVE-2018-1109

2019-04-26 Thread Xavier
Le 26/04/2019 à 19:40, Xavier a écrit : > [...] > Hello, > > The regex that causes CVE-2018-1109 was introduced in upstream version > 2.2.0, commit dcc1acab [1]. So Buster node-braces seems not concerned by > this CVE. > > https://snyk.io/vuln/npm:braces:20180219 extract

Bug#927959: unblock: node-fresh/0.2.0-2

2019-04-26 Thread Xavier
Le 26/04/2019 à 17:43, Xavier a écrit : > Le 26/04/2019 à 17:41, Xavier a écrit : >> Le 25/04/2019 à 15:35, Xavier Guimard a écrit : >>> Package: release.debian.org >>> Severity: normal >>> User: release.debian@packages.debian.org >>> Usertags: unbl

Bug#928482: salsa: add feature to request membership

2019-05-05 Thread Xavier
Le 05/05/2019 à 21:41, Dmitry Bogatov a écrit : > > Package: devscripts > Version: 2.19.4 > Severity: wishlist > > Dear Maintainer, > > please make it possible to request membership in salsa team with > salsa(1) command line tool. Hello, work is ready

Bug#928645: [Pkg-javascript-devel] Bug#928645: RFI: replacement of touch module with fs

2019-05-08 Thread Xavier
Le 08/05/2019 à 10:49, Ritesh Raj Sarraf a écrit : > Package: node-lockfile > Version: 1.0.4 > Severity: normal > > Hi, > > This is mostly about trying to determine the reason for the change. > I noticed that in patch `remove-touch.patch`, the requirement for `touch` > module is worked around by

Bug#929611: Update

2019-06-26 Thread Xavier
Hi all, I updated my debdiff due to a little security hole discovered in lemonldap-ng 1.9.x Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index a1fe37b..e1e20aa 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +lemonldap-ng (1.9.7-3+deb9u2) stretch; urgency

Bug#931790: [Pkg-javascript-devel] Bug#931790: rollup test will also need to use node-rollup-plugin-node-resolve

2019-07-10 Thread Xavier
Le 10/07/2019 à 14:40, Pirate Praveen a écrit : > Package: pkg-js-autopkgtest > version: 0.8 > severity: serious > > autopkgtest_rollup_src.js → autopkgtest_rollup_dest.js... > (!) Generated an empty bundle > (!) Unresolved dependencies >

Bug#930917: Include import test like require test when package.json#module is present

2019-07-09 Thread Xavier
Hello, pkg-js-autopkgtest launches 2 tests: - a `node -e 'require("package")' - upstream tests on installed files is it enough ?

Bug#931714: node-request-promise: autopkgtest fails

2019-07-09 Thread Xavier
Control: severity -1 grave Le 09/07/2019 à 16:16, Xavier Guimard a écrit : > Package: node-request-promise > Version: 4.2.4-1 > Severity: important > > Both autopkgtest tests fail with the following message: > > 8< > autopkgte

Bug#931712: node-duplexer3 provides node-duplexer2 but is not usable

2019-07-09 Thread Xavier
After more search, the problem is that if /usr/lib/nodejs/duplexer2 isn't cleaned by dpkg, the link isn't created and the /usr/lib/nodejs/duplexer2 stays empty.

Bug#931379: => operator becomes = > thus creating syntax errors

2019-07-03 Thread Xavier
; // the filename you want > a.download = 'z.html'; > document.body.appendChild(a); > a.click(); > window.URL.revokeObjectURL(url); > alert('your file has downloaded!'); > }). > catch(() = >alert('oh no!')); Hello, could you test my patch [1] ? Cheers, Xavier [1]:

Bug#921952: Time to close this ?

2019-06-30 Thread Xavier
Hi all, libsass has been updated in testing. I think it is time to close (or at least decrease) this RC bug. Cheers, Xavier

Bug#927378: stretch-pu: package node-superagent/0.20.0+dfsg-1+deb9u1

2019-04-22 Thread Xavier
Le 22/04/2019 à 20:15, Paul Gevers a écrit : > Hi Xavier, > > On Thu, 18 Apr 2019 20:44:01 +0200 Xavier Guimard wrote: >> I updated node-superagent for Buster. Now I would like to propose the >> security fix for stretch. This fixes CVE-2017-16129 (ZIP bomb attacks). > &g

Bug#927716: [Pkg-javascript-devel] Bug#927716: CVE-2018-1109

2019-04-22 Thread Xavier
Le 21/04/2019 à 22:33, Moritz Muehlenhoff a écrit : > Package: node-braces > Severity: important > Tags: security > > Please see https://snyk.io/vuln/npm:braces:20180219 > > Patch: > https://github.com/micromatch/braces/commit/abdafb0cae1e0c00f184abbadc692f4eaa98f451 > > Cheers, >

Bug#927699: unblock: node-mixin-deep/1.1.3-3

2019-04-22 Thread Xavier
Control: reopen -1 Hello, node-mixin-deep/1.1.3-3 seems not unblocked (perhaps did you unblock node-mixin-deep/1.1.3-2 ?) Cheers, Xavier

Bug#927716: [Pkg-javascript-devel] Bug#927716: CVE-2018-1109

2019-04-22 Thread Xavier
Le 21/04/2019 à 22:33, Moritz Muehlenhoff a écrit : > Package: node-braces > Severity: important > Tags: security > > Please see https://snyk.io/vuln/npm:braces:20180219 > > Patch: > https://github.com/micromatch/braces/commit/abdafb0cae1e0c00f184abbadc692f4eaa98f451 > > Cheers, >

Bug#927378: stretch-pu: package node-superagent/0.20.0+dfsg-1+deb9u1

2019-04-22 Thread Xavier
Le 23/04/2019 à 07:02, Adam D. Barratt a écrit : > On Mon, 2019-04-22 at 23:17 +0200, Xavier wrote: >> Le 22/04/2019 à 20:15, Paul Gevers a écrit : > [...] >>> I think your patch seems to be invalid in stretch. When I ran the >>> autopkgtests in stretch I see the

Bug#909480: Feersum FTBFS

2019-04-10 Thread Xavier
Le 10/04/2019 à 15:38, Santiago Vila a écrit : > affects 909480 src:feersum > thanks > > Hello Xavier. > > I almost report this again because we forgot to add the affects. Fixed that > now. > > The failure rate in my autobuilders for feersum is still extremely hi

Bug#909480: Feersum FTBFS

2019-04-10 Thread Xavier
Le 10/04/2019 à 20:55, Santiago Vila a écrit : >> could you add my ssh-key and give me the server name? > > Done. Please try: > > ssh xavier@xxx > sbuild -d buster feersum > > [ You can also try "taskset --cpu-list 0 dpkg-buildpackage" in your &

Bug#927716: [Pkg-javascript-devel] Bug#927716: Bug#927716: CVE-2018-1109

2019-04-25 Thread Xavier
Control: tags -1 + moreinfo Le 22/04/2019 à 07:38, Xavier a écrit : > Le 21/04/2019 à 22:33, Moritz Muehlenhoff a écrit : >> Package: node-braces >> Severity: important >> Tags: security >> >> Please see https://snyk.io/vuln/npm:braces:20180219 >> >> P

Bug#927202: unblock: node-url-parse/1.2.0-2

2019-04-16 Thread Xavier
Le 16/04/2019 à 10:36, Xavier Guimard a écrit : > ... > unblock node-url-parse/1.2.0-2 NB: I reverted debhelper update (back to 9) but I omitted to update debian/changelog

Bug#927864: uscan: don't fail on first error when using multiple watch files

2019-04-24 Thread Xavier
Control: notfound -1 2.18.5 Control: found -1 2.19.4 Le 24/04/2019 à 11:31, Xavier Guimard a écrit : > Package: devscripts > Version: 2.19.4 > Severity: normal > Tags: pending > User: devscri...@package.debian.org > Usertags: uscan > > When parsing multiple watch

Bug#927959: unblock: node-fresh/0.2.0-2

2019-04-26 Thread Xavier
Le 26/04/2019 à 17:41, Xavier a écrit : > Le 25/04/2019 à 15:35, Xavier Guimard a écrit : >> Package: release.debian.org >> Severity: normal >> User: release.debian@packages.debian.org >> Usertags: unblock >> >> Please unblock package node-fresh >&

Bug#927959: unblock: node-fresh/0.2.0-2

2019-04-26 Thread Xavier
Le 25/04/2019 à 15:35, Xavier Guimard a écrit : > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: unblock > > Please unblock package node-fresh > > Hi all, > > node-fresh is vulnerable to CVE-2017-16119 (#9

Bug#929611: CVE-2019-13031

2019-06-29 Thread Xavier
Hi all, my previous debdiff fixes CVE-2019-13031 (#931117). I'll update debian/changelog if you agree with this update

Bug#933847: [Pkg-javascript-devel] Bug#933847: pkg-js-tools should exclude .eslintrc* in any directory

2019-08-04 Thread Xavier
Le 04/08/2019 à 13:25, Pirate Praveen a écrit : > Package: pkg-js-tools > version: 0.8.9 > severity: important > > Example packages: node-ajv, node-webpack > > Currently added an override to remove these. Logically this files are removed except if they are included in a debian/nodejs/**/files

Bug#933847: [Pkg-javascript-devel] Bug#933847: pkg-js-tools should exclude .eslintrc* in any directory

2019-08-04 Thread Xavier
Le 04/08/2019 à 13:25, Pirate Praveen a écrit : > Package: pkg-js-tools > version: 0.8.9 > severity: important > > Example packages: node-ajv, node-webpack > > Currently added an override to remove these. Fixed in 0.8.10, to be verified

Bug#933862: [Pkg-javascript-devel] Bug#933862: nodepath does not work with grunt plugins

2019-08-04 Thread Xavier
Le 04/08/2019 à 16:07, Xavier a écrit : > Le 04/08/2019 à 15:59, Pirate Praveen a écrit : >> Package: pkg-js-tools >> version: 0.8.10 >> >> Example package, node-handlebars >> >> ln -s `nodepath grunt-webpack` node_modules >> intern

Bug#933862: [Pkg-javascript-devel] Bug#933862: nodepath does not work with grunt plugins

2019-08-04 Thread Xavier
Le 04/08/2019 à 15:59, Pirate Praveen a écrit : > Package: pkg-js-tools > version: 0.8.10 > > Example package, node-handlebars > > ln -s `nodepath grunt-webpack` node_modules > internal/modules/cjs/loader.js:583 >     throw err; >     ^ > > Error: Cannot find module 'grunt-webpack' >     at

Bug#935016: pkg-js-tools: An unannounced change in "debhelper" breaks pkg-js-tools

2019-08-18 Thread Xavier
Le 18/08/2019 à 08:08, Niels Thykier a écrit : > Control: tags -1 moreinfo > > On Sun, 18 Aug 2019 07:55:59 +0200 Xavier Guimard wrote: >> Package: pkg-js-tools >> Version: 0.9.5 >> Severity: grave >> Justification: renders package unusable >> >>

Bug#935016: [Pkg-javascript-devel] Bug#935016: pkg-js-tools: An unannounced change in "debhelper" breaks pkg-js-tools

2019-08-18 Thread Xavier
Le 18/08/2019 à 08:29, Niels Thykier a écrit : > Control: reassign -1 debhelper > Control: affects -1 pkg-js-tools > > Xavier: >> Le 18/08/2019 à 08:15, Xavier a écrit : >>> [...] >>> >>> Works fine until debhelper 12.5. Then dh returns: >>> &

Bug#935016: [Pkg-javascript-devel] Bug#935016: pkg-js-tools: An unannounced change in "debhelper" breaks pkg-js-tools

2019-08-18 Thread Xavier
Le 18/08/2019 à 08:15, Xavier a écrit : > Le 18/08/2019 à 08:08, Niels Thykier a écrit : >> Control: tags -1 moreinfo >> >> On Sun, 18 Aug 2019 07:55:59 +0200 Xavier Guimard wrote: >>> Package: pkg-js-tools >>> Version: 0.9.5 >>> Severity: g

Bug#934640: apache2: fails to install, a2enconf missing

2019-08-12 Thread Xavier
ian/* during build unecessarily and makes finding errors/debugging > build things a tad more ugly. > > > Therefore, please consider using override_dh_link_indep and pass '-i' > again to dh_link, like my original patch: Hi, when using "override_dh_link_indep", jdupes is launched before apache2-doc is built, then nothing is cleaned in apache2-doc. That's why I modified your patch Cheers, Xavier

Bug#934640: apache2: fails to install, a2enconf missing

2019-08-12 Thread Xavier
Le 12/08/2019 à 22:33, Daniel Baumann a écrit : > Package: apache2 > Version: 2.4.39-1 > Severity: serious > > Hi, > > thank you for uploading the new apache version, however, the package > fails to install: > > ---snip--- > [...] > Enabling module env. > Enabling module mime. > Enabling module

Bug#902931: ITP: libanyevent-websocket-client-perl -- AnyEvent::WebSocket::Perl is a WebSockets client for Perl AnyEvent

2019-08-13 Thread Xavier
Hi, libanyevent-websocket-client-perl is ready in https://salsa.debian.org/perl-team/modules/packages/libanyevent-websocket-client-perl (not pushed) and new dependencies are already pushed to new queue. Cheers, Xavier

Bug#934456: [Pkg-javascript-devel] Bug#934456: further automation ideas for add-node-component

2019-08-11 Thread Xavier
Le 11/08/2019 à 10:52, Pirate Praveen a écrit : > package: pkg-js-tools > > version: 0.8.14 > > severity: wishlist > > > I hope we can add -u (uscan), -s (source), -i (import) options for uscan > -dd, dpkg-source -b . and (quilt pop -a && rm -rf .pc) gbp import-dsc > --pristine-tar +

Bug#934456: [Pkg-javascript-devel] Bug#934456: further automation ideas for add-node-component

2019-08-11 Thread Xavier
Le 11/08/2019 à 12:08, Pirate Praveen a écrit : > On 11/08/19 3:30 pm, Xavier wrote: >> Then: >> * -d (download) launches uscan -dd >> * -s (source) launches uscan + dpkg-source -b . and (quilt pop -a && >> rm -rf .pc) >> * -i (import)

Bug#908948: create an option to add dependencies as components like in node-tar

2019-08-11 Thread Xavier
Hi, pkg-js-tools 0.8.14 adds a "add-node-component" command which updates both gbp.conf and debian/watch Usage: $ add-node-component foo $ add-node-component foo bar $ add-node-component -g foo $ add-node-component -g foo bar Option "-g" tags component as "group" instead of "ignore"

Bug#934456: [Pkg-javascript-devel] Bug#934456: further automation ideas for add-node-component

2019-08-11 Thread Xavier
Le 11/08/2019 à 12:08, Pirate Praveen a écrit : > On 11/08/19 3:30 pm, Xavier wrote: >> Then: >> * -d (download) launches uscan -dd >> * -s (source) launches uscan + dpkg-source -b . and (quilt pop -a && >> rm -rf .pc) >> * -i (import)

Bug#934712: node-mysql: CVE-2019-14939 - Issue closed uptream without changes

2019-08-19 Thread Xavier
Control: tags -1 - fixed-upstream Control: tags -1 + moreinfo Hi all, remote issue[1] was closed without any change in a "locked and limited to collaborators conversation" Title changed from "LOAD DATA LOCAL INFILE option shouldn't be open by default." to "Question" Mitre issue isn't updated

Bug#933868: grunt should look for tasks in /usr/share/nodejs as well

2019-08-13 Thread Xavier
Control: severity -1 normal Decreasing severity since no stable package installs something in /usr/share/nodejs (apt-file search /usr/share/nodejs returns nothing). Bug exists only for backports and can be workaround using a grunt backport.

Bug#935379: [Pkg-javascript-devel] Bug#935379: pkg-js-tools: add Depends on grunt

2019-08-22 Thread Xavier
Control: severity -1 wishlist Control: tags -1 + wontfix Le 22/08/2019 à 07:58, mer...@debian.org a écrit : > On 2019-08-22 08:41, Xavier wrote: >> Hi, sorry but I don't understand this issue. pkg-js-tools has already a >> grunt auto_build > > Indeed, but this is not the i

Bug#935379: [Pkg-javascript-devel] Bug#935379: pkg-js-tools: add Depends on grunt

2019-08-21 Thread Xavier
Le 22/08/2019 à 07:30, mer...@debian.org a écrit : > Package: pkg-js-tools > Version: 0.9.7 > > Hello, > > nodejs buildsystem uses grunt, thus pkg-js-tools should pull in grunt. Hi, sorry but I don't understand this issue. pkg-js-tools has already a grunt auto_build

Bug#910368: apache2: Apache does not start reliably after reboot

2019-08-22 Thread Xavier
Le 22/08/2019 à 17:57, Xavier a écrit : > Le 22/08/2019 à 17:38, Marc Dequènes (duck) a écrit : >> Quack, >> >> I also hit this problem recently on Buster. I also do have specific >> Listen directives on this machine but all my IPs (4 and 6) are >> statically d

Bug#932956: ITP: node-node-sass -- Wrapper around libsass

2019-08-25 Thread Xavier
modules are listed in debian/nodejs/submodules). Other little components embedded and installed: - async-foreach - gaze - get-stdin - js-base64 - sass-graph - scss-tokenizer - stdout-stream - true-case-path Cheers, Xavier

Bug#935949: devscripts: uscan git shallow mode: tags with slashes not supported

2019-08-28 Thread Xavier
Control: tags -1 + pending Hi, thanks for this report, your patch seems to have no side effects, then I included it in MR !158. Cheers, Xavier

Bug#935251: pkg-js-tools: add Depends on nodejs

2019-08-21 Thread Xavier
oing to push that in 0.9.7. NB: for pkg-js-autopkgtest, this will be fixed in next autodep8 release: https://salsa.debian.org/ci-team/autodep8/merge_requests/15 Cheers, Xavier

Bug#902062: node-bunyan status

2019-08-21 Thread Xavier
Le 21/08/2019 à 10:47, mer...@debian.org a écrit : > Hello, > > What is the current status of node-bunyan? Are there any blockers > keeping it from being uploaded? > > Best, > Andrius Hi, no real reason, node-bunyan is needed for node-ldapjs which is not ready. It requires also

Bug#935970: stretch-pu: package node-fstream/1.0.10-1+deb9u1

2019-09-01 Thread Xavier
Control: tags -1 - moreinfo Le 01/09/2019 à 12:38, Adam D. Barratt a écrit : > node-fstream is vulnerable to Arbitrary File Overwrite (#931408, > CVE-2019-13173). This little patch fixes the problem. Sorry, I forgot to push it. Done (see #939166)

Bug#935301: [Pkg-javascript-devel] Bug#935301: pkg-js-tools: Gruntfile.coffee is an alias of Gruntfile.js

2019-08-21 Thread Xavier
Le 21/08/2019 à 15:49, mer...@debian.org a écrit : > On 2019-08-21 15:50, Xavier wrote: >> thanks for your reports! A a workaround, you can set "grunt" in >> debian/nodejs/build. If you are doing more test, I can wait to push next >> pkg-js-tools with your patch

Bug#935301: [Pkg-javascript-devel] Bug#935301: pkg-js-tools: Gruntfile.coffee is an alias of Gruntfile.js

2019-08-21 Thread Xavier
file.js'  => ['grunt'] ], > +    [ 'Gruntfile.coffee'  => ['grunt'] ], >   > #[ 'tsconfig.json' => ['tsc'] ], > #[ 'gulpfile.js' => ['gulp'] ], > > Best, > Andrius Hi, thanks for your reports! A a workaround, you can set "grunt" in debian/nodejs/build. If you are doing more test, I can wait to push next pkg-js-tools with your patches Cheers, Xavier

Bug#902062: node-bunyan status

2019-08-21 Thread Xavier
Le 21/08/2019 à 11:03, mer...@debian.org a écrit : > Hi, > > On 2019-08-21 11:55, Xavier wrote: >> no real reason, node-bunyan is needed for node-ldapjs which is not >> ready. It requires also node-dtrace-provider and node-vasync. Do you >> need it for anot

Bug#935824: [Pkg-javascript-devel] Bug#935824: add an option to choose git tarballs instead of npm registry tarballs in add-node-components

2019-08-26 Thread Xavier
to use git tags, we may have an outdated version of component. That's why I choose this algorithm. Cheers, Xavier

Bug#935907: lintian: Build only needed test packages on partial tests

2019-08-27 Thread Xavier
Le 27/08/2019 à 16:54, Chris Lamb a écrit : > Hi Xavier, > >> an idea to build only needed test packages (and rebuild only needed >> ones): use a Makefile to detect changes in t/tags/checks. > > I suspect this isn't enough given for production caching in that these &g

Bug#939436: [Pkg-javascript-devel] Bug#939436: node-js-beautify: does not start: 'config-chain' not found

2019-09-05 Thread Xavier
Control: tags -1 + moreinfo Le 05/09/2019 à 00:00, Johannes Deutsch a écrit : > Package: node-js-beautify > Version: 1.7.5+repack-1 > Severity: grave > Justification: renders package unusable > > Dear Maintainer, > > after installing css-beautify refuses to run with the following error: > > >

Bug#940082: lintian: false positive pkg-js-autopkgtest-test-is-empty

2019-09-12 Thread Xavier
Thanks for your report! Fixed in https://salsa.debian.org/lintian/lintian/merge_requests/256 Note: your shebang will be ignored: pkg-js-tools uses "sh -e" to launch the test

Bug#940511: [Pkg-javascript-devel] Bug#940511: yarnpkg: Package symlink yarn -> yarnpkg

2019-09-16 Thread Xavier
/yarn file given by cmdtest. cmdtest has a better "popcon" than yarnpkg, that's why we won't change this for now. Cheers, Xavier

Bug#939605: Support lerna multiple packages

2019-09-09 Thread Xavier
Hi, how can plg-js know which is the main package here ?

Bug#940648: marked as done (Do not install bench dir)

2019-09-18 Thread Xavier
Control: reopen -1 Only bench*.js files are ignored, I miss to ignore bench dir...

Bug#933251: [Pkg-javascript-devel] Bug#933251: DEB_BUILD_PROFILES=nocheck is ignored by pkg-js-tools

2019-07-28 Thread Xavier
Le 28/07/2019 à 09:17, Pirate Praveen a écrit : > Package: pkg-js-tools > Version: 0.8.2 > Severity: important > > DEB_BUILD_OPTIONS=nocheck works, but both should be supported. Build > options don't filter build dependencies so we can't use it when circular > test only dependencies prevent

Bug#933194: Automate build commands from package.json gradually, one build tool at a time

2019-07-28 Thread Xavier
Hello, I'll start doing this when pkg-js-tools 0.8.* will be in unstable to be able to do some test in experimental Cheers, Xavier

Bug#933254: [Pkg-javascript-devel] Bug#933254: Auto detection of components is broken when used in webpack

2019-07-28 Thread Xavier
Le 28/07/2019 à 10:01, Pirate Praveen a écrit : > Package: pkg-js-tools > Version: 0.8.2 > Severity: grave > > Reproducible in node-webpack master. > > dh_auto_configure --buildsystem=nodejs > mkdir node_modules mkdir webpack-cli/node_modules > ln -s ../eslint-scope node_modules/eslint-scope >

Bug#933488: [Pkg-javascript-devel] Bug#933488: seems node-uglifyjs-webpack is installing to both /usr/lib and /usr/share

2019-07-31 Thread Xavier
Le 31/07/2019 à 10:02, Pirate Praveen a écrit : > $ apt-file list node-uglifyjs-webpack-plugin > node-uglifyjs-webpack-plugin: > /usr/lib/nodejs/uglifyjs-webpack-plugin/dist/index.js > node-uglifyjs-webpack-plugin: > /usr/lib/nodejs/uglifyjs-webpack-plugin/lib/post_install.js >

Bug#931714: Not fixed

2019-08-07 Thread Xavier
Control: reopen -1 Adding node-request in recommended dependencies is not enough: package is unusable without it

Bug#869626: node-ws: Please update to upstream version 3.0.0

2019-08-07 Thread Xavier
Le 07/08/2019 à 07:53, Ying-Chun Liu (PaulLiu) a écrit : > Hi Jérémy, > > > Seems I still need to update this package to 3.0.0. > > Do you mind if I do the NMU ?? > > > BTW, upgrade to 3.0.0 means we have to also package wscat. > > /usr/bin/wscat is provided in node-ws 1.1.0 but now it is a

Bug#934100: /usr/share/lintian/checks/pkg-perl/vcs.desc of pkg-perl-tools breaks lintian if LINTIAN_PROFILE=pkg-perl is set in .lintianrc

2019-08-07 Thread Xavier
Hi, fixed in pkg-js-tools 0.8.12. I renamed also my tags to avoid install conflicts with pkg-perl-tools

Bug#934141: jsbeautifier and node-js-beautify should provide alternatives

2019-08-07 Thread Xavier
Le 07/08/2019 à 14:56, Xavier Guimard a écrit : > Package: jsbeautifier > Version: 1.6.4-7 > Severity: normal > > Hi all, > > both jsbeautifier and node-js-beautify come from the same upstream > source, the first provides js-beautify and the second html-beautify and &g

Bug#933540: [Pkg-javascript-devel] Bug#933540: pkg-js-tools auto install does not work with multiple binary packages

2019-07-31 Thread Xavier
Le 31/07/2019 à 13:52, Pirate Praveen a écrit : > Package: pkg-js-tools > Version: 0.8.6 > Severity: wishlist > > I was trying to pkg-js-tools auto install option with > node-fuzzaldrin-plus but it did not work as it had libjs-fuzzaldrin-plus > also as a binary package. The files got copied to

Bug#933540: [Pkg-javascript-devel] Bug#933540: Bug#933540: pkg-js-tools auto install does not work with multiple binary packages

2019-07-31 Thread Xavier
Le 31/07/2019 à 20:15, Xavier a écrit : > Le 31/07/2019 à 13:52, Pirate Praveen a écrit : >> Package: pkg-js-tools >> Version: 0.8.6 >> Severity: wishlist >> >> I was trying to pkg-js-tools auto install option with >> node-fuzzaldrin-plus but it did not work

Bug#933124: [Pkg-javascript-devel] Bug#933124: node-tar: build-depends on pkg-components that won't be in Bullseye unless it finds a new upstream maintainer

2019-07-27 Thread Xavier
der taking over its maintenance > upstream. > > Thanks in advance! > > Cheers, Package node-tar is ready in salsa.d.o. It uses pkg-js-tools 0.8.2 (experimental) instead of pkg-components to automatically install components. Please review and comment ;-) Cheers, Xavier

Bug#933187: [Pkg-javascript-devel] Bug#933187: Make it easy to embed new modules

2019-07-27 Thread Xavier
Le 27/07/2019 à 14:08, Pirate Praveen a écrit : > Package: npm2deb > Version: 0.3.0-1 > Severity: wishlist > > Currently embedding a module involves updating watch, gbp.conf. > > It'd be nice to have "npm2deb embed module@version" option to automate > this. Watch file should lock it to major

Bug#934144: Bad fix

2019-08-09 Thread Xavier
Control: repoen -1 .desc files were omitted in 0.8.13 upload

Bug#931177: Unable to reproduce, did I missed something ?

2019-07-20 Thread Xavier
Hello, I patched your debian/copyright: diff --git a/debian/copyright b/debian/copyright index de906f3..fe559d4 100644 --- a/debian/copyright +++ b/debian/copyright @@ -1,9 +1,10 @@ Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: lodash

Bug#932500: [Pkg-javascript-devel] Bug#932500: vulnerability: prototype pollution

2019-07-20 Thread Xavier
212 > https://github.com/jonschlinkert/mixin-deep/issues/6 > > Please upgrade to either 1.3.2 or 2.0.1. > > Thanks, Paolo Hello, here is a proposed fix. Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index 17cb287..74f9154 100644 --- a/debian/changelog +++ b/debian/cha

Bug#932500: [Pkg-javascript-devel] Bug#932500: vulnerability: prototype pollution

2019-07-20 Thread Xavier
Le 20/07/2019 à 22:23, Salvatore Bonaccorso a écrit : > Hi Xavier, > > On Sat, Jul 20, 2019 at 05:44:05PM +0200, Xavier wrote: >> Le 20/07/2019 à 06:32, Paolo Greppi a écrit : >>> Package: node-mixin-deep >>> Version: 1.1.3-3 >>> Severity: important &

Bug#932500: [Pkg-javascript-devel] Bug#932500: vulnerability: prototype pollution

2019-07-20 Thread Xavier
Le 20/07/2019 à 06:32, Paolo Greppi a écrit : > Package: node-mixin-deep > Version: 1.1.3-3 > Severity: important > > Dear Maintainer, > > node-mixin-deep 1.1.3-3 is affected by a prototype pollution vulnerability: > https://snyk.io/vuln/SNYK-JS-MIXINDEEP-450212 >

Bug#927254: closed by Xavier Guimard (Bug#927254: fixed in vue-router.js 3.0.7+ds-1)

2019-07-18 Thread Xavier
ter package: >> >> #927254: libjs-vue-router: ships node module instead of browser one >> >> It has been closed by Xavier Guimard . > > It did not solve my problem. Package libjs-vue-router still provides files > in /usr/share/nodejs: > > $ dpkg -L l

Bug#931653: RM: node-json3 -- ROM; Dead upstream

2019-07-19 Thread Xavier
Yes, rainloop is going to be modified soon Le 19 juillet 2019 17:55:56 GMT+02:00, Luca Falavigna a écrit : >tags 931653 moreinfo >thanks > > >Il giorno lun 8 lug 2019 alle ore 23:09 Xavier Guimard > ha scritto: >> This package has no reverse dependencies, so it can s

Bug#932896: Fix pending

2019-07-24 Thread Xavier
Control: tags -1 + pending Hello, the fix is pending: https://salsa.debian.org/debian/devscripts/merge_requests/135

Bug#933007: [Pkg-javascript-devel] Bug#933007: pkg-js-tools: Automatically link components in node_modules directory

2019-07-25 Thread Xavier
Le 25/07/2019 à 20:08, Pirate Praveen a écrit : > > > On 2019, ജൂലൈ 25 11:15:50 PM IST, Xavier Guimard wrote: >> Package: pkg-js-tools >> Version: 0.8.1 >> Severity: wishlist >> >> When using components in node modules, the best way to use them is to >

Bug#933007: [Pkg-javascript-devel] Bug#933007: pkg-js-tools: Automatically link components in node_modules directory

2019-07-25 Thread Xavier
Le 25/07/2019 à 19:45, Xavier Guimard a écrit : > Package: pkg-js-tools > Version: 0.7 > Severity: wishlist > > When using components in node modules, the best way to use them is to > install them in node_modules/ directory. However, dpkg-source install > them at the top s

Bug#931596: stretch-pu: package libjavascript-beautifier-perl/0.25-1+deb10u1

2019-07-21 Thread Xavier
Control: tags - moreinfo Le 22/07/2019 à 01:31, Jonathan Wiltshire a écrit : > Control: tag -1 moreinfo > > Hi, > > On Mon, Jul 08, 2019 at 07:04:20AM +0200, Xavier Guimard wrote: >> Package: release.debian.org >> Severity: normal >> Tags: buster >> User:

Bug#932640: debi: not working after upgrade to devscripts-2.19.6

2019-07-22 Thread Xavier
Hi, could you try this diff? It may fix your problem diff --git a/usr/bin/debi.pl b/usr/bin/debi index 34af910f..7ce42e9c 100755 --- a/usr/bin/debi +++ b/usr/bin/debi @@ -413,17 +413,26 @@ if ($progname eq 'debi') { my @upgrade = $opt_upgrade ? ('-O') : (); if ($opt_with_depends) {

Bug#930634: [Pkg-javascript-devel] Bug#930634: Build failures with rollup 0.56

2019-09-28 Thread Xavier
help.pm is probably filtered. Overwrite in debian/nodejs/files Le 28 septembre 2019 15:53:02 GMT+02:00, Pirate Praveen a écrit : >On Sat, 28 Sep 2019 18:55:38 +0530 Pirate Praveen > wrote: >> Next error is, >> >> src/node-entry.js → dist/rollup.js, dist/rollup.es.js... >> [!] Error: Illegal

Bug#941189: [Pkg-javascript-devel] Bug#941189: node-set-value: CVE-2019-10747

2019-09-26 Thread Xavier
Hi, Of course a point release is enough here Cheers, Xavier Le 26 septembre 2019 08:04:35 GMT+02:00, Salvatore Bonaccorso a écrit : >Hi Xavier, > >On Thu, Sep 26, 2019 at 07:31:21AM +0200, Xavier wrote: >> Le 26/09/2019 à 07:12, Salvatore Bonaccorso a écrit : >> >

Bug#941189: [Pkg-javascript-devel] Bug#941189: node-set-value: CVE-2019-10747

2019-09-25 Thread Xavier
i?name=CVE-2019-10747 > [1] https://snyk.io/vuln/SNYK-JS-SETVALUE-450213 Hi, here is a patch for Buster Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index 49d174b..871978a 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +node-set-value (0.4.0-1+deb10u1)

Bug#941227: [Pkg-javascript-devel] Bug#941227: buster-pu: package node-set-value/0.4.0-1+deb10u1

2019-09-26 Thread Xavier
I forgot debdiff, sorry Le 26/09/2019 à 20:11, Xavier Guimard a écrit : > Package: release.debian.org > Severity: normal > Tags: buster > User: release.debian@packages.debian.org > Usertags: pu > > Hi, > > node-set-value is vulnerable to prototype pollution (#9

Bug#876636: marked as done (apache2: insserv noise)

2019-10-01 Thread Xavier
Le 01/10/2019 à 22:21, Debian Bug Tracking System a écrit : > Your message dated Tue, 1 Oct 2019 22:19:28 +0200 > with message-id > > and subject line Re: apache2: insserv noise > has caused the Debian Bug report #876636, > regarding apache2: insserv noise > to be marked as done. > > This means

Bug#941258: [Pkg-javascript-devel] Bug#941258: dh_missing reports missing files for d3-format

2019-09-27 Thread Xavier
Hi, PB ils in your debian/*.install : when multiples binaries, dh_auto_build prepares debian/tmp, then debian/*.install pick files in it (one arg per line). Typically debian/node-d3-format may contain "/usr/share/nodejs" Then I see no bug here but perhaps am I wrong ? (no salsa access here)

Bug#930917: [Pkg-javascript-devel] Bug#930917: Bug#930917: Include import test like require test when package.json#module is present

2019-07-09 Thread Xavier
Le 09/07/2019 à 11:27, Pirate Praveen a écrit : > > > On 2019, ജൂലൈ 9 2:12:43 PM IST, Xavier wrote: >> Hello, >> >> pkg-js-autopkgtest launches 2 tests: >> - a `node -e 'require("package")' >> - upstream tests on installed files >> >>

Bug#930917: [Pkg-javascript-devel] Bug#930917: Bug#930917: Bug#930917: Include import test like require test when package.json#module is present

2019-07-09 Thread Xavier
Le 09/07/2019 à 21:22, Xavier a écrit : > Le 09/07/2019 à 11:27, Pirate Praveen a écrit : >> >> >> On 2019, ജൂലൈ 9 2:12:43 PM IST, Xavier wrote: >>> Hello, >>> >>> pkg-js-autopkgtest launches 2 tests: >>> - a `node -e 're

Bug#921717: RFH: cyrus-imapd -- Cyrus mail system - IMAP support

2019-12-16 Thread Xavier
Control: retitle -1 RFH: cyrus-imapd -- Cyrus mail system - IMAP support Hi, I took over the maintenance of cyrus-imapd. However, I'd like some help to maintain it. Cheers, Xavier

Bug#914821: libio-pty-perl: New upstream version - 1.12

2019-12-05 Thread Xavier
o wants to do the takeover? Felix, Xavier? I can as well. Hi, I'm going to takeover

Bug#914821: libio-pty-perl: New upstream version - 1.12

2019-12-04 Thread Xavier
Hi, This new version is required by Lintian, would you accept an NMU to update libio-pty-perl? Felix Lechner (Lintian maintainer) prepared it. Also if you want, package maintainance can be taken under Pkg-Perl umbrella. Cheers, Xavier

Bug#940975: jQuery may not need two different packages

2019-12-07 Thread Xavier
Hi, I prepared node-jquery 3.4.1. Do you think it's time to add Breaks/Provides/Replaces libjs-jquery ? Cheers, Xavier

Bug#890253: node-jest

2019-12-14 Thread Xavier
Hi, I updated node-jest. Build is OK, TODO: remove or rebuild debian/build_modules compiled files (see lintian output)

Bug#890253: [Pkg-javascript-devel] node-jest

2019-12-14 Thread Xavier
Le 14/12/2019 à 19:10, Xavier a écrit : > Hi, > > I updated node-jest. Build is OK, TODO: remove or rebuild > debian/build_modules compiled files (see lintian output) TODO also: embed or package missing node modules (prompt,...)

Bug#882467: node-typescript-types: should provide virtual packages for each /type package, versioned

2019-12-10 Thread Xavier
Hi, I posted a PR [1] to auto provide virtual packages using pkg-js-tools. Cheers, Xavier [1]: https://salsa.debian.org/js-team/typescript-types/merge_requests/1

Bug#941202:

2019-10-15 Thread Xavier
Le 11/10/2019 à 10:35, Daniel Cadden a écrit : > Thank you. > Will this be fixed for Stretch? Yes, see https://lists.debian.org/debian-security-announce/2019/msg00195.html

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

2019-10-22 Thread Xavier
Le Mardi, Octobre 22, 2019 11:15 CEST, Jonas Smedegaard a écrit: > Quoting Xavier (2019-10-22 10:01:11) > > Le Mardi, Octobre 22, 2019 09:10 CEST, Julien Puydt > > a écrit: > > > If you want to have ts-node, why not package it properly, with a RFP > > >

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

2019-10-22 Thread Xavier
Le Mardi, Octobre 22, 2019 12:03 CEST, Jonas Smedegaard a écrit: > Quoting Xavier (2019-10-22 11:32:19) > > Le Mardi, Octobre 22, 2019 11:15 CEST, Jonas Smedegaard a > > écrit: > > > Quoting Xavier (2019-10-22 10:01:11) > > > > Le Mardi, Octob

<    1   2   3   4   5   6   7   8   9   10   >