Re: [Pkg-javascript-devel] V8 depends from outdated and unmaintained libv8 with security issues

2019-01-29 Thread Jeroen Ooms
Is there another version of libv8 available on Debian? I'm willing to try to port it to a newer version of V8. The issue with libv8 has always been that Google refuses to define a stable API, and they do a new release every day (no joke). So it's very hard to program against that. That said,

Re: [Pkg-javascript-devel] V8 depends from outdated and unmaintained libv8 with security issues

2019-01-29 Thread Jeroen Ooms
On Tue, Jan 29, 2019 at 10:56 AM Jérémy Lal wrote: > > > > Le mar. 29 janv. 2019 à 19:41, Jeroen Ooms a écrit : >> >> Is there another version of libv8 available on Debian? I'm willing to >> try to port it to a newer version of V8. The issue with libv8 has >> always been that Google refuses to

Re: [Pkg-javascript-devel] V8 depends from outdated and unmaintained libv8 with security issues

2019-01-29 Thread Jérémy Lal
Le mar. 29 janv. 2019 à 19:41, Jeroen Ooms a écrit : > Is there another version of libv8 available on Debian? I'm willing to > try to port it to a newer version of V8. The issue with libv8 has > always been that Google refuses to define a stable API, and they do a > new release every day (no

Re: [Pkg-javascript-devel] V8 depends from outdated and unmaintained libv8 with security issues

2019-01-29 Thread Jonas Smedegaard
Quoting Jeroen Ooms (2019-01-29 20:11:20) > On Tue, Jan 29, 2019 at 10:56 AM Jérémy Lal wrote: > > > > > > > > Le mar. 29 janv. 2019 à 19:41, Jeroen Ooms a écrit : > >> > >> Is there another version of libv8 available on Debian? I'm willing to > >> try to port it to a newer version of V8. The

[Pkg-javascript-devel] Bug#920844: node-react-audio-player build depends on node-react that is currently not in buster

2019-01-29 Thread Adrian Bunk
Source: node-react-audio-player Version: 0.11.0-1 Severity: serious Tags: ftbfs Control: block -1 by 914462 node-react-audio-player build depends on node-react that is currently not in buster due to #914462. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net

[Pkg-javascript-devel] Processed: node-react-audio-player build depends on node-react that is currently not in buster

2019-01-29 Thread Debian Bug Tracking System
Processing control commands: > block -1 by 914462 Bug #920844 [src:node-react-audio-player] node-react-audio-player build depends on node-react that is currently not in buster 920844 was not blocked by any bugs. 920844 was not blocking any bugs. Added blocking bug(s) of 920844: 914462 --

[Pkg-javascript-devel] Bug#920858: twitter-bootstrap4: contains generated code not included as source

2019-01-29 Thread Jonas Smedegaard
Source: twitter-bootstrap4 Version: 4.2.1+dfsg1-1 Severity: serious Justification: Policy 2.1 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Source package contains below several files embedding code from external project fileOverview Kickass, without source included. Thanks to Xavier for

[Pkg-javascript-devel] Bug#884155: show be fixed in unstable & testing

2019-01-29 Thread Paolo Greppi
chai 4.2 has landed in testing, and all tests pass. can this be closed now ? Paolo -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel

[Pkg-javascript-devel] Bug#884155: show be fixed in unstable & testing

2019-01-29 Thread Santiago Vila
On Tue, Jan 29, 2019 at 04:42:09PM +0100, Paolo Greppi wrote: > chai 4.2 has landed in testing, and all tests pass. > can this be closed now ? AFAIK, yes (unless there is yet another different version in experimental of either this package or a build-dependency, which I have not tested). Thanks.

[Pkg-javascript-devel] jquery_3.3.1~dfsg-1_source.changes ACCEPTED into unstable

2019-01-29 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 30 Jan 2019 04:06:31 +0100 Source: jquery Architecture: source Version: 3.3.1~dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Jonas Smedegaard Changes:

[Pkg-javascript-devel] node-rollup-pluginutils 2.3.3-4 MIGRATED to testing

2019-01-29 Thread Debian testing watch
FYI: The status of the node-rollup-pluginutils source package in Debian's testing distribution has changed. Previous version: 2.3.3-2 Current version: 2.3.3-4 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day

[Pkg-javascript-devel] Processing of jquery_3.3.1~dfsg-1_source.changes

2019-01-29 Thread Debian FTP Masters
jquery_3.3.1~dfsg-1_source.changes uploaded successfully to localhost along with the files: jquery_3.3.1~dfsg-1.dsc jquery_3.3.1~dfsg.orig.tar.xz jquery_3.3.1~dfsg-1.debian.tar.xz jquery_3.3.1~dfsg-1_amd64.buildinfo Greetings, Your Debian queue daemon (running on host

[Pkg-javascript-devel] twitter-bootstrap4 is marked for autoremoval from testing

2019-01-29 Thread Debian testing autoremoval watch
twitter-bootstrap4 4.2.1+dfsg1-1 is marked for autoremoval from testing on 2019-03-07 It is affected by these RC bugs: 920188: libjs-bootstrap4: broken: required library Popper.js missing -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net

[Pkg-javascript-devel] Processed: Bug #920749 in popper.js marked as pending

2019-01-29 Thread Debian Bug Tracking System
Processing control commands: > tag -1 pending Bug #920749 [src:popper.js] popper.js: contains generated code uncertain if fully included as source Added tag(s) pending. -- 920749: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920749 Debian Bug Tracking System Contact ow...@bugs.debian.org

Re: [Pkg-javascript-devel] RFS: RainLoop Webmail and dependencies

2019-01-29 Thread Daniel Ring
Hello, The minified files in libjs-jquery-backstretch and node-autolinker are properly licensed and regenerated at build time, so they shouldn't need a DFSG repack. I updated the URLs and lintian overrides (only --pedantic fixes) in all of the packages, but those can wait for the next

Re: [Pkg-javascript-devel] Status of libv8?

2019-01-29 Thread Andreas Tille
Hi Jonas, On Fri, Jan 18, 2019 at 08:04:33PM +0100, Jonas Smedegaard wrote: > Quoting Andreas Tille (2019-01-18 18:39:34) > > I'd prefer > > > > - change nodejs to build its v8 as a shared lib, and provide it it > >makes sense because upstream nodejs do all the work of keeping ABI > >

[Pkg-javascript-devel] Bug#920749: Bug#920749: popper.js: contains generated code uncertain if fully included as source

2019-01-29 Thread Xavier
Le 29/01/2019 à 07:41, Xavier a écrit : > Le 28/01/2019 à 18:45, Jonas Smedegaard a écrit : >> Source: popper.js >> Version: 1.14.6+ds-1 >> Severity: serious >> Justification: Policy 2.1 >> >> Source package contains several files (seemingly all of them) below >> which does not exist in upstream

Re: [Pkg-javascript-devel] Bug#920749: popper.js: contains generated code uncertain if fully included as source

2019-01-29 Thread Jonas Smedegaard
Quoting Xavier (2019-01-29 07:41:40) > Le 28/01/2019 à 18:45, Jonas Smedegaard a écrit : > > Source: popper.js > > Version: 1.14.6+ds-1 > > Severity: serious > > Justification: Policy 2.1 > > > > Source package contains several files (seemingly all of them) below > > which does not exist in

Re: [Pkg-javascript-devel] Bug#920749: popper.js: contains generated code uncertain if fully included as source

2019-01-29 Thread Xavier
Le 29/01/2019 à 15:23, Jonas Smedegaard a écrit : > Quoting Xavier (2019-01-29 07:41:40) >> Le 28/01/2019 à 18:45, Jonas Smedegaard a écrit : >>> Source: popper.js >>> Version: 1.14.6+ds-1 >>> Severity: serious >>> Justification: Policy 2.1 >>> >>> Source package contains several files (seemingly