[Pkg-javascript-devel] node-handlebars_4.5.3-1_sourceonly.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 30 Dec 2019 08:28:11 +0100 Source: node-handlebars Architecture: source Version: 3:4.5.3-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Changes: node-handlebars (3:4.5.3-1) unstable; urgency=medium . * Team upload . [ Pirate Praveen ] * Remove node_modules/.cache and generated files in clean . [ Xavier Guimard ] * Bump debhelper compatibility level to 12 * Declare compliance with policy 4.4.1 * Add "Rules-Requires-Root: no" * Add debian/gbp.conf * New upstream version 4.5.3 (Closes: CVE-2019-19919) * Refresh patches * Disable Grunt bg-shell plugin * Use pkg-js-tools auto install * Add upstream/metadata * Update copyright Checksums-Sha1: 23194cbe7ce3685825464d5ec92f5cf3330920ea 2504 node-handlebars_4.5.3-1.dsc c4dcc8b2b9bc199a716e759f3afba293ef552465 306515 node-handlebars_4.5.3.orig.tar.gz f09423750be03f205c2ae80bd36792a5272fee67 5720 node-handlebars_4.5.3-1.debian.tar.xz Checksums-Sha256: 67d7d5136eea4ecbae3d95617d9f56455dab3b04f9b0de1e6bed02771d62f822 2504 node-handlebars_4.5.3-1.dsc 19c51a050808a97a5a3bbc184a441b96de7c9f26163a61ac2f1e5d604ce4de18 306515 node-handlebars_4.5.3.orig.tar.gz c7244358f6871ee05199cf541080dcae4bb09cd6525dd1b8147e3d4021cf94ef 5720 node-handlebars_4.5.3-1.debian.tar.xz Files: 557833a1bd6dd27aad43e0bb5b52aca2 2504 javascript optional node-handlebars_4.5.3-1.dsc ee975f2050cbd076315d43a302379282 306515 javascript optional node-handlebars_4.5.3.orig.tar.gz f5333b91f2d553dd69bc1fd0875c1cd0 5720 javascript optional node-handlebars_4.5.3-1.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAl4JqKoACgkQ9tdMp8mZ 7und8A//USzw9DLGwdGG5+M9Y6OBFUDjP9SiTCbqmoubjHkBMjPuyXG7ADFFRZF6 UC74+SIAb5LtEEzj2S/DA7hG3hAyhCmUygnYgPH0KiErxBUZzxDvKkNDp0/BtTdU Do3rYje4hJDnywxuqOmjx80HBzlbDiJmAqbmR9Ff9UOi33Ys85WgsFYTwPGAae38 mBTd2dXOn0hOYjgk09cG7h69aCjFN60IM8dalvwo6ikV4fSfAJKkS0wphgRy6vgR 6zSUY2eL9z8jd4CS2HJxg7nHja6KlG2PpL+8bsH9nVZftbxrtoGW4WU3shE/jkcM ypvRsymQjRoQDxA/5wkAMVrSvgFZaz3SWkoha12Zyg3E16drFAAXkHWl2ztEneUR AWb0qg+SoNWrt19duHrF4qHusEP/jRYK02steJooOC2YTeqzhfI8+DoKQzbDfR4O SAMpJDOGXGw24XXaVEjqpRDedp80iB029xKW4dMLlU4zhI0m6YUx8y+8lVpwodTh S2j+eCPnAqVuE+BkKWs5NjbavLoL6q7c62WUKvcivQh/RyvJLxWBrFa688B+hK8X 2f53BjcseEHVLYE87owBHYbS++oRUX1ceHdYsJgBXTtf1Af5qxbHyTcGne/n9DvO 7hJmdeCQcvY0t6csY0xtFqnhqKHW/n9w94px6P1sdlcUO/wGv3I= =g5GI -END PGP SIGNATURE- Thank you for your contribution to Debian. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processing of node-handlebars_4.5.3-1_sourceonly.changes
node-handlebars_4.5.3-1_sourceonly.changes uploaded successfully to localhost along with the files: node-handlebars_4.5.3-1.dsc node-handlebars_4.5.3.orig.tar.gz node-handlebars_4.5.3-1.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org) -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#947758: buster-pu: package node-handlebars/3:4.1.0-1+deb10u1
Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu
Hi,
node-handlebars is vulnearable to prototype pollution (CVE-2019-19919).
This patch is exactly the one of upstream.
Cheers,
Xavier
diff --git a/debian/changelog b/debian/changelog
index b985661..95811b9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+node-handlebars (3:4.1.0-1+deb10u1) buster; urgency=medium
+
+ * Team upload
+ * Disallow calling "helperMissing" and "blockHelperMissing" directly
+(Closes: CVE-2019-19919)
+
+ -- Xavier Guimard Mon, 30 Dec 2019 07:46:39 +0100
+
node-handlebars (3:4.1.0-1) unstable; urgency=medium
* New upstream version 4.1.0 (Closes: #923042)
diff --git a/debian/patches/CVE-2019-19919.patch
b/debian/patches/CVE-2019-19919.patch
new file mode 100644
index 000..f63f106
--- /dev/null
+++ b/debian/patches/CVE-2019-19919.patch
@@ -0,0 +1,213 @@
+Description: Disallow calling "helperMissing" and "blockHelperMissing" directly
+ Fix for CVE-2019-19919
+Author: Nils Knappmeier
+Origin: upstream, https://github.com/wycats/handlebars.js/commit/2078c72
+Bug: https://github.com/wycats/handlebars.js/issues/1558
+Forwarded: not-needed
+Reviewed-By: Xavier Guimard
+Last-Update: 2019-12-30
+
+--- a/lib/handlebars/compiler/javascript-compiler.js
b/lib/handlebars/compiler/javascript-compiler.js
+@@ -311,7 +311,7 @@
+ // replace it on the stack with the result of properly
+ // invoking blockHelperMissing.
+ blockValue: function(name) {
+-let blockHelperMissing = this.aliasable('helpers.blockHelperMissing'),
++let blockHelperMissing =
this.aliasable('container.hooks.blockHelperMissing'),
+ params = [this.contextName(0)];
+ this.setupHelperArgs(name, 0, params);
+
+@@ -329,7 +329,7 @@
+ // On stack, after, if lastHelper: value
+ ambiguousBlockValue: function() {
+ // We're being a bit cheeky and reusing the options value from the prior
exec
+-let blockHelperMissing = this.aliasable('helpers.blockHelperMissing'),
++let blockHelperMissing =
this.aliasable('container.hooks.blockHelperMissing'),
+ params = [this.contextName(0)];
+ this.setupHelperArgs('', 0, params, true);
+
+@@ -622,18 +622,31 @@
+ // If the helper is not found, `helperMissing` is called.
+ invokeHelper: function(paramSize, name, isSimple) {
+ let nonHelper = this.popStack(),
+-helper = this.setupHelper(paramSize, name),
+-simple = isSimple ? [helper.name, ' || '] : '';
++helper = this.setupHelper(paramSize, name);
+
+-let lookup = ['('].concat(simple, nonHelper);
++let possibleFunctionCalls = [];
++
++if (isSimple) { // direct call to helper
++ possibleFunctionCalls.push(helper.name);
++}
++// call a function from the input object
++possibleFunctionCalls.push(nonHelper);
+ if (!this.options.strict) {
+- lookup.push(' || ', this.aliasable('helpers.helperMissing'));
++
possibleFunctionCalls.push(this.aliasable('container.hooks.helperMissing'));
+ }
+-lookup.push(')');
+-
+-this.push(this.source.functionCall(lookup, 'call', helper.callParams));
++let functionLookupCode = ['(',
this.itemsSeparatedBy(possibleFunctionCalls, '||'), ')'];
++let functionCall = this.source.functionCall(functionLookupCode, 'call',
helper.callParams);
++this.push(functionCall);
+ },
+
++ itemsSeparatedBy: function(items, separator) {
++let result = [];
++result.push(items[0]);
++for (let i = 1; i < items.length; i++) {
++ result.push(separator, items[i]);
++}
++return result;
++ },
+ // [invokeKnownHelper]
+ //
+ // On stack, before: hash, inverse, program, params..., ...
+@@ -673,7 +686,7 @@
+ lookup[0] = '(helper = ';
+ lookup.push(
+ ' != null ? helper : ',
+-this.aliasable('helpers.helperMissing')
++this.aliasable('container.hooks.helperMissing')
+ );
+ }
+
+--- a/lib/handlebars/runtime.js
b/lib/handlebars/runtime.js
+@@ -1,6 +1,7 @@
+ import * as Utils from './utils';
+ import Exception from './exception';
+-import { COMPILER_REVISION, REVISION_CHANGES, createFrame } from './base';
++import {COMPILER_REVISION, createFrame, REVISION_CHANGES} from './base';
++import {moveHelperToHooks} from './helpers';
+
+ export function checkRevision(compilerInfo) {
+ const compilerRevision = compilerInfo && compilerInfo[0] || 1,
+@@ -44,11 +45,14 @@
+ }
+
+ partial = env.VM.resolvePartial.call(this, partial, context, options);
+-let result = env.VM.invokePartial.call(this, partial, context, options);
++
++let optionsWithHooks = Utils.extend({}, options, {hooks: this.hooks});
++
++let result = env.VM.invokePartial.call(this, partial, context,
optionsWithHooks);
+
+ if (result == null && env.compile) {
+ options.partials[options.name] = env.compile(partial,
templateSpec.compilerOptions, env);
+- result =
[Pkg-javascript-devel] node-core-js_3.6.1-1_sourceonly.changes ACCEPTED into experimental
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 29 Dec 2019 18:52:38 +0100 Source: node-core-js Architecture: source Version: 3.6.1-1 Distribution: experimental Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Changes: node-core-js (3.6.1-1) experimental; urgency=medium . * Team upload * New upstream version 3.6.1 Checksums-Sha1: 8fac7549a62160f054f0f44431f596423c51ad84 2124 node-core-js_3.6.1-1.dsc d9545236004b04cf6f4338b363253dbe5a7ed9c8 432258 node-core-js_3.6.1.orig.tar.gz e08f32871736992daf242798ed2dff1f42136c9c 3580 node-core-js_3.6.1-1.debian.tar.xz Checksums-Sha256: ea457f0df1784a2dd5eb34069bc048e438034c2abed1decb4ee55be238aff5f9 2124 node-core-js_3.6.1-1.dsc 3f9553f439a9aef5fc5f738f92dc5146d27c59f4bcf100de68a5c27ecf07b861 432258 node-core-js_3.6.1.orig.tar.gz 0cd8e4a01fa39ec5444f602f8e3a8e01f175e73612a5623ece87b3dd5829421a 3580 node-core-js_3.6.1-1.debian.tar.xz Files: bbbca8ce9a3ad8c6e7a342110d2488b8 2124 javascript optional node-core-js_3.6.1-1.dsc 1b26499d29bb4896b9c93b2606f4fbaf 432258 javascript optional node-core-js_3.6.1.orig.tar.gz 56705cf6dfd9e02bdad81e0d8e789a4f 3580 javascript optional node-core-js_3.6.1-1.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAl4I/tIACgkQ9tdMp8mZ 7umXFRAAmpVX2znYID9jKmMXruZxRb4lOw0UE3hbvJ/43QJ7w0Rr4YiB2AHOhBm7 ee39ctZwamfaG1bjNi5MH5MLGCxYLU14/IIm8g0ZPrNBYZKrrLBVcWNAfX2p+19L vTPvlvAR0kU0dfmuGt94N2t3uxqINwDmU+/1IDzrYjGXxYxAh+f6StS/DLjFBEEi CqdNYTWL/mokvwp2Viso5OgnUwMi0vUNnEiMt2CArgiFI5qy0I8x9oBIgPk35LSx ojQTrtTxhJq3EclKcgvavQeF3nX7TYbiBPqxik/bOm4CYyTnrCkPcm6NLNl49ZeN aq7DFAeRYZ5Sc3pD/aK8VXWakr7rXdrGq0fMovaXQfuqDYDVyBYkgcNg+OXk5e5M W8uv0LPgMzeuehwzgYXs5n4xIJRYBPBBP0bksMG0QCDMyc4H6UNhg96yfShv1L85 rW29yZRxverb4JDtWJigivbMfqQfu9Wdzv4a6y4G0XrscbPIvbZdBwbNdkLIdOW0 Iu8uZFrdusTT4M1fch1si/HVG611b8tcjIxE9hxB3amc8ec9NOqrNhtI5kNS9OaA F2nQpG8TrM/xDujgc1Y4Jw2qvkeWtbVw1pNMOqyWM+s7jW793pyj003GUOIYxVPg PC/eJneaFoRvugHFQ1Xolzz1q+1GZ5cWs5FGg2YGXYZKgL2DTTY= =mbsg -END PGP SIGNATURE- Thank you for your contribution to Debian. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processing of node-core-js_3.6.1-1_sourceonly.changes
node-core-js_3.6.1-1_sourceonly.changes uploaded successfully to localhost along with the files: node-core-js_3.6.1-1.dsc node-core-js_3.6.1.orig.tar.gz node-core-js_3.6.1-1.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org) -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#933284: marked as done (BD on texlive-generic-extra which isn't build anymore and isn't in bullseye)
Your message dated Sun, 29 Dec 2019 15:20:37 + with message-id and subject line Bug#933284: fixed in highlight.js 9.12.0+dfsg1-5 has caused the Debian Bug report #933284, regarding BD on texlive-generic-extra which isn't build anymore and isn't in bullseye to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 933284: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=933284 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Source: breathe Version: 4.11.1-1 Severity: serious Tags: ftbfs sid bullseye Recently the texlive-base package has stopped building the transitional package texlive-generic-extra. This is an issue for your package as it build-depends on it. Please update the building of your package to use texlive-plain-generic instead. Unfortunately the migration software doesn't detected this kind of situation yet, so your package also FTBFS in bullseye since 2019-07-16. Paul signature.asc Description: OpenPGP digital signature --- End Message --- --- Begin Message --- Source: highlight.js Source-Version: 9.12.0+dfsg1-5 We believe that the bug you reported is fixed in the latest version of highlight.js, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 933...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Paul Gevers (supplier of updated highlight.js package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 29 Dec 2019 15:17:41 +0100 Source: highlight.js Architecture: source Version: 9.12.0+dfsg1-5 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Paul Gevers Closes: 933284 Changes: highlight.js (9.12.0+dfsg1-5) unstable; urgency=medium . * Team upload . [ Jelmer Vernooij ] * Use secure copyright file specification URI. * Trim trailing whitespace. . [ Paul Gevers ] * Build-Depends on texlive-plain-generic i.s.o. texlive-generic-extra (Closes: #933284) * Update Vcs-* tags to salsa Checksums-Sha1: 0f92f2833651929bf454ca9968b10978dd120629 2203 highlight.js_9.12.0+dfsg1-5.dsc c5b1c89c48c321935179b5fb9dc43e4fa6c5cc49 16256 highlight.js_9.12.0+dfsg1-5.debian.tar.xz Checksums-Sha256: 080eb7250d11bc0768fce86b635311e3f8d459d64c80347375fb882d825a6295 2203 highlight.js_9.12.0+dfsg1-5.dsc 0f6b282246fc61139f540ea98f77eb7d7dfb8c76640fa4e5fd37d5ee80f840a8 16256 highlight.js_9.12.0+dfsg1-5.debian.tar.xz Files: f3af59813cb138e1b5f03f22533d7d2e 2203 web optional highlight.js_9.12.0+dfsg1-5.dsc 79145246f3d6cb1db8a958bf452dcfe0 16256 web optional highlight.js_9.12.0+dfsg1-5.debian.tar.xz -BEGIN PGP SIGNATURE- iQEzBAEBCAAdFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAl4IurgACgkQnFyZ6wW9 dQqLUAgAt+XaMu+dvZlJAe5fjeL744j9JJHBtChXBJ3MaS9Qiu7NofrQ4qNYuJnP /MpwiP7Qy2s8IQiKP3ZahBJQnvQbMtgRVYA1HQpdygoPK/WqFmu7AlPLWnF3+U8H LzmZh8maHszrhwerxf/uEyFqAW6vNk3yt7Fsr2XT5w+8mjS5HDIB7oUG/WeE+4J4 VhfLtuGXXkPggjDCBrWNs/zf/gOCpbuky5aYOUz0PhPp+DbuV35mYtkuRcq/AIeI W/TOYIE4kWyXrM7AkPDV6Y27IPTzlL3ZbqN38Y0eKoXUfgrPBPITby+5pdCm+fIq IEOaYedcT6md17ZSBr/lniSJZq96yQ== =S8kF -END PGP SIGNATURE End Message --- -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] highlight.js_9.12.0+dfsg1-5_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 29 Dec 2019 15:17:41 +0100 Source: highlight.js Architecture: source Version: 9.12.0+dfsg1-5 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Paul Gevers Closes: 933284 Changes: highlight.js (9.12.0+dfsg1-5) unstable; urgency=medium . * Team upload . [ Jelmer Vernooij ] * Use secure copyright file specification URI. * Trim trailing whitespace. . [ Paul Gevers ] * Build-Depends on texlive-plain-generic i.s.o. texlive-generic-extra (Closes: #933284) * Update Vcs-* tags to salsa Checksums-Sha1: 0f92f2833651929bf454ca9968b10978dd120629 2203 highlight.js_9.12.0+dfsg1-5.dsc c5b1c89c48c321935179b5fb9dc43e4fa6c5cc49 16256 highlight.js_9.12.0+dfsg1-5.debian.tar.xz Checksums-Sha256: 080eb7250d11bc0768fce86b635311e3f8d459d64c80347375fb882d825a6295 2203 highlight.js_9.12.0+dfsg1-5.dsc 0f6b282246fc61139f540ea98f77eb7d7dfb8c76640fa4e5fd37d5ee80f840a8 16256 highlight.js_9.12.0+dfsg1-5.debian.tar.xz Files: f3af59813cb138e1b5f03f22533d7d2e 2203 web optional highlight.js_9.12.0+dfsg1-5.dsc 79145246f3d6cb1db8a958bf452dcfe0 16256 web optional highlight.js_9.12.0+dfsg1-5.debian.tar.xz -BEGIN PGP SIGNATURE- iQEzBAEBCAAdFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAl4IurgACgkQnFyZ6wW9 dQqLUAgAt+XaMu+dvZlJAe5fjeL744j9JJHBtChXBJ3MaS9Qiu7NofrQ4qNYuJnP /MpwiP7Qy2s8IQiKP3ZahBJQnvQbMtgRVYA1HQpdygoPK/WqFmu7AlPLWnF3+U8H LzmZh8maHszrhwerxf/uEyFqAW6vNk3yt7Fsr2XT5w+8mjS5HDIB7oUG/WeE+4J4 VhfLtuGXXkPggjDCBrWNs/zf/gOCpbuky5aYOUz0PhPp+DbuV35mYtkuRcq/AIeI W/TOYIE4kWyXrM7AkPDV6Y27IPTzlL3ZbqN38Y0eKoXUfgrPBPITby+5pdCm+fIq IEOaYedcT6md17ZSBr/lniSJZq96yQ== =S8kF -END PGP SIGNATURE- Thank you for your contribution to Debian. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processed: BD on texlive-generic-extra which isn't build anymore and isn't in bullseye
Processing commands for cont...@bugs.debian.org: > clone 933284 -1 Bug #933284 [highlight.js] BD on texlive-generic-extra which isn't build anymore and isn't in bullseye Bug 933284 cloned as bug 947726 > reassign -1 osmnx 0.10+ds-2 Bug #947726 [highlight.js] BD on texlive-generic-extra which isn't build anymore and isn't in bullseye Bug reassigned from package 'highlight.js' to 'osmnx'. No longer marked as found in versions 9.12.0+dfsg1-4. Ignoring request to alter fixed versions of bug #947726 to the same values previously set Bug #947726 [osmnx] BD on texlive-generic-extra which isn't build anymore and isn't in bullseye There is no source info for the package 'osmnx' at version '0.10+ds-2' with architecture '' Unable to make a source version for version '0.10+ds-2' Marked as found in versions 0.10+ds-2. > thanks Stopping processing here. Please contact me if you need assistance. -- 933284: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=933284 947726: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947726 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processing of highlight.js_9.12.0+dfsg1-5_source.changes
highlight.js_9.12.0+dfsg1-5_source.changes uploaded successfully to localhost along with the files: highlight.js_9.12.0+dfsg1-5.dsc highlight.js_9.12.0+dfsg1-5.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org) -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Fwd: node-vinyl-fs_2.4.4-2_sourceonly.changes ACCEPTED into unstable
Hi, With node-liftoff changes, this fixes node-babel build (unstable). Due to missing autopkgtest, régressions were not seen. Cheers, Xavier Courriel d’origine De : Debian FTP Masters Envoyé : 29 décembre 2019 09:42:03 GMT+01:00 À : Debian Javascript Maintainers , Xavier Guimard Objet : node-vinyl-fs_2.4.4-2_sourceonly.changes ACCEPTED into unstable Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 29 Dec 2019 09:01:49 +0100 Source: node-vinyl-fs Architecture: source Version: 2.4.4-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Changes: node-vinyl-fs (2.4.4-2) unstable; urgency=medium . * Team upload * Add patch comment * Add "Rules-Requires-Root: no" * Change section to javascript * Add debian/gbp.conf * Add upstream/metadata * Fix homepage * Drop unneeded version constraints from (build) dependencies * Embed outdated strip-bom-stream to fix debci. Will be removed with vinyl-fs 3 * Add fix for recent node-sinon and node-glob-stream * Enable upstream test: + Embed some little modules for test only * Use pkg-js-tools auto install * Update copyright * Add lintian overrides Checksums-Sha1: 78559be433b6e69a77ff51e8b647003ee2f9f0fa 2902 node-vinyl-fs_2.4.4-2.dsc 8dd3612a07720d62d96f964f3f0bc54ef5021fb1 31536 node-vinyl-fs_2.4.4-2.debian.tar.xz Checksums-Sha256: f568741d12791d4d56290f2eff41359a8ccc384c474c5af42aef28d7771a65a3 2902 node-vinyl-fs_2.4.4-2.dsc 6caca55ea8bf0570b0f3a9e90e5f0234faf56b9d0d81abe4c3714a0ab7ca8d35 31536 node-vinyl-fs_2.4.4-2.debian.tar.xz Files: ab3b70461bdc419d9bcabc7bf7a072e9 2902 javascript optional node-vinyl-fs_2.4.4-2.dsc 30212ac1a2ffddc9800bc1b29d5859b1 31536 javascript optional node-vinyl-fs_2.4.4-2.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAl4IXrEACgkQ9tdMp8mZ 7umgEQ//aMw3JKDwTbvWOc7c0bg0HFFpTD8q8Sp6dICluNLJaPZnT1h7nMtaqWKT c6br93/tgnGluEojPfEvPJrHNdNBVva08x4bfDc9pFADLT39Cfo4CxwsTwHmG3kQ qXLuDca/RwAlGeNqCNU0kkw4SsRJM5WFSDCj/xNq6odDTDCdNiQmCB9MZItXWJgO MJQ4EYyUTWh1Ptt/lln1M2vRE1J5rM5M1tG96oDHS1DqLdlDmj9mqQU+Y4O6DnRK m+aYKMhBqu8u6ZVWZBf92kyqo0MdjElUDrfVyyo8rnv6ixFJdHBVYiR7wdI3kSKt c02i1KzfCou+Y+c+34egmZPd7Kreop/1Du13kaQEEMeY2v8jSrwU0ugZtU3JqfNv /d9fS2xCZc87MN5AQnta9O9aFt0zXmidG4Nfd1g3YEoQIJUtNAgO8MDmKR9I05yq B3t5543ELwjF0WJ4G71xsBrDcnIE06KcDJL1wDjOLrEEOgp+GBsoAL5/1lz9ByXy WHs5WnWg2b+aRsGLXTTGGNc7zeqB5cK7C31habF1VdkCfWx7UPNsfDHxHnQ73bAA J0Z48po1U5kcYlY5eC4FVbcMRATSsqWfSXA7EiIMpdtevJtTqINr8o5MukxBfxiS 5+v3aiZxmXPXk6PGUvQysVFZEK9g7mkp3acnK0g0V1H47d77s1s= =zVSo -END PGP SIGNATURE- Thank you for your contribution to Debian. -- Envoyé de mon appareil Android avec Courriel K-9 Mail. Veuillez excuser ma brièveté.-- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] pkg-js-tools_0.9.22_sourceonly.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 29 Dec 2019 08:50:51 +0100 Source: pkg-js-tools Architecture: source Version: 0.9.22 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Changes: pkg-js-tools (0.9.22) unstable; urgency=medium . [ Felix Lechner ] * Use new Lintian interface in checks. . [ Xavier Guimard ] * add-node-component: + cmp-tree: read also debian/nodejs/additional_components * debhelper: + fix extlinks for modules with / in their names + fix possibly missing package.json in components Checksums-Sha1: 52e694c2da287dfb0f75f03c49aa5732c0f0dd74 2028 pkg-js-tools_0.9.22.dsc 441e6b7d8edac8e94382ab53d044b820d8964295 37312 pkg-js-tools_0.9.22.tar.xz Checksums-Sha256: 9457c0e8e0c6a79ef9ce04623834cd11bc48ca99ecc01b3f53876a0d8454068f 2028 pkg-js-tools_0.9.22.dsc 0d81ee140dd9bc7b077fceba6a6004cde87fd64156855b8aa4dbfa7123fb85cc 37312 pkg-js-tools_0.9.22.tar.xz Files: 60488a76c2a55224f6136957e4aa070b 2028 devel optional pkg-js-tools_0.9.22.dsc 51cfe745fc82459caf82182d985c6926 37312 devel optional pkg-js-tools_0.9.22.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAl4IXpoACgkQ9tdMp8mZ 7ulkPA//Tf8zRttJTZyNELbuZ5H+RM50Z5z2WzomsJ/6pzJqjdfBuQCXTi+oIaC4 U5wgAyy4TcO6iT1Trohq/Pj+oRQU/t0+rSPMrVxzCJxneHJmTlsiTmbMnkHTpifp CKGwfhQrvQewHN8kt9BxVemxsBjVzbhzMIo6rYzRHKnhMjxe4za0cnhGvQgQizdA 7STo9uf6ZZ9EJAAEFhb/p+CA/YMYkJrvLi+wQN7dI4StvGSYiJqTG5WloAVdoNUN 8P5PLevDnUbbH4yadUtB855H4TX+OlWESHVXX8RNJ2ZGjaV4CcOj5DxdjDYSO4VT Sue2mPeIpilUBlLIsyy2YFkRPenueAzv2WiqUzcaiFRp646h2NfuQJRLChj9gpLz 8o9FnbqVJ2QVn8ZuHf98ZdsJljbRqY4RGjaTir0qeuU6G7vuNtsuGcHJ17X+CoLq lka6kygYqv+kig0/51i6ih8//FaVIgp4c5zmMsPSAe3EmPJAR0KkJeoc1gfkc17z dEt/jzEkLL+M9QH2aHWLl7xOzD1T8niQBakgHo8fcTwueKsk2r88QMrOVq+4LjCx dpbt219dD/ULi8P2OxrZIXLxxZ4TcVO4S3/XdmPQXDmTjm5X4EaFdVH5WkjBM0HV BeECV13EHmiuCbaGw95gloMdh4zu95QeB/4emHfXPE30cPCzA9g= =lmtX -END PGP SIGNATURE- Thank you for your contribution to Debian. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] node-vinyl-fs_2.4.4-2_sourceonly.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 29 Dec 2019 09:01:49 +0100 Source: node-vinyl-fs Architecture: source Version: 2.4.4-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Changes: node-vinyl-fs (2.4.4-2) unstable; urgency=medium . * Team upload * Add patch comment * Add "Rules-Requires-Root: no" * Change section to javascript * Add debian/gbp.conf * Add upstream/metadata * Fix homepage * Drop unneeded version constraints from (build) dependencies * Embed outdated strip-bom-stream to fix debci. Will be removed with vinyl-fs 3 * Add fix for recent node-sinon and node-glob-stream * Enable upstream test: + Embed some little modules for test only * Use pkg-js-tools auto install * Update copyright * Add lintian overrides Checksums-Sha1: 78559be433b6e69a77ff51e8b647003ee2f9f0fa 2902 node-vinyl-fs_2.4.4-2.dsc 8dd3612a07720d62d96f964f3f0bc54ef5021fb1 31536 node-vinyl-fs_2.4.4-2.debian.tar.xz Checksums-Sha256: f568741d12791d4d56290f2eff41359a8ccc384c474c5af42aef28d7771a65a3 2902 node-vinyl-fs_2.4.4-2.dsc 6caca55ea8bf0570b0f3a9e90e5f0234faf56b9d0d81abe4c3714a0ab7ca8d35 31536 node-vinyl-fs_2.4.4-2.debian.tar.xz Files: ab3b70461bdc419d9bcabc7bf7a072e9 2902 javascript optional node-vinyl-fs_2.4.4-2.dsc 30212ac1a2ffddc9800bc1b29d5859b1 31536 javascript optional node-vinyl-fs_2.4.4-2.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAl4IXrEACgkQ9tdMp8mZ 7umgEQ//aMw3JKDwTbvWOc7c0bg0HFFpTD8q8Sp6dICluNLJaPZnT1h7nMtaqWKT c6br93/tgnGluEojPfEvPJrHNdNBVva08x4bfDc9pFADLT39Cfo4CxwsTwHmG3kQ qXLuDca/RwAlGeNqCNU0kkw4SsRJM5WFSDCj/xNq6odDTDCdNiQmCB9MZItXWJgO MJQ4EYyUTWh1Ptt/lln1M2vRE1J5rM5M1tG96oDHS1DqLdlDmj9mqQU+Y4O6DnRK m+aYKMhBqu8u6ZVWZBf92kyqo0MdjElUDrfVyyo8rnv6ixFJdHBVYiR7wdI3kSKt c02i1KzfCou+Y+c+34egmZPd7Kreop/1Du13kaQEEMeY2v8jSrwU0ugZtU3JqfNv /d9fS2xCZc87MN5AQnta9O9aFt0zXmidG4Nfd1g3YEoQIJUtNAgO8MDmKR9I05yq B3t5543ELwjF0WJ4G71xsBrDcnIE06KcDJL1wDjOLrEEOgp+GBsoAL5/1lz9ByXy WHs5WnWg2b+aRsGLXTTGGNc7zeqB5cK7C31habF1VdkCfWx7UPNsfDHxHnQ73bAA J0Z48po1U5kcYlY5eC4FVbcMRATSsqWfSXA7EiIMpdtevJtTqINr8o5MukxBfxiS 5+v3aiZxmXPXk6PGUvQysVFZEK9g7mkp3acnK0g0V1H47d77s1s= =zVSo -END PGP SIGNATURE- Thank you for your contribution to Debian. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processing of pkg-js-tools_0.9.22_sourceonly.changes
pkg-js-tools_0.9.22_sourceonly.changes uploaded successfully to localhost along with the files: pkg-js-tools_0.9.22.dsc pkg-js-tools_0.9.22.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org) -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processing of node-vinyl-fs_2.4.4-2_sourceonly.changes
node-vinyl-fs_2.4.4-2_sourceonly.changes uploaded successfully to localhost along with the files: node-vinyl-fs_2.4.4-2.dsc node-vinyl-fs_2.4.4-2.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org) -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
