[Pkg-javascript-devel] Processing of libjs-semanticui_2.2.13+dfsg-1_amd64.changes

2017-10-03 Thread Debian FTP Masters
libjs-semanticui_2.2.13+dfsg-1_amd64.changes uploaded successfully to localhost along with the files: libjs-semanticui_2.2.13+dfsg-1.dsc libjs-semanticui_2.2.13+dfsg.orig.tar.xz libjs-semanticui_2.2.13+dfsg-1.debian.tar.xz libjs-semanticui_2.2.13+dfsg-1_all.deb

[Pkg-javascript-devel] libjs-semanticui_2.2.13+dfsg-1_source.changes REJECTED

2017-10-03 Thread Debian FTP Masters
Source-only uploads to NEW are not allowed. binary:libjs-semanticui is NEW. source:libjs-semanticui is NEW. === Please feel free to respond to this email if you don't understand why your files were rejected, or if you upload new files which address our concerns. -- Pkg-javascript-devel

Re: [Pkg-javascript-devel] Bug#877212: Bug#877212: node-d3-color: B-D npm not available in testing

2017-10-03 Thread Ross Gammon
On 10/04/2017 05:50 AM, Sean Whitton wrote: > Hello Jérémy, > > On Tue, Oct 03 2017, Jérémy Lal wrote: > >> It might be a good idea to make policy more explicit about downloads >> during build. > I'm not sure how it could be more explicit: > > For packages in the main archive, no required

[Pkg-javascript-devel] Bug#877660: CVE-2017-15010

2017-10-03 Thread Moritz Muehlenhoff
Package: node-tough-cookie Severity: grave Tags: security Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15010 Cheers, Moritz -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org

Re: [Pkg-javascript-devel] Bug#877212: Bug#877212: node-d3-color: B-D npm not available in testing

2017-10-03 Thread Gunnar Wolf
Jérémy Lal dijo [Tue, Oct 03, 2017 at 07:46:43PM +0200]: > It might be a good idea to make policy more explicit about downloads during > build. I completely agree. This led me to look at #813471 ("network access to the loopback device should be allowed"), and... Well, it seems to set the stage to

[Pkg-javascript-devel] libjs-vue_2.4.4+dfsg-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:libjs-vue is NEW. binary:libjs-vue is NEW. source:libjs-vue is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid), so please be patient.

[Pkg-javascript-devel] Processing of libjs-jquery-file-upload_9.19.1-1_amd64.changes

2017-10-03 Thread Debian FTP Masters
libjs-jquery-file-upload_9.19.1-1_amd64.changes uploaded successfully to localhost along with the files: libjs-jquery-file-upload_9.19.1-1.dsc libjs-jquery-file-upload_9.19.1.orig.tar.gz libjs-jquery-file-upload_9.19.1-1.debian.tar.xz libjs-jquery-file-upload_9.19.1-1_all.deb

Re: [Pkg-javascript-devel] Bug#877212: node-d3-color: B-D npm not available in testing

2017-10-03 Thread Pirate Praveen
On ചൊവ്വ 03 ഒക്ടോബര്‍ 2017 10:10 രാവിലെ, Gunnar Wolf wrote: > I am completely with Sean here; I read the following messages, and am > happy a better resolution was found. But, FWIW, I'll support Sean's > interpretation - Contrib and non-free are *not* places where we can > happily breach any bits

[Pkg-javascript-devel] node-d3-drag_1.1.1-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:node-d3-drag is NEW. binary:node-d3-drag is NEW. source:node-d3-drag is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid), so please be

[Pkg-javascript-devel] node-d3-collection_1.0.4-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:node-d3-collection is NEW. binary:node-d3-collection is NEW. source:node-d3-collection is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid),

[Pkg-javascript-devel] node-seedrandom_2.4.3+dfsg-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:node-seedrandom is NEW. binary:node-seedrandom is NEW. source:node-seedrandom is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid), so

[Pkg-javascript-devel] Processing of node-d3-array_1.2.1-1_amd64.changes

2017-10-03 Thread Debian FTP Masters
node-d3-array_1.2.1-1_amd64.changes uploaded successfully to localhost along with the files: node-d3-array_1.2.1-1.dsc node-d3-array_1.2.1.orig.tar.gz node-d3-array_1.2.1-1.debian.tar.xz node-d3-array_1.2.1-1_all.deb node-d3-array_1.2.1-1_amd64.buildinfo Greetings, Your Debian

[Pkg-javascript-devel] Processing of node-d3-collection_1.0.4-1_amd64.changes

2017-10-03 Thread Debian FTP Masters
node-d3-collection_1.0.4-1_amd64.changes uploaded successfully to localhost along with the files: node-d3-collection_1.0.4-1.dsc node-d3-collection_1.0.4.orig.tar.gz node-d3-collection_1.0.4-1.debian.tar.xz node-d3-collection_1.0.4-1_all.deb node-d3-collection_1.0.4-1_amd64.buildinfo

[Pkg-javascript-devel] node-d3-brush_1.0.4-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:node-d3-brush is NEW. binary:node-d3-brush is NEW. source:node-d3-brush is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid), so please be

[Pkg-javascript-devel] node-d3-quadtree_1.0.3-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:node-d3-quadtree is NEW. binary:node-d3-quadtree is NEW. source:node-d3-quadtree is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid), so

[Pkg-javascript-devel] node-d3-time_1.0.7-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:node-d3-time is NEW. binary:node-d3-time is NEW. source:node-d3-time is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid), so please be

[Pkg-javascript-devel] Processing of node-d3-time_1.0.7-1_amd64.changes

2017-10-03 Thread Debian FTP Masters
node-d3-time_1.0.7-1_amd64.changes uploaded successfully to localhost along with the files: node-d3-time_1.0.7-1.dsc node-d3-time_1.0.7.orig.tar.gz node-d3-time_1.0.7-1.debian.tar.xz node-d3-time_1.0.7-1_all.deb node-d3-time_1.0.7-1_amd64.buildinfo Greetings, Your Debian queue

[Pkg-javascript-devel] Processing of node-d3-quadtree_1.0.3-1_amd64.changes

2017-10-03 Thread Debian FTP Masters
node-d3-quadtree_1.0.3-1_amd64.changes uploaded successfully to localhost along with the files: node-d3-quadtree_1.0.3-1.dsc node-d3-quadtree_1.0.3.orig.tar.gz node-d3-quadtree_1.0.3-1.debian.tar.xz node-d3-quadtree_1.0.3-1_all.deb node-d3-quadtree_1.0.3-1_amd64.buildinfo Greetings,

[Pkg-javascript-devel] Processing of node-babel-loader_7.1.2-3_amd64.changes

2017-10-03 Thread Debian FTP Masters
node-babel-loader_7.1.2-3_amd64.changes uploaded successfully to localhost along with the files: node-babel-loader_7.1.2-3.dsc node-babel-loader_7.1.2.orig.tar.gz node-babel-loader_7.1.2-3.debian.tar.xz node-babel-loader_7.1.2-3_all.deb node-babel-loader_7.1.2-3_amd64.buildinfo

[Pkg-javascript-devel] node-babel-loader_7.1.2-3_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:node-babel-loader is NEW. binary:node-babel-loader is NEW. source:node-babel-loader is NEW. node-babel-loader_7.1.2.orig.tar.gz is only available in NEW. node-babel-loader_7.1.2.orig.tar.gz is only available in NEW. Your package has been put into the NEW queue, which requires manual action

[Pkg-javascript-devel] Processing of node-babel-plugin-transform-vue-jsx_3.5.0+dfsg-1_amd64.changes

2017-10-03 Thread Debian FTP Masters
node-babel-plugin-transform-vue-jsx_3.5.0+dfsg-1_amd64.changes uploaded successfully to localhost along with the files: node-babel-plugin-transform-vue-jsx_3.5.0+dfsg-1.dsc node-babel-plugin-transform-vue-jsx_3.5.0+dfsg.orig.tar.xz

[Pkg-javascript-devel] node-babel-plugin-transform-vue-jsx_3.5.0+dfsg-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:node-babel-plugin-transform-vue-jsx is NEW. binary:node-babel-plugin-transform-vue-jsx is NEW. source:node-babel-plugin-transform-vue-jsx is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a

Re: [Pkg-javascript-devel] Bug#877212: node-d3-color: B-D npm not available in testing

2017-10-03 Thread Gunnar Wolf
Pirate Praveen dijo [Tue, Oct 03, 2017 at 12:12:54PM +0530]: > > I am completely with Sean here; I read the following messages, and am > > happy a better resolution was found. But, FWIW, I'll support Sean's > > interpretation - Contrib and non-free are *not* places where we can > > happily breach

Re: [Pkg-javascript-devel] Bug#877212: Bug#877212: node-d3-color: B-D npm not available in testing

2017-10-03 Thread Jérémy Lal
2017-10-03 19:34 GMT+02:00 Gunnar Wolf : > Pirate Praveen dijo [Tue, Oct 03, 2017 at 12:12:54PM +0530]: > > > I am completely with Sean here; I read the following messages, and am > > > happy a better resolution was found. But, FWIW, I'll support Sean's > > > interpretation -

[Pkg-javascript-devel] Processing of libjs-jquery-file-upload_9.19.1-1_amd64.changes

2017-10-03 Thread Debian FTP Masters
/libjs-jquery-file-upload_9.19.1-1_amd64.changes is already present on target host: libjs-jquery-file-upload_9.19.1-1_amd64.buildinfo Either you already uploaded it, or someone else came first. Job libjs-jquery-file-upload_9.19.1-1_amd64.changes removed. Greetings, Your Debian queue

[Pkg-javascript-devel] libjs-jquery-file-upload_9.19.1-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:libjs-jquery-file-upload is NEW. binary:libjs-jquery-file-upload is NEW. source:libjs-jquery-file-upload is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file

[Pkg-javascript-devel] Processing of libjs-vue_2.4.4+dfsg-1_amd64.changes

2017-10-03 Thread Debian FTP Masters
libjs-vue_2.4.4+dfsg-1_amd64.changes uploaded successfully to localhost along with the files: libjs-vue_2.4.4+dfsg-1.dsc libjs-vue_2.4.4+dfsg.orig.tar.xz libjs-vue_2.4.4+dfsg-1.debian.tar.xz libjs-vue_2.4.4+dfsg-1_all.deb libjs-vue_2.4.4+dfsg-1_amd64.buildinfo Greetings, Your

[Pkg-javascript-devel] libjs-dropzone_5.1.1+dfsg2-1_amd64.changes is NEW

2017-10-03 Thread Debian FTP Masters
binary:libjs-dropzone is NEW. binary:libjs-dropzone is NEW. source:libjs-dropzone is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid), so please

[Pkg-javascript-devel] Bug#877212: Bug#877212: node-d3-color: B-D npm not available in testing

2017-10-03 Thread Sean Whitton
Hello Jérémy, On Tue, Oct 03 2017, Jérémy Lal wrote: > It might be a good idea to make policy more explicit about downloads > during build. I'm not sure how it could be more explicit: For packages in the main archive, no required targets may attempt network access. -- Sean Whitton

[Pkg-javascript-devel] Bug#877212: Bug#877212: node-d3-color: B-D npm not available in testing

2017-10-03 Thread Sean Whitton
Hello Pirate, On Tue, Oct 03 2017, Pirate Praveen wrote: > Alternatively, those who care enough about the issue can help get > these tools into main. I have been doing just that over the last years > (grunt, gulp, babel, jison, webpack to name a few, each with 100s of > dependencies) so many of

[Pkg-javascript-devel] Processed: found 877660 in 2.3.2+dfsg-1

2017-10-03 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 877660 2.3.2+dfsg-1 Bug #877660 [node-tough-cookie] CVE-2017-15010 Marked as found in versions node-tough-cookie/2.3.2+dfsg-1. > thanks Stopping processing here. Please contact me if you need assistance. -- 877660:

[Pkg-javascript-devel] Processed: tagging 877660, bug 877660 is forwarded to https://github.com/salesforce/tough-cookie/issues/92

2017-10-03 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 877660 + upstream Bug #877660 [node-tough-cookie] CVE-2017-15010 Added tag(s) upstream. > forwarded 877660 https://github.com/salesforce/tough-cookie/issues/92 Bug #877660 [node-tough-cookie] CVE-2017-15010 Set Bug forwarded-to-address to

[Pkg-javascript-devel] libv8-3.14 REMOVED from testing

2017-10-03 Thread Debian testing watch
FYI: The status of the libv8-3.14 source package in Debian's testing distribution has changed. Previous version: 3.14.5.8-11 Current version: (not in testing) Hint: # 760385,773623,773671,853512 The script that generates this

[Pkg-javascript-devel] node-findit2 is marked for autoremoval from testing

2017-10-03 Thread Debian testing autoremoval watch
node-findit2 2.2.3-1 is marked for autoremoval from testing on 2017-11-10 It is affected by these RC bugs: 876937: node-findit2: missing build dependency on node-mkdirp -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org

[Pkg-javascript-devel] node-multiparty is marked for autoremoval from testing

2017-10-03 Thread Debian testing autoremoval watch
node-multiparty 4.0.0-1 is marked for autoremoval from testing on 2017-11-10 It (build-)depends on packages with these RC bugs: 876937: node-findit2: missing build dependency on node-mkdirp -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org

[Pkg-javascript-devel] Processing of libjs-semanticui_2.2.13+dfsg-1_source.changes

2017-10-03 Thread Debian FTP Masters
libjs-semanticui_2.2.13+dfsg-1_source.changes uploaded successfully to localhost along with the files: libjs-semanticui_2.2.13+dfsg-1.dsc libjs-semanticui_2.2.13+dfsg.orig.tar.xz libjs-semanticui_2.2.13+dfsg-1.debian.tar.xz libjs-semanticui_2.2.13+dfsg-1_amd64.buildinfo Greetings,