Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package forgejo for openSUSE:Factory checked in at 2025-09-20 22:04:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/forgejo (Old) and /work/SRC/openSUSE:Factory/.forgejo.new.27445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "forgejo" Sat Sep 20 22:04:42 2025 rev:35 rq:1306120 version:12.0.4 Changes: -------- --- /work/SRC/openSUSE:Factory/forgejo/forgejo.changes 2025-07-27 16:26:45.926981600 +0200 +++ /work/SRC/openSUSE:Factory/.forgejo.new.27445/forgejo.changes 2025-09-20 22:05:16.165663346 +0200 @@ -1,0 +2,38 @@ +Sat Sep 20 11:26:24 UTC 2025 - Richard Rahl <[email protected]> + +- update to version 12.0.4: + * Do not display the title of unsubscribed issues or pull requests in the + notification web page + * fix: package cleanup rules are not applied when there are more than 200 + packages + * fix: [quota.default].TOTAL config setting supports unit suffixes + * fix: quotas double counting repo size when calculating size:all + * fix: LFS GC is never running because of a bug in the parsing of the INI file + * fix(api): set default pagination and Link header for repoListTags + * chore: build-release must close the cascading pull request + +------------------------------------------------------------------- +Tue Sep 16 14:12:37 UTC 2025 - Richard Rahl <[email protected]> + +- update to version 12.0.3: + * Update dependency mermaid to v11.10.0 [SECURITY] + * fix(ui): clear fields when canceling adding ssh key + * fix(api): deactivate issue api for disabled or external issue-tracker + * fix: migration failing when importing either issues or PRs but not the other + * fix: do better parsing of file modes + * Update module github.com/ulikunitz/xz to v0.5.15 +- update to version 12.0.2: + * fix: email comments are removed from email addresses + * fix: validate CSRF on non-safe methods All PUT/DELETE + * fix: use credential helpers for git clones When performing a git clone that + requires credentials + * fix: consistently enforce 2FA on OpenID 2.0 + * fix: delete old auth token upon replacing primary email When the primary + email is changed before it is validated + * fix: require password login for creation of new token + * fix: ensure GetUserByEmail only considers validated emails + * fix: don't allow credentials in migrate/push mirror URL + * fix: only redirect to a new owner (organization or user) if the user has + permissions to view the new owner + +------------------------------------------------------------------- Old: ---- forgejo-src-12.0.1.tar.gz forgejo-src-12.0.1.tar.gz.asc New: ---- forgejo-src-12.0.4.tar.gz forgejo-src-12.0.4.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ forgejo.spec ++++++ --- /var/tmp/diff_new_pack.9ngYjG/_old 2025-09-20 22:05:24.754023586 +0200 +++ /var/tmp/diff_new_pack.9ngYjG/_new 2025-09-20 22:05:24.754023586 +0200 @@ -1,7 +1,7 @@ # # spec file for package forgejo # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2025 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -25,7 +25,7 @@ %bcond_without apparmor %endif Name: forgejo -Version: 12.0.1 +Version: 12.0.4 Release: 0 Summary: Self-hostable forge License: GPL-3.0-or-later ++++++ forgejo-src-12.0.1.tar.gz -> forgejo-src-12.0.4.tar.gz ++++++ /work/SRC/openSUSE:Factory/forgejo/forgejo-src-12.0.1.tar.gz /work/SRC/openSUSE:Factory/.forgejo.new.27445/forgejo-src-12.0.4.tar.gz differ: char 15, line 1 ++++++ node_modules.obscpio ++++++ /work/SRC/openSUSE:Factory/forgejo/node_modules.obscpio /work/SRC/openSUSE:Factory/.forgejo.new.27445/node_modules.obscpio differ: char 208784769, line 721671 ++++++ node_modules.spec.inc ++++++ --- /var/tmp/diff_new_pack.9ngYjG/_old 2025-09-20 22:05:25.270045230 +0200 +++ /var/tmp/diff_new_pack.9ngYjG/_new 2025-09-20 22:05:25.274045398 +0200 @@ -128,7 +128,7 @@ Source10127: https://registry.npmjs.org/@lit/reactive-element/-/reactive-element-2.1.0.tgz#/@lit-reactive-element-2.1.0.tgz Source10128: https://registry.npmjs.org/@mcaptcha/core-glue/-/core-glue-0.1.0-alpha-5.tgz#/@mcaptcha-core-glue-0.1.0-alpha-5.tgz Source10129: https://registry.npmjs.org/@mcaptcha/vanilla-glue/-/vanilla-glue-0.1.0-alpha-3.tgz#/@mcaptcha-vanilla-glue-0.1.0-alpha-3.tgz -Source10130: https://registry.npmjs.org/@mermaid-js/parser/-/parser-0.4.0.tgz#/@mermaid-js-parser-0.4.0.tgz +Source10130: https://registry.npmjs.org/@mermaid-js/parser/-/parser-0.6.2.tgz#/@mermaid-js-parser-0.6.2.tgz Source10131: https://registry.npmjs.org/@monogrid/gainmap-js/-/gainmap-js-3.1.0.tgz#/@monogrid-gainmap-js-3.1.0.tgz Source10132: https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-0.2.11.tgz#/@napi-rs-wasm-runtime-0.2.11.tgz Source10133: https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz#/@nodelib-fs.scandir-2.1.5.tgz @@ -476,7 +476,7 @@ Source10475: https://registry.npmjs.org/data-view-byte-length/-/data-view-byte-length-1.0.2.tgz#/data-view-byte-length-1.0.2.tgz Source10476: https://registry.npmjs.org/data-view-byte-offset/-/data-view-byte-offset-1.0.1.tgz#/data-view-byte-offset-1.0.1.tgz Source10477: https://registry.npmjs.org/dayjs/-/dayjs-1.11.12.tgz#/dayjs-1.11.12.tgz -Source10478: https://registry.npmjs.org/dayjs/-/dayjs-1.11.13.tgz#/dayjs-1.11.13.tgz +Source10478: https://registry.npmjs.org/dayjs/-/dayjs-1.11.18.tgz#/dayjs-1.11.18.tgz Source10479: https://registry.npmjs.org/debug/-/debug-4.4.1.tgz#/debug-4.4.1.tgz Source10480: https://registry.npmjs.org/decode-named-character-reference/-/decode-named-character-reference-1.2.0.tgz#/decode-named-character-reference-1.2.0.tgz Source10481: https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.2.tgz#/decode-uri-component-0.2.2.tgz @@ -785,7 +785,7 @@ Source10784: https://registry.npmjs.org/markdown-it/-/markdown-it-14.1.0.tgz#/markdown-it-14.1.0.tgz Source10785: https://registry.npmjs.org/markdownlint/-/markdownlint-0.38.0.tgz#/markdownlint-0.38.0.tgz Source10786: https://registry.npmjs.org/markdownlint-cli/-/markdownlint-cli-0.45.0.tgz#/markdownlint-cli-0.45.0.tgz -Source10787: https://registry.npmjs.org/marked/-/marked-15.0.12.tgz#/marked-15.0.12.tgz +Source10787: https://registry.npmjs.org/marked/-/marked-16.2.1.tgz#/marked-16.2.1.tgz Source10788: https://registry.npmjs.org/marked/-/marked-4.3.0.tgz#/marked-4.3.0.tgz Source10789: https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz#/math-intrinsics-1.1.0.tgz Source10790: https://registry.npmjs.org/mathml-tag-names/-/mathml-tag-names-2.1.3.tgz#/mathml-tag-names-2.1.3.tgz @@ -796,7 +796,7 @@ Source10795: https://registry.npmjs.org/meow/-/meow-13.2.0.tgz#/meow-13.2.0.tgz Source10796: https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz#/merge-stream-2.0.0.tgz Source10797: https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz#/merge2-1.4.1.tgz -Source10798: https://registry.npmjs.org/mermaid/-/mermaid-11.6.0.tgz#/mermaid-11.6.0.tgz +Source10798: https://registry.npmjs.org/mermaid/-/mermaid-11.10.0.tgz#/mermaid-11.10.0.tgz Source10799: https://registry.npmjs.org/micromark/-/micromark-4.0.2.tgz#/micromark-4.0.2.tgz Source10800: https://registry.npmjs.org/micromark-core-commonmark/-/micromark-core-commonmark-2.0.3.tgz#/micromark-core-commonmark-2.0.3.tgz Source10801: https://registry.npmjs.org/micromark-extension-directive/-/micromark-extension-directive-4.0.0.tgz#/micromark-extension-directive-4.0.0.tgz ++++++ node_modules.sums ++++++ --- /var/tmp/diff_new_pack.9ngYjG/_old 2025-09-20 22:05:25.302046573 +0200 +++ /var/tmp/diff_new_pack.9ngYjG/_new 2025-09-20 22:05:25.306046741 +0200 @@ -128,7 +128,7 @@ SHA512 (@lit-reactive-element-2.1.0.tgz) = 2f6ab2a194900a57019aad2a6a30556e1604706ea22b45df2e7eba89f2defd17c2d3f8a1a5cfa997459d9fc6c9f28fa18f7f1c1b47c65d18124b6d0cb979fba8 SHA512 (@mcaptcha-core-glue-0.1.0-alpha-5.tgz) = d7aa969b93b95f463d2d750b50b68092cf157fd14d954501711e4a0ede3d696845846e7ef89cf13660b040cf442521cd53bcb453e15dc8059c1a68df2a59112c SHA512 (@mcaptcha-vanilla-glue-0.1.0-alpha-3.tgz) = 193e93241826562197717893e553abfa1ffa88e9d3852959b82a0e5a772e6f24d953d477720539bd63e417b1ba39be9e7b60817b7caa071c64db80855464d55f -SHA512 (@mermaid-js-parser-0.4.0.tgz) = c256bc5ce5af400c2eab2fa0c6266a63e73b16892b68e4c745632c6c1e00811c7d4b2ef32ac94dc9e8f2ec4f9aefba877decb9197c3f8a4dc85effcd1cc26068 +SHA512 (@mermaid-js-parser-0.6.2.tgz) = f8f3b4dae185e8be82b34070f11a46862915bcc584cac7c0ca5dbba9396ba1407c8d25abd652f449feb38bbf19c654a79a0498d8030c29582086737d8d3b7091 SHA512 (@monogrid-gainmap-js-3.1.0.tgz) = 39b6f4fe011dfc745e4e583cb6d69893ed26eb681026609b94c3a31d230746b04fdb375f28c1cb0916e1ffa7b1f5f49424c29d8e32048a887091b183df08f637 SHA512 (@napi-rs-wasm-runtime-0.2.11.tgz) = f433e45edbc7c9dadc3aca29898a5480f1e99a3d0759928c5272f6759aa9bc2e3696cadab6e046d3a5798a9ca7a347d47a4e55945b0d43e01c1404d2ac95e030 SHA512 (@nodelib-fs.scandir-2.1.5.tgz) = beadb806adf29b91c4426d8d282af7c970f08dceef4ec1138510e7929d832bda75baa2d1f831eeae6fcd393a34286ec760753b7a9a4a663dcccaa62e3017fada @@ -476,7 +476,7 @@ SHA512 (data-view-byte-length-1.0.2.tgz) = b6e8466c4e827d333dfb900d19ffa841bef62b2ff4facdf1294a47bd285f8b3d91c4c16014f8ec5ee44b05532dbccb35e5ac1ee394916fcdc3eb01f87b0eb095 SHA512 (data-view-byte-offset-1.0.1.tgz) = 052f0f7e6b431a7ae061d3a89c665074b66c95621e08614ff6da5a9f4862d42a3666bd8d2800ecbc6600f17c6e1bfe145a027a0a3b6ff9826707a30cebd40695 SHA512 (dayjs-1.11.12.tgz) = 46dda0fa74db2e50d6653c30ac85e3cbd31e8999920c8dfbe45bd9b3bda7831c7c3c30ba61739e477ab92c0b8fce3650c6189675129a73b44a57e6324187d822 -SHA512 (dayjs-1.11.13.tgz) = a1a3017a5ea08e894af3adae68f40e55303bab74d986e4afb8c4000209500ce5983bd03dd48ac0394244c8a565a89947134beae69e545f1cdd3df307ff1eb136 +SHA512 (dayjs-1.11.18.tgz) = cc5050ed6151bd546129c5a8521f990358361d58146ec666f6c6dd761f040b98aff77b2e8bc0d5573d4da6fcfeafa99ea3d54a7daf0dc8b581b102b556f20a3c SHA512 (debug-4.4.1.tgz) = 29c282aa27ed049719afefbbca4a03204c126b75d6a304df34fa3dd816318d78b260456b51087668bca1c410b0c30fa17a8aed505c44258711ce8b2cb5310161 SHA512 (decode-named-character-reference-1.2.0.tgz) = 73a7dc125355e9286d6579ac80d805155e6d557d8f695e20f8c38091bf1e5c7be7eacaf2241ad96bdaf4cd5ebe76d4f2a022b1b43cb9b7243967042e89db5df9 SHA512 (decode-uri-component-0.2.2.tgz) = 16a51843ef28d79f06c864eb305266b3daa1dc2a932af02a82ab139e42c8f2c2aed34dbca2ba8187134c16415e9f4cc6ca0e9ea40083df6a63564e7c9e0204ad @@ -785,7 +785,7 @@ SHA512 (markdown-it-14.1.0.tgz) = 6b9e08c2058f69e042000b2fd776209802ce1757a5001074f05c4ef62fabe15164e55978a4aa2444f797f2ee530a04ac3e2e9e735a2d7cb8dd3a955c81ba6c86 SHA512 (markdownlint-0.38.0.tgz) = c5a4b191a53bc18ff4f39db3180a4cf0b76521f1825bc11367446beb6210b409d432532e89fb20d3dbd625c35878be1fd1a9efafc568e1941aafc8c6a55d1bb5 SHA512 (markdownlint-cli-0.45.0.tgz) = 1a25abec67c92d57dca292f7b77a4bba65c262cf2c816a698c803517f09cdf320c803ded9a4a72675c649b54de8fc9b0e7707ddc9b038e003728e7edb9871f3b -SHA512 (marked-15.0.12.tgz) = f1d0fa16eb0e412ae9bfd675add34c7654a040e20ff3cd031ea9e88686ce9982c494612a00bfc9bf1beec593b5eabe07b634e57cf4430b585bbf10bd74f3769c +SHA512 (marked-16.2.1.tgz) = af752b5c40fd94c94717dee3241cabcbdd1cc2b64106f6668c6d4bebca187ee3cc5beb834e7b8c6f2243ca6096c1b4c4f9ffb72e1a4d0ca7e94776b7b1a1728c SHA512 (marked-4.3.0.tgz) = 3d1b1a886f386caf8032fc73884fe5085b2cf23b978cd696cd56cde6d5c09b85e379a4bd3401e1a29f8f8d0c73d80f61f10e0cff11a6ccff2fa8dc32e8978ad0 SHA512 (math-intrinsics-1.1.0.tgz) = fc85ed6f0124e474cfc84c32297ea11a4617c4cf676e3eb807e8a55499c2fd1e81d291f91b85776f4a556cbec3063e2d921040a696d05257fa17a5e5f4b1eed6 SHA512 (mathml-tag-names-2.1.3.tgz) = 00f30111a9e3c9b68fcd4adfa94d08314e48d00b3028c1fb93c3932ecd2fbd5e0a669131913918f3b9d1ff3a5bb933e3fa0011a29eda1946e5d75a670df5bac6 @@ -796,7 +796,7 @@ SHA512 (meow-13.2.0.tgz) = a7140943307a76318f5e1d3c75a704968305a29b0ea865512853d8bcf3adf570d9d476ac6e00d903be02246ade494e06dc093b105246a221f66aeabec9721280 SHA512 (merge-stream-2.0.0.tgz) = 69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf SHA512 (merge2-1.4.1.tgz) = f2aed51203095b827cb5c7d53f2f20d3d35c43065d6f0144aa17bf5999282338e7ff74c60f0b4e098b571b10373bcb4fce97330820e0bfe3f63f9cb4d1924e3a -SHA512 (mermaid-11.6.0.tgz) = 3c4f21194cb52c39562075813f4e5215da941c699170270ae08ce938a3c4df978ec3e1bdcd981c9cca72ba72555043a06fffca04e44f8f2b0a9ddc3c6c52ee46 +SHA512 (mermaid-11.10.0.tgz) = a10b05ccf072f719699c6c54a8b6d563ca6f9272e5b0d209d0d5b08bc49426385b3f5213d04d28d657e1538898577b9ba72fb193391a3b20d440c9f4eaf40495 SHA512 (micromark-4.0.2.tgz) = ce97bdf10ea4bdabe90abd4d3d548231e6c229f0fb080d8da99fabca478d84e348241a5cd6d14ab7d86e70b1b085ade3353348f251e972d5895a88a6545e0f7c SHA512 (micromark-core-commonmark-2.0.3.tgz) = 44306b1c4312c5514b83ac6f9d799bd40cabd96ccb0168de4804c0a31c0a60957de1378d6af82821d0346bdcadcc3495cc1cb660a14af9e9823ce1226cb782ae SHA512 (micromark-extension-directive-4.0.0.tgz) = fc2da7a959975e68ac7924ae09d22d08c868ef26f0c28a7a46bad13e4d0a6ce1d6db524aa0295d0bef2b14e6ae9dd0e8441516067249731780fcabe2df85905e ++++++ package-lock.json ++++++ --- /var/tmp/diff_new_pack.9ngYjG/_old 2025-09-20 22:05:25.346048419 +0200 +++ /var/tmp/diff_new_pack.9ngYjG/_new 2025-09-20 22:05:25.350048587 +0200 @@ -32,7 +32,7 @@ "idiomorph": "0.3.0", "jquery": "3.7.1", "katex": "0.16.22", - "mermaid": "11.6.0", + "mermaid": "11.10.0", "mini-css-extract-plugin": "2.9.2", "minimatch": "10.0.3", "monaco-editor": "0.52.2", @@ -2088,9 +2088,9 @@ } }, "node_modules/@mermaid-js/parser": { - "version": "0.4.0", - "resolved": "https://registry.npmjs.org/@mermaid-js/parser/-/parser-0.4.0.tgz";, - "integrity": "sha512-wla8XOWvQAwuqy+gxiZqY+c7FokraOTHRWMsbB4AgRx9Sy7zKslNyejy7E+a77qHfey5GXw/ik3IXv/NHMJgaA==", + "version": "0.6.2", + "resolved": "https://registry.npmjs.org/@mermaid-js/parser/-/parser-0.6.2.tgz";, + "integrity": "sha512-+PO02uGF6L6Cs0Bw8RpGhikVvMWEysfAyl27qTlroUB8jSWr1lL0Sf6zi78ZxlSnmgSY2AMMKVgghnN9jTtwkQ==", "license": "MIT", "dependencies": { "langium": "3.3.1" @@ -10562,14 +10562,14 @@ } }, "node_modules/mermaid": { - "version": "11.6.0", - "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-11.6.0.tgz";, - "integrity": "sha512-PE8hGUy1LDlWIHWBP05SFdqUHGmRcCcK4IzpOKPE35eOw+G9zZgcnMpyunJVUEOgb//KBORPjysKndw8bFLuRg==", + "version": "11.10.0", + "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-11.10.0.tgz";, + "integrity": "sha512-oQsFzPBy9xlpnGxUqLbVY8pvknLlsNIJ0NWwi8SUJjhbP1IT0E0o1lfhU4iYV3ubpy+xkzkaOyDUQMn06vQElQ==", "license": "MIT", "dependencies": { "@braintree/sanitize-url": "^7.0.4", "@iconify/utils": "^2.1.33", - "@mermaid-js/parser": "^0.4.0", + "@mermaid-js/parser": "^0.6.2", "@types/d3": "^7.4.3", "cytoscape": "^3.29.3", "cytoscape-cose-bilkent": "^4.1.0", @@ -10578,11 +10578,11 @@ "d3-sankey": "^0.12.3", "dagre-d3-es": "7.0.11", "dayjs": "^1.11.13", - "dompurify": "^3.2.4", - "katex": "^0.16.9", + "dompurify": "^3.2.5", + "katex": "^0.16.22", "khroma": "^2.1.0", "lodash-es": "^4.17.21", - "marked": "^15.0.7", + "marked": "^16.0.0", "roughjs": "^4.6.6", "stylis": "^4.3.6", "ts-dedent": "^2.2.0", @@ -10590,21 +10590,21 @@ } }, "node_modules/mermaid/node_modules/dayjs": { - "version": "1.11.13", - "resolved": "https://registry.npmjs.org/dayjs/-/dayjs-1.11.13.tgz";, - "integrity": "sha512-oaMBel6gjolK862uaPQOVTA7q3TZhuSvuMQAAglQDOWYO9A91IrAOUJEyKVlqJlHE0vq5p5UXxzdPfMH/x6xNg==", + "version": "1.11.18", + "resolved": "https://registry.npmjs.org/dayjs/-/dayjs-1.11.18.tgz";, + "integrity": "sha512-zFBQ7WFRvVRhKcWoUh+ZA1g2HVgUbsZm9sbddh8EC5iv93sui8DVVz1Npvz+r6meo9VKfa8NyLWBsQK1VvIKPA==", "license": "MIT" }, "node_modules/mermaid/node_modules/marked": { - "version": "15.0.12", - "resolved": "https://registry.npmjs.org/marked/-/marked-15.0.12.tgz";, - "integrity": "sha512-8dD6FusOQSrpv9Z1rdNMdlSgQOIP880DHqnohobOmYLElGEqAL/JvxvuxZO16r4HtjTlfPRDC1hbvxC9dPN2nA==", + "version": "16.2.1", + "resolved": "https://registry.npmjs.org/marked/-/marked-16.2.1.tgz";, + "integrity": "sha512-r3UrXED9lMlHF97jJByry90cwrZBBvZmjG1L68oYfuPMW+uDTnuMbyJDymCWwbTE+f+3LhpNDKfpR3a3saFyjA==", "license": "MIT", "bin": { "marked": "bin/marked.js" }, "engines": { - "node": ">= 18" + "node": ">= 20" } }, "node_modules/micromark": {
