Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mruby for openSUSE:Factory checked in at 2026-09-14 16:26:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mruby (Old) and /work/SRC/openSUSE:Factory/.mruby.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mruby" Mon Sep 14 16:26:08 2026 rev:9 rq:1377862 version:4.0.0 Changes: -------- --- /work/SRC/openSUSE:Factory/mruby/mruby.changes 2025-07-09 17:30:17.988284441 +0200 +++ /work/SRC/openSUSE:Factory/.mruby.new.1265/mruby.changes 2026-09-14 16:26:16.574363739 +0200 @@ -1,0 +2,44 @@ +Mon Sep 14 09:51:13 UTC 2026 - Ferdinand Thiessen <[email protected]> + +- Properly define documentation files + +------------------------------------------------------------------- +Sun Sep 13 15:01:54 UTC 2026 - Ferdinand Thiessen <[email protected]> + +- Removed upstream merged CVE-2025-7207.patch +- Update to 4.0.0 + - Added + - Pattern matching: (`case`/`in`): array, hash, and find patterns, + the pin operator (`^var`), guard clauses, one-line `expr in pattern`, and brace-less hash patterns. + - `&nil` in parameter lists to explicitly reject block arguments. + - Trailing commas allowed in method definition parameters: `def foo(a, b,)`. + - `Array`, `Hash`, and `String` subclasses can override `[]` and `[]=` again. + - Structs can be initialized with keyword arguments. + - New gems: **mruby-task** (cooperative multitasking with preemptive scheduling), **mruby-benchmark**, and **mruby-strftime** (`Time#strftime`). + - New methods: `Array#find`, `Array#rfind`, `IO#putc`, `Kernel#putc`. + - New platform support: Cosmopolitan Libc; Emscripten now uses native WASM exception handling. + - Amalgamation build via `rake amalgam`. + - Changed + - mirb now ships a custom multi-line editor instead of readline: + syntax highlighting, tab completion, auto-indent/dedent, command history, + line numbers, UTF-8 input, colored prompts and errors, and automatic light/dark theme detection. + - Much lower memory use: built-in classes and most extension gems now use + read-only method tables in `.rodata` rather than heap-allocated tables + - Faster execution: new fused VM instructions for zero-argument calls, + method definitions, `array[0]`, `i += n`, and simple returns + - mruby-bigint is significantly faster on large numbers + - mruby-random switched from xoshiro to PCG for lower memory use + - Breaking + - `case`/`in` without an `else` branch now raises `NoMatchingPatternError`. + - `Hash#deconstruct_keys` was removed for CRuby compatibility. + - `initialize_copy` and `respond_to_missing?` are now private. + - C API: `mrb_alloca()` is now `mrb_temp_alloc()`; `mruby/ext/io.h` moved to `mruby/io.h`. + - Security + - Buffer overflows in bigint addition, Montgomery reduction, `pack_uu`, `IO#ungetc`, + `IO.select`, `method_missing`, `String#prepend`, pattern alternation codegen, and `.mrb` loading. + - Use-after-free issues in `Set` operations, `Set#join`, + `Array` set operations, `Array#sort!`, sorting, and `sprintf` format strings mutated via `to_s` callbacks. + - Integer overflows in string length checking and `Integer#lcm`, + plus several memory leaks in bigint, `Set`, `Array`, and the Task gem. + +------------------------------------------------------------------- Old: ---- CVE-2025-7207.patch mruby-3.4.0.tar.gz New: ---- mruby-4.0.0.tar.gz ----------(Old B)---------- Old: - Removed upstream merged CVE-2025-7207.patch - Update to 4.0.0 ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mruby.spec ++++++ --- /var/tmp/diff_new_pack.7Jlvql/_old 2026-09-14 16:26:17.644408575 +0200 +++ /var/tmp/diff_new_pack.7Jlvql/_new 2026-09-14 16:26:17.646408658 +0200 @@ -2,7 +2,7 @@ # # spec file for package mruby # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # Copyright (c) 2012 Pascal Bleser <[email protected]> # # All modifications and additions to the file contributed by third parties @@ -19,9 +19,9 @@ %global _lto_cflags %{_lto_cflags} -ffat-lto-objects -%define sover 3_4_0 +%define sover 4_0_0 Name: mruby -Version: 3.4.0 +Version: 4.0.0 Release: 0 Summary: Lightweight Ruby License: MIT @@ -30,8 +30,6 @@ Source: %{url}/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz # PATCH-FIX-OPENSUSE PATCH-FEATURE-UPSTREAM link-with-soname.patch -- Add SONAME to library Patch0: link-with-soname.patch -# PATCH-FIX-UPSTREAM CVE-2025-7207.patch -- upstream patch for CVE-2025-7207 known as boo#1246138 -Patch1: https://github.com/mruby/mruby/commit/1fdd96104180cc0fb5d3cb086b05ab6458911bb9.diff#/CVE-2025-7207.patch BuildRequires: bison BuildRequires: cmake BuildRequires: pkgconfig @@ -127,8 +125,8 @@ %{_libdir}/libmruby_core.so.%{version} %files -%doc AUTHORS CONTRIBUTING.md LEGAL NEWS README.md -%license LICENSE +%doc AUTHORS CONTRIBUTING.md README.md doc/mruby4.0.md +%license LEGAL LICENSE %{_bindir}/mirb %{_bindir}/mrbc %{_bindir}/mruby ++++++ mruby-3.4.0.tar.gz -> mruby-4.0.0.tar.gz ++++++ ++++ 124449 lines of diff (skipped)
