Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs-electron for openSUSE:Factory checked in at 2023-04-16 16:07:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs-electron (Old) and /work/SRC/openSUSE:Factory/.nodejs-electron.new.19717 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs-electron" Sun Apr 16 16:07:04 2023 rev:63 rq:1079611 version:22.3.6 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs-electron/nodejs-electron.changes 2023-04-04 21:27:25.867580880 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs-electron.new.19717/nodejs-electron.changes 2023-04-16 16:07:23.512926461 +0200 @@ -1,0 +2,11 @@ +Sat Apr 15 11:33:42 UTC 2023 - Bruno Pitrus <brunopit...@hotmail.com> +- New upstream release 22.3.6 + * Fixed an issue with Content-Security-Policy not being correctly enforced when sandbox: false and contextIsolation: false. (CVE-2023-23623) + * Fixed a memory leak in v8.serialize() when running Node.js within Electron. + * Viz: Add CHECKs in HostFrameSinkManager (CVE-2023-1810) + * Blink: Move the edit commands to an on stack variable (CVE-2023-1811) +- Fix download tarball script wrongly setting GPU_LISTS_VERSION to zero +- Change 647d3d2.patch to fix FTBFS on aarch64 Fedora +- Fix unresolvable build on Fedora 37 + +------------------------------------------------------------------- Old: ---- electron-22.3.5.tar.zst New: ---- electron-22.3.6.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs-electron.spec ++++++ --- /var/tmp/diff_new_pack.sALker/_old 2023-04-16 16:07:30.144964689 +0200 +++ /var/tmp/diff_new_pack.sALker/_new 2023-04-16 16:07:30.148964712 +0200 @@ -208,7 +208,7 @@ Name: nodejs-electron -Version: 22.3.5 +Version: 22.3.6 Release: 0 Summary: Build cross platform desktop apps with JavaScript, HTML, and CSS License: AFL-2.0 AND Apache-2.0 AND blessing AND BSD-2-Clause AND BSD-3-Clause AND BSD-Protection AND BSD-Source-Code AND bzip2-1.0.6 AND IJG AND ISC AND LGPL-2.0-or-later AND LGPL-2.1-or-later AND MIT AND MIT-CMU AND MIT-open-group AND (MPL-1.1 OR GPL-2.0-or-later OR LGPL-2.1-or-later) AND MPL-2.0 AND OpenSSL AND SGI-B-2.0 AND SUSE-Public-Domain AND X11 @@ -457,11 +457,9 @@ %else BuildRequires: ninja-build >= 1.7.2 %endif -%if 0%{?sle_version} == 150300 -BuildRequires: nodejs16 -BuildRequires: npm16 +%if 0%{?fedora} >= 37 +BuildRequires: nodejs-npm %else -BuildRequires: nodejs >= 16 BuildRequires: npm %endif BuildRequires: pkgconfig ++++++ 647d3d2.patch ++++++ --- /var/tmp/diff_new_pack.sALker/_old 2023-04-16 16:07:30.216965104 +0200 +++ /var/tmp/diff_new_pack.sALker/_new 2023-04-16 16:07:30.220965127 +0200 @@ -20,12 +20,15 @@ index d3dbdb9..fad747a 100644 --- src/third_party/swiftshader/src/Reactor/LLVMJIT.cpp +++ src/third_party/swiftshader/src/Reactor/LLVMJIT.cpp -@@ -922,7 +922,7 @@ +@@ -922,7 +922,11 @@ if(optimizationLevel > 0) { -- fpm.addPass(llvm::SROAPass()); ++#if LLVM_VERSION_MAJOR >= 16 + fpm.addPass(llvm::SROAPass(llvm::SROAOptions::PreserveCFG)); ++#else + fpm.addPass(llvm::SROAPass()); ++#endif fpm.addPass(llvm::InstCombinePass()); } ++++++ create_tarball.sh ++++++ --- /var/tmp/diff_new_pack.sALker/_old 2023-04-16 16:07:30.316965680 +0200 +++ /var/tmp/diff_new_pack.sALker/_new 2023-04-16 16:07:30.320965704 +0200 @@ -83,6 +83,8 @@ echo ">>>>>> Generate GPU_LISTS_VERSION" +# Make git all commits in chromium history visible to the script +git fetch --filter=tree:0 --unshallow origin $(git rev-parse HEAD) python3 build/util/lastchange.py -m GPU_LISTS_VERSION \ --revision-id-only --header gpu/config/gpu_lists_version.h if [ $? -ne 0 ]; then