Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package element-web for openSUSE:Factory checked in at 2023-04-26 17:26:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/element-web (Old) and /work/SRC/openSUSE:Factory/.element-web.new.1533 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "element-web" Wed Apr 26 17:26:42 2023 rev:35 rq:1082943 version:1.11.30 Changes: -------- --- /work/SRC/openSUSE:Factory/element-web/element-web.changes 2023-04-25 16:44:40.138883122 +0200 +++ /work/SRC/openSUSE:Factory/.element-web.new.1533/element-web.changes 2023-04-26 17:26:43.482100454 +0200 @@ -1,0 +2,7 @@ +Wed Apr 26 09:39:45 UTC 2023 - Dominik Heidler <dheid...@suse.de> + +- Apply https://github.com/vector-im/element-web/pull/25200/files +- Bump yaml from 2.2.1 to 2.2.2 +- Fix boo#1210802 / CVE-2023-2251 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ element-web-1.11.30.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/element-web-1.11.30/yarn.lock new/element-web-1.11.30/yarn.lock --- old/element-web-1.11.30/yarn.lock 2023-04-25 12:07:44.000000000 +0200 +++ new/element-web-1.11.30/yarn.lock 2023-04-26 11:37:56.000000000 +0200 @@ -12911,9 +12911,9 @@ integrity sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg== yaml@^2.0.1: - version "2.2.1" - resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.2.1.tgz#3014bf0482dcd15147aa8e56109ce8632cd60ce4"; - integrity sha512-e0WHiYql7+9wr4cWMx3TVQrNwejKaEe7/rHNmQmqRjazfOP5W8PB6Jpebb5o6fIapbz9o9+2ipcaTM2ZwDI6lw== + version "2.2.2" + resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.2.2.tgz#ec551ef37326e6d42872dad1970300f8eb83a073"; + integrity sha512-CBKFWExMn46Foo4cldiChEzn7S7SRV+wqiluAb6xmueD/fGyRHIhX8m14vVGgeFWjN540nKCNVj6P21eQjgTuA== yargs-parser@^13.1.2: version "13.1.2" ++++++ npm-packages-offline-cache.tar.gz ++++++ /work/SRC/openSUSE:Factory/element-web/npm-packages-offline-cache.tar.gz /work/SRC/openSUSE:Factory/.element-web.new.1533/npm-packages-offline-cache.tar.gz differ: char 13, line 1 ++++++ prepare.sh ++++++ --- /var/tmp/diff_new_pack.ZAoSPl/_old 2023-04-26 17:26:47.074121410 +0200 +++ /var/tmp/diff_new_pack.ZAoSPl/_new 2023-04-26 17:26:47.078121434 +0200 @@ -1,4 +1,4 @@ -#!/bin/bash +#!/bin/bash set -ex @@ -13,9 +13,7 @@ #zypper install yarn cargo gcc-c++ sqlcipher-devel libsecret-devel - rm -rf "element-web-${version}" -wget -c https://github.com/vector-im/element-web/archive/v${version}.tar.gz -O element-web-${version}.tar.gz tar xzvf element-web-${version}.tar.gz cd element-web-${version} @@ -28,11 +26,6 @@ # download some additional dependencie that slips through this earlier method cd ./npm-packages-offline-cache/ -#wget -O matrix-analytics-events-0.0.1.tgz $(grep -m1 -A2 "@matrix.org/analytics-events" ../yarn.lock | grep resolved | awk '{print $NF}' | tr -d '"') -#mkdir package -#tar xvf matrix-analytics-events-0.0.1.tgz --strip-components=1 -C package/ -#tar czf matrix-analytics-events-0.0.1.tgz package/ -#rm -r package # fill sentry-cli cache with mock binaries for all architecutres cd sentry-cli
