Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package guava for openSUSE:Factory checked
in at 2023-06-16 16:54:40
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/guava (Old)
and /work/SRC/openSUSE:Factory/.guava.new.15902 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "guava"
Fri Jun 16 16:54:40 2023 rev:9 rq:1093336 version:32.0.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/guava/guava.changes 2022-05-25
20:35:13.500283134 +0200
+++ /work/SRC/openSUSE:Factory/.guava.new.15902/guava.changes 2023-06-16
16:55:47.402042224 +0200
@@ -1,0 +2,54 @@
+Thu Jun 15 13:20:35 UTC 2023 - Fridrich Strba <fst...@suse.com>
+
+- Upgrade to guava 32.0.1
+ * Security fixes:
+ + Reimplemented Files.createTempDir and FileBackedOutputStream
+ to further address CVE-2020-8908 (#4011, bsc#1179926) and
+ CVE-2023-2976 (#2575, bsc#1212401)
+ * Fixes:
+ + io: Fixed Files.createTempDir and FileBackedOutputStream under
+ Windows, which broke as part of the security fix in release
+ 32.0.0
+ + Removed @Beta from almost all APIs. Most of the remaining
+ @Beta APIs are in graph and hash.
+ + Enhanced the Guava jar to include Proguard configurations that
+ are picked up automatically by the Android Gradle Plugin. This
+ should help with warnings that were promoted to errors in
+ Android Gradle Plugin 8.x.
+ + Enhanced the Guava jar to include information about method
+ parameters in its class files. If you use static analyzers
+ that look at method-parameter names, you may see new warnings
+ or errors if they are now able to detect mismatches. But
+ mostly, you may see better tooltips and autocompletion in
+ DEs.
+ + Improved nullness annotations on a few classes.
+ + Modified classes with "serial proxies" to declare
+ exception-throwing readObject methods, in accordance with best
+ practice.
+ + collect: Fixed Maps.newHashMapWithExpectedSize to stop
+ allocating maps that were larger than they needed to be.
+ + collect: Made various APIs work J2CL:
+ Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
+ CollectorTester. Previously, the APIs were present but failed
+ at runtime.
+ + collect: Optimized memory usage for Interner and MapMaker.
+ + graph: Changed directed graphs to reject attempts to add
+ undirected edges.
+ + io: Added BaseEncoding.ignoreCase() to support
+ case-insensitive decoding.
+ + net: Added HttpHeaders constants:
+ ~ No-Vary-Search
+ ~ Sec-CH-DPR
+ ~ Sec-CH-UA-Wow64
+ ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
+ ~ Supports-Loading-Mode
+ + net: Added the MediaType constant for JWT.
+ + primitives: Added rotate() for arrays of all primitive types.
+ + util.concurrent: Changed AbstractFuture to run
+ interruptTask() just before afterDone(). Until this change, it
+ ran slightly earlier than that: We used to run it before
+ unblocking any pending get() calls, and now we run it after.
+ + util.concurrent: Fixed some cases in which we could catch
+ InterruptedException but fail to restore the interrupt bit.
+
+-------------------------------------------------------------------
Old:
----
v31.1.tar.gz
New:
----
v32.0.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ guava.spec ++++++
--- /var/tmp/diff_new_pack.1YXPyI/_old 2023-06-16 16:55:47.978045622 +0200
+++ /var/tmp/diff_new_pack.1YXPyI/_new 2023-06-16 16:55:47.982045646 +0200
@@ -1,7 +1,7 @@
#
# spec file for package guava
#
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
Name: guava
-Version: 31.1
+Version: 32.0.1
Release: 0
Summary: Google Core Libraries for Java
License: Apache-2.0 AND CC0-1.0
@@ -118,11 +118,11 @@
%files -f .mfiles
%doc CONTRIBUTORS README*
-%license COPYING
+%license LICENSE
%files javadoc
%{_javadocdir}/%{name}
-%license COPYING
+%license LICENSE
%files testlib -f .mfiles-guava-testlib
++++++ guava-build.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/common.xml new/common.xml
--- old/common.xml 2022-05-17 02:33:57.060608131 +0200
+++ new/common.xml 2023-06-15 15:14:12.153667258 +0200
@@ -3,7 +3,7 @@
<project name="common">
<property name="project.groupId" value="com.google.guava"/>
- <property name="project.version" value="31.1-jre"/>
+ <property name="project.version" value="32.0.1-jre"/>
<property name="compiler.source" value="1.8"/>
<property name="compiler.target" value="${compiler.source}"/>
++++++ v31.1.tar.gz -> v32.0.1.tar.gz ++++++
++++ 108051 lines of diff (skipped)
