[Pkg-javascript-devel] Processing of node-jquery_3.5.1+dfsg-4~bpo10+1_source.changes

2020-09-03 Thread Debian FTP Masters
node-jquery_3.5.1+dfsg-4~bpo10+1_source.changes uploaded successfully to localhost along with the files: node-jquery_3.5.1+dfsg-4~bpo10+1.dsc node-jquery_3.5.1+dfsg-4~bpo10+1.debian.tar.xz node-jquery_3.5.1+dfsg-4~bpo10+1_amd64.buildinfo Greetings, Your Debian queue daemon (running

[Pkg-javascript-devel] Processing of node-grunt-babel_8.0.0-3~bpo10+1_amd64.changes

2020-09-03 Thread Debian FTP Masters
node-grunt-babel_8.0.0-3~bpo10+1_amd64.changes uploaded successfully to localhost along with the files: node-grunt-babel_8.0.0-3~bpo10+1.dsc node-grunt-babel_8.0.0.orig.tar.gz node-grunt-babel_8.0.0-3~bpo10+1.debian.tar.xz node-grunt-babel_8.0.0-3~bpo10+1_all.deb node-grunt-babel_8.0.0-3

[Pkg-javascript-devel] node-grunt-babel_8.0.0-3~bpo10+1_amd64.changes is NEW

2020-09-03 Thread Debian FTP Masters
binary:node-grunt-babel is NEW. binary:node-grunt-babel is NEW. source:node-grunt-babel is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid), so ple

[Pkg-javascript-devel] node-jquery_3.5.1+dfsg-4~bpo10+1_source.changes REJECTED

2020-09-03 Thread Debian FTP Masters
Source-only uploads to NEW are not allowed. binary:libjs-jquery is NEW. === Please feel free to respond to this email if you don't understand why your files were rejected, or if you upload new files which address our concerns. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth

[Pkg-javascript-devel] Processing of node-jquery_3.5.1+dfsg-4~bpo10+1_amd64.changes

2020-09-03 Thread Debian FTP Masters
node-jquery_3.5.1+dfsg-4~bpo10+1_amd64.changes uploaded successfully to localhost along with the files: node-jquery_3.5.1+dfsg-4~bpo10+1.dsc node-jquery_3.5.1+dfsg.orig.tar.xz node-jquery_3.5.1+dfsg-4~bpo10+1.debian.tar.xz libjs-jquery_3.5.1+dfsg-4~bpo10+1_all.deb node-jquery_3.5.1+dfsg-

[Pkg-javascript-devel] node-jquery_3.5.1+dfsg-4~bpo10+1_amd64.changes is NEW

2020-09-03 Thread Debian FTP Masters
binary:libjs-jquery is NEW. binary:libjs-jquery is NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature and file hashes are valid), so please be patient. Packages are routinely

[Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Xavier
Hi, here is a list of modules embedded in more than one package (based on lintian's nodejs-module tag). There may be some errors since it's based on an extract (where I already found some errors). Please take a look. Note: working with lintian team, I'll automate this report and propose an update

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Andrius Merkys
Hi Xavier, On 2020-09-03 15:54, Xavier wrote: > buffer-equal: > - node-buffer-equal (1.0.0) > - node-vinyl-fs (1.0.0) Does this (and the like) mean that is now packaged as node-? If so, such embedded modules might be removed. Best, Andrius -- Pkg-javascript-devel mailing list Pkg-

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Jonas Smedegaard
Quoting Andrius Merkys (2020-09-03 14:59:38) > On 2020-09-03 15:54, Xavier wrote: > > buffer-equal: > > - node-buffer-equal (1.0.0) > > - node-vinyl-fs (1.0.0) > > Does this (and the like) mean that is now packaged as > node-? If so, such embedded modules might be removed. Why only "

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Xavier
Le 03/09/2020 à 14:59, Andrius Merkys a écrit : > Hi Xavier, > > On 2020-09-03 15:54, Xavier wrote: >> buffer-equal: >> - node-buffer-equal (1.0.0) >> - node-vinyl-fs (1.0.0) > > Does this (and the like) mean that is now packaged as > node-? If so, such embedded modules might be remove

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Xavier
Le 03/09/2020 à 15:36, Xavier a écrit : > Le 03/09/2020 à 14:59, Andrius Merkys a écrit : >> Hi Xavier, >> >> On 2020-09-03 15:54, Xavier wrote: >>> buffer-equal: >>> - node-buffer-equal (1.0.0) >>> - node-vinyl-fs (1.0.0) >> >> Does this (and the like) mean that is now packaged as >> node

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Andrius Merkys
On 2020-09-03 16:23, Jonas Smedegaard wrote: > Quoting Andrius Merkys (2020-09-03 14:59:38) >> On 2020-09-03 15:54, Xavier wrote: >>> buffer-equal: >>> - node-buffer-equal (1.0.0) >>> - node-vinyl-fs (1.0.0) >> Does this (and the like) mean that is now packaged as >> node-? If so, such

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Jonas Smedegaard
Quoting Xavier (2020-09-03 15:43:24) > Le 03/09/2020 à 15:36, Xavier a écrit : > > Le 03/09/2020 à 14:59, Andrius Merkys a écrit : > >> Hi Xavier, > >> > >> On 2020-09-03 15:54, Xavier wrote: > >>> buffer-equal: > >>> - node-buffer-equal (1.0.0) > >>> - node-vinyl-fs (1.0.0) > >> > >> Does

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Xavier
Le 03/09/2020 à 16:02, Jonas Smedegaard a écrit : > Quoting Xavier (2020-09-03 15:43:24) >> Le 03/09/2020 à 15:36, Xavier a écrit : >>> Le 03/09/2020 à 14:59, Andrius Merkys a écrit : Hi Xavier, On 2020-09-03 15:54, Xavier wrote: > buffer-equal: > - node-buffer-equal (1.0

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Nicolas Mora
Hello, Concerning embedded modules, this raises me another question. Le 20-09-03 à 08 h 54, Xavier a écrit : > serialize-javascript: > - node-compression-webpack-plugin (1.9.1) > - node-copy-webpack-plugin (1.4.0) > - node-uglifyjs-webpack-plugin (1.7.0) A CVE was recently pub

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Jonas Smedegaard
Quoting Andrius Merkys (2020-09-03 15:54:30) > On 2020-09-03 16:23, Jonas Smedegaard wrote: > > Quoting Andrius Merkys (2020-09-03 14:59:38) > >> On 2020-09-03 15:54, Xavier wrote: > >>> buffer-equal: > >>> - node-buffer-equal (1.0.0) > >>> - node-vinyl-fs (1.0.0) > >> Does this (and th

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Jonas Smedegaard
Quoting Xavier (2020-09-03 16:06:01) > Le 03/09/2020 à 16:02, Jonas Smedegaard a écrit : > > Quoting Xavier (2020-09-03 15:43:24) > >> Le 03/09/2020 à 15:36, Xavier a écrit : > >>> Le 03/09/2020 à 14:59, Andrius Merkys a écrit : > Hi Xavier, > > On 2020-09-03 15:54, Xavier wrote: > >

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Jonas Smedegaard
Quoting Nicolas Mora (2020-09-03 15:49:32) > Hello, > > Concerning embedded modules, this raises me another question. > > Le 20-09-03 à 08 h 54, Xavier a écrit : > > > serialize-javascript: > > - node-compression-webpack-plugin (1.9.1) > > - node-copy-webpack-plugin (1.4.0) > >

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Xavier
Le 03/09/2020 à 16:28, Jonas Smedegaard a écrit : > Quoting Nicolas Mora (2020-09-03 15:49:32) >> Hello, >> >> Concerning embedded modules, this raises me another question. >> >> Le 20-09-03 à 08 h 54, Xavier a écrit : >> >>> serialize-javascript: >>> - node-compression-webpack-plugin (1.9.1)

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Jonas Smedegaard
Quoting Xavier (2020-09-03 16:33:10) > Le 03/09/2020 à 16:28, Jonas Smedegaard a écrit : > > Quoting Nicolas Mora (2020-09-03 15:49:32) > >> Hello, > >> > >> Concerning embedded modules, this raises me another question. > >> > >> Le 20-09-03 à 08 h 54, Xavier a écrit : > >> > >>> serialize-javascri

Re: [Pkg-javascript-devel] Embedded modules more than once

2020-09-03 Thread Nicolas Mora
Le 20-09-03 à 10 h 33, Xavier a écrit : >> A second step would be to report all embedded code to the security team >> - see https://wiki.debian.org/EmbeddedCopies > > Partially done > Awesome! >> A third step would be to ask the security team how we might better help >> them handle this¹ issue

[Pkg-javascript-devel] Processing of node-sinon_9.0.3+ds+~cs48.19.16-1_sourceonly.changes

2020-09-03 Thread Debian FTP Masters
node-sinon_9.0.3+ds+~cs48.19.16-1_sourceonly.changes uploaded successfully to localhost along with the files: node-sinon_9.0.3+ds+~cs48.19.16-1.dsc node-sinon_9.0.3+ds+~cs48.19.16.orig-bane.tar.xz node-sinon_9.0.3+ds+~cs48.19.16.orig-just-extend.tar.xz node-sinon_9.0.3+ds+~cs48.19.16.orig-

[Pkg-javascript-devel] Processing of node-parse-json_5.1.0+~1.1.6-1_sourceonly.changes

2020-09-03 Thread Debian FTP Masters
node-parse-json_5.1.0+~1.1.6-1_sourceonly.changes uploaded successfully to localhost along with the files: node-parse-json_5.1.0+~1.1.6-1.dsc node-parse-json_5.1.0+~1.1.6.orig-lines-and-columns.tar.gz node-parse-json_5.1.0+~1.1.6.orig.tar.gz node-parse-json_5.1.0+~1.1.6-1.debian.tar.xz Gr

[Pkg-javascript-devel] node-sinon_9.0.3+ds+~cs48.19.16-1_sourceonly.changes ACCEPTED into unstable

2020-09-03 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2020 13:19:13 +0200 Source: node-sinon Architecture: source Version: 9.0.3+ds+~cs48.19.16-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Clos

[Pkg-javascript-devel] node-parse-json_5.1.0+~1.1.6-1_sourceonly.changes ACCEPTED into unstable

2020-09-03 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2020 15:28:16 +0200 Source: node-parse-json Architecture: source Version: 5.1.0+~1.1.6-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Changes

[Pkg-javascript-devel] Bug#968970: marked as done (Please add typescript definitions to the package)

2020-09-03 Thread Debian Bug Tracking System
Your message dated Thu, 03 Sep 2020 20:35:05 + with message-id and subject line Bug#968970: fixed in node-sinon 9.0.3+ds+~cs48.19.16-1 has caused the Debian Bug report #968970, regarding Please add typescript definitions to the package to be marked as done. This means that you claim that the

[Pkg-javascript-devel] Bug#930814: node-d3-hierarchy: please make the build reproducible

2020-09-03 Thread Chris Lamb
Dear Maintainer, > Source: node-d3-hierarchy > Version: 1.1.8-1 > Tags: patch There hasn't seem to be any update on this bug in 440 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. :

[Pkg-javascript-devel] Bug#892425: node-package-preamble: please make the output reproducible

2020-09-03 Thread Chris Lamb
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailma

[Pkg-javascript-devel] Bug#892425: Bug#892425: node-package-preamble: please make the output reproducible

2020-09-03 Thread Xavier
Le 04/09/2020 à 00:58, Chris Lamb a écrit : > Chris Lamb wrote: > >> [..] > > Friendly ping on this? > > > Regards, Hi, I think we already fix that with https://bugs.debian.org/935790 Duplication ? Cheers, Xavier -- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debia

[Pkg-javascript-devel] Processing of node-d3-hierarchy_1.1.8-2_sourceonly.changes

2020-09-03 Thread Debian FTP Masters
node-d3-hierarchy_1.1.8-2_sourceonly.changes uploaded successfully to localhost along with the files: node-d3-hierarchy_1.1.8-2.dsc node-d3-hierarchy_1.1.8-2.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org) -- Pkg-javascript-devel mailing list Pkg

[Pkg-javascript-devel] node-d3-hierarchy_1.1.8-2_sourceonly.changes ACCEPTED into unstable

2020-09-03 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 04 Sep 2020 06:14:20 +0200 Source: node-d3-hierarchy Architecture: source Version: 1.1.8-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Closes: 9308

[Pkg-javascript-devel] Bug#930814: marked as done (node-d3-hierarchy: please make the build reproducible)

2020-09-03 Thread Debian Bug Tracking System
Your message dated Fri, 04 Sep 2020 04:33:33 + with message-id and subject line Bug#930814: fixed in node-d3-hierarchy 1.1.8-2 has caused the Debian Bug report #930814, regarding node-d3-hierarchy: please make the build reproducible to be marked as done. This means that you claim that the pro