Sync from SUSE:ALP:Source:Standard:1.0 libzypp revision bf0c3e1ffc98cf52416cdd9e30f07c4b

libzypp.changes

@@ -1,3 +1,258 @@
+-------------------------------------------------------------------
+Wed Oct  9 18:21:43 CEST 2024 - ma@suse.de
+
+- PluginFrame: Send unescaped colons in header values
+  (bsc#1231043)
+  According to the STOMP protocol it would be correct to escape a
+  colon in a header-value, but it breaks plugin receivers which do
+  not expect this. The first colon separates header-name from
+  header-value, so escaping in the header-value is not needed
+  anyway.
+  Escaping in the header-value affects especially the urlresolver
+  plugins. The input URL is passed in a header, but sent back as
+  raw data in the frames body. If the plugin receiver does not
+  correctly unescape the URL we may get back a "https\c//" which is
+  not usable.
+- Do not ignore return value of std::remove_if in MediaSyncFacade
+  (fixes #579)
+- Fix hang in curl code with no network connection (bsc#1230912)
+- version 17.35.12 (35)
+
+-------------------------------------------------------------------
+Thu Sep 12 13:44:05 CEST 2024 - ma@suse.de
+
+- Deprecate librpmDb::db_const_iterator default ctor (bsc#1230267)
+  It's preferred to explicitly tell the root directory of the
+  system whose database you want to query.
+- version 17.35.11 (35)
+
+-------------------------------------------------------------------
+Fri Sep  6 11:55:42 CEST 2024 - ma@suse.de
+
+- API refactoring. Prevent zypper from using now private libzypp
+  symbols (bsc#1230267)
+- Conflicts: zypper <= 1.14.76
+- version 17.35.10 (35)
+
+-------------------------------------------------------------------
+Mon Aug  5 12:04:25 CEST 2024 - ma@suse.de
+
+- single_rpmtrans: fix installation of .src.rpms (bsc#1228647)
+- version 17.35.9 (35)
+
+-------------------------------------------------------------------
+Fri Aug  2 12:46:50 CEST 2024 - ma@suse.de
+
+- Make sure not to statically linked installed tools (bsc#1228787)
+- version 17.35.8 (35)
+
+-------------------------------------------------------------------
+Thu Aug  1 17:35:44 CEST 2024 - ma@suse.de
+
+- MediaPluginType must be resolved to a valid MediaHandler
+  (bsc#1228208)
+- version 17.35.7 (35)
+
+-------------------------------------------------------------------
+Tue Jul 30 16:59:53 CEST 2024 - ma@suse.de
+
+- Export CredentialManager for legacy YAST versions (bsc#1228420)
+- version 17.35.6 (35)
+
+-------------------------------------------------------------------
+Tue Jul 30 15:55:38 CEST 2024 - ma@suse.de
+
+- Export asSolvable for YAST (bsc#1228420)
+- Fix 4 typos in zypp.conf.
+- version 17.35.5 (35)
+
+-------------------------------------------------------------------
+Tue Jul 23 14:19:39 CEST 2024 - ma@suse.de
+
+- Fix typo in the geoip update pipeline (bsc#1228206)
+- Export RepoVariablesStringReplacer for yast2 (bsc#1228138)
+- version 17.35.4 (35)
+
+-------------------------------------------------------------------
+Mon Jul 15 16:13:25 CEST 2024 - ma@suse.de
+
+- Translation: updated .pot file.
+- Conflict with python zypp-plugin < 0.6.4 (bsc#1227793)
+  Older zypp-plugins reject stomp headers including a '-'. Like the
+  'content-length' header we may send.
+- Fix int overflow in Provider (fixes #559)
+  This patch fixes an issue in safe_strtonum which caused
+  timestamps to overflow in the Provider message parser.
+- Fix error reporting on repoindex.xml parse error (bsc#1227625)
+- version 17.35.3 (35)
+
+-------------------------------------------------------------------
+Tue Jul  9 11:28:36 CEST 2024 - ma@suse.de
+
+- Keep UrlResolverPlugin API public (fixes #560)
+- Blacklist /snap executables for 'zypper ps' (bsc#1226014)
+- Fix handling of buddies when applying locks (bsc#1225267)
+  Buddy pairs (like -release package and product) internally share
+  the same status object. When applying locks from query results
+  the locked bit must be set if either item is locked.
+- version 17.35.2 (35)
+
+-------------------------------------------------------------------
+Tue Jul  2 12:30:20 CEST 2024 - ma@suse.de
+
+- Install zypp/APIConfig.h legacy include (fixes #557)
+- version 17.35.1 (35)
+
+-------------------------------------------------------------------
+Fri Jun 28 17:48:09 CEST 2024 - ma@suse.de
+
+- Update soname due to RepoManager refactoring and cleanup.
+- version 17.35.0 (35)
+
+-------------------------------------------------------------------
+Mon Jun 24 12:48:00 CEST 2024 - ma@suse.de
+
+- Workaround broken libsolv-tools-base requirements (fixes
+  openSUSE/zypper#551)
+- Strip ssl_clientkey from repo urls (bsc#1226030)
+- Remove protobuf build dependency.
+- Lazily attach medium during refresh workflows (bsc#1223094)
+- Refactor RepoManager and add Service workflows.
+- version 17.34.2 (34)
+
+-------------------------------------------------------------------
+Fri May 31 12:19:45 CEST 2024 - ma@suse.de
+
+- zypp-tui: Make sure translated texts use the correct textdomain
+  (fixes #551)
+- Skip libproxy1 requires for tumbleweed.
+- version 17.34.1 (34)
+
+-------------------------------------------------------------------
+Tue May 14 16:17:41 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- don't require libproxy1 on tumbleweed, it is optional now
+
+--------------------------------------------------------------------
+Tue May 14 14:21:13 CEST 2024 - bzeller@suse.de
+
+- version 17.34.0 (34)
+- Fix versioning scheme
+
+------------------------------------------------------------------
+Mon May 13 11:48:13 CEST 2024 - bzeller@suse.de
+
+- version 17.33.4 (35)
+
+-------------------------------------------------------------------
+Thu May  9 13:43:39 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- add one more missing export for libyui-qt-pkg
+
+-------------------------------------------------------------------
+Wed May  8 14:05:16 CEST 2024 - bzeller@suse.de
+
+- Revert eintrSafeCall behavior to setting errno to 0.
+- version 17.33.3 (34)
+
+-------------------------------------------------------------------
+Mon May  6 08:28:32 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- fix up requires_eq usage for libsolv-tools-base
+- add one more missing export for PackageKit
+- version 17.33.2
+
+-------------------------------------------------------------------
+Fri May  3 14:06:58 CEST 2024 - ma@suse.de
+
+- version 17.33.1 (33)
+
+-------------------------------------------------------------------
+Fri May  3 11:31:43 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- switch to reduced size libsolv-tools-base (jsc#PED-8153)
+
+-------------------------------------------------------------------
+Fri May  3 12:52:22 CEST 2024 - ma@suse.de
+
+- Fixed check for outdated repo metadata as non-root user
+  (bsc#1222086)
+- Add ZYPP_API for exported functions and switch to
+  visibility=hidden (jsc#PED-8153)
+- Dynamically resolve libproxy (jsc#PED-8153)
+- version 17.33.0 (33)
+
+-------------------------------------------------------------------
+Mon Apr 29 12:00:59 CEST 2024 - ma@suse.de
+
+- Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
+- version 17.32.6 (32)
+
+-------------------------------------------------------------------
+Fri Apr 19 15:58:26 CEST 2024 - ma@suse.de
+
+- Don't try to refresh volatile media as long as raw metadata are
+  present (bsc#1223094)
+- version 17.32.5 (32)
+
+-------------------------------------------------------------------
+Wed Apr 17 17:07:52 CEST 2024 - ma@suse.de
+
+- Fix creation of sibling cache dirs with too restrictive mode
+  (bsc#1222398)
+  Some install workflows in YAST may lead to too restrictive (0700)
+  raw cache directories in case of newly created repos. Later
+  commands running with user privileges may not be able to access
+  these repos.
+- version 17.32.4 (32)
+
+-------------------------------------------------------------------
+Thu Apr 11 16:10:46 CEST 2024 - ma@suse.de
+
+- Update RepoStatus fromCookieFile according to the files mtime
+  (bsc#1222086)
+- TmpFile: Don't call chmod if makeSibling failed.
+- version 17.32.3 (32)
+
+-------------------------------------------------------------------
+Tue Apr  2 16:08:58 CEST 2024 - ma@suse.de
+
+- Fixup New VendorSupportOption flag VendorSupportSuperseded
+  (jsc#OBS-301, jsc#PED-8014)
+  Fixed the name of the keyword to "support_superseded" as it was
+  agreed on in jsc#OBS-301.
+- version 17.32.2 (32)
+
+-------------------------------------------------------------------
+Thu Mar 28 17:56:04 CET 2024 - ma@suse.de
+
+- Add resolver option 'removeUnneeded' to file weak remove jobs
+  for unneeded packages (bsc#1175678)
+- version 17.32.1 (32)
+
+-------------------------------------------------------------------
+Fri Mar 22 18:16:32 CET 2024 - ma@suse.de
+
+- Add resolver option 'removeOrphaned' for distupgrade
+  (bsc#1221525)
+- New VendorSupportOption flag VendorSupportSuperseded
+  (jsc#OBS-301, jsc#PED-8014)
+- Tests: fix vsftpd.conf where SUSE and Fedora use different
+  defaults (fixes #522)
+- Add default stripe minimum (#529)
+- Don't expose std::optional where YAST/PK explicitly use c++11.
+- Digest: Avoid using the deprecated OPENSSL_config.
+- version 17.32.0 (32)
+
+-------------------------------------------------------------------
+Tue Feb 20 17:30:42 CET 2024 - ma@suse.de
+
+- ProblemSolution::skipsPatchesOnly overload to handout the
+  patches.
+- Remove https->http redirection exceptions for
+  download.opensuse.org.
+- version 17.31.32 (22)
+
 -------------------------------------------------------------------
 Wed Feb  7 10:25:39 CET 2024 - ma@suse.de
 

libzypp.spec

@@ -20,12 +20,20 @@
 %else
 %bcond_with zchunk
 %endif
-# libsolvs external references require us to link against it:
+
+# libsolvs external references might require us to link against zstd, bz2, xz
 %if 0%{?sle_version} >= 150000 || 0%{?suse_version} >= 1500
 %bcond_without zstd
 %else
 %bcond_with zstd
 %endif
+%if 0%{?sle_version} >= 120300 || 0%{?suse_version} >= 1330 || !0%{?suse_version}
+%bcond_without bz2
+%bcond_without xz
+%else
+%bcond_with bz2
+%bcond_with xz
+%endif
 
 %bcond_without mediabackend_tests
 
@@ -38,11 +46,18 @@
 %bcond_with sigc_block_workaround
 %endif
 
+
+%if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150600
+%bcond_without visibility_hidden
+%else
+%bcond_with visibility_hidden
+%endif
+
 # Distros using just zypper may want to enable this as default earlier
 %bcond_with enable_preview_single_rpmtrans_as_default_for_zypper
 
 Name:           libzypp
-Version:        17.31.31
+Version:        17.35.12
 Release:        0
 License:        GPL-2.0-or-later
 URL:            https://github.com/openSUSE/libzypp
@@ -54,6 +69,12 @@ Source1:        %{name}-rpmlintrc
 Provides:       yast2-packagemanager
 Obsoletes:      yast2-packagemanager
 
+# bsc#1227793:  python zypp-plugin < 0.6.4 rejects stomp headers including a '-'
+Conflicts:      python2-zypp-plugin < 0.6.4
+Conflicts:      python3-zypp-plugin < 0.6.4
+# API refactoring. Prevent zypper from using (now) private symbols
+Conflicts:      zypper <= 1.14.76
+
 # Features we provide (update doc/autoinclude/FeatureTest.doc):
 Provides:       libzypp(plugin) = 0.1
 Provides:       libzypp(plugin:appdata) = 0
@@ -69,7 +90,7 @@ Recommends:     logrotate
 # lsof is used for 'zypper ps':
 Recommends:     lsof
 %endif
-BuildRequires:  cmake >= 3.1
+BuildRequires:  cmake >= 3.5
 BuildRequires:  pkgconfig(openssl)
 BuildRequires:  pkgconfig(libudev)
 %if 0%{?suse_version} >= 1330
@@ -92,8 +113,17 @@ BuildRequires:  gettext-devel
 BuildRequires:  graphviz
 BuildRequires:  libxml2-devel
 BuildRequires:  yaml-cpp-devel
+
+# we are loading libproxy dynamically, however we have
+# a failsafe unit test that links against libproxy to make
+# sure the API did not change
 BuildRequires:  libproxy-devel
 
+#keep the libproxy runtime requires for old releases
+%if 0%{?suse_version} && 0%{?suse_version} <= 1500 && 0%{?sle_version} <= 150500
+Requires: libproxy1
+%endif
+
 %if 0%{?fedora_version} || 0%{?rhel_version} || 0%{?centos_version}
 BuildRequires:  pkgconfig
 %else
@@ -101,12 +131,17 @@ BuildRequires:  pkg-config
 %endif
 
 BuildRequires:  libsolv-devel >= 0.7.24
+%if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150600
+BuildRequires:  libsolv-tools-base >= 0.7.29
+%requires_eq    libsolv-tools-base
+Requires:	( findutils if libsolv-tools-base <= 0.7.31 )
+%else
 BuildRequires:  libsolv-tools
 %requires_eq    libsolv-tools
+%endif
 
 BuildRequires:  glib2-devel
 BuildRequires:  libsigc++2-devel
-BuildRequires:  protobuf-devel
 BuildRequires:  readline-devel >= 5.1
 
 # required for testsuite
@@ -166,10 +201,23 @@ BuildRequires:  libxslt-tools
 %if %{with zchunk}
 BuildRequires:  libzck-devel
 %endif
+
 %if %{with zstd}
 BuildRequires:  libzstd-devel
 %endif
 
+%if %{with bz2}
+%if 0%{?suse_version}
+BuildRequires:  libbz2-devel
+%else
+BuildRequires:  bzip2-devel
+%endif
+%endif
+
+%if %{with xz}
+BuildRequires:  xz-devel
+%endif
+
 %description
 libzypp is the package management library that powers applications
 like YaST, zypper and the openSUSE/SLE implementation of PackageKit.
@@ -236,7 +284,7 @@ Group:          Documentation/HTML
 Developer documentation for libzypp.
 
 %prep
-%setup -q
+%autosetup -p1
 
 %build
 mkdir build
@@ -261,6 +309,7 @@ cmake -DCMAKE_INSTALL_PREFIX=%{_prefix} \
       -DCMAKE_BUILD_TYPE=Release \
       -DCMAKE_SKIP_RPATH=1 \
       -DCMAKE_INSTALL_LIBEXECDIR=%{_libexecdir} \
+      %{?with_visibility_hidden:-DENABLE_VISIBILITY_HIDDEN=1} \
       %{?with_zchunk:-DENABLE_ZCHUNK_COMPRESSION=1} \
       %{?with_zstd:-DENABLE_ZSTD_COMPRESSION=1} \
       %{?with_sigc_block_workaround:-DENABLE_SIGC_BLOCK_WORKAROUND=1} \