Accepting request 1165323 from home:dziobian:gulgul-ultron:19

- New upstream release 28.2.10
  * Fixed crash in Notification::Close() under libnotify 0.8.x with portal environment.
  * Fixed usage of Storage.{get|set|clear}Cookies via the Chrome DevTools Protocol.
  * Security fixes (bsc#1222035):
    + Use after free in Angle (CVE-2024-2883)
    + Type confusion in WebAssembly (CVE-2024-2887)
    + Use after free in WebCodecs (CVE-2024-2886)

OBS-URL: https://build.opensuse.org/request/show/1165323
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs-electron?expand=0&rev=137

create_tarball.sh

@@ -47,7 +47,8 @@ export PATH
 
 # HACK to make gclient much faster, do not download entire history
 sed -i "s/, '--progress']$/, '--progress', '--filter=tree:0']/" depot_tools/gclient_scm.py
-sed -i 's/remote or self.remote,$/remote or self.remote, "--depth=1", "--filter=tree:0"/' depot_tools/gclient_scm.py
+# googlesource these days likes to error out on tree:0 but it should not be needed
+sed -i 's/remote or self.remote,$/remote or self.remote, "--depth=1"/' depot_tools/gclient_scm.py
 
 # HACK I want to see progress from git checkout to ensure it does not hang
 sed -i 's/if quiet is None:$/if True:/' depot_tools/gclient_scm.py

electron-28.2.10.tar.zst

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e2cc2a7c15f1cd7ae92d8280810f0474007ec06d03abe22ad0d98e6676e45ae1
+size 556596058

electron-28.2.9.tar.zst

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9155e7d0f2fcd1bb8c40946a7a370b704e1debe4d62d430cfbb4d1faa0ad3320
-size 555788253

nodejs-electron.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Thu Apr  4 20:35:05 UTC 2024 - Bruno Pitrus <brunopitrus@hotmail.com>
+
+- New upstream release 28.2.10
+  * Fixed crash in Notification::Close() under libnotify 0.8.x with portal environment.
+  * Fixed usage of Storage.{get|set|clear}Cookies via the Chrome DevTools Protocol.
+  * Security fixes (bsc#1222035):
+    + Use after free in Angle (CVE-2024-2883)
+    + Type confusion in WebAssembly (CVE-2024-2887)
+    + Use after free in WebCodecs (CVE-2024-2886)
+
 -------------------------------------------------------------------
 Wed Mar 27 21:37:27 UTC 2024 - Bruno Pitrus <brunopitrus@hotmail.com>
 

nodejs-electron.spec

@@ -201,7 +201,7 @@ BuildArch:      i686
 
 
 Name:           nodejs-electron
-Version:        28.2.9
+Version:        28.2.10
 Release:        0
 Summary:        Build cross platform desktop apps with JavaScript, HTML, and CSS
 License:        AFL-2.0 AND Apache-2.0 AND blessing AND BSD-2-Clause AND BSD-3-Clause AND BSD-Protection AND BSD-Source-Code AND bzip2-1.0.6 AND IJG AND ISC AND LGPL-2.0-or-later AND LGPL-2.1-or-later AND MIT AND MIT-CMU AND MIT-open-group AND (MPL-1.1 OR GPL-2.0-or-later OR LGPL-2.1-or-later) AND MPL-2.0 AND OpenSSL AND SGI-B-2.0 AND SUSE-Public-Domain AND X11%{!?with_system_minizip: AND Zlib}
@@ -1164,6 +1164,11 @@ myconf_gn+=' enable_message_center=false'
 myconf_gn+=' enable_system_notifications=false'
 myconf_gn+=' enable_supervised_users=false'
 myconf_gn+=' enable_compose=false'
+myconf_gn+=' enterprise_cloud_content_analysis=false'
+myconf_gn+=' enterprise_local_content_analysis=false'
+myconf_gn+=' enterprise_client_certificates=false'
+myconf_gn+=' enterprise_watermark=false'
+myconf_gn+=' enterprise_content_analysis=false'
 
 
 
@@ -1201,6 +1206,7 @@ myconf_gn+=' enable_perfetto_zlib=false'
 
 
 
+myconf_gn+=' dawn_complete_static_libs=true'
 myconf_gn+=" enable_library_cdms=false"
 myconf_gn+=" use_pulseaudio=true link_pulseaudio=true"
 myconf_gn+=" is_component_build=false"