Accepting request 1230941 from devel:tools:scm

- update to 9.0.3:
  * When Forgejo is configured to run the internal ssh server with
    [server].START_SSH_SERVER=true, it was possible for a registered user to
    impersonate another user
  * Revert "allow synchronizing user status from OAuth2 login providers" Fix
  * wiki search overflowing on wide screens Do not rewrite ssh keys files when
  * deleting a user without one fix: doctor fails with pq: syntax error at or
  * near "." whilst counting
    Authorization token without existing User
  * fix: Do not delete global Oauth2 applications Strict matching of allowed
  * content for sanitizer for asciicast
    and csv rendering
  * fix: remove softbreak from github legacy callout fix: correct permission
  * loading for limited organisation fix: clean up log files that no longer
  * exist fix: return correct type in GetSubModule Improve Swagger documentation
  * for user endpoints fix: normalize guessed languages from enry Show page
  * titles in wiki search results fix(test): TestGitAttributeCheckerError must
  * allow broken pipe fix: check read permissions for code owner review requests
  * fix: use better code to group UID and stopwatches fix: api repo compare with
  * commit hashes bug: correctly generate oauth2 jwt signing key
- disable gpg verification for this release (forwarded request 1230940 from rrahl0)

OBS-URL: https://build.opensuse.org/request/show/1230941
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/forgejo?expand=0&rev=20
This commit is contained in:
Ana Guerrero 2024-12-15 11:37:19 +00:00 committed by Git OBS Bridge
commit 387a439d8f
9 changed files with 37 additions and 58 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:4de691751256e75258573815f14406905999e991c1d9790c6069dfef47319e1d
size 53992927

View File

@ -1,7 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iHUEABYIAB0WIQTrEU9ebA3CvN0YNVCkthotxZI3EAUCZzeoLwAKCRCkthotxZI3
EH4iAP9XuioervFeW/MxfUHj1/zL2knDYYZAKnuWcPi19BytYwEA3KxcVlrvTgWL
oZBSoqn0BWtIkmlOtRxDxu8mBGXrRgw=
=/4OE
-----END PGP SIGNATURE-----

3
forgejo-src-9.0.3.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:805fa2e8e799b8ba9e3cae2984033295d1a46fb24271e673dd01362cfefe8881
size 54029967

View File

@ -1,3 +1,28 @@
-------------------------------------------------------------------
Fri Dec 13 05:19:57 UTC 2024 - Richard Rahl <rrahl0@opensuse.org>
- update to 9.0.3:
* When Forgejo is configured to run the internal ssh server with
[server].START_SSH_SERVER=true, it was possible for a registered user to
impersonate another user
* Revert "allow synchronizing user status from OAuth2 login providers" Fix
* wiki search overflowing on wide screens Do not rewrite ssh keys files when
* deleting a user without one fix: doctor fails with pq: syntax error at or
* near "." whilst counting
Authorization token without existing User
* fix: Do not delete global Oauth2 applications Strict matching of allowed
* content for sanitizer for asciicast
and csv rendering
* fix: remove softbreak from github legacy callout fix: correct permission
* loading for limited organisation fix: clean up log files that no longer
* exist fix: return correct type in GetSubModule Improve Swagger documentation
* for user endpoints fix: normalize guessed languages from enry Show page
* titles in wiki search results fix(test): TestGitAttributeCheckerError must
* allow broken pipe fix: check read permissions for code owner review requests
* fix: use better code to group UID and stopwatches fix: api repo compare with
* commit hashes bug: correctly generate oauth2 jwt signing key
- disable gpg verification for this release
-------------------------------------------------------------------
Sat Nov 16 03:16:51 UTC 2024 - Richard Rahl <rrahl0@opensuse.org>

View File

@ -1,39 +0,0 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
Comment: Hostname:
Version: Hockeypuck 2.2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=urT2
-----END PGP PUBLIC KEY BLOCK-----

View File

@ -30,15 +30,15 @@
%endif
%endif
Name: forgejo
Version: 9.0.2
Version: 9.0.3
Release: 0
Summary: Self-hostable forge
License: GPL-3.0-or-later
Group: Development/Tools/Version Control
URL: https://forgejo.org
Source0: https://codeberg.org/%{name}/%{name}/releases/download/v%{version}/%{name}-src-%{version}.tar.gz
Source1: https://codeberg.org/%{name}/%{name}/releases/download/v%{version}/%{name}-src-%{version}.tar.gz.asc
Source2: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xeb114f5e6c0dc2bcdd183550a4b61a2dc5923710#/%{name}.keyring
#Source1: https://codeberg.org/%{name}/%{name}/releases/download/v%{version}/%{name}-src-%{version}.tar.gz.asc
#Source2: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xeb114f5e6c0dc2bcdd183550a4b61a2dc5923710#/%{name}.keyring
Source3: package-lock.json
Source4: node_modules.spec.inc
%include %{_sourcedir}/node_modules.spec.inc

View File

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7ecfba8aaa664b93f3a42e279ada2e5082e0d8d2bd0056b5f2faca7e34abc920
oid sha256:017bf975dd6771c4390e5d4f0285ce17900126deb0d598af5e4dba033b0885f7
size 210595124

View File

@ -175,7 +175,7 @@ Source10173: https://registry.npmjs.org/@eslint/js/-/js-8.57.1.tgz#/@esl
Source10174: https://registry.npmjs.org/@github/browserslist-config/-/browserslist-config-1.0.0.tgz#/@github-browserslist-config-1.0.0.tgz
Source10175: https://registry.npmjs.org/@github/combobox-nav/-/combobox-nav-2.3.1.tgz#/@github-combobox-nav-2.3.1.tgz
Source10176: https://registry.npmjs.org/@github/markdown-toolbar-element/-/markdown-toolbar-element-2.2.3.tgz#/@github-markdown-toolbar-element-2.2.3.tgz
Source10177: https://registry.npmjs.org/@github/relative-time-element/-/relative-time-element-4.4.3.tgz#/@github-relative-time-element-4.4.3.tgz
Source10177: https://registry.npmjs.org/@github/relative-time-element/-/relative-time-element-4.4.4.tgz#/@github-relative-time-element-4.4.4.tgz
Source10178: https://registry.npmjs.org/@github/text-expander-element/-/text-expander-element-2.7.1.tgz#/@github-text-expander-element-2.7.1.tgz
Source10179: https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.13.0.tgz#/@humanwhocodes-config-array-0.13.0.tgz
Source10180: https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz#/@humanwhocodes-module-importer-1.0.1.tgz

8
package-lock.json generated
View File

@ -9,7 +9,7 @@
"@citation-js/plugin-bibtex": "0.7.11",
"@citation-js/plugin-software-formats": "0.6.1",
"@github/markdown-toolbar-element": "2.2.3",
"@github/relative-time-element": "4.4.3",
"@github/relative-time-element": "4.4.4",
"@github/text-expander-element": "2.7.1",
"@mcaptcha/vanilla-glue": "0.1.0-alpha-3",
"@primer/octicons": "19.9.0",
@ -3118,9 +3118,9 @@
"license": "MIT"
},
"node_modules/@github/relative-time-element": {
"version": "4.4.3",
"resolved": "https://registry.npmjs.org/@github/relative-time-element/-/relative-time-element-4.4.3.tgz",
"integrity": "sha512-EVKokqx9/DdUAZ2l9WVyY51EtRCO2gQWWMvsRIn7r4glJ91q9CXcnILVHZVCpfD52ucXUhUvtYsAjNJ4qP4uIg==",
"version": "4.4.4",
"resolved": "https://registry.npmjs.org/@github/relative-time-element/-/relative-time-element-4.4.4.tgz",
"integrity": "sha512-Oi8uOL8O+ZWLD7dHRWCkm2cudcTYtB3VyOYf9BtzCgDGm+OKomyOREtItNMtWl1dxvec62BTKErq36uy+RYxQg==",
"license": "MIT"
},
"node_modules/@github/text-expander-element": {