From de817417d300649bd00a293179d7b4ee81f04b7131844a2e6b798288532e7672 Mon Sep 17 00:00:00 2001 From: Martin Pluskal Date: Mon, 18 Mar 2024 09:10:00 +0000 Subject: [PATCH 1/2] Accepting request 1158922 from home:pgajdos - version update to 1.60.0 * makerelease.sh: Speed up git submodule * Speed up git clone * build(deps): bump actions/cache from 3 to 4 * Fixing the build and install trees * build(deps): bump microsoft/setup-msbuild from 1 to 2 * nghttpx: Set ocsp response to SSL in case of boringssl * Run with python3 * src: Certificate Compression with boringssl * Fix missing newline * Switch to aws lc * Libbrotli fixup * Deprecate RFC 7540 priorities (aka stream dependencies) * Let dependabot manage go modules * build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0 * integration-tests: Omit unused parameters * Munit * Introduce nghttp2_ssize API * Move deprecated warning upfront * Describe RFC 7540 priorities deprecation plan * Apps migrate nghttp2 ssize * src: Remove unused functions * Reconsider ssize t usage in src * Use GitHub private vulnerability reporting * Move security policy to GitHub standard location * Bump mruby to 3.3.0 * Bump llhttp to 48588093ca4219b5f689acfc9ebea9e4c8c37663 * h2load: Add --sni option * Bump ngtcp2 dependencies * mruby: Adopt deprecation of mrbc_ prefix OBS-URL: https://build.opensuse.org/request/show/1158922 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/nghttp2?expand=0&rev=120 --- nghttp2-1.59.0.tar.xz | 3 --- nghttp2-1.59.0.tar.xz.asc | 6 ------ nghttp2-1.60.0.tar.xz | 3 +++ nghttp2-1.60.0.tar.xz.asc | 16 ++++++++++++++ nghttp2.changes | 44 +++++++++++++++++++++++++++++++++++++++ nghttp2.spec | 11 +++++++--- 6 files changed, 71 insertions(+), 12 deletions(-) delete mode 100644 nghttp2-1.59.0.tar.xz delete mode 100644 nghttp2-1.59.0.tar.xz.asc create mode 100644 nghttp2-1.60.0.tar.xz create mode 100644 nghttp2-1.60.0.tar.xz.asc diff --git a/nghttp2-1.59.0.tar.xz b/nghttp2-1.59.0.tar.xz deleted file mode 100644 index 494a98b..0000000 --- a/nghttp2-1.59.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:fdc9bd71f5cf8d3fdfb63066b89364c10eb2fdeab55f3c6755cd7917b2ec4ffb -size 1546956 diff --git a/nghttp2-1.59.0.tar.xz.asc b/nghttp2-1.59.0.tar.xz.asc deleted file mode 100644 index b7ec8bd..0000000 --- a/nghttp2-1.59.0.tar.xz.asc +++ /dev/null @@ -1,6 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iF0EABECAB0WIQT087kUdNHrKYib0O9+hAPV1nPDZgUCZaz0+QAKCRB+hAPV1nPD -ZmPTAJ0ceg6dqNzuw3Y7OELMQXz+4NwaVACfbYRu9e/+nu2g3Qd5ctWK1ZjWhSA= -=yo7q ------END PGP SIGNATURE----- diff --git a/nghttp2-1.60.0.tar.xz b/nghttp2-1.60.0.tar.xz new file mode 100644 index 0000000..4796597 --- /dev/null +++ b/nghttp2-1.60.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:625d6c3da1d9ca4fd643a638256431ae68fd1901653b2a61a245eea7b261bf4e +size 1587004 diff --git a/nghttp2-1.60.0.tar.xz.asc b/nghttp2-1.60.0.tar.xz.asc new file mode 100644 index 0000000..72cd9c7 --- /dev/null +++ b/nghttp2-1.60.0.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEUWtiKRjRXEeKseo6UzmivoLgfewFAmXhkVQACgkQUzmivoLg +feyFOw//dJLjXBV/aSBczFFe4HrBgQOhRlN+7ub5CnyP/Vl2B9QC8uPuwOfLbg6C +L7vld8NaXM5nCWWFjphOR7KCSsNTjVxSApplLBVCP9o8Kka7APtBrqRsoxzoni2D +XnvIo7gaOKFRAM/FzwL9NSEgCCkQo631DegjSN1PPZJdjRtaBQyYNrLRSyVyNv5q +9q4oBxvJpRMogF+ALiWTHNcVE/UHNE2SoimkJOAxxFDpuk4q+j7Ru90QER9aZJDz +u/6GPt34tVy5VDslAHWbzTHemsu1ya0c9cpCNrAy06WcmhWT1dNIXdEHCZXfEViC +mVnCYCw39s3xAjSQWDkSNiVkg5Z/1E3mw+md+0teHRJuYVnwNXjdZ+mZpfW6l4nq +Qi/Z6jvBccavzAA9H6PazQ7uDvp5wjpk2Ns8bHw0uIk2dVBB8a4mezTG73lU+Q2k +8ovcflNk/aGbeK+AgkNvUHl44r6SIc1HSirpOR3xgh/qBjDB88PENFEg+rW/NdeO +nhjzEjvVv66TJv50sdO3GjOtN6bnWnsOHPigSRcXZx21HQWKyImts4TBkEJqfKMf +zYH6SAAAvIKkdvw8J4egUphKKzB+ByHxPw9na4XnTaefcGQ1PcVG6xGy0Y35uHmW +bWmKFTylo6V7AdKIoDwDrB/InL30JQ5/T/szn6Nx06odpd/S7H4= +=zRmy +-----END PGP SIGNATURE----- diff --git a/nghttp2.changes b/nghttp2.changes index c87ca6f..5edae7e 100644 --- a/nghttp2.changes +++ b/nghttp2.changes @@ -1,3 +1,47 @@ +------------------------------------------------------------------- +Mon Mar 18 08:35:17 UTC 2024 - pgajdos@suse.com + +- version update to 1.60.0 + * makerelease.sh: Speed up git submodule + * Speed up git clone + * build(deps): bump actions/cache from 3 to 4 + * Fixing the build and install trees + * build(deps): bump microsoft/setup-msbuild from 1 to 2 + * nghttpx: Set ocsp response to SSL in case of boringssl + * Run with python3 + * src: Certificate Compression with boringssl + * Fix missing newline + * Switch to aws lc + * Libbrotli fixup + * Deprecate RFC 7540 priorities (aka stream dependencies) + * Let dependabot manage go modules + * build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0 + * integration-tests: Omit unused parameters + * Munit + * Introduce nghttp2_ssize API + * Move deprecated warning upfront + * Describe RFC 7540 priorities deprecation plan + * Apps migrate nghttp2 ssize + * src: Remove unused functions + * Reconsider ssize t usage in src + * Use GitHub private vulnerability reporting + * Move security policy to GitHub standard location + * Bump mruby to 3.3.0 + * Bump llhttp to 48588093ca4219b5f689acfc9ebea9e4c8c37663 + * h2load: Add --sni option + * Bump ngtcp2 dependencies + * mruby: Adopt deprecation of mrbc_ prefix + * neverbleed: Define _GNU_SOURCE for pthread_setaffinity_np + * bpf: Pre-expand aes key + * mruby: Exclude mrdb gem which causes nghttpx to crash + * nghttpx: Reuse EVP_CIPHER_CTX for QUIC connection ID encryption + * Run apt-get update before install + * src: Deal with the case that send_quantum < max_udp_payload_size + * nghttpx: Remove SHRPX_QUIC_MAX_UDP_PAYLOAD_SIZE + * Fix build when AI_NUMERICSERV is undefined +- remove dependency on /usr/bin/python3 using + %python3_fix_shebang_path macro, [bsc#1212476] + ------------------------------------------------------------------- Sun Jan 28 17:01:52 UTC 2024 - Dirk Müller diff --git a/nghttp2.spec b/nghttp2.spec index 9df87c4..713ddae 100644 --- a/nghttp2.spec +++ b/nghttp2.spec @@ -20,7 +20,7 @@ %global sover 14 %global flavor @BUILD_FLAVOR@%{nil} Name: nghttp2 -Version: 1.59.0 +Version: 1.60.0 Release: 0 Summary: Implementation of Hypertext Transfer Protocol version 2 in C License: MIT @@ -93,8 +93,6 @@ HTTP/2 client, server and proxy. %prep %setup -q -n nghttp2-%{version} -# fix python shebang -sed -i -e 's:#!%{_bindir}/env python:#!%{_bindir}/python3:g' script/fetch-ocsp-response %build %configure \ @@ -108,6 +106,7 @@ sed -i -e 's:#!%{_bindir}/env python:#!%{_bindir}/python3:g' script/fetch-ocsp-r %make_install find %{buildroot} -type f -name "*.la" -delete -print + # Do not ship this rm -rf %{buildroot}%{_datadir}/doc/nghttp2 @@ -115,6 +114,12 @@ rm -rf %{buildroot}%{_datadir}/doc/nghttp2 rm -rf %{buildroot}%{_mandir}/man1/* \ doc/manual/html/.buildinfo +# https://build.opensuse.org/request/show/1212476 +%if %{suse_version} >= 1600 +%python3_fix_shebang_path %{buildroot}%{_datadir}/%{name}/fetch-ocsp-response +%endif + + %check %make_build check From 7fbd9529fa425322932864e86f4ea2332f9ff26a4a650f3f48af59230c6647da Mon Sep 17 00:00:00 2001 From: Martin Pluskal Date: Mon, 18 Mar 2024 12:59:18 +0000 Subject: [PATCH 2/2] - Update keyring with current key OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/nghttp2?expand=0&rev=121 --- nghttp2.changes | 5 +++++ nghttp2.keyring | 29 +++++++++++++++++++++++++++-- 2 files changed, 32 insertions(+), 2 deletions(-) diff --git a/nghttp2.changes b/nghttp2.changes index 5edae7e..2f6e4db 100644 --- a/nghttp2.changes +++ b/nghttp2.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Mon Mar 18 12:59:00 UTC 2024 - Martin Pluskal + +- Update keyring with current key + ------------------------------------------------------------------- Mon Mar 18 08:35:17 UTC 2024 - pgajdos@suse.com diff --git a/nghttp2.keyring b/nghttp2.keyring index 1645176..e225d72 100644 --- a/nghttp2.keyring +++ b/nghttp2.keyring @@ -34,6 +34,31 @@ MBP62ytvamwBO9O+E6sJCVraoho4a2ERORh5PQzEot1Tmyf4u6AQf1+JVMn2yThc ilRKWD1Q/AfEAibVbPANkXXjX5pZkIRc1Eunq5afYf2ixyS96RSjc6EZ+euaaaFC 96+MdDtlycafZIXYNgiNkrrm8mzPCb2i8tmF9aPnGYBknsnFLlda3Zz4afFDKyLN LYRvqAujonL+HBOLW2InmeD5p6SISQQYEQIACQUCSaAkIAIbDAAKCRB+hAPV1nPD -ZqpZAJ9Kw73IdA3hw+wQEen991bFlMzHfQCgtG/GMjXB246Qt9XPVvToTSFJQPo= -=2agh +ZqpZAJ9Kw73IdA3hw+wQEen991bFlMzHfQCgtG/GMjXB246Qt9XPVvToTSFJQPq5 +Ag0EZdRdtAEQAMIqEK6XuVLgY6KPOUqHFjQZdi87hCX9sTSHVuvQ75Ko70Ayz/AH +I7YWnPoaJjWQwCugGOdEjXKQMUUKuGUrWAtGoGUg9MDFXdAXRrwBhhKz8ZGJzGPU +YXkanJSHo3AAFQ4QWSJmGvlZ2VhthB5v/njUlpzFvNusa5e71RRLM5f5R3kROUlj +vwAXUcosLESi864AKFzo1qiQB6KtatTLJH8aHQEFrVwzrleKdkF5OozfWw1poB4g +94QBkIzXgmEA3uTpXHLctIngpR8mZrQQtohI2zKlpnq9lCMZ7j3/xitZ6xS2KSlH +BU3Z4TXZKZuFP7IsITVTdlMg/OHua2l0i3ZewbIWPnnPJC8dQi+QdYe6FWjDwZPu +HBAbbxHVFCYnz5f4SP9LNqeWRGqHHnzb5pNe2xZHykPP84kvFvmRonqMBIvFrPhV +kw+Z43JBvxM4YwYp0GWEuDAik6KmbuM5SmwAiR67KigwwUoumJi9YdQlUIkNKO7P +SvmHCzaX47+AdLxDToMXCsIO2NlLGE5GN/RwQ8k0owWoK5WZYUI16pgZ39n/Z03y +Ig+W//qUJ7+eYTgvvCngR3kxUXipSVA0+skxWvdmRHla5MasuvtPuW/Xz6/+U3fS +4bmYTWA5TmhfrMublTncBXgEvX9LzyL+kPhf81OAix3RNUlD6Jp5+751ABEBAAGJ +ApYEGBECACAWIQT087kUdNHrKYib0O9+hAPV1nPDZgUCZdRdtAIbAgJACRB+hAPV +1nPDZsF0IAQZAQoAHRYhBFFrYikY0VxHirHqOlM5or6C4H3sBQJl1F20AAoJEFM5 +or6C4H3sBa8QALx76ibbGN3vz9+Aa58gtk1oDIIfEF/U7PmMuPB9CA9738kgiXvq +nxKAkiBU9EkaiYsPfF/iv35xp44CrFz/mjqMQiMlWOxMtRVXjsQQoGKmkdei4THk +3pVE4u6bXXb38LUnXyYVV9P0XLNV/ilwvRlnozP4NqrjH7MuKLKLUoKNHMD6UK2/ +UWUqHQPboFYTIb826+S8PiGQ/3PO7+Y+h0Jyq2o5c76N2PvMgtkQwvTTw6hPP8p1 +EIffN1wUpZ5dG+Cxe9oN2FF6Lq89WCK1M7n3DU4JZqjKIcmxJKPPmjQjdVUUhyXQ +4naywi+h30esJ/CbrQ0oyDnr0jbiTg04c6IV5U5deVDywJ9gAAgV0g12NDwo2SCb +ZeLGul8/tZXpXiTYJdTQ0N3EUZYPbOvY8Kdh95stq9HtKJyozP/yemFBfiTtK0Kt +QISQHf0GNJR+D682S0iB3nSprzXpgwgjaHYLQXYdUomg7lMGrtf3XZQlUaHYLHp6 +W0xhOweS/2kr5G461zSyJ3T9ITm59GapunXfuSGqA2mJvv9CXJqN8Qm6UzUD8QBk +JxiUC6IMVAoBShSPD9qC0jBxXETKNHC4zPoF0wfOVYjKJ29btfOjneL0IdLNR/6c +WcszscQx9Rm+vWArbDdcATTnImO1hIehxeQPp/8IRPpxHjD64GoNSbzyZkwAn0n6 +KhOXkidphC12e/W/W3vSRrm5AKC2S6Ile4sLQr7aDSQZLvJz54gxYw== +=Rw9e -----END PGP PUBLIC KEY BLOCK-----