SHA256
1
0
forked from pool/apache-ivy
apache-ivy/apache-ivy.changes

171 lines
6.1 KiB
Plaintext
Raw Normal View History

-------------------------------------------------------------------
Tue Sep 19 11:31:58 UTC 2023 - Fridrich Strba <fstrba@suse.com>
- Added patch:
* apache-ivy-publication-date.patch
+ Use SOURCE_DATE_EPOCH for publication date in ivy artifacts
-------------------------------------------------------------------
Mon Aug 21 23:30:17 UTC 2023 - Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.5.2 (bsc#1214422)
* Fixes:
+ ivy:retrieve could fail because of a 'NullPointerException'
(jira:IVY-1641[])
+ reading POMs may loose dependencies when multiple Maven
dependencies only differ in 'classifier' (jira:IVY-1642[])
+ CVE-2022-46751: Apache Ivy Is Vulnerable to XML External
Entity Injections
-------------------------------------------------------------------
Mon Nov 7 08:10:54 UTC 2022 - David Anes <david.anes@suse.com>
- Upgrade to version 2.5.1 (bsc#1205142, bsc#1205138)
* Breaking:
+ Removed old fr\jayasoft\ivy\ant\antlib.xml AntLib definition
file.
* Fixes:
+ CVE-2022-37865 allow create/overwrite any file on the system.
(see https://ant.apache.org/ivy/security.html)
+ CVE-2022-37866 Path traversal in patterns.
(see https://ant.apache.org/ivy/security.html)
+ ResolveEngine resets dictator resolver to null in the global
configuration.
+ ConcurrentModificationException in
MessageLoggerHelper.sumupProblems.
+ useOrigin="true" fails with file-based ibiblio.
+ ivy:retrieve Ant task didnt create an empty fileset when no
files were retrieved to a non-empty directory.
+ ivy:retrieve Ant task relied on the default HTTP header
"Accept" which caused problems with servers that interpret it
strictly (e.g. AWS CodeArtifact).
* Improvements:
+ Ivy command now accepts a URL for the -settings option.
-------------------------------------------------------------------
Sat Mar 19 13:22:59 UTC 2022 - Fridrich Strba <fstrba@suse.com>
- Upgrade to upstream version 2.5.0
- Force building with JDK < 14, since it imports statically a class
removed in JDK14
- Change dependencies for the httpclient to httpcomponents-client
instead of apache-commons-httpclient
- Modified patch:
* apache-ivy-global-settings.patch
+ implement the same functionality with a bit of less code
- Removed patches:
* apache-ivy-2.4.0-jdk9.patch
* port-to-bc-1.52.patch
+ not needed with this version
-------------------------------------------------------------------
Tue Dec 10 22:39:53 UTC 2019 - Fridrich Strba <fstrba@suse.com>
- Specify bundle.version in order to avoid unexpanded macro
-------------------------------------------------------------------
Tue Sep 24 16:08:31 UTC 2019 - Fridrich Strba <fstrba@suse.com>
- Build the bouncycastle signer plugin since bcpg is now present
- Added patch:
* port-to-bc-1.52.patch
+ Allow building the signer plugin against bouncycastle >= 1.52
-------------------------------------------------------------------
Tue Jul 2 09:22:21 UTC 2019 - Fridrich Strba <fstrba@suse.com>
- Add possibility to build with ssh and vfs integration, since
we have all the dependencies in openSUSE.
-------------------------------------------------------------------
Mon Apr 8 18:12:07 UTC 2019 - Fridrich Strba <fstrba@suse.com>
- Remove the reference to parent from pom file, since we are not
building using maven.
-------------------------------------------------------------------
Thu Feb 7 14:48:24 UTC 2019 - Fridrich Strba <fstrba@suse.com>
- Add apache-ivy/ivy.jar symlink
-------------------------------------------------------------------
Mon Nov 26 10:25:21 UTC 2018 - Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.4.0
- Modified patch:
* apache-ivy-2.3.0-jdk9.patch -> apache-ivy-2.4.0-jdk9.patch
+ rediff to changed context
- Added patch:
* apache-ivy-global-settings.patch
+ change global settings
-------------------------------------------------------------------
Tue May 15 13:26:55 UTC 2018 - fstrba@suse.com
- Modified patch:
* apache-ivy-2.3.0-jdk9.patch
+ Build with source and target 8 to prepare for a possible
removal of 1.6 compatibility
- Run fdupes on documentation
-------------------------------------------------------------------
Thu Sep 7 17:10:15 UTC 2017 - fstrba@suse.com
- Added patch:
* apache-ivy-2.3.0-jdk9.patch
+ Use source and target version 1.6 to enable build with jdk9
-------------------------------------------------------------------
Sun May 21 08:01:08 UTC 2017 - tchvatal@suse.com
- Reduce deps a bit
-------------------------------------------------------------------
Fri May 19 10:07:03 UTC 2017 - pcervinka@suse.com
- New build dependency: javapackages-local
-------------------------------------------------------------------
Wed Mar 18 09:46:01 UTC 2015 - tchvatal@suse.com
- Fix build with new javapackages-tools
-------------------------------------------------------------------
Tue Jul 8 11:01:30 UTC 2014 - tchvatal@suse.com
- Do not depend on ant-nodeps.
-------------------------------------------------------------------
Wed Nov 6 10:58:10 UTC 2013 - mvyskocil@suse.com
- Remove jakarta-commons-httpclient3, we do no longer provide it
- Add ant.d config snippet for ivy
- call add_maven_depmap
-------------------------------------------------------------------
Mon Sep 9 11:04:12 UTC 2013 - tchvatal@suse.com
- Move from jpackage-utils to javapackage-tools
-------------------------------------------------------------------
Fri Jan 25 15:03:33 UTC 2013 - archie@dellroad.org
- Upgrade to release 2.3.0
* improved Ant support with some new Ant tasks and enhancements to existing tasks
* improved Maven2 compatibility
* some new resolvers
* numerous bug fixes as documented in Jira and in the release notes
-------------------------------------------------------------------
Wed Jan 2 17:08:16 UTC 2013 - archie@dellroad.org
- Define ${target.ivy.version} during build
- Include an ivy(1) command line script and man page
-------------------------------------------------------------------
Mon Jan 16 14:55:55 UTC 2012 - mvyskocil@suse.cz
- Initial SUSE packaging of apache-ivy 2.2.0
(without signing support)