------------------------------------------------------------------- Tue Sep 19 11:31:58 UTC 2023 - Fridrich Strba - Added patch: * apache-ivy-publication-date.patch + Use SOURCE_DATE_EPOCH for publication date in ivy artifacts ------------------------------------------------------------------- Mon Aug 21 23:30:17 UTC 2023 - Fridrich Strba - Upgrade to version 2.5.2 (bsc#1214422) * Fixes: + ivy:retrieve could fail because of a 'NullPointerException' (jira:IVY-1641[]) + reading POMs may loose dependencies when multiple Maven dependencies only differ in 'classifier' (jira:IVY-1642[]) + CVE-2022-46751: Apache Ivy Is Vulnerable to XML External Entity Injections ------------------------------------------------------------------- Mon Nov 7 08:10:54 UTC 2022 - David Anes - Upgrade to version 2.5.1 (bsc#1205142, bsc#1205138) * Breaking: + Removed old fr\jayasoft\ivy\ant\antlib.xml AntLib definition file. * Fixes: + CVE-2022-37865 allow create/overwrite any file on the system. (see https://ant.apache.org/ivy/security.html) + CVE-2022-37866 Path traversal in patterns. (see https://ant.apache.org/ivy/security.html) + ResolveEngine resets dictator resolver to null in the global configuration. + ConcurrentModificationException in MessageLoggerHelper.sumupProblems. + useOrigin="true" fails with file-based ibiblio. + ivy:retrieve Ant task didn’t create an empty fileset when no files were retrieved to a non-empty directory. + ivy:retrieve Ant task relied on the default HTTP header "Accept" which caused problems with servers that interpret it strictly (e.g. AWS CodeArtifact). * Improvements: + Ivy command now accepts a URL for the -settings option. ------------------------------------------------------------------- Sat Mar 19 13:22:59 UTC 2022 - Fridrich Strba - Upgrade to upstream version 2.5.0 - Force building with JDK < 14, since it imports statically a class removed in JDK14 - Change dependencies for the httpclient to httpcomponents-client instead of apache-commons-httpclient - Modified patch: * apache-ivy-global-settings.patch + implement the same functionality with a bit of less code - Removed patches: * apache-ivy-2.4.0-jdk9.patch * port-to-bc-1.52.patch + not needed with this version ------------------------------------------------------------------- Tue Dec 10 22:39:53 UTC 2019 - Fridrich Strba - Specify bundle.version in order to avoid unexpanded macro ------------------------------------------------------------------- Tue Sep 24 16:08:31 UTC 2019 - Fridrich Strba - Build the bouncycastle signer plugin since bcpg is now present - Added patch: * port-to-bc-1.52.patch + Allow building the signer plugin against bouncycastle >= 1.52 ------------------------------------------------------------------- Tue Jul 2 09:22:21 UTC 2019 - Fridrich Strba - Add possibility to build with ssh and vfs integration, since we have all the dependencies in openSUSE. ------------------------------------------------------------------- Mon Apr 8 18:12:07 UTC 2019 - Fridrich Strba - Remove the reference to parent from pom file, since we are not building using maven. ------------------------------------------------------------------- Thu Feb 7 14:48:24 UTC 2019 - Fridrich Strba - Add apache-ivy/ivy.jar symlink ------------------------------------------------------------------- Mon Nov 26 10:25:21 UTC 2018 - Fridrich Strba - Upgrade to version 2.4.0 - Modified patch: * apache-ivy-2.3.0-jdk9.patch -> apache-ivy-2.4.0-jdk9.patch + rediff to changed context - Added patch: * apache-ivy-global-settings.patch + change global settings ------------------------------------------------------------------- Tue May 15 13:26:55 UTC 2018 - fstrba@suse.com - Modified patch: * apache-ivy-2.3.0-jdk9.patch + Build with source and target 8 to prepare for a possible removal of 1.6 compatibility - Run fdupes on documentation ------------------------------------------------------------------- Thu Sep 7 17:10:15 UTC 2017 - fstrba@suse.com - Added patch: * apache-ivy-2.3.0-jdk9.patch + Use source and target version 1.6 to enable build with jdk9 ------------------------------------------------------------------- Sun May 21 08:01:08 UTC 2017 - tchvatal@suse.com - Reduce deps a bit ------------------------------------------------------------------- Fri May 19 10:07:03 UTC 2017 - pcervinka@suse.com - New build dependency: javapackages-local ------------------------------------------------------------------- Wed Mar 18 09:46:01 UTC 2015 - tchvatal@suse.com - Fix build with new javapackages-tools ------------------------------------------------------------------- Tue Jul 8 11:01:30 UTC 2014 - tchvatal@suse.com - Do not depend on ant-nodeps. ------------------------------------------------------------------- Wed Nov 6 10:58:10 UTC 2013 - mvyskocil@suse.com - Remove jakarta-commons-httpclient3, we do no longer provide it - Add ant.d config snippet for ivy - call add_maven_depmap ------------------------------------------------------------------- Mon Sep 9 11:04:12 UTC 2013 - tchvatal@suse.com - Move from jpackage-utils to javapackage-tools ------------------------------------------------------------------- Fri Jan 25 15:03:33 UTC 2013 - archie@dellroad.org - Upgrade to release 2.3.0 * improved Ant support with some new Ant tasks and enhancements to existing tasks * improved Maven2 compatibility * some new resolvers * numerous bug fixes as documented in Jira and in the release notes ------------------------------------------------------------------- Wed Jan 2 17:08:16 UTC 2013 - archie@dellroad.org - Define ${target.ivy.version} during build - Include an ivy(1) command line script and man page ------------------------------------------------------------------- Mon Jan 16 14:55:55 UTC 2012 - mvyskocil@suse.cz - Initial SUSE packaging of apache-ivy 2.2.0 (without signing support)