Accepting request 1324382 from devel:libraries:c_c++

libgit2 1.9.2 boo#1255640 boo#1255641

OBS-URL: https://build.opensuse.org/request/show/1324382
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libgit2?expand=0&rev=71

_multibuild

@@ -0,0 +1,3 @@
+<multibuild>
+	<package>experimental</package>
+</multibuild>

libgit2-1.8.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8c1eaf0cf07cba0e9021920bfba9502140220786ed5d8a8ec6c7ad9174522f8e
-size 7608949

libgit2-1.9.2.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6f097c82fc06ece4f40539fb17e9d41baf1a5a2fc26b1b8562d21b89bc355fe6
+size 7667818

libgit2-rpmlintrc

@@ -1,2 +1,3 @@
 # libgit2-tools ships the tools
 addFilter("libgit2-tools.*shlib-policy-missing-lib")
+addFilter("libgit2-experimental-tools.*shlib-policy-missing-lib")

libgit2.changes

@@ -1,3 +1,81 @@
+-------------------------------------------------------------------
+Wed Dec 24 22:06:13 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 1.9.2:
+  * A bug in the external SSH execution is fixed that could cause
+    arbitrary command execution. Remote repository names were
+    improperly sent to the shell without quoting. Arguments to the
+    external SSH command are now sent parameterized. (boo#1255640)
+  * A bug in SSH credential creation is fixed that could cause a
+    buffer overflow. Public keys that are not NUL terminated were
+    improperly zeroed. The given length of public keys is now
+    honored. (boo#1255641)
+
+-------------------------------------------------------------------
+Mon Jun 16 19:23:27 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 1.9.1:
+  * hash: allow unsigned int != size_t in sha256
+  * include: Fix code comment termination
+  * alternates: allow relative paths in all repositories
+  * Fix potential null dereference
+  * attr: honor ignorecase in attribute matching
+  * tag: Refuse to use HEAD as a tagname
+  * Fix memory leak in openssl fips modes
+  * Fix circular includes between types.h and oid.h
+  * diff: correct diff stat alignment in presence of renames w/ common prefix
+  * Revert include path regression
+  * documentation updates
+- changes to cmake file placement, add the needed conflict
+  between -devel and -experimental-devel
+- fix Leap build of experimental flavor
+
+-------------------------------------------------------------------
+Fri Feb 28 13:30:39 UTC 2025 - Atri Bhattacharya <badshah400@gmail.com>
+
+- Pass -DEXPERIMENTAL_SHA256=ON to cmake to enable sha256
+  integration (already being used by opensuse gitea) in a separate
+  multibuild flavour. This provides downstream libs (like pygit2)
+  to build against the experimental flavour, should they want to.
+
+-------------------------------------------------------------------
+Mon Jan 13 04:45:40 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 1.9.0
+  * update TLS cipher selection to match the "compatibility" cipher
+    suite settings as documented by Mozilla.
+  * blame API now contains committer information and commit
+    summaries for blame hunks, and the ability to get information
+    about the line of text that was modified
+  * add blame, init commands to CLI
+  * ABI-breaking changes in blame hunk, checkout, configuration,
+    update_refs
+  * new API: git_signature_default_from_env
+  * packbuilder can now be interrupted from a callback
+  * honor the preciousObject repository extension
+  * Push status will be reported even when a push fails
+  * support generating think packs from a mempack instanct
+  * New LIBGIT2_VERSION_CHECK macro for version checking
+  * Custom X509 certificates can be added to OpenSSL's certificate
+    store using the GIT_OPT_ADD_SSL_X509_CERT option
+  * Bug fixes and documentation updates
+
+-------------------------------------------------------------------
+Thu Oct 31 19:25:41 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 1.8.4:
+  * Actually includes the pre-1.8.0 commit constness behavior fix
+
+-------------------------------------------------------------------
+Sun Oct 27 15:48:41 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 1.8.3:
+   * revert a const-correctness change introduced in v1.8.0 for
+     the git_commit_create functions. Retain the const-behavior for
+     the commits arguments from prior to v1.8.0.
+   * Fix a bug introduced in v1.8.1 for users of the legacy
+     Node.js http-parser dependency.
+
 -------------------------------------------------------------------
 Fri May 17 10:30:50 UTC 2024 - Dirk Müller <dmueller@suse.com>
 

libgit2.spec

@@ -1,9 +1,9 @@
 #
 # spec file for package libgit2
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 # Copyright (c) 2011, Sascha Peilicke <saschpe@gmx.de>
-# Copyright (c) 2024 Andreas Stieger <Andreas.Stieger@gmx.de>
+# Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,15 +18,24 @@
 #
 
 
-%define sover 1_8
-Name:           libgit2
-Version:        1.8.1
+%global flavor @BUILD_FLAVOR@%{nil}
+%define pname libgit2
+%if "%{flavor}" == "experimental"
+%define psuffix -%{flavor}
+%define sosuffix 1_9
+%bcond_without expt_sha256
+%else
+%define sosuffix -1_9
+%bcond_with expt_sha256
+%endif
+Name:           %{pname}%{?psuffix}
+Version:        1.9.2
 Release:        0
 Summary:        C git library
 License:        GPL-2.0-only WITH GCC-exception-2.0
 Group:          Development/Libraries/C and C++
 URL:            https://libgit2.github.com/
-Source0:        https://github.com/libgit2/libgit2/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+Source0:        https://github.com/libgit2/libgit2/archive/v%{version}.tar.gz#/%{pname}-%{version}.tar.gz
 Source1:        libgit2-rpmlintrc
 BuildRequires:  cmake >= 3.5.1
 BuildRequires:  pkgconfig
@@ -42,11 +51,11 @@ provided as a re-entrant linkable library with a solid API, allowing
 you to write native speed custom Git applications in any language
 with bindings.
 
-%package -n %{name}-%{sover}
+%package -n %{name}%{sosuffix}
 Summary:        C git library
 Group:          System/Libraries
 
-%description -n %{name}-%{sover}
+%description -n %{name}%{sosuffix}
 libgit2 is a portable, pure C implementation of the Git core methods
 provided as a re-entrant linkable library with a solid API, allowing
 you to write native speed custom Git applications in any language
@@ -55,7 +64,8 @@ with bindings.
 %package devel
 Summary:        C git library
 Group:          Development/Libraries/C and C++
-Requires:       %{name}-%{sover} >= %{version}
+Requires:       %{name}%{sosuffix} = %{version}
+Conflicts:      cmake(libgit2)
 
 %description devel
 This package contains all necessary include files and libraries needed
@@ -69,23 +79,24 @@ Group:          Development/Tools/Version Control
 This package contains a git cli based on libgit2.
 
 %prep
-%autosetup -p1
-find examples -type f -name ".gitignore" -print -delete
+%autosetup -p1 -n %{pname}-%{version}
 
 %build
 %cmake \
 	-DUSE_SSH:BOOL=ON \
 	-DREGEX_BACKEND=pcre2 \
 	-DENABLE_REPRODUCIBLE_BUILDS:BOOL=ON \
+	-DEXPERIMENTAL_SHA256:BOOL=%{?with_expt_sha256:ON}%{!?with_expt_sha256:OFF} \
+	-DBUILD_TESTS:BOOL=OFF \
 	%{nil}
 %cmake_build
 
 %install
 %cmake_install
 
-%ldconfig_scriptlets -n %{name}-%{sover}
+%ldconfig_scriptlets -n %{name}%{sosuffix}
 
-%files -n %{name}-%{sover}
+%files -n %{name}%{sosuffix}
 %license COPYING
 %doc AUTHORS README.md
 %{_libdir}/%{name}.so.*
@@ -95,10 +106,11 @@ find examples -type f -name ".gitignore" -print -delete
 %doc examples
 %{_libdir}/%{name}.so
 %{_includedir}/git2*
-%{_libdir}/pkgconfig/libgit2.pc
+%{_libdir}/pkgconfig/%{name}.pc
+%{_libdir}/cmake/libgit2
 
 %files tools
 %license COPYING
-%{_bindir}/*
+%{_bindir}/git2%{?with_expt_sha256:-experimental}
 
 %changelog