Bug 284676 - www/forgejo: update to 10.0.1; www/forgejo7: update to 7.0.13 (fixes security vulnerabilities)
Summary: www/forgejo: update to 10.0.1; www/forgejo7: update to 7.0.13 (fixes security...
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Vladimir Druzenko
URL: https://forgejo.org/2025-02-release-v...
Keywords:
Depends on: 284681
Blocks:
  Show dependency treegraph
 
Reported: 2025-02-09 09:10 UTC by Stefan Bethke
Modified: 2025-02-25 00:19 UTC (History)
5 users (show)

See Also:
stb: maintainer-feedback+
vvd: merge-quarterly+


Attachments
vuxml entry, www/forgejo and www/forgejo7 (4.92 KB, patch)
2025-02-09 09:10 UTC, Stefan Bethke
fernape: maintainer-approval+
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Marko Cupać 2025-02-09 18:46:32 UTC
Hi,

I'm building latest forgejo from your patch, should be finished soon. Will let you know as soon as I upgrade my test instance (hopefully in an hour or two). If you're in a hurry (security reasons), feel free to commit, otherwise I'd like to run it at least once, or have at least one report of successful upgrade by means of this port.
Comment 2 Vladimir Druzenko freebsd_committer freebsd_triage 2025-02-09 18:53:41 UTC
(In reply to Marko Cupać from comment #1)
Hello!

Version 10 is being built, then I'll start building version 7.
Of course, I will wait for your approval.
Comment 3 commit-hook freebsd_committer freebsd_triage 2025-02-09 19:14:50 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=df8bf23d2a709a2a45c4e046faea1598a56b8912

commit df8bf23d2a709a2a45c4e046faea1598a56b8912
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2025-02-09 19:11:49 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-02-09 19:11:49 +0000

    www/forgejo: Update 10.0.0 → 10.0.1 (fixes security vulnerabilities)

    News:
    https://forgejo.org/2025-02-release-v10-0-1/

    Changelog:
    https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/10.0.1.md

    PR:     284676
    MFH:    2025Q1

 www/forgejo/Makefile | 2 +-
 www/forgejo/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 4 commit-hook freebsd_committer freebsd_triage 2025-02-09 21:49:06 UTC
A commit in branch 2025Q1 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=1c50148e205714827888ca54d284b704ecd7c7d1

commit 1c50148e205714827888ca54d284b704ecd7c7d1
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2025-02-09 19:11:49 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-02-09 21:47:54 +0000

    www/forgejo: Update 10.0.0 → 10.0.1 (fixes security vulnerabilities)

    News:
    https://forgejo.org/2025-02-release-v10-0-1/

    Changelog:
    https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/10.0.1.md

    PR:     284676
    MFH:    2025Q1
    (cherry picked from commit df8bf23d2a709a2a45c4e046faea1598a56b8912)

 www/forgejo/Makefile | 2 +-
 www/forgejo/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 5 Vladimir Druzenko freebsd_committer freebsd_triage 2025-02-09 21:55:22 UTC
(In reply to Marko Cupać from comment #1)
Version 7 build fine in poudriere.
Comment 6 Marko Cupać 2025-02-10 08:28:07 UTC
(In reply to Vladimir Druzenko from comment #5)

I successfully built www/forgejo7 and upgraded my test instance. Feel free to commit. Thanks!
Comment 7 commit-hook freebsd_committer freebsd_triage 2025-02-10 12:24:49 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=68df49bce28cc06c143420dce8a925999e5b7456

commit 68df49bce28cc06c143420dce8a925999e5b7456
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2025-02-10 12:14:55 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-02-10 12:14:55 +0000

    www/forgejo: Update 7.0.12 → 7.0.13 (fixes security vulnerabilities)

    News:
    https://forgejo.org/2025-02-release-v10-0-1/

    Changelog:
    https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/7.0.13.md

    PR:             284676
    Approved by:    Marko Cupać <marko.cupac@mimar.rs> (maintainer)
    MFH:            2025Q1

 www/forgejo7/Makefile | 3 +--
 www/forgejo7/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 5 deletions(-)
Comment 8 commit-hook freebsd_committer freebsd_triage 2025-02-10 12:34:53 UTC
A commit in branch 2025Q1 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=7d31cb52bf27ca85fb61cea30c369df2523edf6e

commit 7d31cb52bf27ca85fb61cea30c369df2523edf6e
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2025-02-10 12:14:55 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-02-10 12:34:16 +0000

    www/forgejo: Update 7.0.12 → 7.0.13 (fixes security vulnerabilities)

    News:
    https://forgejo.org/2025-02-release-v10-0-1/

    Changelog:
    https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/7.0.13.md

    PR:             284676
    Approved by:    Marko Cupać <marko.cupac@mimar.rs> (maintainer)
    MFH:            2025Q1

    (cherry picked from commit 68df49bce28cc06c143420dce8a925999e5b7456)

 www/forgejo7/Makefile | 3 +--
 www/forgejo7/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 5 deletions(-)
Comment 9 Vladimir Druzenko freebsd_committer freebsd_triage 2025-02-10 12:37:13 UTC
Need to update security/vuxml/vuln/2025.xml, so I'm adding to CC Ports Security Team.
Comment 10 Fernando Apesteguía freebsd_committer freebsd_triage 2025-02-13 18:41:53 UTC
Comment on attachment 257343 [details]
vuxml entry, www/forgejo and www/forgejo7

LGTM (with ports-secteam@ hat)

Make sure to run make validate before pushing.

Thanks!