Bug 263623

Summary: databases/redis: Update to 6.2.7 on 2022Q2 branch
Product: Ports & Packages Reporter: Yasuhiro Kimura <yasu>
Component: Individual Port(s)Assignee: Yasuhiro Kimura <yasu>
Status: Closed Overcome By Events    
Severity: Affects Many People CC: fred, ports-secteam, riggs
Priority: Normal Keywords: needs-qa, security
Version: LatestFlags: riggs: maintainer-feedback+
Hardware: Any   
OS: Any   
URL: https://github.com/redis/redis/releases/tag/6.2.7
Attachments:
Description Flags
Patch file yasu: maintainer-approval+

Description Yasuhiro Kimura freebsd_committer freebsd_triage 2022-04-28 02:36:38 UTC
Created attachment 233556 [details]
Patch file

Update to 6.2.7 on 2022Q2 branch.

* On main branch this port is updated to 7.0.0 and it includes security fix. But marging it to quarterly branch isn't proper as it is major update and there may be incompatibility issue. Upstream also released new version of 6.2 series and it also includes same security fix. So update to the latter.
* Mark BROKEN if any of external lua library options are enabled. Upstream add new APIs to bundled lua library and use them in source code of redis. This makes it impossible to compile and link redis with external lua libraries. According to the commit message of upstream repository they took the code of new API from the repository of lua. It means linking with external lua libraries may get possible again if they are updated. So mark BROKEN rather than remove these options.

Since this is direct commit to quaterly branch, I'd like to ask ports security team for the approval of it.
Comment 1 Kubilay Kocak freebsd_committer freebsd_triage 2022-04-28 09:12:08 UTC
@Yasu I dont believe approval is required any more. Are vuxml entries already in place?

^Triage: Reporter is committer, assign accordingly
Comment 2 Yasuhiro Kimura freebsd_committer freebsd_triage 2022-04-28 09:20:40 UTC
(In reply to Kubilay Kocak from comment #1)

IIUC commit to quarterly branch is implicitly approved only if it is merged from main branch with `git cherry-pick -x`. As I wrote in comment #0, this is direct commit to quarterly branch. So I think approval by ports security team is necessary.

As for VuXML entry, it was committed with update to 7.0.0 in main branch.