Bug 273563
| Summary: | net-im/py-matrix-synapse: update to 1.93.0 | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Li-Wen Hsu <lwhsu> | ||||||||||||
| Component: | Individual Port(s) | Assignee: | Li-Wen Hsu <lwhsu> | ||||||||||||
| Status: | Closed FIXED | ||||||||||||||
| Severity: | Affects Many People | CC: | grahamperrin, ports-secteam, ports | ||||||||||||
| Priority: | Normal | Keywords: | security | ||||||||||||
| Version: | Latest | Flags: | ports:
maintainer-feedback+
grahamperrin: merge-quarterly? |
||||||||||||
| Hardware: | Any | ||||||||||||||
| OS: | Any | ||||||||||||||
| URL: | https://github.com/matrix-org/synapse/compare/v1.91.0...v1.93.0 | ||||||||||||||
| Attachments: |
|
||||||||||||||
Created attachment 244695 [details]
Update to 1.91.2
Created attachment 244911 [details]
Update to 1.92.2
Created attachment 245011 [details]
Update to 1.92.3
Created attachment 245265 [details]
Update to 1.93.0
Patch looks good to me, passes all tests with flying colors and the resulting package is well behaved when run in production. 10/10 from my pov, let's get this merged. :) (By the way, I also tested this with the updated py-treq proposed in #255708 and things work nicely) Hi, and thanks to lwhsu@ for reporting and patching. As far as I can tell, six sets of release notes apply (and should be referenced in a commit). Excluding notes for release candidates: <https://github.com/matrix-org/synapse/releases/tag/v1.91.1> <https://github.com/matrix-org/synapse/releases/tag/v1.91.2> <https://github.com/matrix-org/synapse/releases/tag/v1.92.0> <https://github.com/matrix-org/synapse/releases/tag/v1.92.1> <https://github.com/matrix-org/synapse/releases/tag/v1.92.2> <https://github.com/matrix-org/synapse/releases/tag/v1.93.0> At a glance, these include (low severity): * GHSA-4f74-84v3-j9q5 / CVE-2023-41335 * GHSA-7565-cq32-vx2x / CVE-2023-42453. <https://www.freshports.org/net-im/py-matrix-synapse/> <https://matrix-org.github.io/synapse> A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=f2e69e923045efe557445772fc898235873722ee commit f2e69e923045efe557445772fc898235873722ee Author: Li-Wen Hsu <lwhsu@FreeBSD.org> AuthorDate: 2023-10-27 17:14:59 +0000 Commit: Li-Wen Hsu <lwhsu@FreeBSD.org> CommitDate: 2023-10-27 17:14:59 +0000 net-im/py-matrix-synapse: Update to 1.93.0 Release notes: - https://github.com/matrix-org/synapse/releases/tag/v1.91.1 - https://github.com/matrix-org/synapse/releases/tag/v1.91.2 - https://github.com/matrix-org/synapse/releases/tag/v1.92.0 - https://github.com/matrix-org/synapse/releases/tag/v1.92.1 - https://github.com/matrix-org/synapse/releases/tag/v1.92.2 - https://github.com/matrix-org/synapse/releases/tag/v1.93.0 PR: 273563 Approved by: Sascha Biberhofer <ports@skyforge.at> (maintainer) net-im/py-matrix-synapse/Makefile | 3 +- net-im/py-matrix-synapse/Makefile.crates | 16 ++++----- net-im/py-matrix-synapse/distinfo | 38 +++++++++++----------- .../py-matrix-synapse/files/patch-pyproject.toml | 15 ++------- 4 files changed, 31 insertions(+), 41 deletions(-) |
Created attachment 244631 [details] v1