Bug 284359 - www/forgejo: update to 10.0.0 (fixes security vulnerabilities)
Summary: www/forgejo: update to 10.0.0 (fixes security vulnerabilities)
Status: In Progress
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Vladimir Druzenko
URL: https://forgejo.org/2025-01-release-v...
Keywords:
: 284287 (view as bug list)
Depends on:
Blocks: 284287
  Show dependency treegraph
 
Reported: 2025-01-26 09:21 UTC by Stefan Bethke
Modified: 2025-01-26 18:49 UTC (History)
5 users (show)

See Also:
stb: maintainer-feedback+


Attachments
patch for forgejo and vuxml (2.22 KB, patch)
2025-01-26 09:21 UTC, Stefan Bethke
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Bethke 2025-01-26 09:21:54 UTC
Created attachment 257000 [details]
patch for forgejo and vuxml

Announcement: https://forgejo.org/2025-01-release-v10-0/
Release Notes: https://codeberg.org/forgejo/forgejo/milestone/8377
Comment 1 Stefan Bethke 2025-01-26 09:23:09 UTC
I opened a new bug to have the correct title, links, etc. This fixes PR #284287.
Comment 2 Mark Linimon freebsd_committer freebsd_triage 2025-01-26 12:36:32 UTC
*** Bug 284287 has been marked as a duplicate of this bug. ***
Comment 3 commit-hook freebsd_committer freebsd_triage 2025-01-26 18:40:26 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=fdae03c55d1b079927849f6c21925993d62bab3f

commit fdae03c55d1b079927849f6c21925993d62bab3f
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2025-01-26 18:17:55 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-01-26 18:17:55 +0000

    www/forgejo: Update 9.0.3 → 10.0.0 (fixes security vulnerabilities)

    Announcement:
    https://forgejo.org/2025-01-release-v10-0/
    Release Notes:
    https://codeberg.org/forgejo/forgejo/milestone/8377

    PR:     284359
    MFH:    2025Q1

 www/forgejo/Makefile | 3 +--
 www/forgejo/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 5 deletions(-)
Comment 4 commit-hook freebsd_committer freebsd_triage 2025-01-26 18:45:29 UTC
A commit in branch 2025Q1 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=a6e8fa3d50364be796ef0baf10a43e130e3b3982

commit a6e8fa3d50364be796ef0baf10a43e130e3b3982
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2025-01-26 18:17:55 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-01-26 18:42:32 +0000

    www/forgejo: Update 9.0.3 → 10.0.0 (fixes security vulnerabilities)

    Announcement:
    https://forgejo.org/2025-01-release-v10-0/
    Release Notes:
    https://codeberg.org/forgejo/forgejo/milestone/8377

    PR:     284359
    MFH:    2025Q1
    (cherry picked from commit fdae03c55d1b079927849f6c21925993d62bab3f)

 www/forgejo/Makefile | 3 +--
 www/forgejo/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 5 deletions(-)
Comment 5 Vladimir Druzenko freebsd_committer freebsd_triage 2025-01-26 18:49:48 UTC
My last two commits to security/vuxml/vuln/*.xml were buggy, so I'm not taking the risk again.
Can anyone from Ports Secteam do this?