-
-
Notifications
You must be signed in to change notification settings - Fork 15.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
libgit2: bump for bug fixes as well as security fixes #49494
Conversation
0.27.6 is a security fix release Notes: https://github.com/libgit2/libgit2/releases/tag/v0.27.7 https://github.com/libgit2/libgit2/releases/tag/v0.27.6
0.26.7 is a security fix release 0.26.8 is a security fix release Notes: https://github.com/libgit2/libgit2/releases/tag/v0.26.8 https://github.com/libgit2/libgit2/releases/tag/v0.26.7
* match major libgit2 version * upstream patch to remove unnecessary requirement
Success on aarch64-linux (full log) Attempted: libgit2 Partial log (click to expand)
|
Success on x86_64-darwin (full log) Attempted: libgit2 Partial log (click to expand)
|
Success on x86_64-linux (full log) Attempted: libgit2 Partial log (click to expand)
|
@dtzWill, quick question: what is the reason we can't move to 0.27 as default? IIRC, only 0.27 supports |
It likely can be made the default, although I'm not sure.
Quick grep suggests libgit2-glib may require the 0.26 version,
but perhaps that should be special-cased.
There may be other packages in similar situation, didn't check closely.
Regardless I'm not aware of a breakage-based reason it can't be default,
only that some packages need older version for presumably API reasons
and can be handled by specifying the 0.26 attribute
(which would be introduced).
Maybe give this a try and submit a PR? :)
…On Wed, 31 Oct 2018 10:02:05 -0700, qolii ***@***.***> wrote:
@dtzWill, quick question: what is the reason we can't move to 0.27 as default? IIRC, only 0.27 supports `libressl-2.7` and up. Does it break somethings?
--
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHub:
#49494 (comment) part: text/html
|
Ping? Not sure if we mean to block or not just checking :) |
Overdue security fixes-- changing the default can be done separately (and sounds good but needs to be tested). |
Bump pygit2 as well, not tested beyond building.
sandbox
innix.conf
on non-NixOS)nix-shell -p nox --run "nox-review wip"
./result/bin/
)nix path-info -S
before and after)