Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package lightcraft for openSUSE:Factory checked in at 2026-10-31 23:10:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/lightcraft (Old) and /work/SRC/openSUSE:Factory/.lightcraft.new.1255 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "lightcraft" Sat Oct 31 23:10:27 2026 rev:3 rq:1394162 version:0.16.0 Changes: -------- --- /work/SRC/openSUSE:Factory/lightcraft/lightcraft.changes 2026-10-30 18:19:39.046729653 +0100 +++ /work/SRC/openSUSE:Factory/.lightcraft.new.1255/lightcraft.changes 2026-10-31 23:13:17.153158088 +0100 @@ -1,0 +2,23 @@ +Sat Oct 31 13:52:03 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 0.16.0 (upstream tag v0.16.0, 2026-10-31): + * Hardening: hostile ERF/MEF raw strips refused, .cube LUT + non-finite values rejected, IPTC trailing NULs stripped, + ZIP entries with inconsistent sizes refused, mismatched + XML tags rejected. No CVE identifiers in the crossed range. + * Fixes: hue clamped below 360, custom white balance reported + when a look omits it, translated open/save panels. + * Re-vendored (update=false, respect-lockfile true); + besides the workspace crates only craft-update moves (git + rev 92d392c to 04aa1703, still MIT OR Apache-2.0; its one + new dep `image` was already vendored) plus zip 9.1.0 to + 9.1.3 (MIT) and rustls-webpki 0.103.15 to 0.103.16 (ISC), + so the licence set of the linked crates is unchanged, no + new copyleft; the cargo_audit service reports no + advisories. +- Set the fixed metainfo release date to 2026-10-31. +- Keep lightcraft-no-self-update.patch and + lightcraft-drop-unused-egui-patches.patch unchanged (both + still apply --fuzz=0: same four unused pins, same rev). + +------------------------------------------------------------------- Old: ---- lightcraft-0.15.0.tar.zst New: ---- lightcraft-0.16.0.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ lightcraft.spec ++++++ --- /var/tmp/diff_new_pack.7XlORd/_old 2026-10-31 23:13:18.509215181 +0100 +++ /var/tmp/diff_new_pack.7XlORd/_new 2026-10-31 23:13:18.511215265 +0100 @@ -17,7 +17,7 @@ Name: lightcraft -Version: 0.15.0 +Version: 0.16.0 Release: 0 Summary: Photo library and raw developer # Legal-Review-Notice: scope is the two shipped targets (lightcraft, lightcraft-cli) @@ -44,6 +44,10 @@ URL: https://github.com/storytold/lightcraft Source0: %{name}-%{version}.tar.zst Source1: vendor.tar.zst +# Vendor tree is filtered (cargo_vendor filter=true): Windows-only and +# wasm-only crates are emptied to manifest stubs, so no import libs or +# prebuilt wasm objects ship. The only prebuilt files left are test fixtures: +# Source-Binary-Exception: vendor.tar.zst:vendor/libloading-*/tests/*.dll -- test-data: fixtures loaded only by libloading's #![cfg(windows)] tests, never on Linux # PATCH-FIX-OPENSUSE lightcraft-no-self-update.patch -- distro builds # must not phone home at startup nor offer to install an upstream release # over RPM-owned files (the package manager owns updates); the manual @@ -119,10 +123,10 @@ install -Dm0644 packaging/linux/ai.storyteller.lightcraft.desktop %{buildroot}%{_datadir}/applications/ai.storyteller.lightcraft.desktop install -Dm0644 packaging/linux/ai.storyteller.lightcraft.mime.xml %{buildroot}%{_datadir}/mime/packages/ai.storyteller.lightcraft.xml install -d -m 0755 %{buildroot}%{_datadir}/metainfo -# Fixed upstream release date (v0.15.0, 2026-10-28): a build-time date would +# Fixed upstream release date (v0.16.0, 2026-10-31): a build-time date would # make the metainfo differ on every rebuild, and spec-cleaner macro-expands # the %-sequences of any date format string, so keep this a plain string. -sed -e "s/@VERSION@/%{version}/g" -e "s/@DATE@/2026-10-28/g" packaging/linux/ai.storyteller.lightcraft.metainfo.xml.in > %{buildroot}%{_datadir}/metainfo/ai.storyteller.lightcraft.metainfo.xml +sed -e "s/@VERSION@/%{version}/g" -e "s/@DATE@/2026-10-31/g" packaging/linux/ai.storyteller.lightcraft.metainfo.xml.in > %{buildroot}%{_datadir}/metainfo/ai.storyteller.lightcraft.metainfo.xml # Upstream declares the app icon as type="stock" but it is a custom hicolor # icon, so declare it as cached for appstream validation. sed -i 's|<icon type="stock">ai.storyteller.lightcraft</icon>|<icon type="cached" width="64" height="64">ai.storyteller.lightcraft.png</icon>|' %{buildroot}%{_datadir}/metainfo/ai.storyteller.lightcraft.metainfo.xml ++++++ _service ++++++ --- /var/tmp/diff_new_pack.7XlORd/_old 2026-10-31 23:13:18.560217328 +0100 +++ /var/tmp/diff_new_pack.7XlORd/_new 2026-10-31 23:13:18.564217496 +0100 @@ -2,7 +2,7 @@ <service mode="manual" name="tar_scm"> <param name="url">https://github.com/storytold/lightcraft.git</param> <param name="scm">git</param> - <param name="revision">v0.15.0</param> + <param name="revision">v0.16.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="versionrewrite-replacement">\1</param> @@ -17,6 +17,7 @@ <param name="src">lightcraft-*.tar.zst</param> <param name="update">false</param> <param name="respect-lockfile">true</param> + <param name="filter">true</param> </service> <service mode="manual" name="cargo_audit"/> </services> ++++++ lightcraft-0.15.0.tar.zst -> lightcraft-0.16.0.tar.zst ++++++ /work/SRC/openSUSE:Factory/lightcraft/lightcraft-0.15.0.tar.zst /work/SRC/openSUSE:Factory/.lightcraft.new.1255/lightcraft-0.16.0.tar.zst differ: char 7, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/lightcraft/vendor.tar.zst /work/SRC/openSUSE:Factory/.lightcraft.new.1255/vendor.tar.zst differ: char 7, line 1
