Re: CVS commit: pkgsrc/lang/mozjs78

["David H. Gutteridge" <david%gutteridge.ca@localhost>]

> Module Name:    pkgsrc
> Committed By:   gutteridge
> Date:           Wed Sep 15 01:17:46 UTC 2021
> 
> Modified Files:
>         pkgsrc/lang/mozjs78: Makefile distinfo
>         pkgsrc/lang/mozjs78/patches:
>             patch-build_moz.configure_toolchain.configure
> Removed Files:
>         pkgsrc/lang/mozjs78/patches: patch-.cargo_config.in patch-
> Cargo.lock
>             patch-Cargo.toml
> 
> Log Message:
> mozjs78: update to 78.13.0
> 
> The full gamut of security fixes for this release is unknown, but, at
> minimum, CVE-2020-16042 is addressed. (A full change log seems
> elusive:
> the package's README points to a broken link, Mozilla advisories about
> "memory safety hazards" can point to bug reports that can't be viewed,
> etc.) This is the most current version that Debian has integrated,
> which is where our package points to.
> 
> Successful build tests on:
> NetBSD amd64/9.2_STABLE (with both Rust 1.52.1 and 1.54)
> NetBSD i386/9.2_STABLE
> OmniOS r151036
> 
> Fedora Linux 34 was not testable, as our packaging of LLVM 12.0.1
> fails
> to build on it. The upstream configuration continues to cap macOS
> build
> support at 10.15.4. I updated our existing patch to allow 10.15.7, but
> have no ability to test that OS, and no idea if 11.x would work.
> 
> This is effectively a minor leaf package now, and may best be removed
> in future. I've updated this just in case issues emerge with the
> polkit
> switch to duktape, which will first appear in our 2021Q3 branch. (That
> is, I'm not aware of any issues, and definitely prefer duktape from a
> packaging perspective.)

Hmm, actually, not a minor leaf package, since gjs still depends on it.
(Apparently pkgsrc.se isn't a reliable source for dependency chains, and
I guess it's obvious I don't use Gnome.)

Dave