[Pkg-javascript-devel] node-d3-hierarchy 1.1.8-2 MIGRATED to testing

2020-09-06 Thread Debian testing watch
FYI: The status of the node-d3-hierarchy source package in Debian's testing distribution has changed. Previous version: 1.1.8-1 Current version: 1.1.8-2 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you wi

[Pkg-javascript-devel] node-jsesc 3.0.1-2 MIGRATED to testing

2020-09-06 Thread Debian testing watch
FYI: The status of the node-jsesc source package in Debian's testing distribution has changed. Previous version: 3.0.1-1 Current version: 3.0.1-2 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will rece

[Pkg-javascript-devel] node-sinon 9.0.3+ds+~cs48.19.16-1 MIGRATED to testing

2020-09-06 Thread Debian testing watch
FYI: The status of the node-sinon source package in Debian's testing distribution has changed. Previous version: 9.0.1+ds-1 Current version: 9.0.3+ds+~cs48.19.16-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a

[Pkg-javascript-devel] node-parse-json 5.1.0+~1.1.6-1 MIGRATED to testing

2020-09-06 Thread Debian testing watch
FYI: The status of the node-parse-json source package in Debian's testing distribution has changed. Previous version: 5.0.0-2 Current version: 5.1.0+~1.1.6-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day y

[Pkg-javascript-devel] node-mqtt-packet 6.4.0-1 MIGRATED to testing

2020-09-06 Thread Debian testing watch
FYI: The status of the node-mqtt-packet source package in Debian's testing distribution has changed. Previous version: 6.3.2-2 Current version: 6.4.0-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you wil

[Pkg-javascript-devel] codemirror-js 5.57.0-1 MIGRATED to testing

2020-09-06 Thread Debian testing watch
FYI: The status of the codemirror-js source package in Debian's testing distribution has changed. Previous version: 5.56.0-1 Current version: 5.57.0-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

[Pkg-javascript-devel] node-sinon_9.0.3+ds+~cs48.19.16-2_sourceonly.changes ACCEPTED into unstable

2020-09-06 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 07 Sep 2020 01:50:37 +0200 Source: node-sinon Architecture: source Version: 9.0.3+ds+~cs48.19.16-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Chan

[Pkg-javascript-devel] typescript-types_20200907-1_sourceonly.changes ACCEPTED into unstable

2020-09-06 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 07 Sep 2020 01:48:53 +0200 Source: typescript-types Architecture: source Version: 20200907-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Changes:

[Pkg-javascript-devel] Processing of node-sinon_9.0.3+ds+~cs48.19.16-2_sourceonly.changes

2020-09-06 Thread Debian FTP Masters
node-sinon_9.0.3+ds+~cs48.19.16-2_sourceonly.changes uploaded successfully to localhost along with the files: node-sinon_9.0.3+ds+~cs48.19.16-2.dsc node-sinon_9.0.3+ds+~cs48.19.16-2.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org) -- Pkg-javascri

[Pkg-javascript-devel] Processing of typescript-types_20200907-1_sourceonly.changes

2020-09-06 Thread Debian FTP Masters
typescript-types_20200907-1_sourceonly.changes uploaded successfully to localhost along with the files: typescript-types_20200907-1.dsc typescript-types_20200907.orig.tar.xz typescript-types_20200907-1.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.

[Pkg-javascript-devel] Bug#969668: marked as done (grunt: CVE-2020-7729)

2020-09-06 Thread Debian Bug Tracking System
Your message dated Sun, 06 Sep 2020 21:48:46 + with message-id and subject line Bug#969668: fixed in grunt 1.3.0-1 has caused the Debian Bug report #969668, regarding grunt: CVE-2020-7729 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the

[Pkg-javascript-devel] grunt_1.3.0-1_sourceonly.changes ACCEPTED into unstable

2020-09-06 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 06 Sep 2020 23:31:45 +0200 Source: grunt Architecture: source Version: 1.3.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Xavier Guimard Closes: 969668 Changes:

[Pkg-javascript-devel] Processed: Bug#969668 marked as pending in grunt

2020-09-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 pending Bug #969668 [src:grunt] grunt: CVE-2020-7729 Added tag(s) pending. -- 969668: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969668 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- Pkg-javascript-devel mailing list Pkg-j

[Pkg-javascript-devel] Processing of grunt_1.3.0-1_sourceonly.changes

2020-09-06 Thread Debian FTP Masters
grunt_1.3.0-1_sourceonly.changes uploaded successfully to localhost along with the files: grunt_1.3.0-1.dsc grunt_1.3.0.orig.tar.gz grunt_1.3.0-1.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org) -- Pkg-javascript-devel mailing list Pkg-javascrip

[Pkg-javascript-devel] Processed: severity of 969669 is grave

2020-09-06 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 969669 grave Bug #969669 [src:node-node-forge] node-node-forge: CVE-2020-7720 Severity set to 'grave' from 'important' > thanks Stopping processing here. Please contact me if you need assistance. -- 969669: https://bugs.debian.org/cgi-b

[Pkg-javascript-devel] Bug#969669: node-node-forge: CVE-2020-7720

2020-09-06 Thread Salvatore Bonaccorso
Source: node-node-forge Version: 0.9.1~dfsg-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Control: found -1 0.8.1~dfsg-1 Hi, The following vulnerability was published for node-node-forge. CVE-2020-7720[0]: | The package node-forge before 0.

[Pkg-javascript-devel] Processed: node-node-forge: CVE-2020-7720

2020-09-06 Thread Debian Bug Tracking System
Processing control commands: > found -1 0.8.1~dfsg-1 Bug #969669 [src:node-node-forge] node-node-forge: CVE-2020-7720 Marked as found in versions node-node-forge/0.8.1~dfsg-1. -- 969669: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969669 Debian Bug Tracking System Contact ow...@bugs.debia

[Pkg-javascript-devel] Processed: grunt: CVE-2020-7729

2020-09-06 Thread Debian Bug Tracking System
Processing control commands: > found -1 1.0.1-8 Bug #969668 [src:grunt] grunt: CVE-2020-7729 Marked as found in versions grunt/1.0.1-8. -- 969668: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969668 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- Pkg-javascript-d

[Pkg-javascript-devel] Bug#969668: grunt: CVE-2020-7729

2020-09-06 Thread Salvatore Bonaccorso
Source: grunt Version: 1.0.4-2 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Control: found -1 1.0.1-8 Hi, The following vulnerability was published for grunt. CVE-2020-7729[0]: | The package grunt before 1.3.0 are vulnerable to Arbitrary Code

Re: [Pkg-javascript-devel] Bug#963112: node-katex_0.10.2+dfsg-2_amd64.changes REJECTED

2020-09-06 Thread Pirate Praveen
On Fri, Aug 28, 2020 at 18:24, Simon McVittie wrote: On Sun, 12 Jul 2020 at 13:11:48 +0530, Pirate Praveen wrote: It is over two weeks since I added debian/README.Debian, some feedback on it (if it is sufficient or if you need more time to discuss it inside team) would be good. (Not an

Re: [Pkg-javascript-devel] must node-* packages depend on nodejs or not?

2020-09-06 Thread Jonas Smedegaard
Quoting Pirate Praveen (2020-09-06 15:12:59) > > > On Sun, Sep 6, 2020 at 15:04, Jonas Smedegaard wrote: > > a) node-* packages _only_ shipping nodejs library code should _not_ > > depend on nodejs. > > > > Sounds good, may be we should change npm2deb to make it default as well. I don't use

Re: [Pkg-javascript-devel] must node-* packages depend on nodejs or not?

2020-09-06 Thread Pirate Praveen
On Sun, Sep 6, 2020 at 15:04, Jonas Smedegaard wrote: Thanks. I was clearly mistaken: I have now (after reading above CTTE ruling) learned that there is _no_ rule in Debian that "Python3 libraries must depend on python3" - instead the reason for the required runtime dependency is that Python

Re: [Pkg-javascript-devel] must node-* packages depend on nodejs or not?

2020-09-06 Thread Jonas Smedegaard
Quoting Pirate Praveen (2020-09-06 14:27:11) > > > On Sun, Sep 6, 2020 at 13:43, Jonas Smedegaard wrote: > > Today changes was made to several node-* packages, dropping their > > dependency on nodejs. > > > > Perl libraries must depend on perl. > > > > Python3 libraries must depend on python3

[Pkg-javascript-devel] Bug#969641: marked as done (node-entities: should depend on nodejs)

2020-09-06 Thread Debian Bug Tracking System
Your message dated Sun, 06 Sep 2020 14:43:28 +0200 with message-id <159939620852.1660.9772432852427586...@auryn.jones.dk> and subject line Re: [Pkg-javascript-devel] Bug#969641: node-entities: should depend on nodejs has caused the Debian Bug report #969641, regarding node-entities: should depend

Re: [Pkg-javascript-devel] must node-* packages depend on nodejs or not?

2020-09-06 Thread Pirate Praveen
On Sun, Sep 6, 2020 at 17:57, Pirate Praveen wrote: This is in line with what CTTE ruled and already followed by ruby team. gem2deb does this by default and we have been removing dependency on interpreter for new uploads of existing packages for a while. https://salsa.debian.org/ruby-tea

[Pkg-javascript-devel] Bug#969641: Bug#969641: node-entities: should depend on nodejs

2020-09-06 Thread Pirate Praveen
Control: severity -1 wishlist On Sun, Sep 6, 2020 at 13:59, Jonas Smedegaard wrote: Package: node-entities Version: 2.0.2-2 Severity: serious -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 node-* packages must depend on nodejs - libjs-* need not (when _only_ targeting browser use). * Librar

[Pkg-javascript-devel] Processed: Re: Bug#969641: node-entities: should depend on nodejs

2020-09-06 Thread Debian Bug Tracking System
Processing control commands: > severity -1 wishlist Bug #969641 [node-entities] node-entities: should depend on nodejs Severity set to 'wishlist' from 'serious' -- 969641: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969641 Debian Bug Tracking System Contact ow...@bugs.debian.org with probl

Re: [Pkg-javascript-devel] must node-* packages depend on nodejs or not?

2020-09-06 Thread Pirate Praveen
On Sun, Sep 6, 2020 at 13:43, Jonas Smedegaard wrote: Today changes was made to several node-* packages, dropping their dependency on nodejs. Perl libraries must depend on perl. Python3 libraries must depend on python3. It is my understanding that nodejs libraries currently follow same logi

[Pkg-javascript-devel] Bug#969641: node-entities: should depend on nodejs

2020-09-06 Thread Jonas Smedegaard
Package: node-entities Version: 2.0.2-2 Severity: serious -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 node-* packages must depend on nodejs - libjs-* need not (when _only_ targeting browser use). Changelog for release 2.0.2-2 includes "Drop runtime dependency on nodejs (to avoid installing n

[Pkg-javascript-devel] must node-* packages depend on nodejs or not?

2020-09-06 Thread Jonas Smedegaard
Today changes was made to several node-* packages, dropping their dependency on nodejs. Perl libraries must depend on perl. Python3 libraries must depend on python3. It is my understanding that nodejs libraries currently follow same logic. If I am mistaken, then what is the policy for Nodejs

[Pkg-javascript-devel] node-prosemirror-markdown_1.4.4-2_source.changes ACCEPTED into unstable

2020-09-06 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 06 Sep 2020 16:11:57 +0530 Source: node-prosemirror-markdown Architecture: source Version: 1.4.4-2 Distribution: unstable Urgency: low Maintainer: Debian Javascript Maintainers Changed-By: Pirate Praveen Changes

[Pkg-javascript-devel] node-markdown-it_10.0.0+dfsg-2_source.changes ACCEPTED into unstable

2020-09-06 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 06 Sep 2020 15:41:27 +0530 Source: node-markdown-it Architecture: source Version: 10.0.0+dfsg-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Pirate Praveen Changes

[Pkg-javascript-devel] Processing of node-prosemirror-markdown_1.4.4-2_source.changes

2020-09-06 Thread Debian FTP Masters
node-prosemirror-markdown_1.4.4-2_source.changes uploaded successfully to localhost along with the files: node-prosemirror-markdown_1.4.4-2.dsc node-prosemirror-markdown_1.4.4-2.debian.tar.xz node-prosemirror-markdown_1.4.4-2_amd64.buildinfo Greetings, Your Debian queue daemon (run

[Pkg-javascript-devel] Processing of node-markdown-it_10.0.0+dfsg-2_source.changes

2020-09-06 Thread Debian FTP Masters
node-markdown-it_10.0.0+dfsg-2_source.changes uploaded successfully to localhost along with the files: node-markdown-it_10.0.0+dfsg-2.dsc node-markdown-it_10.0.0+dfsg-2.debian.tar.xz node-markdown-it_10.0.0+dfsg-2_amd64.buildinfo Greetings, Your Debian queue daemon (running on host

[Pkg-javascript-devel] node-entities_2.0.2-2_source.changes ACCEPTED into unstable

2020-09-06 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 06 Sep 2020 15:36:52 +0530 Source: node-entities Architecture: source Version: 2.0.2-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Pirate Praveen Changes: node-e

[Pkg-javascript-devel] Processing of node-entities_2.0.2-2_source.changes

2020-09-06 Thread Debian FTP Masters
node-entities_2.0.2-2_source.changes uploaded successfully to localhost along with the files: node-entities_2.0.2-2.dsc node-entities_2.0.2-2.debian.tar.xz node-entities_2.0.2-2_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org) -- Pkg-javascrip