public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Paul Howarth <paul@city-fan.org>
To: git-commits@fedoraproject.org
Subject: [rpms/perl-YAML] rawhide: Update to v1.320.0 (rhbz#2502797)
Date: Mon, 20 Jul 2026 15:24:31 GMT	[thread overview]
Message-ID: <178456107145.1.8648543501387566839.rpms-perl-YAML-6fc2cdc422ef@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/perl-YAML
            Branch : rawhide
            Commit : 6fc2cdc422efa4d9aad420cc2ca22a4555cee3a3
            Author : Paul Howarth <paul@city-fan.org>
            Date   : 2026-07-20T16:23:38+01:00
            Stats  : +24/-10 in 5 file(s)
            URL    : https://src.fedoraproject.org/rpms/perl-YAML/c/6fc2cdc422efa4d9aad420cc2ca22a4555cee3a3?branch=rawhide

            Log:
            Update to v1.320.0 (rhbz#2502797)

- New upstream release v1.320.0
  - Security: Avoid backtracking leading to exponential load time
    (CVE-2026-63676)
- Stick with existing version numbering scheme for now

---
diff --git a/.gitignore b/.gitignore
index ad44a17..ce622b9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 /YAML-[0-9.]*.tar.gz
 /YAML-free-[0-9.]*.tar.gz
+/YAML-free-v[0-9.]*.tar.gz

diff --git a/YAML-free b/YAML-free
index beae38a..9750c9e 100755
--- a/YAML-free
+++ b/YAML-free
@@ -15,7 +15,7 @@ case $# in
 	;;
 esac
 
-if echo "$YAML_tarball" | grep --silent -x 'YAML-[1-9][0-9]*\.[0-9][0-9.]*\.tar\.gz'; then
+if echo "$YAML_tarball" | grep --silent -Ex 'YAML-v?[1-9][0-9]*\.[0-9][0-9.]*\.tar\.gz'; then
 	YAML_free_tarball=$(echo "$YAML_tarball" | sed -e 's|^YAML|YAML-free|')
 	YAML_dirname=$(echo "$YAML_tarball" | sed -e 's|\.tar\.gz$||')
 else

diff --git a/perl-YAML.rpmlintrc b/perl-YAML.rpmlintrc
index be7a498..76b5145 100644
--- a/perl-YAML.rpmlintrc
+++ b/perl-YAML.rpmlintrc
@@ -1,2 +1,5 @@
 # Tarball modified to remove non-free content
-addFilter("invalid-url Source0: YAML-free-[0-9.]*\.tar\.gz")
+addFilter("invalid-url Source0: YAML-free-v?[0-9.]*\.tar\.gz")
+
+# libyaml is a library for YAML handling
+addFilter("spelling-error \('libyaml',")

diff --git a/perl-YAML.spec b/perl-YAML.spec
index e5b3de6..351d3e3 100644
--- a/perl-YAML.spec
+++ b/perl-YAML.spec
@@ -11,17 +11,21 @@
 %bcond_with perl_YAML_enables_extra_test
 %endif
 
+# Not sure if v-string versioning will be long term
+%global package_version 1.32
+%global cpan_version %(LC_ALL=C; printf 'v%.3f.0' '%{package_version}')
+
 Name:           perl-YAML
-Version:        1.31
-Release:        8%{?dist}
-Summary:        YAML Ain't Markup Language (tm)
+Version:        %{package_version}
+Release:        1%{?dist}
+Summary:        YAML Ain't Markup Language (TM)
 License:        GPL-1.0-or-later OR Artistic-1.0-Perl
 URL:            https://metacpan.org/release/YAML
-# Tarball created from https://cpan.metacpan.org/modules/by-module/YAML/YAML-%%{version}.tar.gz
+# Tarball created from https://cpan.metacpan.org/modules/by-module/YAML/YAML-%%{cpan_version}.tar.gz
 # using script YAML-free (see https://bugzilla.redhat.com/show_bug.cgi?id=1813197)
-Source0:        YAML-free-%{version}.tar.gz
+Source0:        YAML-free-%{cpan_version}.tar.gz
 # Script to remove non-free content from upstream tarball
-# Usage: YAML-free YAML-%%{version}.tar.gz
+# Usage: YAML-free YAML-%%{cpan_version}.tar.gz
 Source1:        YAML-free
 BuildArch:      noarch
 # Module Build
@@ -85,7 +89,7 @@ Please consider using these first:
    YAML::PP API
 
 %prep
-%setup -q -n YAML-%{version}
+%setup -q -n YAML-%{cpan_version}
 
 %build
 perl Makefile.PL INSTALLDIRS=vendor NO_PACKLIST=1 NO_PERLLOCAL=1
@@ -143,6 +147,12 @@ make test AUTHOR_TESTING=%{with perl_YAML_enables_extra_test}
 %{_mandir}/man3/YAML::Types.3*
 
 %changelog
+* Mon Jul 20 2026 Paul Howarth <paul@city-fan.org> - 1.32-1
+- Update to v1.320.0 (rhbz#2502797)
+  - Security: Avoid backtracking leading to exponential load time
+    (CVE-2026-63676)
+- Stick with existing version numbering scheme for now
+
 * Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.31-8
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
 

diff --git a/sources b/sources
index 4760ec9..03b394a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (YAML-free-1.31.tar.gz) = fd259d41f8f5b5ef58365ceecc489f238560253e298fe9392d480dd1fff51f77a0e6e45413c37fd0e54bbd7a898484a90228d69701d7304cf47a2c1d320e2fd8
+SHA512 (YAML-free-v1.320.0.tar.gz) = efc8d3a42d3935f992d8a156be925ae4688e2d2ae08557fd968ad00e5cbaf6ed46f619592fea8a38ceb3fd85b557b1caa1eb3a700b8f27938919ae79c64c221e

                 reply	other threads:[~2026-07-20 15:24 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178456107145.1.8648543501387566839.rpms-perl-YAML-6fc2cdc422ef@fedoraproject.org \
    --to=paul@city-fan.org \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox