public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Andrei Radchenko <aradchen@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/nodejs-nodemon] rawhide: Regenerating sources for CVE-2026-13149
Date: Wed, 22 Jul 2026 08:55:16 GMT	[thread overview]
Message-ID: <178471051652.1.5937284565005391231.rpms-nodejs-nodemon-25e2b9bd6174@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/nodejs-nodemon
            Branch : rawhide
            Commit : 25e2b9bd6174cc84ee97b17200c4423d63710aa2
            Author : Andrei Radchenko <aradchen@redhat.com>
            Date   : 2026-07-22T10:52:31+02:00
            Stats  : +10/-10 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/nodejs-nodemon/c/25e2b9bd6174cc84ee97b17200c4423d63710aa2?branch=rawhide

            Log:
            Regenerating sources for CVE-2026-13149

Currently remy's original repo is slightly behind npm's registry counterpart.

- changed upstream source to npm one
- tarball script edits

Resolves: rhbz#2494976

---
diff --git a/nodejs-nodemon.spec b/nodejs-nodemon.spec
index 5770e7e..71d4908 100644
--- a/nodejs-nodemon.spec
+++ b/nodejs-nodemon.spec
@@ -9,7 +9,7 @@ Version:       3.1.14
 Release:       %autorelease
 Summary:       Simple monitor script for use during development of a node.js app
 License:       ISC AND MIT
-URL:           https://github.com/remy/nodemon
+URL:           https://www.npmjs.com/package/nodemon
 Source0:       %{npm_name}-v%{version}-bundled.tar.gz
 
 
@@ -41,8 +41,8 @@ replacement wrapper for node, think of it as replacing the word "node"
 on the command line when you run your script.
 
 %prep
-%setup -q -n %{npm_name}-%{version}
-#%%patch -P 0 
+%autosetup -n package
+
 %build
 
 # nothing to do
@@ -50,7 +50,7 @@ on the command line when you run your script.
 
 %install
 mkdir -p %{buildroot}%{nodejs_sitelib}/%{npm_name}
-cp -pr doc bin lib package.json website node_modules %{buildroot}%{nodejs_sitelib}/%{npm_name}
+cp -pr doc bin lib package.json node_modules %{buildroot}%{nodejs_sitelib}/%{npm_name}
 
 mkdir -p %{buildroot}%{_bindir}
 ln -sf %{nodejs_sitelib}/%{npm_name}/bin/nodemon.js %{buildroot}%{_bindir}/nodemon
@@ -65,7 +65,7 @@ npm run test
 %endif
 
 %files
-%doc CODE_OF_CONDUCT.md doc faq.md README.md
+%doc doc README.md
 %{nodejs_sitelib}/%{npm_name}
 %{_bindir}/nodemon
 

diff --git a/nodemon-tarball.sh b/nodemon-tarball.sh
old mode 100644
new mode 100755
index e9c1502..584243c
--- a/nodemon-tarball.sh
+++ b/nodemon-tarball.sh
@@ -1,7 +1,7 @@
 #!/bin/sh
 
 version=$(rpm -q --specfile --qf='%{version}\n' nodejs-nodemon.spec | head -n1)
-wget https://github.com/remy/nodemon/archive/v$version.tar.gz
-tar -zxf v$version.tar.gz
-cd nodemon-$version
-npm install --production && cd .. && tar -zcf nodemon-v$version-bundled.tar.gz nodemon-$version
+wget https://registry.npmjs.org/nodemon/-/nodemon-$version.tgz
+tar -zxf nodemon-$version.tgz
+cd package
+npm install --production && cd .. && tar -zcf nodemon-v$version-bundled.tar.gz package

diff --git a/sources b/sources
index afa120c..7c5db38 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (nodemon-v3.1.14-bundled.tar.gz) = 72d7ddb6ccc0783bf96a316b94fa428820d6e147fdd6192f22524b258cfe13ccc4ba274b8cef225f3a542b0c6175b35e6937cad8de218dab3491a98bc129e9f2
+SHA512 (nodemon-v3.1.14-bundled.tar.gz) = db8759bb731247799835e32d86b91dd124aa504c2484e70fcae167c71565bec5ab83dd05c363fd25a024d55c69eaf02edef3ac0eb76550581eb09fc1528c2471

                 reply	other threads:[~2026-07-22  8:55 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178471051652.1.5937284565005391231.rpms-nodejs-nodemon-25e2b9bd6174@fedoraproject.org \
    --to=aradchen@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox