From pingou at pingoured.fr Mon Nov  1 15:12:09 2021
Content-Type: multipart/mixed; boundary="===============7474067208209911131=="
MIME-Version: 1.0
From: Pierre-Yves Chibon <pingou at pingoured.fr>
To: infrastructure at lists.fedoraproject.org
Subject: Re: [FBR] Update pagure to 5.13.3
Date: Mon, 01 Nov 2021 16:11:53 +0100
Message-ID: <YYADub9AIgqxFpr1@flame.pingoured.fr>
In-Reply-To: CAEg-Je8t=HL3n0DwaSniCLtkn0h_-ZZ2xLcjYs3tReRaT0QB1w@mail.gmail.com

--===============7474067208209911131==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

On Mon, Nov 01, 2021 at 11:07:26AM -0400, Neal Gompa wrote:
> On Mon, Nov 1, 2021 at 11:06 AM Pierre-Yves Chibon <pingou(a)pingoured.fr=
> wrote:
> >
> > Good Morning Everyone,
> >
> > This morning, I have cut a new release of pagure: 5.13.3 with the follo=
wing
> > changelog:
> > - Warn users when a PR contains some characters
> > - srcfpo theme: Change "Packages" link to new packages website (Brendan=
 Early)
> > - srcfpo theme: left-align the lines in description (Zbigniew J=C4=99dr=
zejewski-Szmek)
> > - fas user url updated for new accounts system (Mark O Brien)
> > - Change fas link from admin.fp.o to accounts.fp.o (Lenka Segura)
> > - Remove message about 60 day key length (Ken Dreyer)
> > - Escape $ to fix Jenkins interpolation warning (#5178) (Anatoli Babeni=
a)
> > - Fix another invalid <img> width/height attribute (Anatoli Babenia)
> > - Fix missing space before src in <script> (Anatoli Babenia)
> > - Remove duplicate class attribute from Clone dropdown (Anatoli Babenia)
> > - Fix invalid <img> height (no px is allowed here) (Anatoli Babenia)
> > - Add Translation status link on repo_info page at src.fp.o (Sundeep An=
and)
> > - Update fedmsg homepage (Rafael Fontenelle)
> > - Add support for noggin with the FAS auth backend
> > - Update collaborator access level descriptions (Michel Alexandre Salim)
> > - Fix a type, add missing work hand (Jan Kuparinen)
> > - Explicitly require setuptools, pagure/lib/git_auth.py imports pkg_res=
ources (Miro Hron=C4=8Dok)
> > - Fix getting the tests to run on CentOS
> > - Fix Pagure's overview page verbatim error (ankitapareek)
> >
> >
> > It includes, amongst other, patches for CVE-2021-42574 and CVE-2021-426=
94
> > More can be found about them at:
> > https://access.redhat.com/security/vulnerabilities/RHSB-2021-007
> >
> > I have already upgraded stg.pagure.io and src.stg.fp.o.
> > You can see the patch for the two CVE above working at:
> > https://stg.pagure.io/foo/pull-request/28
> >
> > The link to the account system has been updated as shown in:
> > https://src.stg.fedoraproject.org/user/pingou
> >
> >
> > I would like to upgrade pagure in production as well.
> >
> > Thoughts? +1/-1?
> >
> =

> Isn't freeze over now?

The day after the release, so I guess it'll warm up on Wednesday ;-)


Pierre
--===============7474067208209911131==--