Main aports tree https://git-old.alpinelinux.org/aports/atom?h=master 2020-05-05T18:07:51Z 2020-05-05T18:07:51Z Kevin Daudt kdaudt@alpinelinux.org 2020-05-05T10:50:19Z urn:sha1:ea04c3a72c5eb3a6fcacdfde5c14c29c3db670a2 Issue: #11416 2019-08-18T15:51:43Z Sören Tempel soeren+git@soeren-tempel.net 2019-08-18T15:51:01Z urn:sha1:bd80f73f14a31e1ba0331f35b79b1540475f7c43 go recently received a security upgrade to 1.12.8 (f4894bf9) this upgrade fixes various CVEs in go standard libraries, for instance in HTTP/2 functionality. Since go is statically linked packages using this functionality need to be rebuild. 2019-06-27T21:03:26Z Andy Postnikov apostnikov@gmail.com 2019-06-27T17:51:03Z urn:sha1:32bf32fd3f27ee03152f80ff029d3602b39c1620 2018-10-05T10:13:41Z J0WI J0WI@users.noreply.github.com 2018-10-04T14:39:28Z urn:sha1:30b63f075a55223655f7fdd10be1a829d47c6a2d 2018-06-05T20:08:04Z Roberto Oliveira robertoguimaraes8@gmail.com 2018-06-05T20:07:27Z urn:sha1:188aea2484b300a6133d5fa1e245c2a4e08995bc 2017-12-30T20:05:50Z Jakub Jirutka jakub@jirutka.cz 2017-12-30T18:04:30Z urn:sha1:63f5e7d295659a855709901ce22a3e5f40fce455 This commit updates $license variable in all APKBUILDs to comply with short names specified by SPDX version 3.0 [1] where possible. It was done using find-and-replace method on substrings inside $license variables. Only license names were updated, not "expressions" specifying relation between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or exceptions (e.g. "X with exceptions"). Many licenses have a version or multiple variants, e.g. MPL-2.0, BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not contain license version or variant. Since there's no way how to infer this information just from abuild, it were left without the variant suffix or version, i.e. non SPDX compliant. GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later (formerly e.g. GPL-2.0+). We did not systematically noted distinguish between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g. GPL2+) were left without the variant suffix, i.e. non SPDX compliant. Note: This commit just fixes format of the license names, no verification has been done if the specified license information is actually correct! [1]: https://spdx.org/licenses/ 2016-07-09T08:13:51Z Bartłomiej Piotrowski b@bpiotrowski.pl 2016-07-09T08:11:01Z urn:sha1:4e12f8931a71fd90d31449c744d1955b0da9e6ae 2016-07-09T08:13:51Z David Huffman storedbox@outlook.com 2016-05-19T05:39:20Z urn:sha1:260f2467c12c88b0afcd55afe8f79b685bde8beb 2016-01-21T15:14:36Z David Huffman storedbox@outlook.com 2016-01-16T14:10:40Z urn:sha1:949c1ec300111c97f70152fcc268c1d60924fbc8 https://github.com/tianon/gosu Simple Go-based setuid+setgid+setgroups+exec