nodejs (10.24.0~dfsg-1~deb10u4) buster-security; urgency=high * Non-maintainer upload by the LTS Security Team. * d/p/CVE-2022-32212.patch: Also backport upstream commit a1121b456c (unit tests). * Fix DNS unit tests which caused FTFBS in some build environments. * CVE-2023-30590: Documentation change for generateKeys() API function to align on the actual behavior, that is, only generate a private key if none has been set yet. (Closes: #1039990) * CVE-2023-46809: Marvin Attack vulnerability in the privateDecrypt() API of the crypto library. This is a timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding. The fix disables RSA_PKCS1_PADDING and includes a security revert flag that can be used to restore support (and the vulnerability). (Closes: #1064055) * CVE-2024-22025: Denial of Service by resource exhaustion in fetch() brotli decoding. -- Guilhem Moulin Tue, 26 Mar 2024 00:54:55 +0100 nodejs (10.24.0~dfsg-1~deb10u3) buster-security; urgency=high * Non-maintainer upload by the LTS Security Team. * CVE-2022-43548: OS Command Injection vulnerability due to insufficient `IsAllowedHost` check. Closes: #1023518. * CVE-2023-23920: Insecure loading of ICU data through ICU_DATA environment variable. Node.js now builds with ICU_NO_USER_DATA_OVERRIDE to avoid this. Closes: #1031834. -- Guilhem Moulin Sat, 25 Feb 2023 01:29:22 +0100 nodejs (10.24.0~dfsg-1~deb10u2) buster-security; urgency=high * Non-maintainer upload by the LTS Security Team. * Fix test suite failures (expired certificate; testing as root) * CVE-2021-22930, CVE-2021-22940: use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. * CVE-2021-22939: if the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted. * CVE-2022-21824: due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "__proto__". * CVE-2022-32212: OS Command Injection vulnerability due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks. -- Sylvain Beucler Tue, 04 Oct 2022 19:34:15 +0200 nodejs (10.24.0~dfsg-1~deb10u1) buster-security; urgency=medium * New upstream version 10.24.0~dfsg Fixed vulnerabilities: + CVE-2021-22883: HTTP2 'unknownProtocol' cause DoS by resource exhaustion + CVE-2021-22884: localhost6 DNS rebinding in --inspect -- Jérémy Lal Tue, 23 Feb 2021 14:48:02 +0100 nodejs (10.23.1~dfsg-1~deb10u1) buster-security; urgency=medium * New upstream version 10.23.1~dfsg. Closes: #979364. Fixed vulnerabilities: + CVE-2020-8265: use-after-free in TLSWrap (High) + CVE-2020-8287: HTTP Request Smuggling (Low) -- Jérémy Lal Tue, 05 Jan 2021 21:29:29 +0100 nodejs (10.22.1~dfsg-1~deb10u1) buster-security; urgency=medium * New upstream version 10.22.1~dfsg Vulnerabilities fixed: + CVE-2020-8252 fs.realpath.native on may cause buffer overflow (Medium) -- Jérémy Lal Thu, 17 Sep 2020 18:05:41 +0200 nodejs (10.21.0~dfsg-1~deb10u1) buster-security; urgency=medium * New upstream version 10.21.0~dfsg. Closes: #962145. * Security fixes: + CVE-2020-11080 + CVE-2020-8172 + CVE-2020-8174 -- Jérémy Lal Thu, 04 Jun 2020 02:35:16 +0200 nodejs (10.19.0~dfsg1-1) buster-security; urgency=medium * New upstream version 10.19.0~dfsg1 * Delete applied ssl 1.1.1 compatibility patches * Revert upstream changes to stay compatible with stable libuv1: + uv_os_uname is not available + test-dgram-address uv returns EINVAL, not EBADF * Never run tests in parallel to avoid memory exhaustion * Use embedded nghttp2 as upstream rely that much on having an updated version of it. * Avoid two tests to cause a FTBFS (Closes #919588) * Patch for compatibility with libuv1 from stable * uv in stable expects EINVAL, not EBADF * Link to atomic using a patch, LDFLAGS is not enough * Exclude brotli from deps, use system-installed one + B-D brotli + use upstream patch -- Jérémy Lal Mon, 20 Apr 2020 09:44:09 +0200 nodejs (10.15.2~dfsg-2) unstable; urgency=medium * Avoid two tests to cause a FTBFS (Closes #919588) + test-fs-error-messages fails with eatmydata + test-net-listen-after-destroying-stdin is flaky * gbp for debian/buster branch -- Jérémy Lal Mon, 08 Apr 2019 15:06:40 +0200 nodejs (10.15.2~dfsg-1) unstable; urgency=high * New upstream version 10.15.2~dfsg Slowloris HTTP Denial of Service with keep-alive (CVE-2019-5737) -- Jérémy Lal Thu, 28 Feb 2019 15:52:30 +0100 nodejs (10.15.1~dfsg-5) unstable; urgency=medium * Install only headers * /usr/include/v8 should contain the headers directly -- Jérémy Lal Sat, 09 Feb 2019 11:55:56 +0100 nodejs (10.15.1~dfsg-4) experimental; urgency=medium * Add libv8-dev symlinks: + libv8_libbase.so + libv8_libplatform.so + libv8_libsampler.so -- Jérémy Lal Fri, 08 Feb 2019 16:13:57 +0100 nodejs (10.15.1~dfsg-3) experimental; urgency=medium * Provides libv8-dev (Closes: #920329) -- Jérémy Lal Fri, 08 Feb 2019 14:25:03 +0100 nodejs (10.15.1~dfsg-2) unstable; urgency=medium * Fix Build-Deps and add libssl-dev to libnode-dev. Closes: #921074. * Refactor deps in debian/rules * Declare Breaks properly in rules/control.in.in -- Jérémy Lal Fri, 01 Feb 2019 22:18:18 +0100 nodejs (10.15.1~dfsg-1) experimental; urgency=medium * New upstream version 10.15.1~dfsg * Backport upstream-approved Node 11 openssl 1.1.1a support (except a test that was weird to backport). [ Mattia Rizzolo ] * Add Breaks:node-modern-syslog (<< 1.1.4-2) to libnode64. node-modern-syslog before 1.1.4-2 depended on the nodejs ABI, but didn't have an appropriate dependency. -- Jérémy Lal Thu, 31 Jan 2019 09:54:11 +0100 nodejs (10.15.0~dfsg-10) unstable; urgency=medium * M-A: same on libnode-dev, nodejs-dev * Drop nodejs-dev package. Addons should instead: + Build-Depends libnode-dev, node-gyp + remove dh --with nodejs argument in debian/rules + use debhelper >= 10 because it strips and shlibs *.node files -- Jérémy Lal Fri, 25 Jan 2019 13:51:37 +0100 nodejs (10.15.0~dfsg-9) unstable; urgency=medium * M-A: foreign on nodejs-doc * libnode-dev depends libuv1-dev (Closes: #905415) -- Jérémy Lal Mon, 21 Jan 2019 08:33:36 +0100 nodejs (10.15.0~dfsg-8) unstable; urgency=medium * Suggests npm - because nodejs must not be blocked by it. Closes: #918388. * Patch to silence buffer deprecations. Closes: #918456. This patch is meant to ease migration to testing, and to be removed as soon as possible. It avoids printing to stderr deprecation warning about calling Buffer as a constructor without the new operator. -- Jérémy Lal Sun, 06 Jan 2019 11:18:34 +0100 nodejs (10.15.0~dfsg-7) unstable; urgency=medium * Add missing shlibs, Closes: #917961. * Nodejs 10 is here, Close #914965. * libnode-dev: install openssl.cnf in /usr/include/nodejs * Recommends npm, Closes: #918388. -- Jérémy Lal Sat, 05 Jan 2019 19:48:20 +0100 nodejs (10.15.0~dfsg-6) unstable; urgency=medium * nodejs: strict dependency on libnode64 -- Jérémy Lal Tue, 01 Jan 2019 19:03:27 +0100 nodejs (10.15.0~dfsg-5) experimental; urgency=medium * mips(el): -latomic * Remove split-dwarf for any arch, only for mips * Forgot to export LDFLAGS -- Jérémy Lal Sat, 29 Dec 2018 17:16:30 +0100 nodejs (10.15.0~dfsg-4) experimental; urgency=medium * CPPFLAGS, CFLAGS -gsplit-dwarf for any arch Why would this be reserved to mips anyway. * Standards-Version 4.3.0 -- Jérémy Lal Fri, 28 Dec 2018 11:19:02 +0100 nodejs (10.15.0~dfsg-3) experimental; urgency=medium * Add CPPFLAGS += -gsplit-dwarf as well -- Jérémy Lal Fri, 28 Dec 2018 10:04:23 +0100 nodejs (10.15.0~dfsg-2) experimental; urgency=medium * Add -gsplit-dwarf on mips to work around #829139 -- Jérémy Lal Fri, 28 Dec 2018 02:38:02 +0100 nodejs (10.15.0~dfsg-1) experimental; urgency=medium * New upstream version 10.15.0~dfsg * copyright: + add license for src/large_pages/* + remove unused paragraph * Build using bundled http-parser (unreleased changes) -- Jérémy Lal Thu, 27 Dec 2018 13:30:26 +0100 nodejs (10.14.0~dfsg-1) experimental; urgency=medium * New upstream version 10.14.0~dfsg -- Jérémy Lal Wed, 28 Nov 2018 18:59:19 +0100 nodejs (10.13.0~dfsg-3) experimental; urgency=medium * Update uv headers path -- Jérémy Lal Thu, 15 Nov 2018 10:50:30 +0100 nodejs (10.13.0~dfsg-2) experimental; urgency=medium * Upstream patches for openssl 1.1.1 support * Build using shared openssl and depend on it again * Test suite assumes embedded openssl.cnf -- Jérémy Lal Thu, 01 Nov 2018 21:48:45 +0100 nodejs (10.13.0~dfsg-1) experimental; urgency=medium * New upstream version 10.13.0~dfsg -- Jérémy Lal Tue, 30 Oct 2018 10:26:02 +0100 nodejs (10.12.0~dfsg-1) experimental; urgency=medium * New upstream version 10.12.0~dfsg * openssl: use bundled copy because node is not compatible with openssl 1.1.1 right now (and there is no upstream fix). On the plus side: + this avoids ABI breakage for C++ addons (Closes: #904274) + upstream have security support for openssl vulns On the down side, it's a policy 4.13 violation. * copyright: + no longer exclude marked since it is removed + drop paragraph for pthread-barrier.h * Multiarch and DFHS: + patch adding --node-relative-path configuration variable + "/usr/lib/<$DEB_HOST_MULTIARCH>/nodejs" for c++ addons + "/usr/share/nodejs" for pure javascript modules + "/usr/lib/nodejs" for smooth migration of current modules + Expose those configuration variables in process.config.variables.node_relative_path process.config.variables.arch_triplet + In particular, if prefix is /usr/local all paths move there. + Fix test expecting lib/node, should be lib/nodejs. (Closes: #901474) * Build using shared libuv1 again (Closes: #905415) * Standards-Version 4.2.1 * Add support for mips64r6el arch (Closes: #905886) * Drop libnodeXX-dev in favor of libnode-dev (Closes: #901297) * Patch tools/doc to restore old dependencies on marked, while waiting for remarked/rehyped modules to be available. * sequential/test-http2-session-timeout is a flaky test * Add lintian override for test/fixtures/assert-long-line.js, false source-is-missing positive. * Build using LANG=C * Stop excluding tools/gyp because upstream patches it * Tighten dependency on nghttp2 >= 1.34.0 -- Jérémy Lal Wed, 17 Oct 2018 11:24:28 +0200 nodejs (10.4.0~dfsg-1) experimental; urgency=medium * New upstream version 10.4.0~dfsg * libnodeXX-dev Breaks+Replaces nodejs-dev << 10 (Closes: #898024) * Standards-Version 4.1.4 * Copyright: + comment the unexpected change in this BSD-3-clause + remove duplicate paragraph + remove files + add antlr4 with a BSD-3-clause license -- Jérémy Lal Mon, 11 Jun 2018 00:12:34 +0200 nodejs (10.3.0~dfsg-1) experimental; urgency=medium * New upstream version 10.3.0~dfsg * Skip performance test * Symlink js-yaml to the expected dir for doc build -- Jérémy Lal Thu, 31 May 2018 00:38:30 +0200 nodejs (10.1.0~dfsg-1) experimental; urgency=medium * New upstream version 10.1.0~dfsg * watch file: back to dfsg * Drop patches applied upstream * Depends libc-ares >= 1.14~ to match upstream requirement -- Jérémy Lal Thu, 10 May 2018 22:56:08 +0200 nodejs (10.0.0~dfsg1-4) experimental; urgency=medium * Multi-Arch: foreign on nodejs binary (Closes: #826890) * gbp: 10.x branches * copyright: drop eu-strip from excluded files, applied upstream -- Jérémy Lal Thu, 10 May 2018 20:49:20 +0200 nodejs (10.0.0~dfsg1-3) experimental; urgency=medium * Build and distribute libnode: + package libnode-dev, libnodeXX-dev + keep nodejs-dev for dh-nodejs and deprecate it + update packages descriptions + Multi-Arch: same on lib/dev packages (Closes: #826890) * Upstream patches fixing some tests * copyright: + dfsg-exclude non-free zlib rfc195*.txt files + minor paths updates/removals * lintian override: remove unused source-is-missing deps/v8/src/js/max-min* * Fix again installation of acorn files -- Jérémy Lal Sat, 28 Apr 2018 15:17:02 +0200 nodejs (10.0.0~dfsg-2) experimental; urgency=medium * Fix acorn files installation -- Jérémy Lal Thu, 26 Apr 2018 08:30:13 +0200 nodejs (10.0.0~dfsg-1) experimental; urgency=medium * New upstream version 10.0.0~dfsg * copyright: + reformat to use Comment field + CNNICHashWhitelist is no longer in tarball + dfsg-exclude acorn, eu-strip + add several new sections * Build-Depends node-acorn * Bump dependency on libuv >= 1.20 * Use temporarily embedded copy of libuv * Depends openssl >= 1.1.0 -- Jérémy Lal Thu, 26 Apr 2018 02:18:51 +0200 nodejs (8.11.1~dfsg-2) unstable; urgency=medium * Upload to unstable -- Jérémy Lal Fri, 13 Apr 2018 09:25:37 +0200 nodejs (8.11.1~dfsg-1) experimental; urgency=medium * New upstream version 8.11.1~dfsg * Revert 7e875d40, dependency on icu 60 is an upstream v8 bug * Upstream patch to avoid mandatory dependency on icu 60 * Remove node-js-yaml from Build-Depends, already in Indep * Depends libhttp-parser >= 2.8 -- Jérémy Lal Tue, 10 Apr 2018 21:43:32 +0200 nodejs (8.10.0~dfsg-2) experimental; urgency=medium * Drop binutils dependency (Closes: #893841) * Move repository to https://salsa.debian.org/js-team/nodejs.git -- Jérémy Lal Fri, 23 Mar 2018 09:30:55 +0100 nodejs (8.10.0~dfsg-1) experimental; urgency=medium * New upstream version 8.10.0~dfsg * Vcs-Git for that branch * Remove openssl patches and others, applied upstream * Depends icu 60.2 * Patch: build doc using node-js-yaml * Build-Depends node-js-yaml -- Jérémy Lal Fri, 16 Mar 2018 10:25:24 +0100 nodejs (8.9.3~dfsg-12) unstable; urgency=medium * Do not Build-Depend on licensecheck, ever. It's not right to hog build servers. * Drop my backport of openssl 1.1.0 compatibility, in favor of upstream backport. * Remove patch that dropped -march=z196 for it is now the minimum requirement for s390x. See also #888876. -- Jérémy Lal Sun, 18 Feb 2018 21:51:10 +0100 nodejs (8.9.3~dfsg-11) unstable; urgency=medium * Patch build files to remove -march=z196 out of s390x builds -- Jérémy Lal Tue, 23 Jan 2018 18:33:36 +0100 nodejs (8.9.3~dfsg-10) unstable; urgency=medium * should be compiled with FPXX ABI on 32-bit mips (Closes: #888021). -- Jérémy Lal Mon, 22 Jan 2018 19:26:19 +0100 nodejs (8.9.3~dfsg-9) unstable; urgency=medium * On buildd always set JOBS to one during tests -- Jérémy Lal Fri, 19 Jan 2018 08:58:43 +0100 nodejs (8.9.3~dfsg-8) unstable; urgency=medium * Upstream patch: allow running test.py without configuring -- Jérémy Lal Thu, 18 Jan 2018 15:39:52 +0100 nodejs (8.9.3~dfsg-7) unstable; urgency=medium * Ensure passing JOBS with a default value of 1. Test suite inherits that value and can crash with memory errors. This attempts to fix mipsel build on mipsel-aql-02. -- Jérémy Lal Mon, 08 Jan 2018 16:12:18 +0100 nodejs (8.9.3~dfsg-6) unstable; urgency=medium * test-fs-utimes might fail on some platforms * Patch to use less memory in test-zlib -- Jérémy Lal Fri, 05 Jan 2018 00:57:13 +0100 nodejs (8.9.3~dfsg-5) unstable; urgency=medium * Upload to unstable -- Jérémy Lal Thu, 04 Jan 2018 19:09:59 +0100 nodejs (8.9.3~dfsg-4) experimental; urgency=medium * Build using shared uv -- Jérémy Lal Wed, 27 Dec 2017 10:30:59 +0100 nodejs (8.9.3~dfsg-3) experimental; urgency=medium * Disable snapshot: runtime arch might be different than build * nodejs-dev is optional like source package * Fix a test result for openssl * Fix test that need alice.html * Skip test-dns-cancel-reverse-lookup, using network * Some copyright file paths updates * Standards-Version 4.1.2 * Short license for zlib * Update overrides and comment * Patch test-http2-connect to not fail in some cases -- Jérémy Lal Mon, 25 Dec 2017 17:53:03 +0100 nodejs (8.9.3~dfsg-2) experimental; urgency=medium * Build with -fPIC * Build using bundled uv -- Jérémy Lal Sun, 24 Dec 2017 23:29:13 +0100 nodejs (8.9.3~dfsg-1) experimental; urgency=medium * New upstream version 8.9.3~dfsg * Stop removing zlib, uv deps * Update debian/copyright for deps/uv, deps/zlib * Copyright for embedded nghttp2 * test/gc/node_modules no longer in upstream tarball * Backport #16130: support both openssl 1.0.1 and 1.1.0 Add openssl/fixups.patch to take care of additional fixes. * Build against latest ssl-dev version * Use node-js-yaml instead of yamlish * Drop cctest as it does not compile on debian. Help is welcome to fix this in a smarter way. Meanwhile fix_disable_cctest.patch gets rid of it. * Pass parallel option to JOBS * Update watch to use https * Add override for false positive source-is-missing * (Re?)enable -g flags -- Jérémy Lal Mon, 18 Dec 2017 17:29:20 +0100 nodejs (6.12.0~dfsg-2) unstable; urgency=medium * Whitelist allowed architectures. Closes: #881735. -- Jérémy Lal Tue, 14 Nov 2017 18:25:41 +0100 nodejs (6.12.0~dfsg-1) unstable; urgency=medium * New upstream version 6.12.0~dfsg -- Jérémy Lal Tue, 14 Nov 2017 00:42:34 +0100 nodejs (6.11.4~dfsg-1) unstable; urgency=medium * New upstream version 6.11.4~dfsg * Testsuite field is no longer needed * Standards-Version 4.1.1 -- Jérémy Lal Wed, 04 Oct 2017 13:33:00 +0200 nodejs (6.11.3~dfsg-1) unstable; urgency=medium * New upstream version 6.11.3~dfsg -- Jérémy Lal Wed, 06 Sep 2017 02:21:08 +0200 nodejs (6.11.2~dfsg-5) unstable; urgency=medium * Section javascript instead of web * Mark parallel/test-debug-args as flaky on mips64el -- Jérémy Lal Mon, 04 Sep 2017 17:26:56 +0200 nodejs (6.11.2~dfsg-4) unstable; urgency=medium * Revert "Switch to g++-6, work around FTBFS on mips64el", it got an Extra-Depends on a fixed gcc version. * Explain what about node / nodejs in README.Debian -- Jérémy Lal Sat, 02 Sep 2017 10:10:58 +0200 nodejs (6.11.2~dfsg-3) unstable; urgency=medium * README.Debian explains armel/powerpc are not supported. Closes: #872585. * Build nodejs-doc, Closes: #872488. Thanks to Felipe Sateler. * Build using g++-6 to work around FTBFS on mips64el. See: #871514. -- Jérémy Lal Mon, 28 Aug 2017 17:16:03 +0200 nodejs (6.11.2~dfsg-2) unstable; urgency=medium * Upload to unstable * s_client_tls12.patch skips test relying on -tls1_1 openssl client option, and patch another test to remove -tls1 option. -- Jérémy Lal Tue, 15 Aug 2017 22:37:50 +0200 nodejs (6.11.2~dfsg-1) experimental; urgency=medium * New upstream version 6.11.2~dfsg * Standards-Version 4.0.0 * Inherit Priority from source * Drop nodejs-dbg, b-d debhelper 9.20160114 to get dbgsym * Drop kfreebsd patch, it did not build anyway * Restore /usr/bin/node following CTTE #862051. Keep /usr/bin/nodejs symlink indefinitely. Replaces and Conflicts nodejs-legacy. Closes: #754462. * Skip test-zlib-failed-init.js for it relies on zlib 1.2.11 -- Jérémy Lal Tue, 01 Aug 2017 18:40:46 +0200 nodejs (6.11.1~dfsg-1) experimental; urgency=medium * New upstream version 6.11.1~dfsg * Priority: optional on source package (Closes: #864735) [ Upstream ] * Security fix: Constant Hashtable Seeds (CVE pending) Closes: #868162. -- Jérémy Lal Tue, 18 Jul 2017 00:40:24 +0200 nodejs (6.11.0~dfsg-1) experimental; urgency=medium * New upstream version 6.11.0~dfsg (Closes: #864605) * Restore upstream code that finds /usr prefix * Unapply ssl root certs patch implemented upstream, now configured by --openssl-use-def-ca-store * Build-Depend libssl1.0-dev * Keep ca-certificates in build-dependencies for running tests * Add ca-certificates to autopkgtest depends. (Closes: #855018) * Recommends ca-certificates for nodejs package * Patch to pass test with openssl 1.1.0 cli * Patch test-module-loading-globalpaths as part of nodejs rename * Workaround lintian override not matching source-is-missing path -- Jérémy Lal Mon, 12 Jun 2017 10:07:10 +0200 nodejs (6.10.2~dfsg-1) experimental; urgency=medium * New upstream version 6.10.2~dfsg * Fix memory leak if certificate is revoked (introduced in 6.10.1) -- Jérémy Lal Tue, 04 Apr 2017 16:43:22 +0200 nodejs (6.10.1~dfsg-1) experimental; urgency=medium * New upstream version 6.10.1~dfsg * Fix how control file is generated for build profile * Update 2014_donotinclude_root_certs.patch to hard-code NODE_EXTRA_CA_CERTS to /etc/ssl/certs/ca-certificates.crt This is safer to maintain and safer to use since it disables that undocumented env var setting. Also expect extra ca tests to fail. * Add dnt_helper.js Expat license * Recommends, Build-Depends ca-certificates * Use test-ci-js target now * autopkgtest suite depends on ca-certificates -- Jérémy Lal Mon, 03 Apr 2017 08:45:04 +0200 nodejs (6.9.3~dfsg-1) experimental; urgency=medium * New upstream version 6.9.3~dfsg -- Jérémy Lal Wed, 04 Jan 2017 10:14:15 +0100 nodejs (6.9.2~dfsg-2) experimental; urgency=medium * Fix recursive dependency on node-yamlish/marked (Closes: #850082) Thanks to Tom Parker . -- Jérémy Lal Tue, 03 Jan 2017 23:53:50 +0100 nodejs (6.9.2~dfsg-1) experimental; urgency=medium * New upstream version 6.9.2~dfsg * Build-Depend libssl1.0-dev (Closes: #828457) * nodejs Recommends ca-certificates (Closes: #841981) * Skip two tests failing only in autopkgtest * Override workaround for source-is-missing (See: #848825) * Drop package-needs-versioned-debhelper-build-depends override. -- Jérémy Lal Tue, 20 Dec 2016 00:42:16 +0100 nodejs (6.9.1~dfsg-1) experimental; urgency=medium * New upstream version 6.9.1~dfsg -- Jérémy Lal Thu, 20 Oct 2016 01:57:17 +0200 nodejs (6.9.0~dfsg-1) experimental; urgency=medium * Update patch to skip test-regress-GH-746a, moved from sequential to parallel test suites. * New upstream version 6.9.0~dfsg -- Jérémy Lal Tue, 18 Oct 2016 22:00:20 +0200 nodejs (6.8.1~dfsg-2) experimental; urgency=medium * Use mips r2 variant (mips32r2) This was already fixed in nodejs 4.x packages. -- Jérémy Lal Mon, 17 Oct 2016 00:26:19 +0200 nodejs (6.8.1~dfsg-1) experimental; urgency=medium * New upstream version 6.8.1~dfsg * Unapply build with shared zlib patch -- Jérémy Lal Sat, 15 Oct 2016 16:09:10 +0200 nodejs (6.8.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 6.8.0~dfsg * Switch back to ia32 arch instead of x87, see https://lists.debian.org/debian-devel-announce/2016/05/msg00001.html * Standards-Version 3.9.8 * Ensure build fails on armel (Closes: #818552) * Ensure build fails on powerpc. * Build-Depends openssl 1.0.2 (Closes: #821403) * Exclude useless deps/icu-small * s390x patch no longer needed :) * Use test-ci-js instead of test-ci * Disable dns during tests * Do not fail when node symlink exists in check target * Disable pseudo-tty and doctool suites * Update test_ci_buildd patch so CI_*_SUITES can be overridden * Disable tests failing since DNS has been disabled * Add patch to use node-yamlish * Build-Depends marked instead of bundling it * Enable hardening flags: +all,-pie * powerpc architecture is no longer supported * fix build when using shared zlib (upstream patch) * Move lintian source overrides into one file -- Jérémy Lal Fri, 14 Oct 2016 01:47:42 +0200 nodejs (6.0.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 6.0.0~dfsg * Files-Exclude: eslint* no longer needed * Remove shared-cares patch, released upstream * Import Upstream v8z s390-5.0 branch * Override source-is-missing for benchmark of sampled regexps -- Jérémy Lal Wed, 27 Apr 2016 01:28:21 +0200 nodejs (5.11.0~dfsg-1) experimental; urgency=medium * tools/msvs directory no longer in upstream tarball * Imported Upstream version 5.11.0~dfsg -- Jérémy Lal Thu, 21 Apr 2016 23:41:12 +0200 nodejs (5.10.1~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.10.1~dfsg * Re-enable shared c-ares >= 1.11.0, with patch from upstream -- Jérémy Lal Fri, 08 Apr 2016 10:12:36 +0200 nodejs (5.9.1~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.9.1~dfsg -- Jérémy Lal Wed, 23 Mar 2016 20:17:39 +0100 nodejs (5.8.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.8.0~dfsg * Expect test-npm-install to fail -- Jérémy Lal Wed, 09 Mar 2016 22:24:03 +0100 nodejs (5.7.1~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.7.1~dfsg -- Jérémy Lal Thu, 03 Mar 2016 01:06:29 +0100 nodejs (5.7.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.7.0~dfsg * Use secure uri in Vcs-* fields * Standards-Version 3.9.7 * Patch configure script to allow and default to x87 on i386 -- Jérémy Lal Wed, 02 Mar 2016 02:27:02 +0100 nodejs (5.6.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.6.0~dfsg * Override lintian error for two binary (but trivial) fixtures. -- Jérémy Lal Wed, 10 Feb 2016 01:31:29 +0100 nodejs (5.5.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.5.0~dfsg * Fix install path of non-minified sh_javascript * Override lintian missing source sh_javascript.min.js, because it is already fixed by removal and patch. -- Jérémy Lal Thu, 21 Jan 2016 10:23:05 +0100 nodejs (5.4.1~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.4.1~dfsg -- Jérémy Lal Wed, 13 Jan 2016 22:54:32 +0100 nodejs (5.4.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.4.0~dfsg * tests need gcc to get DEB_HOST_ARCH, add build-essential as dependency. * Consolidate tmp dir using NODE_TEST_DIR -- Jérémy Lal Thu, 07 Jan 2016 09:42:42 +0100 nodejs (5.3.0~dfsg-2) experimental; urgency=medium * Merge fixes from 4.2.3~dfsg-2: + create/remove a HOME for test + test-force-repl hangs in test bed + fix debian/watch -- Jérémy Lal Sun, 20 Dec 2015 13:45:35 +0100 nodejs (5.3.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.3.0~dfsg * There is no gcc -mfpu vfpv2 flag - the right flag is vfp * Use repacksuffix in debian/watch * Run tests as autopkgtests as well: + add debian/rules check target to run tests using binary package + disable test-process-config because it needs configured tree + mark test-fs-watch as flaky * Set test timeout to 3 seconds * Flaky test-regress-GH-746 because it requires stdin * Unapply no_sslv3.patch, applied upstream * Refresh patches * Re-enable test-tick-processor, fixed upstream -- Jérémy Lal Fri, 18 Dec 2015 00:46:12 +0100 nodejs (5.1.1~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.1.1~dfsg * CVE-2015-6764 V8 Out-of-bounds Access Vulnerability (Closes: #806385) * CVE-2015-8027 Denial of Service Vulnerability (Closes: #806385) * Patch: openssl -ssl3 fails immediately causing test-tls-no-sslv3 failure. -- Jérémy Lal Fri, 04 Dec 2015 09:59:15 +0100 nodejs (5.1.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.1.0~dfsg * Refresh patches -- Jérémy Lal Wed, 18 Nov 2015 14:12:08 +0100 nodejs (5.0.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 5.0.0~dfsg * Refresh patches * Disable s390 patch for now -- Jérémy Lal Fri, 30 Oct 2015 00:23:57 +0100 nodejs (4.2.5~dfsg-1) unstable; urgency=medium * Imported Upstream version 4.2.5~dfsg * Remove no_sslv3 patch, fixed upstream * Override lintian missing source sh_javascript.min.js, because it is already fixed by removal and patch. -- Jérémy Lal Thu, 21 Jan 2016 09:38:25 +0100 nodejs (4.2.4~dfsg-2) unstable; urgency=medium * tests need gcc to get DEB_HOST_ARCH, add build-essential as dependency. (Closes: #809845) * Fix install path of non-minified sh_javascript -- Jérémy Lal Thu, 14 Jan 2016 09:39:14 +0100 nodejs (4.2.4~dfsg-1) unstable; urgency=medium * Imported Upstream version 4.2.4~dfsg * Adapt v8 backport to s390 patch * Refresh patches -- Jérémy Lal Thu, 24 Dec 2015 00:59:49 +0100 nodejs (4.2.3~dfsg-2) unstable; urgency=medium * There is no gcc -mfpu vfpv2 flag - the right flag is vfp * Use repacksuffix in debian/watch * Run tests as autopkgtests as well: + add debian/rules check target to run tests using binary package + create/remove a HOME for test + disable test-process-config because it needs configured tree + test-fs-watch does not work in test bed + test-force-repl hangs in test bed * Set test timeout to 3 seconds * Flaky test-regress-GH-746 because it requires stdin -- Jérémy Lal Sun, 20 Dec 2015 03:03:50 +0100 nodejs (4.2.3~dfsg-1) unstable; urgency=high * Imported Upstream version 4.2.3~dfsg * CVE-2015-6764 V8 Out-of-bounds Access Vulnerability (Closes: #806385) * CVE-2015-8027 Denial of Service Vulnerability (Closes: #806385) * Patch: openssl -ssl3 fails immediately causing test-tls-no-sslv3 failure. -- Jérémy Lal Fri, 04 Dec 2015 09:02:50 +0100 nodejs (4.2.2~dfsg-1) unstable; urgency=medium * Imported Upstream version 4.2.2~dfsg * Huge test timeout for all platforms * Update from v8z 4.5 branch * Node.js 4.2 is LTS, maintain it in master-4.2, upstream-4.2 + update gbp.conf + lock watch file to 4.2.x + update Vcs-Git in debian/control * Remove test-domain-with-abort-on-uncaught-exception.diff, applied upstream * Add trivial autopkgtest (Closes: #802735) -- Jérémy Lal Wed, 04 Nov 2015 09:37:24 +0100 nodejs (4.2.1~dfsg-2) unstable; urgency=medium * Test ci patch: mark test-cluster-disconnect as flaky on arm -- Jérémy Lal Fri, 16 Oct 2015 20:56:02 +0200 nodejs (4.2.1~dfsg-1) unstable; urgency=medium * Imported Upstream version 4.2.1~dfsg * kfreebsd patch: detect freebsd in tools/utils.py, so that tests have correct $system set. * test_ci_buildd patch: allow longer timeouts for mips64el -- Jérémy Lal Tue, 13 Oct 2015 20:54:13 +0200 nodejs (4.2.0~dfsg-2) unstable; urgency=medium * Add arch detection for ppc64 in debian/rules, useful for tests configuration. * Fix failing test-domain-with-abort-on-uncaught-exception * Run flaky tests but don't care * Run tests with huge timeout -- Jérémy Lal Tue, 13 Oct 2015 12:00:18 +0200 nodejs (4.2.0~dfsg-1) unstable; urgency=medium * Imported Upstream Long Term Support version 4.2.0~dfsg * Allow test-stdout-close-unref to fail on freebsd too * Unapply 1006_arm_fpu.patch, applied upstream * Remove gflags from copyright, removed upstream * Add copyright for s390 patch * Exclude non-dfsg "gutenberg small print" licensed file -- Jérémy Lal Tue, 13 Oct 2015 00:23:43 +0200 nodejs (4.1.2~dfsg-5) unstable; urgency=medium * test-tick-processor can fail on pp64 and s390x: + debian/rules: invoke test runner with --arch option + test_ci_buildd.patch: declare that test as flaky on those two arches, and fix test runner so $arch can be used. -- Jérémy Lal Mon, 12 Oct 2015 18:43:22 +0200 nodejs (4.1.2~dfsg-4) unstable; urgency=medium * Update patches to pass tests on respective arches * Enable tests -- Jérémy Lal Mon, 12 Oct 2015 01:26:08 +0200 nodejs (4.1.2~dfsg-3) experimental; urgency=medium * Update test-ci patch to avoid testing addons * No longer Build-Dep node-gyp to avoid bootstrapping issue -- Jérémy Lal Thu, 08 Oct 2015 09:05:17 +0200 nodejs (4.1.2~dfsg-2) experimental; urgency=medium * Set HOME env var for tests * Patch: merge s390x branch from v8z 4.5 -- Jérémy Lal Thu, 08 Oct 2015 01:59:04 +0200 nodejs (4.1.2~dfsg-1) experimental; urgency=medium [ Jérémy Lal ] * Imported Upstream version 4.1.2~dfsg * Unapply patch for CVE-2015-7384, applied upstream * Run tests but ignore failures for now * gyp >= 0.1~svn1773 now support no-parallel, remove patches * enable continuous integration tests but ignore failures for now, also patch to test-ci target to avoid logging to file. * Add a dh --with nodejs plugin. [ Jonas Smedegaard ] * Offer binNMU'able linkage for arch-dependent plugins: + Have nodejs provide virtual abi package + Have nodejs-dev include helper tool dh_nodejs. Closes: Bug#785748. * Bump debhelper compatibility level to 9. * Add descriptive comments to lintian overrides. * Add lintian override regarding debhelper 9. -- Jérémy Lal Wed, 07 Oct 2015 11:16:09 +0200 nodejs (4.1.1~dfsg-3) unstable; urgency=high * Security fix for CVE-2015-7384 (Closes: #800580) * Forward 2014_donotinclude_root_certs.patch -- Jérémy Lal Mon, 05 Oct 2015 22:31:38 +0200 nodejs (4.1.1~dfsg-2) unstable; urgency=medium * mips fixes, thanks to YunQiang Su (Closes: #800410): + patch v8 to fix mips, mipsel fpu mode setting + patch nodejs to support mips64el target_host setting + update configuration in debian/rules -- Jérémy Lal Tue, 29 Sep 2015 02:32:16 +0200 nodejs (4.1.1~dfsg-1) unstable; urgency=medium * Imported Upstream version 4.1.1~dfsg * Force mips arches to fp32 fpu mode * Unapply mipsel detection patch, applied upstream -- Jérémy Lal Mon, 28 Sep 2015 23:53:22 +0200 nodejs (4.1.0~dfsg-3) unstable; urgency=medium * mips: let configure detect float abi -- Jérémy Lal Mon, 21 Sep 2015 12:26:05 +0200 nodejs (4.1.0~dfsg-2) unstable; urgency=medium * Fix armhf build: with-arm-float-abi expects 'hard', not 'hardfp' * Fix mipsel build: patch configure so that it detects mipsel * Configure mips, mipsel, mips64el ports -- Jérémy Lal Sun, 20 Sep 2015 23:46:39 +0200 nodejs (4.1.0~dfsg-1) unstable; urgency=medium * Imported Upstream version 4.1.0~dfsg * Import bits of armel configuration from libv8 * Patch to allow arm_fpu config * Update kfreebsd patch and flags -- Jérémy Lal Sun, 20 Sep 2015 11:17:02 +0200 nodejs (4.0.0~dfsg-2) experimental; urgency=medium * Configure dest-cpu and dest-os, hopefully fixing builds on several architectures. -- Jérémy Lal Fri, 11 Sep 2015 13:03:06 +0200 nodejs (4.0.0~dfsg-1) experimental; urgency=medium * Imported Upstream version 4.0.0~dfsg * Refresh and disable most old patches * Build using embedded cares, embedded v8, because Node.js is using patched versions of them and no longer allow building with shared system libraries of those. * Add cares copyright * Add patch to build without zlib and uv gyp files * nodejs-dev links to libuv1-dev headers * Build documentation and fix privacy breaches more properly * Numerous copyright-1.0 format fixes. -- Jérémy Lal Wed, 09 Sep 2015 00:43:21 +0200 nodejs (0.10.38~dfsg-1) unstable; urgency=medium * Upstream update. * Copyright: + add mk-ca-bundle curl license + fix some paths, add a new file, DFSG-exclude trademarked icons (node, joyent, npm). * Standards-Version 3.9.6 -- Jérémy Lal Mon, 04 May 2015 22:45:39 +0200 nodejs (0.10.29~dfsg-1) unstable; urgency=medium * Upstream update. * 1007 patch: revert upstream commit that relies on a patch to libv8-3.14 that breaks v8 API/ABI. This means nodejs is stuck in NODE_INVALID_UTF8 mode, see upstream ChangeLog to understand what this means. -- Jérémy Lal Fri, 13 Jun 2014 23:58:22 +0200 nodejs (0.10.28~dfsg-2) unstable; urgency=medium * Add 1006_relax_timeouts_in_tests.patch, fixing some tests to pass on slow architectures. -- Jérémy Lal Sun, 01 Jun 2014 23:09:24 +0200 nodejs (0.10.28~dfsg-1) unstable; urgency=medium * Upstream update. * Copyright: add wildcards to folders in Files-Excluded field. * Override source-is-missing doc/sh_javascript.min.js, was already fixed in nodejs-0.10.25~dfsg2-1. -- Jérémy Lal Fri, 23 May 2014 09:28:57 +0200 nodejs (0.10.26~dfsg1-2) unstable; urgency=medium * Update 2011 mipsel patch: add mips (big endian) support. -- Jérémy Lal Sat, 26 Apr 2014 01:39:34 +0200 nodejs (0.10.26~dfsg1-1) unstable; urgency=medium * Upstream update. * Add 2014 patch: load /etc/ssl/certs/ca-certificates.crt at runtime, if present, instead of bundling node_root_certs.h. * copyright: + use Files-Excluded section, update list of files. + add section for node_root_certs.h (MPL-2.0) * rules: drop upstream-tarball.mk in favor of uscan. * Standards-Version 3.9.5 -- Jérémy Lal Sun, 02 Mar 2014 01:57:14 +0100 nodejs (0.10.25~dfsg2-2) unstable; urgency=medium * Update 2005 patch, allow test-abort-fatal-error to time out. -- Jérémy Lal Mon, 27 Jan 2014 14:35:21 +0100 nodejs (0.10.25~dfsg2-1) unstable; urgency=medium * Exclude doc/sh_javascript.min.js, closes: #736779. * Add 1005 patch to include a non-minified version of doc/sh_javascript.min.js, and update path in debian/copyright. * Update 2005 patch, allow test-abort-fatal-error to fail, closes: #736576. -- Jérémy Lal Mon, 27 Jan 2014 09:58:56 +0100 nodejs (0.10.25~dfsg1-1) unstable; urgency=medium * Upstream update -- Jérémy Lal Fri, 24 Jan 2014 15:45:29 +0100 nodejs (0.10.24~dfsg1-1) unstable; urgency=medium * Upstream update -- Jérémy Lal Mon, 23 Dec 2013 00:45:40 +0100 nodejs (0.10.23~dfsg1-3) unstable; urgency=medium * Update 2005 patch, allow test-http-client-timeout-event to fail. -- Jérémy Lal Sat, 14 Dec 2013 10:00:16 +0100 nodejs (0.10.23~dfsg1-2) unstable; urgency=medium * Add 2013 patch, remove --no-parallel option incompatible with gyp < r1773. Was breaking kfreebsd builds as side-effect. * Empty DEB_CONFIGURE_NORMAL_ARGS without quotes because configure assumes it is a path argument. -- Jérémy Lal Sat, 14 Dec 2013 01:52:05 +0100 nodejs (0.10.23~dfsg1-1) unstable; urgency=medium * Upstream update. * Refresh patches, remove 1005 patch, applied upstream. -- Jérémy Lal Thu, 12 Dec 2013 23:04:07 +0100 nodejs (0.10.22~dfsg1-2) unstable; urgency=low * Update 2005 patch, allow test-cluster-dgram-2 to time out. * Apply 1005 patch, upstream fix for BSD builds. -- Jérémy Lal Sat, 30 Nov 2013 23:54:20 +0100 nodejs (0.10.22~dfsg1-1) unstable; urgency=low * Upstream update. * Refresh patches. -- Jérémy Lal Wed, 13 Nov 2013 23:17:51 +0100 nodejs (0.10.21~dfsg1-1) unstable; urgency=low * Upstream update. * Update 2005 patch, allow test-http-pipeline-flood to fail. -- Jérémy Lal Sat, 19 Oct 2013 01:26:18 +0200 nodejs (0.10.20~dfsg1-1) unstable; urgency=low * Upstream update. -- Jérémy Lal Tue, 01 Oct 2013 13:08:52 +0200 nodejs (0.10.19~dfsg1-1) unstable; urgency=low * Upstream update. -- Jérémy Lal Fri, 27 Sep 2013 11:21:18 +0200 nodejs (0.10.18~dfsg1-1) unstable; urgency=low * Upstream update. -- Jérémy Lal Wed, 04 Sep 2013 20:54:54 +0200 nodejs (0.10.17~dfsg1-2) unstable; urgency=low * Update 2005 patch with new failing-on-slow-platforms tests. -- Jérémy Lal Sat, 31 Aug 2013 09:45:06 +0200 nodejs (0.10.17~dfsg1-1) unstable; urgency=low * Upstream update. * Update 2005 patch with new failing-on-slow-platforms tests. -- Jérémy Lal Thu, 29 Aug 2013 17:18:29 +0200 nodejs (0.10.15~dfsg1-4) unstable; urgency=low * Update 2005 patch, adding a handful of tests that can fail on slow platforms. * Add 1004 patch to fix test failures when writing NaN to buffer on mipsel. -- Jérémy Lal Wed, 14 Aug 2013 00:16:46 +0200 nodejs (0.10.15~dfsg1-3) unstable; urgency=low * Update 2005 patch, test-stdout-close-unref and test-tls-zero-clear-in can fail on buildd. -- Jérémy Lal Sat, 10 Aug 2013 09:47:34 +0200 nodejs (0.10.15~dfsg1-2) unstable; urgency=low * Update 2005 patch, allow several tests to fail because of inner timeouts or race conditions on slow buildd servers. -- Jérémy Lal Sat, 10 Aug 2013 00:09:59 +0200 nodejs (0.10.15~dfsg1-1) unstable; urgency=low * Upstream update. * kfreebsd build: uv need -ldl. * Update 2005 patch, allow 12 udp4 tests to fail on buildd servers. * 2011 patch: test.py --arch=target_arch detected by ./configure. This fixes an error in mipsel build. -- Jérémy Lal Mon, 29 Jul 2013 21:14:09 +0200 nodejs (0.10.13~dfsg1-2) unstable; urgency=low [ Jérémy Lal ] * Fix kfreebsd build: + Depend on libkvm-dev on kfreebsd systems. + Tighten to build-depend on gyp versions that builds using flock. + Add patch 2012 to add __FreeBSD_kernel__ defines. + Add patch 1001 readFile not throwing EISDIR on some archs. + Add patches 1002, 1003 to fix bugs in unit tests. + Set gyp flavor in rules file using --dest-os switch. * Restrict make check target in rules to avoid the call to jslint. [ Jonas Smedegaard ] * Make ~dfsg version suffix only optionally numbered. * Stop breaking packages depending on old node binary: None of the affected packages exist in any Debian suite since about a year. * Declare all package relations except same-source ones in rules file. * Add notes in rules file about reasons for versioned dependencies. * Drop NEWS file: Contains only entries for versions older than existing in any Debian suite since about a year. * Rewrite short and long descriptions based on upstream texts. * Bump standards-version to 3.9.4. -- Jérémy Lal Sun, 28 Jul 2013 18:50:13 +0200 nodejs (0.10.13~dfsg1-1) experimental; urgency=low * New upstream release. -- Jérémy Lal Fri, 12 Jul 2013 12:23:38 +0200 nodejs (0.10.11~dfsg1-1) experimental; urgency=low * New upstream release. -- Jérémy Lal Fri, 14 Jun 2013 01:32:49 +0200 nodejs (0.10.10~dfsg1-1) experimental; urgency=low * New upstream release. -- Jérémy Lal Wed, 05 Jun 2013 00:21:10 +0200 nodejs (0.10.9~dfsg1-1) experimental; urgency=low * New upstream release. * Unapply 1001_revert_uv_osx_fix.patch, fixed upstream. -- Jérémy Lal Thu, 30 May 2013 23:08:55 +0200 nodejs (0.10.8~dfsg1-1) experimental; urgency=low * New upstream release. * Set process.config.default_configuration to Release by removing --debug flag. * 1001_revert_uv_osx_fix.patch: revert a libuv commit bringing a test/simple/test-stdout-close-catch.js regression. -- Jérémy Lal Wed, 29 May 2013 00:42:14 +0200 nodejs (0.10.7~dfsg1-1) experimental; urgency=low * New upstream release. -- Jérémy Lal Sat, 18 May 2013 00:40:02 +0200 nodejs (0.10.6~dfsg1-1) experimental; urgency=low * New upstream release. -- Jérémy Lal Wed, 15 May 2013 00:12:32 +0200 nodejs (0.10.5~dfsg1-2) experimental; urgency=low * nodejs-dev.links: fix symlinks to v8 headers. -- Jérémy Lal Sun, 28 Apr 2013 21:15:31 +0200 nodejs (0.10.5~dfsg1-1) experimental; urgency=low * New upstream release. * nodejs-dev.install: common.gypi is needed by node-gyp. -- Jérémy Lal Sun, 28 Apr 2013 20:47:03 +0200 nodejs (0.10.1~dfsg1-2) experimental; urgency=low * copyright: use Source field to document dfsg-repackaging. * nodejs-dev: install headers with the directory layout expected node-gyp. * 2005_expected_failing_tests.patch: some tests fail in chroot. -- Jérémy Lal Mon, 25 Mar 2013 16:21:25 +0100 nodejs (0.10.1~dfsg1-1) experimental; urgency=low * New upstream release. -- Jérémy Lal Fri, 22 Mar 2013 00:11:25 +0100 nodejs (0.10.0~dfsg1-2) experimental; urgency=low * Fix have nodejs-dev depend on libv8-3.14-dev (not bogus libv8-3--14dev). -- Jonas Smedegaard Tue, 19 Mar 2013 05:07:15 +0100 nodejs (0.10.0~dfsg1-1) experimental; urgency=low [ upstream ] * New release. + Node-waf dropped: Replaced by node-gyp (packaged independently). [ Jérémy Lal ] * Build-depend unversioned on cdbs: Needed version satisfied in stable and oldstable no longer supported. * Upstream tarball repackaging: + Exclude test/gc/node_modules. + Exclude tools/blog. + Exclude tools/wrk, a benchmark tool. + Exclude tools/msvs/genfiles, it should be generated instead. It also contains binaries and a meaningless copyright statement. + Exclude deps/cares. + Update exclusions to match already removed files. * Documentation building: + Remove workaround from 0.6.19~dfsg1-3. + Delete already unapplied 1002_upstream_forgot_to_build_doc.patch. + Remove script tags calling external assets from html files. * Patches: + Remove all patches regarding WAF. + Remove patches involving eio or ev since those libs have been rewritten inside uv. + Remove 2008_fix_use_shared_cares.patch, no longer needed. + Adjust 2005_expected_failing_tests.patch: re-enable some tests. + Merge path, binary renames into 2001_FHS_paths_for_nodejs.patch. + Remove unneeded 2002_build_without_libv8_debug.patch. + Remove 2007_fix_use_shared_zlib.patch, replaced by --shared-zlib, but 2010 patch is needed to shut up Makefile. + Remove 1001_align_fast_buffers_8byte_boundary.patch, applied. + Remove 2014_v8_38_compat.patch, unneeded. + Disable 2011_enable_mipsel_build: libv8 fails to build on mipsel. * Drop WAF quirks. * Remove --no-ssl2 flag, it builds fine without it now, and test-tls-server-verify fails in both cases. * Use --without-snapshot since nodejs is using system libv8. * Remove unneeded --shared-ev. * Harden gyp: append CPPFLAGS to CXXFLAGS, export CXXFLAGS and LDFLAGS. Works around bug#689754. * Update DEB_COPYRIGHT_CHECK_IGNORE_REGEX to match all binary files. * Remove trailing slash in DEB_UPSTREAM_URL. * Ship all headers from src and uv/include in nodejs-dev: node-gyp expects them. * Update copyright file: + Drop obsolete paragraphs: eio, waf, buffer_ieee754.js, src/platform_darwin_proctitle.cc. + Add 'Nginx Inc' copyright to ngx-queue.h, as given by upstream LICENSE file, and list the second copy of ngx-queue.h. + Add license for deps/uv/include/uv-private/tree.h and the copy in src/tree.h. + Add ISC licenses for deps/uv/checksparse.sh, deps/uv/src/inet.c. + Add deps/uv/include/uv-private/stdint-msvc2008.h BSD-3-clause. + Add src/v8_typed_array* Expat license. + Update licenses for bundled deps/v8 copy, taken from libv8 debian package. Note deps/v8/tools/testrunner/server/daemon.py is Public-Domain. + List all copies of sh.css. * Suppress lintian OpenSSL warning: false positive. [ Jonas Smedegaard ] * Update copyright file: + Fix GPL licensing to separate verbatim custom reference, verbatim generic boilerplate, and packaging comments. + Explicitly mention Public Domain file as such in Copyright field. * Update package relations: + Build-depend on, and have nodejs-dev depend on, libv8-3.14-dev (not versioned on libv8-dev). + Have nodejs-dbg recommend (not suggest) libv8-3.14-dbg (not libv8-dbg). * Bump dephelper compatibility level to 8. * Drop obsolete "DM-Upload-Allowed" field. * Rewrite README.source: + Refer to common CDBS+git-buildpackage praxis. + Emphasize explicitly that NMUs can totally ignore control.in file. -- Jonas Smedegaard Tue, 19 Mar 2013 04:38:57 +0100 nodejs (0.6.19~dfsg1-6) UNRELEASED; urgency=low * Update package relations: + Generally tighten breaks to relate to (backport of) first known working version (not last known broken version): node → nodejs transition now done for all dependent packages. + Relax needlesly tight breaks for node-bones. -- Jonas Smedegaard Sat, 22 Sep 2012 16:09:56 +0200 nodejs (0.6.19~dfsg1-5) unstable; urgency=low * Team upload. * Fix node-waf so that it correctly looks for "nodejs" instead of "node" (patched node_addon.py) -- David Paleino Fri, 21 Sep 2012 23:23:16 +0200 nodejs (0.6.19~dfsg1-4) unstable; urgency=medium * Update package relations: + Break only packages actually calling /usr/bin/node (directly or via env). + Tighten breaks for packages with fixed release. * Set urgency=medium as this change affects only packaging hints so should not need reset of aging timer in unstable. -- Jonas Smedegaard Mon, 06 Aug 2012 14:51:31 +0200 nodejs (0.6.19~dfsg1-3) unstable; urgency=low [ Jérémy Lal ] * debian/patches: + 2012_fix_v8_3_10.patch, fix crash on exit when building against libv8-3.10.8. + 2013_waf_linkflags.patch, waf must support LINKFLAGS, Closes: #678563. [ Jonas Smedegaard ] * Rename binary node → nodejs: + Adjust paths of binary and manpage. + Fix avoid bogus explicit installation of debug files. + Adjust install scripts and add cleanup for old alternative. + Patch manpage to adjust command name. + Have binary package nodejs break any packages in Debian that reference /usr/bin/node. + Add new binary package nodejs-legacy, and have that (not nodejs) conflict with node. + Add NEWS entry. Closes: bug#611698, #681360. See also bug#614907. Thanks to tech-ctte and everyone else helping to resolve this. * Work around upstream shipping docs in wrong subdir, and disable huge patch 1002 attempting same but causing FTBFS for me. Keep patch 1002 in source, to ease proof-reading by release team. * Add patch 2004 to fix FTBFS: Relax a test to work with slightly different output when linked against recent v8. -- Jonas Smedegaard Sat, 28 Jul 2012 11:19:38 +0200 nodejs (0.6.19~dfsg1-2) unstable; urgency=low * debian/patches: + 2005_expected_failing_tests.patch, more tests can timeout. + 1002_upstream_forgot_to_build_doc.patch, include docs from late release of version 0.6.19. * debian/nodejs.docs: + update path + include markdown files. -- Jérémy Lal Wed, 06 Jun 2012 23:35:37 +0200 nodejs (0.6.19~dfsg1-1) unstable; urgency=low * Upstream update. -- Jérémy Lal Wed, 06 Jun 2012 19:11:21 +0200 nodejs (0.6.18~dfsg1-1) unstable; urgency=low * Upstream update. * debian/patches: + 1002_make_test_not_weak.patch removed, applied upstream. + unfuzz patches. -- Jérémy Lal Wed, 16 May 2012 02:06:42 +0200 nodejs (0.6.17~dfsg1-1) unstable; urgency=low * Upstream update. * Update copyright file: add test/*/testcfg.py files. * debian/patches/1002_make_test_not_weak.patch fixes Makefile test target, otherwise it tries to install an unneeded npm module. -- Jérémy Lal Fri, 04 May 2012 22:38:30 +0200 nodejs (0.6.16~dfsg1-2) unstable; urgency=low * Allow test-dgram-pingpong failure on buildd servers. -- Jérémy Lal Mon, 30 Apr 2012 22:42:23 +0200 nodejs (0.6.16~dfsg1-1) unstable; urgency=low [ Jonas Smedegaard ] * Update copyright file: + Fix Files section for marked: Use asterisk for dir, and ignore symlink. + Tidy Files section for waf-light: Drop superfluous © mark and excess indentation, and sort by year and then name. [ Jonathan Nieder ] * Add /usr/bin/nodejs as a symlink to node and nodejs.1.gz as a symlink to the node(1) manpage. Explanation in README.Debian. Closes: #650343. * Include README.Debian in nodejs package instead of nodejs-dev. [ Jérémy Lal ] * Upstream update. * Fix dversionmangle in watch file. -- Jérémy Lal Mon, 30 Apr 2012 20:58:46 +0200 nodejs (0.6.14~dfsg1-1) unstable; urgency=low * debian/patches/2005_expected_failing_tests.patch: + test-cluster-kill-workers can fail on any arch, not only armel, because it is racey. + test-buffer is not failing. + test-tls-server-verify can fail with openssl 1.0.1 * debian/patches/1001_align_fast_buffers_8byte_boundary.patch fixes test-buffer.js failure on armel. Closes: bug#660800. * debian/patches/2011_enable_mipsel_build.patch: options.arch is useless and buggy. Closes: bug#664627. * Include tools/doc, now properly licensed. * Include tools/doc/node_modules/marked : there are several other markdown parsers in debian, but porting tools/doc/generate.js to one of them is not an easy task. * Update copyright file: + tools/doc is already covered by default + Add Files paragraph covering tools/doc/node_modules/marked. * Remove libv8-dev << 3.8. It is not necessary to conflict with next libv8 branch. * Remove source override: source-contains-waf-binary, fixed in lintian. -- Jérémy Lal Tue, 03 Apr 2012 08:41:15 +0200 nodejs (0.6.12~dfsg1-1) unstable; urgency=low * Update Standards-Version to 3.9.3. * Patch wscript to enable build on mipsel arch, libv8 being available. Upstream does not support that arch, failure expected. * test-cluster-kill-workers is expected to fail on armhf, Bug#660802 will be closed when test pass. * test-buffer is expected to fail on armel, Bug#660800 will be closed when test pass. * Add epoch to dependency on libev >= 1:4.11. Closes: bug#658441. * Remove tools/doc because node-doc-generator has no license for now. * Add copyright for doc/sh* files (shjs). * source.lintian-overrides : source-contains-waf-binary tools/node-waf it is simply not the case here. -- Jérémy Lal Tue, 13 Mar 2012 09:56:02 +0100 nodejs (0.6.11~dfsg1-2) unstable; urgency=low * test-stream-pipe-multi expected to timeout sometimes on busy builds. -- Jérémy Lal Mon, 20 Feb 2012 08:43:24 +0100 nodejs (0.6.11~dfsg1-1) unstable; urgency=low * New upstream release. * Remove upstream patches. * test-dgram-pingpong expected to timeout, the test itself is buggy. * test-buffer expected to fail on armel, allow building package to make it easier to find the cause of the failure. Closes: bug#639636. -- Jérémy Lal Sun, 19 Feb 2012 23:58:31 +0100 nodejs (0.6.10~dfsg2-2) unstable; urgency=low [ Jérémy Lal ] * Expect tests dgram-multicast and broadcast to fail. debian/patches/2005_expected_failing_tests.patch [ Jonas Smedegaard ] * Drop dpkg-source local-options: Defaults since dpkg-source 1.16.1. -- Jonas Smedegaard Fri, 17 Feb 2012 04:18:27 +0100 nodejs (0.6.10~dfsg2-1) unstable; urgency=low * New upstream release. * Depend on libev-dev 4.11, see bug#657080. * Bump dependency on openssl to 1.0.0g. * Remove useless uv_loop_refcount from libuv, refreshed 2009_fix_shared_ev.patch. * Apply to upstream patches landed after 0.6.10 release, to fix debugger repl and http client. -- Jérémy Lal Thu, 16 Feb 2012 23:52:16 +0100 nodejs (0.6.8~dfsg1-1) experimental; urgency=low * New upstream release. Closes:bug#650661 * Repackage to remove non-dfsg font files ./deps/npm/html/*/*.ttf * Remove unneeded bundled dependencies: lighter tarball, debian/copyright is easier to maintain. * Drop unneeded build-dependency on scons. * Depend on zlib1g, libc-ares, libev. Patches done to support building with those shared libs. * Fix DEB_UPSTREAM_URL in debian/rules, and debian/watch. * nodejs.pc file for pkgconfig is no more available. * Build-depend on procps package, a test is using /bin/ps. * Refreshed debian/patches/2005_expected_failing_tests.patch, only for tests that need networking. -- Jérémy Lal Tue, 24 Jan 2012 13:37:01 +0100 nodejs (0.4.12-3) unstable; urgency=low * Depend on libv8 3.6 (>= 3.6.6.14-2), because it fixes CVE-2011-5037. This breaks test/simple/test-sys.js, fixed by an upstream patch. -- Jérémy Lal Sun, 08 Jan 2012 12:00:02 +0100 nodejs (0.4.12-2) unstable; urgency=low * Port to libv8 3.5 branch and depend on it. * Force nodejs-dev to depend on libv8-dev << 3.6, to avoid API incompatibilities between nodejs-dev and libv8-dev. This will help fixing bug#650552, thanks to Jonas Smedegaard. * Do not search modules in /usr/local/lib/nodejs, see README.Debian. * Remove useless debian/patches/1006_version.patch * Drop unneeded dependency on Scons. * Build-Depends on openssl, some tests spawn /usr/bin/openssl. -- Jérémy Lal Mon, 05 Dec 2011 11:34:27 +0100 nodejs (0.4.12-1) unstable; urgency=low * New upstream release * Port to libv8 3.4 branch and depend on it. Closes:bug#642731. * debian/gbp.conf: fix syntax, filter 'doc/logos/*' or else pristine-tar will complain. -- Jérémy Lal Tue, 27 Sep 2011 16:10:10 +0200 nodejs (0.4.11-1) unstable; urgency=low * New upstream release * debian/gbp.conf: Filter out doc/logos, unused, too big, and upstream removed it from 0.5 tarballs. * debian/patches/1006_version.patch : upstream forgot to update VERSION flag in wscript. -- Jérémy Lal Thu, 18 Aug 2011 15:09:01 +0200 nodejs (0.4.10-1) unstable; urgency=low * New upstream release -- Jérémy Lal Wed, 20 Jul 2011 20:50:07 +0200 nodejs (0.4.9-1) unstable; urgency=low * New upstream release * Refresh debian/patches, remove 1001_no_ssl_v2.patch, applied upstream. * deps/http_parser.c based on expat-licensed work of Igor Sysoev. -- Jérémy Lal Wed, 29 Jun 2011 16:46:47 +0200 nodejs (0.4.8-1) unstable; urgency=low * New upstream release, Closes: bug#628148. * Depends on libv8 3.1.8.22 * Refresh debian/patches -- Jérémy Lal Sun, 26 Jun 2011 23:08:01 +0200 nodejs (0.4.7-1) unstable; urgency=low * New upstream release * Bump policy compliance to standards-version 3.9.2. * debian/watch : remove call to uupdate, it is annoying since updates are done with git-import-orig. -- Jérémy Lal Sat, 23 Apr 2011 18:42:42 +0200 nodejs (0.4.6-2) unstable; urgency=low * Expect some tests to fail when run without network. Closes: bug#623374. -- Jérémy Lal Tue, 19 Apr 2011 22:17:37 +0200 nodejs (0.4.6-1) unstable; urgency=low * New upstream release [ Jérémy Lal ] * Unfuzz patches. * Update debian/copyright, now copyright Joyent. * Drop SSL2 methods, see #589706. Closes: bug#622065. * Disable multicast test: Too dependent on network config. * Allow Debian-Maintainer uploads. [ Jonas Smedegaard ] * Update copyright file: + Fix relabel OpenBSD license as OpenBSD~Lucent: Disclaimer is derived. + Fix comma-delimit files, and (while at it) newline-delimit them for improved readability. + Compact and extend copyright years. * Enable copyright-check. Build-depend on devscripts. * Add copyright hints. -- Jonas Smedegaard Sun, 17 Apr 2011 05:05:30 +0200 nodejs (0.4.2-1) experimental; urgency=low * New upstream release [ Jérémy Lal ] * Enable regression tests, without failing when targeted experimental. * Unfuzz patches. * Tighten build-dependency on libev-dev, to match new upstream source. -- Jonas Smedegaard Sat, 12 Mar 2011 10:45:08 +0100 nodejs (0.2.6-5) unstable; urgency=low [ Jonas Smedegaard ] * Update team-maintainance: + Set Debian Javascript Maintainers as maintainer. + Set Jérémy Lal, Dave Beckett and myself as uploaders. * Bump policy compliance to standards-version 3.9.2. * Recompile against newer libv8. Closes: bug#622623. Thanks to Adrian Knoth. * Unfuzz patches. [ Jérémy Lal ] * Update git-buildpackage config : add commented lines explaining layout. * Allow Debian-Maintainer uploads. * Add patch 1001 to disable ssl2 methods. -- Jonas Smedegaard Fri, 15 Apr 2011 23:33:09 +0200 nodejs (0.2.6-4) unstable; urgency=low [ Jérémy Lal ] * Disable simple/test-buffer Buffer.unpack test that fails on ARM. The pack/unpack functions are deprecated, and not documented. [ Jonas Smedegaard ] * Drop done items from TODO. -- Jonas Smedegaard Mon, 07 Feb 2011 23:39:40 +0100 nodejs (0.2.6-3) experimental; urgency=low [ Jérémy Lal ] * Disable simple/test-dgram-multicast test that fails on sbuild. -- Jonas Smedegaard Tue, 25 Jan 2011 23:53:05 +0100 nodejs (0.2.6-2) experimental; urgency=low [ Jérémy Lal ] * Build-depends on libv8-2.5.9.9-2. (Closes: #610527, #607319, #605447, #597784) * Refactor patches, DEP-3 format. * Explain modules search paths in README.Debian. [ Jonas Smedegaard ] * Relax nodejs-dbg suggestion on libv8-dbg to be unversioned: already handled by library packages. -- Jonas Smedegaard Tue, 25 Jan 2011 22:11:05 +0100 nodejs (0.2.6-1) experimental; urgency=low [ Jérémy Lal ] * New upstream release. * nodejs is an alternative to js. (Closes: #597572) * Use upstream binary names for node and node-waf, conflicts with node package. (Closes: #597571) * Global modules search paths : /usr/local/lib/nodejs /usr/lib/nodejs Custom paths can be set through NODE_PATH. The reason is to support future npm package, giving higher priority to modules installed by npm as root. * Repackage using CDBS. Enable regression testing. * Add a note about importing upstream tarball in README.source. * Update TODO [ Jonas Smedegaard ] * Add myself as uploader. * Limit watch file to stable releases. * Enable CDBS build-dependency autoresolving. * Tighten build-dependency on cdbs to versions properly supporting debhelper compat level 7. * Tighten build-dependency on debhelper to versions fully supporting compat level 7. * Build-depend on dh-buildinfo to include buildinfo hints with binary packages for easier troubleshooting. * Build-depend on curl: Needed for regression tests (testing on loopback, so should be Policy compliant). * Newline-delimit package relations for improved readability. * Add patch 2001 to skip TTY-needing regression test. -- Jonas Smedegaard Fri, 21 Jan 2011 21:00:24 +0100 nodejs (0.2.2-1) experimental; urgency=low * New upstream release -- Jérémy Lal Fri, 17 Sep 2010 21:27:40 +0200 nodejs (0.2.0-1) unstable; urgency=low * New upstream release -- Jérémy Lal Fri, 20 Aug 2010 11:49:04 +0200 nodejs (0.1.104-1) unstable; urgency=low * New upstream release. (Closes: #593088) -- Jérémy Lal Mon, 16 Aug 2010 07:07:09 +0200 nodejs (0.1.102-1) unstable; urgency=low * New upstream release -- Jérémy Lal Tue, 27 Jul 2010 08:29:40 +0200 nodejs (0.1.101-2) unstable; urgency=low * Build-Depends on bash-completion for dh_bash-completion -- Jérémy Lal Wed, 21 Jul 2010 08:58:52 +0200 nodejs (0.1.101-1) unstable; urgency=low * New upstream release * Standards-Version 3.9.0 * Move BSD license in debian/copyright * nodejs-waf now accepts NODE_PATH environment variable, which defines where to install compiled modules. Defaults to ~/.node_libraries. * nodejs-waf bash-completion snippet * API Manual registered with doc-base. * Depends on libv8-2.2.24 -- Jérémy Lal Wed, 14 Jul 2010 13:52:07 +0200 nodejs (0.1.99-1) unstable; urgency=low * New upstream release * DNS module : MX support since c-ares 1.7.3 * nodejs-repl is replaced by invoking nodejs without file argument, rlwrap is no more needed. * Full upstream author name in debian/copyright. -- Jérémy Lal Tue, 29 Jun 2010 08:25:13 +0200 nodejs (0.1.97-1) unstable; urgency=low * New upstream release -- Jérémy Lal Sun, 30 May 2010 23:14:24 +0200 nodejs (0.1.95-1) unstable; urgency=low * New upstream release -- Jérémy Lal Fri, 14 May 2010 02:05:25 +0200 nodejs (0.1.94-2) unstable; urgency=low * Drop dependencies on libgnutls-dev, libgpg-error-dev. * Modules path moved to /usr/lib/nodejs (without /modules), to follow more closely upstream practice. * node-repl is now in /usr/share/nodejs because it is simply a js script file ; nodejs-repl still in /usr/bin -- Jérémy Lal Tue, 11 May 2010 19:52:12 +0200 nodejs (0.1.94-1) unstable; urgency=low * New upstream release * API has changed and will be more stable with 0.2 release * Fix dependency on libv8. (Closes: #579044) * Switched from gnutls to libssl. -- Jérémy Lal Thu, 06 May 2010 23:19:12 +0200 nodejs (0.1.92-1) unstable; urgency=low * New upstream release * Switch from udns to c-ares. -- Jérémy Lal Sat, 24 Apr 2010 09:12:06 +0200 nodejs (0.1.33-3) unstable; urgency=low * Fix wrong use of binary-indep target in debian/rules. (Closes: #575383) -- Jérémy Lal Mon, 05 Apr 2010 15:26:40 +0200 nodejs (0.1.33-2) unstable; urgency=low * Previous package was broken in some way. (Closes: #575383) -- Jérémy Lal Thu, 25 Mar 2010 12:24:06 +0100 nodejs (0.1.33-1) unstable; urgency=low * New upstream release. (Closes: #572023) * Debian package has the same license as upstream (MIT). * Include waf in source package and nodejs-dev package. (Closes: #571710) * Switch to dpkg-source 3.0 (quilt) format. * Place modules directory in usr/lib/nodejs/modules, and add it to nodejs module path. Documentation in README.Debian. * Architecture: any since the supported archs depends only on libv8. -- Jérémy Lal Mon, 22 Mar 2010 01:53:48 +0100 nodejs (0.1.27+dfsg-1) unstable; urgency=low * Initial release (Closes: #553514) -- Jérémy Lal Sun, 07 Feb 2010 01:16:07 +0100