[#429170] p11 EPERM srpm=yarn-1.22.22-alt2.src.rpm

[#429170] p11 EPERM srpm=yarn-1.22.22-alt2.src.rpm

[Girar awaiter (admsasha)]

https://git.altlinux.org/tasks/429170/logs/events.1.1.log
https://packages.altlinux.org/tasks/429170

subtask  name  aarch64  i586  x86_64
   #100  yarn     1:07    40      39

2026-Aug-11 10:44:00 :: task #429170 for p11 started by admsasha:
2026-Aug-11 10:44:00 :: message: fix_CVE-2023-26136,CVE-2025-8262,CVE-2025-8263,CVE-2025-9308
#100 build yarn-1.22.22-alt2.src.rpm from sisyphus
2026-Aug-11 10:44:01 :: [aarch64] #100 yarn-1.22.22-alt2.src.rpm: build start
2026-Aug-11 10:44:01 :: [i586] #100 yarn-1.22.22-alt2.src.rpm: build start
2026-Aug-11 10:44:01 :: [x86_64] #100 yarn-1.22.22-alt2.src.rpm: build start
2026-Aug-11 10:44:40 :: [x86_64] #100 yarn-1.22.22-alt2.src.rpm: build OK
2026-Aug-11 10:44:41 :: [i586] #100 yarn-1.22.22-alt2.src.rpm: build OK
2026-Aug-11 10:45:08 :: [aarch64] #100 yarn-1.22.22-alt2.src.rpm: build OK
2026-Aug-11 10:45:13 :: 100: build check OK
2026-Aug-11 10:45:14 :: build check OK
2026-Aug-11 10:45:19 :: #100: yarn-1.22.22-alt2.src.rpm: version check OK
2026-Aug-11 10:45:20 :: build version check OK
2026-Aug-11 10:45:21 :: noarch check OK
2026-Aug-11 10:45:23 :: plan: src +1 -1 =20597, noarch +1 -1 =21460
#100 yarn 1.22.22-alt1 -> 1.22.22-alt2
 Fri Jun 26 2026 Alexey Shabalin <shaba@altlinux> 1.22.22-alt2
 - Rebuild the self-contained lib/cli.js bundle from source against a refreshed,
   security-patched dependency tree instead of shipping the upstream prebuilt
   bundle (devDependencies reduced, js-yaml bumped to 4.x and mkdirp pinned via
   prebundle patches, dependencies refreshed via `yarn install`+`yarn audit fix`).
 - The refreshed dependency tree also pulls newer, fixed versions of other
   bundled runtime modules; build-only dependencies are no longer shipped.
 - Fixes:
   + CVE-2025-8262 ReDoS in explodeHostedGitFragment (yarn hosted-git-resolver)
   + CVE-2025-9308 ReDoS in RequestManager.setOptions cafile parsing (yarn)
 [...]
2026-Aug-11 10:45:23 :: yarn: fixes vulnerabilities: CVE-2025-8262 CVE-2025-9308 CVE-2025-8263 CVE-2023-26136
2026-Aug-11 10:45:57 :: patched apt indices
2026-Aug-11 10:46:07 :: created next repo
2026-Aug-11 10:46:19 :: duplicate provides check OK
2026-Aug-11 10:47:01 :: dependencies check OK
2026-Aug-11 10:47:17 :: [i586] #100 yarn: install check OK
2026-Aug-11 10:47:17 :: [x86_64] #100 yarn: install check OK
2026-Aug-11 10:47:26 :: [aarch64] #100 yarn: install check OK
2026-Aug-11 10:47:27 :: gears inheritance check OK
2026-Aug-11 10:47:27 :: srpm inheritance check OK
girar-check-perms: access to yarn DENIED for admsasha: project `yarn' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #100: yarn: needs approvals from members of @maint and @tester groups
2026-Aug-11 10:47:28 :: acl check FAILED
2026-Aug-11 10:47:51 :: created contents_index files
2026-Aug-11 10:47:58 :: created hash files: noarch src
2026-Aug-11 10:48:01 :: task #429170 for p11 EPERM