From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=unavailable autolearn_force=no version=3.4.1 Date: Wed, 7 Oct 2026 14:04:39 +0000 From: "Girar pender (amakeenk)" To: Vitaly Lipatov Subject: [#435308] p10 DONE (try 4) npm.git=8.19.3-alt3 Message-ID: Mail-Followup-To: Girar pender robot References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-girar-task-id: 435308 X-girar-task-owner: lav X-girar-task-repo: p10 X-girar-task-try: 4 X-girar-task-iter: 1 X-girar-task-status: DONE X-girar-task-URL: https://git.altlinux.org/tasks/archive/done/_425/435308/ X-girar-task-log: logs/events.4.1.log X-girar-task-summary: [#435308] p10 DONE (try 4) npm.git=8.19.3-alt3 User-Agent: Mutt/1.10.1 (2018-07-13) Cc: girar-builder-p10@altlinux.org, sisyphus-incominger@lists.altlinux.org, girar-builder-p10@lists.altlinux.org X-BeenThere: sisyphus-incominger@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Devel discussion list List-Id: ALT Linux Girar Builder robot reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2026 14:04:43 -0000 Archived-At: List-Archive: https://git.altlinux.org/tasks/archive/done/_425/435308/logs/events.4.1.log https://packages.altlinux.org/tasks/435308 2026-Oct-07 13:58:58 :: task #435308 for p10 resumed by amakeenk: 2026-Oct-07 13:58:58 :: message: CVE fixes #40 build 8.19.3-alt3 from /people/lav/packages/npm.git fetched at 2026-Oct-03 09:49:11 #100 removed 2026-Oct-07 13:58:59 :: [i586] #40 npm.git 8.19.3-alt3: build start 2026-Oct-07 13:58:59 :: [x86_64] #40 npm.git 8.19.3-alt3: build start 2026-Oct-07 13:58:59 :: [aarch64] #40 npm.git 8.19.3-alt3: build start 2026-Oct-07 13:58:59 :: [armh] #40 npm.git 8.19.3-alt3: build start 2026-Oct-07 13:59:09 :: [i586] #40 npm.git 8.19.3-alt3: build OK (cached) 2026-Oct-07 13:59:09 :: [x86_64] #40 npm.git 8.19.3-alt3: build OK (cached) 2026-Oct-07 13:59:15 :: [aarch64] #40 npm.git 8.19.3-alt3: build OK (cached) 2026-Oct-07 13:59:22 :: [armh] #40 npm.git 8.19.3-alt3: build OK (cached) 2026-Oct-07 13:59:23 :: 40: build check OK (cached) 2026-Oct-07 13:59:24 :: build check OK 2026-Oct-07 13:59:29 :: #40: npm.git 8.19.3-alt3: version check OK 2026-Oct-07 13:59:30 :: build version check OK 2026-Oct-07 13:59:34 :: noarch check OK 2026-Oct-07 13:59:36 :: plan: src +1 -1 =19175, aarch64 +1 -1 =32045, armh +1 -1 =29771, i586 +1 -1 =32337, x86_64 +1 -1 =33386 #40 npm 8.19.3-alt1.p10 -> 8.19.3-alt3 Sat Oct 03 2026 Vitaly Lipatov 8.19.3-alt3 - update semver to 7.5.4 (CVE-2022-25883) - update http-cache-semantics to 4.1.1 (CVE-2022-25881) - update brace-expansion in rimraf to 1.1.12 (CVE-2025-5889) - merge p10 changes (alternatives for npm/npx), build the same for p10 and c10f2 Tue Sep 30 2025 Vitaly Lipatov 8.19.3-alt2 - update node-ip to 2.0.1 (CVE-2023-42282) - update node-ip to 2.0.2 from fork https://github.com/eggjs/node-ip (CVE-2024-29415) - update brace-expansion to 1.1.12 and 2.0.2 (CVE-2025-5889) - update tar to 6.2.1 (CVE-2024-28863) 2026-Oct-07 13:59:36 :: npm: mentions vulnerabilities: CVE-2022-25883 CVE-2022-25881 CVE-2025-5889 CVE-2023-42282 CVE-2024-29415 CVE-2025-5889 CVE-2024-28863 2026-Oct-07 14:00:48 :: patched apt indices 2026-Oct-07 14:01:02 :: created next repo 2026-Oct-07 14:01:10 :: duplicate provides check OK 2026-Oct-07 14:02:23 :: dependencies check OK 2026-Oct-07 14:02:25 :: [x86_64 i586 aarch64 armh] ELF symbols check OK warning [i586]: npm=8.19.3-alt3: circular dependencies on node=16.20.3-alt1.p10 i586: npm=8.19.3-alt3 post-install unowned files: /usr/lib/node /usr/lib/node/bin /usr/lib/node/etc 2026-Oct-07 14:02:37 :: [i586] #40 npm: install check OK (cached) warning [x86_64]: npm=8.19.3-alt3: circular dependencies on node=16.20.3-alt1.p10 x86_64: npm=8.19.3-alt3 post-install unowned files: /usr/lib64/node /usr/lib64/node/bin /usr/lib64/node/etc 2026-Oct-07 14:02:37 :: [x86_64] #40 npm: install check OK (cached) warning [aarch64]: npm=8.19.3-alt3: circular dependencies on node=16.20.3-alt1.p10 aarch64: npm=8.19.3-alt3 post-install unowned files: /usr/lib64/node /usr/lib64/node/bin /usr/lib64/node/etc 2026-Oct-07 14:02:43 :: [aarch64] #40 npm: install check OK (cached) warning [armh]: npm=8.19.3-alt3: circular dependencies on node=16.20.3-alt1.p10 armh: npm=8.19.3-alt3 post-install unowned files: /usr/lib/node /usr/lib/node/bin /usr/lib/node/etc 2026-Oct-07 14:02:49 :: [armh] #40 npm: install check OK (cached) 2026-Oct-07 14:03:19 :: [x86_64-i586] generated apt indices 2026-Oct-07 14:03:19 :: [x86_64-i586] created next repo 2026-Oct-07 14:03:33 :: [x86_64-i586] dependencies check OK 2026-Oct-07 14:03:34 :: gears inheritance check OK 2026-Oct-07 14:03:34 :: srpm inheritance check OK girar-check-perms: access to @maint ALLOWED for cas: member of approved group girar-check-perms: access to @tester ALLOWED for amakeenk: member of approved group check-subtask-perms: #40: npm: approved by cas, approved by amakeenk 2026-Oct-07 14:03:36 :: acl check OK 2026-Oct-07 14:03:48 :: created contents_index files 2026-Oct-07 14:04:00 :: created hash files: aarch64 armh i586 src x86_64 2026-Oct-07 14:04:02 :: task #435308 for p10 TESTED 2026-Oct-07 14:04:03 :: task is ready for commit 2026-Oct-07 14:04:11 :: repo clone OK 2026-Oct-07 14:04:11 :: packages update OK 2026-Oct-07 14:04:18 :: [x86_64 i586 aarch64 armh] update OK 2026-Oct-07 14:04:18 :: repo update OK 2026-Oct-07 14:04:33 :: repo save OK 2026-Oct-07 14:04:33 :: src index update OK 2026-Oct-07 14:04:33 :: updated /gears/n/npm.git branch `p10' 2026-Oct-07 14:04:39 :: gears update OK 2026-Oct-07 14:04:39 :: task #435308 for p10 DONE