Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ccache/4.10.1 package update #22906

Merged
merged 1 commit into from
Jul 2, 2024

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented Jun 30, 2024

Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels Jun 30, 2024
Copy link
Contributor

Package ccache: Click to expand/collapse

Package ccache:

.PKGINFO metadata:

  (
  	"""
- 	# Generated by melange v0.16.14-8-g56ce700
+ 	# Generated by melange
  	pkgname = ccache
- 	pkgver = 4.10-r0
+ 	pkgver = 4.10.1-r0
  	arch = x86_64
- 	size = 2490806
+ 	size = 1612699
  	origin = ccache
  	pkgdesc = Fast C/C++ compiler cache
  	url = 
- 	commit = 784e7b082488a11e93dbd62e2a59430fc742b934
- 	builddate = 1717028239
+ 	commit = 441a30f7d04ee123e2a39b80c253a7a881ace2d6
  	license = GPL-3.0-or-later
  	depend = so:ld-linux-x86-64.so.2
  	... // 4 identical lines
  	depend = so:libstdc++.so.6
  	depend = so:libzstd.so.1
- 	provides = cmd:ccache=4.10-r0
- 	provides = pc:fmt=10.2.1
- 	datahash = a4274bae3c30e2c1ec6e29f82237a77f4282a40760ef984b7012ec21c9c6a070
+ 	provides = cmd:ccache=4.10.1-r0
+ 	datahash = 2f5f0ef88c8a0a73a30775cefc8fe8f6788c0e4517dc7fccaac5080c7ae64fcc
  	"""
  )

Modified: /usr/bin/ccache
Modified: /usr/share/man/man1/ccache.1
Deleted: /usr/include/fmt/args.h
Deleted: /usr/include/fmt/chrono.h
Deleted: /usr/include/fmt/color.h
Deleted: /usr/include/fmt/compile.h
Deleted: /usr/include/fmt/core.h
Deleted: /usr/include/fmt/format-inl.h
Deleted: /usr/include/fmt/format.h
Deleted: /usr/include/fmt/os.h
Deleted: /usr/include/fmt/ostream.h
Deleted: /usr/include/fmt/printf.h
Deleted: /usr/include/fmt/ranges.h
Deleted: /usr/include/fmt/std.h
Deleted: /usr/include/fmt/xchar.h
Deleted: /usr/lib64/cmake/fmt/fmt-config-version.cmake
Deleted: /usr/lib64/cmake/fmt/fmt-config.cmake
Deleted: /usr/lib64/cmake/fmt/fmt-targets-minsizerel.cmake
Deleted: /usr/lib64/cmake/fmt/fmt-targets.cmake
Deleted: /usr/lib64/libfmt.a
Deleted: /usr/lib64/pkgconfig/fmt.pc

bincapz found differences: Click to expand/collapse

Deleted: ccache/usr/include/fmt/format.h [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM exec/shell_command execute a shell command system
-LOW ref/site/url contains embedded HTTPS URLs https://bit.ly/3uOIQrB.
https://fmt.dev/papers/Dragonbox.pdf
https://fmt.dev/papers/p372-steele.pdf.
fmtlib/fmt#2510
fmtlib/fmt#519
https://github.com/fmtlib/format-benchmark/blob/master/digits10
https://github.com/skeeto/branchless-utf8
https://jk-jeon.github.io/posts/2022/12/fixed-precision-formatting/
https://reviews.llvm.org/D110485

Deleted: ccache/usr/include/fmt/os.h [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM exec/shell_command execute a shell command system
-LOW ref/site/url contains embedded HTTPS URLs https://pubs.opengroup.org/onlinepubs/007904875/functions/open.html

Deleted: ccache/usr/include/fmt/format-inl.h [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM exec/shell_command execute a shell command system
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/jk-jeon/dragonbox.

Deleted: ccache/usr/include/fmt/core.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://fmt.dev/latest/api.html
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59884.
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61414
fmtlib/fmt#3247
https://godbolt.org/z/GvWzcTjh1.
https://godbolt.org/z/sWw4vP.
https://herbsutter.com/2009/10/18/mailbag-shutting-up-compiler-warnings/.

Deleted: ccache/usr/include/fmt/color.h [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM evasion/bitwise_math uses bitwise math in both directions 1 << 1
1 << 2
1 << 3
1 << 4
1 << 5
1 << 6
1 << 7
hex >> 16
hex >> 8

Deleted: ccache/usr/include/fmt/chrono.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://en.wikipedia.org/wiki/ISO_week_date.
https://github.com/pauldreik/safe_duration_cast
https://johnnylee-sde.github.io/Fast-unsigned-integer-to-time-string/.

@ajayk ajayk merged commit bda858f into main Jul 2, 2024
8 checks passed
@ajayk ajayk deleted the wolfictl-77a52e7a-6350-4094-a13f-2347ee73501b branch July 2, 2024 19:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants