[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1107931: unblock: golang-github-evanw-esbuild/0.25.5-1





Le sam. 5 juil. 2025 à 15:57, Paul Gevers <elbrus@debian.org> a écrit :
Control: tags -1 moreinfo

Hi,

On 26-06-2025 18:16, Paul Gevers wrote:
> Hi,
>
> On 26-06-2025 17:50, Jérémy Lal wrote:
>> This is caused by the automated variables filled by dh-golang, not by
>> golang-github-evanw-esbuild source package, of course.
>> Static-Built-Using: ${misc:Static-Built-Using}
>> Built-Using: ${misc:Built-Using}
>
>
> I know, it still prevents migration and needs to be resolved. See also
> my reply to bug #1108331.


With golang out of the way, let's check again here. Can you go over the
questions in our FAQ [1] in the "new upstream" section under "Moreinfo"
and answer them?

- Upstream has a long history of high-quality, targeted releases, with a thorough test suite
- There has been only one upstream commit (adding a new feature) since that release (may 27).
Knowing upstream, if release 0.25.5 had introduced a regression, it would have been already fixed.

I classify the changelog.md entries like this:
* BUGFIX: Fix a regression with `browser` in `package.json`
* BUGFIX: Add support for certain keywords as TypeScript tuple labels
* Feature, zero side effects, small change: Add CSS prefixes for the `stretch` sizing value
* Feature, zero side effects, small change: Add simple support for CORS to esbuild's development server
* BUGFIX: Pass through invalid URLs in source maps unmodified
* Low security fix: Handle exports named `__proto__` in ES modules 

Some changes are not documented in the changelog:
- Low security fix: Add additional guards for #4114 when using :is() (Fix for CSS: out-of-memory/hang target:safari11)
- js api: simplify comma-separated array validation
- js api: validate some options as arrays of strings
(those last two are somewhat less pertinent, but they make sense).

I hope that helps.


Reply to: