CVS commit: pkgsrc/devel/appstream

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Sep 23 08:51:11 UTC 2026

Modified Files:
        pkgsrc/devel/appstream: Makefile distinfo

Log Message:
appstream: updated to 1.2.0

1.2.0

Notes:
 * This release marks the libappstream-compose API as stable.

 * This release introduces a new, lightly sandboxed (on Linux) media worker for appstream-compose
   and switches to VIPS for image processing. Please report any issues you may find! The sandbox
   can be disabled by setting `ASC_NO_SANDBOX=1` in the environment.
   The image formats XPM, TIFF and BMP will no longer be read by Compose, and will be rejected
   unconditionally.

 * This release introduces <heading>My headline!</heading> markup for AppStream descriptions.
   Older versions will remove this markup, so only use it if your target clients have a recent
   version of AppStream.

Features:
 * compose: Create AscMedia for isolated out-of-process media handling using asc-mediaworker
 * compose: Process images, fonts & videos via the media worker
 * Generalize path segment validation, use it in the compose media worker
 * compose: Switch from using GdkPixbuf to VIPS for image processing
 * compose: Harmonize supported formats, don't read XPM/TIFF/BMP
 * compose: Make JPEG-XL the default image output format
 * compose: Implement basic support for FreeBSD
 * compose: Rely on VIPS for SVG support, drop our dedicated librsvg path
 * compose: Make image-targets and image batch-processing public API
 * compose: Expose the source-icon convention and a hint-tag lookup as public API
 * compose: Drop unstable-API marker
 * compose: Don't create image thumbnails that aren't a substantially smaller
 * compose: Only transfer pre-opened fds and no more directory fd to the worker
 * compose: Implement a basic sandbox for the mediaworker using Landlock
 * compose: Use RESTRICT_SELF_TSYNC and block UDP access on newer Landlock
 * compose: Mix the output image format type into the GCID
 * compose: Make AscUnit a proper abstract class
 * compose: Improve API documentation
 * Always sanitize whitespaces in keywords and drop empty ones
 * Assume a language element without percentage means full translation
 * news-to-metainfo: Support a details URL in the YAML variant
 * news-convert: Support inline Markdown in news text
 * news-convert: Support headers in XML<->YAML/NEWS/Markdown conversions
 * ascli: news-convert: Support standalone release XML as source/target
 * Whitespace-sanitize all description markup we read
 * Output descriptions as literals in YAML and wrap markup ourselves

Specification:
 * docs: Document the appstreamcli news file conversion helper
 * Implement support for headings in description markup

Bugfixes:
 * meson: Set _POSIX_C_SOURCE on Linux only
 * compose: Fix a race where units were deleting each other's icon directories
 * compose: Fix documentation and introspection annotation issues
 * compose: Drop dead public API, make some API private
 * compose: Sharpen with libvips instead of a hand-rolled unsharp mask
 * compose: Only read AVIF from HEIF containers, never HEIC
 * compose: Fix double-free crash when processing fonts
 * compose: Guard against bad locale in path names
 * compose: Ensure component-IDs are safe to use in filesystem paths
 * compose: Escape values for HTML reports, and create proper plain-text if needed
 * compose: Make missing-launchable-desktop-file an error
 * Fix a few translator hints that weren't picked up properly
 * Don't accept empty strings as URLs
 * its: Fix description inline markup translation for release data
 * validator: Fix improper use of variadic arguments
 * validator: Properly validate component-IDs with random UTF-8 characters
 * validator: Abort ID validation after the first invalid character
 * pool: Resolve crash if data locations are changed on a loaded pool
 * Fix wrong string comparison when detecting arm64 machines
 * ascli: Resolve crash when selection is cancelled in install/remove
 * Fix another crash when converting invalid description markup to Markdown
 * apt: Treat icon tarballs as hostile, instead of trusted
 * apt: Fix empty-directory check nuking the icon cache on every refresh
 * utils: Ensure we never ever follow symlinks when recursively deleting caches
 * xml: Only emit description enumerations for locales that are in them
 * cache: Never infinite-recurse when resolving addons for a component
 * yaml: Don't leave old header data around when parsing multiple YAML catalogs

Miscellaneous:
 * ci: fedora: Disable cisco-openh264 repo, it's currently broken on rawhide
 * compose: Stop leaking private symbols out of the shared library
 * compose: Make hint tag/severity/explanation setters private API
 * compose: Seal the global settings explicitly on start
 * news-convert: Refactor conversion code for better readability
 * ascli: Refactor subcommand dispatch
 * meson: Disable analyzer-infinite-loop more broadly for static analysis


To generate a diff of this commit:
cvs rdiff -u -r1.35 -r1.36 pkgsrc/devel/appstream/Makefile
cvs rdiff -u -r1.15 -r1.16 pkgsrc/devel/appstream/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/appstream/Makefile
diff -u pkgsrc/devel/appstream/Makefile:1.35 pkgsrc/devel/appstream/Makefile:1.36
--- pkgsrc/devel/appstream/Makefile:1.35        Wed Sep  2 19:01:21 2026
+++ pkgsrc/devel/appstream/Makefile     Wed Sep 23 08:51:11 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.35 2026/09/02 19:01:21 wiz Exp $
+# $NetBSD: Makefile,v 1.36 2026/09/23 08:51:11 adam Exp $
 
-DISTNAME=      appstream-1.1.6
-PKGREVISION=   1
+DISTNAME=      appstream-1.2.0
 CATEGORIES=    devel
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=ximion/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}
@@ -11,10 +10,10 @@ HOMEPAGE=   https://github.com/ximion/apps
 COMMENT=       Tools and libraries to work with AppStream metadata
 LICENSE=       gnu-lgpl-v2.1
 
-TOOL_DEPENDS+= docbook-xsl-[0-9]*:../../textproc/docbook-xsl
-TOOL_DEPENDS+= glib2-introspection-[0-9]*:../../devel/glib2-introspection
-TOOL_DEPENDS+= gperf-[0-9]*:../../devel/gperf
-TOOL_DEPENDS+= libxslt-[0-9]*:../../textproc/libxslt
+TOOL_DEPENDS+= docbook-xsl>=0:../../textproc/docbook-xsl
+TOOL_DEPENDS+= glib2-introspection>=0:../../devel/glib2-introspection
+TOOL_DEPENDS+= gperf>=0:../../devel/gperf
+TOOL_DEPENDS+= libxslt>=0:../../textproc/libxslt
 
 USE_CC_FEATURES=       c17
 USE_LANGUAGES=         c c++

Index: pkgsrc/devel/appstream/distinfo
diff -u pkgsrc/devel/appstream/distinfo:1.15 pkgsrc/devel/appstream/distinfo:1.16
--- pkgsrc/devel/appstream/distinfo:1.15        Wed Aug 12 18:10:18 2026
+++ pkgsrc/devel/appstream/distinfo     Wed Sep 23 08:51:11 2026
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.15 2026/08/12 18:10:18 adam Exp $
+$NetBSD: distinfo,v 1.16 2026/09/23 08:51:11 adam Exp $
 
-BLAKE2s (appstream-1.1.6.tar.gz) = a7602998e7011557f87d85688bc388e5c843dfac9c2d59873f1089d12cb5744f
-SHA512 (appstream-1.1.6.tar.gz) = aecb6c4a1ecf414213f65565b366782696b6e5161b29ab130a5a7130833b26bc4316f399a3e8d1ada18dbb1a8bb922aef125719c279548e8156763e1e3e9a91a
-Size (appstream-1.1.6.tar.gz) = 4372775 bytes
+BLAKE2s (appstream-1.2.0.tar.gz) = a101bbfec58388b4a87db4a72fea8eef7ff8aba8fb0ea9f13655dcac6b6949cc
+SHA512 (appstream-1.2.0.tar.gz) = a9e017fd7fc7021fce9050c1918cc172febd836aa5ae34ef30dde08035cb1ce14dfc775409d31f01c0f63521f360a20c8827a94770218ca8420fd84e2c497bff
+Size (appstream-1.2.0.tar.gz) = 4519677 bytes
 SHA1 (patch-docs_meson.build) = a40e94677655387ca1c94c46b044aebafb617686
 SHA1 (patch-src_as-system-info.c) = 7d96a06658739979901e526126755b374fcf4aad