[pkgsrc/trunk]: pkgsrc/www/gitea gitea: updated to 1.13.4

[khorben <khorben%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/fb083080c841
branches:  trunk
changeset: 448689:fb083080c841
user:      khorben <khorben%pkgsrc.org@localhost>
date:      Fri Mar 12 11:54:25 2021 +0000

description:
gitea: updated to 1.13.4

This includes the following security fixes; in 1.13.0:
 * Add Allow-/Block-List for Migrate & Mirrors
 * Prevent git operations for inactive users
 * Disallow urlencoded new lines in git protocol paths if there is a port
 * Mitigate Security vulnerability in the git hook feature
 * Disable DSA ssh keys by default
 * Set TLS minimum version to 1.2
 * Use argon as default password hash algorithm

In 1.13.1:
 * Hide private participation in Orgs
 * Fix escaping issue in diff

In 1.13.2:
 * Prevent panic on fuzzer provided string
 * Add secure/httpOnly attributes to the lang cookie

In 1.13.3:
 * Turn default hash password algorithm back to pbkdf2 from argon2 until we find a better one

In 1.13.4:
 * Fix issue popups

diffstat:

 www/gitea/Makefile |    5 +-
 www/gitea/PLIST    |  287 ++++++++++++++++++++++++++++++++++++++++++++++++++++-
 www/gitea/distinfo |   10 +-
 3 files changed, 291 insertions(+), 11 deletions(-)

diffs (truncated from 571 to 300 lines):

diff -r 16f4dcf29627 -r fb083080c841 www/gitea/Makefile
--- a/www/gitea/Makefile        Fri Mar 12 11:37:41 2021 +0000
+++ b/www/gitea/Makefile        Fri Mar 12 11:54:25 2021 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.49 2021/03/01 23:47:09 khorben Exp $
+# $NetBSD: Makefile,v 1.50 2021/03/12 11:54:25 khorben Exp $
 
-DISTNAME=      gitea-1.12.6
+DISTNAME=      gitea-1.13.4
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=go-gitea/}
-PKGREVISION=   2
 CATEGORIES=    www
 GITHUB_TAG=    v${PKGVERSION_NOREV}
 
diff -r 16f4dcf29627 -r fb083080c841 www/gitea/PLIST
--- a/www/gitea/PLIST   Fri Mar 12 11:37:41 2021 +0000
+++ b/www/gitea/PLIST   Fri Mar 12 11:54:25 2021 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2020/11/18 11:29:27 jperkin Exp $
+@comment $NetBSD: PLIST,v 1.10 2021/03/12 11:54:25 khorben Exp $
 sbin/gitea
 share/examples/gitea/app.ini.sample
 share/gitea/options/gitignore/Actionscript
@@ -93,6 +93,7 @@
 share/gitea/options/gitignore/Java
 share/gitea/options/gitignore/Jekyll
 share/gitea/options/gitignore/JetBrains
+share/gitea/options/gitignore/Jigsaw
 share/gitea/options/gitignore/Joomla
 share/gitea/options/gitignore/Julia
 share/gitea/options/gitignore/JupyterNotebooks
@@ -122,6 +123,7 @@
 share/gitea/options/gitignore/Mercurial
 share/gitea/options/gitignore/Mercury
 share/gitea/options/gitignore/MetaProgrammingSystem
+share/gitea/options/gitignore/Metals
 share/gitea/options/gitignore/Meteor
 share/gitea/options/gitignore/MicrosoftOffice
 share/gitea/options/gitignore/ModelSim
@@ -165,12 +167,14 @@
 share/gitea/options/gitignore/ROS
 share/gitea/options/gitignore/Racket
 share/gitea/options/gitignore/Rails
+share/gitea/options/gitignore/Raku
 share/gitea/options/gitignore/Red
 share/gitea/options/gitignore/Redcar
 share/gitea/options/gitignore/Redis
 share/gitea/options/gitignore/RhodesRhomobile
 share/gitea/options/gitignore/Ruby
 share/gitea/options/gitignore/Rust
+share/gitea/options/gitignore/SAM
 share/gitea/options/gitignore/SBT
 share/gitea/options/gitignore/SCons
 share/gitea/options/gitignore/SVN
@@ -271,6 +275,7 @@
 share/gitea/options/license/BSD-2-Clause-FreeBSD
 share/gitea/options/license/BSD-2-Clause-NetBSD
 share/gitea/options/license/BSD-2-Clause-Patent
+share/gitea/options/license/BSD-2-Clause-Views
 share/gitea/options/license/BSD-3-Clause
 share/gitea/options/license/BSD-3-Clause-Attribution
 share/gitea/options/license/BSD-3-Clause-Clear
@@ -293,10 +298,13 @@
 share/gitea/options/license/BlueOak-1.0.0
 share/gitea/options/license/Bootloader-exception
 share/gitea/options/license/Borceux
+share/gitea/options/license/CAL-1.0
+share/gitea/options/license/CAL-1.0-Combined-Work-Exception
 share/gitea/options/license/CATOSL-1.1
 share/gitea/options/license/CC-BY-1.0
 share/gitea/options/license/CC-BY-2.0
 share/gitea/options/license/CC-BY-3.0
+share/gitea/options/license/CC-BY-3.0-AT
 share/gitea/options/license/CC-BY-4.0
 share/gitea/options/license/CC-BY-NC-1.0
 share/gitea/options/license/CC-BY-NC-2.0
@@ -305,6 +313,7 @@
 share/gitea/options/license/CC-BY-NC-ND-1.0
 share/gitea/options/license/CC-BY-NC-ND-2.0
 share/gitea/options/license/CC-BY-NC-ND-3.0
+share/gitea/options/license/CC-BY-NC-ND-3.0-IGO
 share/gitea/options/license/CC-BY-NC-ND-4.0
 share/gitea/options/license/CC-BY-NC-SA-1.0
 share/gitea/options/license/CC-BY-NC-SA-2.0
@@ -317,6 +326,7 @@
 share/gitea/options/license/CC-BY-SA-1.0
 share/gitea/options/license/CC-BY-SA-2.0
 share/gitea/options/license/CC-BY-SA-3.0
+share/gitea/options/license/CC-BY-SA-3.0-AT
 share/gitea/options/license/CC-BY-SA-4.0
 share/gitea/options/license/CC-PDDC
 share/gitea/options/license/CC0-1.0
@@ -332,6 +342,9 @@
 share/gitea/options/license/CECILL-C
 share/gitea/options/license/CERN-OHL-1.1
 share/gitea/options/license/CERN-OHL-1.2
+share/gitea/options/license/CERN-OHL-P-2.0
+share/gitea/options/license/CERN-OHL-S-2.0
+share/gitea/options/license/CERN-OHL-W-2.0
 share/gitea/options/license/CLISP-exception-2.0
 share/gitea/options/license/CNRI-Jython
 share/gitea/options/license/CNRI-Python
@@ -356,6 +369,7 @@
 share/gitea/options/license/ECL-2.0
 share/gitea/options/license/EFL-1.0
 share/gitea/options/license/EFL-2.0
+share/gitea/options/license/EPICS
 share/gitea/options/license/EPL-1.0
 share/gitea/options/license/EPL-2.0
 share/gitea/options/license/EUDatagrid
@@ -377,17 +391,32 @@
 share/gitea/options/license/FreeImage
 share/gitea/options/license/GCC-exception-2.0
 share/gitea/options/license/GCC-exception-3.1
+share/gitea/options/license/GFDL-1.1-invariants-only
+share/gitea/options/license/GFDL-1.1-invariants-or-later
+share/gitea/options/license/GFDL-1.1-no-invariants-only
+share/gitea/options/license/GFDL-1.1-no-invariants-or-later
 share/gitea/options/license/GFDL-1.1-only
 share/gitea/options/license/GFDL-1.1-or-later
+share/gitea/options/license/GFDL-1.2-invariants-only
+share/gitea/options/license/GFDL-1.2-invariants-or-later
+share/gitea/options/license/GFDL-1.2-no-invariants-only
+share/gitea/options/license/GFDL-1.2-no-invariants-or-later
 share/gitea/options/license/GFDL-1.2-only
 share/gitea/options/license/GFDL-1.2-or-later
+share/gitea/options/license/GFDL-1.3-invariants-only
+share/gitea/options/license/GFDL-1.3-invariants-or-later
+share/gitea/options/license/GFDL-1.3-no-invariants-only
+share/gitea/options/license/GFDL-1.3-no-invariants-or-later
 share/gitea/options/license/GFDL-1.3-only
 share/gitea/options/license/GFDL-1.3-or-later
 share/gitea/options/license/GL2PS
+share/gitea/options/license/GLWTPL
 share/gitea/options/license/GPL-1.0-only
 share/gitea/options/license/GPL-1.0-or-later
 share/gitea/options/license/GPL-2.0-only
 share/gitea/options/license/GPL-2.0-or-later
+share/gitea/options/license/GPL-3.0-linking-exception
+share/gitea/options/license/GPL-3.0-linking-source-exception
 share/gitea/options/license/GPL-3.0-only
 share/gitea/options/license/GPL-3.0-or-later
 share/gitea/options/license/GPL-CC-1.0
@@ -397,6 +426,7 @@
 share/gitea/options/license/HPND
 share/gitea/options/license/HPND-sell-variant
 share/gitea/options/license/HaskellReport
+share/gitea/options/license/Hippocratic-2.1
 share/gitea/options/license/IBM-pibs
 share/gitea/options/license/ICU
 share/gitea/options/license/IJG
@@ -418,6 +448,7 @@
 share/gitea/options/license/LGPL-2.0-or-later
 share/gitea/options/license/LGPL-2.1-only
 share/gitea/options/license/LGPL-2.1-or-later
+share/gitea/options/license/LGPL-3.0-linking-exception
 share/gitea/options/license/LGPL-3.0-only
 share/gitea/options/license/LGPL-3.0-or-later
 share/gitea/options/license/LGPLLR
@@ -457,12 +488,16 @@
 share/gitea/options/license/MirOS
 share/gitea/options/license/Motosoto
 share/gitea/options/license/MulanPSL-1.0
+share/gitea/options/license/MulanPSL-2.0
 share/gitea/options/license/Multics
 share/gitea/options/license/Mup
 share/gitea/options/license/NASA-1.3
 share/gitea/options/license/NBPL-1.0
+share/gitea/options/license/NCGL-UK-2.0
 share/gitea/options/license/NCSA
 share/gitea/options/license/NGPL
+share/gitea/options/license/NIST-PD
+share/gitea/options/license/NIST-PD-fallback
 share/gitea/options/license/NLOD-1.0
 share/gitea/options/license/NLPL
 share/gitea/options/license/NOSL
@@ -471,6 +506,7 @@
 share/gitea/options/license/NPOSL-3.0
 share/gitea/options/license/NRL
 share/gitea/options/license/NTP
+share/gitea/options/license/NTP-0
 share/gitea/options/license/Naumen
 share/gitea/options/license/Net-SNMP
 share/gitea/options/license/NetCDF
@@ -478,6 +514,7 @@
 share/gitea/options/license/Nokia
 share/gitea/options/license/Nokia-Qt-exception-1.1
 share/gitea/options/license/Noweb
+share/gitea/options/license/O-UDA-1.0
 share/gitea/options/license/OCCT-PL
 share/gitea/options/license/OCCT-exception-1.0
 share/gitea/options/license/OCLC-2.0
@@ -485,7 +522,12 @@
 share/gitea/options/license/ODC-By-1.0
 share/gitea/options/license/ODbL-1.0
 share/gitea/options/license/OFL-1.0
+share/gitea/options/license/OFL-1.0-RFN
+share/gitea/options/license/OFL-1.0-no-RFN
 share/gitea/options/license/OFL-1.1
+share/gitea/options/license/OFL-1.1-RFN
+share/gitea/options/license/OFL-1.1-no-RFN
+share/gitea/options/license/OGC-1.0
 share/gitea/options/license/OGL-Canada-2.0
 share/gitea/options/license/OGL-UK-1.0
 share/gitea/options/license/OGL-UK-2.0
@@ -518,8 +560,12 @@
 share/gitea/options/license/PHP-3.0
 share/gitea/options/license/PHP-3.01
 share/gitea/options/license/PS-or-PDF-font-exception-20170817
+share/gitea/options/license/PSF-2.0
 share/gitea/options/license/Parity-6.0.0
+share/gitea/options/license/Parity-7.0.0
 share/gitea/options/license/Plexus
+share/gitea/options/license/PolyForm-Noncommercial-1.0.0
+share/gitea/options/license/PolyForm-Small-Business-1.0.0
 share/gitea/options/license/PostgreSQL
 share/gitea/options/license/Python-2.0
 share/gitea/options/license/QPL-1.0
@@ -540,6 +586,8 @@
 share/gitea/options/license/SGI-B-1.1
 share/gitea/options/license/SGI-B-2.0
 share/gitea/options/license/SHL-0.51
+share/gitea/options/license/SHL-2.0
+share/gitea/options/license/SHL-2.1
 share/gitea/options/license/SISSL
 share/gitea/options/license/SISSL-1.2
 share/gitea/options/license/SMLNJ
@@ -616,6 +664,7 @@
 share/gitea/options/license/i2p-gpl-java-exception
 share/gitea/options/license/iMatix
 share/gitea/options/license/libpng-2.0
+share/gitea/options/license/libselinux-1.0
 share/gitea/options/license/libtiff
 share/gitea/options/license/mif-exception
 share/gitea/options/license/mpich2
@@ -815,8 +864,10 @@
 share/gitea/public/img/dingtalk.ico
 share/gitea/public/img/discord.png
 share/gitea/public/img/emoji/gitea.png
+share/gitea/public/img/failed.png
 share/gitea/public/img/favicon.ico
 share/gitea/public/img/favicon.png
+share/gitea/public/img/favicon.svg
 share/gitea/public/img/feishu.png
 share/gitea/public/img/gitea-192.png
 share/gitea/public/img/gitea-512.png
@@ -830,7 +881,220 @@
 share/gitea/public/img/openid-16x16.png
 share/gitea/public/img/repo_default.png
 share/gitea/public/img/slack.png
+share/gitea/public/img/svg/gitea-git.svg
+share/gitea/public/img/svg/gitea-gitea.svg
+share/gitea/public/img/svg/gitea-github.svg
+share/gitea/public/img/svg/gitea-gitlab.svg
+share/gitea/public/img/svg/gitea-lock-cog.svg
+share/gitea/public/img/svg/gitea-lock.svg
+share/gitea/public/img/svg/gitea-unlock.svg
 share/gitea/public/img/svg/icons.svg
+share/gitea/public/img/svg/material-invert-colors.svg
+share/gitea/public/img/svg/material-palette.svg
+share/gitea/public/img/svg/octicon-alert.svg
+share/gitea/public/img/svg/octicon-archive.svg
+share/gitea/public/img/svg/octicon-arrow-both.svg
+share/gitea/public/img/svg/octicon-arrow-down.svg
+share/gitea/public/img/svg/octicon-arrow-left.svg
+share/gitea/public/img/svg/octicon-arrow-right.svg
+share/gitea/public/img/svg/octicon-arrow-switch.svg
+share/gitea/public/img/svg/octicon-arrow-up.svg
+share/gitea/public/img/svg/octicon-beaker.svg
+share/gitea/public/img/svg/octicon-bell-slash.svg
+share/gitea/public/img/svg/octicon-bell.svg
+share/gitea/public/img/svg/octicon-bold.svg
+share/gitea/public/img/svg/octicon-book.svg
+share/gitea/public/img/svg/octicon-bookmark-slash.svg
+share/gitea/public/img/svg/octicon-bookmark.svg
+share/gitea/public/img/svg/octicon-briefcase.svg
+share/gitea/public/img/svg/octicon-broadcast.svg
+share/gitea/public/img/svg/octicon-browser.svg
+share/gitea/public/img/svg/octicon-bug.svg
+share/gitea/public/img/svg/octicon-calendar.svg
+share/gitea/public/img/svg/octicon-check-circle-fill.svg
+share/gitea/public/img/svg/octicon-check-circle.svg
+share/gitea/public/img/svg/octicon-check.svg
+share/gitea/public/img/svg/octicon-checklist.svg
+share/gitea/public/img/svg/octicon-chevron-down.svg
+share/gitea/public/img/svg/octicon-chevron-left.svg
+share/gitea/public/img/svg/octicon-chevron-right.svg
+share/gitea/public/img/svg/octicon-chevron-up.svg
+share/gitea/public/img/svg/octicon-circle-slash.svg
+share/gitea/public/img/svg/octicon-circle.svg
+share/gitea/public/img/svg/octicon-clippy.svg
+share/gitea/public/img/svg/octicon-clock.svg
+share/gitea/public/img/svg/octicon-code-review.svg
+share/gitea/public/img/svg/octicon-code-square.svg
+share/gitea/public/img/svg/octicon-code.svg
+share/gitea/public/img/svg/octicon-comment-discussion.svg
+share/gitea/public/img/svg/octicon-comment.svg
+share/gitea/public/img/svg/octicon-cpu.svg
+share/gitea/public/img/svg/octicon-credit-card.svg
+share/gitea/public/img/svg/octicon-cross-reference.svg