Pullup ticket #6378 - requested by riastradh

www/gitea: build fix, security fix

Revisions pulled up:
- www/gitea/Makefile                                            1.47
- www/gitea/PLIST                                               1.9
- www/gitea/distinfo                                            1.24

---
   Module Name:    pkgsrc
   Committed By:   jperkin
   Date:           Wed Nov 18 11:29:27 UTC 2020

   Modified Files:
           pkgsrc/www/gitea: Makefile PLIST distinfo

   Log Message:
   gitea: Update to 1.12.6.

   Fixes pkgsrc handling of the frontend artefacts, various files were previously
   missing, leading to errors in the web interface.

   Changes since 1.12.1:

   ## [1.12.6](https://github.com/go-gitea/gitea/releases/tag/v1.12.6) - 2020-11-11

   * SECURITY
     * Prevent git operations for inactive users (#13527) (#13537)
     * Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13525)
   * BUGFIXES
     * API should only return Json (#13511) (#13564)
     * Fix before and since query arguments at API (#13559) (#13560)
     * Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13492)
     * Fix link detection in repository description with tailing '_' (#13407) (#13408)
     * Remove obsolete change of email on profile page (#13341) (#13348)
     * Fix permission check on get Reactions API endpoints (#13344) (#13346)
     * Add migrated pulls to pull request task queue (#13331) (#13335)
     * API deny wrong pull creation options (#13308) (#13327)
     * Fix initial commit page & binary munching problem (#13249) (#13259)
     * Fix diff parsing (#13157) (#13136) (#13139)
     * Return error 404 not 500 from API if team does not exist (#13118) (#13119)
     * Prohibit automatic downgrades (#13108) (#13111)
     * Fix GitLab Migration Option AuthToken (#13101)
     * GitLab Label Color Normalizer (#12793) (#13100)
     * Log the underlying panic in runMigrateTask (#13096) (#13098)
     * Fix attachments list in edit comment (#13036) (#13097)
     * Fix deadlock when deleting team user (#13093)
     * Fix error create comment on outdated file (#13041) (#13042)
     * Fix repository create/delete event webhooks (#13008) (#13027)
     * Fix internal server error on README in submodule (#13006) (#13016)

   ## [1.12.5](https://github.com/go-gitea/gitea/releases/tag/v1.12.5) - 2020-10-01

   * BUGFIXES
     * Allow U2F with default settings for gitea in subpath (#12990) (#13001)
     * Prevent empty div when editing comment (#12404) (#12991)
     * On mirror update also update address in DB (#12964) (#12967)
     * Allow extended config on cron settings (#12939) (#12943)
     * Open transaction when adding Avatar email-hash pairs to the DB (#12577) (#12940)
     * Fix internal server error from ListUserOrgs API (#12910) (#12915)
     * Update only the repository columns that need updating (#12900) (#12912)
     * Fix panic when adding long comment (#12892) (#12894)
     * Add size limit for content of comment on action ui (#12881) (#12890)
     * Convert User expose ID each time (#12855) (#12883)
     * Support slashes in release tags (#12864) (#12882)
     * Add missing information to CreateRepo API endpoint (#12848) (#12867)
     * On Migration respect old DefaultBranch (#12843) (#12858)
     * Fix notifications page links (#12838) (#12853)
     * Stop cloning unnecessarily on PR update (#12839) (#12852)
     * Escape more things that are passed through str2html (#12622) (#12850)
     * Remove double escape on labels addition in comments (#12809) (#12810)
     * Fix "only mail on mention" bug (#12775) (#12789)
     * Fix yet another bug with diff file names (#12771) (#12776)
     * RepoInit Respect AlternateDefaultBranch (#12746) (#12751)
     * Fix Avatar Resize (resize algo NearestNeighbor -> Bilinear) (#12745) (#12750)
   * ENHANCEMENTS
     * gitea dump: include version & Check InstallLock (#12760) (#12762)

   ## [1.12.4](https://github.com/go-gitea/gitea/releases/tag/v1.12.4) - 2020-09-02

   * SECURITY
     * Escape provider name in oauth2 provider redirect (#12648) (#12650)
     * Escape Email on password reset page (#12610) (#12612)
     * When reading expired sessions - expire them (#12686) (#12690)
   * ENHANCEMENTS
     * StaticRootPath configurable at compile time (#12371) (#12652)
   * BUGFIXES
     * Fix to show an issue that is related to a deleted issue (#12651) (#12692)
     * Expire time acknowledged for cache (#12605) (#12611)
     * Fix diff path unquoting (#12554) (#12575)
     * Improve HTML escaping helper (#12562)
     * models: break out of loop (#12386) (#12561)
     * Default empty merger list to those with write permissions (#12535) (#12560)
     * Skip SSPI authentication attempts for /api/internal (#12556) (#12559)
     * Prevent NPE on commenting on lines with invalidated comments (#12549) (#12550)
     * Remove hardcoded ES indexername (#12521) (#12526)
     * Fix bug preventing transfer to private organization (#12497) (#12501)
     * Keys should not verify revoked email addresses (#12486) (#12495)
     * Do not add prefix on http/https submodule links (#12477) (#12479)
     * Fix ignored login on compare (#12476) (#12478)
     * Fix incorrect error logging in Stats indexer and OAuth2 (#12387) (#12422)
     * Upgrade google/go-github to v32.1.0 (#12361) (#12390)
     * Render emoji's of Commit message on feed-page (#12373)
     * Fix handling of diff on unrelated branches when Git 2.28 used (#12370)

   ## [1.12.3](https://github.com/go-gitea/gitea/releases/tag/v1.12.3) - 2020-07-28

   * BUGFIXES
     * Don't change creation date when updating Release (#12343) (#12351)
     * Show 404 page when release not found (#12328) (#12332)
     * Fix emoji detection in certain cases (#12320) (#12327)
     * Reduce emoji size (#12317) (#12327)
     * Fix double-indirection bug in logging IDs (#12294) (#12308)
     * Link to pull list page on sidebar when view pr (#12256) (#12263)
     * Extend Notifications API and return pinned notifications by default (#12164) (#12232)

   ## [1.12.2](https://github.com/go-gitea/gitea/releases/tag/v1.12.2) - 2020-07-11

   * BUGFIXES
     * When deleting repository decrese user repository count in cache (#11954) (#12188)
     * Return full commit message instead of summary in commits API (#12186) (#12187)
     * Properly set HEAD when a repo is created with a default branch that is not named 'master' (#12135) (#12182)
     * Ensure GPG Subkeys are verified (#12155) (#12168)
     * Fix failing to cache last commit with key being to long (#12151) (#12161)
     * Multiple small admin dashboard fixes (#12153) (#12156)
     * Remove spurious logging of " Delete all repository archives" at startup (#12139) (#12148)
     * Fix repository setup instructions when default branch is not named 'master' (#12122) (#12147)
     * Move EventSource to SharedWorker (#12095) (#12130)
     * Fix ui bug in wiki commit page (#12089) (#12125)
     * Fix gitgraph branch continues after merge (#12044) (#12105)
     * Set the base url when migrating from Gitlab using access token or username without password (#11852) (#12104)
     * Ensure BlameReaders close at end of request (#12102) (#12103)
     * Fix panic when adding review comment (#12058)
   * ENHANCEMENTS
     * Disable dropzone's timeout for file uploads (#12024) (#12032)

3 files changed, 151 insertions, 15 deletions

diff --git a/www/gitea/Makefile b/www/gitea/Makefile
index 0c5930c0fa3..f7c94a27ee8 100644
--- a/www/gitea/Makefile
+++ b/www/gitea/Makefile
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.42 2020/09/03 07:29:34 bsiegert Exp $
+# $NetBSD: Makefile,v 1.42.2.1 2020/12/11 08:36:23 bsiegert Exp $
 
-DISTNAME=	gitea-1.12.1
+DISTNAME=	gitea-1.12.6
 MASTER_SITES=	${MASTER_SITE_GITHUB:=go-gitea/}
-PKGREVISION=	3
 CATEGORIES=	www
 GITHUB_TAG=	v${PKGVERSION_NOREV}
 
@@ -18,7 +17,7 @@ GO_SRCPATH=		code.gitea.io/gitea
 # The front-end files do not change every release, so only bump this when
 # necessary to avoid excessive uploads to LOCAL_PORTS.
 #
-FRONTEND=		gitea-1.12.1-frontend.tar.gz
+FRONTEND=		gitea-1.12.6-frontend.tar.gz
 SITES.${FRONTEND}=	${MASTER_SITE_LOCAL}
 DISTFILES:=		${DEFAULT_DISTFILES} ${FRONTEND}
 
@@ -112,7 +111,7 @@ post-install:
 
 .PHONY: generate-frontend
 generate-frontend: build
-	cd ${WRKSRC} && ${TAR} -zcf ${WRKDIR}/${PKGNAME_NOREV}-frontend.tar.gz public/css public/js
+	cd ${WRKSRC} && ${TAR} -zcf ${WRKDIR}/${PKGNAME_NOREV}-frontend.tar.gz public
 	@${ECHO} "Now upload ${WRKDIR}/${PKGNAME_NOREV}-frontend.tar.gz to LOCAL_PORTS"
 
 .include "../../lang/go/go-package.mk"
diff --git a/www/gitea/PLIST b/www/gitea/PLIST
index a652b96fc8d..6be05ad1b93 100644
--- a/www/gitea/PLIST
+++ b/www/gitea/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2020/06/29 16:02:13 jperkin Exp $
+@comment $NetBSD: PLIST,v 1.8.2.1 2020/12/11 08:36:23 bsiegert Exp $
 sbin/gitea
 share/examples/gitea/app.ini.sample
 share/gitea/options/gitignore/Actionscript
@@ -661,6 +661,140 @@ share/gitea/public/css/index.css
 share/gitea/public/css/monaco.css
 share/gitea/public/css/swagger.css
 share/gitea/public/css/theme-arc-green.css
+share/gitea/public/fomantic/components/accordion.css
+share/gitea/public/fomantic/components/accordion.js
+share/gitea/public/fomantic/components/accordion.min.css
+share/gitea/public/fomantic/components/accordion.min.js
+share/gitea/public/fomantic/components/api.js
+share/gitea/public/fomantic/components/api.min.js
+share/gitea/public/fomantic/components/breadcrumb.css
+share/gitea/public/fomantic/components/breadcrumb.min.css
+share/gitea/public/fomantic/components/button.css
+share/gitea/public/fomantic/components/button.min.css
+share/gitea/public/fomantic/components/card.css
+share/gitea/public/fomantic/components/card.min.css
+share/gitea/public/fomantic/components/checkbox.css
+share/gitea/public/fomantic/components/checkbox.js
+share/gitea/public/fomantic/components/checkbox.min.css
+share/gitea/public/fomantic/components/checkbox.min.js
+share/gitea/public/fomantic/components/comment.css
+share/gitea/public/fomantic/components/comment.min.css
+share/gitea/public/fomantic/components/container.css
+share/gitea/public/fomantic/components/container.min.css
+share/gitea/public/fomantic/components/dimmer.css
+share/gitea/public/fomantic/components/dimmer.js
+share/gitea/public/fomantic/components/dimmer.min.css
+share/gitea/public/fomantic/components/dimmer.min.js
+share/gitea/public/fomantic/components/divider.css
+share/gitea/public/fomantic/components/divider.min.css
+share/gitea/public/fomantic/components/dropdown.css
+share/gitea/public/fomantic/components/dropdown.js
+share/gitea/public/fomantic/components/dropdown.min.css
+share/gitea/public/fomantic/components/dropdown.min.js
+share/gitea/public/fomantic/components/form.css
+share/gitea/public/fomantic/components/form.js
+share/gitea/public/fomantic/components/form.min.css
+share/gitea/public/fomantic/components/form.min.js
+share/gitea/public/fomantic/components/grid.css
+share/gitea/public/fomantic/components/grid.min.css
+share/gitea/public/fomantic/components/header.css
+share/gitea/public/fomantic/components/header.min.css
+share/gitea/public/fomantic/components/icon.css
+share/gitea/public/fomantic/components/icon.min.css
+share/gitea/public/fomantic/components/image.css
+share/gitea/public/fomantic/components/image.min.css
+share/gitea/public/fomantic/components/input.css
+share/gitea/public/fomantic/components/input.min.css
+share/gitea/public/fomantic/components/item.css
+share/gitea/public/fomantic/components/item.min.css
+share/gitea/public/fomantic/components/label.css
+share/gitea/public/fomantic/components/label.min.css
+share/gitea/public/fomantic/components/list.css
+share/gitea/public/fomantic/components/list.min.css
+share/gitea/public/fomantic/components/loader.css
+share/gitea/public/fomantic/components/loader.min.css
+share/gitea/public/fomantic/components/menu.css
+share/gitea/public/fomantic/components/menu.min.css
+share/gitea/public/fomantic/components/message.css
+share/gitea/public/fomantic/components/message.min.css
+share/gitea/public/fomantic/components/modal.css
+share/gitea/public/fomantic/components/modal.js
+share/gitea/public/fomantic/components/modal.min.css
+share/gitea/public/fomantic/components/modal.min.js
+share/gitea/public/fomantic/components/popup.css
+share/gitea/public/fomantic/components/popup.js
+share/gitea/public/fomantic/components/popup.min.css
+share/gitea/public/fomantic/components/popup.min.js
+share/gitea/public/fomantic/components/progress.css
+share/gitea/public/fomantic/components/progress.js
+share/gitea/public/fomantic/components/progress.min.css
+share/gitea/public/fomantic/components/progress.min.js
+share/gitea/public/fomantic/components/reset.css
+share/gitea/public/fomantic/components/reset.min.css
+share/gitea/public/fomantic/components/search.css
+share/gitea/public/fomantic/components/search.js
+share/gitea/public/fomantic/components/search.min.css
+share/gitea/public/fomantic/components/search.min.js
+share/gitea/public/fomantic/components/segment.css
+share/gitea/public/fomantic/components/segment.min.css
+share/gitea/public/fomantic/components/sidebar.css
+share/gitea/public/fomantic/components/sidebar.js
+share/gitea/public/fomantic/components/sidebar.min.css
+share/gitea/public/fomantic/components/sidebar.min.js
+share/gitea/public/fomantic/components/site.css
+share/gitea/public/fomantic/components/site.js
+share/gitea/public/fomantic/components/site.min.css
+share/gitea/public/fomantic/components/site.min.js
+share/gitea/public/fomantic/components/sticky.css
+share/gitea/public/fomantic/components/sticky.js
+share/gitea/public/fomantic/components/sticky.min.css
+share/gitea/public/fomantic/components/sticky.min.js
+share/gitea/public/fomantic/components/tab.css
+share/gitea/public/fomantic/components/tab.js
+share/gitea/public/fomantic/components/tab.min.css
+share/gitea/public/fomantic/components/tab.min.js
+share/gitea/public/fomantic/components/table.css
+share/gitea/public/fomantic/components/table.min.css
+share/gitea/public/fomantic/components/text.css
+share/gitea/public/fomantic/components/text.min.css
+share/gitea/public/fomantic/components/transition.css
+share/gitea/public/fomantic/components/transition.js
+share/gitea/public/fomantic/components/transition.min.css
+share/gitea/public/fomantic/components/transition.min.js
+share/gitea/public/fomantic/semantic.css
+share/gitea/public/fomantic/semantic.js
+share/gitea/public/fomantic/semantic.min.css
+share/gitea/public/fomantic/semantic.min.js
+share/gitea/public/fomantic/themes/basic/assets/fonts/icons.eot
+share/gitea/public/fomantic/themes/basic/assets/fonts/icons.svg
+share/gitea/public/fomantic/themes/basic/assets/fonts/icons.ttf
+share/gitea/public/fomantic/themes/basic/assets/fonts/icons.woff
+share/gitea/public/fomantic/themes/default/assets/fonts/brand-icons.eot
+share/gitea/public/fomantic/themes/default/assets/fonts/brand-icons.svg
+share/gitea/public/fomantic/themes/default/assets/fonts/brand-icons.ttf
+share/gitea/public/fomantic/themes/default/assets/fonts/brand-icons.woff
+share/gitea/public/fomantic/themes/default/assets/fonts/brand-icons.woff2
+share/gitea/public/fomantic/themes/default/assets/fonts/icons.eot
+share/gitea/public/fomantic/themes/default/assets/fonts/icons.svg
+share/gitea/public/fomantic/themes/default/assets/fonts/icons.ttf
+share/gitea/public/fomantic/themes/default/assets/fonts/icons.woff
+share/gitea/public/fomantic/themes/default/assets/fonts/icons.woff2
+share/gitea/public/fomantic/themes/default/assets/fonts/outline-icons.eot
+share/gitea/public/fomantic/themes/default/assets/fonts/outline-icons.svg
+share/gitea/public/fomantic/themes/default/assets/fonts/outline-icons.ttf
+share/gitea/public/fomantic/themes/default/assets/fonts/outline-icons.woff
+share/gitea/public/fomantic/themes/default/assets/fonts/outline-icons.woff2
+share/gitea/public/fomantic/themes/default/assets/images/flags.png
+share/gitea/public/fomantic/themes/github/assets/fonts/octicons-local.ttf
+share/gitea/public/fomantic/themes/github/assets/fonts/octicons.svg
+share/gitea/public/fomantic/themes/github/assets/fonts/octicons.ttf
+share/gitea/public/fomantic/themes/github/assets/fonts/octicons.woff
+share/gitea/public/fomantic/themes/material/assets/fonts/icons.eot
+share/gitea/public/fomantic/themes/material/assets/fonts/icons.svg
+share/gitea/public/fomantic/themes/material/assets/fonts/icons.ttf
+share/gitea/public/fomantic/themes/material/assets/fonts/icons.woff
+share/gitea/public/fomantic/themes/material/assets/fonts/icons.woff2
+share/gitea/public/fonts/codicon.ttf
 share/gitea/public/img/404.png
 share/gitea/public/img/500.png
 share/gitea/public/img/apple-touch-icon.png
@@ -696,10 +830,12 @@ share/gitea/public/img/msteams.png
 share/gitea/public/img/openid-16x16.png
 share/gitea/public/img/repo_default.png
 share/gitea/public/img/slack.png
+share/gitea/public/img/svg/icons.svg
 share/gitea/public/img/telegram.png
 share/gitea/public/js/clipboard.js
 share/gitea/public/js/datetimepicker.js
 share/gitea/public/js/dropzone.js
+share/gitea/public/js/eventsource.sharedworker.js
 share/gitea/public/js/gitgraph.js
 share/gitea/public/js/highlight.js
 share/gitea/public/js/index.js
@@ -712,6 +848,7 @@ share/gitea/public/js/monaco-json.worker.js
 share/gitea/public/js/monaco-ts.worker.js
 share/gitea/public/js/monaco.js
 share/gitea/public/js/swagger.js
+share/gitea/public/serviceworker.js
 share/gitea/public/vendor/assets/font-awesome/LICENSE
 share/gitea/public/vendor/assets/font-awesome/css/LICENSE
 share/gitea/public/vendor/assets/font-awesome/css/font-awesome.min.css
diff --git a/www/gitea/distinfo b/www/gitea/distinfo
index ab96856c656..74498d75102 100644
--- a/www/gitea/distinfo
+++ b/www/gitea/distinfo
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.23 2020/06/29 16:02:13 jperkin Exp $
+$NetBSD: distinfo,v 1.23.2.1 2020/12/11 08:36:23 bsiegert Exp $
 
-SHA1 (gitea-1.12.1-frontend.tar.gz) = 76d203050d4a4c3e7aeb2a742457742420be7c41
-RMD160 (gitea-1.12.1-frontend.tar.gz) = b79b450f1b0b8cd3dcff194f5886bb302b5e368c
-SHA512 (gitea-1.12.1-frontend.tar.gz) = 2cae970b17dc87e7597c2be9335d4c1859c5fe03367d5dd51e60b79382f4544dea2edbab75850f14d8763fc3d2c09364aafff0fe5ac4bd9f3f96554d5fcd0840
-Size (gitea-1.12.1-frontend.tar.gz) = 3899415 bytes
-SHA1 (gitea-1.12.1.tar.gz) = b6da55635470ef621e411d3c9cc5568385d37128
-RMD160 (gitea-1.12.1.tar.gz) = 71d02f942d10aba6e4543922719cdf6cf856c4c9
-SHA512 (gitea-1.12.1.tar.gz) = e43b36c2d10094e8cd3345a6a1b730471ca5f9805a3f92a882f2c5cc39b89ef99c34f91976e67def838d14b8b9dd9fdb7b39df407c119e2f5d4ed56ce64f83b5
-Size (gitea-1.12.1.tar.gz) = 32124157 bytes
+SHA1 (gitea-1.12.6-frontend.tar.gz) = 8f5d260af8dcbaddf6b74461fbfae9c1cc68a9c9
+RMD160 (gitea-1.12.6-frontend.tar.gz) = cf31729d71777fe02aa3611a6394c77442d0077b
+SHA512 (gitea-1.12.6-frontend.tar.gz) = 2e2b3d6013c0b6489e9a18e6835800fe703bc68faae9c26d88f29f2b328eec12ef27ba804797ea2af83ba3748f0a8ff9420837171e83178ec7ffb13c9f8e4687
+Size (gitea-1.12.6-frontend.tar.gz) = 21443322 bytes
+SHA1 (gitea-1.12.6.tar.gz) = 8ad3160ebaf8148e44586700e6471686db2babf1
+RMD160 (gitea-1.12.6.tar.gz) = 60fa8f0cab440f022546c9f98a4eea3e2b0e9df1
+SHA512 (gitea-1.12.6.tar.gz) = 4e3853674779cef7f198df6c4b317d093a891f84cd4f174dde781949cf180225e5111c5eee5c3ce4c8c19370bd92128eade08cf493afe54ad43b741e2d5ea670
+Size (gitea-1.12.6.tar.gz) = 32162658 bytes
 SHA1 (patch-Makefile) = 394eb7b8d5c706cd4d2070c4d544d52cf6db5f0b