03:34 Matthias Fechner (mfechner) 

www/gitlab: security and bugfix update to 16.11.2

Changes:	https://about.gitlab.com/releases/2024/05/08/patch-release-gitlab-16-11-2-released/

MFH:		2024Q2
Security:	fbc2c629-0dc5-11ef-9850-001b217b3468

    0a3fc70

06:05 Matthias Fechner (mfechner) 

www/gitlab: security and patch update to 16.11.1

Changes:	https://about.gitlab.com/releases/2024/04/24/patch-release-gitlab-16-11-1-released/

MFH:		2024Q2
Security:	b857606c-0266-11ef-8681-001b217b3468

    d20d02e6

10:57 Matthias Fechner (mfechner) 

www/gitlab: major upgrade to 16.11.0

Please note, that this version changes the installation path.
Make sure you follow the upgrade manual very carefully:
https://gitlab.fechner.net/mfechner/Gitlab-docu/-/blob/master/update/16.10-16.11-freebsd.md

Changes:	https://about.gitlab.com/releases/2024/04/18/gitlab-16-11-released/

    57a5a76

10:57 Matthias Fechner (mfechner) 

www/gitlab-ce: rename port to gitlab in preparation to add flavor support

    24ea305

10:57 Matthias Fechner (mfechner) 

www/gitlab: add flavor support to also support the EE version

By default the port will build the CE edition.
If you use pkg, you will install it as usual with:
pkg install gitlab-ce

If you need the EE edition you can install it with:
pkg install gitlab-ee

    e47b431

15:01 mfechner 

Security update to 10.8.5.
This update was blocked as it requires version 2.7.1, 2.7.2 fails which is a
gitlab core bug:
https://gitlab.com/gitlab-org/gitlab-ce/issues/48415

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Security:	b950a83b-789e-11e8-8545-d8cb8abf62dd
Differential Revision:	https://reviews.freebsd.org/D16009

 

15:45 mfechner 

Update www/gitlab to 10.8.4.
Incremental rollouts, plus open source push mirroring
See here for all details:
https://about.gitlab.com/2018/05/22/gitlab-10-8-released/

Reviewed by:	mat, swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D15950

 

22:27 sunpoet 

Change RUN_DEPENDS from rubygem-net-ssh to rubygem-net-ssh4

- Bump PORTREVISION for dependency change

 

13:48 mfechner 

Applied security upgrade to gitlab 10.7.5.
Fixed bug with wrong path for gitlab-workhouse that should fix artifacts
(reported by Felix <mail@felix.flornet.de>). This was fix upstream but is not
included in this version yet:
https://gitlab.com/gitlab-org/gitlab-ce/issues/46763
Update net/rubygem-grpc to 1.11.1 which is required for gitlab 10.7.5.
Sync dep net/rubygem-grpc with gitlab which uses now 1.11.1.
Added gitlab-pages again to dependencies as the new version builds again.

Reported by:	Felix <mail@felix.flornet.de>
Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D15631

 

11:08 sunpoet 

Change RUN_DEPENDS from rubygem-fog-aws to rubygem-fog-aws2

- Bump PORTREVISION for dependency change

 

16:14 mfechner 

Fixed dependency problem to textproc/rubygem-html-pipeline version 2.7.x.

Reported by:	tz
Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15445

 

18:05 mfechner 

Update gitlab to 10.7.3.
For list of changes look here:
https://about.gitlab.com/2018/04/22/gitlab-10-7-released/
Please note that gitlab-pages is temporarily removed and will be added later if
upstream bug is fixed.
To not update to this version if you require gitlab-pages.
The Gemfile.lock is now generated on gitlab startup, so this should help with
Gemfile issues.

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D15314

 

10:43 mfechner 

Changed the MAINTAINER of all my ports to have mfechner@FreeBSD.org listed.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15270

 

10:43 mfechner 

Security update for gitlab to 10.6.5.

Reviewed by:	eugen_grosbein.net, tz (mentor)
Approved by:	eugen_grosbein.net, tz (mentor)
MFC after:	1 day
MFH:		2018Q2
Security:	9dfe61c8-4d15-11e8-8f2f-d8cb8abf62dd
Differential Revision:	https://reviews.freebsd.org/D15249

 

16:33 mfechner 

Update gitlab to version 10.6.4.
For detailed new feature with the major version please check
https://about.gitlab.com/2018/03/22/gitlab-10-6-released/

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D15038

 

19:45 sunpoet 

Fix rubygem-default_value_for dependency

- Revert r467193
- Change RUN_DEPENDS from rubygem-default_value_for to
rubygem-default_value_for30
- Bump PORTREVISION for dependency and package change

Requested by:	mfechner

 

18:33 sunpoet 

Fix Gemfile for rubygem-default_value_for 3.1.0 update

- Bump PORTREVISION for package change

 

19:40 sunpoet 

Change RUN_DEPENDS from rubygem-omniauth-facebook to rubygem-omniauth-facebook4

- Bump PORTREVISION for dependency change

 

16:30 mfechner 

Update gitlab to version 10.5.6.
For changelog what changed to 10.5 release see here:
https://about.gitlab.com/2018/02/22/gitlab-10-5-released/

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D14963

 

10:35 tz 

www/gitlab: Update von 10.4.4 to 10.4.6

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v10.4.4/CHANGELOG.md

Approved by:	mfechner
Security:	CVE-2018-8801
Security:	https://www.vuxml.org/freebsd/dc0c201c-31da-11e8-ac53-d8cb8abf62dd.html

 

09:35 tz 

www/gitlab, security/rubygem-doorkeeper42 and
security/rubygem-doorkeeper-openid_connect12:
Add CONFLICTS_INSTALL and change RUN_DEPENDS in order to match each other.
Otherwise conflicting dependencies will be installed

 

08:57 tz 

Resurrect security/rubygem-doorkeeper as security/rubygem-doorkeeper42

www/gitlab depends on the 4.2.x version and is currently broken without it

 

20:32 sunpoet 

Fix Gemfile for rubygem-doorkeeper-openid_connect 1.3.0 update

- Bump PORTREVISION for package change

 

13:40 sunpoet 

Change RUN_DEPENDS from rubygem-pg to rubygem-pg0

- Bump PORTREVISION for dependency change

 

15:42 tz 

www/gitlab: Update from 10.1.6 to 10.4.4

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v10.4.4/CHANGELOG.md

Submitted by: Matthias Fechner <idefix@fechner.net>
Reviewed by:  swills, tz

 

13:38 sunpoet 

Move textproc/rubygem-sass-rails5 to textproc/rubygem-sass-rails-rails4

- Bump PORTREVISION of dependent ports for dependency change

 

19:04 sunpoet 

Fix Gemfile for rubygem-attr_encrypted 3.1.0 update

- Bump PORTREVISION for package change

 

18:13 sunpoet 

Fix Gemfile for rubygem-grape-entity 0.7.0 update

- Bump PORTREVISION for package change

 

20:53 swills 

www/gitlab: update to 10.1.6

Approved by:	idefix@fechner.net (maintainer, via private email)
Obtained from:	http://gitlab.toco-domains.de/FreeBSD/GitLab/commits/10.1
MFH:		2018Q1
Security:	65fab89f-2231-46db-8541-978f4e87f32a

 

15:38 swills 

Fix gitlab issue by creating rubygem-licensee8

PR:		225047
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer)

 

12:43 sunpoet 

Fix Gemfile for rubygem-fog-google 1.0.0 update

- Bump PORTREVISION for package change

 

12:13 sunpoet 

Fix Gemfile for rubygem-jquery-atwho-rails 1.5.4 update

- Bump PORTREVISION for package change

 

13:51 sunpoet 

Fix Gemfile for rubygem-fog-core 2.0.0 update

- Bump PORTREVISION for package change

 

14:03 swills 

www/gitlab: fix Gemfile for updated dependencies

PR:		224932
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer)

 

15:49 swills 

www/gitlab: remove spurious newline

Reported by:	sunpoet
Pointyhat to:	swills

 

15:34 sunpoet 

Change RUN_DEPENDS from rubygem-redis and rubygem-jwt to rubygem-redis3 and
rubygem-jwt1

- Bump PORTREVISION for dependency change

 

15:22 swills 

www/gitlab: fix Gemfile for updated dependencies

PR:		224836
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer)

 

20:51 sunpoet 

Change RUN_DEPENDS from rubygem-rainbow to rubygem-rainbow2

- Bump PORTREVISION for dependency change

 

10:54 tz 

www/gitlab: Update from 10.1.4 to 10.1.5

Also:
- remove %%RUBY_SUFFIX%% from plist (thanks to swills)
- fix broken dependency to rubygem-pg in Gemfile
- fix broken dependency to rubygem-mysql2 in Gemfile
- Add support for reverse proxies in rc script
- Fix: gitlab starts even if gitlab_enable is not set
- Make default listenAddr configurable

PR:           224232 222896 220126 218388
Submitted by: swills, gdinolt@pacbell.net, max@mober.at, Marian Cerny
<majo-bugs.freebsd.org@cerny.sk>
Reviewed by:  tz
Approved by:  maintainer
Differential Revision:	https://reviews.freebsd.org/D12376

 

16:44 tz 

GitLab and related ports maintained by me: pass maintainership to Matthias
Fechner

Matthias has proven himself as capable and enthusiastic enough to update
www/gitlab on its own - which frees much of my time. :)

I wrote an update guide for him and everybody interested in it:
http://gitlab.toco-domains.de/FreeBSD/GitLab-docu/blob/master/update/how-to-update-the-freebsd-port.md

 

20:38 sunpoet 

Change RUN_DEPENDS from rubygem-fog-aws to rubygem-fog-aws1

- Bump PORTREVISION for dependency change

 

11:03 tz 

www/gitlab: Fix options and update patches

The last update broke the options and removed
the needed gems from the Gemfile

Also update patches which weren't committed last time

Submitted by: Matthias Fechner <idefix@fechner.net>
Reported by:  remko

 

16:57 tz 

www/gitlab: Update from 9.4.7 to 10.1.4

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v10.1.4/CHANGELOG.md

This also fixes some security issues.

Submitted by: Matthias Fechner <idefix@fechner.net>

 

14:55 tz 

Repo copy databases/rubygem-flipper-active_record and devel/rubygem-flipper
to unbreak www/gitlab. GitLab broke through there updates in 453680 and 453681.

Reported by: remko, Matthias Fechner <idefix@fechner.net>

 

10:08 tz 

www/gitlab: Adjust recaptcha config

When using most current recaptcha version it was no longer possible to log in
because of a change in configuration parameter. The patch fixes this issue.

PR:           223738
Submitted by: otacilio.neto@bsd.com.br
Reviewed by:  swills

 

22:57 sunpoet 

Fix Gemfile for rubygem-paranoia 2.4.0 and rubygem-redis-namespace 1.6.0 update

- Bump PORTREVISION for package change

 

17:42 sunpoet 

Fix Gemfile for rubygem-health_check 2.7.0 update

- Bump PORTREVISION for package change

 

14:29 tz 

www/gitlab: Update from 9.3.11 to 9.4.7

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.4.7/CHANGELOG.md

This update also fixes 4 security issues

Reviewed by: Matthias Fechner <idefix@fechner.net>

 

10:42 sunpoet 

Fix Gemfile for rubygem-omniauth-shibboleth 1.3.0 update

- Bump PORTREVISION for package change

 

09:50 sunpoet 

Fix Gemfile for rubygem-gon 6.2.0 update

- While I'm here, silence patch messages
- Bump PORTREVISION for package change

 

09:05 tz 

www/gitlab: Fix options which do the opposite

Currently we have MYSQL and PG option. Since the last change
the MYSQL option installs the PG configuration and vise versa.
This is now fixed.

 

14:27 tz 

www/gitlab: Make Gemfile-handling through options easier

Currently MySQL und PostgreSQL entries were removed from Gemfile
via patch and added back through options.

Now we just remove the entries of the option set to off.

This remove some work and pitfalls from the Gemfile-patch.

Thanks to sunpoet for this suggestion.

Reported by: sunpoet

 

10:35 tz 

www/gitlab: Update from 9.3.10 to 9.3.11

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.3.11/CHANGELOG.md

This fixes an XSS security issue. The mentioned security issues in
the gems are already fixed by updates of them gems itself.

Security: CVE-2017-5029
Security: CVE-2016-4738
Security:
https://vuxml.FreeBSD.org/freebsd/6a177c87-9933-11e7-93f7-d43d7e971a1b.html

 

14:15 tz 

www/gitlab: Update from 9.2.10 to 9.3.10

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.3.10/CHANGELOG.md

We now add full support for gitaly and add the basics for later support
of gitlab-pages.

Reviewed by: Matthias Fechner <idefix@fechner.net>

 

15:53 tz 

www/gitlab: fix pkg-plist

A %%RUBY_SUFFIX%% got into the plist and makes it invalid

PR:           221523
Submitted by: max@mober.at
MFH:          2017Q3

 

07:57 tz 

www/gitlab: Update from 9.2.9 to 9.2.10

This update fixes 2 important security issues

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.2.10/CHANGELOG.md

MFH:      2017Q3
Security: CVE-2017-12426

 

09:35 tz 

www/gitlab: Fix wrong RUN_DEPENDS

Switch from security/rubygem-hashie-forbidden_attributes to
devel/rubygem-hashie-forbidden_attributes.

Pointy hat to myself. I did not notice the overlapping effort
of sunpoet creating the same port and mat removing the
duplicate.

 

09:15 tz 

www/gitlab: Update from 9.1.9 to 9.2.9

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.2.9/CHANGELOG.md

Submitted by: Matthias Fechner <idefix@fechner.net>, tz

 

13:23 tz 

www/gitlab: Update from 9.1.8 to 9.1.9

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.1.9/CHANGELOG.md

MFH: 2017Q3

 

10:42 tz 

www/gitlab: Update from 9.1.7 to 9.1.8

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.1.8/CHANGELOG.md

Security:
https://vuxml.FreeBSD.org/freebsd/92f4191a-6d25-11e7-93f7-d43d7e971a1b.html
Security: CVE-2017-11438

 

07:57 mat 

Really fix the dependencies.

Sponsored by:	Absolight

 

10:23 mat 

Fix pkgname.

Pointy hat:	tz
Sponsored by:	Absolight

 

16:11 sunpoet 

Change RUN_DEPENDS from rubygem-rack-cors to rubygem-rack-cors0

- Bump PORTREVISION for dependency change

 

17:30 sunpoet 

Change RUN_DEPENDS from rubygem-grape to rubygem-grape0

- Bump PORTREVISION for dependency change

 

20:57 sunpoet 

Fix gemspec for rubygem-hipchat 1.6.0 update

- Bump PORTREVISION for package change

 

14:10 tz 

www/gitlab: Update from 9.0.10 to 9.1.7

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.1.7/CHANGELOG.md

Reviewed by: Matthias Fechner <idefix@fechner.net>

 

08:39 tz 

www/gitlab: Unbreak GitLab after Rails-Update

GitLab currently does not start after an update of
Rails to 4.2.9. Patch this, since its working
fine with the new version.

Submitted by: Matthias Fechner <idefix@fechner.net>
MFH:          2017Q3

 

08:56 tz 

www/gitlab: Fix broken patch

A duplication slipped into a patch which breaks the build. Fix it.

Submitted by: Matthias Fechner <idefix@fechner.net>
Reported by:  Remko Lodder <remko@FreeBSD.org>

 

09:16 tz 

www/gitlab: Update from 8.17.6 to 9.0.10

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.0.10/CHANGELOG.md

Reviewed by: Matthias Fechner <idefix@fechner.net>

 

23:42 sunpoet 

Fix gemspec for rubygem-version_sorter 2.2.0 update

- Bump PORTREVISION for package change

 

18:52 sunpoet 

Fix gemspec for rubygem-state_machines-activerecord 0.5.0 update

- Bump PORTREVISION for package change

 

14:08 sunpoet 

Change RUN_DEPENDS from rubygem-gitlab_omniauth-ldap to
rubygem-gitlab_omniauth-ldap1

- Bump PORTREVISION for dependency change

 

14:25 tz 

www/gitlab: unbreak updates via "rake db:migrate"

The file db/schema.rb needs to be owned by user git
in order to be writable by the update process.

Reported by: Matthias Fechner <idefix@fechner.net>

 

08:45 tz 

www/gitlab: remove duplicate rubygem-pg-dependency

Accidently added an dependency to database/rubygem-pg via
patch-Gemfile. Since this dependency is also added by
the PGSQL-option i removed the conflict-causing line
from the patch.

Reported by: Matthias Fechner <idefix@fechner.net>

 

21:50 sunpoet 

Change RUN_DEPENDS from rubygem-deckar01-task_list to
rubygem-deckar01-task_list1

- Bump PORTREVISION for dependency change

 

14:26 jrm 

www/gitlab: Depend on devel/rubygem-oj2

Approved by:	swills (mentor, implicit), tz (comments in D10743)

 

17:16 sunpoet 

Fix gemspec for rubygem-rugged 0.25.1 update

- Bump PORTREVISION for package change

 

16:36 tz 

www/gitlab: Update from 8.16.9 to 8.17.6

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.17.6/CHANGELOG.md

Reviewed by: Matthias Fechner <idefix@fechner.net>

 

18:19 sunpoet 

Change RUN_DEPENDS from rubygem-sidekiq to rubygem-sidekiq4

- Bump PORTREVISION for dependency change

 

15:36 sunpoet 

Fix gemspec for rubygem-gitlab-markup 1.6.0 update

- Bump PORTREVISION for package change

 

11:09 tz 

www/gitlab: Fix wrong permissions for /home/git/repositories

Now the dir is owned by user "git" instead of "root" which
allows GitLab to store data. Before this change every user
need to correct the rights by himself.

 

20:24 sunpoet 

Change RUN_DEPENDS from rubygem-oauth2 to rubygem-oauth212

- Bump PORTREVISION for dependency change

 

17:10 sunpoet 

Change RUN_DEPENDS

- Use rubygem-omniauth13 (~> 1.3.2)
- Use rubygem-omniauth-github11 (~> 1.1.1)
- Bump PORTREVISION for dependency change

 

00:48 sunpoet 

Change RUN_DEPENDS from rubygem-sidekiq-cron to rubygem-sidekiq-cron04

- Bump PORTREVISION for dependency change

 

13:49 tz 

www/gitlab: Update from 8.16.8 to 8.16.9

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.16.9/CHANGELOG.md

Also unbreak it by tighten the requirement of rubygem-rainbow
and relying at rubygem-google-api-client010 instead of updated
rubygem-google-api-client.

Reviewed by: remko, Matthias Fechner <idefix@fechner.net>

 

12:57 sunpoet 

Change RUN_DEPENDS from rubygem-newrelic_rpm to rubygem-newrelic_rpm3

- Bump PORTREVISION for dependency change

 

11:27 tz 

www/gitlab: enable GitLab to start on boot

PR:           208793
Submitted by: Laszlo Karolyi <laszlo@karolyi.hu>, Horst Kapfenberger
<horst.kapfenberger@agoracon.at>

 

14:21 tz 

www/gitlab: Update from 8.15.8 to 8.16.8

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.16.8/CHANGELOG.md

 

13:05 swills 

www/gitlab: use rubygem-health_check22 to avoid runtime problem

 

19:16 sunpoet 

Move www/rubygem-jquery-rails4 to www/rubygem-jquery-rails

- Bump PORTREVISION for dependent ports

 

15:51 sunpoet 

Remove duplicate CATEGORIES

Approved by:	portmgr (blanket)

 

15:13 tz 

www/gitlab: Update from 8.14.9 to 8.15.8

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.15.8/CHANGELOG.md

Also remove CVE patch because its already included in the new version

 

17:48 sunpoet 

Change RUN_DEPENDS from rubygem-select2-rails to rubygem-select2-rails3

- Bump PORTREVISION for dependency change

 

16:40 tz 

www/gitlab: fix wrong detection of running Sidekiq

Sidekiq is detected as "not running" because when checking with "ps" it
does not account for column truncation

PR:           209487
Submitted by: Chris Stankevitz <chris-freebsd-bugs@stankevitz.com>
Reported by:  otacilio.neto@bsd.com.br
Reviewed by:  Matthias Fechner <idefix@fechner.net>

 

02:01 junovitch 

www/gitlab: apply upstream CVE-2017-0882 patch to 8.14.x

Reported by:	Brian Neel <brian@gitlab.com>
Approved by:	ports-secteam (with hat)
Security:	CVE-2017-0882

 

01:57 sunpoet 

Change RUN_DEPENDS from rubygem-u2f to rubygem-u2f0

- Bump PORTREVISION for dependency change

 

20:56 sunpoet 

Change RUN_DEPENDS from rubygem-slack-notifier to rubygem-slack-notifier1

- Bump PORTREVISION for dependency change

 

08:30 tz 

www/gitlab: add public/uploads dir

Without the dir the backup-routine does not work.
This also removes one more error from gitlab:check

Reported by: Chris Stankevitz <chris@stankevitz.com>

 

16:39 tz 

www/gitlab: Add options for selection between PostgreSQL and MySQL support

Reviewed by: remko

 

11:07 tz 

www/gitlab: Update from 8.13.12 to 8.14.9

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.14.9/CHANGELOG.md