dajobe / raptor

Redland Raptor RDF syntax library
https://librdf.org/raptor/
Other
156 stars 62 forks source link

Create a new release #48

Closed dvzrv closed 4 months ago

dvzrv commented 2 years ago

Hi! I'm packaging raptor for Arch Linux.

Would it be possible to create a new release for this project? The last one is from 2014 and there are CVEs for which I need to carry patches although they are fixed upstream (here).

Releasing a new version would be great, so that downstreams can rely on a new tarball with these fixes included.

Artturin commented 2 years ago

Cross-compilation of 2.0.15 is broken due to the use of x-config binaries.

i tested 3cca62a33da68143b687c9e486eefc7c7cbb4586 and cross-compilation works well with cmake

tested by applying the following in nixpkgs and then building it with nix build ".#pkgsCross.aarch64-multiplatform.librdf_raptor2"

diff --git a/pkgs/development/libraries/librdf/raptor2.nix b/pkgs/development/libraries/librdf/raptor2.nix
index 65655814685..e290aa2b743 100644
--- a/pkgs/development/libraries/librdf/raptor2.nix
+++ b/pkgs/development/libraries/librdf/raptor2.nix
@@ -1,26 +1,28 @@
-{ lib, stdenv, fetchurl, libxml2, libxslt }:
+{ lib, stdenv, libxml2, libxslt, pkg-config, cmake, fetchFromGitHub, perl, bison, flex, fetchpatch }:

 stdenv.mkDerivation rec {
   pname = "raptor2";
-  version = "2.0.15";
+  version = "unstable-2022-06-06";

-  src = fetchurl {
-    url = "http://download.librdf.org/source/${pname}-${version}.tar.gz";
-    sha256 = "ada7f0ba54787b33485d090d3d2680533520cd4426d2f7fb4782dd4a6a1480ed";
+  src = fetchFromGitHub {
+    owner = "dajobe";
+    repo = "raptor";
+    rev = "3cca62a33da68143b687c9e486eefc7c7cbb4586";
+    sha256 = "sha256-h03IyFH1GHPqajfHBBTb19lCEu+VXzQLGC1wiEGVvgY=";
   };

   patches = [
-    (fetchurl {
-      name = "CVE-2017-18926.patch";
-      url = "https://github.com/dajobe/raptor/commit/590681e546cd9aa18d57dc2ea1858cb734a3863f.patch";
-      sha256 = "1qlpb5rm3j2yi0x6zgdi5apymg5zlvwq3g1zl417gkjrlvxmndgp";
+    # https://github.com/dajobe/raptor/pull/52
+    (fetchpatch {
+      name = "fix-cmake-generated-pc-file";
+      url = "https://github.com/dajobe/raptor/commit/fa1ef9a27d8762f5588ac2e92554a188e73dee9f.diff";
+      sha256 = "sha256-zXIbrYGgC9oTpiD0WUikT4vRdc9b6bsyfnDkwUSlqao=";
     })
   ];

+  nativeBuildInputs = [ pkg-config cmake perl bison flex ];
   buildInputs = [ libxml2 libxslt ];

-  postInstall = "rm -rvf $out/share/gtk-doc";
-
   meta = {
     description = "The RDF Parser Toolkit";
     homepage = "https://librdf.org/raptor";
hughmcmaster commented 2 years ago

Hi @dajobe, it's now been more than seven years since the most recent release.

I know you've been working on a lot of bug fixes and updates. When do you think you'll be able to cut a new release?

Also, with Debian's next freeze coming up in January, it'd be fantastic to have a new version in the archive well before then.

ryandesign commented 4 months ago

2.0.16 was released in 2023.

dajobe commented 4 months ago

Yes, as @ryandesign said, I made a new release.