diff --git a/.gitignore b/.gitignore index 6e08104..896757f 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,2 @@ -/nodemon-v*-bundled.tar.gz +/nodemon-v2.0.3-bundled.tar.gz +/nodemon-v3.0.1-bundled.tar.gz diff --git a/0001-CVE-2024-4068-fix.patch b/0001-CVE-2024-4068-fix.patch deleted file mode 100644 index db163f6..0000000 --- a/0001-CVE-2024-4068-fix.patch +++ /dev/null @@ -1,38 +0,0 @@ -From 1dfe8b9208dade21baad8344d6e9847eecb5837d Mon Sep 17 00:00:00 2001 -From: Aaron Moat <2937187+AaronMoat@users.noreply.github.com> -Date: Tue, 21 May 2024 17:32:41 +1000 -Subject: [PATCH] Lower defaultLength to 10000 - ---- - README.md | 2 +- - lib/constants.js | 2 +- - 3 files changed, 3 insertions(+), 3 deletions(-) - - **Description**: Limit the length of the input string. Useful when the input string is generated or your application allows users to pass a string, et cetera. - -diff --git a/README.md b/README.md -index 6b94046..f59dd60 100644 ---- node_modules/braces/README.md -+++ node_modules/braces/README.md -@@ -178,7 +178,7 @@ console.log(braces.expand('a{b}c')); - - **Type**: `Number` - --**Default**: `65,536` -+**Default**: `10,000` - - **Description**: Limit the length of the input string. Useful when the input string is generated or your application allows users to pass a string, et cetera. - -diff --git a/lib/constants.js b/lib/constants.js -index a937943..2bb3b88 100644 ---- node_modules/braces/lib/constants.js -+++ node_modules/braces/lib/constants.js -@@ -1,7 +1,7 @@ - 'use strict'; - - module.exports = { -- MAX_LENGTH: 1024 * 64, -+ MAX_LENGTH: 10000, - - // Digits - CHAR_0: '0', /* 0 */ diff --git a/nodejs-nodemon.spec b/nodejs-nodemon.spec index d3d2bc6..47b2b77 100644 --- a/nodejs-nodemon.spec +++ b/nodejs-nodemon.spec @@ -5,17 +5,13 @@ %global enable_tests 0 Name: nodejs-%{npm_name} -Version: 3.1.11 +Version: 3.0.1 Release: %autorelease Summary: Simple monitor script for use during development of a node.js app -License: ISC AND MIT +License: MIT URL: https://github.com/remy/nodemon Source0: %{npm_name}-v%{version}-bundled.tar.gz -# Patch in the fix for unlimited resource allocation of dependency -# Source: https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff -Patch: 0001-CVE-2024-4068-fix.patch - BuildRequires: nodejs-devel BuildRequires: nodejs-packaging BuildRequires: npm @@ -45,7 +41,7 @@ on the command line when you run your script. %prep %setup -q -n %{npm_name}-%{version} -%patch -P 0 + %build # nothing to do diff --git a/sources b/sources index 7a6baf9..e8a077e 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (nodemon-v3.1.11-bundled.tar.gz) = 77a02847c266654c3cb4f49acc74235aa277c7dc786770097790e2f2c5addc4a4db79c23dbcbf9e5938f01b26ad79cb8cf001e76bf51fa28fc927125e8a3e9a8 +SHA512 (nodemon-v3.0.1-bundled.tar.gz) = 945d7f3a1aa66f6d050da5e9e0eab702058b0fb4e75b4d48e3677b5f159c33f1a3974e7b48e5bc858a5959fffc0df29ef3a5dd5646ab574eec38fa350b64823c