Subject: Re: bug#52073: remove Google support from GVFS?

From: Mark H Weaver <[email-masked]>
Date: Fri, 31 Dec 2021 17:12:11 -0500

Hi Leo,

Leo Famulari <[email-masked]> writes:

> My experience with WebKitGTK is that the build is quite reliable. That's
> why I pushed the broken update to begin with: it always worked in the
> past.

That might be true of _micro_ version updates of WebKitGTK, but it's
certainly false for non-micro updates.  I thought you would have known
to treat those two kinds of updates differently.

In fact, if you look at the commit log over the last few years, you'll
see that 8 out of the last 10 non-micro updates of WebKitGTK have
required additional changes to the build recipe.

       Mark

commit 3c5e1412e3ef769df8e4826d0aedabaa3aa0d631
Author: Leo Famulari <[email-masked]>
Date:   Tue Mar 30 13:30:28 2021 -0400

    gnu: WebKitGTK: Update to 2.32.0 [fixes CVE-2021-{1788,1844,1871}].
    
    * gnu/packages/webkit.scm (webkitgtk): Update to 2.32.0.
    [arguments]: Add -DENABLE_GAMEPAD=OFF to #:configure-flags.

commit e6b6e834903f001d4f2ae9bf0511bf7953c0f80b
Author: Mark H Weaver <[email-masked]>
Date:   Sun Sep 20 14:41:29 2020 -0400

    gnu: webkitgtk: Update to 2.30.0.
    
    * gnu/packages/webkit.scm (webkitgtk): Update to 2.30.0.
    [arguments]: Add "-DUSE_SYSTEMD=OFF" to the configure flags.

commit 3c9d89b5e2da2731ccc56a4cb745e1868175db79
Author: Leo Famulari <[email-masked]>
Date:   Fri Mar 13 12:32:33 2020 -0400

    gnu: WebKitGTK: Update to 2.28.0 [fixes CVE-2020-10018].
    
    * gnu/packages/webkit.scm (webkitgtk): Update to 2.28.0.

commit 689b44bc3fe50de86c8c8b8c2ac503b2e82d7975
Author: Marius Bakke <[email-masked]>
Date:   Thu Sep 26 16:40:18 2019 +0200

    gnu: WebKitGTK: Update to 2.26.1.
    
    * gnu/packages/webkit.scm (webkitgtk-2.24): Rename to ...
    (webkitgtk-2.26): ... this.  Update to 2.26.1.
    [inputs]: Add BUBBLEWRAP, LIBSECCOMP, LIBWPE, WPEBACKEND-FDO, and XDG-DBUS-PROXY.
    * gnu/packages/gnome.scm (eolie, epiphany)[inputs]: Adjust for changed
    variable name.
    * gnu/packages/web-browsers.scm (next-gtk-webkit)[inputs]: Likewise.

commit 72663b48221668f30b7bdcc502c299757a647156
Author: Marius Bakke <[email-masked]>
Date:   Wed Mar 13 15:00:03 2019 +0100

    gnu: WebKitGTK: Update to 2.24.0.
    
    * gnu/packages/webkit.scm (webkitgtk-2.22): Rename to ...
    (webkitgtk-2.24): ... this.  Update to 2.24.0.
    [inputs]: Add OPENJPEG.
    * gnu/packages/gnome.scm (eolie, epiphany)[inputs]: Adjust accordingly.
    * gnu/packages/web-browsers.scm (next-gtk-webkit)[inputs]: Likewise.

commit 844cc6f876b8dcadf210398e68b3f3f824cb7144
Author: Mark H Weaver <[email-masked]>
Date:   Sat Sep 22 19:17:02 2018 -0400

    gnu: webkitgtk: Add version 2.22.2.
    
    * gnu/packages/webkit.scm (webkitgtk-2.22): New variable.

commit 86c9c0c11819f1e5ec6f821265a0492ddeaf83ee
Author: Tobias Geerinckx-Rice <[email-masked]>
Date:   Wed Mar 14 10:24:08 2018 +0100

    gnu: webkitgtk: Update to 2.20.0.
    
    * gnu/packages/webkit.scm (webkitgtk): Update to 2.20.0.
    [arguments]: (Re-)disable WOFF2 web font support.

commit a54bf725fcb35052120d1111c6e82c951d4d7873
Author: Mark H Weaver <[email-masked]>
Date:   Fri Sep 15 13:10:56 2017 -0400

    gnu: webkitgtk: Update to 2.18.0.
    
    * gnu/packages/webkit.scm (webkitgtk): Update to 2.18.0.
    [arguments]: Add -DUSE_GSTREAMER_GL=OFF to configure-flags.
    [inputs]: Add libtasn1.

commit c38685524956a9451ce254da80f6819be53ead6c
Author: Leo Famulari <[email-masked]>
Date:   Mon Mar 27 12:52:42 2017 -0400

    gnu: webkitgtk: Update to 2.16.0.
    
    WebKitGTK+ 2.16.0 is the first stable release of WebKitGTK+ that uses libgcrypt
    instead of GnuTLS for some cryptographic functions:
    
    <https://bugs.webkit.org/show_bug.cgi?id=163125>
    <http://trac.webkit.org/changeset/208297/webkit>
    
    * gnu/packages/webkit.scm (webkitgtk): Update to 2.16.0.
    [inputs]: Replace gnutls with libgcrypt.

-- 
Disinformation flourishes because many people care deeply about injustice
but very few check the facts.  Ask me about <https://stallmansupport.org>.