guix/gnu at 6c71c8dc4a5140d6182e59ba806c532a4ae4f3c5 - guix

mirror of https://git.savannah.gnu.org/git/guix.git synced 2026-04-20 01:00:30 +02:00

Files

Nicolas Graves 6c71c8dc4a gnu: subversion: Add package and rename former to subversion/pinned.

Subversion currently has CVEs. IMHO, it's unsafe to carry them around
in a profile. However, updating subversion potential leads to a lot of
rebuilds and I don't want to tackle this right now.

As for other packages, the way forward is to add a variant of the
package only used for svn-fetch, here subversion/pinned.

* gnu/packages/version-control.scm (subversion): Update to 1.14.5.
(subversion/pinned): Inherit from subversion, but build the exact same
derivation as the previous subversion variable.

* guix/svn-download.scm (subversion-package): Use subversion/pinned.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

2025-08-31 12:21:09 +02:00