10:01 mfechner 

Security related update to 0.14.0.
Changelog:
https://github.com/apache/thrift/blob/master/CHANGES.md

In the changelog I cannot find the information that this includes a security
related fix.
Neither in CVE database:
https://www.cvedetails.com/product/38295/Apache-Thrift.html?vendor_id=45

But gitlab mentions it that it updates to version 0.14.0 to mitigate security
concerns:
https://about.gitlab.com/releases/2021/03/04/security-release-gitlab-13-9-2-released/
This update is therefor required for the gitlab-ce security update to 13.9.2.

Changed build system to cmake, this fixed problems if openssl from ports is
used.
It also improves the build performance by factor of CPUs available.
Cmake also seems to be the recommended build system.

 

09:25 mfechner 

Update thrift ports to 0.13.0 which is required for gitlab-ce upgrade.

PR:		253804
Approved by:	maintainer timeout

 

20:40 lx 

Update thrift ports to 0.11.0.

PR:		225798
Approved by:	maintainer timeout

 

16:24 amdmi3 

- Fix plist
- Add NO_ARCH

PR:		203767

 

10:40 bapt 

Cleanup plist

 

19:34 amdmi3 

- Stagify
- Fix plist

 

16:22 scheidell 

- Update to 0.9.0

PR:		ports172810

 

16:31 scheidell 

- new port Node.js bindings for the Apache Thrift RPC system

PR:             ports/163779
Approved by:    gabor(mentor)