Number of commits found XX: 67

Security update to 10.8.5.
This update was blocked as it requires version 2.7.1, 2.7.2 fails which is a
gitlab core bug:
https://gitlab.com/gitlab-org/gitlab-ce/issues/48415

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Security:	b950a83b-789e-11e8-8545-d8cb8abf62dd
Differential Revision:	https://reviews.freebsd.org/D16009

Update www/gitlab to 10.8.4.
Incremental rollouts, plus open source push mirroring
See here for all details:
https://about.gitlab.com/2018/05/22/gitlab-10-8-released/

Reviewed by:	mat, swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D15950

Applied security upgrade to gitlab 10.7.5.
Fixed bug with wrong path for gitlab-workhouse that should fix artifacts
(reported by Felix <mail@felix.flornet.de>). This was fix upstream but is not
included in this version yet:
https://gitlab.com/gitlab-org/gitlab-ce/issues/46763
Update net/rubygem-grpc to 1.11.1 which is required for gitlab 10.7.5.
Sync dep net/rubygem-grpc with gitlab which uses now 1.11.1.
Added gitlab-pages again to dependencies as the new version builds again.

Reported by:	Felix <mail@felix.flornet.de>
Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D15631

Update gitlab to 10.7.3.
For list of changes look here:
https://about.gitlab.com/2018/04/22/gitlab-10-7-released/
Please note that gitlab-pages is temporarily removed and will be added later if
upstream bug is fixed.
To not update to this version if you require gitlab-pages.
The Gemfile.lock is now generated on gitlab startup, so this should help with
Gemfile issues.

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D15314

Update gitlab to version 10.6.4.
For detailed new feature with the major version please check
https://about.gitlab.com/2018/03/22/gitlab-10-6-released/

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D15038

Fix rubygem-default_value_for dependency

- Revert r467193
- Change RUN_DEPENDS from rubygem-default_value_for to
rubygem-default_value_for30
- Bump PORTREVISION for dependency and package change

Requested by:	mfechner

Fix Gemfile for rubygem-default_value_for 3.1.0 update

- Bump PORTREVISION for package change

Update gitlab to version 10.5.6.
For changelog what changed to 10.5 release see here:
https://about.gitlab.com/2018/02/22/gitlab-10-5-released/

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D14963

www/gitlab: Update von 10.4.4 to 10.4.6

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v10.4.4/CHANGELOG.md

Approved by:	mfechner
Security:	CVE-2018-8801
Security:	https://www.vuxml.org/freebsd/dc0c201c-31da-11e8-ac53-d8cb8abf62dd.html

Fix Gemfile for rubygem-doorkeeper-openid_connect 1.3.0 update

- Bump PORTREVISION for package change

www/gitlab: Update from 10.1.6 to 10.4.4

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v10.4.4/CHANGELOG.md

Submitted by: Matthias Fechner <idefix@fechner.net>
Reviewed by:  swills, tz

Fix Gemfile for rubygem-attr_encrypted 3.1.0 update

- Bump PORTREVISION for package change

Fix Gemfile for rubygem-grape-entity 0.7.0 update

- Bump PORTREVISION for package change

www/gitlab: update to 10.1.6

Approved by:	idefix@fechner.net (maintainer, via private email)
Obtained from:	http://gitlab.toco-domains.de/FreeBSD/GitLab/commits/10.1
MFH:		2018Q1
Security:	65fab89f-2231-46db-8541-978f4e87f32a

Fix gitlab issue by creating rubygem-licensee8

PR:		225047
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer)

Fix Gemfile for rubygem-fog-google 1.0.0 update

- Bump PORTREVISION for package change

Fix Gemfile for rubygem-jquery-atwho-rails 1.5.4 update

- Bump PORTREVISION for package change

Fix Gemfile for rubygem-fog-core 2.0.0 update

- Bump PORTREVISION for package change

www/gitlab: fix Gemfile for updated dependencies

PR:		224932
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer)

www/gitlab: fix Gemfile for updated dependencies

PR:		224836
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer)

www/gitlab: Update from 10.1.4 to 10.1.5

Also:
- remove %%RUBY_SUFFIX%% from plist (thanks to swills)
- fix broken dependency to rubygem-pg in Gemfile
- fix broken dependency to rubygem-mysql2 in Gemfile
- Add support for reverse proxies in rc script
- Fix: gitlab starts even if gitlab_enable is not set
- Make default listenAddr configurable

PR:           224232 222896 220126 218388
Submitted by: swills, gdinolt@pacbell.net, max@mober.at, Marian Cerny
<majo-bugs.freebsd.org@cerny.sk>
Reviewed by:  tz
Approved by:  maintainer
Differential Revision:	https://reviews.freebsd.org/D12376

www/gitlab: Fix options and update patches

The last update broke the options and removed
the needed gems from the Gemfile

Also update patches which weren't committed last time

Submitted by: Matthias Fechner <idefix@fechner.net>
Reported by:  remko

www/gitlab: Update from 9.4.7 to 10.1.4

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v10.1.4/CHANGELOG.md

This also fixes some security issues.

Submitted by: Matthias Fechner <idefix@fechner.net>

Fix Gemfile for rubygem-paranoia 2.4.0 and rubygem-redis-namespace 1.6.0 update

- Bump PORTREVISION for package change

Fix Gemfile for rubygem-health_check 2.7.0 update

- Bump PORTREVISION for package change

www/gitlab: Update from 9.3.11 to 9.4.7

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.4.7/CHANGELOG.md

This update also fixes 4 security issues

Reviewed by: Matthias Fechner <idefix@fechner.net>

Fix Gemfile for rubygem-omniauth-shibboleth 1.3.0 update

- Bump PORTREVISION for package change

Fix Gemfile for rubygem-gon 6.2.0 update

- While I'm here, silence patch messages
- Bump PORTREVISION for package change

www/gitlab: Fix options which do the opposite

Currently we have MYSQL and PG option. Since the last change
the MYSQL option installs the PG configuration and vise versa.
This is now fixed.

www/gitlab: Make Gemfile-handling through options easier

Currently MySQL und PostgreSQL entries were removed from Gemfile
via patch and added back through options.

Now we just remove the entries of the option set to off.

This remove some work and pitfalls from the Gemfile-patch.

Thanks to sunpoet for this suggestion.

Reported by: sunpoet

www/gitlab: Update from 9.3.10 to 9.3.11

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.3.11/CHANGELOG.md

This fixes an XSS security issue. The mentioned security issues in
the gems are already fixed by updates of them gems itself.

Security: CVE-2017-5029
Security: CVE-2016-4738
Security:
https://vuxml.FreeBSD.org/freebsd/6a177c87-9933-11e7-93f7-d43d7e971a1b.html

www/gitlab: Update from 9.2.10 to 9.3.10

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.3.10/CHANGELOG.md

We now add full support for gitaly and add the basics for later support
of gitlab-pages.

Reviewed by: Matthias Fechner <idefix@fechner.net>

www/gitlab: Update from 9.1.9 to 9.2.9

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.2.9/CHANGELOG.md

Submitted by: Matthias Fechner <idefix@fechner.net>, tz

www/gitlab: Update from 9.1.7 to 9.1.8

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.1.8/CHANGELOG.md

Security:
https://vuxml.FreeBSD.org/freebsd/92f4191a-6d25-11e7-93f7-d43d7e971a1b.html
Security: CVE-2017-11438

Fix gemspec for rubygem-hipchat 1.6.0 update

- Bump PORTREVISION for package change

www/gitlab: Update from 9.0.10 to 9.1.7

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.1.7/CHANGELOG.md

Reviewed by: Matthias Fechner <idefix@fechner.net>

www/gitlab: Unbreak GitLab after Rails-Update

GitLab currently does not start after an update of
Rails to 4.2.9. Patch this, since its working
fine with the new version.

Submitted by: Matthias Fechner <idefix@fechner.net>
MFH:          2017Q3

www/gitlab: Update from 8.17.6 to 9.0.10

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v9.0.10/CHANGELOG.md

Reviewed by: Matthias Fechner <idefix@fechner.net>

Fix gemspec for rubygem-version_sorter 2.2.0 update

- Bump PORTREVISION for package change

Fix gemspec for rubygem-state_machines-activerecord 0.5.0 update

- Bump PORTREVISION for package change

Fix gemspec for rubygem-omniauth-google-oauth2 0.5.0 update

www/gitlab: remove duplicate rubygem-pg-dependency

Accidently added an dependency to database/rubygem-pg via
patch-Gemfile. Since this dependency is also added by
the PGSQL-option i removed the conflict-causing line
from the patch.

Reported by: Matthias Fechner <idefix@fechner.net>

Fix gemspec for rubygem-rugged 0.25.1 update

- Bump PORTREVISION for package change

www/gitlab: Update from 8.16.9 to 8.17.6

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.17.6/CHANGELOG.md

Reviewed by: Matthias Fechner <idefix@fechner.net>

Fix gemspec for rubygem-gitlab-markup 1.6.0 update

- Bump PORTREVISION for package change

www/gitlab: Update from 8.16.8 to 8.16.9

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.16.9/CHANGELOG.md

Also unbreak it by tighten the requirement of rubygem-rainbow
and relying at rubygem-google-api-client010 instead of updated
rubygem-google-api-client.

Reviewed by: remko, Matthias Fechner <idefix@fechner.net>

www/gitlab: Update from 8.15.8 to 8.16.8

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.16.8/CHANGELOG.md

www/gitlab: Update from 8.14.9 to 8.15.8

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.15.8/CHANGELOG.md

Also remove CVE patch because its already included in the new version

www/gitlab: Add options for selection between PostgreSQL and MySQL support

Reviewed by: remko

www/gitlab: Update from 8.13.12 to 8.14.9

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.14.9/CHANGELOG.md

www/gitlab: Update from 8.12.13 to 8.13.12

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.13.12/CHANGELOG.md

www/gitlab: Update from 8.11.11 to 8.12.13

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.12.13/CHANGELOG

www/gitlab: Unbreak GitLab and fix web editing

Switch to rubygem-jquery-ui-rails5-rails4 and
pull in patch for safer ref updates

PR:           215787
Submitted by: swills

www/gitlab: Unbreak after update of www/rubygem-jquery-rails4

PR:          215505
Reported by: Martin Waschbusch <martin@waschbuesch.de>
Approved by: mentors (implicit)

- Fix gemspec for rubygem-httparty 0.14.0 update
- Bump PORTREVISION for dependency change

- Add LICENSE_FILE [1]
- Fix gemspec for rubygem-grape 0.18.0 update
- Remove .include <bsd.port.options.mk> [1]
- Bump PORTREVISION for package change

Approved by:	portmgr (blanket) [1]

www/gitlab: Update from 8.10.13 to 8.11.11

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.11.11/CHANGELOG

Approved by: mentors (implicit)

www/gitlab: Update from 8.9.6 to 8.10.12

Changes: https://github.com/gitlabhq/gitlabhq/blob/v8.10.12/CHANGELOG

Approved by: junovitch (mentor, implicit)

www/gitlab: Unbreak after update of databases/rubygem-pg

Approved by: junovitch (mentor, implicit)

www/gitlab: Use www/rubygem-turbolinks-classic instead of www/rubygem-turbolinks

This fixes various problems with the issue-pages of GitLab

PR:          213218
Approved by: junovitch (mentor, implicit)

www/gitlab: Unbreak after update of www/rubygem-turbolinks

Approved by: junovitch (mentor, implicit)

www/gitlab: Update from 8.8.7 to 8.9.6

Changes: https://github.com/gitlabhq/gitlabhq/blob/v8.9.6/CHANGELOG

Approved by: junovitch (mentor, implicit)

www/gitlab: update from 8.8.5 to 8.8.7


8.8.7
  - Fix privilege escalation issue with OAuth external users.
  - Ensure references to private repos aren't shown to logged-out users.

8.8.6
  - Fix visibility of snippets when searching.
  - Update omniauth-saml to 1.6.0

Approved by: junovitch (mentor, implicit)
Security:    CVE-2016-5697
MFH:         2016Q3

www/gitlab: Update from 8.7.5 to 8.8.5

Changelog: https://github.com/gitlabhq/gitlabhq/blob/8-8-stable/CHANGELOG

PR:          209903
Approved by: swills (mentor)

www/gitlab: 8.6.6 -> 8.7.0

Changes:
  https://github.com/gitlabhq/gitlabhq/blob/master/CHANGELOG

PR:		209138
Submitted by:	Torsten Zuehlsdorff <ports@toco-domains.de> (maintainer)

www/gitlab: 8.5.5 -> 8.6.5

PR:		208511
Submitted by:	Torsten Zuehlsdorff <ports@toco-domains.de> (maintainer)
Reviewed by:	xmj, miks.mikelsons@gmail.com

New port: www/gitlab

GitLab is version control for your server.

WWW: https://gitlab.com/

Submitted by: Torsten Zuehlsdorff <ports@toco-domains.de>
Reviewed by: Yonas Yanfa <yonas@fizk.net>, girgen, pgollucci, mmoll, miwi, xmj,
swills, amdmi3, sunpoet

Number of commits found XX: 67

18 vulnerabilities affecting 176 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2020-05-28 11:20:48