Package: grunt / 1.0.1-8+deb10u1

Metadata

Package Version Patches format
grunt 1.0.1-8+deb10u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
add root variable.patch | (download)

lib/grunt/task.js | 6 4 + 2 - 0 !
1 file changed, 4 insertions(+), 2 deletions(-)

 [patch 1/2] adding option to define root where to load npm modules
 from

with patch from Harish to load modules from /usr/lib/nodejs by default

reproducible build.patch | (download)

lib/grunt/template.js | 6 5 + 1 - 0 !
1 file changed, 5 insertions(+), 1 deletion(-)

 [patch] use source_date_epoch to render dates in template.

Whilst working on the Reproducible Builds effort [0], we noticed
that grunt can generate non-reproducible output. This is affecting the
reproducibility status other packages (such as jquery-tablesorter) that
set a "pkg.banner" such as:

   <%= grunt.template.today("mm-dd-yyyy")

 [0] https://reproducible-builds.org/

Signed-off-by: Chris Lamb <chris@chris-lamb.co.uk>

adapt gruntfile.patch | (download)

Gruntfile.js | 8 4 + 4 - 0 !
1 file changed, 4 insertions(+), 4 deletions(-)

---
CVE 2020 7729.patch | (download)

lib/grunt/file.js | 13 11 + 2 - 0 !
test/grunt/file_test.js | 7 5 + 2 - 0 !
2 files changed, 16 insertions(+), 4 deletions(-)

 switch to use `safeload` for loading yml files via `file.readyaml`.