lp:~roguescholar/flatpak/+git/trunk

Author: Simon McVittie
Author Date: 2024-04-19 10:05:35 UTC

NEWS: Retroactively add 1.10.9 release date

The release was prepared under embargo and it wasn't immediately obvious
which day it was going to be released, so I left out the release date
at the time.

Signed-off-by: Simon McVittie <smcv@collabora.com>

Author: Simon McVittie
Author Date: 2024-04-19 10:05:35 UTC

NEWS: Retroactively add 1.12.9 release date

The release was prepared under embargo and it wasn't immediately obvious
which day it was going to be released, so I left out the release date
at the time.

Signed-off-by: Simon McVittie <smcv@collabora.com>

Author: Simon McVittie
Author Date: 2024-04-19 10:05:35 UTC

NEWS: Retroactively add 1.14.6 release date

The release was prepared under embargo and it wasn't immediately obvious
which day it was going to be released, so I left out the release date
at the time.

Signed-off-by: Simon McVittie <smcv@collabora.com>

Author: Simon McVittie
Author Date: 2024-04-19 10:05:35 UTC

NEWS: Retroactively add 1.15.8 release date

The release was prepared under embargo and it wasn't immediately obvious
which day it was going to be released, so I left out the release date
at the time.

Signed-off-by: Simon McVittie <smcv@collabora.com>

Author: Patrick Griffis
Author Date: 2024-04-04 21:41:52 UTC

run: Don't inherit LD_PRELOAD/LD_AUDIT from the host

I don't think this env var makes much sense to pass into the sandbox
for similar reasons to LD_LIBRARY_PATH. Libraries from the host
just aren't relevant.

Users can still pass `--env=LD_PRELOAD=/foo` to use this functionality.

Author: Patrick Griffis
Author Date: 2024-01-08 03:18:01 UTC

Add --show-changelog flag to flatpak-info

This shows the latest changelog entry from the appstream data for
a given app.

Author: Matthias Clasen
Author Date: 2023-05-03 11:35:27 UTC

Validate exported commands a bit

Avoid obvious nonsense.

Author: Patrick Griffis
Author Date: 2023-02-23 20:04:43 UTC

Show subset information on info and remote-info

Author: Patrick
Author Date: 2023-01-08 00:48:28 UTC

Merge branch 'main' into appstreamcli-compose

Author: Simon McVittie
Author Date: 2022-11-17 19:04:51 UTC

meson: Extend timeout for test-oci-registry.sh

This seems to be slower than usual when we're doing a `make distcheck`.

Signed-off-by: Simon McVittie <smcv@collabora.com>

Author: Phaedrus Leeds
Author Date: 2022-07-24 01:10:24 UTC

system-helper: Validate ref arg in RemoveLocalRef method

This patch could be important in case the ref arg was maliciously
crafted to try to convince flatpak-system-helper to delete an arbitrary
file on the filesystem. However, in practice (a) recent versions of
libostree will not accept such a ref name which has e.g. "../" in it
thanks to https://github.com/ostreedev/ostree/pull/1286, and (b) even on
ancient versions of Flatpak that use a version of libostree without the
aforementioned patch, the exploit does not appear to be successful, at
least on Debian 9.

See https://github.com/flatpak/flatpak/security/advisories/GHSA-45jq-5658-v38x

Author: Phaedrus Leeds
Author Date: 2022-07-26 19:27:22 UTC

README: Use new Flatpak logo

See https://github.com/flatpak/flatpak.github.io/issues/537

Author: Phaedrus Leeds
Author Date: 2022-07-26 02:45:02 UTC

app: Use bold_on/bold_off variables for consistency/clarity

Author: Phaedrus Leeds
Author Date: 2022-04-10 03:41:50 UTC

run: Implement fuzzy ref matching and alias support

We've had the feature for a long time that allows you to use a substring
instead of a full app ID in the install and uninstall commands. The only
reason I didn't add it to the run command back then was that I wasn't
sure it was ok to add interactive prompts to flatpak-run (it is often
invoked by other programs rather than users directly). But in fact we
already have a prompt in case there's ambiguity about which branch to
use; this commit just repurposes that to also address ambiguity about
which ref to use.

Long story short, this allows you to do "flatpak run firefox" instead of
"flatpak run org.mozilla.firefox".

As discussed in #4848, we let the user avoid needing to respond to a
prompt every time by letting them save the alias (trust-on-first-use).
The aliases can be added, removed, or viewed with the separate alias
command.

Helps: #1258

Author: Alexander Larsson
Author Date: 2022-06-13 16:32:13 UTC

Bump glib requirement to 2.46 (from 2.44)

Since we switched to libappstream we really have an implicit dependency
on this, as there are no versions of it building with glib earlier
than 2.46.

This isn't dropping a lot of old code, but at least it is more truthful
about our actual dependencies.

Author: Alexander Larsson
Author Date: 2022-06-13 10:54:16 UTC

main: Don't install polkit agent when running in tests, fixing slowness.

In the tests we don't use a systemwide helper anyway, so the polkit
stuff is unnecessary. Also, for some reason this was taking a very
long time for me, causing the tests to be super slow.

Author: Piotr Drąg
Author Date: 2022-02-05 11:56:57 UTC

Update Polish translation

Author: Simon McVittie
Author Date: 2019-04-12 17:24:39 UTC

Use system copy of xdg-dbus-proxy for build-time tests if configured

This follows the same logic as the system bwrap.

Otherwise, build-time tests will fail when we are using a system
xdg-dbus-proxy and not compiling our own (the symptom is that testlibrary
hangs).

Signed-off-by: Simon McVittie <smcv@collabora.com>

Closes: #2823
Approved by: matthiasclasen

(cherry picked from commit 8115489116aa85ec848318782cdb6c49400aaaf9)

Author: Alexander Larsson
Author Date: 2022-01-14 15:14:57 UTC

FlatpakContext: Add new filesystem flag "all" to mean recursive negation

This new flag gets set for overrides with filesystems that have
"!home:all" or "!host:all", or commandline args
"--nofilesystem=home:all" or "--nofilesystem=host:all". Then it
changes the new recursive permission dropping to only affect
filesystems with the flag set.

The regular !home now behaves as it did before the recent change
allowing existing behaviour change. The new syntax for the overrides
file is ignored (except for a warning) by older versions of flatpak.
However, even the warning is unlikely to happen because the :all
overrides are really not useful in app permissions themselves
but rather only in overrides (in file or cli), so they are not
likely to be seen unless you update flatpak and manually use them.

With this change we need to change flatpak-builder to use
--nofilesystem=host:all for more recent versions of flatpak to fix
the security issue.

Author: Patrick Griffis
Author Date: 2021-12-20 22:00:26 UTC

run: Add --no-a11y-filtering arg

This allows bypassing all filtering for the a11y bus. This is only
intended for testing and not regular use which is why it is only
an argument and not a permission.

Author: Phaedrus Leeds
Author Date: 2021-11-19 02:38:22 UTC

doc: Fix build of libflatpak-docs.html

Author: Phaedrus Leeds
Author Date: 2021-11-16 00:13:42 UTC

tests: Update glib.supp for GLib 2.64.6

Author: Phaedrus Leeds
Author Date: 2021-11-13 02:40:03 UTC

CI: Move valgrind to a manual job

It seems a bit overzealous to run this 6 hour job on every single push
to every PR and branch, so make it a manually triggered check.

Author: Phaedrus Leeds
Author Date: 2021-11-08 20:06:47 UTC

ci: Add mechanism for skipping [ci skip]

Now we can add [skip ci] to a commit message to skip CI when it's not
needed, to avoid wasting resources. Thanks
https://github.com/veggiemonk/skip-commit/issues/5

Author: Phaedrus Leeds
Author Date: 2021-10-26 22:19:21 UTC

system-helper: Avoid most polkit prompts for pinning

Currently if the user instructs Flatpak to install a runtime into the
system installation, they are prompted with a polkit dialog saying
"Authentication is required to configure software installation". This is
because we automatically "pin" runtimes that are explicitly installed so
they are not automatically removed. But it is not correct to prompt the
user for authorization, since (a) the runtime install operation itself
is what they initiated, so it's confusing for the prompt to be for
something else, and (b) there are not usually prompts anyway for runtime
install operations when the user is in the privileged group (e.g. sudo),
and (c) the pinning of the runtime is not a particularly security
sensitive configuration option.

This commit shows one way to fix this bug, by avoiding the polkit prompt
in case the user is in the privileged group and in a local active
session, the same conditions used to skip prompts for runtime
installation. However one can argue this is not a great solution as it
still allows the possibility the user would be prompted for this action
in case they don't meet the aforementioned conditions. So I'll propose
another solution as a separate PR.

Unfortunately this is difficult to add a unit test for, since the
system-helper service that runs for the test suite doesn't do polkit
checks; see flatpak_authorize_method_handler()

Fixes #4200

Author: Patrick Griffis
Author Date: 2021-08-11 17:56:40 UTC

Handle GTK themes with . in their name by replacing . with _
Having a . in a theme name currently makes it impossible to package
because extension points use . for separators. Instead we can just
map those to _ and package them under that name.

Author: Alexander Larsson
Author Date: 2021-04-23 09:33:06 UTC

tests: Add test for the flatpak prune implementation

Author: Simon McVittie
Author Date: 2021-03-17 14:05:36 UTC

Revert "flatpak-utils-http: Don’t use GMainLoop"

This reverts commit c1561b1dedfbf98b2efb842ee66165421ab1422b,
which seems to trigger a hang in the
test-oci-registry@system.wrap test-case.

Signed-off-by: Simon McVittie <smcv@collabora.com>

Author: Bastien Nocera
Author Date: 2021-03-03 14:52:35 UTC

app: Fix deprecation warning

The "new way" is supported since at least 2010 (!).

app/parse-datetime.y:302.1-12: warning: deprecated directive: ‘%pure-parser’, use ‘%define api.pure’ [-Wdeprecated]
  302 | %pure-parser
      | ^~~~~~~~~~~~
      | %define api.pure

Author: Bastien Nocera
Author Date: 2021-02-23 12:33:06 UTC

common: Fix Spawn portal method not working with UTF-8 files

When the portal's Spawn method is used with the environment cleared,
it's very likely that the "flatpak run" that ends up being run will be
in an environment without UTF-8 support.

If one of the files or directories we try to expose to the sub-sandbox
contains UTF-8/non-ASCII characters, then "flatpak run" would fail with:
error: Invalid byte sequence in conversion input

This is caused by GOption trying to parse the --filesystem option for
flatpak, as, when using the G_OPTION_ARG_CALLBACK argument type, GOption
will split the option name from its value, and try to convert the value
to UTF-8. Which will fail because there's no UTF-8.

It won't however do that if we tell the option parser that the value is
a filename using G_OPTION_FLAG_FILENAME, so set it.

Author: Phaedrus Leeds
Author Date: 2020-10-08 01:01:09 UTC

Make listing refs work for sideload repos

This commit makes
flatpak_installation_list_remote_refs_sync() work for local URIs
pointing at sideload repos, e.g.
"file:///media/mwleeds/flatpaks/.ostree/repo" where a command "flatpak
create-usb /media/mwleeds/flatpaks ..." was previously run. This is
important because the Endless fork of gnome-software uses that API to
list apps on a USB drive. The API worked before Flatpak 1.7.1 so making
it work again basically involves reverting parts of
336a127f5515f69c7d5c6aa7943076035c59bf84.

This commit also makes the remote-ls command work for file:// URIs to
sideload repos, which is useful behavior for debugging, and is also the
behavior mentioned in this blog post:
https://blogs.gnome.org/mclasen/2018/08/26/about-flatpak-installations/

Author: Phaedrus Leeds
Author Date: 2020-08-24 14:49:26 UTC

app: Remove EOL unused runtimes in update command

In case a runtime becomes unused and then later becomes End-Of-Life, it
is currently not removed. So this commit removes such runtimes in the
update command, as discussed in #2639. A unit test is included.

I am planning to propose to use the FlatpakTransaction API added here in
gnome-software, so that users don't have to use the CLI at all for
runtimes to be cleaned up. KDE Discover already removes unused runtimes
periodically.

Author: Philip Withnall
Author Date: 2020-07-09 08:49:49 UTC

Merge pull request #3731 from flatpak/fix-1.6.x

Fix flatpak-1.6.x branch to contain 1.6.5

Author: Bartłomiej Piotrowski
Author Date: 2020-06-02 09:48:18 UTC

utils: Resolve symlinks in copy_icon()

When app-info contains a symlink ${ID}.png pointing to actual
icon file, copy the target instead of storing invalid symbolic
link.

Author: Abderrahim Kitouni
Author Date: 2020-03-21 19:30:17 UTC

Add a FlatpakProgress object

To avoid the complexities of passing (and chaining) OstreeAsyncProgress
objects around, we only create one just before calling to ostree.
The rest of flatpak only ever uses the new FlatpakProgress object.

Co-authored by: Philip Chimento <philip@endlessm.com>

Author: Alexander Larsson
Author Date: 2020-02-14 10:38:58 UTC

Update pofiles for release

Author: Matthew Leeds
Author Date: 2019-10-20 23:14:40 UTC

Merge pull request #3183 from Virakal/patch-1

Minor documentation typo fix

Author: TingPing
Author Date: 2019-09-24 21:39:18 UTC

WIP: Show EULA metadata at install time

Author: Alexander Larsson
Author Date: 2019-09-19 13:20:15 UTC

Update pofiles for release

Author: Alexander Larsson
Author Date: 2019-09-10 13:57:04 UTC

Handle 'versions' key when finding local related ref

We were only handling the old single-value 'version' key, even though
we handled the 'versions' key when finding remote related refs.

The result of this was that some extensions, such as the 19.08 opengl
default one was installed by default (as it was found as remote related)
yet still removed with --unused (as it was not locally related).

Fixes https://github.com/flatpak/flatpak/issues/3004

Author: Alexander Larsson
Author Date: 2019-09-03 14:06:06 UTC

tests: Add tests for oci registries using labels instead of annotations

Author: Will Thompson
Author Date: 2018-08-22 15:03:11 UTC

Update docs to v1.0.0

Author: Matthew Leeds
Author Date: 2018-05-30 01:51:51 UTC

.gitmodules: Update libglnx URL

Author: Alexander Larsson
Author Date: 2018-01-30 13:49:06 UTC

Update pofiles

Author: Alexander Larsson
Author Date: 2017-10-09 10:44:15 UTC

update pofiles