kumquat-buildroot/package/ripgrep/ripgrep.mk

################################################################################
#
# ripgrep
#
################################################################################

RIPGREP_VERSION = 14.1.0
RIPGREP_SITE = $(call github,burntsushi,ripgrep,$(RIPGREP_VERSION))
RIPGREP_LICENSE = MIT
RIPGREP_LICENSE_FILES = LICENSE-MIT
RIPGREP_CPE_ID_VENDOR = ripgrep_project

# CVE only impacts ripgrep on Windows
RIPGREP_IGNORE_CVES += CVE-2021-3013

$(eval $(cargo-package))
package/ripgrep: new package Signed-off-by: Sam Voss <sam.voss@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2019-10-03 02:31:46 +02:00			`################################################################################`
			`#`
			`# ripgrep`
			`#`
			`################################################################################`

package/ripgrep: bump to version 14.1.0 Changelog: https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md The patch has been rebased to ripgrep 14.1.0. Signed-off-by: Antoine Coutant <antoine.coutant@smile.fr> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2024-01-11 11:38:19 +01:00			`RIPGREP_VERSION = 14.1.0`
package/ripgrep: new package Signed-off-by: Sam Voss <sam.voss@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2019-10-03 02:31:46 +02:00			`RIPGREP_SITE = $(call github,burntsushi,ripgrep,$(RIPGREP_VERSION))`
			`RIPGREP_LICENSE = MIT`
			`RIPGREP_LICENSE_FILES = LICENSE-MIT`
package/ripgrep: add RIPGREP_CPE_ID_VENDOR cpe:2.3:a:ripgrep_project:ripgrep is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aripgrep_project%3Aripgrep Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2021-07-19 00:07:00 +02:00			`RIPGREP_CPE_ID_VENDOR = ripgrep_project`
package/ripgrep: new package Signed-off-by: Sam Voss <sam.voss@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2019-10-03 02:31:46 +02:00
package/ripgrep: ignore CVE-2021-3013 as Windows only CVE-2021-3013 does not impact any buildroot versions of ripgrep as it is a Windows-only exploit targeting ripgrep versions earlier than 13. It can be safely ignored on our LTS branches. https://nvd.nist.gov/vuln/detail/CVE-2021-3013 Signed-off-by: Sam Voss <sam.voss@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2021-09-30 05:52:49 +02:00			`# CVE only impacts ripgrep on Windows`
			`RIPGREP_IGNORE_CVES += CVE-2021-3013`

package/ripgrep: convert to cargo infrastructure This commit converts the ripgrep package to the cargo infrastructure. This causes the vendoring mechanism to kick in, which changes the contents of the tarball. To avoid a clash on the hash, we change the version of ripgrep to the Git commit hash matching the 13.0.0 tag, so there are no functional changes, but the tarball name is different. Signed-off-by: Patrick Havelange <patrick.havelange@essensium.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-12-19 16:35:22 +01:00			`$(eval $(cargo-package))`