community/py3-webauthn/APKBUILD

@@ -2,7 +2,7 @@
 # Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
 pkgname=py3-webauthn
 _pyname=webauthn
-pkgver=2.5.0
+pkgver=2.5.1
 pkgrel=0
 arch="noarch"
 pkgdesc="A Python3 implementation of the WebAuthn API focused on making it easy to leverage the power of WebAuthn."
@@ -40,5 +40,5 @@ package() {
 		.dist/*.whl
 }
 sha512sums="
-11241782a92a3700b834ab0b08d2f855207bf14b322791febdde4e2f2c8307c1ad6527bd0641dc619d02377ae10dbb158171a1c1404931c3c92087854838ad76  py3-webauthn-2.5.0.tar.gz
+1d04ff4163c961df3125385cd876771a6b646d15cd9356d936b343a25aac9af6fb8ff826e4f5b882ae7171c068f7fa098e626f3b3ff9f10c6aeaa0d3d75e210d  py3-webauthn-2.5.1.tar.gz
 "

community/rapidfuzz/APKBUILD

 # Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
 pkgname=rapidfuzz
-pkgver=3.3.1
+pkgver=3.3.2
 pkgrel=0
 pkgdesc="Rapid fuzzy string matching in C++ using the Levenshtein Distance"
 url="https://github.com/maxbachmann/rapidfuzz-cpp"
@@ -40,6 +40,6 @@ package() {
 }
 
 sha512sums="
-c4b34d45b11f71db0cb5ce781b5fe9e81dde7809e9b17aa37138a862afca2b8a15631bf289e592f1fb9f012450c871b2b967353a6f0996783fa59b8ac6521e74  rapidfuzz-cpp-3.3.1.tar.gz
+4befcf9a22e2f478a93fb3e8f6a1b954071c707ee339f2d0a0e0367d24eb35670213b98e48d0d3956f50e4c7554ce326e4dd64470d706afafe4d2252f216ea48  rapidfuzz-cpp-3.3.2.tar.gz
 216c5082498830d42d2eb14d3eba35dd08446008916c920db7b55eaf3dd2358f86a61c238315b85fefecf08b9e902dc4db172f91a8479cfd735e53c7b3e03bf5  cstdint.patch
 "

community/sdl2_image/APKBUILD

 # Contributor: Francesco Colista <fcolista@alpinelinux.org>
 # Maintainer: Francesco Colista <fcolista@alpinelinux.org>
 pkgname=sdl2_image
-pkgver=2.8.2
+pkgver=2.8.5
 pkgrel=0
 pkgdesc="A simple library to load images of various formats as SDL surfaces"
 url="https://github.com/libsdl-org/SDL_image"
@@ -57,5 +57,5 @@ package() {
 }
 
 sha512sums="
-1ec6e7d08bbcd28bba6c972b2e4a11a1da841abef3ffb3d29669b0f5eb0839f39044b0b334c0707274dd51192e081f25bdab97c6710d632422c4ed0274a30f18  sdl2_image-2.8.2.tar.gz
+f8cab0a1c04123941408a6b38345837783d7aed023149506ea827db32d4d755aa746871e37ea744463bc89d96cc0a317e5f3044364c5a7e247e60281d40c9fc6  sdl2_image-2.8.5.tar.gz
 "

community/sdl2_mixer/APKBUILD

 # Contributor: Francesco Colista <fcolista@alpinelinux.org>
 # Maintainer: Francesco Colista <fcolista@alpinelinux.org>
 pkgname=sdl2_mixer
-pkgver=2.8.0
+pkgver=2.8.1
 pkgrel=0
 pkgdesc="A simple multi-channel audio mixer"
 url="https://github.com/libsdl-org/SDL_mixer"
@@ -41,5 +41,5 @@ package() {
 }
 
 sha512sums="
-e4c9a4418725ce019bb62216c8fd484cf04b34e2099af633d4c84e0e558fe6ba1921e791c5dde319266ffe3a1237f887871c819a249a8df7e9440c36fce181da  sdl2_mixer-2.8.0.tar.gz
+653ec1f0af0b749b9ed0acd3bfcaa40e1e1ecf34af3127eb74019502ef42a551de226daef4cc89e6a51715f013e0ba0b1e48ae17d6aeee931271f2d10e82058a  sdl2_mixer-2.8.1.tar.gz
 "

community/staticcheck/APKBUILD

 # Contributor: Clayton Craft <clayton@craftyguy.net>
 # Maintainer: Clayton Craft <clayton@craftyguy.net>
 pkgname=staticcheck
-pkgver=2024.1.1
-pkgrel=3
+pkgver=2025.1
+pkgrel=0
 pkgdesc="advanced Go linter"
 url="https://github.com/dominikh/go-tools"
 arch="all"
@@ -53,5 +53,5 @@ package() {
 }
 
 sha512sums="
-abd32fd81b4993a99c2fedaf349fca6f5edcb47651d7efff5e71e7c3c4b9ed41188061c7228d82796c65efbb5f5aa1498ea86c7476f530e0587c3787fbe9dae2  staticcheck-2024.1.1.tar.gz
+2dbd2dc1c74b771b6e09b9a8b07c5c48cdd6ca6dc52d99afc3f10fdd5ab94e7aec60f52bb6ee4a44323b3a728de437e4adcc7e607f47939e6e4dec17e0e05281  staticcheck-2025.1.tar.gz
 "

community/uv/APKBUILD

 # Maintainer: Andy Postnikov <apostnikov@gmail.com>
 pkgname=uv
-pkgver=0.5.29
+pkgver=0.5.30
 pkgrel=0
 pkgdesc="Extremely fast Python package installer and resolver, written in Rust"
 url="https://github.com/astral-sh/uv"
@@ -66,5 +66,5 @@ py3() {
 }
 
 sha512sums="
-ebcc2f4d25e800fdd864b1aa64ed0c2f7e5ab2f9e4a80e43f7ecc27d4a0fedac1062644bd954e15b39055d562ec2366c089a934fd65bb103cb50e2b5414a6d97  uv-0.5.29.tar.gz
+962dcd6f48ef33ffa75a8a5505f0a779e3362d9b36ac2f2544f5bb715568212dec16e7023be4d3b69b0d53f0d2a43dbfa7cadf2db98872dfdde2fa361d16dec9  uv-0.5.30.tar.gz
 "

community/wlr-randr/APKBUILD

 # Contributor: Michał Polański <michal@polanski.me>
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=wlr-randr
-pkgver=0.4.1
+pkgver=0.5.0
 pkgrel=0
 pkgdesc="Utility to manage outputs of a Wayland compositor"
-url="https://sr.ht/~emersion/wlr-randr/"
+url="https://gitlab.freedesktop.org/emersion/wlr-randr"
 license="MIT"
 arch="all"
 makedepends="meson wayland-dev"
-source="$pkgname-$pkgver.tar.gz::https://git.sr.ht/~emersion/wlr-randr/archive/v$pkgver.tar.gz"
+source="https://gitlab.freedesktop.org/emersion/wlr-randr/-/archive/v$pkgver/wlr-randr-v$pkgver.tar.gz"
 builddir="$srcdir/$pkgname-v$pkgver"
 options="!check" # no test suite
 
@@ -22,5 +22,5 @@ package() {
 }
 
 sha512sums="
-42e58b14b1202bcf2d8b8c544d09aa11f1b7ada2b2796006651564c6f839c1e90a2adddf9a868f3858ea1af64cbd003927337fc1be957acdfa29d63c45a54d08  wlr-randr-0.4.1.tar.gz
+83c6980c4ba917bdaa55f618b4ecdf713639d302b9ab7a7dfdfbefb6e394051cad5589d9aedd8a4576d81edcd7e981be0495ea59a88db70839e2dad58fe310ff  wlr-randr-v0.5.0.tar.gz
 "

community/wt/APKBUILD

 # Contributor: Francesco Colista <fcolista@alpinelinux.org>
 # Maintainer: Francesco Colista <fcolista@alpinelinux.org>
 pkgname=wt
-pkgver=4.11.1
+pkgver=4.11.2
 pkgrel=0
 pkgdesc="C++ library and application server for developing and deploying web applications"
 url="https://www.webtoolkit.eu/"
@@ -55,5 +55,5 @@ doc() {
 }
 
 sha512sums="
-b3afab7327abc7a61ec8963af79bd9b3a23127031416fda4115db74287c130a09d5dd99465c0643e28ef9f2feaabe6ea51a8a22f698ae487243c2ae0e635a412  wt-4.11.1.tar.gz
+e512c88616878b8fa3b992aa9d2f232d994ee6108607af4e5d511a2fecd7ae35cf33a63435a0ff356df715b386f2061731dcfb28c529bc43c901f17787686f34  wt-4.11.2.tar.gz
 "

community/xfconf/APKBUILD

 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=xfconf
 pkgver=4.20.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Hierarchical configuration system for Xfce"
 url="https://xfce.org/"
 arch="all"
@@ -33,6 +33,7 @@ check() {
 
 package() {
 	make DESTDIR="$pkgdir" install
+	rm -r "$pkgdir"/usr/lib/systemd/
 }
 
 sha512sums="

community/xwayland/APKBUILD

 # Contributor: Łukasz Jendrysik <scadu@yandex.com>
 # Maintainer: Simon Zeni <simon@bl4ckb0ne.ca>
 pkgname=xwayland
-pkgver=24.1.4
+pkgver=24.1.5
 pkgrel=0
 pkgdesc="Compact xserver to run under wayland for compatibility"
 url="https://www.x.org/wiki"
@@ -101,6 +101,6 @@ package() {
 }
 
 sha512sums="
-7d3e4fdf67f07f79d8ddefc0077d10f811fe5ab1f919a922b5afc5dd9843eb2e0bc0a8b225555a0886521eb04a993e06a250469d3594d5add34d6412c76c60f8  xwayland-24.1.4.tar.xz
+4c821e62013c2c79edff364c3c5e34c58f9b0e0c411baba23d9ebe3fe1daf8bbb99e56b6041c5cba66a219d9f80c469a5ee1238cef728eda197f19e7bba1e74a  xwayland-24.1.5.tar.xz
 42db6616a6566acedaa0c5dc125435183be0c0da5df4f542bf3857a1905ae4646d5eb311e4e00ec892c845a2dc2069f6e68f5f45ec6c499ea32b8e55d873a0f5  use-libtirpc-nokrb.patch
 "

main/gtest/APKBUILD

 # Maintainer: Francesco Colista <fcolista@alpinelinux.org>
 pkgname=gtest
-pkgver=1.15.2
+pkgver=1.16.0
 pkgrel=0
 pkgdesc="Google Test - C++ testing utility based on the xUnit framework (like JUnit)"
 url="https://github.com/google/googletest"
@@ -44,5 +44,5 @@ src() {
 }
 
 sha512sums="
-9046841044a2bf7edfd96854ad9c44ffae4fcb9fb59a075b367507c0762a98eb32cb6968d46663228272e26321e96f4dd287c95baa22c6af9bad902b8b6ede4e  gtest-1.15.2.tar.gz
+bec8dad2a5abbea8e9e5f0ceedd8c9dbdb8939e9f74785476b0948f21f5db5901018157e78387e106c6717326558d6642fc0e39379c62af57bf1205a9df8a18b  gtest-1.16.0.tar.gz
 "

main/meson/APKBUILD

@@ -3,7 +3,7 @@
 # Maintainer: Francesco Colista <fcolista@alpinelinux.org>
 pkgname=meson
 pkgver=1.6.1
-pkgrel=3
+pkgrel=4
 pkgdesc="Fast and user friendly build system"
 url="https://mesonbuild.com"
 arch="noarch"
@@ -114,5 +114,5 @@ sha512sums="
 b4ca7a3b667db0ad370110abd8b20467b1c74ae7777a068db33f8974602c123881a7130b2340664abb52e36fe5195989a5cc8fa7de6212c37abf5b0900554425  meson-1.6.1.tar.gz
 ff267ae6c6fe9ae6c57506f52735151b08f89eac5733777694f1d949d66b246ec277b91ec578ae31be0ef03b31c87f51616e069ead2e21920155c77ad82de6bd  fix-ninja-output-test.patch
 0bbbf65f56f4feab43b4ec3fbe7d4c64ef9abb563ea114d0b960048319b936dd577e538a762991661a1cb256f32c0da0fef2d3add07730e37a8bbd4ec27dc611  skip-broken-tests.patch
-e8b45c583cf466f40fa95f78c07ad7f7355fdbe2cd53c55cdf204de202864530f16c62d5c8bb4bd4cb92da7692d5db99a86bab71cb9ad37a4141d267964043ae  abuild-meson
+015030aa7fcc658b74a9e58a6bf67070450def0f58fb75c7bba3dbe5ba3556d7d16a4710710ed286e5bb4a7efa90c5e0abbc63b0a8be37f499c0e7862e26d150  abuild-meson
 "

main/meson/abuild-meson

@@ -36,6 +36,10 @@ if [ "$CHOST" != "$CBUILD" ]; then
 	cpu = '$_meson_target_cpu'
 	endian = '$_meson_target_endian'
 	EOF
+	cat > abuild-meson.native <<-EOF
+	[properties]
+	sys_root = '/'
+	EOF
 	unset _meson_target_cpu _meson_target_endian _meson_cpu_family
 fi
 
@@ -61,5 +65,5 @@ exec meson setup \
 		-Db_pie=true \
 		-Dpython.bytecompile=0 \
 		-Dwerror=false \
-		${_meson_crossfile:+--cross-file=$_meson_crossfile} \
+		${_meson_crossfile:+--cross-file=$_meson_crossfile --native-file=abuild-meson.native} \
 		"$@"

main/oniguruma/APKBUILD

 # Contributor: Carlo Landmeter <clandmeter@alpinelinux.org>
 # Maintainer: Francesco Colista <fcolista@alpinelinux.org>
 pkgname=oniguruma
-pkgver=6.9.9
+pkgver=6.9.10
 pkgrel=0
 pkgdesc="a regular expressions library"
 url="https://github.com/kkos/oniguruma"
@@ -42,5 +42,5 @@ package() {
 }
 
 sha512sums="
-7c89247d8504c635687dc61b39b39b5afefa4851b24409a8eab31273f1cbc88f3db89095ae4b135bd034147d2616c2e18fc74887300b89532eedeab75677f437  oniguruma-6.9.9.tar.gz
+60975b876662dec8701cca5d8d4027c0a36b8effe7dd32679395ed473e26b3d6b72d7f6eb63bd4dc96c3774b594e56808ce14f993f127a5d04363232586160e4  oniguruma-6.9.10.tar.gz
 "

main/tiny-cloud/APKBUILD

@@ -3,7 +3,7 @@
 # Maintainer: Jake Buchholz Göktürk <tomalok@gmail.com>
 pkgname=tiny-cloud
 pkgver=3.1.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Tiny Cloud instance bootstrapper"
 url="https://gitlab.alpinelinux.org/alpine/cloud/tiny-cloud"
 arch="noarch"
@@ -13,6 +13,7 @@ depends="e2fsprogs-extra partx sfdisk yx openssh-server"
 provides="tiny-cloud-allclouds=$pkgver-r$pkgrel"
 source="
 	$url/-/archive/$pkgver/tiny-cloud-$pkgver.tar.gz
+	autoinstall.patch
 	tiny-cloud.pre-upgrade
 	tiny-cloud-openrc.pre-upgrade
 	tiny-cloud-aws.post-install
@@ -110,6 +111,7 @@ scaleway() {
 
 sha512sums="
 053f4321d241093cb993df8fcf916aeb03b023ef98564d3a4c3feff36c3a49a58d155570ca0c3d80cab59b06cab8e6d76d4a0345be7245fd890c6d78e54d5e54  tiny-cloud-3.1.0.tar.gz
+fb3cc32b7ba8b42c30351520ac3ed9dffe9844e0ad5042582fabb562a957697390792a7879ab2875f3451835791ef8d864f66ba2bca3bbf5d02ba9f8765cb649  autoinstall.patch
 83217a30e495bcc18ad1a5d744806d499b5bdf929df3f18597216a25f465e5d4764ca66499d221bf5738b83639f1ec80de2a14e4b64aac80d51b285c01f0fc74  tiny-cloud.pre-upgrade
 a2f795c1d9cce1a796cc92711b18459706b6573417d2ef43504c50a65f4808eaf8f8d48a20a4f198ade25c285188659a95d51e5cb34e4c64cf6384459397b850  tiny-cloud-openrc.pre-upgrade
 8fd43cabc3de03cf47d5252ac2642d9c943f042b7a5c96a6691c0523fc75ee114363affedbe108fe8f1c2ef4ef7146563d488b6f7ef89b3a3ac6b4ac355e9d48  tiny-cloud-aws.post-install

main/tiny-cloud/autoinstall.patch

+From f643fad6327c400631558d734bde9da75792c604 Mon Sep 17 00:00:00 2001
+From: Natanael Copa <ncopa@alpinelinux.org>
+Date: Sat, 18 Jan 2025 18:49:45 +0000
+Subject: [PATCH] alpine-config: fix bug when running autoinstall
+
+---
+ lib/tiny-cloud/user-data/alpine-config | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lib/tiny-cloud/user-data/alpine-config b/lib/tiny-cloud/user-data/alpine-config
+index def1b1f..63e10ca 100644
+--- a/lib/tiny-cloud/user-data/alpine-config
++++ b/lib/tiny-cloud/user-data/alpine-config
+@@ -71,7 +71,7 @@ init__userdata_autoinstall() {
+ 		if [ -n "$disk" ]; then
+ 			rm -f "$ETC"/runlevels/*/tiny-cloud*
+ 			$MOCK lbu include /root/.ssh /home
+-			$MOCK ERASE_DISKS=/dev/$disk setup-disk -m sys /dev/$disk
++			ERASE_DISKS=/dev/$disk $MOCK setup-disk -m sys /dev/$disk
+ 			# TODO: make reboot configurable
+ 			$MOCK reboot
+ 		else
+-- 
+GitLab
+

main/vim/APKBUILD

@@ -3,7 +3,7 @@
 # Contributor: Sören Tempel <soeren+alpine@soeren-tempel.net>
 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=vim
-pkgver=9.1.1012
+pkgver=9.1.1105
 pkgrel=0
 pkgdesc="Improved vi-style text editor"
 url="https://www.vim.org/"
@@ -32,6 +32,8 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/vim/vim/archive/refs/tags/v$
 	"
 
 # secfixes:
+#   9.1.1105-r0:
+#     - CVE-2025-24014
 #   9.1.1003-r0:
 #     - CVE-2025-22134
 #   9.1.0936-r0:
@@ -312,6 +314,6 @@ xxd() {
 }
 
 sha512sums="
-d7e0af9663c4940d346f82c1746bc97c221acc6fe440c4085393c978e0c0fd1790396f4dbea57b037e8d2a5722b35423123e822aa0b4c38bee9c74e0aee6d442  vim-9.1.1012.tar.gz
+f109771344afb84ff77a1c616e5dc96456580222552233b935a6c4c13cc04eab474f889d51132ffb78edbe9d76ab50ce1022ef9deafcadf57e4b4f7bbe1ab4d9  vim-9.1.1105.tar.gz
 bb4ac5bd2862754e741e63d7b521fd9e0cb1ac19769b952672928fd26471e9486182cd8a46a7e6f25e5b87759106e642293534c5e90c3c3958308291acb26875  vimrc
 "

testing/code-oss/APKBUILD

 maintainer="lauren n. liberda <lauren@selfisekai.rocks>"
 pkgname=code-oss
-pkgver=1.96.1
+pkgver=1.97.1
 pkgrel=0
 # get this from vscodium
-_productjson=3a9708856a49ec893f044673c547d2f0e54be3d4
+_productjson=c773d683f46a81a6cdb020ded45d95503a9ac934
 pkgdesc="Visual Studio Code (OSS, with VSX)"
 url="https://github.com/microsoft/vscode"
 arch="aarch64 x86_64" # electron
@@ -183,8 +183,8 @@ package() {
 }
 
 sha512sums="
-cc7cf9be17d6dac80aac2f541d918c281bac978c205157ac7dd95f2fba7adf8344920e0773590a39f0caaa1d5452a71d9d7c8dc84d8b59e2a1522b8390e86609  code-oss-1.96.1.tar.gz
-d7127e2696dbba9e275782a96fcb460f89705ed6521e40fa03e1050358a5f2b170468da1170fb4c133d73965a8b06929ba707313e81766d24ed07c2032049487  product-3a9708856a49ec893f044673c547d2f0e54be3d4.json
+0b2222bba50276df07fcea79dfe34232610505c890b519e150b08ab5274c505e698e4e5e9a781050eb112b2ecdb611a69e9c7e84ec2f08c339facb76ee2f88e3  code-oss-1.97.1.tar.gz
+79fc95fd5c482ce1ace5566e0c0cd4445cd078bd6d487e85613fd2f2b9ead8cfabb6acd501ae9738c4f73121f3ff5eb86a44bd35a0e39d8ee07545a9e572d7e9  product-c773d683f46a81a6cdb020ded45d95503a9ac934.json
 cca94a1762eec922b6fc4a93301087588455a82ea0e19733cb1067deec1fc64e05d466613860820d680dd8cf16e2aca30bc11afc84a315de1a9c2cb12854cbea  launcher
 9f36c7fa6f0fd6a516f8e22c47f53013337985e59085bf1ea70165d42a513a92aa2a7a99ef0715e752c7190fd39ba703d405838e61bcfb60cabe47c421781eb4  enable-extensions.patch
 4f10b14aaab71e69652662dea0dd5ba00d996282bc864743210185d93a9b7c54c71942fe1e7cd630abd914e3c770eca6c2110c13fb6a8c5e728c5172d1d0cd9f  no-git.patch

testing/element-desktop/APKBUILD

 # Contributor: lauren n. liberda <lauren@selfisekai.rocks>
 maintainer="lauren n. liberda <lauren@selfisekai.rocks>"
 pkgname=element-desktop
-pkgver=1.11.91
+pkgver=1.11.92
 pkgrel=0
 pkgdesc="Secure and independent communication, connected via Matrix"
 url="https://element.io/"
@@ -155,12 +155,12 @@ package() {
 }
 
 sha512sums="
-bf2b4d06734af3bfdccda848e6a11265b0a3c4f521873321f62f3627cb80678f76308a73429a9ee3e5094770c15f4ebb8585ea1f624d4d8cd8ef824f47b7ceb2  element-desktop-1.11.91.tar.gz
-dacb927f10e6186383c097d4c3e4a027bba5fc01bd7c6a2c6d6b66d9b849e0972b7cf94e95db092eea1452ad01dbd5cd6df7ef6f1a67af29a6c06b5b1c10dcfe  element-web-1.11.91.tar.gz
+23001294f53c7c0900bcd4423a0f216113a99c89dba708aa6e76586a2758d1af3a1ca20d4f6ffac3e6495667cc028f1b5ec243049c35bf16d2143c08e67d5671  element-desktop-1.11.92.tar.gz
+cfa5c0b2c98e72f3fa37b125ba7991afee0449f14b4e530adf49429d86fa6d04333b5e0f3ac5b7bb4da0441d3862c93b237fb2051e2d19892aa6c5c888e6f23e  element-web-1.11.92.tar.gz
 4747893ed3e43d3074e9afe1cdd668a6be0de073d439205fe8c38c5e0f4091cc76e3cd15d98818bea5139add29501d8d07e83c58e9da230a4ce5bb538d388f80  add-alpine-targets.patch
 755b17f7b828eb6920c06a6950ad4e14c32c99d22e9c05fcef7a081b5d2034adb03db3958aa5209c99fb7201f4d888c2383fc9864c5e743dd33f8b5c4925acd7  use-system-headers.patch
 92e69817fdc71f60c5c7dcbd3c7b13428cc18141cf5f27720326390f6817bec85fb1c60f8016b3a8fa275f601b16f646cda12b5e379a349368eef2f801b4de7a  tasje-one-hak.patch
-876d40639305d5258089069a01e218a2f14c32efccc3130f06398e8b4cd63bc740909162954a58ee11b909dc5b3e87c3383d73727aa13aa2d7093c9c63f04057  tasje-no-fuses.patch
+a1399662bdbe5e7256d31f7bdc05070e7009d70113699856b025a1d5ab1d9b8bf1020072a08255d4eddab0874044131dec296f98a91ba5c12ca61948b1d18dbe  tasje-no-fuses.patch
 ec635fde026f7fce8e8cc57960b5b9dcec4418416d4867ed47711422d48f068bb58a3c9ceb7715efc9c177beca3788da6b0babc9b689ea8c0724a0395f2b85f8  no-source-maps.patch.web
 aaf46476bac403aa5204aa265fcf0654fad4c149fd74d0ec4273c051a5549943384cae3cdd62c5b78fdedfed55c11ecceb898b886e44165cbe7e30953a095cf9  use-system-fonts.patch.web
 afc588311dc3b566a754e3e7fe6b37b99a06d47b8bbce0ed9acca8ef308fdab0bd1d41b406199e5cbdd86bdce695ff847cd8668857a235cbdc292ad8b899c063  element-desktop

testing/element-desktop/tasje-no-fuses.patch

@@ -3,57 +3,50 @@ and we can't import them here, since they are in devDependencies, which are unin
 
 --- ./electron-builder.ts.orig
 +++ ./electron-builder.ts
-@@ -1,8 +1,7 @@
- import * as os from "os";
- import * as fs from "fs";
- import * as path from "path";
--import { Arch, Configuration as BaseConfiguration, AfterPackContext } from "electron-builder";
--import { flipFuses, FuseVersion, FuseV1Options } from "@electron/fuses";
+@@ -2,8 +2,7 @@
+ import * as fs from "node:fs";
+ import * as path from "node:path";
+ import * as plist from "plist";
+-import { AfterPackContext, Arch, Configuration as BaseConfiguration, Platform } from "electron-builder";
+-import { computeData } from "app-builder-lib/out/asar/integrity";
 +import { Configuration as BaseConfiguration } from "electron-builder";
+ import { readFile, writeFile } from "node:fs/promises";
  
  /**
-  * This script has different outputs depending on your os platform.
-@@ -54,43 +53,6 @@
- const config: Writable<Configuration> = {
-     appId: "im.riot.app",
-     asarUnpack: "**/*.node",
--    afterPack: async (context: AfterPackContext) => {
--        if (context.electronPlatformName !== "darwin" || context.arch === Arch.universal) {
--            // Burn in electron fuses for proactive security hardening.
--            // On macOS, we only do this for the universal package, as the constituent arm64 and amd64 packages are embedded within.
--            const ext = (<Record<string, string>>{
--                darwin: ".app",
--                win32: ".exe",
--                linux: "",
--            })[context.electronPlatformName];
--
--            let executableName = context.packager.appInfo.productFilename;
--            if (context.electronPlatformName === "linux") {
--                // Linux uses the package name as the executable name
--                executableName = context.packager.appInfo.name;
--            }
--
--            const electronBinaryPath = path.join(context.appOutDir, `${executableName}${ext}`);
--            console.log(`Flipping fuses for: ${electronBinaryPath}`);
+@@ -46,26 +45,6 @@
+     } & BaseConfiguration["deb"];
+ }
+ 
+-async function injectAsarIntegrity(context: AfterPackContext) {
+-    const packager = context.packager;
 -
--            await flipFuses(electronBinaryPath, {
--                version: FuseVersion.V1,
--                resetAdHocDarwinSignature: context.electronPlatformName === "darwin" && context.arch === Arch.universal,
+-    // We only need to re-generate asar on universal Mac builds, due to https://github.com/electron/universal/issues/116
+-    if (packager.platform !== Platform.MAC || context.arch !== Arch.universal) return;
 -
--                [FuseV1Options.EnableCookieEncryption]: true,
--                [FuseV1Options.OnlyLoadAppFromAsar]: true,
+-    const resourcesPath = packager.getResourcesDir(context.appOutDir);
+-    const asarIntegrity = await computeData({
+-        resourcesPath,
+-        resourcesRelativePath: "Resources",
+-        resourcesDestinationPath: resourcesPath,
+-        extraResourceMatchers: [],
+-    });
 -
--                [FuseV1Options.RunAsNode]: false,
--                [FuseV1Options.EnableNodeOptionsEnvironmentVariable]: false,
--                [FuseV1Options.EnableNodeCliInspectArguments]: false,
+-    const plistPath = path.join(resourcesPath, "..", "Info.plist");
+-    const data = plist.parse(await readFile(plistPath, "utf8")) as unknown as Writable<plist.PlistObject>;
+-    data["ElectronAsarIntegrity"] = asarIntegrity as unknown as Writable<plist.PlistValue>;
+-    await writeFile(plistPath, plist.build(data));
+-}
 -
--                // Mac app crashes on arm for us when `LoadBrowserProcessSpecificV8Snapshot` is enabled
--                [FuseV1Options.LoadBrowserProcessSpecificV8Snapshot]: false,
--                // https://github.com/electron/fuses/issues/7
--                [FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: false,
--            });
--        }
+ /**
+  * @type {import('electron-builder').Configuration}
+  * @see https://www.electron.build/configuration/configuration
+@@ -89,9 +68,6 @@
+ 
+         loadBrowserProcessSpecificV8Snapshot: false,
+         enableEmbeddedAsarIntegrityValidation: true,
 -    },
+-    afterPack: async (context: AfterPackContext) => {
+-        await injectAsarIntegrity(context);
+     },
      files: [
          "package.json",
-         "lib/**",