8000
  • Update harfbuzz to 15.1.0 by gominimal-pkgmgr-mgr[bot] · Pull Request #1352 · gominimal/pkgs · GitHub
    [go: up one dir, main page]

    Skip to content

    Update harfbuzz to 15.1.0 - #1352

    Open
    gominimal-pkgmgr-mgr[bot] wants to merge 1 commit into
    mainfrom
    update-harfbuzz-15.1.0
    Open

    gominimal-pkgmgr-mgr[bot] wants to merge 1 commit into
    mainfrom
    update-harfbuzz-15.1.0

    Conversation

    @gominimal-pkgmgr-mgr
    Copy link
    Copy Markdown
    Contributor

    Update harfbuzz 15.0.0 → 15.1.0

    Source: github:harfbuzz/harfbuzz:release-asset:operator-pinned
    Release: https://github.com/harfbuzz/harfbuzz/releases/tag/15.1.0
    Changelog: harfbuzz/harfbuzz@15.0.0...15.1.0
    Released: 1 days ago (2026-11-04)

    License

    • Upstream 15.0.0 → 15.1.0: unchanged, license files byte-identical (COPYING)
    • Declared license_spdx: MIT-Modern-Variant agrees with the new release (MIT-Modern-Variant)

    Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

    Components changed

    CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
    Component Old New
    ~ harfbuzz 15.0.0 15.1.0
    ~ harfbuzz-upstream 15.0.0 15.1.0

    Changes

    Old New
    Version 15.0.0 15.1.0
    SHA256 968536e9abd782f0... 0fc7c565443a5f4b...
    Size 20.4 MB 20.5 MB
    Source gs://minimal-staging-archives/harfbuzz-15.0.0.tar.xz gs://minimal-staging-archives/harfbuzz-15.1.0.tar.xz
    • License: MIT-Modern-Variant (source: tarball)

    Upstream digest: ✓ the download matches the sha256 GitHub publishes for release asset harfbuzz-15.1.0.tar.xz.

    🔒 TLS: github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…) · TLSv1_3 · TLS13_AES_128_GCM_SHA256 · X25519 ⇒ release-assets.githubusercontent.com — YR1 → Root YR → ISRG Root X1 (root 96bcec06264976f3…) · TLSv1_3 · TLS13_AES_128_GCM_SHA256 · X25519

    Quality suggestions

    • Missing tests block. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a --version or small round-trip invocation) as part of this PR so future bumps catch regressions. See packages/python/build.ncl for a simple example.

    Created by pkgmgr

    @gominimal-pkgmgr-mgr
    gominimal-pkgmgr-mgr Bot requested a review from a team as a code owner November 6, 2026 16:54
    @coderabbitai
    coderabbitai Bot commented Nov 6, 2026
    Copy link
    Copy Markdown
    Contributor

    Important

    Review skipped

    Bot user detected.

    To trigger a single review, invoke the @coderabbitai review command.

    Run configuration

    You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

    Use the checkbox below for a quick retry:

    • Trigger review
    • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    None yet

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    0 participants

    0