mgaadvisories/tmpl, branch 0.34

Change default CVE year in new advisories to 2026

2025-12-01T21:32:10+00:00

Escape text when writing HTML (mga#17478)

2025-09-10T03:50:36+00:00

Include source=arch in the JSON purl parameter

2025-03-22T18:37:53+00:00

This identifies the packages as source packages, which is the only type
we supply in advisories.  This is done in the same way as Debian, Ubuntu
and Alpine (at least) and indicates that the package is not the binary
package that is usually installed by users.

Remove a couple of unneeded spaces in vulns.json

2025-02-25T22:12:38+00:00

This file grows unbounded with all vulnerabilities so reducing its size
even by a little can be valuable.

template: fix encoding i18n text in JSON advisories

2025-02-18T00:10:18+00:00

The default JSON encoding assumed the input was Latin-1, not the UTF-8
it is.

Change default CVE year in new advisories to 2025

2024-12-06T22:38:27+00:00

Sort all hash keys in templates

2024-12-06T22:38:27+00:00

This results in deterministic output, so multiple runs will produce the
same output.

Show how to get the OSV format advisories on the infos page

2024-04-17T03:30:01+00:00

Add the modified field to the JSON bugs index

2024-04-17T03:13:33+00:00

This brings it in line with the vulnerabilities index.

Get the last modified date of advisories from SVN

2024-04-16T17:58:32+00:00

The modification date helps track if an advisory was changed after
initial publication. This is especially important for OSV users who need
the modification date in the vulns.json index to determine whether an
existing advisory was updated so they can download the update.  Also,
keep "ref" (pointing to bug number) in all advisories, not just the TODO
ones.