Package Release Info

webkit2gtk3-soup2-2.50.4-160000.1.1

Update Info: Base Release
Available in Package Hub : 16.0

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

libjavascriptcoregtk-4_0-18
libwebkit2gtk-4_0-37
typelib-1_0-JavaScriptCore-4_0
typelib-1_0-WebKit2-4_0
typelib-1_0-WebKit2WebExtension-4_0
webkit-jsc-4
webkit2gtk-4_0-injected-bundles
webkit2gtk3-soup2-devel
webkit2gtk3-soup2-minibrowser
WebKitGTK-4.0-lang

Change Logs

* Wed Dec 17 2025 mgorse@suse.com
- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.
* Thu Dec 04 2025 mgorse@suse.com
- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.
* Mon Nov 24 2025 mgorse@suse.com
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.
* Thu Nov 20 2025 bjorn.lie@gmail.com
- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.
* Fri Oct 10 2025 bjorn.lie@gmail.com
- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Also pass ggc-min-expand=30 on s390x. Memory has been an issue
  there, at least on SLE.
* Mon Sep 22 2025 mgorse@suse.com
- Also pass ggc-min-expand=30 and disable LTO on arm.
- Update webkit2gtk3-i586-build-fix.patch to correspond to what was
  committed to the upstream branch.
* Sun Sep 21 2025 mgorse@suse.com
- Remove _constraints override for armv6l and armv7l. They were
  less restrictive than the default and look to be unneeded now.
* Thu Sep 18 2025 mgorse@suse.com
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  i586. Needed to avoid running out of memory.
* Wed Sep 17 2025 bjorn.lie@gmail.com
- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.
* Mon Sep 08 2025 mgorse@suse.com
- Disable skia on ppc64le for now. It currently makes the build
  fail.
Version: 2.48.5-160000.1.2
* Tue Aug 05 2025 mgorse@suse.com
- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
* Wed Jul 30 2025 mgorse@suse.com
- Update to version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
* Sun Jun 08 2025 bwiedemann@suse.com
- Replace usage of %jobs for reproducible builds (boo#1237231)
* Wed May 28 2025 bjorn.lie@gmail.com
- Update to version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
* Sun May 18 2025 mgorse@suse.com
- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.
* Wed Apr 09 2025 mgorse@suse.com
- Remove conditionals related to SLE 15. It is unlikely that we
  will sync to SLE 15 again, and this simplifies the spec.
* Sat Apr 05 2025 mgorse@suse.com
- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer < 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.
* Mon Mar 17 2025 dimstar@opensuse.org
- Drop baselibs.conf: no longer build bi-arch flavors of
  libjavascriptcoregtk-4_0-18 and libwebkit2gtk-4_0-37: in
  openSUSE:Factory, the gtk3-soup2 flavor is not built at all,
  which means outside of 3rd-party projects, this change has no
  impact.
* Fri Mar 14 2025 mgorse@suse.com
- Use spiel for speech synthesis, rather than flite. Spiel supports
  multiple back ends and might become the upstream default once it
  is more widely available in Linux distributions.
- Up some version requirements to match the cmake checks in 2.48.0.
- Drop dependency on atk. It is no longer used.
* Fri Mar 14 2025 bjorn.lie@gmail.com
- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Add flite-devel BuildRequires: New dependency.