Log message:
Pullup ticket #5920 - requested by taca
www/drupal8: security fix (remote code execution)

Revisions pulled up:
- www/drupal8/Makefile                                          1.17-1.18
- www/drupal8/PLIST                                             1.14-1.15
- www/drupal8/distinfo                                          1.16-1.17
- www/drupal8/patches/patch-core_lib_Drupal_Core_Extension_ModulesHandler.php deleted

---
   Module Name:    pkgsrc
   Committed By:   wen
   Date:           Sat Feb  9 00:09:54 UTC 2019

   Modified Files:
           pkgsrc/www/drupal8: Makefile PLIST distinfo
   Removed Files:
           pkgsrc/www/drupal8/patches:
               patch-core_lib_Drupal_Core_Extension_ModulesHandler.php

   Log message:
   Update to 8.6.9
   Remove the patch that included in upstream

   Upstream changes:
   8.6.7:
   This is a hotfix release for a regression affecting some Drush installations \ 
that was introduced by the fix for SA-CORE-2019-002. No other fixes are \ 
included.

   8.6.8:
   Changes since 8.6.7

       #2975539 by mondrake, alexpott, marcoscano, desierto: Changing machine \ 
name of image style leads to WSOD when loading widgets that used the old name
       #2859315 by quietone, heddn, jhodgdon: SQL error from profile_fields when \ 
migrating d6 (or d7) to d8 without Profile module
       #2443165 by davidwbarratt, amateescu, HOG, kostyashupenko, yched, Berdir, \ 
andypost, alexpott, tstoeckler, xjm: \ 
Drupal\Core\Entity\EntityInterface\ContentEntityStorageBase::doCreate() assumes \ 
that the bundle is a string
       #2849074 by decafdennis, alexpott, zuuperman, AdamPS, sagesolutions, \ 
tucho, xjm: SiteConfigureForm overrides value from install profile
       #3007716 by Sam152, kevin.dutra, jhedstrom, larowlan: Security update \ 
introduces breaking changes to content moderation
       #2215857 by michielnugter, Lendude, gmercer, tim.plunkett, cferthorney, \ 
marabak, olli, ericmulder1980, TwoD, sanduhrs, stella, dww, nod_: Behaviors get \ 
attached to removed forms
       #3017812 by ibustos, joachim: Language selector is immune to \ 
hook_entity_field_access in entity forms
       #2900883 by larskhansen, GaëlG, kalyansamanta, Chi, tim.plunkett, Gábor \ 
Hojtsy, joachim: Wrong documentation of \ 
Drupal\Component\Plugin\Derivative\DeriverInterface::getDerivativeDefinitions()
       #3027595 by amateescu, pmelab: Incorrect blacklist condition in \ 
WorkspaceManager
       #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, \ 
alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, lauriii, catch, cilefen, \ 
Cottser: [regression] Table Drag handles no longer respond to up/down arrow keys
       Revert "Issue #2725259 by sardara, andrewmacpherson, \ 
claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, \ 
@catch, @cilefen, @Cottser, @lauriii: [regression] Table Drag handles no longer \ 
respond to up/down arrow keys"
       #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, \ 
alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, @catch, @cilefen, \ 
@Cottser, @lauriii: [regression] Table Drag handles no longer respond to up/down \ 
arrow keys
       #2937073 by tim.plunkett, Saviktor, tedbow: Improve robustness of \ 
FieldBlockTest
       #2973713 by quietone, Adita, etecjdo, apmsooner, mikeryan, gnuschichten, \ 
tstoeckler: cache_key source plugin configuration not documented
       #2949555 by quietone, ankitjain28may: Correct the documentation on method \ 
UserMigrationClassTest
       #3025685 by quietone: Add error msg to assertions in MigrateSourceTestBase
       #3026840 by izus: Fix plural typo in workspaces field
       #3024452 by kfritsche, hchonov, alexpott: \ 
DatabaseStorageExpirable:setWithExpireIfNotExists is not respecting expired
       #2999908 by penyaskito: View more link in recipe cards is not fully translated
       #3028819 by alwaysworking: Update username
       #2916021 by d.olaresko, wengerk, Chi, xjm, dawehner, idebr: Update \ 
"Running tests" section in core.api.php
       #2953995 by kjay, starshaped, rachel_norfolk, Vidushi Mehta, cferthorney, \ 
HAL 9000, Eli-T, markconroy, steveparks: Update the Umami Vegan Chocolate \ 
Brownie recipe
       #3028608 by danharper, Eli-T, markconroy, Not Real: Umami - favicon
       #2940027 by jmsosso: Add change record to @deprecated for AccountInterface
       #2995150 by msankhala, tim.plunkett: Command examples in \ 
core/tests/README.md are confusing and not executable
       #3024184 by seanB, andrewmacpherson, Kristen Pol: Make the tabbing order \ 
match the visual reading order in MediaLibraryWidget
       #2668416 by Krzysztof Domański, wheatpenny, Lendude, alexpott: Wrong \ 
assert in NodeTitleTest
       #2981870 by Lendude, alexpott: Duplicate BrokenSetUpTest for BrowserTestBase
       #2809513 by Lendude, brentgees: Convert AJAX part of \ 
\Drupal\responsive_image\Tests\ResponsiveImageFieldUiTest to JavascriptTestBase \ 
and the rest to BrowserTestBase
       #3027574 by tuutti: SqlContentEntityStorage no longer update entities \ 
with certain (id) fields
       #3026043 by Berdir: ConfigEntityBase::__sleep() serializes plugin \ 
instances if they were not previously initialized
       #3021395 by quietone, alexpott: \ 
MigrateDrupalTestBase::migrateContent(['translations') does not migrate \ 
translations
       Revert "Issue #3003238 by Sam152, amateescu, Berdir: \ 
EntityStorageException: Default revision can not be deleted in \ 
content_moderation_entity_revision_delete()"
       #2987418 by quietone, Kristen Pol: Rename MigrateUpgrade tests
       #3003238 by Sam152, amateescu, Berdir: EntityStorageException: Default \ 
revision can not be deleted in content_moderation_entity_revision_delete()
       Merged 8.6.7.
       Merged 8.6.6.
       #3015992 by Krzysztof Domański, alexpott, larowlan: Not affecting \ 
spacing in PhpTransliterationTest
       #2998769 by kiamlaluno, quietone, kkalaskar: @see directive used in the \ 
wrong place outputs the wrong HTML markup
       #3000677 by catch, Shane Birley, featherbelly, alexpott, larowlan: Fatal \ 
error after upgrade to 8.6x [due to regression in extension system]
       #2955457 by pfrenssen, Chewie, unrealauk, alexpott, Pol: ConfigFactory \ 
static cache gets polluted with data from config overrides
       #3020142 by mglaman, tim.plunkett: Test module no_transitions_css has \ 
invalid hook_page_attachments
       #3007973 by tim.plunkett, lukasss, xopoc, bnjmnm, stompersly: Layout \ 
builder prevents the rendering of extra fields (like Links) on pages not using \ 
Layout Builder
       #3024259 by Pol, alexpott: [PHP 7.3] Fix \ 
EnvironmentTest::providerTestCheckMemoryLimit() notice
       #3023747 by mikelutz, heddn: D6 profile migrations assume stubs, which fail
       #2978922 by brathbone, philipnorton42, msankhala, hardikpandya, alexpott, \ 
siliconmeadow: Improve batch_process() documentation
       #2845975 by quietone, Jo Fitzgerald, aleevas, maxocub, Gábor Hojtsy: \ 
Migrate Drupal 6 user profile field value option translations
       #2701829 by alexpott, andypost, Soul88, Graber, Eduardo Morales, \ 
dawehner, pingwin4eg, catch, Berdir, jibran, httang12: Extension objects should \ 
not implement \Serializable
       #2693727 by mikelutz, sanduhrs, CalebD, ajlib, Lendude, tstoeckler, \ 
catch: Limiting options for exposed Language filters causes errors and doesn't \ 
work for special languages

   8.6.9:
   Changes since 8.6.8:

       #2215857 followup by gaydamaka, timmillwood, alexpott, lauriii: \ 
Regression on Internet Explorer 11
       #3031128 by alexpott, TrevorBradley, indigoxela, catch, cilefen, \ 
larowlan, jibran: Update from 8.6.7 to 8.6.8 warnings - \ 
Drupal\Core\Extension\Extension has no unserializer
       Revert "Issue #2924201 by tim.plunkett, tedbow, larowlan, xjm, \ 
jibran, Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can \ 
be added to HEAD"
       #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: \ 
Resolve random failure in LayoutBuilderTest so that it can be added to HEAD

---
   Module Name:    pkgsrc
   Committed By:   taca
   Date:           Sun Feb 24 16:31:39 UTC 2019

   Modified Files:
           pkgsrc/www/drupal8: Makefile PLIST distinfo

   Log message:
   www/drupal8: update to 8.6.10

   Drupal 8.6.10 (2019-02-20)

   Maintenance and security release of the Drupal 8 series.

   This release fixes security vulnerabilities. Sites are urged to upgrade
   immediately after reading the security announcement and notes below:

   * Drupal core - Remote code execution - SA-CORE-2019-003

   Sites on 8.5.x or earlier should update immediately to Drupal 8.5.11 instead,
   and plan to update to the latest 8.6.x release before May 2019 (when 8.7.0 is
   released and 8.5.x security coverage ends).

   Important update information

   For site owners

   * In addition to the above fix, this release includes the fix for #3031740:
     Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via
     update_fix_compatibility() to prevent Drush 8 issues for sites updating
     directly from an earlier security release.

   * update.php must be run after updating to ensure changes from the patch take
     effect.

   * No changes have been made to the .htaccess, web.config, robots.txt or
     default settings.php files in this release, so upgrading custom versions of
     those files is not necessary if your site is already on the previous
     release.

   For module developers

   Some contributed module tests may need to be updated if they extend core's
   test suite, due to a minor API change in a test base class.

Log message:
Pullup ticket #5895 - requested by taca
www/drupal8: security fix

Revisions pulled up:
- www/drupal8/Makefile                                          1.14-1.16
- www/drupal8/PLIST                                             1.12-1.13
- www/drupal8/distinfo                                          1.13-1.15
- www/drupal8/patches/patch-core_lib_Drupal_Core_Extension_ModulesHandler.php 1.1

---
   Module Name:    pkgsrc
   Committed By:   wen
   Date:           Fri Jan  4 08:17:37 UTC 2019

   Modified Files:
           pkgsrc/www/drupal8: Makefile PLIST distinfo

   Log message:
   Update to 8.6.5

   Upstream changes:
   Changes since 8.6.4

       #3023402 by alexpott: \Drupal\Tests\Component\Datetime\DateTimePlusTest \ 
fails on latest PHP7.3 build
       #3001997 by Krzysztof Domańskii, scott_euser, alexpott: Transliteration \ 
a string containing an unknown character (e.g. 0x80) is not valid
       #3018942 by welly, alexpott, jibran, Krzysztof Domańskii, floydm: Domain \ 
URL language detection - InvalidArgumentException: The user-entered string must \ 
begin with a '/', '?', or '#'
       #3020902 by Berdir, alexpott: PostgresqlDateSql fails to serialize
       Revert "Issue #2986725 by Mile23, devitate, alexpott: doctrine \ 
common 2.9 has moved reflection"
       #3022183 by wengerk, benjifisher: Fix \ 
BlockContentAccessHandlerTest::providerTestAccess wrong coverage by early return
       #2984072 by vijaycs85, Lendude, ApacheEx, dawehner: System: Convert \ 
ErrorHandlerTest to phpunit
       #3019706 by hchonov, alexpott, sheanhoxie, jibran, dawehner: Functional \ 
JS Tests are broken if XDEBUG_CONFIG is set as an env variable
       Revert "Issue #3019706 by hchonov, jibran: Functional JS Tests are \ 
broken if XDEBUG_CONFIG is set as an env variable"
       #3021204 by maxocub: Remove maxocub from Migrate maintainers
       #3019706 by hchonov, jibran: Functional JS Tests are broken if \ 
XDEBUG_CONFIG is set as an env variable
       #2986725 by Mile23, devitate, alexpott: doctrine common 2.9 has moved \ 
reflection
       #2939908 by kjay, steveparks, spitzialist, cferthorney, danharper, Eli-T: \ 
Add an article to Umami - Dairy-free chocolate
       #3007439 by tim.plunkett, Wim Leers, xopoc: Layout builder renders Book \ 
navigation block on non-book pages
       #2927768 by justinlevi, Lendude, pritish.kumar, Wim Leers, dawehner: \ 
Update RestRegisterUserTest to use the ResourceTestBase base class instead of \ 
the deprecated RESTTestBase
       #3020550 by catch: Passing commands as a string to Process is deprecated \ 
in Symfony 4
       #3020579 by catch: TypeError: Argument 3 passed to \ 
Symfony\Component\HttpKernel\Event\FilterResponseEvent::__construct() must be of \ 
the type integer, string given [Symfony 4]
       #2618606 by dawehner, rbayliss: Update.php - Reverse proxy settings not used
       #2865344 by mpdonadio, Lendude, mbovan, organicwire, alexpott, jibran, \ 
jhedstrom, bobemoe, Berdir, larowlan: Exposed date filters 'empty' and 'not \ 
empty' are broken
       #2974274 by mitrpaka, RumyanaRuseva, joachim: exception message for \ 
unrecognized source IDs in lookupDestinationIds() should have more detail
       #2809305 by Upchuk, Pavan B S, Jo Fitzgerald, tim.plunkett, Berdir: Block \ 
Context assignment form element shows even if no options are available
       #3018774 by xjm: hook_post_update_NAME() docs do not explain batching/ \ 
parameter
       #3018539 by phenaproxima, rodrigoaguilera, alexpott: Media types cannot \ 
be created in the UI without JavaScript
       #3018764 by Wim Leers: One test case in MediaUiFunctionalTest is not \ 
actually tested due to a duplicate key
       #2998462 by AndyF, Baysaa, Siavash, tim.plunkett, millionleaves, \ 
fatmarker: Error adding Content Type Selection criteria or Context
       #3016501 by govind.maloo, andrewmacpherson, markconroy: Writing style - \ 
Umami should be capitalised when it is used as a proper noun in English
       #2916595 by phenaproxima, AdamPS, Wim Leers: File element discards \ 
attributes if #multiple
       #2883260 by kiamlaluno, yogeshmpawar, msankhala, benjifisher, alexpott, \ 
bdlangton: Replace the schema example with one actually used from a module
       #2883553 by govind.maloo, msankhala, seanB, Berdir, xjm, alexpott: \ 
Obsolete argument for hasPermission in node_node_access()
       #3016011 by mikelutz, quietone, alexpott: Reroll all migrate dump files
       #3017753 by mxr576, alexpott: MemoryBackend should validate the passed cids

---
   Module Name:    pkgsrc
   Committed By:   prlw1
   Date:           Wed Jan  9 11:56:17 UTC 2019

   Modified Files:
           pkgsrc/www/drupal8: Makefile distinfo
   Added Files:
           pkgsrc/www/drupal8/patches:
               patch-core_lib_Drupal_Core_Extension_ModulesHandler.php

   Log message:
   drupal8 fix for:

   Drupal\Core\Extension\Exception\UnknownExtensionException: The module \ 
standard does not exist. in Drupal\Core\Extension\ExtensionList->get() (line \ 
257 of /usr/pkg/share/drupal/core/lib/Drupal/Core/Extension/ExtensionList.php)

   e.g. when trying to put the site in maintenance mode.

---
   Module Name:    pkgsrc
   Committed By:   taca
   Date:           Sat Jan 19 07:33:55 UTC 2019

   Modified Files:
           pkgsrc/www/drupal8: Makefile PLIST distinfo

   Log message:
   www/drupal8: update to 8.6.6

   This is a hotfix release for a regression affecting some Drush installations
   that was introduced by the fix for SA-CORE-2019-002.  No other fixes are
   included.