It'a a list of CVE IDs or GHSA IDs which whould be ignored.
In lists we still show them, but at the end and with strike through.
For picking the worst for the tooltip button color we ignore them.
On the security page, of all are ignored, the package is skipped.
In case the version is an empty string it is considered newer by pacman
than for example "r123".
Instead make it optional and handle the None version everywhere.
Fixes#68
It's only relevant for schema changes and downgrades and only
useful for deciding if a version is newer, which website users
rarely need to do.
Let's just hide it by default. It's still part of the package file name
if really needed.
AUR contains dev versions we don't care about and cywin
sometimes uses a different versioning scheme.
Only if there is no matching Arch package consider the other ones
previously the src build types were merged with the repos
they were connected with, so msys-src with msys etc.
Usually when filtering for "mingw64" one doesn't want to know the
build status of "mingw-src", so skip all that and just leak the
build types to the frontend as is.
Up until now we would show a list of packages and providing
packages. That's confusing when you don't scroll down and not
really obvious.
Instead if it's a virtual package show a simple page listing
the providing packages.
And in case a package of that name exists, show the other packages
providing the same name inline ("Provided By")
Instead just use the srcinfo and the packages. In case a package moves between bases
it would look up the old srcpkg and display outdated names.
This is a leftover from when we had no srcinfo data.
This adds the following things:
* the mapping data is now sourced from the package repositories
* cygwin mapping works too (for example see "msys2-runtime")
* packages can be marked internal so they are never linked
to arch or cygwin (for example see "base")
Instead of doing regex and using the extracted package name, just
use the real pkgbase everywhere. This might mean more mappings are needed,
but it's more clear what it changes.
The next step is to move the mapping into the packaging repos.
This is conceptionally similar to a pkgbase, but for groups.
Something like this doesn't really exist on the PKGBUILD level,
but end users can't really work with pkgbase with pacman either,
so for them that doesn't matter.
It still gives the end user the same structure as with packages,
there is a base thing that has multiple instances for each environment,
and searching might be a bit easier.
The UX could be improved, but the basics are there at least.
Fixes#47
Previously only packages which could be added to the repo were green,
now all that successfully built are green. Makes it easier to see
where things are stuck or where manual intervention is needed.
The change in bb4b9967260 broke the package details view since
it defaults the repo filter to mingw64, so clang64 links are broken now.
This now only applies the default for the list.
To avoid mixing things up in the future split up the endpoint logic.
Fixes#55
we need to look at all srcinfos now so we get a complete list of
pending build types.
They get used to filter the build status now, so we need all of them.
This happens after packages get updated and autobuild hasn't run again.
The build status json will still contain old data which we need to filter
out based on the content of the repo.
