add spanish translation (#4072)

sysmonitor@orcus: Update sv.po (#4073)

Update es.po (#4074)

Add Spanish translation (#4076)

add spanish translation (#4077)

add spanish translation (#4078)

[Cinnamenu@json] Add "uninstall" context menu option. (#4079)

• update version number

• Add "uninstall" context menu option...

...to match option in standard cinnamon menu.

[Cinnamenu@json] Fix search delay bug (#4084)

• update version number

• Fix search delay bug

Updated Hungarian translation (#4083)

• Updated Hungarian translation of radio@driglu4it

• Updated Hungarian translation of weather@mockturtl

• Add Hungarian translation of radio applet

• Add Hungarian translation of app-launcher applet

• Add Hungarian translation of weather applet

add spanish translation (#4081)

[octopussy@centurix] Use URL from settings instead of default (#4082)

When opening the webcam stream or the octoprint page it will use the hardcoded url "octopi.local" even if a different url is set. This PR fixes it.

update es.po (#4094)

Update es.po (#4093)

add es.po (#4089)

add es.po (#4085)

add es.po (#4091)

add es.po (#4086)

add es.po (#4090)

add es.po (#4088)

add es.po (#4087)

doc: Replace occurrence of black list with blocklist

This is a follow-up of 47fabc2366d917e255241c41a6cfc179af372644.

Signed-off-by: Daiki Ueno ueno@gnu.org

gtkdoc: remove dependencies on custom target files

Sadly, the dependencies kwarg does not actually do what it seems to be trying to be used for, here. It is for listing dependency or library objects whose compiler flags should be added to gtkdoc-scangobj.

It will not actually add ninja target dependencies. The similar kwarg in other meson functions (e.g. genmarshal and compile_schemas) that do allow adding target dependencies, is depend_files.

Older versions of meson simply did nothing in an if/elif/elif block where these custom_targets never matched anything, and were thus silently ignored.

Meson 0.61 type-validates the arguments and rejects CustomTarget as invalid:

doc/manual/meson.build:72:8: ERROR: gnome.gtkdoc keyword argument 'dependencies' was of type array[CustomTarget | PkgConfigDependency] but should have been array[Dependency | SharedLibrary | StaticLibrary]

Fixes #406

common: Add assert_ptr_cmp

Signed-off-by: Daiki Ueno ueno@gnu.org

common: Support copying attribute array recursively

This enables p11_attrs_build to build an attribute list with arrays of attributes indicated with CKF_ARRAY_ATTRIBUTE. A couple of new internal functions have been added: p11_attr_copy and p11_attr_clear.

Signed-off-by: Daiki Ueno ueno@gnu.org

Release 0.24.1

Signed-off-by: Daiki Ueno ueno@gnu.org

meson: revert the p11_system_config_modules pkg-config variable

For compatibility reasons, we keep p11_system_config_modules pointing to p11_package_config_modules in the pkg-config file.

Spotted by Debarshi Ray in: https://github.com/p11-glue/p11-kit/pull/377#pullrequestreview-872572645

Signed-off-by: Daiki Ueno ueno@gnu.org

The usage string of p11_tool_desc usages in trust/dump.c should uses "trust dump" p11_tool_desc usages[] = { { 0, "usage: trust dump--filter=" }

Add IBM specific mechanism and attributes

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

Add support for serializing CK_ECDH1_DERIVE_PARAMS mech param

Used by CKM_ECDH1_DERIVE, CKM_IBM_EC_X25519 and CKM_IBM_EC_X448.

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

client: Allow zero part length at C_SignUpdate

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

Fix support of CKA_DERIVE_TEMPLATE

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

Add other SHA variants, also for RSA and EC signatures

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

Add support for missing AES and DES/DES3 mechanisms

They take a 16 byte (AES) or 8 byte (DES/DES3) IV as mechanism parameter.

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

Add support for MAC and HMAC general mechanisms

The take a mechanism parameter of type CK_MAC_GENERAL_PARAMS which is a CK_ULONG.

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

Add support for CKM_DH_PKCS_DERIVE

It takes the the public value of the other party as mechanism parameter.

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

rpc: Handle special cases for buffer and length

When the buffer is not NULL, but the length is zero then treat this as an empty message. Serialize this in a special way so that the server can restore the same situation.

Example: Terminate an operation via C_XxxFinal, but there is no more data for the final part. A call to C_XxxFinal with buffer=NULL and length=0 would be treated as a size query, and would not terminate the operation. So the way to terminate the operation without more data is to specify buffer!=NULL but length=0.

When sending a byte array, and the buffer is NULL, and the length is zero, don't treat this is invalid, but as empty message.

Example: C_XxxUpdate with an empty message.

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

Add support for CKM_AES_CTR

It takes a CK_AES_CTR_PARAMS structure as mechanism parameter.

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

Add support for CKM_AES_GCM

It takes a CK_GCM_PARAMS structure as mechanism parameter.

Signed-off-by: Ingo Franzki ifranzki@linux.ibm.com

#379 Fix support for epoch time 0 in JKS for reproducibility

build: Make sure to append EXEEXT when spawning our own executables

Signed-off-by: Daiki Ueno ueno@gnu.org

Update Swedish translation

Update Catalan translation

its: Sync with appstream

Integrates these commits:

https://github.com/ximion/appstream/commit/e42dd0d071f27d74419b04a52a8388e00777cd88 https://github.com/ximion/appstream/commit/71d134e82752be6f8851c65ba0ce8c312a72214c https://github.com/ximion/appstream/commit/8c939f999ebf82c3bbf5ad179b24fd7478a0f1d0 https://github.com/ximion/appstream/commit/51ab4f32c56f5cdc293ba0512f003542b83713fc

Update Polish translation

Don't emit legacy component type values

Revert "Don't emit legacy component type values"

This reverts commit 3fa624026f608ef8465fb339f86725aaf648e09f.

Fix validation of translated captions when LANG is not C

Fixes https://github.com/hughsie/appstream-glib/issues/422

as-app: Also unwrap description in metainfo files

According to the specification, there is no difference between both kinds of upstream metainfo files.

Fixes #381

Update Brazilian Portuguese translation

Signed-off-by: Rafael Fontenelle rffontenelle@gmail.com

libappstream-builder: Fix file paths in icon tarball

dbd62f6e05 removed the WxH directory from the icon filenames, which were also used as-is for the paths in the icons tarball. However, if width and height are set on the icon, then it has to be inside a size-specific directory. With HiDPI enabled, it did even overwrite the non-HiDPI icon it saved just before because the filenames were the same. Add the subdirectory back in the resource handling code.

Fix extracting relative symlinks

ebdefa2745 tried to fix handling of relative symlinks in archives, but that only addressed targets starting with ".."/. Fix it properly by using asb_utils_sanitise_path only for absolute paths, keep relative paths as-is.

Simplify code for handling absolute symlinks by just prepending the root instead of converting it to a relative link.

Hardlink targets are returned as paths relative to the archive root, so the sanitization code is correct there.

update to spdx 3.16

Add vcs-browser and contribute URL type

trivial: Fix a tiny memory leak on failure

trivial: Be explicit when ignoring return error values

trivial: Fix a tiny memory leak when mirroring screenshots

Update fa.po

trivial: Post branch version bump

Remove the --enable-hidpi option completely

Based on a patch by Fabian Vogt fvogt@suse.de, many thanks.

Port from libsoup to libcurl

The former bumped ABI, and all sorts of crazy happens when you link in libappstream-glib into a process with the 'other' ABI.

It seems the universe has settled on curl as a dep; do the same.

Update Swedish translation

Use python3 style super consistently

Static syntax checker flagged layout_listbox_example.py at: super(Gtk.ListBoxRow, self).init() as: bad-super-call: Bad first argument 'ListBoxRow' given to super()

This got me to check recent python3 situation. https://docs.python.org/3.9/library/functions.html#super https://rhettinger.wordpress.com/2011/05/26/super-considered-super/

After reading this and updating this part of code, I also realized all subclass of Gtk.Window except one in popover_advanced_example.py were not using super() but calling it directly in the subclass's init. Not so nice.

I decided to fix them all for cleaner consistency.

Signed-off-by: Osamu Aoki osamu@debian.org

Fix typo and re-order creation

There was a typo in super() and in fixing that I thought it a good idea to re-order this file to be a little more linear: creating objects and adding them to other objects, rather than creating objects, adding them, and then mutating them after they've been added.

docs: Fix a few typos

There are small typos in:

• examples/spinner_ext_example.py
• examples/treeview_filter_example.py

Fixes:

• Should read positioned rather than positionned.
• Should read milliseconds rather than miliseconds.

CI: Use python 3.9

fix a minor typo

Remove unused button instance

Fix link in popover.txt

Fix link to documentation

Changed pango markup link since the original led to 404

Create dependabot.yml

Update tox.ini

whitelist_externals was replaced by allowlist_externals

Require Jinja2 <3.1.0

Fixes build error: ImportError: cannot import name 'environmentfilter' from 'jinja2'

Bump actions/checkout from 2 to 3

Bumps actions/checkout from 2 to 3.

• Release notes
• Changelog
• Commits

updated-dependencies:

• dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ...

Signed-off-by: dependabot[bot] support@github.com

Bump actions/upload-artifact from 1 to 3

Bumps actions/upload-artifact from 1 to 3.

• Release notes
• Commits

updated-dependencies:

• dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major ...

Signed-off-by: dependabot[bot] support@github.com

Merge pull request #212 from sebp/dependabot/github_actions/actions/checkout-3

Bump actions/checkout from 2 to 3

Merge pull request #213 from sebp/dependabot/github_actions/actions/upload-artifact-3

Bump actions/upload-artifact from 1 to 3

Require Jinja2 <3.1.0

Merge pull request #211 from mark-summerfield/patch-1

Changed pango markup link since the original led to 404

avahi-daemon: fix SIGHUP/SIGUSR1 race condition at startup

We may get signalled to reload / dump data before signal handlers are set up (in run_server()) and instead get killed as these signals default to terminate the process. Instead ignore them until we are ready

Signed-off-by: Peter Korsgaard peter@korsgaard.com

avahi-client: fix resource leak

chroot: fix bogus assignments in assertions

Update Brazilian Portuguese translation

Update Swedish translation

Logic for p2p on tunnels incorrectly requires IFF_MULTICAST (#305)

Signed-off-by: Philip Prindeville philipp@redfish-solutions.com

fix QT3 build

recent commit d1e71b320d96d0f213ecb0885c8313039a09f693 adding QT5 support added a new conditional but failed to actually set the define. This commit adds that to allow successful build when enabling QT3 support

Fix NULL pointer crashes from #175

avahi-daemon is crashing when running "ping .local". The crash is due to failing assertion from NULL pointer. Add missing NULL pointer checks to fix it.

Introduced in #175 - merge commit 8f75a045709a780c8cf92a6a21e9d35b593bdecd

Avoid infinite-loop in avahi-daemon by handling HUP event in client_work

If a client fills the input buffer, client_work() disables the AVAHI_WATCH_IN event, thus preventing the function from executing the read syscall the next times it is called. However, if the client then terminates the connection, the socket file descriptor receives a HUP event, which is not handled, thus the kernel keeps marking the HUP event as occurring. While iterating over the file descriptors that triggered an event, the client file descriptor will keep having the HUP event and the client_work() function is always called with AVAHI_WATCH_HUP but without nothing being done, thus entering an infinite loop.

See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984938

Updated the Romanian Translation

Merge pull request #324 from nokia/fix-175

Fix NULL pointer crashes such as when doing "ping .local.", originially introduced in #175 (CVE-2021-3502)

Closes: #338

Fix some HTTP links to use HTTPS

Update Persian translations

dbus: Use non-deprecated installation path

Quoting from D-Bus 1.14.0 release notes:

Third-party software should install default dbus policies for the system bus into ${datadir}/dbus-1/system.d (this has been supported since dbus 1.10, released in August 2015). Installing default dbus policies in ${sysconfdir}/dbus-1/system.d is now considered to be deprecated.

https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.14.0/NEWS#L45-51

Fix encoding of avahi-common/domain.h to be UTF-8

spotted by lintian:

W: libavahi-common-dev: national-encoding usr/include/avahi-common/domain.h N: N: A file is not valid UTF-8. N: N: Debian has used UTF-8 for many years. Support for national encodings is being phased out. This file probably appears to users N: in mangled characters (also called mojibake). N: N: Packaging control files must be encoded in valid UTF-8. N: N: Please convert the file to UTF-8 using iconv or a similar tool.

Add files via upload

Delete ka.po

Georgian translation

Update LINGUAS

Add files via upload

Update Russian translation

Update Swedish translation

test-portals: Include utils even if libportal is unavailable

We have some very basic test coverage even if libportal isn't used, and that needs setup_dbus_daemon_wrapper().

Signed-off-by: Simon McVittie smcv@debian.org

Update Ukrainian translation

tests: Don't apply Meson's strict TAP parsing for older GLib

In older GLib, we don't have a straightforward way to avoid debug messages going to stdout, which would be tolerated by Autotools' TAP parser but not by Meson's stricter TAP parser.

Signed-off-by: Simon McVittie smcv@debian.org

tests: Include src/glib-backports.h where needed

The tests call g_log_writer_default_set_use_stderr(), but that function isn't available in older GLib.

We have to include this as src/glib-backports.h, because tests/glib-backports.h contains different backports.

Signed-off-by: Simon McVittie smcv@debian.org

glib-backports: Declare stub function as inline

This avoids -Wunused-function warnings in translation units that use glib-backports.h but do not call this particular function.

Signed-off-by: Simon McVittie smcv@collabora.com

gamemode: add Active property

This allows sandboxed apps to tell if any process on the system has enabled Game Mode. Which is useful to modify behavior, like not starting expensive operations.

Fixes https://github.com/flatpak/xdg-desktop-portal/issues/626

buildsystem: Perform checks for non-portable headers in configure.ac and meson.build

This is required to build the code on non-Linux OS like FreeBSD.

document-portal: Do not include non-portable headers unconditionally.

Check for <sys/statfs.h> and <sys/mount.h> presence before including them.

Fixes build on FreeBSD.

xdp-utils: Do not include non-portable headers unconditionally.

Check for <sys/vfs.h> and <sys/mount.h> presence before including them.

Fixes build on FreeBSD.

document-portal: Make the code more portable.

• Check for non-portable header presence before including them.
• Define uncommon error code ENODATA.
• Guard the usage of uncommon flags with appropriate #ifdef.
• Use posix_fallocate on non-Linux platforms.

Fixes build of document-portal/document-portal-fuse.c on FreeBSD.

document-portal: Remove unused header inclusion.

meson: Make flatpak dependency required only on Linux.

meson: Make bwrap program dependency required on Linux only.

If it is not found, do not try to run icon validation in the sandbox.

validate-icon: Use exect() on FreeBSD instead of execvpe().

background: Fix trivial typo

background: Trivial style cleanups

Introduce org.freedesktop.background.Monitor

This is the minimal representation of what a background monitoring service would look like.

The bus name must not be under "org.freedesktop.portal." because otherwise this would accidentally be exposed to sandboxed apps. In fact, we must create an entirely new connection even, to prevent GDBus from exposing the org.freedesktop.background.Monitor interface into org.freedesktop.portal.Desktop accidentally.

Right now, the implementation is stub - we just create the D-Bus object, a side GDBusConnection, export it, and request the org.freedesktop.background.Monitor name. If any of these steps fail, initialization is aborted.

background: Update background apps list

This is just enough to get a background monitoring service. Most of the heavy-lifting is already done by the background portal itself, via the monitoring thread. This commit merely serialized the already up-to-date list of applications into a vardict GVariant, and updates the 'background_apps' property of the background monitor interface.

Related: https://github.com/flatpak/xdg-desktop-portal/issues/899

This completes the Swedish translation.

Add DeploySideloadCollectionID flatpakref/flatpakrepo key

When Flatpak's P2P updates support was replaced with the "sideloading" implementation in 1.7.1, a new server side repo config key "deploy-sideload-collection-id" was added which gets set when you pass "--deploy-sideload-collection-id" to "flatpak build-update-repo", and has the effect of setting "xa.deploy-collection-id" in the repo metadata that is pulled by clients, which itself causes a collection id to be set on the remote for clients using Flatpak >= 1.7.1.

This commit adds an analogous key in flatpakref and flatpakrepo files, so the collection id can be set when the remote is configured, rather than later on when the repo metadata is pulled and acted upon. As before with DeployCollectionID, it has no difference in function compared to DeployCollectionID or CollectionID and the only difference is which Flatpak versions are affected.

It would've been better if this were added in 1.7.1 when the sideload support was added, but alas here we are.

(Also update the docs and unit tests)

build-export: Avoid segfault if Exec line is missing from desktop file

build-export: Explicitly allow empty Exec values in desktop file

build-export: Don't warn on missing Exec= if DBusActivatable=true

The Desktop Entry spec says that Exec= is only required if DBusActivatable= is not set to true, so don't emit a warning when Exec= is missing but not required.

run: Preserve X11 display number instead of redirecting it to :99

Suppose the user's "real" X11 display on the host is Xorg or Xwayland listening on :42, but they also have an Xvfb server listening on :99.

If we change the X11 display number to the arbitrary value :99, and the Flatpak sandbox shares its network namespace with the host, then clients inside the Flatpak sandbox will prefer to connect to the abstract socket @/tmp/.X11-unix/X99 (which is Xvfb), rather than the filesystem-backed socket /tmp/.X11-unix/X99 in the sandbox (which is really /tmp/.X11-unix/X42 on the host, i.e. Xorg or Xwayland).

If they're relying on Xauthority (MIT-MAGIC-COOKIE-1) for access control (as many display managers do), then this will fail, because we gave the sandboxed app access to the cookies for Xorg/Xwayland (rewriting their display number from 42 to 99 as we did so), but Xvfb does not accept those cookies.

If we're relying on xhost +"si:localuser:$(id -nu)" for access control (as gdm does), then the Flatpak app will successfully (!) connect to whatever is on :99, for example Xvfb or Xephyr, which is rarely what anyone wants either.

Resolves: https://github.com/flatpak/flatpak/issues/3357 Signed-off-by: Simon McVittie smcv@collabora.com

enter: Don't overwrite the DISPLAY

Now that we're using the same display number in the sandbox as on the host, we can forget about overwriting it with :99.

Signed-off-by: Simon McVittie smcv@collabora.com

Update German translation

Update Swedish translation

Allow sub-sandboxes to own MPRIS names

We already allow normal apps to own MPRIS names but subsandboxes could not.

This allows them with the same dbus restrictions that they must be prefixed by $app_id.Sandboxed.

This will be used by WebKitGTK.

app: Add -u alias for --user

Save folks a few keystrokes. There is a command which already has a '-u' option, document-export, but it doesn't support --user so there should be no conflict. However '-s' is used by the info command among others, so we can't use that for --system.

exports: Add logging at a finer granularity

This helps to figure out what is going on if the expected paths are not being exported.

The general design principle here is that I've used flatpak_debug2() (which appears in flatpak -v -v but not flatpak -v) for situations which occur under normal circumstances, and g_debug() (which appears in flatpak -v or higher) for situations which are expected to be uncommon.

Signed-off-by: Simon McVittie smcv@collabora.com

Update Ukrainian translation

revokefs: Use FUSE version 3 if possible

Based on a change contributed by Léo Stefanesco; but instead of unconditionally using FUSE 3, leave a fallback code path for FUSE 2 for older distros.

Co-authored-by: Léo Stefanesco leo.lveb@gmail.com Signed-off-by: Simon McVittie smcv@collabora.com

tests: Add valgrind suppression for ostreedev/ostree#2592

This is fixed in v2022.3, but that version missed the boat for Ubuntu 22.04.

Signed-off-by: Simon McVittie smcv@collabora.com

workflows: Build with FUSE 3 on Ubuntu 22.04

This ensures we exercise both code paths.

Signed-off-by: Simon McVittie smcv@collabora.com

Add --socket=gpg-agent

common: Add thread safety on libcurl usage

There can happen a race condition between internal libcurl structure content when two threads set the data structure for the callbacks from two threads, which can cause access of already freed stack-allocated data, resulting in a memory corruption.

Closes https://github.com/flatpak/flatpak/issues/3701

Add a vim modeline and .editorconfig

To make indentation work with less effort. The modeline was copied from libostree with minor modification and the .editorconfig from GLib.

The advantage of having both a modeline and an editorconfig is we can work out of the box on more editor setups, and the modeline allows us to specify the style with a lot more fine grained control.

Prepare v1.14.0

Update pofiles for release

This completes the Swedish translation.

Update Danish translation (#331)

Update Turkish translation (#338)

Gnome-free portals (#345)

• Build the wallpaper portal backend conditionally

This is a first step towards moving gnome-specific panels to their own backend.

• Build the screenshot portal backend conditionally

Another step towards allowing to build a gnome-free xdg-desktop-portal-gtk.

• Build screencast and remote desktop portals conditionall

Another step towards allowing to build a gnome-free xdg-desktop-portal-gtk.

• Build the background portal conditionally

Another step towards allowing to build a gnome-free xdg-desktop-portal-gtk.

• Build the settings portal conditionally

Another step towards allowing to build a gnome-free xdg-desktop-portal-gtk.

• Build the appchooser portal conditionally

Another step towards allowing to build a gnome-free xdg-desktop-portal-gtk.

• Build lockdown portal conditionally

Another step towards allowing to build a gnome-free xdg-desktop-portal-gtk.

• Update NEWS

Co-authored-by: Matthias Clasen mclasen@redhat.com

screencast: Force window icon size (#344)

Some applications do not provide SVG icons, nor a range of icons, only 64x64 or bigger. In these cases, even if the GtkImage is created with the GTK_ICON_SIZE_DND (32px) hint passed, the window icons would be bigger.

Fix that by forcing a 32px pixel size to the GtkImage.

lockdown: Bind disable-microphone to the correct property (#339)

This being bound to disable-sound-output was causing it to not update the disable-microphone property in the lockdown dbus interface and caused the corresponding gsettings setting to be reset every time xdg-desktop-portal-gtk was started.

Add a security policy (#341)

po: update slovak translation (#328)

• po: update slovak translation

• Fix slovak translation

Update Swedish translation (#327)

inhibit: autostart org.gnome.ScreenSaver (#335)

GNOME Shell no longer constantly runs the org.gnome.ScreenSaver service since gnome-shell!1520. Instead, it gets started on demand. This doesn't work if we tell it not to autostart, causing the main codepath to always fail. We wind up using the org.freedesktop.ScreenSaver fallback API instead.

appchooserdialog: Fix warning when there's no "more row" (#329)

This happened trying to open a URI handled by a single application, in this case a bjnb:// URL handled by the BlueJeans Flathub app.

XDP: Updating choices: XDP: Updating choices: com.bluejeans.BlueJeans (xdg-desktop-portal-gtk:691579): Gtk-CRITICAL **: 14:47:05.718: gtk_widget_get_visible: assertion 'GTK_IS_WIDGET (widget)' failed

Added Hindi translation (#351)

• Create hi.po

• Update hi.po

• Update hi.po

• Update hi.po

• Update hi.po

• Update hi.po

• Update hi.po

• Update hi.po

• Update LINGUAS

• Update hi.po

• Update hi.po

configure.ac: Disable most portals by default (#350)

Those portal are now implmented in xdg-desktop-portal-gnome

Added Dutch translation (#348)

• Update LINGUAS

• Create LINGUAS

• Added Dutch translation

filechooser: Avoid losing focus on X11 (#347)

This prevents the new dialog from immediately losing focus when it opens on X11 systems.

Update Brazilian Portuguese translation (#349)

1.10.0

Fix broken translations

Closes #353

Add initial CI

Fix broken link in translation

settings: Provide org.freedesktop.appearance.color-scheme key

See https://github.com/flatpak/xdg-desktop-portal/pull/633#issuecomment-922901502

The equivalent xdg-desktop-portal-gnome change: https://gitlab.gnome.org/GNOME/xdg-desktop-portal-gnome/-/merge_requests/12