upgpkg: jackett 0.22.66-1

Signed-off-by: txtsd <code@ihavea.quest>

3 files changed, 38 insertions, 12 deletions

diff --git a/.SRCINFO b/.SRCINFO
index f32bf12784fa..ce437a5b03dc 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,26 +1,26 @@
 pkgbase = jackett
 	pkgdesc = Use many torrent trackers with software that supports torznab/potato feeds.
-	pkgver = 0.21.2943
+	pkgver = 0.22.66
 	pkgrel = 1
 	url = https://github.com/Jackett/Jackett
 	arch = x86_64
 	arch = aarch64
 	arch = armv7h
 	license = GPL-2.0-or-later
-	makedepends = dotnet-sdk-6.0
-	depends = aspnet-runtime-6.0
+	makedepends = dotnet-sdk-8.0
+	depends = aspnet-runtime-8.0
 	depends = glibc
 	depends = gcc-libs
 	optdepends = flaresolverr: A proxy server to bypass Cloudflare protection
 	options = !strip
 	options = staticlibs
 	options = !debug
-	source = jackett-0.21.2943.tar.gz::https://github.com/Jackett/Jackett/archive/v0.21.2943.tar.gz
+	source = jackett-0.22.66.tar.gz::https://github.com/Jackett/Jackett/archive/v0.22.66.tar.gz
 	source = jackett.service
 	source = jackett.sysusers
 	source = jackett.tmpfiles
-	sha256sums = af7cebca32ae574727da027db0a8a502b9960e4b64eabe665a8f33b76cfb42a6
-	sha256sums = 55e4ec1fdf87c2c7a3cb2bbc105a6d64bbfff489cc288d957f8e465d7f74b7fd
+	sha256sums = ca69506b214f04413814ee091029fa34f5c4bd9fc4915b61ed544b81ddea0a14
+	sha256sums = 41fbd667538c84662757f923b440d8b250ee3819cd333bd5dd561094d4ef5c3c
 	sha256sums = f865c06ffd21a12d37bf05953d9b483819c0f4e43d243a56db33986113fc40e4
 	sha256sums = 64022e15565a609f449090f02d53ee90ef95cffec52ae14f99e4e2132b6cffe1
 
diff --git a/PKGBUILD b/PKGBUILD
index bb4baa07b99e..771e72236518 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -3,17 +3,17 @@
 # Contributor: Donald Webster <fryfrog@gmail.com>
 
 pkgname=jackett
-pkgver=0.21.2943
+pkgver=0.22.66
 pkgrel=1
 pkgdesc='Use many torrent trackers with software that supports torznab/potato feeds.'
 arch=('x86_64' 'aarch64' 'armv7h')
 license=('GPL-2.0-or-later')
 url='https://github.com/Jackett/Jackett'
-depends=('aspnet-runtime-6.0' 'glibc' 'gcc-libs')
+depends=('aspnet-runtime-8.0' 'glibc' 'gcc-libs')
 optdepends=(
   'flaresolverr: A proxy server to bypass Cloudflare protection'
 )
-makedepends=('dotnet-sdk-6.0')
+makedepends=('dotnet-sdk-8.0')
 options=('!strip' 'staticlibs' '!debug')
 
 source=(
@@ -23,8 +23,8 @@ source=(
   'jackett.tmpfiles'
 )
 
-sha256sums=('af7cebca32ae574727da027db0a8a502b9960e4b64eabe665a8f33b76cfb42a6'
-            '55e4ec1fdf87c2c7a3cb2bbc105a6d64bbfff489cc288d957f8e465d7f74b7fd'
+sha256sums=('ca69506b214f04413814ee091029fa34f5c4bd9fc4915b61ed544b81ddea0a14'
+            '41fbd667538c84662757f923b440d8b250ee3819cd333bd5dd561094d4ef5c3c'
             'f865c06ffd21a12d37bf05953d9b483819c0f4e43d243a56db33986113fc40e4'
             '64022e15565a609f449090f02d53ee90ef95cffec52ae14f99e4e2132b6cffe1')
 
@@ -38,7 +38,7 @@ build() {
   esac
 
   export DOTNET_CLI_TELEMETRY_OPTOUT=1
-  dotnet publish src/Jackett.Server -f net6.0 --no-self-contained -r linux-${_CARCH} -c Release -o build/ /p:AssemblyVersion=${pkgver} /p:FileVersion=${pkgver} /p:InformationalVersion=${pkgver} /p:Version=${pkgver}
+  dotnet publish src/Jackett.Server -f net8.0 --no-self-contained -r linux-${_CARCH} -c Release -o build/ /p:AssemblyVersion=${pkgver} /p:FileVersion=${pkgver} /p:InformationalVersion=${pkgver} /p:Version=${pkgver}
   # This is required because dotnet build servers do not terminate even after the parent process does
   dotnet build-server shutdown
 }
diff --git a/jackett.service b/jackett.service
index fd154c4c4962..e3703fce6dec 100644
--- a/jackett.service
+++ b/jackett.service
@@ -13,6 +13,32 @@ Environment=XDG_CONFIG_HOME=/var/lib/jackett
 WorkingDirectory=/usr/lib/jackett
 ExecStart=/usr/lib/jackett/jackett --NoRestart --NoUpdates --DataFolder /var/lib/jackett
 TimeoutStopSec=20
+CapabilityBoundingSet=
+LockPersonality=true
+NoNewPrivileges=true
+PrivateDevices=true
+PrivateNetwork=false
+PrivateTmp=true
+PrivateUsers=true
+ProcSubset=pid
+ProtectClock=true
+ProtectControlGroups=true
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelLogs=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+ProtectProc=invisible
+ProtectSystem=full
+RemoveIPC=true
+RestrictAddressFamilies=AF_INET AF_INET6
+RestrictNamespaces=true
+RestrictRealtime=true
+RestrictSUIDSGID=true
+SocketBindDeny=udp
+SystemCallArchitectures=native
+SystemCallErrorNumber=EPERM
+SystemCallFilter=@basic-io @file-system @io-event @ipc @network-io @process @resources @signal @sync uname
 
 [Install]
 WantedBy=multi-user.target