Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package wolfictl for openSUSE:Factory checked in at 2025-07-24 18:47:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/wolfictl (Old) and /work/SRC/openSUSE:Factory/.wolfictl.new.13279 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "wolfictl" Thu Jul 24 18:47:28 2025 rev:7 rq:1295503 version:0.38.5 Changes: -------- --- /work/SRC/openSUSE:Factory/wolfictl/wolfictl.changes 2025-07-18 16:00:38.107744934 +0200 +++ /work/SRC/openSUSE:Factory/.wolfictl.new.13279/wolfictl.changes 2025-07-24 18:49:56.124700411 +0200 @@ -1,0 +2,31 @@ +Thu Jul 24 09:26:21 UTC 2025 - Johannes Kastl <[email protected]> + +- update to 0.38.5: + * test(linter): reduce error messages ambiguity by @konradzapalowicz + in #1686 + * Stop considering runtime deps for build order by @jonjohnsonjr in + #1676 + * build(deps): bump chainguard-dev/actions from 1.4.5 to 1.4.6 by + @dependabot[bot] in #1688 + * build(deps): bump the chainguard group with 2 updates by + @dependabot[bot] in #1687 + * build(deps): bump github.com/anchore/grype from 0.95.0 to 0.96.1 + by @dependabot[bot] in #1691 + +------------------------------------------------------------------- +Thu Jul 24 08:33:52 UTC 2025 - Johannes Kastl <[email protected]> + +- Update to version 0.38.4: + * build(deps): bump github.com/anchore/grype from 0.95.0 to + 0.96.1 + * build(deps): bump the chainguard group with 2 updates (#1687) + * build(deps): bump chainguard-dev/actions from 1.4.5 to 1.4.6 + (#1688) + * test(linter): reduce error messages ambiguity + * build(deps): bump chainguard.dev/melange in the chainguard + group (#1684) + * build(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 + (#1685) + * Stop considering runtime deps for build order + +------------------------------------------------------------------- Old: ---- wolfictl-0.38.3.obscpio New: ---- wolfictl-0.38.5.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ wolfictl.spec ++++++ --- /var/tmp/diff_new_pack.g0xrI5/_old 2025-07-24 18:49:57.456755578 +0200 +++ /var/tmp/diff_new_pack.g0xrI5/_new 2025-07-24 18:49:57.456755578 +0200 @@ -17,7 +17,7 @@ Name: wolfictl -Version: 0.38.3 +Version: 0.38.5 Release: 0 Summary: A CLI used to work with the Wolfi OSS project License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.g0xrI5/_old 2025-07-24 18:49:57.488756904 +0200 +++ /var/tmp/diff_new_pack.g0xrI5/_new 2025-07-24 18:49:57.492757069 +0200 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="exclude">.git</param> <param name="revision">main</param> - <param name="versionformat">v0.38.3</param> + <param name="versionformat">v0.38.5</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.g0xrI5/_old 2025-07-24 18:49:57.516758064 +0200 +++ /var/tmp/diff_new_pack.g0xrI5/_new 2025-07-24 18:49:57.520758229 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/wolfi-dev/wolfictl</param> - <param name="changesrevision">a9dc05146cbe92420016bdffe78bf5e1a0b26faf</param></service></servicedata> + <param name="changesrevision">7bb44802e073710ce7172c7011cd361b28f767a2</param></service></servicedata> (No newline at EOF) ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/wolfictl/vendor.tar.gz /work/SRC/openSUSE:Factory/.wolfictl.new.13279/vendor.tar.gz differ: char 94, line 1 ++++++ wolfictl-0.38.3.obscpio -> wolfictl-0.38.5.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/wolfictl-0.38.3/go.mod new/wolfictl-0.38.5/go.mod --- old/wolfictl-0.38.3/go.mod 2025-07-17 17:57:54.000000000 +0200 +++ new/wolfictl-0.38.5/go.mod 2025-07-22 18:44:27.000000000 +0200 @@ -11,15 +11,15 @@ replace modernc.org/sqlite v1.33.0 => modernc.org/sqlite v1.32.0 require ( - chainguard.dev/apko v0.29.7 - chainguard.dev/melange v0.29.6 + chainguard.dev/apko v0.29.8 + chainguard.dev/melange v0.29.7 cloud.google.com/go/storage v1.55.0 github.com/adrg/xdg v0.5.3 - github.com/anchore/grype v0.95.0 - github.com/anchore/stereoscope v0.1.6 - github.com/anchore/syft v1.28.0 + github.com/anchore/grype v0.96.1 + github.com/anchore/stereoscope v0.1.7-0.20250716200927-94c6f92877d4 + github.com/anchore/syft v1.29.0 github.com/chainguard-dev/clog v1.7.0 - github.com/chainguard-dev/yam v0.2.24 + github.com/chainguard-dev/yam v0.2.25 github.com/charmbracelet/bubbles v0.21.0 github.com/charmbracelet/bubbletea v1.3.6 github.com/charmbracelet/lipgloss v1.1.1-0.20250319133953-166f707985bc @@ -75,7 +75,7 @@ require ( cel.dev/expr v0.23.1 // indirect chainguard.dev/go-grpc-kit v0.17.11 // indirect - chainguard.dev/sdk v0.1.36 // indirect + chainguard.dev/sdk v0.1.37 // indirect cloud.google.com/go v0.121.1 // indirect cloud.google.com/go/auth v0.16.2 // indirect cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect @@ -128,7 +128,7 @@ github.com/bitnami/go-version v0.0.0-20250131085805-b1f57a8634ef // indirect github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb // indirect github.com/bmatcuk/doublestar/v2 v2.0.4 // indirect - github.com/bmatcuk/doublestar/v4 v4.8.1 // indirect + github.com/bmatcuk/doublestar/v4 v4.9.0 // indirect github.com/bodgit/plumbing v1.3.0 // indirect github.com/bodgit/sevenzip v1.6.0 // indirect github.com/bodgit/windows v1.0.1 // indirect @@ -187,7 +187,7 @@ github.com/go-logr/logr v1.4.3 // indirect github.com/go-logr/stdr v1.2.2 // indirect github.com/go-restruct/restruct v1.2.0-alpha // indirect - github.com/go-viper/mapstructure/v2 v2.3.0 // indirect + github.com/go-viper/mapstructure/v2 v2.4.0 // indirect github.com/goccy/go-yaml v1.18.0 // indirect github.com/gogo/protobuf v1.3.2 // indirect github.com/gohugoio/hashstructure v0.5.0 // indirect @@ -213,7 +213,7 @@ github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/hashicorp/go-safetemp v1.0.0 // indirect github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect - github.com/hashicorp/hcl/v2 v2.23.0 // indirect + github.com/hashicorp/hcl/v2 v2.24.0 // indirect github.com/huandu/xstrings v1.5.0 // indirect github.com/iancoleman/strcase v0.3.0 // indirect github.com/ijt/goparsify v0.0.0-20221203142333-3a5276334b8d // indirect @@ -321,7 +321,7 @@ github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 // indirect github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect github.com/yookoala/realpath v1.0.0 // indirect - github.com/zclconf/go-cty v1.14.0 // indirect + github.com/zclconf/go-cty v1.16.3 // indirect github.com/zealic/xignore v0.3.3 // indirect github.com/zeebo/errs v1.4.0 // indirect gitlab.alpinelinux.org/alpine/go v0.10.1 // indirect diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/wolfictl-0.38.3/go.sum new/wolfictl-0.38.5/go.sum --- old/wolfictl-0.38.3/go.sum 2025-07-17 17:57:54.000000000 +0200 +++ new/wolfictl-0.38.5/go.sum 2025-07-22 18:44:27.000000000 +0200 @@ -1,13 +1,13 @@ cel.dev/expr v0.23.1 h1:K4KOtPCJQjVggkARsjG9RWXP6O4R73aHeJMa/dmCQQg= cel.dev/expr v0.23.1/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw= -chainguard.dev/apko v0.29.7 h1:ms7nvwXTpCIHxa9f1RMBKPziwihmka0EMgqSQ9FTLCo= -chainguard.dev/apko v0.29.7/go.mod h1:8MTY5N3RVNPUl6QBQVcl67GhMoB8aJN7nLZveDyYnpA= +chainguard.dev/apko v0.29.8 h1:ftwCPJmCRWLI73VHrqs3o2RCTFxyuWZj0f36EwkPJEE= +chainguard.dev/apko v0.29.8/go.mod h1:duwNM0y4AtN2YNH4u5z+hgjnfuiTl+rAMzjOKwBkyMw= chainguard.dev/go-grpc-kit v0.17.11 h1:m4ZL2yg6sSrdPA593qVh9KHTZ+XOmLwqv3Jt5vT0FuU= chainguard.dev/go-grpc-kit v0.17.11/go.mod h1:aYlrvAscMZBtVIA7bykUWfbjhL2fDoUCECHvopC2xWY= -chainguard.dev/melange v0.29.6 h1:hqU58CEIBMKFc/suMiiq31CK32azIvO149dqxm0+J3o= -chainguard.dev/melange v0.29.6/go.mod h1:Hhx4iT34+aHjcLWSJ1cUY/RyERveFpg5X2cMRrhUYSA= -chainguard.dev/sdk v0.1.36 h1:YzxE7ZccR32spQ3i8boN6eDEYlvhV17r8fdpI9vdOgE= -chainguard.dev/sdk v0.1.36/go.mod h1:4HOnG9fVNC9ruzkJLMWWUNM1iVxxBL+bKqj0STERbcs= +chainguard.dev/melange v0.29.7 h1:kk59GB8Gedo0M/4g/nKNeWPcsIT9aMagKyyOXHS3rOA= +chainguard.dev/melange v0.29.7/go.mod h1:r97jcKYDvkE35cEqogC1MNV+Yy99u1vqhcJvbZx3KEg= +chainguard.dev/sdk v0.1.37 h1:4hZ2enarpA/FZ1JMXE3EOlpzd18LmdWZ7UScwdSlrSs= +chainguard.dev/sdk v0.1.37/go.mod h1:4HOnG9fVNC9ruzkJLMWWUNM1iVxxBL+bKqj0STERbcs= cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= cloud.google.com/go v0.38.0/go.mod h1:990N+gfupTy94rShfmMCWGDn0LpTmnzTp2qbd1dvSRU= @@ -718,14 +718,14 @@ github.com/anchore/go-testutils v0.0.0-20200925183923-d5f45b0d3c04/go.mod h1:6dK64g27Qi1qGQZ67gFmBFvEHScy0/C8qhQhNe5B5pQ= github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4 h1:rmZG77uXgE+o2gozGEBoUMpX27lsku+xrMwlmBZJtbg= github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4/go.mod h1:Bkc+JYWjMCF8OyZ340IMSIi2Ebf3uwByOk6ho4wne1E= -github.com/anchore/grype v0.95.0 h1:ymxXCRPmKCcv/ENStmrmmnPSIGV98UPuYDHp0rudeLk= -github.com/anchore/grype v0.95.0/go.mod h1:zDtlzpsDYrHYi1PbkpG5YAlA8UMuMYwQukKwPfOUNRU= +github.com/anchore/grype v0.96.1 h1:GT9f/kfqVGpNosOgE1fJ6y17V5h2oo9gJzlJoJgsFlU= +github.com/anchore/grype v0.96.1/go.mod h1:MvhNC1H9G6+3JfD/e0BUSCvIDq0ATc5MM2ZQQ8mddV4= github.com/anchore/packageurl-go v0.1.1-0.20250220190351-d62adb6e1115 h1:ZyRCmiEjnoGJZ1+Ah0ZZ/mKKqNhGcUZBl0s7PTTDzvY= github.com/anchore/packageurl-go v0.1.1-0.20250220190351-d62adb6e1115/go.mod h1:KoYIv7tdP5+CC9VGkeZV4/vGCKsY55VvoG+5dadg4YI= -github.com/anchore/stereoscope v0.1.6 h1:DxaPHugD9EndPxOaIMaEYjHJJURjKNaHzD1NyQUUmdU= -github.com/anchore/stereoscope v0.1.6/go.mod h1:ejAlYkAb/cRvSMlxQlrG2dMruqQpcJAh4w2Fu02FEYQ= -github.com/anchore/syft v1.28.0 h1:uLdCvWNb2btvCyfIawWOsXD238v6eDTaz5RTfS2lMqA= -github.com/anchore/syft v1.28.0/go.mod h1:jGpfAy5lRvOUrOxWAfbbu9t3TK8VwJpAAJHz6HFQofw= +github.com/anchore/stereoscope v0.1.7-0.20250716200927-94c6f92877d4 h1:5UGwBBUAK8i06gDA5JD74vT3qcz4lR7BfLXudpD5y8w= +github.com/anchore/stereoscope v0.1.7-0.20250716200927-94c6f92877d4/go.mod h1:ejAlYkAb/cRvSMlxQlrG2dMruqQpcJAh4w2Fu02FEYQ= +github.com/anchore/syft v1.29.0 h1:zQqajGHCX4vO2uaybjdSXL8q3uxXepo1s7ySIK+i5v4= +github.com/anchore/syft v1.29.0/go.mod h1:nXCGVo6kikMi74cXrvYlSSbv/zP8mR4PuMwpUn0vSZ4= github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883/go.mod h1:rCTlJbsFo29Kk6CurOXKm700vrz8f0KW0JNfpkRJY/8= github.com/andybalholm/brotli v1.0.4/go.mod h1:fO7iG3H7G2nSZ7m0zPUDn85XEX2GTukHGRSepvi9Eig= github.com/andybalholm/brotli v1.1.2-0.20250424173009-453214e765f3 h1:8PmGpDEZl9yDpcdEr6Odf23feCxK3LNUNMxjXg41pZQ= @@ -772,8 +772,8 @@ github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb/go.mod h1:PkYb9DJNAwrSvRx5DYA+gUcOIgTGVMNkfSCbZM8cWpI= github.com/bmatcuk/doublestar/v2 v2.0.4 h1:6I6oUiT/sU27eE2OFcWqBhL1SwjyvQuOssxT4a1yidI= github.com/bmatcuk/doublestar/v2 v2.0.4/go.mod h1:QMmcs3H2AUQICWhfzLXz+IYln8lRQmTZRptLie8RgRw= -github.com/bmatcuk/doublestar/v4 v4.8.1 h1:54Bopc5c2cAvhLRAzqOGCYHYyhcDHsFF4wWIR5wKP38= -github.com/bmatcuk/doublestar/v4 v4.8.1/go.mod h1:xBQ8jztBU6kakFMg+8WGxn0c6z1fTSPVIjEY1Wr7jzc= +github.com/bmatcuk/doublestar/v4 v4.9.0 h1:DBvuZxjdKkRP/dr4GVV4w2fnmrk5Hxc90T51LZjv0JA= +github.com/bmatcuk/doublestar/v4 v4.9.0/go.mod h1:xBQ8jztBU6kakFMg+8WGxn0c6z1fTSPVIjEY1Wr7jzc= github.com/bodgit/plumbing v1.3.0 h1:pf9Itz1JOQgn7vEOE7v7nlEfBykYqvUYioC61TwWCFU= github.com/bodgit/plumbing v1.3.0/go.mod h1:JOTb4XiRu5xfnmdnDJo6GmSbSbtSyufrsyZFByMtKEs= github.com/bodgit/sevenzip v1.6.0 h1:a4R0Wu6/P1o1pP/3VV++aEOcyeBxeO/xE2Y9NSTrr6A= @@ -801,8 +801,8 @@ github.com/chainguard-dev/clog v1.7.0/go.mod h1:4+WFhRMsGH79etYXY3plYdp+tCz/KCkU8fAr0HoaPvs= github.com/chainguard-dev/go-pkgconfig v0.0.0-20240404163941-6351b37b2a10 h1:XR2vgQC024I9/boh9r1ihVv8Z14+pbvWqXeYMCnZJpc= github.com/chainguard-dev/go-pkgconfig v0.0.0-20240404163941-6351b37b2a10/go.mod h1:1p6+MesLcjKeON5BRWa7I87mvAY0QmKjgginIM3w6BI= -github.com/chainguard-dev/yam v0.2.24 h1:eJMEg09EvA7wgn13YjUr5i+wVKOLLh+wkCLVWMpKnMU= -github.com/chainguard-dev/yam v0.2.24/go.mod h1:FBsSbqX1ryE3iOVhxgDGi4tKi835l27xoH8dYWKa4XM= +github.com/chainguard-dev/yam v0.2.25 h1:Rm4Rcs8dj9yn1gFZWwECPI4uNG3cJRMGghBwkhG//Wg= +github.com/chainguard-dev/yam v0.2.25/go.mod h1:FBsSbqX1ryE3iOVhxgDGi4tKi835l27xoH8dYWKa4XM= github.com/charmbracelet/bubbles v0.21.0 h1:9TdC97SdRVg/1aaXNVWfFH3nnLAwOXr8Fn6u6mfQdFs= github.com/charmbracelet/bubbles v0.21.0/go.mod h1:HF+v6QUR4HkEpz62dx7ym2xc71/KBHg+zKwJtMw+qtg= github.com/charmbracelet/bubbletea v1.3.6 h1:VkHIxPJQeDt0aFJIsVxw8BQdh/F/L2KKZGsK6et5taU= @@ -1052,8 +1052,8 @@ github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY= github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U= github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE= -github.com/go-viper/mapstructure/v2 v2.3.0 h1:27XbWsHIqhbdR5TIC911OfYvgSaW93HM+dX7970Q7jk= -github.com/go-viper/mapstructure/v2 v2.3.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM= +github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs= +github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM= github.com/gobwas/httphead v0.1.0/go.mod h1:O/RXo79gxV8G+RqlR/otEwx4Q36zl9rqC5u12GKvMCM= github.com/gobwas/pool v0.2.1/go.mod h1:q8bcK0KcYlCgd9e7WYLm9LpyS+YeLd8JVDW6WezmKEw= github.com/gobwas/ws v1.2.1/go.mod h1:hRKAFb8wOxFROYNsT1bqfWnhX+b5MFeJM9r2ZSwg/KY= @@ -1259,8 +1259,8 @@ github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k= github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM= github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ= -github.com/hashicorp/hcl/v2 v2.23.0 h1:Fphj1/gCylPxHutVSEOf2fBOh1VE4AuLV7+kbJf3qos= -github.com/hashicorp/hcl/v2 v2.23.0/go.mod h1:62ZYHrXgPoX8xBnzl8QzbWq4dyDsDtfCRgIq1rbJEvA= +github.com/hashicorp/hcl/v2 v2.24.0 h1:2QJdZ454DSsYGoaE6QheQZjtKZSUs9Nh2izTWiwQxvE= +github.com/hashicorp/hcl/v2 v2.24.0/go.mod h1:oGoO1FIQYfn/AgyOhlg9qLC6/nOJPX3qGbkZpYAcqfM= github.com/hashicorp/logutils v1.0.0/go.mod h1:QIAnNjmIWmVIIkWDTG1z5v++HQmx9WQRO+LraFDTW64= github.com/hashicorp/mdns v1.0.1/go.mod h1:4gW7WsVCke5TE7EPeYliwHlRUyBtfCwuFwuMg2DmyNY= github.com/hashicorp/mdns v1.0.4/go.mod h1:mtBihi+LeNXGtG8L9dX59gAEa12BDtBQSp4v/YAJqrc= @@ -1731,8 +1731,8 @@ github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k= github.com/yuin/goldmark v1.4.1/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k= github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= -github.com/zclconf/go-cty v1.14.0 h1:/Xrd39K7DXbHzlisFP9c4pHao4yyf+/Ug9LEz+Y/yhc= -github.com/zclconf/go-cty v1.14.0/go.mod h1:VvMs5i0vgZdhYawQNq5kePSpLAoz8u1xvZgrPIxfnZE= +github.com/zclconf/go-cty v1.16.3 h1:osr++gw2T61A8KVYHoQiFbFd1Lh3JOCXc/jFLJXKTxk= +github.com/zclconf/go-cty v1.16.3/go.mod h1:VvMs5i0vgZdhYawQNq5kePSpLAoz8u1xvZgrPIxfnZE= github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940 h1:4r45xpDWB6ZMSMNJFMOjqrGHynW3DIBuR2H9j0ug+Mo= github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940/go.mod h1:CmBdvvj3nqzfzJ6nTCIwDTPZ56aVGvDrmztiO5g3qrM= github.com/zealic/xignore v0.3.3 h1:EpLXUgZY/JEzFkTc+Y/VYypzXtNz+MSOMVCGW5Q4CKQ= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/wolfictl-0.38.3/pkg/dag/graph.go new/wolfictl-0.38.5/pkg/dag/graph.go --- old/wolfictl-0.38.3/pkg/dag/graph.go 2025-07-17 17:57:54.000000000 +0200 +++ new/wolfictl-0.38.5/pkg/dag/graph.go 2025-07-22 18:44:27.000000000 +0200 @@ -98,8 +98,7 @@ // the order of adding packages is quite important: // 1. Go through each origin package and add it as a vertex // 2. Go through each of its subpackages and add them as vertices, with the sub dependent on the origin - // 3. Add runtime dependencies for each package, as they are much more constrained than the build-time, and only can go to the local repo. - // 4. Add environment build-time dependencies + // 3. Add environment build-time dependencies for _, c := range pkgs.Packages() { if err := g.addVertex(c); err != nil && !errors.Is(err, graph.ErrVertexAlreadyExists) { errs = append(errs, err) @@ -128,41 +127,6 @@ } for _, c := range pkgs.Packages() { - // add packages from the runtime dependencies - resolverKey, err := g.addResolverForRepos(ctx, - opts.arch, - localRepo, - indexes, - keys, - append(c.Environment.Contents.BuildRepositories, opts.repos...), - append(c.Environment.Contents.Keyring, opts.keys...), - ) - if err != nil { - return nil, fmt.Errorf("unable to create resolver for %s: %w", c.String(), err) - } - - // For runtime packages, it is allowed to resolve itself. - addErrs := g.resolvePackages(ctx, c, "runtime", localRepoSource, resolverKey, c.Package.Dependencies.Runtime, true) - if len(addErrs) > 0 { - errs = append(errs, addErrs...) - } - - for _, subpkg := range c.Subpackages { //nolint:gocritic - parent := Configuration{ - Configuration: c.Configuration, - Path: c.Path, - name: subpkg.Name, - version: c.version, - pkg: subpkg.Name, - } - addErrs := g.resolvePackages(ctx, parent, "runtime", localRepoSource, resolverKey, subpkg.Dependencies.Runtime, true) - if len(addErrs) > 0 { - errs = append(errs, addErrs...) - } - } - } - - for _, c := range pkgs.Packages() { // add packages from the buildtime dependencies resolverKey, err := g.addResolverForRepos(ctx, opts.arch, @@ -282,9 +246,7 @@ // resolvePackages given a package `parent`, a list of packages `pkgs` and a `resolver`, // use the resolver to find all of the packages that fulfill the requirements and add them // to the graph as the parent's dependencies. -// Optionally, can allow self to resolve dependencies or not. This is policy driven/ -// In general, wolfi/os does *not* allow self to resolve for build environment, -// and *does* allow self to resolve for runtime environment. +// Optionally, can allow self to resolve dependencies or not. This is policy driven. func (g *Graph) resolvePackages(ctx context.Context, parent Package, source, localRepoSource, resolverKey string, pkgs []string, allowSelf bool) (errs []error) { log := clog.FromContext(ctx) for _, buildDep := range pkgs { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/wolfictl-0.38.3/pkg/lint/rules_test.go new/wolfictl-0.38.5/pkg/lint/rules_test.go --- old/wolfictl-0.38.3/pkg/lint/rules_test.go 2025-07-17 17:57:54.000000000 +0200 +++ new/wolfictl-0.38.5/pkg/lint/rules_test.go 2025-07-22 18:44:27.000000000 +0200 @@ -582,9 +582,9 @@ require.Len(t, g.Errors, len(tt.want.Errors)) for i, e := range g.Errors { - assert.Equal(t, e.Error, tt.want.Errors[i].Error, "Lint(): Error: got = %v, want %v", e.Error, tt.want.Errors[i].Error) - assert.Equal(t, e.Rule.Name, tt.want.Errors[i].Rule.Name, "Lint(): Rule.Name: got = %v, want %v", e.Rule.Name, tt.want.Errors[i].Rule.Name) - assert.Equal(t, e.Rule.Severity, tt.want.Errors[i].Rule.Severity, "Lint(): Rule.Severity: got = %v, want %v", e.Rule.Severity, tt.want.Errors[i].Rule.Severity) + assert.Equal(t, tt.want.Errors[i].Error, e.Error, "Lint(): Error: got = %v, want %v", e.Error, tt.want.Errors[i].Error) + assert.Equal(t, tt.want.Errors[i].Rule.Name, e.Rule.Name, "Lint(): Rule.Name: got = %v, want %v", e.Rule.Name, tt.want.Errors[i].Rule.Name) + assert.Equal(t, tt.want.Errors[i].Rule.Severity, e.Rule.Severity, "Lint(): Rule.Severity: got = %v, want %v", e.Rule.Severity, tt.want.Errors[i].Rule.Severity) } }) } ++++++ wolfictl.obsinfo ++++++ --- /var/tmp/diff_new_pack.g0xrI5/_old 2025-07-24 18:49:58.304790700 +0200 +++ /var/tmp/diff_new_pack.g0xrI5/_new 2025-07-24 18:49:58.316791198 +0200 @@ -1,5 +1,5 @@ name: wolfictl -version: 0.38.3 -mtime: 1752767874 -commit: a9dc05146cbe92420016bdffe78bf5e1a0b26faf +version: 0.38.5 +mtime: 1753202667 +commit: 7bb44802e073710ce7172c7011cd361b28f767a2
