Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package wolfictl for openSUSE:Factory checked in at 2025-12-16 15:53:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/wolfictl (Old) and /work/SRC/openSUSE:Factory/.wolfictl.new.1939 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "wolfictl" Tue Dec 16 15:53:24 2025 rev:23 rq:1322903 version:0.38.26 Changes: -------- --- /work/SRC/openSUSE:Factory/wolfictl/wolfictl.changes 2025-12-09 12:54:05.061347734 +0100 +++ /work/SRC/openSUSE:Factory/.wolfictl.new.1939/wolfictl.changes 2025-12-16 16:00:00.812341361 +0100 @@ -1,0 +2,8 @@ +Mon Dec 15 05:53:01 UTC 2025 - Johannes Kastl <[email protected]> + +- Update to version 0.38.26: + * build(deps): bump step-security/harden-runner from 2.13.3 to + 2.14.0 (#1815) + * bump.go: Ignore bot-generated CVE/GHSA comments + +------------------------------------------------------------------- Old: ---- wolfictl-0.38.25.obscpio New: ---- wolfictl-0.38.26.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ wolfictl.spec ++++++ --- /var/tmp/diff_new_pack.xtdaiH/_old 2025-12-16 16:00:03.212442087 +0100 +++ /var/tmp/diff_new_pack.xtdaiH/_new 2025-12-16 16:00:03.216442255 +0100 @@ -17,7 +17,7 @@ Name: wolfictl -Version: 0.38.25 +Version: 0.38.26 Release: 0 Summary: A CLI used to work with the Wolfi OSS project License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.xtdaiH/_old 2025-12-16 16:00:03.272444605 +0100 +++ /var/tmp/diff_new_pack.xtdaiH/_new 2025-12-16 16:00:03.280444941 +0100 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="exclude">.git</param> <param name="revision">main</param> - <param name="versionformat">v0.38.25</param> + <param name="versionformat">v0.38.26</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.xtdaiH/_old 2025-12-16 16:00:03.308446116 +0100 +++ /var/tmp/diff_new_pack.xtdaiH/_new 2025-12-16 16:00:03.312446284 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/wolfi-dev/wolfictl</param> - <param name="changesrevision">d32a5cd896e0cc7621b7578ebd71b72a99b1dc81</param></service></servicedata> + <param name="changesrevision">1567b38daf84c3d103639546c064a0e846b4bb6d</param></service></servicedata> (No newline at EOF) ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/wolfictl/vendor.tar.gz /work/SRC/openSUSE:Factory/.wolfictl.new.1939/vendor.tar.gz differ: char 133, line 1 ++++++ wolfictl-0.38.25.obscpio -> wolfictl-0.38.26.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/wolfictl-0.38.25/pkg/cli/bump.go new/wolfictl-0.38.26/pkg/cli/bump.go --- old/wolfictl-0.38.25/pkg/cli/bump.go 2025-12-04 17:22:45.000000000 +0100 +++ new/wolfictl-0.38.26/pkg/cli/bump.go 2025-12-10 17:27:32.000000000 +0100 @@ -118,9 +118,13 @@ old := fmt.Sprintf(epochPattern, cfg.Package.Epoch) for scanner.Scan() { line := scanner.Text() - nocomment, _, _ := strings.Cut(line, "#") + nocomment, comment, _ := strings.Cut(line, "#") if strings.TrimSpace(nocomment) == old { found = true + comment = strings.TrimSpace(comment) + if strings.HasPrefix(comment, "CVE-") || strings.HasPrefix(comment, "GHSA-") { + line = strings.TrimRight(nocomment, " ") + } newFile = append( newFile, strings.ReplaceAll(line, old, fmt.Sprintf(epochPattern, cfg.Package.Epoch+1)), ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/wolfictl-0.38.25/pkg/cli/bump_test.go new/wolfictl-0.38.26/pkg/cli/bump_test.go --- old/wolfictl-0.38.25/pkg/cli/bump_test.go 2025-12-04 17:22:45.000000000 +0100 +++ new/wolfictl-0.38.26/pkg/cli/bump_test.go 2025-12-10 17:27:32.000000000 +0100 @@ -3,41 +3,56 @@ import ( "os" "path/filepath" + "strings" "testing" "github.com/google/go-cmp/cmp" ) -func TestBumpWithComment(t *testing.T) { - before := []byte(` +func testPkgDefinition(epoch string) []byte { + pkgTemplate := ` package: name: awesome-tool version: 0.61.0 - epoch: 1 # a comment! -`) - - want := []byte(` -package: - name: awesome-tool - version: 0.61.0 - epoch: 2 # a comment! -`) - - name := filepath.Join(t.TempDir(), "awesome-tool.yaml") - - if err := os.WriteFile(name, before, 0o644); err != nil { - t.Fatal(err) - } - - if err := bumpEpoch(t.Context(), bumpOptions{}, name); err != nil { - t.Fatal(err) - } + epoch: EPOCH_HERE +` + return []byte(strings.ReplaceAll(pkgTemplate, "EPOCH_HERE", epoch)) +} - got, err := os.ReadFile(name) - if err != nil { - t.Fatal(err) - } - if diff := cmp.Diff(got, want); diff != "" { - t.Errorf("bumpEpoch() mismatch (-want +got):\n%s", diff) +func TestBumpWithComment(t *testing.T) { + for i, td := range []struct { + before []byte + want []byte + }{ + { + testPkgDefinition("1 # a comment!"), + testPkgDefinition("2 # a comment!"), + }, + { + testPkgDefinition("1 # CVE-111-222"), + testPkgDefinition("2"), + }, + { + testPkgDefinition("1 # GHSA-a1b2-c1c2"), + testPkgDefinition("2"), + }, + } { + name := filepath.Join(t.TempDir(), "awesome-tool.yaml") + + if err := os.WriteFile(name, td.before, 0o644); err != nil { + t.Fatal(err) + } + + if err := bumpEpoch(t.Context(), bumpOptions{}, name); err != nil { + t.Fatal(err) + } + + got, err := os.ReadFile(name) + if err != nil { + t.Fatal(err) + } + if diff := cmp.Diff(got, td.want); diff != "" { + t.Errorf("%d - bumpEpoch() mismatch (-want +got):\n%s", i, diff) + } } } ++++++ wolfictl.obsinfo ++++++ --- /var/tmp/diff_new_pack.xtdaiH/_old 2025-12-16 16:00:04.616501012 +0100 +++ /var/tmp/diff_new_pack.xtdaiH/_new 2025-12-16 16:00:04.620501179 +0100 @@ -1,5 +1,5 @@ name: wolfictl -version: 0.38.25 -mtime: 1764865365 -commit: d32a5cd896e0cc7621b7578ebd71b72a99b1dc81 +version: 0.38.26 +mtime: 1765384052 +commit: 1567b38daf84c3d103639546c064a0e846b4bb6d
