Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package dex-oidc for openSUSE:Factory checked in at 2021-05-17 18:45:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dex-oidc (Old) and /work/SRC/openSUSE:Factory/.dex-oidc.new.2988 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dex-oidc" Mon May 17 18:45:12 2021 rev:3 rq:893669 version:2.28.1 Changes: -------- --- /work/SRC/openSUSE:Factory/dex-oidc/dex-oidc.changes 2020-04-04 12:27:32.580058898 +0200 +++ /work/SRC/openSUSE:Factory/.dex-oidc.new.2988/dex-oidc.changes 2021-05-17 18:45:31.548569867 +0200 @@ -1,0 +2,66 @@ +Fri May 14 11:28:18 UTC 2021 - [email protected] + +- Update to version 2.28.1: + * Features: + * Add c_hash to id_token, issued on /auth endpoint, when in + hybrid flow + * Allow configuration of returned auth proxy header + * Allow to disable os.ExpandEnv for storage + connector configs + by env variable DEX_EXPAND_ENV = false + * Added the possibility to activate lowercase for UPN-Strings + * Add "Cache-control: no-store" and "Pragma: no-cache" headers + to token responses + * Graceful shutdown + * Allow public clients created with API to have no client_secret + * Bugfixes: + * Fix the etcd PKCE AuthCode deserialization + * Fix garbage collection logging of device codes and device request + * Discovery endpoint contains updated claims and auth methods + * Return invalid_grant error if auth code is invalid or expired + * Return an error to auth requests with the "request" parameter +- Update to version 2.27.0: + * Security release, fixing: CVE-2020-26290 + * connector/saml: Validate XML roundtrip data before processing + request +- Update to version 2.26.0: + * Require go 1.15 + * Features: + * Add constructor for static key strategy + * Add team groups support to bitbucket connector + * Allow Authorization header when doing CORS + * Retry Kubernetes update requests + * PKCE support + * Allow public clients to have redirect URLs other than localhost + * Bugfixes: + * Abort connector login if connector was already set + * Replace deprecated teams endpoint in bitbucket connector + * Log errors from login during password grant + * Handle Kubernetes API conflicts properly for signing keys +- Update to version 2.25.0: + * Features: + * Move the API package to a separate module + * OAuth2 Device Authorization Grant + * Support username, email and groups claim in OIDC connector + * Bugfixes: + * Add offline_access scope in microsoft connector, if required + * Allow the google connector to work without a service account +- Update to version 2.24.0: + * Features: + * Keystone connector: Added Email to Identity + * Atlassian Crowd connector: allow preferred_username claim + to be set + * Github connector: pass redirect_uri + * server: allow having no secret for static public clients + * SAML connector: add flag for filtering groups + * Bug fixes, misc changes: + * storage/kubernetes: wrap Kubernetes host address in square + brackets for IPv6 + * storage/kubernetes: remove shadowed ResourceVersion from + connector + * server/handlers: do not fail login if refresh token gone + * server/handlers: automatic consistency fixing in case of + missing refresh token in db + * OIDC connector: add Icon + * OpenShift connector: rootCA option + +------------------------------------------------------------------- Old: ---- dex-2.23.0.tar.xz New: ---- dex-2.28.1.tar.xz vendor.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dex-oidc.spec ++++++ --- /var/tmp/diff_new_pack.l3q3Lm/_old 2021-05-17 18:45:33.212562807 +0200 +++ /var/tmp/diff_new_pack.l3q3Lm/_new 2021-05-17 18:45:33.212562807 +0200 @@ -1,7 +1,7 @@ # # spec file for package dex-oidc # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,16 +17,17 @@ # Project name when using go tooling. -%define go_version 1.13 +%define go_version 1.15 Name: dex-oidc -Version: 2.23.0 +Version: 2.28.1 Release: 0 Summary: OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors License: Apache-2.0 Group: System/Management URL: https://github.com/dexidp/dex -Source: dex-%{version}.tar.xz +Source0: dex-%{version}.tar.xz +Source1: vendor.tar.gz BuildRequires: fdupes BuildRequires: git BuildRequires: golang-packaging @@ -50,7 +51,7 @@ dex handles the protocols for a given backend. %prep -%setup -q -n dex-%{version} +%setup -q -n dex-%{version} -a 1 %build %define ldflags "-w -X github.com/dexidp/dex/version.Version=%{version}" @@ -66,6 +67,7 @@ for file in $(find web -type f); do install -D -m 0644 $file %{buildroot}/%{_datadir}/%{name}/$file done +%fdupes %{buildroot}%{_datadir}/%{name} %files -f file.lst %license LICENSE @@ -76,8 +78,6 @@ %dir %{_datadir}/%{name}/web/static/img %dir %{_datadir}/%{name}/web/templates %dir %{_datadir}/%{name}/web/themes -%dir %{_datadir}/%{name}/web/themes/coreos -%dir %{_datadir}/%{name}/web/themes/tectonic %{_datadir}/%{name}/web/* %{_bindir}/dex ++++++ _service ++++++ --- /var/tmp/diff_new_pack.l3q3Lm/_old 2021-05-17 18:45:33.248562655 +0200 +++ /var/tmp/diff_new_pack.l3q3Lm/_new 2021-05-17 18:45:33.248562655 +0200 @@ -4,8 +4,9 @@ <param name="scm">git</param> <param name="filename">dex</param> <param name="exclude">.git</param> - <param name="versionformat">2.23.0</param> - <param name="revision">v2.23.0</param> + <param name="revision">v2.28.1</param> + <param name="versionformat">@PARENT_TAG@</param> + <param name="versionrewrite-pattern">v(.+)</param> <param name="changesgenerate">enable</param> </service> <service name="recompress" mode="disabled"> @@ -15,4 +16,7 @@ <service name="set_version" mode="disabled"> <param name="basename">dex</param> </service> + <service name="go_modules" mode="disabled"> + <param name="compression">xz</param> + </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.l3q3Lm/_old 2021-05-17 18:45:33.272562553 +0200 +++ /var/tmp/diff_new_pack.l3q3Lm/_new 2021-05-17 18:45:33.276562536 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/dexidp/dex.git</param> - <param name="changesrevision">99c3ec68203c0b2764a49724ecb9ecc26b520482</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">27dfbc0344450b257d297306d563354dfcea8643</param></service></servicedata> \ No newline at end of file ++++++ dex-2.23.0.tar.xz -> dex-2.28.1.tar.xz ++++++ ++++ 1115446 lines of diff (skipped)
