Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package notary for openSUSE:Factory checked in at 2021-06-11 00:18:46 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/notary (Old) and /work/SRC/openSUSE:Factory/.notary.new.32437 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "notary" Fri Jun 11 00:18:46 2021 rev:2 rq:898979 version:0.7.0 Changes: -------- --- /work/SRC/openSUSE:Factory/notary/notary.changes 2021-01-08 17:40:12.129016391 +0100 +++ /work/SRC/openSUSE:Factory/.notary.new.32437/notary.changes 2021-06-11 00:19:21.953389075 +0200 @@ -1,0 +2,106 @@ +Thu Jun 10 08:20:07 UTC 2021 - [email protected] + +- Update to version 0.7.0: + * Add Changelog for v0.7.0 release + * update golang.org/x/crypto and replace use of deprecated terminal package + * cleanup tempfiles for sqlite_test + * Add some unit tests for tuf/utils/utils.go This PR is about adding some unit tests for tuf/utils/utils.go. + * cleanup tempfiles for integration_test + * cleanup tempfiles for client_test + * linting: fix Implicit memory aliasing in RangeStmt + * Fix typos + * CircleCI: run jobs in parallel + * Update gorethink from v3 to v6 and rename to proper rethinkdb-go package + * Fix some testing issues + * Update go mod vendor for 1.14.1 + * Update Go to 1.14.1 + * Remove vendor.conf as it is no longer used + * Fix gosec linting errors (fix G306 and G307) + * Apply 'go mod tidy && go mod vendor' + * Set default go flag to use -mod=vendor for cli commands + * Make the validate-vendor.sh script solely to work with go mod + * Align golang-cross docker image version + * Add documentation on how to upgrade + * Include vendor check in circleci workflow + * Add vendor validation script to ensure deps are properly vendored after upgrade + * Update documentation for module compatibility + * Update docker images to use Go Modules and 1.12.15 + * Apply 'go mod vendor' (adds indirect dependencies) + * Apply 'go mod download' + * Apply 'go mod init github.com/theupdateframework/notary' + * Bump mariadb from 10.1.28 to 10.4 + * Remove duplicated words + * Update docker/distribution to 2.7.1 + * Makefile: disable debug to make CI more readable + * CircleCI: update image, and use BuildKit + * Update Golang 1.12.12 (CVE-2019-17596) + * Bump golang 1.12.10 (CVE-2019-9512, CVE-2019-9514, CVE-2019-16276) + * Update and pin golang-migrate to v4.6.2 + * Use golang-migrate/migrate, because mattes/migrate was archived + * Fix gosec linter results not being printed + * Fix "make test" broken on Go 1.13 + * gosec: ignore G108: Profiling endpoint automatically exposed + * Correct spelling mistakes. + * bump miekg/pkcs11 v1.0.2 + * Add --version flags + * Add Go version to version information + * bump github.com/miekg/pkcs11 553cfdd26aaafe851ca66a5e8015f0decb6b5a1e + * bump github.com/BurntSushi/toml v0.3.1 + * bump github.com/pkg/errors v0.8.1 + * Bump gorilla/mux to 1.7.0 + * bump sirupsen/logrus v1.4.1 + * Cleanup vendor.conf, fix mixed tabs/spaces + * re-vendor with current version of vndr + * cleanup: help message words correction in keys.go + * Remove the duplicated words in code comments + * Call flag.Parse() in testing. + * Update Go to 1.12.7 + * Fix algorithm case handling (fix #1471) + * Fix `FileMeta.Equals`. + * README: fix typo + * Regenerate test certs + * Update pkcs#11 library + * Replacing 'HTTP' by 'HTTPS' for securing links + * Fix many typos Signed-off-by: Vu Cong Tuan <[email protected]> + * Update to Go 1.11.5 + * Update to Go 1.11.2 + * Switch to dockercore/golang-cross image for cross-compiling + * Remove duplicated words in comments + * Update deprecated links Signed-off-by: Vu Cong Tuan <[email protected]> + * client: fix logger format types for variables + * testutils: reduce dependency on testify package in testutils + * Update to Go 1.10.8 + * Do not check Go version user is building with + * Fix golint as its location has moved + * Attempt to fix Ying's circleci 2.0 upgrade + * Refactor the notary client library to have a separate reader and downloader that may be easier to use for clients that do not need any publishing capabilities. + * Add import of sha1 to gosec whitelist + * Add security audit + * Add Justin Cormack to Maintainers + * github.com/GoASTScanner/gas has been renamed to github.com/securego/gosec, and the executable also renamed gosec. Fix all the imports/installs so that CI works again. + * Minor punctuation correction in README.md + * Fix small typo + * Bump Golang to 1.10.3 + * Do not leak cancellations for contexts + * Remove use of distributions old wrapped context + * Update prometheus vendoring to match distribution + * Add docker/go-metrics vendor + * Update docker/distribution + * Update instructions for getting gas + * Remove roadmap file that has no useful information + * Update to Go 1.10.2 + * Update test certificates + * Fix gorethink + * Fix file creation permissions + * Use os.Open not os.OpenFile(..., os.O_RDONLY, ...) + * Remove baseDir from NewRepository + * Update vendoring for x/crypto and remove agl/ed25519 + * Use golang/x/crypto for ed25519 + * Temporarily disable two gas rules + * Add gas output to .gitignore + * Mark the inclusion of md5 in fips.go as ignore by gas + * Re-enable gas AST Scanner + * Add another note about serialization of ed25519 keys + * Add the CNCF Code of Conduct + +------------------------------------------------------------------- Old: ---- notary-0.6.1.tar.gz New: ---- notary-0.7.0.tar.gz vendor.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ notary.spec ++++++ --- /var/tmp/diff_new_pack.GSKRL9/_old 2021-06-11 00:19:22.537390089 +0200 +++ /var/tmp/diff_new_pack.GSKRL9/_new 2021-06-11 00:19:22.537390089 +0200 @@ -1,7 +1,7 @@ # # spec file for package notary # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,29 +16,30 @@ # # nodebuginfo + %define goipath github.com/theupdateframework/notary Name: notary -Version: 0.6.1 +Version: 0.7.0 Release: 0 Summary: Trusted collections handling: server and signer License: Apache-2.0 Group: System/Management URL: https://github.com/theupdateframework/notary Source0: %{name}-%{version}.tar.gz -Source1: server-config.postgres.json -Source2: signer-config.postgres.json +Source1: vendor.tar.gz +Source2: server-config.postgres.json +Source3: signer-config.postgres.json Patch0: 0001-Hide-DB-credentials.patch BuildRequires: golang-packaging -BuildRequires: golang(API) >= 1.13 +BuildRequires: golang(API) >= 1.15 %description The Notary project comprises a server and a client for running and interacting with trusted collections. - %prep -%setup -q -n %{name}-%{version} +%setup -q -n %{name}-%{version} -a 1 %patch0 -p1 %build @@ -47,14 +48,14 @@ %define ldflags "-w -X %{goipath}/version.NotaryVersion=v%{version} -X %{goipath}/version.GitCommit=%{release}" %define buildtags "pkcs11" -%gobuild -ldflags %{ldflags} -tags %{buildtags} cmd/notary-server -%gobuild -ldflags %{ldflags} -tags %{buildtags} cmd/notary-signer +%gobuild -mod vendor -ldflags %{ldflags} -tags %{buildtags} cmd/notary-server +%gobuild -mod vendor -ldflags %{ldflags} -tags %{buildtags} cmd/notary-signer %install %goinstall -install -Dm 0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/notary/server-config.postgres.json -install -Dm 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/notary/signer-config.postgres.json +install -Dm 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/notary/server-config.postgres.json +install -Dm 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/notary/signer-config.postgres.json mkdir -p %{buildroot}%{_localstatedir}/lib/notary/migrations mkdir -p %{buildroot}%{_localstatedir}/lib/notary/migrations/server/postgresql ++++++ _service ++++++ --- /var/tmp/diff_new_pack.GSKRL9/_old 2021-06-11 00:19:22.569390145 +0200 +++ /var/tmp/diff_new_pack.GSKRL9/_new 2021-06-11 00:19:22.573390152 +0200 @@ -4,12 +4,13 @@ <param name="scm">git</param> <param name="exclude">.git</param> <param name="filename">notary</param> - <param name="revision">v0.6.1</param> + <param name="revision">v0.7.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> </service> <service name="set_version" mode="disabled"/> + <service name="go_modules" mode="disabled"/> <service name="recompress" mode="disabled"> <param name="file">*.tar</param> <param name="compression">gz</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.GSKRL9/_old 2021-06-11 00:19:22.589390180 +0200 +++ /var/tmp/diff_new_pack.GSKRL9/_new 2021-06-11 00:19:22.589390180 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/theupdateframework/notary.git</param> - <param name="changesrevision">629c7097e6e16de84b9eeb14d2cd6bf928a26cd4</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">9cc2894e17ade7c02bba952398dfd02648a1d65c</param></service></servicedata> \ No newline at end of file ++++++ notary-0.6.1.tar.gz -> notary-0.7.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/notary/notary-0.6.1.tar.gz /work/SRC/openSUSE:Factory/.notary.new.32437/notary-0.7.0.tar.gz differ: char 12, line 1
