Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package melange for openSUSE:Factory checked in at 2023-10-15 19:27:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/melange (Old) and /work/SRC/openSUSE:Factory/.melange.new.20540 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "melange" Sun Oct 15 19:27:19 2023 rev:2 rq:1117771 version:0.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/melange/melange.changes 2023-04-03 17:47:26.858827163 +0200 +++ /work/SRC/openSUSE:Factory/.melange.new.20540/melange.changes 2023-10-15 19:29:26.417003929 +0200 @@ -1,0 +2,460 @@ +Sat Oct 14 06:40:13 UTC 2023 - [email protected] + +- Update to version 0.5.0: + * Enable linters to warn (via callback) instead of just failing. + * build(deps): bump github.com/package-url/packageurl-go + * build(deps): bump go.opentelemetry.io/otel from 1.18.0 to + 1.19.0 + * Add a PR checklist to melange. + * Fix yaml typo in linter docs + * nit: fix mistake in function docs + * Apply suggestions from code review + * Document disabling lints and when to do so. + * Update linter docs + * strip linter: properly close file + * Make improvements/suggestions + * Add stripped file linter + * update alpine-go to latest git to fix indexing + * pipelines: strip: use -g by default when stripping + * build(deps): bump google.golang.org/api from 0.142.0 to 0.143.0 + * do not delete extensions and plugins with ruby/clean + * build(deps): bump k8s.io/api from 0.28.1 to 0.28.2 + * build(deps): bump google.golang.org/api from 0.138.0 to 0.142.0 + * build(deps): bump k8s.io/client-go from 0.28.1 to 0.28.2 + * build(deps): bump github.com/opencontainers/image-spec + * build(deps): bump github.com/docker/docker + * build(deps): bump cloud.google.com/go/storage from 1.32.0 to + 1.33.0 + * build(deps): bump github.com/klauspost/compress from 1.16.7 to + 1.17.0 + * build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 + * build(deps): bump actions/checkout from 4.0.0 to 4.1.0 + * add docs for -compat packages + * Disable empty check on git-checkout + * build: refactor package linter invocation + * Refactor the linter into a submodule. + * Remove no provides check per @kaniini + * Respect subpackage no-provides + * Add post-file walk linting and empty package linting + * exa is dead, use mdbook as a rust CI test instead. + * bump apko to e9722fc + * build: do not run linters on skipped subpackages + * linter: when subpackages are linted use the subpackage name as + the package config name + * Only run worldwrite linter on regular files + * Add worldwrite linter + * Add dev, opt, and srv linters + * fix the arch + * Use Warnf over WARNING + * log and continue when .pc file can't be loaded + * fix the dir name as we already expect dir to be set explicit + * Disable linters on -compat packages + * Update build.yaml + * add goreleaser pipeline + * Unexport linter struct and linterFunc + * Don't export the linter map + * Add tests + * build(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 + * Bump goreleaser/goreleaser-action from 4.6.0 to 5.0.0 + * Bump docker/login-action from 2.2.0 to 3.0.0 + * chore: remove CODEOWNERS file + * Add more linters + * Appease golint + * Fix tests + * Remove debugging print statement + * Implement subpackage linting + * Add package (but not subpackage) linting + * build(deps): bump golangci/golangci-lint-action from 3.6.0 to + 3.7.0 + * Update golangci-lint to 1.54 + * git-checkout: Allow tags to matched annotated tag SHAs, don't + allow fuzzy matching of refs. + * build(deps): bump actions/checkout from 3.5.3 to 4.0.0 + * Bump k8s test workflows to Go 1.21 + * Bump go to 1.21 + * pipeline: fix downward propagation to referenced external + pipeline nodes + * config: tests: add workdir propagation test + * remove cmake. Signed-off-by: Ville Aikas + <[email protected]> + * forgot to remove one -dev + * Remove specifying the php-dev version. + * Add pecl pipelines for phpize & install. Signed-off-by: Ville + Aikas <[email protected]> + * package: only constrain library search paths for provides + entries + * Fix some python generation issues: + * Refactor application of pipeline variables to config and add + tests + * Pipeline: make env overrides work recursively + * Add environment var overriding to the pipeline. + * Bump goreleaser/goreleaser-action from 4.3.0 to 4.6.0 + * Bump actions/upload-artifact from 3.1.2 to 3.1.3 + * package: constrain library SCA to library search paths only + * Replace the elements of the subpackage + * construct the package.full-version in higher context than just + pipeline. + * docs: fix link in pkg/build/pipelines/README.md + * docs: add documentation for built-in pipelines + * document / examples for ${{package.full-version}} + Signed-off-by: Ville Aikas <[email protected]> + * add ${{package.full-version}} = + ${{package.version}}-r${{package.epoch}} Signed-off-by: Ville + Aikas <[email protected]> + * Changes from code review. + * config: copy all subpackage variables when doing a range + expansion + * feat: add output logs for the apkbuild converter + * Fix issue: #658 Signed-off-by: Ville Aikas + <[email protected]> + * feat: add new Perl pipelines for install and clean + * package: just skip symlinks for now + * workflows: add ncurses to the presubmit test matrix + * package: dereference symlinks for aliased pkg-config modules + * Fix syntax in maven pipeline (and add test). + * more debug crap. Signed-off-by: Ville Aikas + <[email protected]> + * remove debug crap. Signed-off-by: Ville Aikas + <[email protected]> + * Environment is required, adjust the tests. + * Change GeneratedMelangeConfig to embed pkg/config/config + instead of redefining it. + * Change default python-version from 3.11 to 3. + * remove extra backtick. + * let's try again. + * update docs + * Bunch of lint fixes. No functional changes. + * Add a maven/configure-mirror pipeline to redirect to GCP. + * yikes, only 2 fatal lints... nice... + * update docs. + * Add flags for resolving git tags, release-monitoring + * Update pkg/build/pipelines/python/build-wheel.yaml + * Update pkg/build/pipelines/python/build-wheel.yaml + * add builtin pipelines for python + * update generated docs. Signed-off-by: Ville Aikas + <[email protected]> + * remove unused vars. They do not have short form, so can use + this variant. Signed-off-by: Ville Aikas + <[email protected]> + * Add --wolfi-defaults flag, clean up flag handling. + * readlinkfs: ignore some security-module specific xattrs + * feat: support --recurse-submodules in git clone + * Print the path to generated melange config. + * build(deps): bump go.opentelemetry.io/otel from 1.16.0 to + 1.17.0 + * build(deps): bump cloud.google.com/go/storage from 1.31.0 to + 1.32.0 + * build(deps): bump google.golang.org/api from 0.136.0 to 0.138.0 + * build(deps): bump k8s.io/api from 0.28.0 to 0.28.1 + * build(deps): bump github.com/lima-vm/lima from 0.17.0 to 0.17.2 + * build(deps): bump k8s.io/client-go from 0.28.0 to 0.28.1 + * Bump apko and fix everything I broke + * docs: typo in go-build example + * run make docs + * cli: index: add --signing-key, --source and --merge options + * default for github actions is bubblewwrap. + * update lint rule. + * Fix the links to commands, fix the URLs generated. + * sign: do not rename across device boundaries + * add --force option to recreate apk indexes with given + signatures + * pipelines: use ${{targets.contextdir}} where it makes sense + * pipeline: add ${{targets.package.foo}} expansions + * pipeline: add ${{targets.contextdir}}, representing the current + target dir + * Bump pkg-config again to actually pick up the openblas fix. + * Bump pkgconfig to pick up the openblas fix. + * feedback + verbiage from Erika. + * Set reasonable concurrency levels for pgzip + * appease linter + * support substitutions in provides lists + * Start of exhaustively documenting the build filele. + * plumb through SDE to EmitSignature + * add melange sign command, slightly refactor and make public the + signing methods + * add test for substituting needs.packages + * allow override go version for uses: go/build and go/install + * Support for setting context in .melange.k8s.yaml + * Add docs about custom pipelines, defining and using. + * build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 + * Teach melange about the forthcoming version-transform block + * doc and lint revisions (#598) + * build(deps): bump google.golang.org/api from 0.134.0 to 0.136.0 + * container: bubblewrap: do not defer closing files + * build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 + * build(deps): bump github.com/lima-vm/lima from 0.16.0 to 0.17.0 + * build(deps): bump github.com/google/go-containerregistry + * build: package: add pkgconf-based SCA to catalog SDKs which use + it + * Docstring typo fixes + * Docstring fixes + * Appease the go fmt Gods + * Test two var transforms at once + * Test var transforms on a basic level + * Add ${{build.arch}} as a possible variable in bump + * Make var transforms work in bump + * remove paralell test for TestKubernetesRunnerConfig + * add fail-fast to false + * update code running goimports + * add goimports + * publish brew formula during release + * update actions to use git hashes + * update golangci-lint to v1.53 series + * Adjust the var substitution stuff a bit + * Move var substitution stuff into config + * config: Change root to a pointer in the config struct, and add + an accessor + * renovate: update to use new config infrastructure + * build: Add root node to the config + * Appease the golangci-lint Gods + * build_test: fix tests in a better way + * Make all tests pass + * build: add parameter where one was missing + * build(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to + 5.8.1 + * pipelines: meson/configure: explicitly invoke meson setup + action + * build(deps): bump github.com/docker/docker + * Refactor the config/logging stuff out of build + * build(deps): bump google.golang.org/api from 0.133.0 to 0.134.0 + * build(deps): bump github.com/docker/docker + * Several fixes to k8s runner. + * build(deps): bump github.com/klauspost/pgzip from 1.2.5 to + 1.2.6 + * build(deps): bump google.golang.org/api from 0.129.0 to 0.133.0 + * Remove `wget -q` from `fetch` + * add k8s runner config loading from envvars + * Log errors bundling, enable GGCR Warn/Progress logs + * Tweak the strip pipeline so that it never fails for deleted + files + * convert/python: check if release is found + * Make sure we log errors. + * Fix subpackage SBOM generation + * define constants for runners destination mount paths + * skip the cache mount for kubernetes runner builds + * Add more otel spans to k8s runner + * build(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to + 5.8.0 + * build(deps): bump k8s.io/client-go from 0.27.3 to 0.27.4 + * Avoid using pargzip for compression + * add a retryable (tgz) fetcher for the k8s runner + * Pod names must be RFC1123 compliant + * Correct the variable name in the patch pipeline + * pipelines: git-checkout: harden variable expansions + * pipelines: patch: refactor series/patches handling + * pipelines: fetch: harden variable expansions + * add retries to a subset of k8s runner exec failures + * delete builder pod post build by default + * properly pass workspace env/volumes to k8s builder pods + * use go-apk.FullFS for retrieving builder workspaces + * Finally fix python convert tests. + * Comment python test. + * add dir option to ruby pipelines as not all gemspecs live in + the root folder + * fix containerID for lima when tarring up + * lima startup issues fixed + * pull in apko with fix for blank SOURCE_DATE_EPOCH + * Change git-checkout depth default to 1 + * workflows: wolfi-presubmit: use package/ instead of packages/ + for package names + * build: package: forcibly treat libc as a shared library + * docs: explain how build cache works practically + * Bump apko dep to pick up otel spans + * Fix failing test for env var wipeout + * Add failing test for env var wipeout + * add otel spans + * build(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1 + * Remove use of deprecated WaitImmediate + * Add ! char to ignore. + * Add missing context propagation + * Rename index.Context to index.Index + * Rename Contexts to Builds + +------------------------------------------------------------------- +Sat Oct 14 06:38:30 UTC 2023 - [email protected] + +- Update to version 0.4.0: + * build(deps): bump github.com/opencontainers/image-spec + * add release notes for Melange 0.4.0 + * build(deps): bump cloud.google.com/go/storage from 1.30.1 to + 1.31.0 + * build(deps): bump google.golang.org/api from 0.128.0 to 0.129.0 + * appease linter for now + * update apko to 0.9.0 + * build(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 + * some small UX improvements for k8s runner + * build(deps): bump github.com/package-url/packageurl-go + * update apko and go-apk to use pinned deps correctly + * build: scan subpackage pipelines for dependencies + * add a split/debug pipeline + * ensure bundles are rooted correctly + * build(deps): bump google.golang.org/api from 0.125.0 to 0.127.0 + * build(deps): bump actions/checkout from 3.5.2 to 3.5.3 + * add a kubernetes pod runner + * build(deps): bump docker/login-action from 2.1.0 to 2.2.0 + * build(deps): bump golangci/golangci-lint-action from 3.4.0 to + 3.6.0 + * build(deps): bump goreleaser/goreleaser-action from 4.2.0 to ++++ 163 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/melange/melange.changes ++++ and /work/SRC/openSUSE:Factory/.melange.new.20540/melange.changes Old: ---- melange-0.3.2.obscpio New: ---- melange-0.5.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ melange.spec ++++++ --- /var/tmp/diff_new_pack.v2hHlB/_old 2023-10-15 19:29:27.217032749 +0200 +++ /var/tmp/diff_new_pack.v2hHlB/_new 2023-10-15 19:29:27.217032749 +0200 @@ -19,14 +19,14 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: melange -Version: 0.3.2 +Version: 0.5.0 Release: 0 Summary: Build APKs from source code License: Apache-2.0 URL: https://github.com/chainguard-dev/melange Source: melange-%{version}.tar.gz Source1: vendor.tar.gz -BuildRequires: go >= 1.18 +BuildRequires: go >= 1.20 %description Build apk packages using declarative pipelines. @@ -69,8 +69,7 @@ zsh command line completion support for %{name}. %prep -%setup -q -%setup -q -T -D -a 1 +%autosetup -p 1 -a 1 %build DATE_FMT="+%%Y-%%m-%%dT%%H:%%M:%%SZ" ++++++ _service ++++++ --- /var/tmp/diff_new_pack.v2hHlB/_old 2023-10-15 19:29:27.245033757 +0200 +++ /var/tmp/diff_new_pack.v2hHlB/_new 2023-10-15 19:29:27.249033901 +0200 @@ -1,14 +1,14 @@ <services> - <service name="obs_scm" mode="disabled"> + <service name="obs_scm" mode="manual"> <param name="url">https://github.com/chainguard-dev/melange</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.3.2</param> + <param name="revision">v0.5.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> </service> - <service name="set_version" mode="disabled"> + <service name="set_version" mode="manual"> <param name="basename">melange</param> </service> <service name="tar" mode="buildtime"/> @@ -16,7 +16,7 @@ <param name="file">*.tar</param> <param name="compression">gz</param> </service> - <service name="go_modules" mode="disabled"> + <service name="go_modules" mode="manual"> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.v2hHlB/_old 2023-10-15 19:29:27.269034622 +0200 +++ /var/tmp/diff_new_pack.v2hHlB/_new 2023-10-15 19:29:27.269034622 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/chainguard-dev/melange</param> - <param name="changesrevision">4ed1d07ef6955379e936cf237f8dfec382454f47</param></service></servicedata> + <param name="changesrevision">b54700f86a4b7d626b519e0ba064b3b1c7e42fbc</param></service></servicedata> (No newline at EOF) ++++++ melange-0.3.2.obscpio -> melange-0.5.0.obscpio ++++++ ++++ 170025 lines of diff (skipped) ++++++ melange.obsinfo ++++++ --- /var/tmp/diff_new_pack.v2hHlB/_old 2023-10-15 19:29:28.053062865 +0200 +++ /var/tmp/diff_new_pack.v2hHlB/_new 2023-10-15 19:29:28.093064306 +0200 @@ -1,5 +1,5 @@ name: melange -version: 0.3.2 -mtime: 1680282202 -commit: 4ed1d07ef6955379e936cf237f8dfec382454f47 +version: 0.5.0 +mtime: 1696461776 +commit: b54700f86a4b7d626b519e0ba064b3b1c7e42fbc ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/melange/vendor.tar.gz /work/SRC/openSUSE:Factory/.melange.new.20540/vendor.tar.gz differ: char 5, line 1
