Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package grafana for openSUSE:Factory checked in at 2025-02-03 21:45:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/grafana (Old) and /work/SRC/openSUSE:Factory/.grafana.new.2316 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grafana" Mon Feb 3 21:45:41 2025 rev:66 rq:1242879 version:11.3.3 Changes: -------- --- /work/SRC/openSUSE:Factory/grafana/grafana.changes 2025-01-22 16:39:21.681455576 +0100 +++ /work/SRC/openSUSE:Factory/.grafana.new.2316/grafana.changes 2025-02-03 21:47:23.252096081 +0100 @@ -1,0 +2,13 @@ +Mon Feb 3 10:43:36 UTC 2025 - Witek Bedyk <witold.be...@suse.com> + +- Update to version 11.3.3: + Security: + * CVE-2024-11741: Fix the Grafana Alerting VictorOps integration + (bsc#1236734) + * Chore: Bump dependency golang.org/x/crypto to v0.31.0 + * Drop 0004-Bump-crypto.patch + * Require Go 1.23.5 or newer for building + +- Add provisioning directories + +------------------------------------------------------------------- Old: ---- 0004-Bump-crypto.patch grafana-11.3.2.tar.gz New: ---- grafana-11.3.3.tar.gz BETA DEBUG BEGIN: Old: * Chore: Bump dependency golang.org/x/crypto to v0.31.0 * Drop 0004-Bump-crypto.patch * Require Go 1.23.5 or newer for building BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ grafana.spec ++++++ --- /var/tmp/diff_new_pack.h3A41M/_old 2025-02-03 21:47:25.348182930 +0100 +++ /var/tmp/diff_new_pack.h3A41M/_new 2025-02-03 21:47:25.352183095 +0100 @@ -22,7 +22,7 @@ %endif Name: grafana -Version: 11.3.2 +Version: 11.3.3 Release: 0 Summary: The open-source platform for monitoring and observability License: AGPL-3.0-only @@ -37,12 +37,10 @@ Source4: Makefile Source5: 0001-Add-source-code-reference.patch Patch2: 0002-Use-bash-instead-of-env.patch -# CVE-2024-45337 Bump golang.org/x/crypto -Patch4: 0004-Bump-crypto.patch BuildRequires: fdupes BuildRequires: git-core BuildRequires: wire -BuildRequires: golang(API) >= 1.23.1 +BuildRequires: golang(API) >= 1.23.5 Requires(post): %fillup_prereq Requires: group(grafana) Requires: user(grafana) @@ -96,6 +94,11 @@ install -d -m0755 %{buildroot}/%{_localstatedir}/lib/%{name}/plugins install -d -m0755 %{buildroot}/%{_localstatedir}/lib/%{name}/dashboards install -d -m0755 %{buildroot}%{_sysconfdir}/%{name}/provisioning/dashboards +install -d -m0755 %{buildroot}%{_sysconfdir}/%{name}/provisioning/datasources +install -d -m0755 %{buildroot}%{_sysconfdir}/%{name}/provisioning/plugins +install -d -m0755 %{buildroot}%{_sysconfdir}/%{name}/provisioning/notifiers +install -d -m0755 %{buildroot}%{_sysconfdir}/%{name}/provisioning/access-control +install -d -m0755 %{buildroot}%{_sysconfdir}/%{name}/provisioning/alerting install -Dm640 conf/sample.ini %{buildroot}%{_sysconfdir}/%{name}/%{name}.ini install -Dm640 {conf/,%{buildroot}%{_sysconfdir}/%{name}/}ldap.toml @@ -103,6 +106,9 @@ install -m644 {conf/,%{buildroot}%{_datadir}/%{name}/conf/}sample.ini install -Dm644 {conf/provisioning/dashboards/,%{buildroot}%{_datadir}/%{name}/conf/provisioning/dashboards/}sample.yaml install -Dm644 {conf/provisioning/datasources/,%{buildroot}%{_datadir}/%{name}/conf/provisioning/datasources/}sample.yaml +install -Dm644 {conf/provisioning/plugins/,%{buildroot}%{_datadir}/%{name}/conf/provisioning/plugins/}sample.yaml +install -Dm644 {conf/provisioning/access-control/,%{buildroot}%{_datadir}/%{name}/conf/provisioning/access-control/}sample.yaml +install -Dm644 {conf/provisioning/alerting/,%{buildroot}%{_datadir}/%{name}/conf/provisioning/alerting/}sample.yaml cp -pr public %{buildroot}%{_datadir}/%{name}/ install -d -m755 %{buildroot}%{_datadir}/%{name}/vendor install -d -m755 %{buildroot}%{_datadir}/%{name}/tools @@ -141,6 +147,11 @@ %attr(0755,root,root) %dir %{_sysconfdir}/%{name} %attr(0755,root,root) %dir %{_sysconfdir}/%{name}/provisioning %attr(0755,root,root) %dir %{_sysconfdir}/%{name}/provisioning/dashboards +%attr(0755,root,root) %dir %{_sysconfdir}/%{name}/provisioning/datasources +%attr(0755,root,root) %dir %{_sysconfdir}/%{name}/provisioning/plugins +%attr(0755,root,root) %dir %{_sysconfdir}/%{name}/provisioning/access-control +%attr(0755,root,root) %dir %{_sysconfdir}/%{name}/provisioning/alerting +%attr(0755,root,root) %dir %{_sysconfdir}/%{name}/provisioning/notifiers %attr(0755,root,grafana) %dir %{_datadir}/%{name}/conf %attr(0640,root,grafana) %config(noreplace) %{_sysconfdir}/%{name}/%{name}.ini %attr(0640,root,grafana) %config(noreplace) %{_sysconfdir}/%{name}/ldap.toml @@ -151,6 +162,9 @@ %doc %{_datadir}/%{name}/conf/sample.ini %doc %{_datadir}/%{name}/conf/provisioning/dashboards/sample.yaml %doc %{_datadir}/%{name}/conf/provisioning/datasources/sample.yaml +%doc %{_datadir}/%{name}/conf/provisioning/plugins/sample.yaml +%doc %{_datadir}/%{name}/conf/provisioning/access-control/sample.yaml +%doc %{_datadir}/%{name}/conf/provisioning/alerting/sample.yaml %config %{_datadir}/%{name}/conf/defaults.ini %{_datadir}/%{name} ++++++ Makefile ++++++ --- /var/tmp/diff_new_pack.h3A41M/_old 2025-02-03 21:47:25.388184587 +0100 +++ /var/tmp/diff_new_pack.h3A41M/_new 2025-02-03 21:47:25.388184587 +0100 @@ -26,7 +26,6 @@ patch --no-backup-if-mismatch -p1 -i ../../0001-Add-source-code-reference.patch && \ # End patches section \ # Patches for Go modules go after here \ - patch --no-backup-if-mismatch -p1 -i ../../0004-Bump-crypto.patch && \ # End of Go modules patches section \ go mod download && \ go mod verify && \ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.h3A41M/_old 2025-02-03 21:47:25.428186244 +0100 +++ /var/tmp/diff_new_pack.h3A41M/_new 2025-02-03 21:47:25.432186410 +0100 @@ -5,7 +5,7 @@ <param name="exclude">.git</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> - <param name="revision">v11.3.2</param> + <param name="revision">v11.3.3</param> </service> <service name="recompress" mode="manual"> <param name="compression">gz</param> ++++++ grafana-11.3.2.tar.gz -> grafana-11.3.3.tar.gz ++++++ /work/SRC/openSUSE:Factory/grafana/grafana-11.3.2.tar.gz /work/SRC/openSUSE:Factory/.grafana.new.2316/grafana-11.3.3.tar.gz differ: char 5, line 1 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/grafana/vendor.tar.gz /work/SRC/openSUSE:Factory/.grafana.new.2316/vendor.tar.gz differ: char 5, line 1