Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package digger-cli for openSUSE:Factory checked in at 2025-05-22 16:55:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/digger-cli (Old) and /work/SRC/openSUSE:Factory/.digger-cli.new.2732 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "digger-cli" Thu May 22 16:55:58 2025 rev:18 rq:1278920 version:0.6.101 Changes: -------- --- /work/SRC/openSUSE:Factory/digger-cli/digger-cli.changes 2025-05-20 12:20:38.291455230 +0200 +++ /work/SRC/openSUSE:Factory/.digger-cli.new.2732/digger-cli.changes 2025-05-22 16:56:10.620155130 +0200 @@ -1,0 +2,8 @@ +Wed May 21 04:40:37 UTC 2025 - Johannes Kastl <opensuse_buildserv...@ojkastl.de> + +- Update to version 0.6.101: + * add page to mintjson fips (#1953) + * enable fips140 builds (#1952) + * chore/go 124 upgrade (#1951) + +------------------------------------------------------------------- Old: ---- digger-cli-0.6.100.obscpio New: ---- digger-cli-0.6.101.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ digger-cli.spec ++++++ --- /var/tmp/diff_new_pack.a0WyZW/_old 2025-05-22 16:56:11.716201593 +0200 +++ /var/tmp/diff_new_pack.a0WyZW/_new 2025-05-22 16:56:11.720201762 +0200 @@ -19,7 +19,7 @@ %define executable_name digger Name: digger-cli -Version: 0.6.100 +Version: 0.6.101 Release: 0 Summary: CLI for the digger open source IaC orchestration tool License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.a0WyZW/_old 2025-05-22 16:56:11.752203119 +0200 +++ /var/tmp/diff_new_pack.a0WyZW/_new 2025-05-22 16:56:11.756203288 +0200 @@ -6,7 +6,7 @@ <param name="exclude">go.mod</param> <param name="exclude">go.work</param> <param name="exclude">go.work.sum</param> - <param name="revision">v0.6.100</param> + <param name="revision">v0.6.101</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.a0WyZW/_old 2025-05-22 16:56:11.776204136 +0200 +++ /var/tmp/diff_new_pack.a0WyZW/_new 2025-05-22 16:56:11.780204306 +0200 @@ -1,7 +1,7 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/diggerhq/digger</param> - <param name="changesrevision">b7b2b43f6fc928e6a9aaf8c407b13117d7baa814</param></service><service name="tar_scm"> + <param name="changesrevision">53d535e855158827dc559e5189803e47a0fada54</param></service><service name="tar_scm"> <param name="url">https://github.com/johanneskastl/digger</param> <param name="changesrevision">8fe377068e53e2050ff4c745388d8428d2b13bb0</param></service></servicedata> (No newline at EOF) ++++++ digger-cli-0.6.100.obscpio -> digger-cli-0.6.101.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/Dockerfile_backend new/digger-cli-0.6.101/Dockerfile_backend --- old/digger-cli-0.6.100/Dockerfile_backend 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/Dockerfile_backend 2025-05-20 21:19:45.000000000 +0200 @@ -1,4 +1,4 @@ -FROM golang:1.22 as builder +FROM golang:1.24.0 as builder ARG COMMIT_SHA RUN echo "commit sha: ${COMMIT_SHA}" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/Dockerfile_backend_ee new/digger-cli-0.6.101/Dockerfile_backend_ee --- old/digger-cli-0.6.100/Dockerfile_backend_ee 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/Dockerfile_backend_ee 2025-05-20 21:19:45.000000000 +0200 @@ -1,4 +1,4 @@ -FROM golang:1.22 as builder +FROM golang:1.24.0 as builder ARG COMMIT_SHA RUN echo "commit sha: ${COMMIT_SHA}" @@ -20,8 +20,16 @@ # Multi-stage build will just copy the binary to an alpine image. FROM ubuntu:24.04 as runner -ENV ATLAS_VERSION v0.31.0 + ARG COMMIT_SHA +ARG GODEBUG_VALUE=off +ARG GOFIPS140_VALUE=off + +# Set environment variables using the build arguments +ENV GODEBUG=$GODEBUG_VALUE +ENV GOFIPS140=$GOFIPS140_VALUE +ENV ATLAS_VERSION v0.31.0 + WORKDIR /app RUN apt-get update && apt-get install -y ca-certificates curl && apt-get install -y git && apt-get clean all diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/Dockerfile_drift new/digger-cli-0.6.101/Dockerfile_drift --- old/digger-cli-0.6.100/Dockerfile_drift 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/Dockerfile_drift 2025-05-20 21:19:45.000000000 +0200 @@ -1,4 +1,4 @@ -FROM golang:1.22 as builder +FROM golang:1.24.0 as builder ARG COMMIT_SHA RUN echo "commit sha: ${COMMIT_SHA}" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/Dockerfile_next new/digger-cli-0.6.101/Dockerfile_next --- old/digger-cli-0.6.100/Dockerfile_next 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/Dockerfile_next 2025-05-20 21:19:45.000000000 +0200 @@ -1,5 +1,5 @@ # Stage 1: Builder -FROM golang:1.22.4 AS builder +FROM golang:1.24.0 AS builder # Build arguments ARG COMMIT_SHA diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/action.yml new/digger-cli-0.6.101/action.yml --- old/digger-cli-0.6.100/action.yml 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/action.yml 2025-05-20 21:19:45.000000000 +0200 @@ -8,6 +8,10 @@ description: use ee cli? required: false default: 'false' + fips: + description: build with fips140 standard? + required: false + default: 'false' setup-aws: description: Setup AWS required: false @@ -427,6 +431,10 @@ else cd $GITHUB_ACTION_PATH/cli fi + if [[ ${{ inputs.fips }} == "true" ]]; then + export GODEBUG=fips140=only + export GOFIPS140=v1.0.0 + fi go build -o digger ./cmd/digger chmod +x digger PATH=$PATH:$(pwd) @@ -467,7 +475,11 @@ shell: bash run: | if [[ ${{ inputs.ee }} == "true" ]]; then - curl -sL https://github.com/diggerhq/digger/releases/download/${actionref}/digger-ee-cli-${{ runner.os }}-${{ runner.arch }} -o digger + if [[ ${{ inputs.fips }} == "true" ]]; then + curl -sL https://github.com/diggerhq/digger/releases/download/${actionref}/digger-ee-cli-${{ runner.os }}-${{ runner.arch }}-fips -o digger + else + curl -sL https://github.com/diggerhq/digger/releases/download/${actionref}/digger-ee-cli-${{ runner.os }}-${{ runner.arch }} -o digger + fi else curl -sL https://github.com/diggerhq/digger/releases/download/${actionref}/digger-cli-${{ runner.os }}-${{ runner.arch }} -o digger fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/backend/go.mod new/digger-cli-0.6.101/backend/go.mod --- old/digger-cli-0.6.100/backend/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/backend/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/diggerhq/digger/backend -go 1.21.6 +go 1.24.0 replace github.com/diggerhq/digger/libs => ../libs diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/cli/cmd/digger/default.go new/digger-cli-0.6.101/cli/cmd/digger/default.go --- old/digger-cli-0.6.100/cli/cmd/digger/default.go 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/cli/cmd/digger/default.go 2025-05-20 21:19:45.000000000 +0200 @@ -19,6 +19,7 @@ ) func initLogger() { + logLevel := os.Getenv("DIGGER_LOG_LEVEL") var level slog.Leveler if logLevel == "DEBUG" { @@ -81,7 +82,7 @@ defer func() { if r := recover(); r != nil { - slog.Error(fmt.Sprintf("stacktrace from panic: " + string(debug.Stack()))) + slog.Error("stacktrace from panic: " + string(debug.Stack())) err := usage.SendLogRecord(logLeader, fmt.Sprintf("Panic occurred. %s", r)) if err != nil { slog.Error("Failed to send log record", "error", err) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/cli/go.mod new/digger-cli-0.6.101/cli/go.mod --- old/digger-cli-0.6.100/cli/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/cli/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/diggerhq/digger/cli -go 1.21.6 +go 1.24.0 replace github.com/diggerhq/digger/libs => ../libs diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/cli/pkg/digger/digger.go new/digger-cli-0.6.101/cli/pkg/digger/digger.go --- old/digger-cli-0.6.100/cli/pkg/digger/digger.go 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/cli/pkg/digger/digger.go 2025-05-20 21:19:45.000000000 +0200 @@ -279,7 +279,7 @@ err = prService.SetStatus(*job.PullRequestNumber, "pending", job.ProjectName+"/plan") if err != nil { msg := fmt.Sprintf("Failed to set PR status. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } planSummary, planPerformed, isNonEmptyPlan, plan, planJsonOutput, err := diggerExecutor.Plan() @@ -289,10 +289,10 @@ err := prService.SetStatus(*job.PullRequestNumber, "failure", job.ProjectName+"/plan") if err != nil { msg := fmt.Sprintf("Failed to set PR status. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } else if planPerformed { if isNonEmptyPlan { reportTerraformPlanOutput(reporter, projectLock.LockId(), plan) @@ -300,7 +300,7 @@ if err != nil { msg := fmt.Sprintf("Failed to validate plan. %v", err) slog.Error("Failed to validate plan.", "error", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } var planPolicyFormatter func(report string) string summary := fmt.Sprintf("Terraform plan validation check (%v)", job.ProjectName) @@ -329,7 +329,7 @@ } msg := fmt.Sprintf("Plan is not allowed") slog.Error(msg) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } else { _, _, err := reporter.Report("Terraform plan validation checks succeeded :white_check_mark:", planPolicyFormatter) if err != nil { @@ -343,7 +343,7 @@ err := prService.SetStatus(*job.PullRequestNumber, "success", job.ProjectName+"/plan") if err != nil { msg := fmt.Sprintf("Failed to set PR status. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } result := execution.DiggerExecutorResult{ OperationType: execution.DiggerOparationTypePlan, @@ -364,27 +364,27 @@ err = prService.SetStatus(*job.PullRequestNumber, "pending", job.ProjectName+"/apply") if err != nil { msg := fmt.Sprintf("Failed to set PR status. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } isMerged, err := prService.IsMerged(*job.PullRequestNumber) if err != nil { msg := fmt.Sprintf("Failed to check if PR is merged. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } // this might go into some sort of "appliability" plugin later isMergeable, err := prService.IsMergeable(*job.PullRequestNumber) if err != nil { msg := fmt.Sprintf("Failed to check if PR is mergeable. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } slog.Info("PR status Information", "mergeable", isMergeable, "merged", isMerged, "skipMergeCheck", job.SkipMergeCheck) if !isMergeable && !isMerged && !job.SkipMergeCheck { comment := reportApplyMergeabilityError(reporter) prService.SetStatus(*job.PullRequestNumber, "failure", job.ProjectName+"/apply") - return nil, comment, fmt.Errorf(comment) + return nil, comment, fmt.Errorf("%s", comment) } else { // checking policies (plan, access) @@ -395,14 +395,14 @@ if err != nil { msg := fmt.Sprintf("Failed to retrieve stored plan. %v", err) slog.Error("Failed to retrieve stored plan.", "error", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } _, violations, err := policyChecker.CheckPlanPolicy(SCMrepository, SCMOrganisation, job.ProjectName, job.ProjectDir, terraformPlanJsonStr) if err != nil { msg := fmt.Sprintf("Failed to check plan policy. %v", err) slog.Error("Failed to check plan policy.", "error", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } planPolicyViolations = violations } else { @@ -414,7 +414,7 @@ if err != nil { msg := fmt.Sprintf("Failed to run plan policy check before apply. %v", err) slog.Error("Failed to run plan policy check before apply", "error", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } if !allowedToApply { msg := reportPolicyError(job.ProjectName, command, requestedBy, reporter) @@ -431,15 +431,15 @@ err := prService.SetStatus(*job.PullRequestNumber, "failure", job.ProjectName+"/apply") if err != nil { msg := fmt.Sprintf("Failed to set PR status. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } msg := fmt.Sprintf("Failed to run digger apply command. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } else if applyPerformed { err := prService.SetStatus(*job.PullRequestNumber, "success", job.ProjectName+"/apply") if err != nil { msg := fmt.Sprintf("Failed to set PR status. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } appliesPerProject[job.ProjectName] = true } @@ -475,7 +475,7 @@ err = diggerExecutor.Unlock() if err != nil { msg := fmt.Sprintf("Failed to unlock project. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } if planStorage != nil { @@ -492,12 +492,12 @@ err = diggerExecutor.Lock() if err != nil { msg := fmt.Sprintf("Failed to lock project. %v", err) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } default: msg := fmt.Sprintf("Command '%s' is not supported", command) - return nil, msg, fmt.Errorf(msg) + return nil, msg, fmt.Errorf("%s", msg) } return &execution.DiggerExecutorResult{}, "", nil } @@ -660,7 +660,7 @@ if err != nil { slog.Error("Error reporting Run.", "error", err) } - return fmt.Errorf(msg) + return fmt.Errorf("%s", msg) } planIsAllowed, messages, err := policyChecker.CheckPlanPolicy(SCMrepository, SCMOrganisation, job.ProjectName, job.ProjectDir, planJsonOutput) slog.Info(strings.Join(messages, "\n")) @@ -671,7 +671,7 @@ if err != nil { slog.Error("Error reporting Run.", "error", err) } - return fmt.Errorf(msg) + return fmt.Errorf("%s", msg) } if !planIsAllowed { msg := fmt.Sprintf("Plan is not allowed") @@ -680,7 +680,7 @@ if err != nil { slog.Error("Error reporting Run.", "error", err) } - return fmt.Errorf(msg) + return fmt.Errorf("%s", msg) } else { err = backendApi.ReportProjectRun(repo, job.ProjectName, runStartedAt, time.Now(), "SUCCESS", command, plan) if err != nil { @@ -701,7 +701,7 @@ if err != nil { slog.Error("Error reporting Run.", "error", err) } - return fmt.Errorf(msg) + return fmt.Errorf("%s", msg) } err = backendApi.ReportProjectRun(repo, job.ProjectName, runStartedAt, time.Now(), "SUCCESS", command, output) if err != nil { @@ -742,7 +742,7 @@ if err != nil { msg := fmt.Sprintf("failed to check drift policy. %v", err) slog.Error(msg) - return msg, fmt.Errorf(msg) + return msg, fmt.Errorf("%s", msg) } if !policyEnabled { @@ -754,7 +754,7 @@ if err != nil { msg := fmt.Sprintf("failed to Run digger plan command. %v", err) slog.Error(msg) - return msg, fmt.Errorf(msg) + return msg, fmt.Errorf("%s", msg) } if planPerformed && nonEmptyPlan { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/cli/pkg/drift/slack.go new/digger-cli-0.6.101/cli/pkg/drift/slack.go --- old/digger-cli-0.6.100/cli/pkg/drift/slack.go 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/cli/pkg/drift/slack.go 2025-05-20 21:19:45.000000000 +0200 @@ -78,7 +78,7 @@ } slog.Error("failed to send slack drift request", "status code", resp.Status, "body", body) msg := fmt.Sprintf("failed to send slack drift request. %v. Message: %v", resp.Status, body) - return fmt.Errorf(msg) + return fmt.Errorf("%s", msg) } resp.Body.Close() } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/cli_e2e/go.mod new/digger-cli-0.6.101/cli_e2e/go.mod --- old/digger-cli-0.6.100/cli_e2e/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/cli_e2e/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/diggerhq/digger/cli_e2e -go 1.22.0 +go 1.24.0 require github.com/stretchr/testify v1.9.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/dgctl/go.mod new/digger-cli-0.6.101/dgctl/go.mod --- old/digger-cli-0.6.100/dgctl/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/dgctl/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/diggerhq/digger/dgctl -go 1.22.4 +go 1.24.0 require ( diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/docs/ee/fips-140.mdx new/digger-cli-0.6.101/docs/ee/fips-140.mdx --- old/digger-cli-0.6.100/docs/ee/fips-140.mdx 1970-01-01 01:00:00.000000000 +0100 +++ new/digger-cli-0.6.101/docs/ee/fips-140.mdx 2025-05-20 21:19:45.000000000 +0200 @@ -0,0 +1,19 @@ +--- +title: "FIPS 140 standard" +--- + +You can use digger binary with FIPS140 standard. FIPS 140 (Federal Information Processing Standard Publication 140) is a U.S. government standard that specifies security requirements for cryptographic modules protecting sensitive information. + +as of version v0.6.101 digger backend and cli are both compiled seperately with FIPS140 enabled. In order to enable it for github follow these steps: + +- For the backend you need to ensure you use the right docker image: `_backend_ee_fips` during the pull +- For the cli you need to add the following argument in addition to `ee: true` : + +``` + - diggerhq/digger@vLatest + with: + ee: 'true' + fips: 'true' +``` + +If you are using gitlab or other VCS then just ensure that you are downloading the fips enabled binary which is suffixed with '_fips' \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/docs/mint.json new/digger-cli-0.6.101/docs/mint.json --- old/digger-cli-0.6.100/docs/mint.json 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/docs/mint.json 2025-05-20 21:19:45.000000000 +0200 @@ -57,7 +57,8 @@ "ee/opa", "ee/multi-github", "ee/gitlab", - "ee/buildkite" + "ee/buildkite", + "ee/fips-140" ] }, { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/ee/backend/go.mod new/digger-cli-0.6.101/ee/backend/go.mod --- old/digger-cli-0.6.100/ee/backend/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/ee/backend/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -4,7 +4,7 @@ replace github.com/diggerhq/digger/backend => ../../backend -go 1.22.4 +go 1.24.0 require ( github.com/bradleyfalzon/ghinstallation/v2 v2.11.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/ee/backend/main.go new/digger-cli-0.6.101/ee/backend/main.go --- old/digger-cli-0.6.100/ee/backend/main.go 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/ee/backend/main.go 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,7 @@ package main import ( + "crypto/fips140" "embed" "fmt" "github.com/diggerhq/digger/backend/bootstrap" @@ -31,6 +32,8 @@ log.Printf("error checking license %v", err) os.Exit(1) } + + log.Printf("fips140 enabled: %v", fips140.Enabled()) githubProvider := github.DiggerGithubEEClientProvider{} diggerController := ce_controllers.DiggerController{ CiBackendProvider: ci_backends2.EEBackendProvider{}, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/ee/cli/cmd/digger/default.go new/digger-cli-0.6.101/ee/cli/cmd/digger/default.go --- old/digger-cli-0.6.100/ee/cli/cmd/digger/default.go 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/ee/cli/cmd/digger/default.go 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,7 @@ package main import ( + "crypto/fips140" "encoding/json" "fmt" "github.com/diggerhq/digger/cli/pkg/digger" @@ -24,8 +25,8 @@ var defaultCmd = &cobra.Command{ Use: "default", Run: func(cmd *cobra.Command, args []string) { - specStr := os.Getenv("DIGGER_RUN_SPEC") + log.Printf("Fips140 enabled in build: %v", fips140.Enabled()) if specStr != "" { var spec lib_spec.Spec err := json.Unmarshal([]byte(specStr), &spec) @@ -78,7 +79,7 @@ defer func() { if r := recover(); r != nil { - log.Println(fmt.Sprintf("stacktrace from panic: \n" + string(debug.Stack()))) + log.Println("stacktrace from panic: \n" + string(debug.Stack())) err := usage.SendLogRecord(logLeader, fmt.Sprintf("Panic occurred. %s", r)) if err != nil { log.Printf("Failed to send log record. %s\n", err) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/ee/cli/go.mod new/digger-cli-0.6.101/ee/cli/go.mod --- old/digger-cli-0.6.100/ee/cli/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/ee/cli/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/diggerhq/digger/ee/cli -go 1.22.4 +go 1.24.0 replace github.com/diggerhq/digger/libs => ../../libs diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/ee/drift/dbgen/go.mod new/digger-cli-0.6.101/ee/drift/dbgen/go.mod --- old/digger-cli-0.6.100/ee/drift/dbgen/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/ee/drift/dbgen/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,6 @@ module dbgen -go 1.22.0 +go 1.24.0 require ( gorm.io/driver/postgres v1.5.9 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/ee/drift/go.mod new/digger-cli-0.6.101/ee/drift/go.mod --- old/digger-cli-0.6.100/ee/drift/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/ee/drift/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -4,7 +4,7 @@ replace github.com/diggerhq/digger/libs => ../../libs -go 1.22.4 +go 1.24.0 require ( github.com/bradleyfalzon/ghinstallation/v2 v2.11.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/libs/execution/execution.go new/digger-cli-0.6.101/libs/execution/execution.go --- old/digger-cli-0.6.100/libs/execution/execution.go 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/libs/execution/execution.go 2025-05-20 21:19:45.000000000 +0200 @@ -50,7 +50,7 @@ locked, err := l.ProjectLock.Lock() if err != nil { msg := fmt.Sprintf("digger apply, error locking project: %v", err) - return nil, false, msg, fmt.Errorf(msg) + return nil, false, msg, fmt.Errorf("%s", msg) } slog.Info("Lock result", "locked", locked) if locked { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/libs/go.mod new/digger-cli-0.6.101/libs/go.mod --- old/digger-cli-0.6.100/libs/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/libs/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/diggerhq/digger/libs -go 1.21.6 +go 1.24.0 require ( cloud.google.com/go/storage v1.46.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/libs/locking/locking.go new/digger-cli-0.6.101/libs/locking/locking.go --- old/digger-cli-0.6.100/libs/locking/locking.go 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/libs/locking/locking.go 2025-05-20 21:19:45.000000000 +0200 @@ -75,7 +75,7 @@ comment := "Project " + projectLock.projectId() + " locked by another PR #" + transactionIdStr + " (failed to acquire lock " + projectLock.ProjectNamespace + "). The locking plan must be applied or discarded before future plans can execute" reportLockingFailed(projectLock.Reporter, comment) - return false, fmt.Errorf(comment) + return false, fmt.Errorf("%s", comment) } } @@ -152,7 +152,7 @@ transactionIdStr := strconv.Itoa(*transactionId) comment := "Project " + projectLock.projectId() + " locked by another PR #" + transactionIdStr + "(failed to acquire lock " + projectLock.ProjectName + "). The locking plan must be applied or discarded before future plans can execute" reportLockingFailed(projectLock.Reporter, comment) - return false, fmt.Errorf(comment) + return false, fmt.Errorf("%s", comment) } return true, nil } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/next/dbgen/go.mod new/digger-cli-0.6.101/next/dbgen/go.mod --- old/digger-cli-0.6.100/next/dbgen/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/next/dbgen/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,6 @@ module dbgen -go 1.22.4 +go 1.24.0 require ( github.com/Joker/jade v1.1.3 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/digger-cli-0.6.100/next/go.mod new/digger-cli-0.6.101/next/go.mod --- old/digger-cli-0.6.100/next/go.mod 2025-05-19 23:43:17.000000000 +0200 +++ new/digger-cli-0.6.101/next/go.mod 2025-05-20 21:19:45.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/diggerhq/digger/next -go 1.22.4 +go 1.24.0 replace github.com/diggerhq/digger/backend => ../backend ++++++ digger-cli.obsinfo ++++++ --- /var/tmp/diff_new_pack.a0WyZW/_old 2025-05-22 16:56:12.620239916 +0200 +++ /var/tmp/diff_new_pack.a0WyZW/_new 2025-05-22 16:56:12.624240085 +0200 @@ -1,5 +1,5 @@ name: digger-cli -version: 0.6.100 -mtime: 1747690997 -commit: b7b2b43f6fc928e6a9aaf8c407b13117d7baa814 +version: 0.6.101 +mtime: 1747768785 +commit: 53d535e855158827dc559e5189803e47a0fada54 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/digger-cli/vendor.tar.gz /work/SRC/openSUSE:Factory/.digger-cli.new.2732/vendor.tar.gz differ: char 13, line 1