Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kubelogin for openSUSE:Factory checked in at 2025-11-24 14:07:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kubelogin (Old) and /work/SRC/openSUSE:Factory/.kubelogin.new.14147 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubelogin" Mon Nov 24 14:07:24 2025 rev:23 rq:1319016 version:0.2.13 Changes: -------- --- /work/SRC/openSUSE:Factory/kubelogin/kubelogin.changes 2025-10-17 17:28:25.680678410 +0200 +++ /work/SRC/openSUSE:Factory/.kubelogin.new.14147/kubelogin.changes 2025-11-24 14:08:44.612147485 +0100 @@ -1,0 +2,17 @@ +Fri Nov 21 06:20:07 UTC 2025 - Johannes Kastl <[email protected]> + +- Update to version 0.2.13: + * What's Changed + - Mention PEM support for client certificates by @ijrsvt in + #717 + - added winget publish actions by @weinong in #718 + - Fix PoP token keychain storage conflict by @fangluguomsft in + #723 + - docs(installation): add alternative mise installation method + by @jylenhof in #724 + * Maintenance + - Bump Go to 1.24.9 to address stdlib CVEs by @Copilot in #726 + - Bump golang.org/x/crypto from 0.40.0 to 0.45.0 by + @dependabot[bot] in #727 + +------------------------------------------------------------------- Old: ---- kubelogin-0.2.12.obscpio New: ---- kubelogin-0.2.13.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kubelogin.spec ++++++ --- /var/tmp/diff_new_pack.yOj6Co/_old 2025-11-24 14:08:46.168212866 +0100 +++ /var/tmp/diff_new_pack.yOj6Co/_new 2025-11-24 14:08:46.172213035 +0100 @@ -17,7 +17,7 @@ Name: kubelogin -Version: 0.2.12 +Version: 0.2.13 Release: 0 Summary: Kubernetes client credential plugin implementing Azure authentication License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.yOj6Co/_old 2025-11-24 14:08:46.232215556 +0100 +++ /var/tmp/diff_new_pack.yOj6Co/_new 2025-11-24 14:08:46.236215723 +0100 @@ -2,7 +2,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/Azure/kubelogin.git</param> <param name="scm">git</param> - <param name="revision">v0.2.12</param> + <param name="revision">v0.2.13</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.yOj6Co/_old 2025-11-24 14:08:46.260216732 +0100 +++ /var/tmp/diff_new_pack.yOj6Co/_new 2025-11-24 14:08:46.264216900 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/Azure/kubelogin.git</param> - <param name="changesrevision">7124d5762def6053add4e0768186ebe53fdfbe71</param></service></servicedata> + <param name="changesrevision">65018ad1d99926a6a3300d139aff5720dc494af9</param></service></servicedata> (No newline at EOF) ++++++ kubelogin-0.2.12.obscpio -> kubelogin-0.2.13.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/.bingo/golangci-lint.mod new/kubelogin-0.2.13/.bingo/golangci-lint.mod --- old/kubelogin-0.2.12/.bingo/golangci-lint.mod 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/.bingo/golangci-lint.mod 2025-11-20 22:49:49.000000000 +0100 @@ -1,5 +1,5 @@ module _ // Auto generated by https://github.com/bwplotka/bingo. DO NOT EDIT -go 1.24.7 +go 1.24.9 require github.com/golangci/golangci-lint/v2 v2.5.0 // cmd/golangci-lint diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/.github/workflows/publish-winget.yaml new/kubelogin-0.2.13/.github/workflows/publish-winget.yaml --- old/kubelogin-0.2.12/.github/workflows/publish-winget.yaml 1970-01-01 01:00:00.000000000 +0100 +++ new/kubelogin-0.2.13/.github/workflows/publish-winget.yaml 2025-11-20 22:49:49.000000000 +0100 @@ -0,0 +1,89 @@ +name: Publish Azure kubelogin to winget + +on: + # Manual trigger so the workflow can be run on demand when the installer is available + workflow_dispatch: + inputs: + version: + description: 'Version of kubelogin to publish (e.g., 0.2.12)' + required: true + +permissions: {} + +env: + # winget-create will read the following environment variable to access the GitHub token needed for submitting a PR + # See https://aka.ms/winget-create-token + WINGET_CREATE_GITHUB_TOKEN: ${{ secrets.WINGET_TOKEN }} + WINGET_PACKAGE_ID: Microsoft.Azure.Kubelogin + +jobs: + publish-winget: + runs-on: windows-latest + steps: + - name: Normalize and set version + id: normalize_version + shell: pwsh + run: | + $version = '${{ github.event.inputs.version }}'.TrimStart('v') + "version=$version" | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append + Write-Host "Normalized version: $version" -ForegroundColor Cyan + + - name: Set installer URL + id: set_url + shell: pwsh + run: | + $version = '${{ steps.normalize_version.outputs.version }}' + $url = "https://packages.aks.azure.com/dalec-packages/kubelogin/$version/windows/amd64/kubelogin_${version}-1_amd64.zip"; + "url=$url" | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append + Write-Host "Installer URL: $url" -ForegroundColor Cyan + + - name: Validate installer availability + shell: pwsh + run: | + $installerUrl = '${{ steps.set_url.outputs.url }}' + Write-Host "Checking installer availability at $installerUrl" -ForegroundColor Cyan + try { + $response = Invoke-WebRequest -Uri $installerUrl -Method Head -UseBasicParsing -ErrorAction Stop + if ($response.StatusCode -ne 200) { + Write-Error "Installer not found. Received HTTP status code $($response.StatusCode)." + exit 1 + } else { + Write-Host "Installer found (HTTP $($response.StatusCode)). Proceeding..." -ForegroundColor Green + } + } catch { + Write-Error "Failed to access the installer URL: $($_.Exception.Message)" + exit 1 + } + + - name: Download wingetcreate + shell: pwsh + run: | + Write-Host "Downloading wingetcreate..." -ForegroundColor Cyan + & curl.exe -JLO https://aka.ms/wingetcreate/latest + if (-not (Test-Path .\wingetcreate.exe)) { + Write-Error "Failed to download wingetcreate.exe" + exit 1 + } + Write-Host "wingetcreate downloaded successfully" -ForegroundColor Green + + - name: Publish to winget + shell: pwsh + run: | + # Use the constructed installer URL and the normalized version + $installerUrl = '${{ steps.set_url.outputs.url }}' + $version = '${{ steps.normalize_version.outputs.version }}' + $packageId = '${{ env.WINGET_PACKAGE_ID }}' + + Write-Host "Publishing $packageId version $version to winget..." -ForegroundColor Cyan + + & .\wingetcreate.exe update $packageId ` + --urls $installerUrl ` + --version $version ` + --submit + + if ($LASTEXITCODE -ne 0) { + Write-Error "wingetcreate failed with exit code $LASTEXITCODE" + exit $LASTEXITCODE + } + + Write-Host "Successfully submitted to winget!" -ForegroundColor Green \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/.tool-versions new/kubelogin-0.2.13/.tool-versions --- old/kubelogin-0.2.12/.tool-versions 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/.tool-versions 2025-11-20 22:49:49.000000000 +0100 @@ -1 +1 @@ -golang 1.24.7 \ No newline at end of file +golang 1.24.9 \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/CHANGELOG.md new/kubelogin-0.2.13/CHANGELOG.md --- old/kubelogin-0.2.12/CHANGELOG.md 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/CHANGELOG.md 2025-11-20 22:49:49.000000000 +0100 @@ -1,5 +1,27 @@ # Change Log +## [0.2.13] + +### What's Changed + +* Mention PEM support for client certificates by @ijrsvt in https://github.com/Azure/kubelogin/pull/717 +* added winget publish actions by @weinong in https://github.com/Azure/kubelogin/pull/718 +* Fix PoP token keychain storage conflict by @fangluguomsft in https://github.com/Azure/kubelogin/pull/723 +* docs(installation): add alternative mise installation method by @jylenhof in https://github.com/Azure/kubelogin/pull/724 + +### Maintenance + +* Bump Go to 1.24.9 to address stdlib CVEs by @Copilot in https://github.com/Azure/kubelogin/pull/726 +* Bump golang.org/x/crypto from 0.40.0 to 0.45.0 by @dependabot[bot] in https://github.com/Azure/kubelogin/pull/727 + +### New Contributors + +* @ijrsvt made their first contribution in https://github.com/Azure/kubelogin/pull/717 +* @fangluguomsft made their first contribution in https://github.com/Azure/kubelogin/pull/723 +* @jylenhof made their first contribution in https://github.com/Azure/kubelogin/pull/724 + +**Full Changelog**: https://github.com/Azure/kubelogin/compare/v0.2.12...v0.2.13 + ## [0.2.12] ### What's Changed diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/docs/book/src/cli/convert-kubeconfig.md new/kubelogin-0.2.13/docs/book/src/cli/convert-kubeconfig.md --- old/kubelogin-0.2.12/docs/book/src/cli/convert-kubeconfig.md 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/docs/book/src/cli/convert-kubeconfig.md 2025-11-20 22:49:49.000000000 +0100 @@ -18,8 +18,8 @@ --azure-config-dir string Azure CLI config path --azure-pipelines-service-connection-id string Service connection (resource) ID used by azurepipelines login method --cache-dir string directory to cache authentication record (default "/home/weinongw/.kube/cache/kubelogin/") - --client-certificate string AAD client cert in pfx. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_CERTIFICATE or AZURE_CLIENT_CERTIFICATE_PATH environment variable - --client-certificate-password string Password for AAD client cert. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_CERTIFICATE_PASSWORD or AZURE_CLIENT_CERTIFICATE_PASSWORD environment variable + --client-certificate string AAD client cert in pfx or PEM. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_CERTIFICATE or AZURE_CLIENT_CERTIFICATE_PATH environment variable + --client-certificate-password string Password for AAD client cert. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_CERTIFICATE_PASSWORD or AZURE_CLIENT_CERTIFICATE_PASSWORD environment variable. Only used for PFX encoded certs. --client-id string AAD client application ID. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_ID or AZURE_CLIENT_ID environment variable --client-secret string AAD client application secret. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_SECRET or AZURE_CLIENT_SECRET environment variable --context string The name of the kubeconfig context to use diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/docs/book/src/cli/get-token.md new/kubelogin-0.2.13/docs/book/src/cli/get-token.md --- old/kubelogin-0.2.12/docs/book/src/cli/get-token.md 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/docs/book/src/cli/get-token.md 2025-11-20 22:49:49.000000000 +0100 @@ -15,8 +15,8 @@ --authority-host string Workload Identity authority host. It may be specified in AZURE_AUTHORITY_HOST environment variable --azure-pipelines-service-connection-id string Service connection (resource) ID used by azurepipelines login method. It may be specified in AZURESUBSCRIPTION_SERVICE_CONNECTION_ID environment variable --cache-dir string directory to cache authentication record (default "/home/weinongw/.kube/cache/kubelogin/") - --client-certificate string AAD client cert in pfx. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_CERTIFICATE or AZURE_CLIENT_CERTIFICATE_PATH environment variable - --client-certificate-password string Password for AAD client cert. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_CERTIFICATE_PASSWORD or AZURE_CLIENT_CERTIFICATE_PASSWORD environment variable + --client-certificate string AAD client cert in pfx or PEM. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_CERTIFICATE or AZURE_CLIENT_CERTIFICATE_PATH environment variable + --client-certificate-password string Password for AAD client cert. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_CERTIFICATE_PASSWORD or AZURE_CLIENT_CERTIFICATE_PASSWORD environment variable. Only used for PFX encoded certs. --client-id string AAD client application ID. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_ID or AZURE_CLIENT_ID environment variable. For Azure Pipelines login, it may be specified in AZURESUBSCRIPTION_CLIENT_ID environment variable --client-secret string AAD client application secret. Used in spn login. It may be specified in AAD_SERVICE_PRINCIPAL_CLIENT_SECRET or AZURE_CLIENT_SECRET environment variable --disable-environment-override Enable or disable the use of env-variables. Default false diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/docs/book/src/install.md new/kubelogin-0.2.13/docs/book/src/install.md --- old/kubelogin-0.2.12/docs/book/src/install.md 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/docs/book/src/install.md 2025-11-20 22:49:49.000000000 +0100 @@ -55,6 +55,12 @@ asdf set kubelogin latest ``` +### Using [mise](https://github.com/jdx/mise) + +```sh +mise use -g azure-kubelogin@latest +``` + ## Windows ### Using winget @@ -101,4 +107,4 @@ [System.Environment]::SetEnvironmentVariable("Path",$newPath,"User") $env:Path = [System.Environment]::GetEnvironmentVariable("Path","User"),[System.Environment]::GetEnvironmentVariable("Path","Machine") -join ";" } -``` \ No newline at end of file +``` diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/go.mod new/kubelogin-0.2.13/go.mod --- old/kubelogin-0.2.12/go.mod 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/go.mod 2025-11-20 22:49:49.000000000 +0100 @@ -1,7 +1,7 @@ module github.com/Azure/kubelogin // NOTE: kubelogin follows the same support policy as Go, which supports the last two major versions. -go 1.24.7 +go 1.24.9 require ( github.com/Azure/azure-sdk-for-go/sdk/azcore v1.14.0 @@ -18,8 +18,8 @@ github.com/spf13/pflag v1.0.5 github.com/stretchr/testify v1.10.0 go.uber.org/mock v0.5.0 - golang.org/x/crypto v0.40.0 - golang.org/x/sys v0.35.0 + golang.org/x/crypto v0.45.0 + golang.org/x/sys v0.38.0 gopkg.in/dnaeon/go-vcr.v4 v4.0.2 k8s.io/apimachinery v0.29.3 k8s.io/cli-runtime v0.29.3 @@ -69,11 +69,11 @@ github.com/pmezard/go-difflib v1.0.0 // indirect github.com/xlab/treeprint v1.2.0 // indirect go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect - golang.org/x/net v0.41.0 // indirect + golang.org/x/net v0.47.0 // indirect golang.org/x/oauth2 v0.30.0 // indirect - golang.org/x/sync v0.16.0 // indirect - golang.org/x/term v0.33.0 // indirect - golang.org/x/text v0.27.0 // indirect + golang.org/x/sync v0.18.0 // indirect + golang.org/x/term v0.37.0 // indirect + golang.org/x/text v0.31.0 // indirect golang.org/x/time v0.3.0 // indirect google.golang.org/protobuf v1.33.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/go.sum new/kubelogin-0.2.13/go.sum --- old/kubelogin-0.2.12/go.sum 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/go.sum 2025-11-20 22:49:49.000000000 +0100 @@ -196,8 +196,8 @@ golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58= -golang.org/x/crypto v0.40.0 h1:r4x+VvoG5Fm+eJcxMaY8CQM7Lb0l1lsmjGBQ6s8BfKM= -golang.org/x/crypto v0.40.0/go.mod h1:Qr1vMER5WyS2dfPHAlsOj01wgLbsyWtFn/aY+5+ZdxY= +golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q= +golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE= golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU= @@ -217,8 +217,8 @@ golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= -golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw= -golang.org/x/net v0.41.0/go.mod h1:B/K4NNqkfmg07DQYrbwvSluqCJOOXwUjeb/5lOisjbA= +golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY= +golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.30.0 h1:dnDm7JmhM45NNpd8FDDeLhK6FwqbOf4MLCM9zb1BOHI= golang.org/x/oauth2 v0.30.0/go.mod h1:B++QgG3ZKulg6sRPGD/mqlHQs5rB3Ml9erfeDY7xKlU= @@ -228,8 +228,8 @@ golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.16.0 h1:ycBJEhp9p4vXvUZNszeOq0kGTPghopOL8q0fq3vstxw= -golang.org/x/sync v0.16.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA= +golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I= +golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -243,21 +243,21 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.35.0 h1:vz1N37gP5bs89s7He8XuIYXpyY0+QlsKmzipCbUtyxI= -golang.org/x/sys v0.35.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k= +golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc= +golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.0.0-20220526004731-065cf7ba2467/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= -golang.org/x/term v0.33.0 h1:NuFncQrRcaRvVmgRkvM3j/F00gWIAlcmlB8ACEKmGIg= -golang.org/x/term v0.33.0/go.mod h1:s18+ql9tYWp1IfpV9DmCtQDDSRBUjKaw9M1eAv5UeF0= +golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU= +golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= -golang.org/x/text v0.27.0 h1:4fGWRpyh641NLlecmyl4LOe6yDdfaYNrGb2zdfo4JV4= -golang.org/x/text v0.27.0/go.mod h1:1D28KMCvyooCX9hBiosv5Tz/+YLxj0j7XhWjpSUF7CU= +golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM= +golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM= golang.org/x/time v0.3.0 h1:rg5rLMjNzMS1RkNLzCG38eapWhnYLFYXDXj2gOlr8j4= golang.org/x/time v0.3.0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= @@ -269,8 +269,8 @@ golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= -golang.org/x/tools v0.34.0 h1:qIpSLOxeCYGg9TrcJokLBG4KFA6d795g0xkBkiESGlo= -golang.org/x/tools v0.34.0/go.mod h1:pAP9OwEaY1CAW3HOmg3hLZC5Z0CCmzjAF2UQMSqNARg= +golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ= +golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/pkg/internal/pop/cache/darwin.go new/kubelogin-0.2.13/pkg/internal/pop/cache/darwin.go --- old/kubelogin-0.2.12/pkg/internal/pop/cache/darwin.go 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/pkg/internal/pop/cache/darwin.go 2025-11-20 22:49:49.000000000 +0100 @@ -3,12 +3,15 @@ package cache import ( + "path/filepath" + "github.com/AzureAD/microsoft-authentication-extensions-for-go/cache/accessor" ) -// storage creates a platform-specific accessor for macOS +// storage creates a platform-specific accessor for macOS for MSAL cache func storage(cachePath string) (accessor.Accessor, error) { + // Use the filename from cachePath as the account identifier + accountName := filepath.Base(cachePath) // Use "kubelogin-pop" as the service name in macOS Keychain - // "MSALCache" becomes the account identifier within that service - return accessor.New("kubelogin-pop", accessor.WithAccount("MSALCache")) + return accessor.New("kubelogin-pop", accessor.WithAccount(accountName)) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubelogin-0.2.12/pkg/internal/token/options.go new/kubelogin-0.2.13/pkg/internal/token/options.go --- old/kubelogin-0.2.12/pkg/internal/token/options.go 2025-10-16 21:32:26.000000000 +0200 +++ new/kubelogin-0.2.13/pkg/internal/token/options.go 2025-11-20 22:49:49.000000000 +0100 @@ -106,9 +106,9 @@ fs.StringVar(&o.ClientSecret, "client-secret", o.ClientSecret, fmt.Sprintf("AAD client application secret. Used in spn login. It may be specified in %s or %s environment variable", env.KubeloginClientSecret, env.AzureClientSecret)) fs.StringVar(&o.ClientCert, "client-certificate", o.ClientCert, - fmt.Sprintf("AAD client cert in pfx. Used in spn login. It may be specified in %s or %s environment variable", env.KubeloginClientCertificatePath, env.AzureClientCertificatePath)) + fmt.Sprintf("AAD client cert in pfx or PEM. Used in spn login. It may be specified in %s or %s environment variable", env.KubeloginClientCertificatePath, env.AzureClientCertificatePath)) fs.StringVar(&o.ClientCertPassword, "client-certificate-password", o.ClientCertPassword, - fmt.Sprintf("Password for AAD client cert. Used in spn login. It may be specified in %s or %s environment variable", env.KubeloginClientCertificatePassword, env.AzureClientCertificatePassword)) + fmt.Sprintf("Password for AAD client cert. Used in spn login. It may be specified in %s or %s environment variable. Only used for PFX encoded certs.", env.KubeloginClientCertificatePassword, env.AzureClientCertificatePassword)) fs.StringVar(&o.Username, "username", o.Username, fmt.Sprintf("user name for ropc login flow. It may be specified in %s or %s environment variable", env.KubeloginROPCUsername, env.AzureUsername)) fs.StringVar(&o.Password, "password", o.Password, ++++++ kubelogin.obsinfo ++++++ --- /var/tmp/diff_new_pack.yOj6Co/_old 2025-11-24 14:08:46.628232195 +0100 +++ /var/tmp/diff_new_pack.yOj6Co/_new 2025-11-24 14:08:46.640232699 +0100 @@ -1,5 +1,5 @@ name: kubelogin -version: 0.2.12 -mtime: 1760643146 -commit: 7124d5762def6053add4e0768186ebe53fdfbe71 +version: 0.2.13 +mtime: 1763675389 +commit: 65018ad1d99926a6a3300d139aff5720dc494af9 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/kubelogin/vendor.tar.gz /work/SRC/openSUSE:Factory/.kubelogin.new.14147/vendor.tar.gz differ: char 44, line 1
