Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mcphost for openSUSE:Factory checked in at 2026-01-13 21:26:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mcphost (Old) and /work/SRC/openSUSE:Factory/.mcphost.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mcphost" Tue Jan 13 21:26:48 2026 rev:3 rq:1326790 version:0.32.0 Changes: -------- --- /work/SRC/openSUSE:Factory/mcphost/mcphost.changes 2025-11-11 19:20:05.168330287 +0100 +++ /work/SRC/openSUSE:Factory/.mcphost.new.1928/mcphost.changes 2026-01-13 21:27:15.797862107 +0100 @@ -1,0 +2,34 @@ +Fri Jan 2 17:24:56 UTC 2026 - Egbert Eich <[email protected]> + +- Fix CVEs + * GO-2025-4135 (CVE-2025-47914) + SSH Agent servers do not validate the size of messages + when processing new identity requests, which may cause + the program to panic if the message is malformed due to + an out of bounds read. + * GO-2025-4116 (CVE-2025-47913) + SSH clients receiving SSH_AGENT_SUCCESS when expecting a + typed response will panic and cause early termination of + the client process. + * GO-2025-4134 (CVE-2025-58181, bsc#1253952). + SSH servers parsing GSSAPI authentication + requests do not validate the number of mechanisms + specified in the request, allowing an attacker to cause + unbounded memory consumption. + +------------------------------------------------------------------- +Wed Dec 10 11:52:10 UTC 2025 - Darragh O'Reilly <[email protected]> + +- Update to 0.32.0 + Feat: Add option to require approval before tool. + Bump github.com/cloudwego/eino to fix panic. + Changes to 0.31.4: + Update dependencies. + Changes to 0.31.3: + Fix format & update models. + Changes to 0.31.2: + Fix: suppress health check logging to debug output only/ + Changes to 0.31.1: + Update dependency update mcp-go. + +------------------------------------------------------------------- @@ -4 +38,6 @@ -- Add shell completions & basic %check during build time +- Add shell completions & basic %check during build time. + +------------------------------------------------------------------- +Fri Oct 24 11:26:42 UTC 2025 - Ana Guerrero <[email protected]> + +- Modernise packaging Old: ---- mcphost-0.31.1-vendor.tar.gz mcphost-0.31.1.tar.gz New: ---- _service mcphost-0.32.0.tar.gz vendor.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mcphost.spec ++++++ --- /var/tmp/diff_new_pack.hDGpXh/_old 2026-01-13 21:27:19.538016477 +0100 +++ /var/tmp/diff_new_pack.hDGpXh/_new 2026-01-13 21:27:19.538016477 +0100 @@ -14,28 +14,16 @@ # Please submit bugfixes or comments via https://bugs.opensuse.org/ # -%global provider github -%global provider_tld com -%global project mark3labs -%global repo mcphost -%global import_path %{provider}.%{provider_tld}/%{project}/%{repo} -%global name %{provider}-%{provider_tld}-%{project}-%{repo} -%{!?goprep: %define goprep go version #} -%{!?gobuild: %define gobuild go build -buildmode=pie -mod=vendor} -%{!?goinstall: %define goinstall install -D -m 0755 %{repo} %{buildroot}%{_bindir}/%{repo}} - -Name: %repo -Version: 0.31.1 -Release: 4.mge + +Name: mcphost +Version: 0.32.0 +Release: 0 Summary: A CLI host application for the Model Context Protocol (MCP) -License: MIT and Apache-2.0 and BSD-2-Clause and BSD-3-Clause +License: MIT and Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause URL: https://github.com/mark3labs/mcphost -Source0: https://%{import_path}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz -Source1: %{name}-%{version}-vendor.tar.gz -BuildRequires: go >= 1.24 -%if 0%{?suse_version} >= 1500 -BuildRequires: golang-packaging -%endif +Source0: https://github.com/mark3labs/mcphost/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz +Source1: vendor.tar.gz +BuildRequires: golang(API) >= 1.24 %description A CLI host application that enables Large Language Models (LLMs) to interact @@ -74,18 +62,15 @@ The official fish completion script for %{name}, generated during the build. %prep -# Setup the main source code -%setup -q -n %{name}-%{version} -%setup -q -D -T -a 1 -n %{name}-%{version} - -sed -i -e "s/go1.24.5/go1.24/g" go.mod -%{goprep} %{import_path} +%autosetup -a 1 %build -%{gobuild} +go build \ + -mod=vendor \ + -buildmode=pie %install -%{goinstall} +install -D -m 0755 %{name} "%{buildroot}%{_bindir}/%{name}" # Build the shell autocomplete files %{buildroot}/%{_bindir}/%{name} completion bash > %{name}-autocomplete.bash ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.hDGpXh/_old 2026-01-13 21:27:19.582018293 +0100 +++ /var/tmp/diff_new_pack.hDGpXh/_new 2026-01-13 21:27:19.586018458 +0100 @@ -1,5 +1,5 @@ -mtime: 1762343035 -commit: 73fd741081542ccec7f412563f098da548949f35cda6b1b85d0412b02c72b7d0 +mtime: 1767798932 +commit: d2cba1e74cab2306a7082559df61ec48ab6c71f82b8e00d7ddcdd22cecf96bce url: https://src.opensuse.org/AI_MCP/mcphost revision: main ++++++ _service ++++++ <services> <service name="go_modules" mode="manual"> <param name="replace"> golang.org/x/crypto=golang.org/x/[email protected] </param> </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-01-07 16:15:36.000000000 +0100 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ mcphost-0.31.1-vendor.tar.gz -> mcphost-0.32.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/mcphost/mcphost-0.31.1-vendor.tar.gz /work/SRC/openSUSE:Factory/.mcphost.new.1928/mcphost-0.32.0.tar.gz differ: char 12, line 1
