Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apko for openSUSE:Factory checked in at 2026-02-09 13:43:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apko (Old) and /work/SRC/openSUSE:Factory/.apko.new.1670 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apko" Mon Feb 9 13:43:13 2026 rev:94 rq:1331936 version:1.1.6 Changes: -------- --- /work/SRC/openSUSE:Factory/apko/apko.changes 2026-02-04 21:06:57.594767458 +0100 +++ /work/SRC/openSUSE:Factory/.apko.new.1670/apko.changes 2026-02-09 13:43:20.415865715 +0100 @@ -1,0 +2,23 @@ +Mon Feb 09 06:18:27 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.1.6: + * fix: Double default APK data size limit (#2060) + * build(deps): bump github/codeql-action from 4.32.0 to 4.32.1 + (#2048) + * build(deps): bump chainguard-dev/actions from 1.5.13 to 1.5.15 + (#2057) + * build(deps): bump go.opentelemetry.io/otel/trace from 1.39.0 to + 1.40.0 (#2051) + * build(deps): bump go.opentelemetry.io/otel from 1.39.0 to + 1.40.0 (#2052) + * build(deps): bump chainguard.dev/sdk from 0.1.49 to 0.1.50 + (#2055) + * build(deps): bump google.golang.org/api from 0.264.0 to 0.265.0 + (#2056) + * build(deps): bump imjasonh/setup-crane from 0.4 to 0.5 (#2058) +- Update to version 1.1.5: + * fix: Double default APK data size limit again (#2063) + * build(deps): bump github/codeql-action from 4.32.1 to 4.32.2 + (#2062) + +------------------------------------------------------------------- Old: ---- apko-1.1.4.obscpio New: ---- apko-1.1.6.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apko.spec ++++++ --- /var/tmp/diff_new_pack.ts1Mpb/_old 2026-02-09 13:43:22.859967410 +0100 +++ /var/tmp/diff_new_pack.ts1Mpb/_new 2026-02-09 13:43:22.859967410 +0100 @@ -17,7 +17,7 @@ Name: apko -Version: 1.1.4 +Version: 1.1.6 Release: 0 Summary: Build OCI images from APK packages directly without Dockerfile License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.ts1Mpb/_old 2026-02-09 13:43:22.903969241 +0100 +++ /var/tmp/diff_new_pack.ts1Mpb/_new 2026-02-09 13:43:22.903969241 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/chainguard-dev/apko</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v1.1.4</param> + <param name="revision">v1.1.6</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.ts1Mpb/_old 2026-02-09 13:43:22.931970406 +0100 +++ /var/tmp/diff_new_pack.ts1Mpb/_new 2026-02-09 13:43:22.935970573 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/chainguard-dev/apko</param> - <param name="changesrevision">0387ed17e521d80481cedef413ca85333399475a</param></service></servicedata> + <param name="changesrevision">71349474418f141dc0956979df9015ec1c61cefe</param></service></servicedata> (No newline at EOF) ++++++ apko-1.1.4.obscpio -> apko-1.1.6.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.4/go.mod new/apko-1.1.6/go.mod --- old/apko-1.1.4/go.mod 2026-02-03 23:12:40.000000000 +0100 +++ new/apko-1.1.6/go.mod 2026-02-06 16:47:58.000000000 +0100 @@ -3,7 +3,7 @@ go 1.25.0 require ( - chainguard.dev/sdk v0.1.49 + chainguard.dev/sdk v0.1.50 github.com/chainguard-dev/clog v1.8.0 github.com/charmbracelet/log v0.4.2 github.com/go-git/go-git/v5 v5.16.4 @@ -23,14 +23,14 @@ github.com/tmc/dot v0.2.0 github.com/u-root/u-root v0.15.0 go.lsp.dev/uri v0.3.0 - go.opentelemetry.io/otel v1.39.0 - go.opentelemetry.io/otel/trace v1.39.0 + go.opentelemetry.io/otel v1.40.0 + go.opentelemetry.io/otel/trace v1.40.0 go.step.sm/crypto v0.76.0 golang.org/x/oauth2 v0.34.0 golang.org/x/sync v0.19.0 golang.org/x/sys v0.40.0 golang.org/x/time v0.14.0 - google.golang.org/api v0.264.0 + google.golang.org/api v0.265.0 gopkg.in/ini.v1 v1.67.1 gopkg.in/yaml.v3 v3.0.1 k8s.io/apimachinery v0.35.0 @@ -125,14 +125,14 @@ go.opentelemetry.io/auto/sdk v1.2.1 // indirect go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 // indirect go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect - go.opentelemetry.io/otel/metric v1.39.0 // indirect + go.opentelemetry.io/otel/metric v1.40.0 // indirect go.yaml.in/yaml/v2 v2.4.3 // indirect golang.org/x/crypto v0.47.0 // indirect golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 // indirect golang.org/x/net v0.49.0 // indirect golang.org/x/text v0.33.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20260122232226-8e98ce8d340d // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409 // indirect google.golang.org/grpc v1.78.0 // indirect google.golang.org/protobuf v1.36.11 // indirect gopkg.in/warnings.v0 v0.1.2 // indirect diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.4/go.sum new/apko-1.1.6/go.sum --- old/apko-1.1.4/go.sum 2026-02-03 23:12:40.000000000 +0100 +++ new/apko-1.1.6/go.sum 2026-02-06 16:47:58.000000000 +0100 @@ -1,7 +1,7 @@ chainguard.dev/go-grpc-kit v0.17.15 h1:y+FBjta2lsC0XxlkG+W5P1VxYl0zG74GRvoYN2o+p7s= chainguard.dev/go-grpc-kit v0.17.15/go.mod h1:1wAVAX2CCamtFlfMs9PFzfgQQxX1/TQyF6cbWApbJ2U= -chainguard.dev/sdk v0.1.49 h1:U9290jR9GHSaFsxSTb5st3t/JqoTwhODFEA6BnybXBc= -chainguard.dev/sdk v0.1.49/go.mod h1:b4isqRFaCBaRuVcHUrFeaqvt3d8J9GNOMS0RAyoawXw= +chainguard.dev/sdk v0.1.50 h1:rCoIYf30+ledJdaChqHVi2vh1BwIaWdVLjPfuPGdQ80= +chainguard.dev/sdk v0.1.50/go.mod h1:rH1bz4Kqs4JTrKUbJoPUGX9SRNI5PJCRyvRXWVP3MY0= cloud.google.com/go/auth v0.18.1 h1:IwTEx92GFUo2pJ6Qea0EU3zYvKnTAeRCODxfA/G5UWs= cloud.google.com/go/auth v0.18.1/go.mod h1:GfTYoS9G3CWpRA3Va9doKN9mjPGRS+v41jmZAhBzbrA= cloud.google.com/go/auth/oauth2adapt v0.2.8 h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc= @@ -278,20 +278,20 @@ go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0/go.mod h1:fvPi2qXDqFs8M4B4fmJhE92TyQs9Ydjlg3RvfUp+NbQ= go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18= go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0/go.mod h1:h06DGIukJOevXaj/xrNjhi/2098RZzcLTbc0jDAUbsg= -go.opentelemetry.io/otel v1.39.0 h1:8yPrr/S0ND9QEfTfdP9V+SiwT4E0G7Y5MO7p85nis48= -go.opentelemetry.io/otel v1.39.0/go.mod h1:kLlFTywNWrFyEdH0oj2xK0bFYZtHRYUdv1NklR/tgc8= +go.opentelemetry.io/otel v1.40.0 h1:oA5YeOcpRTXq6NN7frwmwFR0Cn3RhTVZvXsP4duvCms= +go.opentelemetry.io/otel v1.40.0/go.mod h1:IMb+uXZUKkMXdPddhwAHm6UfOwJyh4ct1ybIlV14J0g= go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 h1:GqRJVj7UmLjCVyVJ3ZFLdPRmhDUp2zFmQe3RHIOsw24= go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0/go.mod h1:ri3aaHSmCTVYu2AWv44YMauwAQc0aqI9gHKIcSbI1pU= go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.33.0 h1:wpMfgF8E1rkrT1Z6meFh1NDtownE9Ii3n3X2GJYjsaU= go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.33.0/go.mod h1:wAy0T/dUbs468uOlkT31xjvqQgEVXv58BRFWEgn5v/0= -go.opentelemetry.io/otel/metric v1.39.0 h1:d1UzonvEZriVfpNKEVmHXbdf909uGTOQjA0HF0Ls5Q0= -go.opentelemetry.io/otel/metric v1.39.0/go.mod h1:jrZSWL33sD7bBxg1xjrqyDjnuzTUB0x1nBERXd7Ftcs= +go.opentelemetry.io/otel/metric v1.40.0 h1:rcZe317KPftE2rstWIBitCdVp89A2HqjkxR3c11+p9g= +go.opentelemetry.io/otel/metric v1.40.0/go.mod h1:ib/crwQH7N3r5kfiBZQbwrTge743UDc7DTFVZrrXnqc= go.opentelemetry.io/otel/sdk v1.39.0 h1:nMLYcjVsvdui1B/4FRkwjzoRVsMK8uL/cj0OyhKzt18= go.opentelemetry.io/otel/sdk v1.39.0/go.mod h1:vDojkC4/jsTJsE+kh+LXYQlbL8CgrEcwmt1ENZszdJE= go.opentelemetry.io/otel/sdk/metric v1.38.0 h1:aSH66iL0aZqo//xXzQLYozmWrXxyFkBJ6qT5wthqPoM= go.opentelemetry.io/otel/sdk/metric v1.38.0/go.mod h1:dg9PBnW9XdQ1Hd6ZnRz689CbtrUp0wMMs9iPcgT9EZA= -go.opentelemetry.io/otel/trace v1.39.0 h1:2d2vfpEDmCJ5zVYz7ijaJdOF59xLomrvj7bjt6/qCJI= -go.opentelemetry.io/otel/trace v1.39.0/go.mod h1:88w4/PnZSazkGzz/w84VHpQafiU4EtqqlVdxWy+rNOA= +go.opentelemetry.io/otel/trace v1.40.0 h1:WA4etStDttCSYuhwvEa8OP8I5EWu24lkOzp+ZYblVjw= +go.opentelemetry.io/otel/trace v1.40.0/go.mod h1:zeAhriXecNGP/s2SEG3+Y8X9ujcJOTqQ5RgdEJcawiA= go.opentelemetry.io/proto/otlp v1.7.1 h1:gTOMpGDb0WTBOP8JaO72iL3auEZhVmAQg4ipjOVAtj4= go.opentelemetry.io/proto/otlp v1.7.1/go.mod h1:b2rVh6rfI/s2pHWNlB7ILJcRALpcNDzKhACevjI+ZnE= go.step.sm/crypto v0.76.0 h1:K23BSaeoiY7Y5dvvijTeYC9EduDBetNwQYMBwMhi1aA= @@ -373,12 +373,12 @@ golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk= gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E= -google.golang.org/api v0.264.0 h1:+Fo3DQXBK8gLdf8rFZ3uLu39JpOnhvzJrLMQSoSYZJM= -google.golang.org/api v0.264.0/go.mod h1:fAU1xtNNisHgOF5JooAs8rRaTkl2rT3uaoNGo9NS3R8= +google.golang.org/api v0.265.0 h1:FZvfUdI8nfmuNrE34aOWFPmLC+qRBEiNm3JdivTvAAU= +google.golang.org/api v0.265.0/go.mod h1:uAvfEl3SLUj/7n6k+lJutcswVojHPp2Sp08jWCu8hLY= google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 h1:fCvbg86sFXwdrl5LgVcTEvNC+2txB5mgROGmRL5mrls= google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:+rXWjjaukWZun3mLfjmVnQi18E1AsFbDN9QdJ5YXLto= -google.golang.org/genproto/googleapis/rpc v0.0.0-20260122232226-8e98ce8d340d h1:xXzuihhT3gL/ntduUZwHECzAn57E8dA6l8SOtYWdD8Q= -google.golang.org/genproto/googleapis/rpc v0.0.0-20260122232226-8e98ce8d340d/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ= +google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409 h1:H86B94AW+VfJWDqFeEbBPhEtHzJwJfTbgE2lZa54ZAQ= +google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ= google.golang.org/grpc v1.78.0 h1:K1XZG/yGDJnzMdd/uZHAkVqJE+xIDOcmdSFZkBUicNc= google.golang.org/grpc v1.78.0/go.mod h1:I47qjTo4OKbMkjA/aOOwxDIiPSBofUtQUI5EfpWvW7U= google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.4/pkg/apk/expandapk/options.go new/apko-1.1.6/pkg/apk/expandapk/options.go --- old/apko-1.1.4/pkg/apk/expandapk/options.go 2026-02-03 23:12:40.000000000 +0100 +++ new/apko-1.1.6/pkg/apk/expandapk/options.go 2026-02-06 16:47:58.000000000 +0100 @@ -17,8 +17,8 @@ // DefaultMaxControlSize is the default maximum decompressed size for control sections (10 MB). const DefaultMaxControlSize int64 = 10 << 20 -// DefaultMaxDataSize is the default maximum decompressed size for data sections (4 GB). -const DefaultMaxDataSize int64 = 4 << 30 +// DefaultMaxDataSize is the default maximum decompressed size for data sections (~17 GB). +const DefaultMaxDataSize int64 = 16 << 30 // Options configures the behavior of APK expansion operations. type Options struct { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/apko-1.1.4/pkg/options/options.go new/apko-1.1.6/pkg/options/options.go --- old/apko-1.1.4/pkg/options/options.go 2026-02-03 23:12:40.000000000 +0100 +++ new/apko-1.1.6/pkg/options/options.go 2026-02-06 16:47:58.000000000 +0100 @@ -48,7 +48,7 @@ return SizeLimits{ APKIndexDecompressedMaxSize: 100 << 20, // 100 MB APKControlMaxSize: 10 << 20, // 10 MB - APKDataMaxSize: 4 << 30, // 4 GB + APKDataMaxSize: 16 << 30, // ~17 GB HTTPResponseMaxSize: 2 << 30, // 2 GB } } ++++++ apko.obsinfo ++++++ --- /var/tmp/diff_new_pack.ts1Mpb/_old 2026-02-09 13:43:23.475993042 +0100 +++ /var/tmp/diff_new_pack.ts1Mpb/_new 2026-02-09 13:43:23.491993708 +0100 @@ -1,5 +1,5 @@ name: apko -version: 1.1.4 -mtime: 1770156760 -commit: 0387ed17e521d80481cedef413ca85333399475a +version: 1.1.6 +mtime: 1770392878 +commit: 71349474418f141dc0956979df9015ec1c61cefe ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/apko/vendor.tar.gz /work/SRC/openSUSE:Factory/.apko.new.1670/vendor.tar.gz differ: char 134, line 1
