Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cosign for openSUSE:Factory checked in at 2026-02-12 17:29:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cosign (Old) and /work/SRC/openSUSE:Factory/.cosign.new.1977 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cosign" Thu Feb 12 17:29:09 2026 rev:31 rq:1332629 version:3.0.4 Changes: -------- --- /work/SRC/openSUSE:Factory/cosign/cosign.changes 2025-12-20 21:49:34.150837322 +0100 +++ /work/SRC/openSUSE:Factory/.cosign.new.1977/cosign.changes 2026-02-12 17:29:33.452865874 +0100 @@ -1,0 +2,24 @@ +Wed Feb 11 16:54:41 UTC 2026 - [email protected] + +- Update to version 3.0.4: + * Fix bundle verify path for old bundle/trusted root (#4623) + * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616) + * chore(deps): bump cuelang.org/go in the gomod group (#4615) + * Optimize cosign tree performance by caching digest resolution (#4612) + * Don't require a trusted root to verify offline with a key (#4613) + * Support default services for trusted-root and signing-config creation (#4592) + * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602) + * chore(deps): bump github.com/sigstore/sigstore-go (#4578) + * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601) + * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611) + * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604) + * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588) + * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586) + * chore(deps): bump the gomod group with 5 updates (#4599) + * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600) + * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584) + * chore(deps): bump the actions group with 3 updates (#4587) + * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589) + * chore(deps): bump the gomod group with 9 updates (#4577) + +------------------------------------------------------------------- Old: ---- cosign-3.0.3.obscpio cosign-3.0.3.tar.gz New: ---- cosign-3.0.4.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cosign.spec ++++++ --- /var/tmp/diff_new_pack.1RghIo/_old 2026-02-12 17:29:34.648916551 +0100 +++ /var/tmp/diff_new_pack.1RghIo/_new 2026-02-12 17:29:34.652916720 +0100 @@ -1,7 +1,7 @@ # # spec file for package cosign # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: cosign -Version: 3.0.3 +Version: 3.0.4 Release: 0 Summary: Container Signing, Verification and Storage in an OCI registry License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.1RghIo/_old 2026-02-12 17:29:34.696918585 +0100 +++ /var/tmp/diff_new_pack.1RghIo/_new 2026-02-12 17:29:34.704918924 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/sigstore/cosign</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v3.0.3</param> + <param name="revision">v3.0.4</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.1RghIo/_old 2026-02-12 17:29:34.728919940 +0100 +++ /var/tmp/diff_new_pack.1RghIo/_new 2026-02-12 17:29:34.732920110 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/sigstore/cosign</param> - <param name="changesrevision">3f32cea203c59a93323a6bebfebff03417520143</param></service></servicedata> + <param name="changesrevision">6832fba4928c1ad69400235bbc41212de5006176</param></service></servicedata> (No newline at EOF) ++++++ cosign-3.0.3.obscpio -> cosign-3.0.4.obscpio ++++++ ++++ 2140 lines of diff (skipped) ++++++ cosign.obsinfo ++++++ --- /var/tmp/diff_new_pack.1RghIo/_old 2026-02-12 17:29:35.496952482 +0100 +++ /var/tmp/diff_new_pack.1RghIo/_new 2026-02-12 17:29:35.508952991 +0100 @@ -1,5 +1,5 @@ name: cosign -version: 3.0.3 -mtime: 1765324943 -commit: 3f32cea203c59a93323a6bebfebff03417520143 +version: 3.0.4 +mtime: 1767993436 +commit: 6832fba4928c1ad69400235bbc41212de5006176 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/cosign/vendor.tar.zst /work/SRC/openSUSE:Factory/.cosign.new.1977/vendor.tar.zst differ: char 7, line 1
