Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package opi for openSUSE:Factory checked in at 2026-03-14 22:21:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/opi (Old) and /work/SRC/openSUSE:Factory/.opi.new.8177 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "opi" Sat Mar 14 22:21:53 2026 rev:78 rq:1338755 version:5.12.0 Changes: -------- --- /work/SRC/openSUSE:Factory/opi/opi.changes 2026-02-13 16:40:45.069628505 +0100 +++ /work/SRC/openSUSE:Factory/.opi.new.8177/opi.changes 2026-03-14 22:22:47.994136449 +0100 @@ -1,0 +2,11 @@ +Fri Mar 13 14:50:13 UTC 2026 - Dominik Heidler <[email protected]> + +- Version 5.12.0 + * Fix plex repo cleanup + * plex repo update + * Harden the systemd service + * fetch openh264 repos via https + * get anydesk repo via https + * get chrome repos via https + +------------------------------------------------------------------- Old: ---- opi-5.11.0.tar.gz New: ---- opi-5.12.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ opi.spec ++++++ --- /var/tmp/diff_new_pack.M7apVa/_old 2026-03-14 22:22:48.558159814 +0100 +++ /var/tmp/diff_new_pack.M7apVa/_new 2026-03-14 22:22:48.562159980 +0100 @@ -20,7 +20,7 @@ %define pythons %{use_python} Name: opi -Version: 5.11.0 +Version: 5.12.0 Release: 0 Summary: OBS Package Installer (CLI) License: GPL-3.0-only ++++++ opi-5.11.0.tar.gz -> opi-5.12.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/opi-5.11.0/opi/__init__.py new/opi-5.12.0/opi/__init__.py --- old/opi-5.11.0/opi/__init__.py 2026-02-13 15:53:33.000000000 +0100 +++ new/opi-5.12.0/opi/__init__.py 2026-03-13 15:50:07.000000000 +0100 @@ -154,7 +154,7 @@ project = project.replace('openSUSE Leap', 'openSUSE Leap 16') project = project.replace(':', '_').replace(' ', '_') - url = f'http://codecs.opensuse.org/openh264/{project}/' + url = f'https://codecs.opensuse.org/openh264/{project}/' existing_repo = get_enabled_repo_by_url(url) if existing_repo: print(f"Installing from existing repo '{existing_repo.name_expanded()}'") diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/opi-5.11.0/opi/plugins/anydesk.py new/opi-5.12.0/opi/plugins/anydesk.py --- old/opi-5.11.0/opi/plugins/anydesk.py 2026-02-13 15:53:33.000000000 +0100 +++ new/opi-5.12.0/opi/plugins/anydesk.py 2026-03-13 15:50:07.000000000 +0100 @@ -14,7 +14,7 @@ opi.add_repo( filename = 'anydesk', name = 'anydesk', - url = 'http://rpm.anydesk.com/opensuse/$basearch/', + url = 'https://rpm.anydesk.com/opensuse/$basearch/', gpgkey = 'https://keys.anydesk.com/repos/RPM-GPG-KEY' ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/opi-5.11.0/opi/plugins/chrome.py new/opi-5.12.0/opi/plugins/chrome.py --- old/opi-5.11.0/opi/plugins/chrome.py 2026-02-13 15:53:33.000000000 +0100 +++ new/opi-5.12.0/opi/plugins/chrome.py 2026-03-13 15:50:07.000000000 +0100 @@ -22,7 +22,7 @@ opi.add_repo( filename = 'google-chrome', name = 'google-chrome', - url = 'http://dl.google.com/linux/chrome/rpm/stable/x86_64', + url = 'https://dl.google.com/linux/chrome/rpm/stable/x86_64', gpgkey = 'https://dl.google.com/linux/linux_signing_key.pub' ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/opi-5.11.0/opi/plugins/plex.py new/opi-5.12.0/opi/plugins/plex.py --- old/opi-5.11.0/opi/plugins/plex.py 2026-02-13 15:53:33.000000000 +0100 +++ new/opi-5.12.0/opi/plugins/plex.py 2026-03-13 15:50:07.000000000 +0100 @@ -3,7 +3,7 @@ class PlexMediaServer(BasePlugin): main_query = 'plex' - description = 'Plex Media Server (See OSS alternative jellyfin)' + description = 'Plex Media Server (See OSS alternative jellyfin or emby)' queries = ['plex', 'plexmediaserver'] @classmethod @@ -14,8 +14,8 @@ opi.add_repo( filename = 'PlexRepo', name = 'PlexRepo', - url = 'https://downloads.plex.tv/repo/rpm/$basearch/', - gpgkey = 'https://downloads.plex.tv/plex-keys/PlexSign.key' + url = 'https://repo.plex.tv/rpm/', + gpgkey = 'https://downloads.plex.tv/plex-keys/PlexSign.v2.key' ) opi.install_packages(['plexmediaserver']) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/opi-5.11.0/opi/version.py new/opi-5.12.0/opi/version.py --- old/opi-5.11.0/opi/version.py 2026-02-13 15:53:33.000000000 +0100 +++ new/opi-5.12.0/opi/version.py 2026-03-13 15:50:07.000000000 +0100 @@ -1 +1 @@ -__version__ = '5.11.0' +__version__ = '5.12.0' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/opi-5.11.0/opi.changes new/opi-5.12.0/opi.changes --- old/opi-5.11.0/opi.changes 2026-02-13 15:53:33.000000000 +0100 +++ new/opi-5.12.0/opi.changes 2026-03-13 15:50:07.000000000 +0100 @@ -1,4 +1,15 @@ ------------------------------------------------------------------- +Fri Mar 13 14:49:59 UTC 2026 - Dominik Heidler <[email protected]> + +- Version 5.12.0 + * Fix plex repo cleanup + * plex repo update + * Harden the systemd service + * fetch openh264 repos via https + * get anydesk repo via https + * get chrome repos via https + +------------------------------------------------------------------- Fri Feb 13 14:53:11 UTC 2026 - Dominik Heidler <[email protected]> - Version 5.11.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/opi-5.11.0/proxy/opi-proxy.service new/opi-5.12.0/proxy/opi-proxy.service --- old/opi-5.11.0/proxy/opi-proxy.service 2026-02-13 15:53:33.000000000 +0100 +++ new/opi-5.12.0/proxy/opi-proxy.service 2026-03-13 15:50:07.000000000 +0100 @@ -7,6 +7,27 @@ Environment=CONFIG=/etc/opi-proxy.json Restart=always Type=simple +# Filesystem isolation +ProtectSystem=strict +ProtectHome=yes +PrivateTmp=yes +# Device access +PrivateDevices=yes +DevicePolicy=closed +# Syscall filtering +SystemCallFilter=@system-service +# Kernel/system protection +ProtectKernelTunables=yes +ProtectKernelModules=yes +ProtectKernelLogs=yes +ProtectControlGroups=yes +ProtectClock=yes +ProtectHostname=yes +RestrictNamespaces=yes +RestrictRealtime=yes +RestrictSUIDSGID=yes +LockPersonality=yes +MemoryDenyWriteExecute=yes [Install] WantedBy=multi-user.target
