Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nova for openSUSE:Factory checked in at 2026-04-30 20:29:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nova (Old) and /work/SRC/openSUSE:Factory/.nova.new.30200 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nova" Thu Apr 30 20:29:47 2026 rev:40 rq:1350156 version:3.12.0 Changes: -------- --- /work/SRC/openSUSE:Factory/nova/nova.changes 2026-04-22 17:01:17.364198442 +0200 +++ /work/SRC/openSUSE:Factory/.nova.new.30200/nova.changes 2026-04-30 20:29:58.093757164 +0200 @@ -1,0 +2,12 @@ +Thu Apr 30 05:43:58 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 3.12.0: + * Update CircleCI configuration to use GCP Docker login instead + of Quay.io (#459) + * fix env injection for nova release (#458) + * add notice to include registry change and immutable images + notice on the readme (#455) + * Update CircleCI configuration to skip signing during GoReleaser + snapshot release (#453) + +------------------------------------------------------------------- Old: ---- nova-3.11.15.obscpio New: ---- nova-3.12.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nova.spec ++++++ --- /var/tmp/diff_new_pack.v1HqX5/_old 2026-04-30 20:29:58.949792290 +0200 +++ /var/tmp/diff_new_pack.v1HqX5/_new 2026-04-30 20:29:58.953792454 +0200 @@ -17,7 +17,7 @@ Name: nova -Version: 3.11.15 +Version: 3.12.0 Release: 0 Summary: Find outdated or deprecated Helm charts running in your cluster License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.v1HqX5/_old 2026-04-30 20:29:59.001794424 +0200 +++ /var/tmp/diff_new_pack.v1HqX5/_new 2026-04-30 20:29:59.005794588 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/FairwindsOps/nova</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v3.11.15</param> + <param name="revision">v3.12.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.v1HqX5/_old 2026-04-30 20:29:59.029795572 +0200 +++ /var/tmp/diff_new_pack.v1HqX5/_new 2026-04-30 20:29:59.033795737 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/FairwindsOps/nova</param> - <param name="changesrevision">7cc8b25bb1647ac17d0736ce715dd08f90531804</param></service></servicedata> + <param name="changesrevision">0803b0840d990bbf6518951899fcf8b948acc971</param></service></servicedata> (No newline at EOF) ++++++ nova-3.11.15.obscpio -> nova-3.12.0.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nova-3.11.15/.circleci/config.yml new/nova-3.12.0/.circleci/config.yml --- old/nova-3.11.15/.circleci/config.yml 2026-04-21 20:35:35.000000000 +0200 +++ new/nova-3.12.0/.circleci/config.yml 2026-04-27 23:17:17.000000000 +0200 @@ -5,16 +5,6 @@ oss-docs: fairwinds/oss-docs@0 references: - install_vault: &install_vault - run: - name: install hashicorp vault - command: | - apk --update add curl yq - cd /tmp - curl -LO https://releases.hashicorp.com/vault/1.21.4/vault_1.21.4_linux_amd64.zip - sha256sum vault_1.21.4_linux_amd64.zip | grep 889b681990fe221b884b7932fa9c9dd0ee9811b9349554f1aa287ab63c9f3dae - unzip vault_1.21.4_linux_amd64.zip - mv vault /usr/bin/vault install_vault_machine: &install_vault_machine run: name: install hashicorp vault @@ -70,8 +60,10 @@ docker run --rm \ -v /var/run/docker.sock:/var/run/docker.sock \ -v "$(pwd):/workspace" -w /workspace \ - -e CIRCLE_SHA1 -e CIRCLE_BRANCH -e CIRCLE_TAG \ - goreleaser/goreleaser:v2.15.4 release --snapshot + -e CIRCLE_SHA1 \ + -e CIRCLE_BRANCH \ + -e CIRCLE_TAG \ + goreleaser/goreleaser:v2.15.4 release --snapshot --skip=sign - store_artifacts: path: dist destination: snapshot @@ -85,10 +77,10 @@ - *install_vault_machine - rok8s/get_vault_env: vault_path: repo/global/env - - rok8s/docker_login: - registry: "quay.io" - username: $FAIRWINDS_QUAY_USER - password-variable: FAIRWINDS_QUAY_TOKEN + - run: + name: docker login + command: | + docker login -u _json_key -p "$(echo $GCP_ARTIFACTREADWRITE_JSON_KEY | base64 -d)" us-docker.pkg.dev - *setup_qemu_binfmt - run: name: Run GoReleaser release @@ -98,9 +90,13 @@ -v /var/run/docker.sock:/var/run/docker.sock \ -v "$(pwd):/workspace" -w /workspace \ -v "${HOME}/.docker:/root/.docker" \ - -e GORELEASER_CURRENT_TAG -e CIRCLE_TAG -e CIRCLE_SHA1 \ + -e GORELEASER_CURRENT_TAG \ + -e CIRCLE_TAG \ + -e CIRCLE_SHA1 \ -e GO111MODULE=on \ -e GITHUB_TOKEN \ + -e VAULT_ADDR \ + -e VAULT_TOKEN \ goreleaser/goreleaser:v2.15.4 release workflows: version: 2 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nova-3.11.15/.goreleaser.yml new/nova-3.12.0/.goreleaser.yml --- old/nova-3.11.15/.goreleaser.yml 2026-04-21 20:35:35.000000000 +0200 +++ new/nova-3.12.0/.goreleaser.yml 2026-04-27 23:17:17.000000000 +0200 @@ -1,10 +1,8 @@ +## DO NOT EDIT - Managed by Terraform +# yaml-language-server: $$schema=https://goreleaser.com/static/schema.json + version: 2 project_name: nova -release: - prerelease: auto - github: - owner: FairwindsOps - name: nova builds: - id: nova binary: nova @@ -25,17 +23,8 @@ ignore: - goos: windows goarch: arm64 - # windows/arm port removed in Go 1.26 (unsupported GOOS/GOARCH) - goos: windows goarch: arm -checksum: - name_template: 'checksums.txt' -changelog: - sort: asc - filters: - exclude: - - '^docs:' - - '^test:' brews: - name: nova repository: @@ -45,51 +34,78 @@ description: Check installed Helm charts for updates test: | system "#{bin}/nova version" +release: + disable: '{{ eq (envOrDefault "GORELEASER_SKIP_RELEASE" "false") "true" }}' + prerelease: auto + github: + owner: FairwindsOps + name: nova + footer: | + You can verify the signatures of both the checksums.txt file and the published docker images using [cosign](https://github.com/sigstore/cosign). + + ```bash + cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pub + ``` + ```bash + cosign verify us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }} --key https://artifacts.fairwinds.com/cosign-p256.pub + ``` +checksum: + name_template: "checksums.txt" +signs: + - cmd: cosign + signature: "${artifact}.sigstore.json" + args: + - "sign-blob" + - "--key=hashivault://cosign-p256" + - "--bundle=${signature}" + - "${artifact}" + - "--yes" + artifacts: all +docker_signs: + - artifacts: all + args: ["sign", "--key=hashivault://cosign-p256", "us-docker.pkg.dev/fairwinds-ops/oss/nova@${digest}", "-r", "--yes"] +changelog: + sort: asc + filters: + exclude: + - '^docs:' + - '^test:' dockers: -- image_templates: - - "quay.io/fairwinds/nova:{{ .FullCommit }}-amd64" - - "quay.io/fairwinds/nova:{{ .Tag }}-amd64" - - "quay.io/fairwinds/nova:v{{ .Major }}-amd64" - - "quay.io/fairwinds/nova:v{{ .Major }}.{{ .Minor }}-amd64" - use: buildx - dockerfile: Dockerfile - build_flag_templates: - - "--platform=linux/amd64" -- image_templates: - - "quay.io/fairwinds/nova:{{ .Tag }}-arm64v8" - - "quay.io/fairwinds/nova:v{{ .Major }}-arm64v8" - - "quay.io/fairwinds/nova:v{{ .Major }}.{{ .Minor }}-arm64v8" - use: buildx - goarch: arm64 - goos: linux - dockerfile: Dockerfile - build_flag_templates: - - "--platform=linux/arm64/v8" -- image_templates: - - "quay.io/fairwinds/nova:{{ .Tag }}-armv7" - - "quay.io/fairwinds/nova:v{{ .Major }}-armv7" - - "quay.io/fairwinds/nova:v{{ .Major }}.{{ .Minor }}-armv7" - use: buildx - goarch: arm - goarm: 7 - goos: linux - dockerfile: Dockerfile - build_flag_templates: - - "--platform=linux/arm/v7" + - image_templates: + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-amd64" + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-amd64" + use: buildx + dockerfile: Dockerfile + build_flag_templates: + - "--platform=linux/amd64" + - image_templates: + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-arm64v8" + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-arm64v8" + use: buildx + goarch: arm64 + goos: linux + dockerfile: Dockerfile + build_flag_templates: + - "--platform=linux/arm64/v8" + - image_templates: + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-armv7" + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-armv7" + use: buildx + goarch: arm + goarm: 7 + goos: linux + dockerfile: Dockerfile + build_flag_templates: + - "--platform=linux/arm/v7" docker_manifests: -- name_template: quay.io/fairwinds/nova:{{ .Tag }} - image_templates: - - "quay.io/fairwinds/nova:{{ .Tag }}-amd64" - - "quay.io/fairwinds/nova:{{ .Tag }}-arm64v8" - - "quay.io/fairwinds/nova:{{ .Tag }}-armv7" -- name_template: quay.io/fairwinds/nova:v{{ .Major }} - image_templates: - - "quay.io/fairwinds/nova:v{{ .Major }}-amd64" - - "quay.io/fairwinds/nova:v{{ .Major }}-arm64v8" - - "quay.io/fairwinds/nova:v{{ .Major }}-armv7" -- name_template: quay.io/fairwinds/nova:v{{ .Major }}.{{ .Minor }} - image_templates: - - "quay.io/fairwinds/nova:v{{ .Major }}.{{ .Minor }}-amd64" - - "quay.io/fairwinds/nova:v{{ .Major }}.{{ .Minor }}-arm64v8" - - "quay.io/fairwinds/nova:v{{ .Major }}.{{ .Minor }}-armv7" + - name_template: us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }} + image_templates: + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-amd64" + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-arm64v8" + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-armv7" + - name_template: us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }} + image_templates: + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-amd64" + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-arm64v8" + - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-armv7" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nova-3.11.15/README.md new/nova-3.12.0/README.md --- old/nova-3.11.15/README.md 2026-04-21 20:35:35.000000000 +0200 +++ new/nova-3.12.0/README.md 2026-04-27 23:17:17.000000000 +0200 @@ -25,6 +25,45 @@ Check out the [documentation at docs.fairwinds.com](https://nova.docs.fairwinds.com) +## Notice: Registry Migration and Immutable Images (v3.11.15 → v3.12.0) + +Starting with **v3.12.0**: + +- Images moved to `us-docker.pkg.dev/fairwinds-ops/oss/nova` +- `quay.io/fairwinds/nova` is deprecated + +### Required action + +```diff +- quay.io/fairwinds/nova:<tag> ++ us-docker.pkg.dev/fairwinds-ops/oss/nova:<tag> +``` + +--- + +## Immutable and signed images + +* Images are now **signed** +* Tags are **immutable** +* No more floating tags: + + * `v3` + * `v3.11` + * `latest` + +Use full version tags: + +``` +us-docker.pkg.dev/fairwinds-ops/oss/nova:v<major>.<minor>.<patch> +``` + +Or pin by digest: + +``` +us-docker.pkg.dev/fairwinds-ops/oss/nova@sha256:<digest> +``` + + <!-- Begin boilerplate --> ## Join the Fairwinds Open Source Community ++++++ nova.obsinfo ++++++ --- /var/tmp/diff_new_pack.v1HqX5/_old 2026-04-30 20:30:00.289847277 +0200 +++ /var/tmp/diff_new_pack.v1HqX5/_new 2026-04-30 20:30:00.289847277 +0200 @@ -1,5 +1,5 @@ name: nova -version: 3.11.15 -mtime: 1776796535 -commit: 7cc8b25bb1647ac17d0736ce715dd08f90531804 +version: 3.12.0 +mtime: 1777324637 +commit: 0803b0840d990bbf6518951899fcf8b948acc971 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/nova/vendor.tar.gz /work/SRC/openSUSE:Factory/.nova.new.30200/vendor.tar.gz differ: char 132, line 2
