Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package distribution for openSUSE:Factory checked in at 2026-05-19 17:48:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/distribution (Old) and /work/SRC/openSUSE:Factory/.distribution.new.1966 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "distribution" Tue May 19 17:48:37 2026 rev:12 rq:1353883 version:3.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/distribution/distribution.changes 2026-04-28 12:01:46.878996952 +0200 +++ /work/SRC/openSUSE:Factory/.distribution.new.1966/distribution.changes 2026-05-19 17:48:55.741038780 +0200 @@ -1,0 +2,62 @@ +Mon May 18 18:00:08 UTC 2026 - Dirk Müller <[email protected]> + +- update to 3.1.1 (bsc#1265429, CVE-2026-41888): + * Fixes CVE-2026-41888 + * Bounds-check the file basename in PurgeUploads Walk callback + * Add S3 Express One Zone support to the S3 storage driver + * Fix tag list endpoint in proxy mode + * Clamp oversized `n` query parameter in proxy mode instead of + returning 400 + * See the full changelog below for the full list of changes. + * internal/client/auth/challenge: cleanups and minor refactor + * build(deps): bump + go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp + from 0.18.0 to 0.19.0 in the go_modules group across 1 + directory + * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otl + ptrace/otlptracehttp from 1.42.0 to 1.43.0 in the go_modules + group across 1 directory + * build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 + * chore(build): Bump go version to latest + * refactor: use slices.Backward to simplify the code + * fix(proxy): fix tag list endpoint in proxy mode + * Update docker-compose structure in deploying.md + * build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 + * build(deps): bump actions/upload-pages-artifact from 4.0.0 to + 5.0.0 + * build(deps): bump docker/login-action from 4.0.0 to 4.1.0 + * build(deps): bump docker/bake-action from 7.0.0 to 7.1.0 + * fix(proxy): clamp oversized n query param instead of + returning 400 + * feat(s3): add express zone one support to S3 driver + * fix(storage): bounds-check the file basename in PurgeUploads + Walk callback + * chore(release): prepare for v3.1.1 release + +------------------------------------------------------------------- +Mon May 18 17:59:50 UTC 2026 - Dirk Müller <[email protected]> + +- Update to version 3.1.1: + * chore(release): prepare for v3.1.1 release + * fix: prevent tag deletion when storage.delete.enabled is false + * fix(storage): bounds-check the file basename in PurgeUploads Walk callback + * feat(s3): add express zone one support to S3 driver + * fix(proxy): clamp oversized n query param instead of returning 400 + * Update docker-compose structure in deploying.md + * build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 + * build(deps): bump docker/bake-action from 7.0.0 to 7.1.0 + * build(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 + * Bump Go 1.26 in CI + * chore(build): Bump go version to latest 1.25 + * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp + * refactor: use slices.Backward to simplify the code + * build(deps): bump docker/login-action from 4.0.0 to 4.1.0 + * fix(proxy): fix tag list endpoint in proxy mode + * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp + * build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 + * internal/client/auth/challenge: fix minor linting issues + * internal/client/auth/challenge: cleanup URL-normalization + * internal/client/auth/challenge: simpleManager: make zero value usable + * internal/client/auth/challenge: simpleManager: un-export fields + +------------------------------------------------------------------- Old: ---- distribution-3.1.0.tar.zst New: ---- distribution-3.1.1.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ distribution.spec ++++++ --- /var/tmp/diff_new_pack.8RBmRs/_old 2026-05-19 17:48:56.801082630 +0200 +++ /var/tmp/diff_new_pack.8RBmRs/_new 2026-05-19 17:48:56.805082795 +0200 @@ -18,7 +18,7 @@ %define goipath github.com/distribution/distribution/v3 Name: distribution -Version: 3.1.0 +Version: 3.1.1 Release: 0 Summary: The toolset to pack, ship, store, and deliver content License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.8RBmRs/_old 2026-05-19 17:48:56.869085443 +0200 +++ /var/tmp/diff_new_pack.8RBmRs/_new 2026-05-19 17:48:56.873085608 +0200 @@ -3,8 +3,8 @@ <param name="url">https://github.com/docker/distribution.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="versionformat">3.1.0</param> - <param name="revision">v3.1.0</param> + <param name="versionformat">3.1.1</param> + <param name="revision">v3.1.1</param> <param name="changesgenerate">enable</param> </service> <service name="recompress" mode="manual"> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.8RBmRs/_old 2026-05-19 17:48:56.893086435 +0200 +++ /var/tmp/diff_new_pack.8RBmRs/_new 2026-05-19 17:48:56.901086766 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/distribution/distribution.git</param> <param name="changesrevision">b5ca020cfbe998e5af3457fda087444cf5116496</param></service><service name="tar_scm"> <param name="url">https://github.com/docker/distribution.git</param> - <param name="changesrevision">708f8d6b060248fe7192294dd5440320ffc86da0</param></service></servicedata> + <param name="changesrevision">9a8d98b679740cd514aa7e7d84d23d442a5ef54c</param></service></servicedata> (No newline at EOF) ++++++ distribution-3.1.0.tar.zst -> distribution-3.1.1.tar.zst ++++++ /work/SRC/openSUSE:Factory/distribution/distribution-3.1.0.tar.zst /work/SRC/openSUSE:Factory/.distribution.new.1966/distribution-3.1.1.tar.zst differ: char 7, line 1
