Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package keybase-client for openSUSE:Factory 
checked in at 2026-05-30 22:57:29
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/keybase-client (Old)
 and      /work/SRC/openSUSE:Factory/.keybase-client.new.1937 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "keybase-client"

Sat May 30 22:57:29 2026 rev:37 rq:1355973 version:6.6.2

Changes:
--------
--- /work/SRC/openSUSE:Factory/keybase-client/keybase-client.changes    
2026-03-29 20:00:45.645601290 +0200
+++ /work/SRC/openSUSE:Factory/.keybase-client.new.1937/keybase-client.changes  
2026-05-30 23:00:04.569052570 +0200
@@ -1,0 +2,17 @@
+Fri May 29 19:51:01 UTC 2026 - Matthias Bach <[email protected]> - 6.6.2
+
+- Add update-go-crypto.patch to address boo#1266158.
+- Add update-go-net.patch to address boo#1266596.
+
+-------------------------------------------------------------------
+Thu May 28 19:36:42 UTC 2026 - Matthias Bach <[email protected]> - 6.6.2
+
+- Update to version 6.6.2
+  * Improve git default branch handling
+- Drop update-go-image.patch as the dependency was updated upstream.
+- Fix accidental inclusion of old vendor directory in the source
+  archive.
+- Drop downgrade-miekg-dns.patch as it was only a workaround for the
+  old vendor directory.
+
+-------------------------------------------------------------------

Old:
----
  client-6.6.0.tar.xz
  client.obsinfo
  downgrade-miekg-dns.patch
  update-go-image.patch
  vendor-6.6.0.tar.xz

New:
----
  client-6.6.2.tar.xz
  update-go-crypto.patch
  update-go-net.patch
  vendor-6.6.2.tar.xz

----------(Old B)----------
  Old:  archive.
- Drop downgrade-miekg-dns.patch as it was only a workaround for the
  old vendor directory.
  Old:  * Improve git default branch handling
- Drop update-go-image.patch as the dependency was updated upstream.
- Fix accidental inclusion of old vendor directory in the source
----------(Old E)----------

----------(New B)----------
  New:
- Add update-go-crypto.patch to address boo#1266158.
- Add update-go-net.patch to address boo#1266596.
  New:- Add update-go-crypto.patch to address boo#1266158.
- Add update-go-net.patch to address boo#1266596.
----------(New E)----------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ keybase-client.spec ++++++
--- /var/tmp/diff_new_pack.wtSVwc/_old  2026-05-30 23:00:08.085197114 +0200
+++ /var/tmp/diff_new_pack.wtSVwc/_new  2026-05-30 23:00:08.089197278 +0200
@@ -18,7 +18,7 @@
 
 
 Name:           keybase-client
-Version:        6.6.0
+Version:        6.6.2
 Release:        0
 Summary:        Keybase command line client
 License:        BSD-3-Clause
@@ -33,8 +33,8 @@
 Patch1:         ensure-mount-dir-exists.patch
 Patch2:         ensure-service-stop-unmounts-filesystem.patch
 Patch3:         update-filippo.io-edwards25519.patch
-Patch4:         downgrade-miekg-dns.patch
-Patch5:         update-go-image.patch
+Patch4:         update-go-crypto.patch
+Patch5:         update-go-net.patch
 BuildRequires:  fdupes
 BuildRequires:  go1.25
 BuildRequires:  golang-packaging
@@ -94,8 +94,6 @@
 %autosetup -p1 -n client-%{version}
 cd go
 tar -xaf %{SOURCE1}
-# Avoid a duplicate function declaration
-rm vendor/golang.org/x/text/secure/bidirule/bidirule10.0.0.go
 
 %build
 cd go

++++++ _service ++++++
--- /var/tmp/diff_new_pack.wtSVwc/_old  2026-05-30 23:00:08.177200896 +0200
+++ /var/tmp/diff_new_pack.wtSVwc/_new  2026-05-30 23:00:08.185201225 +0200
@@ -1,10 +1,10 @@
 <services>
-  <service mode="manual" name="tar_scm">
+  <service mode="manual" name="obs_scm">
     <param name="scm">git</param>
     <param name="url">https://github.com/keybase/client.git</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
-    <param name="revision">v6.6.0</param>
+    <param name="revision">v6.6.2</param>
     <param name="filename">client</param>
     <param name="changesgenerate">disable</param>
   </service>

++++++ client-6.6.0.tar.xz -> client-6.6.2.tar.xz ++++++
/work/SRC/openSUSE:Factory/keybase-client/client-6.6.0.tar.xz 
/work/SRC/openSUSE:Factory/.keybase-client.new.1937/client-6.6.2.tar.xz differ: 
char 15, line 1

++++++ update-filippo.io-edwards25519.patch ++++++
--- /var/tmp/diff_new_pack.wtSVwc/_old  2026-05-30 23:00:08.241203527 +0200
+++ /var/tmp/diff_new_pack.wtSVwc/_new  2026-05-30 23:00:08.245203691 +0200
@@ -1,16 +1,16 @@
 From: Matthias Bach <[email protected]>
 Date: Fri, 20 Feb 2026 20:41:25 +0100
 Subject: Update filippo.io/edwards25519 for CVE-2026-26958
-References: bsc#1258591
-Upstream: never
+References: bsc#1258591, gh#keybase/client#29257
+Upstream: submitted
 
 ---
  go/go.mod | 2 +-
- go/go.sum | 2 ++
- 2 files changed, 3 insertions(+), 1 deletion(-)
+ go/go.sum | 4 ++--
+ 2 files changed, 3 insertions(+), 3 deletions(-)
 
 diff --git a/go/go.mod b/go/go.mod
-index 1c0c4af9b7..a2ee1a85e3 100644
+index d63e916b..0a75bad4 100644
 --- a/go/go.mod
 +++ b/go/go.mod
 @@ -98,7 +98,7 @@ require (
@@ -23,13 +23,12 @@
        github.com/RoaringBitmap/roaring v0.4.22-0.20191112221735-4d53b29a8f7d 
// indirect
        github.com/StackExchange/wmi v1.2.1 // indirect
 diff --git a/go/go.sum b/go/go.sum
-index 98b6b4b681..099d8a5147 100644
+index 67bfd528..65489331 100644
 --- a/go/go.sum
 +++ b/go/go.sum
-@@ -1,6 +1,8 @@
- cloud.google.com/go v0.26.0/go.mod 
h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
- filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
- filippo.io/edwards25519 v1.1.0/go.mod 
h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
+@@ -1,5 +1,5 @@
+-filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
+-filippo.io/edwards25519 v1.1.0/go.mod 
h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
 +filippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo=
 +filippo.io/edwards25519 v1.2.0/go.mod 
h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc=
  github.com/BurntSushi/toml v0.2.1-0.20160717150709-99064174e013/go.mod 
h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=

++++++ update-go-crypto.patch ++++++
From: Matthias Bach <[email protected]>
Date: Fri, 29 May 2026 21:46:44 +0200
Subject: [PATCH] Update golang.org/x/crypto to address known vulnerabilities
References: boo#1266158, gh#keybase/client#29264
Upstream: pending

The following CVEs are addressed by the updated version:
* CVE-2026-39827
* CVE-2026-39828
* CVE-2026-39829
* CVE-2026-39830
* CVE-2026-39831
* CVE-2026-39832
* CVE-2026-39833
* CVE-2026-39834
* CVE-2026-39835
* CVE-2026-42508
* CVE-2026-46595
* CVE-2026-46597
* CVE-2026-46598
---
 go/go.mod | 14 +++++++-------
 go/go.sum | 32 ++++++++++++++++----------------
 2 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/go/go.mod b/go/go.mod
index 0a75bad4d..5fe18879e 100644
--- a/go/go.mod
+++ b/go/go.mod
@@ -71,13 +71,13 @@ require (
        github.com/urfave/cli v1.22.1
        github.com/vividcortex/ewma v1.1.2-0.20170804035156-43880d236f69
        go.uber.org/zap v1.24.0
-       golang.org/x/crypto v0.49.0
+       golang.org/x/crypto v0.52.0
        golang.org/x/image v0.38.0
        golang.org/x/mobile v0.0.0-20251209145715-2553ed8ce294 // indirect
-       golang.org/x/net v0.52.0
+       golang.org/x/net v0.54.0
        golang.org/x/sync v0.20.0
-       golang.org/x/sys v0.42.0
-       golang.org/x/text v0.35.0
+       golang.org/x/sys v0.45.0
+       golang.org/x/text v0.37.0
        golang.org/x/time v0.14.0
        gopkg.in/src-d/go-billy.v4 v4.3.2
        gopkg.in/src-d/go-git.v4 v4.13.1
@@ -182,9 +182,9 @@ require (
        go.uber.org/atomic v1.7.0 // indirect
        go.uber.org/multierr v1.6.0 // indirect
        go4.org v0.0.0-20161118210015-09d86de304dc // indirect
-       golang.org/x/mod v0.33.0 // indirect
-       golang.org/x/telemetry v0.0.0-20260209163413-e7419c687ee4 // indirect
-       golang.org/x/tools v0.42.0 // indirect
+       golang.org/x/mod v0.35.0 // indirect
+       golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa // indirect
+       golang.org/x/tools v0.44.0 // indirect
        golang.org/x/vuln v1.1.4 // indirect
        google.golang.org/appengine v1.6.8 // indirect
        google.golang.org/protobuf v1.36.11 // indirect
diff --git a/go/go.sum b/go/go.sum
index 65489331d..a693341e4 100644
--- a/go/go.sum
+++ b/go/go.sum
@@ -528,8 +528,8 @@ golang.org/x/crypto v0.19.0/go.mod 
h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDf
 golang.org/x/crypto v0.23.0/go.mod 
h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
 golang.org/x/crypto v0.31.0/go.mod 
h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
 golang.org/x/crypto v0.32.0/go.mod 
h1:ZnnJkOaASj8g0AjIduWNlq2NRxL0PlBrbKVyZ6V/Ugc=
-golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
-golang.org/x/crypto v0.49.0/go.mod 
h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
+golang.org/x/crypto v0.52.0 h1:RMs7fP2rXdep0CftQlK8Uf+kibLm7qkCcradZWYz988=
+golang.org/x/crypto v0.52.0/go.mod 
h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc=
 golang.org/x/image v0.38.0 h1:5l+q+Y9JDC7mBOMjo4/aPhMDcxEptsX+Tt3GgRQRPuE=
 golang.org/x/image v0.38.0/go.mod 
h1:/3f6vaXC+6CEanU4KJxbcUZyEePbyKbaLoDOe4ehFYY=
 golang.org/x/mobile v0.0.0-20251209145715-2553ed8ce294 
h1:Cr6kbEvA6nqvdHynE4CtVKlqpZB9dS1Jva/6IsHA19g=
@@ -541,8 +541,8 @@ golang.org/x/mod v0.8.0/go.mod 
h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/mod v0.33.0 h1:tHFzIWbBifEmbwtGz65eaWyGiGZatSrT9prnU8DbVL8=
-golang.org/x/mod v0.33.0/go.mod h1:swjeQEj+6r7fODbD2cqrnje9PnziFuw4bmLbBZFrQ5w=
+golang.org/x/mod v0.35.0 h1:Ww1D637e6Pg+Zb2KrWfHQUnH2dQRLBQyAtpr/haaJeM=
+golang.org/x/mod v0.35.0/go.mod h1:+GwiRhIInF8wPm+4AoT6L0FA1QWAad3OMdTRx4tFYlU=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod 
h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181220203305-927f97764cc3/go.mod 
h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod 
h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
@@ -565,8 +565,8 @@ golang.org/x/net v0.21.0/go.mod 
h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
 golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
 golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
 golang.org/x/net v0.34.0/go.mod h1:di0qlW3YNM5oh6GqDGQr92MyTozJPmybPK4Ev/Gm31k=
-golang.org/x/net v0.52.0 h1:He/TN1l0e4mmR3QqHMT2Xab3Aj3L9qjbhRm78/6jrW0=
-golang.org/x/net v0.52.0/go.mod h1:R1MAz7uMZxVMualyPXb+VaqGSa3LIaUqk0eEt3w36Sw=
+golang.org/x/net v0.54.0 h1:2zJIZAxAHV/OHCDTCOHAYehQzLfSXuf/5SoL/Dv6w/w=
+golang.org/x/net v0.54.0/go.mod h1:Sj4oj8jK6XmHpBZU/zWHw3BV3abl4Kvi+Ut7cQcY+cQ=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -614,11 +614,11 @@ golang.org/x/sys v0.17.0/go.mod 
h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=
-golang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY=
+golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod 
h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
-golang.org/x/telemetry v0.0.0-20260209163413-e7419c687ee4 
h1:bTLqdHv7xrGlFbvf5/TXNxy/iUwwdkjhqQTJDjW7aj0=
-golang.org/x/telemetry v0.0.0-20260209163413-e7419c687ee4/go.mod 
h1:g5NllXBEermZrmR51cJDQxmJUHUOfRAaNyWBM+R+548=
+golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa 
h1:efT73AJZfAAUV7SOip6pWGkwJDzIGiKBZGVzHYa+ve4=
+golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa/go.mod 
h1:kHjTxDEnAu6/Nl9lDkzjWpR+bmKfxeiRuSDlsMb70gE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod 
h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod 
h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
@@ -628,8 +628,8 @@ golang.org/x/term v0.17.0/go.mod 
h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
 golang.org/x/term v0.20.0/go.mod 
h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
 golang.org/x/term v0.27.0/go.mod 
h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
 golang.org/x/term v0.28.0/go.mod 
h1:Sw/lC2IAUZ92udQNf3WodGtn4k/XoLyZoh8v/8uiwek=
-golang.org/x/term v0.41.0 h1:QCgPso/Q3RTJx2Th4bDLqML4W6iJiaXFq2/ftQF13YU=
-golang.org/x/term v0.41.0/go.mod 
h1:3pfBgksrReYfZ5lvYM0kSO0LIkAl4Yl2bXOkKP7Ec2A=
+golang.org/x/term v0.43.0 h1:S4RLU2sB31O/NCl+zFN9Aru9A/Cq2aqKpTZJ6B+DwT4=
+golang.org/x/term v0.43.0/go.mod 
h1:lrhlHNdQJHO+1qVYiHfFKVuVioJIheAc3fBSMFYEIsk=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
@@ -642,8 +642,8 @@ golang.org/x/text v0.13.0/go.mod 
h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0/go.mod 
h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.15.0/go.mod 
h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.21.0/go.mod 
h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
-golang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8=
-golang.org/x/text v0.35.0/go.mod 
h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA=
+golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc=
+golang.org/x/text v0.37.0/go.mod 
h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38=
 golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
 golang.org/x/time v0.14.0/go.mod 
h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod 
h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
@@ -657,8 +657,8 @@ golang.org/x/tools v0.1.12/go.mod 
h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc
 golang.org/x/tools v0.6.0/go.mod 
h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/tools v0.13.0/go.mod 
h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
 golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod 
h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
-golang.org/x/tools v0.42.0 h1:uNgphsn75Tdz5Ji2q36v/nsFSfR/9BRFvqhGBaJGd5k=
-golang.org/x/tools v0.42.0/go.mod 
h1:Ma6lCIwGZvHK6XtgbswSoWroEkhugApmsXyrUmBhfr0=
+golang.org/x/tools v0.44.0 h1:UP4ajHPIcuMjT1GqzDWRlalUEoY+uzoZKnhOjbIPD2c=
+golang.org/x/tools v0.44.0/go.mod 
h1:KA0AfVErSdxRZIsOVipbv3rQhVXTnlU6UhKxHd1seDI=
 golang.org/x/tools/go/expect v0.1.1-deprecated 
h1:jpBZDwmgPhXsKZC6WhL20P4b/wmnpsEAGHaNy0n/rJM=
 golang.org/x/tools/go/expect v0.1.1-deprecated/go.mod 
h1:eihoPOH+FgIqa3FpoTwguz/bVUSGBlGQU67vpBeOrBY=
 golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated 
h1:1h2MnaIAIXISqTFKdENegdpAgUXz6NrPEsbIeWaBRvM=
-- 
2.51.0


++++++ update-go-net.patch ++++++
From: Matthias Bach <[email protected]>
Date: Fri, 29 May 2026 22:15:48 +0200
Subject: [PATCH] Bump golang.org/x/net for CVE-2026-39821
References: bsc#1126659
Upstream: tbd

---
 go/go.mod | 2 +-
 go/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go/go.mod b/go/go.mod
index 5fe18879e..e202b11e1 100644
--- a/go/go.mod
+++ b/go/go.mod
@@ -74,7 +74,7 @@ require (
        golang.org/x/crypto v0.52.0
        golang.org/x/image v0.38.0
        golang.org/x/mobile v0.0.0-20251209145715-2553ed8ce294 // indirect
-       golang.org/x/net v0.54.0
+       golang.org/x/net v0.55.0
        golang.org/x/sync v0.20.0
        golang.org/x/sys v0.45.0
        golang.org/x/text v0.37.0
diff --git a/go/go.sum b/go/go.sum
index a693341e4..de3b1ddf1 100644
--- a/go/go.sum
+++ b/go/go.sum
@@ -565,8 +565,8 @@ golang.org/x/net v0.21.0/go.mod 
h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
 golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
 golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
 golang.org/x/net v0.34.0/go.mod h1:di0qlW3YNM5oh6GqDGQr92MyTozJPmybPK4Ev/Gm31k=
-golang.org/x/net v0.54.0 h1:2zJIZAxAHV/OHCDTCOHAYehQzLfSXuf/5SoL/Dv6w/w=
-golang.org/x/net v0.54.0/go.mod h1:Sj4oj8jK6XmHpBZU/zWHw3BV3abl4Kvi+Ut7cQcY+cQ=
+golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
+golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-- 
2.51.0


++++++ vendor-6.6.0.tar.xz -> vendor-6.6.2.tar.xz ++++++
/work/SRC/openSUSE:Factory/keybase-client/vendor-6.6.0.tar.xz 
/work/SRC/openSUSE:Factory/.keybase-client.new.1937/vendor-6.6.2.tar.xz differ: 
char 13, line 1

Reply via email to