Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pinact for openSUSE:Factory checked in at 2026-06-09 14:28:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pinact (Old) and /work/SRC/openSUSE:Factory/.pinact.new.2375 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pinact" Tue Jun 9 14:28:20 2026 rev:13 rq:1358098 version:4.1.0 Changes: -------- --- /work/SRC/openSUSE:Factory/pinact/pinact.changes 2026-05-29 18:12:54.852902998 +0200 +++ /work/SRC/openSUSE:Factory/.pinact.new.2375/pinact.changes 2026-06-09 14:30:46.606574964 +0200 @@ -1,0 +2,51 @@ +Tue Jun 09 04:46:30 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 4.1.0: + * Features + - #1578 Update ghtkn-go-sdk to v0.3.0 for backend and disable + device flow support + * Dependencies + - chore(deps): update dependency aquaproj/aqua-registry to + v4.523.0 (#1594) + - chore(deps): update dependency anchore/syft to v1.45.1 + (#1593) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.522.0 (#1592) + - chore(deps): update dependency crate-ci/typos to v1.47.2 + (#1587) + - chore(deps): update suzuki-shunsuke/go-release-workflow + action to v8.1.0 (#1588) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.521.0 (#1586) + - chore(deps): update dependency crate-ci/typos to v1.47.1 + (#1585) + - chore(deps): update actions/checkout action to v6.0.3 (#1583) + - chore(deps): update dependency anchore/syft to v1.45.0 + (#1584) + - chore(deps): update go module directive to v1.26.4 (#1582) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.520.2 (#1580) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.520.1 (#1577) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.520.0 (#1576) + - chore(deps): update dependency crate-ci/typos to v1.47.0 + (#1575) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.519.0 (#1574) + - chore(deps): update suzuki-shunsuke/actionlint-action action + to v0.1.4 (#1573) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.518.0 (#1572) + - chore(deps): update dependency goreleaser/goreleaser to + v2.16.0 (#1571) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.517.0 (#1570) + - chore(deps): update dependency aquaproj/aqua to v2.59.1 + (#1569) + - chore(deps): update dependency crate-ci/typos to v1.46.3 + (#1568) + - chore(deps): update dependency suzuki-shunsuke/pinact to v4 + (#1565) + +------------------------------------------------------------------- Old: ---- pinact-4.0.0.obscpio New: ---- pinact-4.1.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pinact.spec ++++++ --- /var/tmp/diff_new_pack.wN4S8D/_old 2026-06-09 14:30:50.134721365 +0200 +++ /var/tmp/diff_new_pack.wN4S8D/_new 2026-06-09 14:30:50.134721365 +0200 @@ -17,7 +17,7 @@ Name: pinact -Version: 4.0.0 +Version: 4.1.0 Release: 0 Summary: CLI to edit GitHub Workflows and pin versions of Actions and Reusable Workflows License: MIT @@ -26,7 +26,7 @@ Source1: vendor.tar.gz BuildRequires: bash-completion BuildRequires: fish -BuildRequires: go1.26 >= 1.26.3 +BuildRequires: go1.26 >= 1.26.4 BuildRequires: zsh %description ++++++ _service ++++++ --- /var/tmp/diff_new_pack.wN4S8D/_old 2026-06-09 14:30:50.178723190 +0200 +++ /var/tmp/diff_new_pack.wN4S8D/_new 2026-06-09 14:30:50.182723357 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/suzuki-shunsuke/pinact.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v4.0.0</param> + <param name="revision">refs/tags/v4.1.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.wN4S8D/_old 2026-06-09 14:30:50.214724684 +0200 +++ /var/tmp/diff_new_pack.wN4S8D/_new 2026-06-09 14:30:50.226725183 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/suzuki-shunsuke/pinact.git</param> - <param name="changesrevision">6cdb1d4b0915dcb0888d0959dd96bd715d8d45e6</param></service></servicedata> + <param name="changesrevision">a14c0ee5db6c9068ebab1781549c65adc9066ffa</param></service></servicedata> (No newline at EOF) ++++++ pinact-4.0.0.obscpio -> pinact-4.1.0.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/.golangci.yml new/pinact-4.1.0/.golangci.yml --- old/pinact-4.0.0/.golangci.yml 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/.golangci.yml 2026-06-09 02:37:37.000000000 +0200 @@ -1,6 +1,11 @@ version: "2" + linters: default: all + settings: + gomoddirectives: + replace-allow-list: + - github.com/suzuki-shunsuke/ghtkn-go-sdk # TODO Remove before release disable: - depguard - err113 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/README.md new/pinact-4.1.0/README.md --- old/pinact-4.0.0/README.md 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/README.md 2026-06-09 02:37:37.000000000 +0200 @@ -4,7 +4,7 @@ [Install](INSTALL.md) | [How to use](#how-to-use) | [Configuration](#configuration) pinact is a CLI to pin GitHub Actions and Reusable Workflows. -pinact can also [update their versions](#update-actions) and [verify version comments](docs/codes/001.md). +pinact can also [update their versions](#update-actions--update) and [verify version comments](docs/codes/001.md). ```diff $ pinact run diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/USAGE.md new/pinact-4.1.0/USAGE.md --- old/pinact-4.0.0/USAGE.md 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/USAGE.md 2026-06-09 02:37:37.000000000 +0200 @@ -11,10 +11,10 @@ pinact [global options] [command [command options]] VERSION: - 3.10.1 + 4.0.0 COMMANDS: - init Create .pinact.yaml if it doesn't exist + init Create a pinact configuration file if it doesn't exist run Pin GitHub Actions versions migrate Migrate .pinact.yaml token Manage GitHub Access token @@ -34,25 +34,22 @@ ```console $ pinact init --help NAME: - pinact init - Create .pinact.yaml if it doesn't exist + pinact init - Create a pinact configuration file if it doesn't exist USAGE: pinact init [options] DESCRIPTION: - Create .pinact.yaml if it doesn't exist + Create a pinact configuration file if it doesn't exist. The resolved path is printed to stdout. - $ pinact init - - You can also pass configuration file path. - - e.g. - - $ pinact init .github/pinact.yaml + $ pinact init # creates .pinact.yaml in the current directory + $ pinact init .github/pinact.yaml # explicit path + $ pinact init -g # creates the user-wide global config OPTIONS: - --help, -h show help + --global, -g Create the user-wide global config file (~/.config/pinact/pinact.yaml on Unix, %APPDATA%\pinact\pinact.yaml on Windows). The parent directory is created if it does not exist. + --help, -h show help GLOBAL OPTIONS: --log-level string log level [$PINACT_LOG_LEVEL] @@ -82,22 +79,20 @@ OPTIONS: - --verify, -v Verify if pairs of commit SHA and version are correct - --check Exit with a non-zero status code if actions are not pinned. If this is true, files aren't updated + --verify-comment, --verify, -v Verify that the version comment matches the pinned SHA + --verify-min-age Audit every pinned action against the min-age threshold (calls the GitHub API). Auto-enabled when -min-age is set on the CLI + --no-api Skip GitHub API calls. Only the syntactic pin check (40-character SHA) is performed + --check Alias for -fix=false. For offline check use -fix=false -no-api --update, -u Update actions to latest versions - --review Create reviews --fix Fix code. By default, this is true. If -check or -diff is true, this is false by default - --diff Output diff. By default, this is false + --diff Alias for -fix=false. Note: -diff=false is ignored because detail output is always printed in v4 --format string Output format. Currently only 'sarif' is supported. If sarif is specified, results are output in SARIF format to stdout - --repo-owner string GitHub repository owner [$GITHUB_REPOSITORY_OWNER] - --repo-name string GitHub repository name - --sha string Commit SHA to be reviewed - --pr int GitHub pull request number (default: 0) --include string, -i string [ --include string, -i string ] A regular expression to fix actions --exclude string, -e string [ --exclude string, -e string ] A regular expression to exclude actions --branch-to-tag string [ --branch-to-tag string ] A regular expression to convert non-semver versions (e.g. branch names) to the latest stable tag. Anchor with ^$ for exact match - --min-age int, -m int Skip versions released within the specified number of days (requires -u or --branch-to-tag) (default: 0) [$PINACT_MIN_AGE] + --min-age int, -m int Minimum release age threshold in days. Setting this (either via CLI or PINACT_MIN_AGE) implicitly enables -verify-min-age (default: 0) [$PINACT_MIN_AGE] --separator string, --sep string Separator between version and tag comment + --diff-file + Path to a unified diff. Only the + lines of the diff are processed (use `-` to read the diff from stdin). Useful in PR CI to limit pinact to lines changed by the PR --help, -h show help GLOBAL OPTIONS: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/aqua/aqua-checksums.json new/pinact-4.1.0/aqua/aqua-checksums.json --- old/pinact-4.0.0/aqua/aqua-checksums.json 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/aqua/aqua-checksums.json 2026-06-09 02:37:37.000000000 +0200 @@ -1,53 +1,53 @@ { "checksums": [ { - "id": "github_release/github.com/anchore/syft/v1.44.0/syft_1.44.0_darwin_amd64.tar.gz", - "checksum": "C40ECE5407927327F94F35901727DBC604B46857E04F04EC94A310845FB71BDE", + "id": "github_release/github.com/anchore/syft/v1.45.1/syft_1.45.1_darwin_amd64.tar.gz", + "checksum": "ABE6E73B819F433B69ECE755DC180A19C7694896062BF806F89D0E3CA5DB710A", "algorithm": "sha256" }, { - "id": "github_release/github.com/anchore/syft/v1.44.0/syft_1.44.0_darwin_arm64.tar.gz", - "checksum": "24E4D34078AE81DA7C82539616F0CCAC3E226CF4F74A38CE6FB3463619E50A55", + "id": "github_release/github.com/anchore/syft/v1.45.1/syft_1.45.1_darwin_arm64.tar.gz", + "checksum": "2F79CCBBA6236636125D1ECE60A6DC71D4E4F91B9F580CC2AFBBAFC763FF353D", "algorithm": "sha256" }, { - "id": "github_release/github.com/anchore/syft/v1.44.0/syft_1.44.0_linux_amd64.tar.gz", - "checksum": "0E91737AEE2B5BAF1D255B959630194A302335D848FF97BB07921EB6205B5F5A", + "id": "github_release/github.com/anchore/syft/v1.45.1/syft_1.45.1_linux_amd64.tar.gz", + "checksum": "20C84195E24927F50A3B2269946BE51F4C4ABC9D2F145FEE7388B4199149F716", "algorithm": "sha256" }, { - "id": "github_release/github.com/anchore/syft/v1.44.0/syft_1.44.0_linux_arm64.tar.gz", - "checksum": "6F6CDCDC695721D91CE756E3B5BC3E3416599C464101F5E32E9C3F33054EE6D9", + "id": "github_release/github.com/anchore/syft/v1.45.1/syft_1.45.1_linux_arm64.tar.gz", + "checksum": "7DF9F45CBA1F6358ECFC7FAC349D43B4605137001F9646B41267ABE15A7C6CD7", "algorithm": "sha256" }, { - "id": "github_release/github.com/anchore/syft/v1.44.0/syft_1.44.0_windows_amd64.zip", - "checksum": "195E786EB84EC145854F20528992E86637C77D1968731DFE6CE850C90E28F47A", + "id": "github_release/github.com/anchore/syft/v1.45.1/syft_1.45.1_windows_amd64.zip", + "checksum": "A9D12C26521E09213745884B8B7DC361DFF83188C3A1ADA0DA1AF71012DBCD52", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.46.2/typos-v1.46.2-aarch64-apple-darwin.tar.gz", - "checksum": "4B15EE9548CD68CF22D6E67AF8A12CEB608EA4DBC34E0346792D09994222D694", + "id": "github_release/github.com/crate-ci/typos/v1.47.2/typos-v1.47.2-aarch64-apple-darwin.tar.gz", + "checksum": "23CA24A9186B5CB395B5F6C8EEA8CDB02911C8980833E016454B56E90C3BD474", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.46.2/typos-v1.46.2-aarch64-unknown-linux-musl.tar.gz", - "checksum": "311F2A15E8433C895CD9EE3198530BBFF552F59609EBA739F5BD9CEB2A2C0887", + "id": "github_release/github.com/crate-ci/typos/v1.47.2/typos-v1.47.2-aarch64-unknown-linux-musl.tar.gz", + "checksum": "596D5C6B9ECF34307F68BEA649178C5B45A4398FE3A1FCEF9598E85AA2CCB742", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.46.2/typos-v1.46.2-x86_64-apple-darwin.tar.gz", - "checksum": "3652F90D82D38F64E40C1791D2D82209979048EF3ABD715B0EB1488CF483CE1D", + "id": "github_release/github.com/crate-ci/typos/v1.47.2/typos-v1.47.2-x86_64-apple-darwin.tar.gz", + "checksum": "469A2D9FC894B0CDCEC6E4FA3719B4C4638E195FEEE6517D4845450F8E8985C6", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.46.2/typos-v1.46.2-x86_64-pc-windows-msvc.zip", - "checksum": "DDC4AE26822E806CE84BC410643D02A3DAC53AAC9AB2A5F389624418C5654A17", + "id": "github_release/github.com/crate-ci/typos/v1.47.2/typos-v1.47.2-x86_64-pc-windows-msvc.zip", + "checksum": "F4A12400C48CC08E7F5435B64D0ECB08C54091B97C3CCABF6CEA178D0969CA1F", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.46.2/typos-v1.46.2-x86_64-unknown-linux-musl.tar.gz", - "checksum": "D68C1A9C5ABD8DE11F7749EDFA414087C8BC828E89064714487D23C89F36B06E", + "id": "github_release/github.com/crate-ci/typos/v1.47.2/typos-v1.47.2-x86_64-unknown-linux-musl.tar.gz", + "checksum": "7AEF58932FC123B4CF4B40D86468E89A3297D80169051D7CFD13A235E05FC426", "algorithm": "sha256" }, { @@ -81,28 +81,28 @@ "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.15.4/goreleaser_Darwin_all.tar.gz", - "checksum": "82D730F3366350C90D7E5DF3CF9E8E425FD1C84BF7D7E3E564F92D97C5EA9EA4", + "id": "github_release/github.com/goreleaser/goreleaser/v2.16.0/goreleaser_Darwin_all.tar.gz", + "checksum": "6A102E4D588FD3553A9AC7321CA6023A9F205843F4861CA35BD337DFA9E72ECE", "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.15.4/goreleaser_Linux_arm64.tar.gz", - "checksum": "DE01CA1497571E9B348413CD2E7F74BE49B8D57696AE386F7EEDD06176544A88", + "id": "github_release/github.com/goreleaser/goreleaser/v2.16.0/goreleaser_Linux_arm64.tar.gz", + "checksum": "0102D974373FCDEB77042D1F5897CAFFA193BE36620FDC6C1DA43A01EF8E10D3", "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.15.4/goreleaser_Linux_x86_64.tar.gz", - "checksum": "AAE00C71A4A6D55E08CCE9273A1516BDCE33C1E07CFFB7E502FA6FEC4377DEDE", + "id": "github_release/github.com/goreleaser/goreleaser/v2.16.0/goreleaser_Linux_x86_64.tar.gz", + "checksum": "EAAE05B5EBA07533BD0F06846B68C808399504784DF00C62EB219541FC04E5E2", "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.15.4/goreleaser_Windows_arm64.zip", - "checksum": "10227D9DE3EB846F0E58529C22E75DCBD713B67879A7F83912DE7ABE658C5FD7", + "id": "github_release/github.com/goreleaser/goreleaser/v2.16.0/goreleaser_Windows_arm64.zip", + "checksum": "1183C81863044CE9BAA89C1393C258949390B8DF683DF7CA959E9C718D7723C9", "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.15.4/goreleaser_Windows_x86_64.zip", - "checksum": "146695F49717DFD79D64D5D6F4B1D25E2B56D73E723BBF68A8DC13CE5CF69693", + "id": "github_release/github.com/goreleaser/goreleaser/v2.16.0/goreleaser_Windows_x86_64.zip", + "checksum": "6FE5EDA11F0BCAC8069AFF3EF3DCB0B11816C9E95F89773595564697A5278BC9", "algorithm": "sha256" }, { @@ -331,38 +331,38 @@ "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v3.10.1/pinact_darwin_amd64.tar.gz", - "checksum": "64A68D241573907DEC8557196423E63F836D7B2C4CE238DD6271A4FE72DBC1E9", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.0.0/pinact_darwin_amd64.tar.gz", + "checksum": "242D0697152D31BF04F3759EC5C55CF8CCBF47B6E2680DD24531E63A6D890468", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v3.10.1/pinact_darwin_arm64.tar.gz", - "checksum": "BA7FFD6A63E3C96458A582CCE7753FB450A4EBC75099B885B2B6C6F57E5620B0", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.0.0/pinact_darwin_arm64.tar.gz", + "checksum": "3260E0D6FA7D89E4B9A7CC6C120345DB9217C4E0571742E9A76DB2BA3FF63650", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v3.10.1/pinact_linux_amd64.tar.gz", - "checksum": "C5234FF3A636CDA47719C73CA33A0183A5F441581455EDA8A0726E5030942B69", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.0.0/pinact_linux_amd64.tar.gz", + "checksum": "CC220902615325B10BD3BC52ED3DE27488F79ADAEC52ADCD12BD2194C2D2C592", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v3.10.1/pinact_linux_arm64.tar.gz", - "checksum": "AC2CE7A8D0FB592557E8CD1F26E01C0E7E8CF20733AE40A25E2354FD054F4F25", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.0.0/pinact_linux_arm64.tar.gz", + "checksum": "C5D8EF4B253A749B754AD04F484D93C78FADE5470BB549D58DF6A8AECA9B18BF", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v3.10.1/pinact_windows_amd64.zip", - "checksum": "A61F48E5C5B2919DCCE8F69FBC46CDD958CF49023E88E3950592A4F834B7AD01", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.0.0/pinact_windows_amd64.zip", + "checksum": "800554B9F87C5136E9469EC9075A1F51FBEA5AC402914D99F8AFC4EC98A87901", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v3.10.1/pinact_windows_arm64.zip", - "checksum": "E6E27F20AEDF66E9C09EF203F01B2BBF4B3963F7120163F54C7F3D06B6F19A9E", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.0.0/pinact_windows_arm64.zip", + "checksum": "4FED10325D7EB011C747EFC012FE3E4A494DC93CE5AE80878FEC712F0C9A1B63", "algorithm": "sha256" }, { - "id": "registries/github_content/github.com/aquaproj/aqua-registry/v4.516.0/registry.yaml", - "checksum": "AD71FA0E960B2B280D31778ACF86E565924953216D436261954B6BC10AFADF15", + "id": "registries/github_content/github.com/aquaproj/aqua-registry/v4.523.0/registry.yaml", + "checksum": "14BFA633212CF508D45DE47AD17CF666E009BCA351787E28F41D63FFD5B99D8B", "algorithm": "sha256" } ] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/aqua/aqua.yaml new/pinact-4.1.0/aqua/aqua.yaml --- old/pinact-4.0.0/aqua/aqua.yaml 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/aqua/aqua.yaml 2026-06-09 02:37:37.000000000 +0200 @@ -1,5 +1,5 @@ --- -# yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/v2.59.0/json-schema/aqua-yaml.json +# yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/v2.59.1/json-schema/aqua-yaml.json # aqua - Declarative CLI Version Manager # https://aquaproj.github.io/ checksum: @@ -7,5 +7,5 @@ require_checksum: true registries: - type: standard - ref: v4.516.0 # renovate: depName=aquaproj/aqua-registry + ref: v4.523.0 # renovate: depName=aquaproj/aqua-registry import_dir: imports diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/aqua/imports/goreleser.yaml new/pinact-4.1.0/aqua/imports/goreleser.yaml --- old/pinact-4.0.0/aqua/imports/goreleser.yaml 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/aqua/imports/goreleser.yaml 2026-06-09 02:37:37.000000000 +0200 @@ -1,2 +1,2 @@ packages: - - name: goreleaser/[email protected] + - name: goreleaser/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/aqua/imports/pinact.yaml new/pinact-4.1.0/aqua/imports/pinact.yaml --- old/pinact-4.0.0/aqua/imports/pinact.yaml 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/aqua/imports/pinact.yaml 2026-06-09 02:37:37.000000000 +0200 @@ -1,2 +1,2 @@ packages: - - name: suzuki-shunsuke/[email protected] + - name: suzuki-shunsuke/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/aqua/imports/syft.yaml new/pinact-4.1.0/aqua/imports/syft.yaml --- old/pinact-4.0.0/aqua/imports/syft.yaml 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/aqua/imports/syft.yaml 2026-06-09 02:37:37.000000000 +0200 @@ -1,2 +1,2 @@ packages: - - name: anchore/[email protected] + - name: anchore/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/aqua/imports/typos.yaml new/pinact-4.1.0/aqua/imports/typos.yaml --- old/pinact-4.0.0/aqua/imports/typos.yaml 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/aqua/imports/typos.yaml 2026-06-09 02:37:37.000000000 +0200 @@ -1,2 +1,2 @@ packages: - - name: crate-ci/[email protected] + - name: crate-ci/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/go.mod new/pinact-4.1.0/go.mod --- old/pinact-4.0.0/go.mod 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/go.mod 2026-06-09 02:37:37.000000000 +0200 @@ -1,6 +1,6 @@ module github.com/suzuki-shunsuke/pinact/v4 -go 1.26.3 +go 1.26.4 require ( github.com/expr-lang/expr v1.17.8 @@ -12,7 +12,7 @@ github.com/sourcegraph/go-diff v0.8.0 github.com/spf13/afero v1.15.0 github.com/suzuki-shunsuke/gen-go-jsonschema v0.1.0 - github.com/suzuki-shunsuke/ghtkn-go-sdk v0.2.2 + github.com/suzuki-shunsuke/ghtkn-go-sdk v0.3.0 github.com/suzuki-shunsuke/go-error-with-exit-code v1.0.0 github.com/suzuki-shunsuke/slog-error v0.2.2 github.com/suzuki-shunsuke/slog-util v0.3.2 @@ -23,13 +23,11 @@ ) require ( - al.essio.dev/pkg/shellescape v1.5.1 // indirect github.com/bahlo/generic-list-go v0.2.0 // indirect github.com/buger/jsonparser v1.1.2 // indirect github.com/charmbracelet/x/term v0.2.2 // indirect - github.com/danieljoos/wincred v1.2.2 // indirect - github.com/godbus/dbus/v5 v5.1.0 // indirect - github.com/google/go-github/v80 v80.0.0 // indirect + github.com/danieljoos/wincred v1.2.3 // indirect + github.com/godbus/dbus/v5 v5.2.2 // indirect github.com/google/go-querystring v1.2.0 // indirect github.com/invopop/jsonschema v0.13.0 // indirect github.com/kr/pretty v0.3.1 // indirect @@ -39,9 +37,9 @@ github.com/mattn/go-isatty v0.0.20 // indirect github.com/suzuki-shunsuke/go-exec v0.0.1 // indirect github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect - github.com/zalando/go-keyring v0.2.6 // indirect - golang.org/x/sys v0.42.0 // indirect - golang.org/x/term v0.37.0 // indirect + github.com/zalando/go-keyring v0.2.8 // indirect + golang.org/x/sys v0.46.0 // indirect + golang.org/x/term v0.43.0 // indirect golang.org/x/text v0.28.0 // indirect gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/go.sum new/pinact-4.1.0/go.sum --- old/pinact-4.0.0/go.sum 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/go.sum 2026-06-09 02:37:37.000000000 +0200 @@ -1,5 +1,3 @@ -al.essio.dev/pkg/shellescape v1.5.1 h1:86HrALUujYS/h+GtqoB26SBEdkWfmMI6FubjXlsXyho= -al.essio.dev/pkg/shellescape v1.5.1/go.mod h1:6sIqp7X2P6mThCQ7twERpZTuigpr6KbZWtls1U8I890= github.com/bahlo/generic-list-go v0.2.0 h1:5sz/EEAK+ls5wF+NeqDpk5+iNdMDXrh3z3nPnH1Wvgk= github.com/bahlo/generic-list-go v0.2.0/go.mod h1:2KvAjgMlE5NNynlg/5iLrrCCZ2+5xWbdbCW3pNTGyYg= github.com/buger/jsonparser v1.1.2 h1:frqHqw7otoVbk5M8LlE/L7HTnIq2v9RX6EJ48i9AxJk= @@ -7,8 +5,8 @@ github.com/charmbracelet/x/term v0.2.2 h1:xVRT/S2ZcKdhhOuSP4t5cLi5o+JxklsoEObBSgfgZRk= github.com/charmbracelet/x/term v0.2.2/go.mod h1:kF8CY5RddLWrsgVwpw4kAa6TESp6EB5y3uxGLeCqzAI= github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E= -github.com/danieljoos/wincred v1.2.2 h1:774zMFJrqaeYCK2W57BgAem/MLi6mtSE47MB6BOJ0i0= -github.com/danieljoos/wincred v1.2.2/go.mod h1:w7w4Utbrz8lqeMbDAK0lkNJUv5sAOkFi7nd/ogr0Uh8= +github.com/danieljoos/wincred v1.2.3 h1:v7dZC2x32Ut3nEfRH+vhoZGvN72+dQ/snVXo/vMFLdQ= +github.com/danieljoos/wincred v1.2.3/go.mod h1:6qqX0WNrS4RzPZ1tnroDzq9kY3fu1KwE7MRLQK4X0bs= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/expr-lang/expr v1.17.8 h1:W1loDTT+0PQf5YteHSTpju2qfUfNoBt4yw9+wOEU9VM= @@ -17,19 +15,15 @@ github.com/fatih/color v1.19.0/go.mod h1:zNk67I0ZUT1bEGsSGyCZYZNrHuTkJJB+r6Q9VuMi0LE= github.com/goccy/go-yaml v1.19.2 h1:PmFC1S6h8ljIz6gMRBopkjP1TVT7xuwrButHID66PoM= github.com/goccy/go-yaml v1.19.2/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA= -github.com/godbus/dbus/v5 v5.1.0 h1:4KLkAxT3aOY8Li4FRJe/KvhoNFFxo0m6fNuFUO8QJUk= -github.com/godbus/dbus/v5 v5.1.0/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= +github.com/godbus/dbus/v5 v5.2.2 h1:TUR3TgtSVDmjiXOgAAyaZbYmIeP3DPkld3jgKGV8mXQ= +github.com/godbus/dbus/v5 v5.2.2/go.mod h1:3AAv2+hPq5rdnr5txxxRwiGjPXamgoIHgz9FPBfOp3c= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= -github.com/google/go-github/v80 v80.0.0 h1:BTyk3QOHekrk5VF+jIGz1TNEsmeoQG9K/UWaaP+EWQs= -github.com/google/go-github/v80 v80.0.0/go.mod h1:pRo4AIMdHW83HNMGfNysgSAv0vmu+/pkY8nZO9FT9Yo= github.com/google/go-github/v88 v88.0.0 h1:dZA9IKkPK1eXZj4ypngnpRj5FwdpTv4whix2PrQMP7M= github.com/google/go-github/v88 v88.0.0/go.mod h1:rufTDgn2N45wjhukLTyxmvc9nilSp3mr3Rgtt6b1MPw= github.com/google/go-querystring v1.2.0 h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0= github.com/google/go-querystring v1.2.0/go.mod h1:8IFJqpSRITyJ8QhQ13bmbeMBDfmeEJZD5A0egEOmkqU= -github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4= -github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ= github.com/hashicorp/go-version v1.9.0 h1:CeOIz6k+LoN3qX9Z0tyQrPtiB1DFYRPfCIBtaXPSCnA= github.com/hashicorp/go-version v1.9.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA= github.com/invopop/jsonschema v0.13.0 h1:KvpoAJWEjR3uD9Kbm2HWJmqsEaHt8lBUpd0qHcIi21E= @@ -65,8 +59,8 @@ github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U= github.com/suzuki-shunsuke/gen-go-jsonschema v0.1.0 h1:g7askc+nskCkKRWTVOdsAT8nMhwiaVT6Dmlnh6uvITM= github.com/suzuki-shunsuke/gen-go-jsonschema v0.1.0/go.mod h1:yFO7h5wwFejxi6jbtazqmk7b/JSBxHcit8DGwb1bhg0= -github.com/suzuki-shunsuke/ghtkn-go-sdk v0.2.2 h1:rgGrzb4VDfGSFCXecxKbzJ2PxcJyplfKIu8wkyWGZ1U= -github.com/suzuki-shunsuke/ghtkn-go-sdk v0.2.2/go.mod h1:RqXFhArJSKR/D+42ptl9pQFQ5ikIexxB7AxiFB1gOOo= +github.com/suzuki-shunsuke/ghtkn-go-sdk v0.3.0 h1:vimNWKI2J7HyzfqzyEpNOLkdkkaLbX0qUHYrRTCv9zU= +github.com/suzuki-shunsuke/ghtkn-go-sdk v0.3.0/go.mod h1:kg75zT81lqHu72q7u9KJc41AsBXoRXt54c1bn+O6xwo= github.com/suzuki-shunsuke/go-error-with-exit-code v1.0.0 h1:oVXrrYNGBq4POyITQNWKzwsYz7B2nUcqtDbeX4BfeEc= github.com/suzuki-shunsuke/go-error-with-exit-code v1.0.0/go.mod h1:kDFtLeftDiIUUHXGI3xq5eJ+uAOi50FPrxPENTHktJ0= github.com/suzuki-shunsuke/go-exec v0.0.1 h1:xn/lvYnRQOujUd46ph6f6IT0gVJIC8+3liSZKOjNj44= @@ -81,15 +75,15 @@ github.com/urfave/cli/v3 v3.9.0/go.mod h1:ysVLtOEmg2tOy6PknnYVhDoouyC/6N42TMeoMzskhso= github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/fJgbpc= github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= -github.com/zalando/go-keyring v0.2.6 h1:r7Yc3+H+Ux0+M72zacZoItR3UDxeWfKTcabvkI8ua9s= -github.com/zalando/go-keyring v0.2.6/go.mod h1:2TCrxYrbUNYfNS/Kgy/LSrkSQzZ5UPVH85RwfczwvcI= +github.com/zalando/go-keyring v0.2.8 h1:6sD/Ucpl7jNq10rM2pgqTs0sZ9V3qMrqfIIy5YPccHs= +github.com/zalando/go-keyring v0.2.8/go.mod h1:tsMo+VpRq5NGyKfxoBVjCuMrG47yj8cmakZDO5QGii0= golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs= golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo= -golang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= -golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU= -golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254= +golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw= +golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/term v0.43.0 h1:S4RLU2sB31O/NCl+zFN9Aru9A/Cq2aqKpTZJ6B+DwT4= +golang.org/x/term v0.43.0/go.mod h1:lrhlHNdQJHO+1qVYiHfFKVuVioJIheAc3fBSMFYEIsk= golang.org/x/text v0.28.0 h1:rhazDwis8INMIwQ4tpjLDzUhx6RlXqZNPEM0huQojng= golang.org/x/text v0.28.0/go.mod h1:U8nCwOR8jO/marOQ0QbDiOngZVEBB7MAiitBuMjXiNU= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/pkg/di/env.go new/pinact-4.1.0/pkg/di/env.go --- old/pinact-4.0.0/pkg/di/env.go 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/pkg/di/env.go 2026-06-09 02:37:37.000000000 +0200 @@ -30,5 +30,4 @@ flags.IsGitHubActions = getEnv("GITHUB_ACTIONS") == trueS flags.FallbackEnabled = getEnv("PINACT_GHES_FALLBACK") == trueS flags.KeyringEnabled = getEnv("PINACT_KEYRING_ENABLED") == trueS - flags.GHTKNEnabled = getEnv("PINACT_GHTKN") == trueS } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/pkg/di/flag.go new/pinact-4.1.0/pkg/di/flag.go --- old/pinact-4.0.0/pkg/di/flag.go 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/pkg/di/flag.go 2026-06-09 02:37:37.000000000 +0200 @@ -28,7 +28,6 @@ IsGitHubActions bool FallbackEnabled bool KeyringEnabled bool - GHTKNEnabled bool GitHubRepository string GitHubAPIURL string diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/pkg/di/run.go new/pinact-4.1.0/pkg/di/run.go --- old/pinact-4.0.0/pkg/di/run.go 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/pkg/di/run.go 2026-06-09 02:37:37.000000000 +0200 @@ -40,7 +40,7 @@ return fmt.Errorf("set log level: %w", err) } - gh, err := github.New(ctx, logger.Logger, secrets.GitHubToken, flags.KeyringEnabled, flags.GHTKNEnabled) + gh, err := github.New(ctx, logger.Logger, secrets.GitHubToken, flags.KeyringEnabled) if err != nil { return fmt.Errorf("create a GitHub client: %w", err) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-4.0.0/pkg/github/github.go new/pinact-4.1.0/pkg/github/github.go --- old/pinact-4.0.0/pkg/github/github.go 2026-05-24 19:07:07.000000000 +0200 +++ new/pinact-4.1.0/pkg/github/github.go 2026-06-09 02:37:37.000000000 +0200 @@ -36,8 +36,12 @@ // New creates a new GitHub API client with authentication. // It configures the client with appropriate HTTP client based on available // authentication methods (environment token or keyring). -func New(ctx context.Context, logger *slog.Logger, token string, keyringEnabled, ghtknEnabled bool) (*Client, error) { - client, err := github.NewClient(github.WithHTTPClient(getHTTPClientForGitHub(ctx, logger, token, keyringEnabled, ghtknEnabled))) +func New(ctx context.Context, logger *slog.Logger, token string, keyringEnabled bool) (*Client, error) { + hc, err := getHTTPClientForGitHub(ctx, logger, token, keyringEnabled) + if err != nil { + return nil, fmt.Errorf("get HTTP client for GitHub: %w", err) + } + client, err := github.NewClient(github.WithHTTPClient(hc)) if err != nil { return nil, fmt.Errorf("create a GitHub client: %w", err) } @@ -54,27 +58,42 @@ // getHTTPClientForGitHub creates an HTTP client configured for GitHub API access. // It handles authentication using environment token, keyring, or falls back // to unauthenticated access. The client is configured with OAuth2 for authenticated requests. -func getHTTPClientForGitHub(ctx context.Context, logger *slog.Logger, token string, keyringEnabled, ghtknEnabled bool) *http.Client { - ts := getTokenSourceForGitHub(logger, token, keyringEnabled, ghtknEnabled) +func getHTTPClientForGitHub(ctx context.Context, logger *slog.Logger, token string, keyringEnabled bool) (*http.Client, error) { + ts, err := getTokenSourceForGitHub(logger, token, keyringEnabled) + if err != nil { + return nil, fmt.Errorf("get token source for GitHub: %w", err) + } if ts == nil { - return http.DefaultClient + return http.DefaultClient, nil } - return oauth2.NewClient(ctx, ts) + return oauth2.NewClient(ctx, ts), nil } -func getTokenSourceForGitHub(logger *slog.Logger, token string, keyringEnabled, ghtknEnabled bool) oauth2.TokenSource { +func getTokenSourceForGitHub(logger *slog.Logger, token string, keyringEnabled bool) (oauth2.TokenSource, error) { if token != "" { return oauth2.StaticTokenSource( &oauth2.Token{AccessToken: token}, - ) + ), nil } if keyringEnabled { - return ghtoken.NewTokenSource(logger, KeyService) + return ghtoken.NewTokenSource(logger, KeyService), nil + } + ghtknEnabled, err := ghtkn.Enabled(&ghtkn.InputEnabled{ + Envs: []string{ + "PINACT_GHTKN", + }, + }) + if err != nil { + return nil, fmt.Errorf("check if ghtkn is enabled: %w", err) } if ghtknEnabled { - return ghtkn.New().TokenSource(logger, &ghtkn.InputGet{}) + client, err := ghtkn.New() + if err != nil { + return nil, fmt.Errorf("create a ghtkn client: %w", err) + } + return client.TokenSource(logger, &ghtkn.InputGet{}), nil } - return nil + return nil, nil //nolint:nilnil } // NewWithBaseURL creates a new GitHub API client with a custom base URL. ++++++ pinact.obsinfo ++++++ --- /var/tmp/diff_new_pack.wN4S8D/_old 2026-06-09 14:30:50.666743441 +0200 +++ /var/tmp/diff_new_pack.wN4S8D/_new 2026-06-09 14:30:50.678743939 +0200 @@ -1,5 +1,5 @@ name: pinact -version: 4.0.0 -mtime: 1779642427 -commit: 6cdb1d4b0915dcb0888d0959dd96bd715d8d45e6 +version: 4.1.0 +mtime: 1780965457 +commit: a14c0ee5db6c9068ebab1781549c65adc9066ffa ++++++ vendor.tar.gz ++++++ ++++ 88651 lines of diff (skipped)
