Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package yq for openSUSE:Factory checked in at 2026-07-26 11:29:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/yq (Old) and /work/SRC/openSUSE:Factory/.yq.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "yq" Sun Jul 26 11:29:22 2026 rev:27 rq:1367722 version:4.53.3 Changes: -------- --- /work/SRC/openSUSE:Factory/yq/yq.changes 2026-06-01 18:09:46.052641997 +0200 +++ /work/SRC/openSUSE:Factory/.yq.new.2004/yq.changes 2026-07-26 11:32:15.518535667 +0200 @@ -1,0 +2,21 @@ +Fri Jul 24 08:53:40 UTC 2026 - Egbert Eich <[email protected]> + +- update to v4.53.3 + Add --ini-preserve-quotes flag for INI round-trip quote preservation. + Fix: reset INI decoder state on init. + Fix: decode properties array bracket paths. + Fix: preserve floats with trailing zero when encoding YAML to JSON. + Fix: JSON to TOML root scope and null handling. + Fix: reset TOML decoder finished flag on Init for multi-doc evaluation. + Fix: reset TOML decoder between files when evaluating all at once. + Fix: preserve TOML inline table array scope. + Fix: preserve empty TOML arrays in tables + Fix: TOML encoder uses inline tables for YAML FlowStyle mappings. + Fix nested inline YAML merge explode. + Fix repeatString overflow test on 32-bit platforms. +- Removed obsolete Fix-testcase-for-32bit-platforms.patch +- Fix CVE-2026-56852 (GO-2026-5970) (bsc#1271994): + A norm.Iter can enter an infinite loop when handling input + containing invalid UTF-8 bytes. + +------------------------------------------------------------------- Old: ---- Fix-testcase-for-32bit-platforms.patch yq-4.53.2.tar.gz New: ---- yq-4.53.3.tar.gz ----------(Old B)---------- Old: Fix repeatString overflow test on 32-bit platforms. - Removed obsolete Fix-testcase-for-32bit-platforms.patch - Fix CVE-2026-56852 (GO-2026-5970) (bsc#1271994): ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yq.spec ++++++ --- /var/tmp/diff_new_pack.MnFh9f/_old 2026-07-26 11:32:16.106555922 +0200 +++ /var/tmp/diff_new_pack.MnFh9f/_new 2026-07-26 11:32:16.110556059 +0200 @@ -22,14 +22,13 @@ %global import_path %{provider_prefix} Name: yq -Version: 4.53.2 +Version: 4.53.3 Release: 0 Summary: A portable command-line YAML processor License: MIT URL: https://github.com/mikefarah/yq Source0: https://github.com/mikefarah/yq/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz Source1: vendor.tar.gz -Patch1: Fix-testcase-for-32bit-platforms.patch # conflict with all python3X-yq packages since they install /usr/bin/yq # we need to handle Leap 15.4 specially since the python3dist() is not # generated there @@ -85,13 +84,6 @@ %check go test ./... -%if %{with vulncheck} -for i in $(find %{buildroot} -executable -and -not -type d \ - -and -not -name "*.debug" -and -not -name "*.so*"); do - file $i | grep -q "^$i: ELF" || continue - govulncheck -mode=binary -db file:///usr/share/vulndb/ $i -done -%endif %install install -D -m 0755 ./bin/%{name} "%{buildroot}/%{_bindir}/%{name}" @@ -101,6 +93,16 @@ %{buildroot}/%{_bindir}/%{name} shell-completion zsh > %{buildroot}%{_datarootdir}/zsh/site-functions/_%{name} mkdir -p %{buildroot}%{_datadir}/fish/vendor_completions.d %{buildroot}/%{_bindir}/%{name} shell-completion fish > %{buildroot}%{_datarootdir}/fish/vendor_completions.d/%{name}.fish +%if %{with vulncheck} +status=0 +echo "VULNCHECK START ===================================================" +for i in $(find %{buildroot} -executable -and -not -type d -and -not -name "*.debug" -and -not -name "*.so*"); do + file $i | grep -q "^$i: ELF" || continue + govulncheck -mode=binary -db file:///usr/share/vulndb/ $i || status=$? +done +echo "VULNCHECK END =====================================================" +[ $status -eq 0 ] || exit $status +%endif %files bash-completion %defattr(-,root,root) ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.MnFh9f/_old 2026-07-26 11:32:16.142557162 +0200 +++ /var/tmp/diff_new_pack.MnFh9f/_new 2026-07-26 11:32:16.146557300 +0200 @@ -1,5 +1,5 @@ -mtime: 1780321401 -commit: 105154889aba30aae4d67ffc96e4b7f41f889570908e3bb9f7fae134944b60e6 +mtime: 1784963510 +commit: e822d2c7367bbc7452d6187bba2e3a46c01bf8de34cca43fe2fddace3efccf06 url: https://src.opensuse.org/utilities/yq.git revision: main ++++++ _service ++++++ --- /var/tmp/diff_new_pack.MnFh9f/_old 2026-07-26 11:32:16.174558264 +0200 +++ /var/tmp/diff_new_pack.MnFh9f/_new 2026-07-26 11:32:16.178558402 +0200 @@ -4,6 +4,9 @@ <param name="replace"> golang.org/x/net=golang.org/x/[email protected] </param> + <param name="replace"> + golang.org/x/text=golang.org/x/[email protected] + </param> </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-25 09:11:50.000000000 +0200 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ vendor.tar.gz ++++++ ++++ 3314 lines of diff (skipped) ++++++ yq-4.53.2.tar.gz -> yq-4.53.3.tar.gz ++++++ ++++ 2392 lines of diff (skipped)
