Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tekton-cli for openSUSE:Factory checked in at 2026-07-28 17:54:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tekton-cli (Old) and /work/SRC/openSUSE:Factory/.tekton-cli.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tekton-cli" Tue Jul 28 17:54:33 2026 rev:9 rq:1367887 version:0.45.1 Changes: -------- --- /work/SRC/openSUSE:Factory/tekton-cli/tekton-cli.changes 2026-05-13 17:24:04.639086032 +0200 +++ /work/SRC/openSUSE:Factory/.tekton-cli.new.2004/tekton-cli.changes 2026-07-28 17:56:33.425635565 +0200 @@ -1,0 +2,42 @@ +Mon Jul 27 05:41:19 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.45.1: + This patch release addresses the following CVEs: CVE-2026-48702, + CVE-2026-49835, CVE-2026-39395, CVE-2026-49835. It also upgrades + Go to v1.25.6 to remediate vulnerabilities in the Go standard + library. + * Bump the go-k8s-dependencies group with 3 updates by + @dependabot[bot] in #2942 + * Bump step-security/harden-runner from 2.19.1 to 2.19.4 by + @dependabot[bot] in #2935 + * Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] + in #2936 + * Bump chainguard-dev/actions/kind-diag from 1.6.19 to 1.6.25 by + @dependabot[bot] in #2937 + * Bump github/codeql-action/analyze from 4.35.3 to 4.35.5 by + @dependabot[bot] in #2965 + * [release-v0.45.x] CI: Use goinstall mode for golangci-lint + action by @vdemeester in #2986 + * chore(deps): bump github.com/sigstore/sigstore from 1.10.5 to + 1.10.8 by @dependabot[bot] in #2993 + * chore(deps): bump the all group across 1 directory with 2 + updates by @dependabot[bot] in #3004 + * chore(deps): bump github.com/tektoncd/pipeline from 1.12.0 to + 1.12.2 by @dependabot[bot] in #2973 + * chore(deps): bump github.com/tektoncd/chains from 0.26.3 to + 0.26.5 by @dependabot[bot] in #2958 + * chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 + by @dependabot[bot] in #2944 + * chore(deps): bump github.com/google/go-containerregistry from + 0.21.6 to 0.21.7 by @dependabot[bot] in #2964 + * [release-v0.45.x] bump github.com/tektoncd/chains from 0.26.5 + to 0.26.6 by @dependabot[bot] in #3034 + * [release-v0.45.x] bump chainguard-dev/actions/kind-diag from + 1.6.26 to 1.6.27 in the all group by @dependabot[bot] in #3047 + * [release-v0.45.x] bump github.com/sigstore/cosign/v2 from 2.6.3 + to 2.6.4 by @dependabot[bot] in #3051 + * [release-v0.45.x] chore(deps): remove unused tektoncd/chains + dependency by @pratap0007 in #3061 + * fix(cve): fix few critical CVEs by @pratap0007 in #3063 + +------------------------------------------------------------------- New: ---- tekton-cli-0.45.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tekton-cli.spec ++++++ --- /var/tmp/diff_new_pack.YmBKyI/_old 2026-07-28 17:56:41.833929607 +0200 +++ /var/tmp/diff_new_pack.YmBKyI/_new 2026-07-28 17:56:41.841929887 +0200 @@ -19,7 +19,7 @@ %define executable_name tkn Name: tekton-cli -Version: 0.45.0 +Version: 0.45.1 Release: 0 Summary: CLI for interacting with the Tekton CD system License: Apache-2.0 @@ -28,7 +28,7 @@ Source1: vendor.tar.gz BuildRequires: bash-completion BuildRequires: fish -BuildRequires: go1.25 >= 1.25.8 +BuildRequires: go1.26 >= 1.26.5 BuildRequires: zsh Provides: tkn = %{version} ++++++ _service ++++++ --- /var/tmp/diff_new_pack.YmBKyI/_old 2026-07-28 17:56:42.185941917 +0200 +++ /var/tmp/diff_new_pack.YmBKyI/_new 2026-07-28 17:56:42.217943036 +0200 @@ -1,9 +1,9 @@ <services> <service name="obs_scm" mode="manual"> - <param name="url">https://github.com/tektoncd/cli</param> + <param name="url">https://github.com/tektoncd/cli.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.45.0</param> + <param name="revision">refs/tags/v0.45.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.YmBKyI/_old 2026-07-28 17:56:42.357947932 +0200 +++ /var/tmp/diff_new_pack.YmBKyI/_new 2026-07-28 17:56:42.413949891 +0200 @@ -1,6 +1,8 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/tektoncd/cli</param> - <param name="changesrevision">ce6edf3f84e96315ffba6752bf81620a9b90aa8d</param></service></servicedata> + <param name="changesrevision">ce6edf3f84e96315ffba6752bf81620a9b90aa8d</param></service><service name="tar_scm"> + <param name="url">https://github.com/tektoncd/cli.git</param> + <param name="changesrevision">4b7251b14349dc7a77afd7c53e22b196da6a2b6c</param></service></servicedata> (No newline at EOF) ++++++ tekton-cli.obsinfo ++++++ --- /var/tmp/diff_new_pack.YmBKyI/_old 2026-07-28 17:56:42.713960382 +0200 +++ /var/tmp/diff_new_pack.YmBKyI/_new 2026-07-28 17:56:42.745961501 +0200 @@ -1,5 +1,5 @@ name: tekton-cli -version: 0.45.0 -mtime: 1778582924 -commit: ce6edf3f84e96315ffba6752bf81620a9b90aa8d +version: 0.45.1 +mtime: 1785120431 +commit: 4b7251b14349dc7a77afd7c53e22b196da6a2b6c ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/tekton-cli/vendor.tar.gz /work/SRC/openSUSE:Factory/.tekton-cli.new.2004/vendor.tar.gz differ: char 13, line 1
