Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package zizmor for openSUSE:Factory checked in at 2026-08-03 17:18:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/zizmor (Old) and /work/SRC/openSUSE:Factory/.zizmor.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "zizmor" Mon Aug 3 17:18:27 2026 rev:38 rq:1369153 version:1.29.0 Changes: -------- --- /work/SRC/openSUSE:Factory/zizmor/zizmor.changes 2026-07-22 19:07:48.218603087 +0200 +++ /work/SRC/openSUSE:Factory/.zizmor.new.16738/zizmor.changes 2026-08-03 17:18:46.337821611 +0200 @@ -1,0 +2,38 @@ +Mon Aug 03 05:52:16 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.29.0: + * New Features + - zizmor now has experimental support for auditing pre-commit + inputs, meaning both pre-commit configuration and hook + definitions (#2209) + - New audit: insecure-url-scheme detects usages of insecure + (i.e. plaintext) protocols when making network requests. The + initial version of this audit is limited to pre-commit inputs + only (#2228) + - zizmor now supports GitHub's "self-repository" reference + syntax for local actions, e.g. uses: $/foo/bar instead of a + manual checkout and uses: ./foo/bar (#2248) + * Changes + - The unpinned-uses and unpinned-images audits have been + separated more cleanly: unpinned-uses is now principally + responsible for Git-style uses: clauses, whereas + unpinned-images is now responsible for docker://-style uses: + clauses (in addition to already checking other image + references) (#2222) + * Removals + - --collect=workflows-only and --collect=actions-only have been + fully removed. Use --collect=workflows and --collect=actions + for the replacement behavior (#2242) + * Bug Fixes + - Fixed a bug where zizmor would reject a valid workflow + definition for containing a literal jobs..outputs. value for + being a non-string (#2220) + - Fixed a bug where the github-app audit would incorrectly flag + some usages as needing a repositories: key, despite + requesting organization-level-only permissions (#2227) + - Fixed a class of bugs where zizmor would discover the user's + configuration in unintuitive ways. When auditing from a Git + repository, zizmor now uses the repository root to discover + configuration consistently (#2234) + +------------------------------------------------------------------- Old: ---- zizmor-1.28.0.obscpio New: ---- zizmor-1.29.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zizmor.spec ++++++ --- /var/tmp/diff_new_pack.JkA2cu/_old 2026-08-03 17:18:50.249957846 +0200 +++ /var/tmp/diff_new_pack.JkA2cu/_new 2026-08-03 17:18:50.261958264 +0200 @@ -17,7 +17,7 @@ Name: zizmor -Version: 1.28.0 +Version: 1.29.0 Release: 0 Summary: A static analysis tool for GitHub Actions License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.JkA2cu/_old 2026-08-03 17:18:50.505966761 +0200 +++ /var/tmp/diff_new_pack.JkA2cu/_new 2026-08-03 17:18:50.521967318 +0200 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="exclude">.git</param> <param name="versionformat">@PARENT_TAG@</param> - <param name="revision">refs/tags/v1.28.0</param> + <param name="revision">refs/tags/v1.29.0</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.JkA2cu/_old 2026-08-03 17:18:50.577969269 +0200 +++ /var/tmp/diff_new_pack.JkA2cu/_new 2026-08-03 17:18:50.609970383 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/woodruffw/zizmor</param> <param name="changesrevision">597db4d7dc5730bdc1370197bf5678a5ca028abb</param></service><service name="tar_scm"> <param name="url">https://github.com/zizmorcore/zizmor.git</param> - <param name="changesrevision">4381cc6339bb76a1004a99da929fe8f8f1143d94</param></service></servicedata> + <param name="changesrevision">3c116961091b50bd1a08ffefe916469d4d90093c</param></service></servicedata> (No newline at EOF) ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/zizmor/vendor.tar.zst /work/SRC/openSUSE:Factory/.zizmor.new.16738/vendor.tar.zst differ: char 7, line 1 ++++++ zizmor-1.28.0.obscpio -> zizmor-1.29.0.obscpio ++++++ ++++ 9000 lines of diff (skipped) ++++++ zizmor.obsinfo ++++++ --- /var/tmp/diff_new_pack.JkA2cu/_old 2026-08-03 17:18:51.514001865 +0200 +++ /var/tmp/diff_new_pack.JkA2cu/_new 2026-08-03 17:18:51.526002282 +0200 @@ -1,5 +1,5 @@ name: zizmor -version: 1.28.0 -mtime: 1784671213 -commit: 4381cc6339bb76a1004a99da929fe8f8f1143d94 +version: 1.29.0 +mtime: 1785617589 +commit: 3c116961091b50bd1a08ffefe916469d4d90093c
