Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package chezmoi for openSUSE:Factory checked in at 2026-08-09 21:43:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chezmoi (Old) and /work/SRC/openSUSE:Factory/.chezmoi.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chezmoi" Sun Aug 9 21:43:48 2026 rev:98 rq:1370289 version:2.72.0 Changes: -------- --- /work/SRC/openSUSE:Factory/chezmoi/chezmoi.changes 2026-07-21 23:14:04.465836413 +0200 +++ /work/SRC/openSUSE:Factory/.chezmoi.new.16738/chezmoi.changes 2026-08-09 21:45:57.251990745 +0200 @@ -1,0 +2,27 @@ +Fri Aug 7 22:30:05 UTC 2026 - Filippo Bonazzi <[email protected]> + +- Update to version 2.72.0: + - Features + * feat: Fix multiple security vulns thanks to secur0.com + * feat: Add shellQuote and shellQuoteList template funcs + * feat: Add gopassCat template function + * feat: Add debugf template function + - Fixes + * fix: Tighten permissions on temporary files + * fix: Ensure HTTP cache dir is private + * fix: Disallow relative paths with /.. suffix + * fix: Disallow .. in ignore and remove patterns + * fix: Disallow .. paths in mackup files + * fix: Disallow filenames that resolve to . + * fix: Improve handling of untrusted relative paths + * fix: Disallow .. paths in .chezmoiroot + * fix: Reject negative format-indent-width template directives + * fix: Ensure that secret keyring get command always writes a private file + * fix: Ensure that age-keygen always writes a private file + * fix: Make persistent state directory private by default + * fix: Prevent directory escape in tar and rar archives + * fix: Disallow file and dir names that resolve to .. + - Documentation + * docs: Use more robust quoting functions in examples + +------------------------------------------------------------------- Old: ---- chezmoi-2.71.1.obscpio New: ---- chezmoi-2.72.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chezmoi.spec ++++++ --- /var/tmp/diff_new_pack.jnjMtJ/_old 2026-08-09 21:45:58.012016688 +0200 +++ /var/tmp/diff_new_pack.jnjMtJ/_new 2026-08-09 21:45:58.016016824 +0200 @@ -17,7 +17,7 @@ Name: chezmoi -Version: 2.71.1 +Version: 2.72.0 Release: 0 Summary: A multi-host manager for dotfiles License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.jnjMtJ/_old 2026-08-09 21:45:58.048017916 +0200 +++ /var/tmp/diff_new_pack.jnjMtJ/_new 2026-08-09 21:45:58.052018053 +0200 @@ -2,7 +2,7 @@ <service name="obs_scm" mode="manual"> <param name="scm">git</param> <param name="url">https://github.com/twpayne/chezmoi.git</param> - <param name="revision">v2.71.1</param> + <param name="revision">v2.72.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> </service> ++++++ chezmoi-2.71.1.obscpio -> chezmoi-2.72.0.obscpio ++++++ ++++ 2619 lines of diff (skipped) ++++++ chezmoi.obsinfo ++++++ --- /var/tmp/diff_new_pack.jnjMtJ/_old 2026-08-09 21:45:58.972049458 +0200 +++ /var/tmp/diff_new_pack.jnjMtJ/_new 2026-08-09 21:45:58.976049594 +0200 @@ -1,5 +1,5 @@ name: chezmoi -version: 2.71.1 -mtime: 1784575705 -commit: 94f58519ad17b954a5e7621a3c4e24385fd5417a +version: 2.72.0 +mtime: 1785695102 +commit: f81cb321789aa3df62871248f5e4d361a59e7cc1 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/chezmoi/vendor.tar.gz /work/SRC/openSUSE:Factory/.chezmoi.new.16738/vendor.tar.gz differ: char 19, line 1
