Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gosec for openSUSE:Factory checked in at 2026-08-26 19:56:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gosec (Old) and /work/SRC/openSUSE:Factory/.gosec.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gosec" Wed Aug 26 19:56:47 2026 rev:37 rq:1373816 version:2.29.0 Changes: -------- --- /work/SRC/openSUSE:Factory/gosec/gosec.changes 2026-07-15 22:15:29.259017717 +0200 +++ /work/SRC/openSUSE:Factory/.gosec.new.1258/gosec.changes 2026-08-26 19:56:59.822678544 +0200 @@ -1,0 +2,19 @@ +Wed Aug 26 12:25:55 UTC 2026 - Felix Niederwanger <[email protected]> + +- Update to version 2.29.0: + * analyzers/G703: stop treating Clean/Abs/PathEscape as path-traversal sanitizers (#1723) + * fix(junit): properly escape XML in failure text (#1718) + * fix(csv): capture and report write errors on flush (#1716) + * fix(report): root path matching in formatters (#1719) + * fix(config): handle nosec tags with leading hash (#1717) + * Update all dependencies (#1720) + * Add support for go version 1.27.0 and update to version 1.25.14 and 1… (#1726) + * Update all dependencies (#1713) + * Update all dependencies (#1710) + * fix(G202): don't flag strings.Builder built from constants (#1707) + * ci: allow fork PR checkout in barry-ai-security-review job (#1708) + * Update all dependencies (#1709) + * Downgrade min Go version (#1706) + * Udpate action to use gosec v2.28.0 (#1705) + +------------------------------------------------------------------- Old: ---- gosec-2.28.0.obscpio New: ---- gosec-2.29.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gosec.spec ++++++ --- /var/tmp/diff_new_pack.uycGfK/_old 2026-08-26 19:57:04.357838709 +0200 +++ /var/tmp/diff_new_pack.uycGfK/_new 2026-08-26 19:57:04.361838850 +0200 @@ -17,7 +17,7 @@ Name: gosec -Version: 2.28.0 +Version: 2.29.0 Release: 0 Summary: CLI tool to scan the Go AST and SSA code representations for security problems License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.uycGfK/_old 2026-08-26 19:57:04.450841994 +0200 +++ /var/tmp/diff_new_pack.uycGfK/_new 2026-08-26 19:57:04.463842453 +0200 @@ -4,7 +4,7 @@ <param name="filename">gosec</param> <param name="url">https://github.com/securego/gosec.git</param> <param name="scm">git</param> - <param name="revision">v2.28.0</param> + <param name="revision">v2.29.0</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.uycGfK/_old 2026-08-26 19:57:04.542845243 +0200 +++ /var/tmp/diff_new_pack.uycGfK/_new 2026-08-26 19:57:04.553845631 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/securego/gosec.git</param> - <param name="changesrevision">9e75c0576c9878035d4221392108d458abe10fc3</param></service></servicedata> + <param name="changesrevision">deb54465fea23d19a77f037e11e6589021f8501d</param></service></servicedata> (No newline at EOF) ++++++ gosec-2.28.0.obscpio -> gosec-2.29.0.obscpio ++++++ ++++ 1610 lines of diff (skipped) ++++++ gosec.obsinfo ++++++ --- /var/tmp/diff_new_pack.uycGfK/_old 2026-08-26 19:57:05.387875086 +0200 +++ /var/tmp/diff_new_pack.uycGfK/_new 2026-08-26 19:57:05.398875475 +0200 @@ -1,5 +1,5 @@ name: gosec -version: 2.28.0 -mtime: 1783932030 -commit: 9e75c0576c9878035d4221392108d458abe10fc3 +version: 2.29.0 +mtime: 1787647058 +commit: deb54465fea23d19a77f037e11e6589021f8501d ++++++ vendor.tar.xz ++++++ ++++ 110848 lines of diff (skipped)
