Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package hauler for openSUSE:Factory checked in at 2026-09-02 17:00:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/hauler (Old) and /work/SRC/openSUSE:Factory/.hauler.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "hauler" Wed Sep 2 17:00:33 2026 rev:23 rq:1375220 version:2.1.0 Changes: -------- --- /work/SRC/openSUSE:Factory/hauler/hauler.changes 2026-08-22 21:37:13.884553179 +0200 +++ /work/SRC/openSUSE:Factory/.hauler.new.1265/hauler.changes 2026-09-02 17:00:42.305093805 +0200 @@ -1,0 +2,21 @@ +Tue Sep 1 19:36:46 UTC 2026 - Dirk Müller <[email protected]> + +- update to 2.1.0 (bsc#1265425, CVE-2026-41888): + * `v2.1.0` is a **minor** release built on the containerd- + native foundation laid down in `v2.0.0`. The headline is that + `hauler store sync` and `hauler store add` are now fully + concurrent, with signature verification pinned to digests and + running in parallel too. Alongside that, this release adds an + audit trail, a store integrity checker, store-to-manifest + generation, private/insecure registry support across every + pull path, and a set of fixes for containerd imports, chunked + hauls, and Docker Hub reference handling. + * **Notable dependency bumps:** Go → **1.26.6**; + `containerd/v2` → 2.3.4; `sigstore/cosign/v3` → 3.1.3; + `sigstore/sigstore` → 1.10.9; `go-containerregistry` → + 0.22.0; `helm/v4` → 4.2.4; `k8s.io` libs (apimachinery, api, + client-go) → 0.37.0; `logrus` → 1.10.2; `docker/go-metrics` → + 0.1.0; `sigstore/rekor` → 1.5.4 (CVE resolution); plus + `x/mod` and `go-isatty`. + +------------------------------------------------------------------- @@ -30 +51,2 @@ -- update to 2.0.0: +- update to 2.0.0 (bsc#1277965, CVE-2026-37236, + bsc#1276651, CVE-2026-41178): Old: ---- hauler-2.0.3.tar.gz New: ---- hauler-2.1.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ hauler.spec ++++++ --- /var/tmp/diff_new_pack.XqeNth/_old 2026-09-02 17:00:44.433166909 +0200 +++ /var/tmp/diff_new_pack.XqeNth/_new 2026-09-02 17:00:44.434166943 +0200 @@ -17,8 +17,8 @@ Name: hauler -Version: 2.0.3 -%global git_commit 8d688ccee289e0770a1bf6a022cfd8c3a4625995 +Version: 2.1.0 +%global git_commit ea64cff66fae4f4c3cf5b5ab9195765cbdae8dbd Release: 0 Summary: Airgap Swiss Army Knife License: Apache-2.0 ++++++ hauler-2.0.3.tar.gz -> hauler-2.1.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/hauler/hauler-2.0.3.tar.gz /work/SRC/openSUSE:Factory/.hauler.new.1265/hauler-2.1.0.tar.gz differ: char 13, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/hauler/vendor.tar.zst /work/SRC/openSUSE:Factory/.hauler.new.1265/vendor.tar.zst differ: char 7, line 1
