Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rtk for openSUSE:Factory checked in at 2026-09-12 21:21:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rtk (Old) and /work/SRC/openSUSE:Factory/.rtk.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rtk" Sat Sep 12 21:21:36 2026 rev:6 rq:1377493 version:0.49.0 Changes: -------- --- /work/SRC/openSUSE:Factory/rtk/rtk.changes 2026-09-07 11:34:15.784368599 +0200 +++ /work/SRC/openSUSE:Factory/.rtk.new.1265/rtk.changes 2026-09-12 21:25:22.316571945 +0200 @@ -1,0 +2,29 @@ +Sat Sep 12 07:16:37 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 0.49.0: + * sqlfluff: new lint filter for "sqlfluff lint" JSON output + * recall: SQLite-backed content-addressed recall store with + selectable retriever mode, plus recall efficiency counters + in telemetry + * rewrite: rewrite the pipeline producer when all consumers are + safe, peel process-wrapper prefixes, and pass sudo commands + through untouched + * grep: free -l for the native --files-with-matches flag + * ruff: preserve non-check subcommands + * diff: align by LCS and name the cause of invisible differences + * runner: flush captured output and die by the relayed signal +- Refresh rtk-unbundle-sqlite.patch for the new toml_edit line in + the 0.49.0 manifest and rtk-no-deny-warnings.patch for the new + version path (both still needed -- upstream PRs 3446 and 3447 + are open) +- No licence change on the re-vendor: the linked crate set resolves + to the existing License tag (200 vendored, 137 linked); upstream + fixed its own manifest license to the valid SPDX id Apache-2.0 +- cargo audit: quick-xml 0.37.5 carries RUSTSEC-2026-0194 and + RUSTSEC-2026-0195, both fixed only in 0.41, which upstream's "0.37" + requirement cannot reach; unchanged from 0.48.0 + * RUSTSEC-2026-0195 needs an NsReader, which rtk never builds + * RUSTSEC-2026-0194 is reachable only over the .trx files that + a local "dotnet test" run writes, never over network input + +------------------------------------------------------------------- Old: ---- rtk-0.48.0.tar.gz New: ---- rtk-0.49.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rtk.spec ++++++ --- /var/tmp/diff_new_pack.povSM3/_old 2026-09-12 21:25:23.635627307 +0200 +++ /var/tmp/diff_new_pack.povSM3/_new 2026-09-12 21:25:23.636627349 +0200 @@ -17,13 +17,13 @@ Name: rtk -Version: 0.48.0 +Version: 0.49.0 Release: 0 Summary: CLI proxy that reduces LLM token consumption of dev commands # Legal-Review-Notice: rtk itself is Apache-2.0, but the binary statically links # the vendored Rust dependencies, so the tag below covers the whole linked set. # Derived on this re-vendor with "cargo tree --offline -p rtk -e normal" over the -# vendored tree (194 crates vendored, 134 in the linked graph): MPL-2.0 comes +# vendored tree (200 crates vendored, 137 in the linked graph): MPL-2.0 comes # from colored and option-ext, Unicode-3.0 from the 18 ICU/zerovec crates, ISC # from rustls-webpki and untrusted (and from ring, "Apache-2.0 AND ISC"), # CDLA-Permissive-2.0 from webpki-roots, BSD-3-Clause from subtle, and MIT from ++++++ _service ++++++ --- /var/tmp/diff_new_pack.povSM3/_old 2026-09-12 21:25:23.666628608 +0200 +++ /var/tmp/diff_new_pack.povSM3/_new 2026-09-12 21:25:23.669628734 +0200 @@ -1,6 +1,6 @@ <services> <service name="cargo_vendor" mode="manual"> - <param name="srctar">rtk-0.48.0.tar.gz</param> + <param name="srctar">rtk-0.49.0.tar.gz</param> <param name="compression">zst</param> <param name="update">true</param> </service> ++++++ rtk-0.48.0.tar.gz -> rtk-0.49.0.tar.gz ++++++ ++++ 24885 lines of diff (skipped) ++++++ rtk-no-deny-warnings.patch ++++++ --- /var/tmp/diff_new_pack.povSM3/_old 2026-09-12 21:25:23.996642459 +0200 +++ /var/tmp/diff_new_pack.povSM3/_new 2026-09-12 21:25:24.001642669 +0200 @@ -6,7 +6,7 @@ lint. The unsafe_code deny is kept -- that one is a deliberate design constraint, not a lint-drift hazard. -Index: rtk-0.48.0/Cargo.toml +Index: rtk-0.49.0/Cargo.toml =================================================================== --- a/Cargo.toml +++ b/Cargo.toml ++++++ rtk-unbundle-sqlite.patch ++++++ --- /var/tmp/diff_new_pack.povSM3/_old 2026-09-12 21:25:24.021643509 +0200 +++ /var/tmp/diff_new_pack.povSM3/_new 2026-09-12 21:25:24.026643718 +0200 @@ -3,7 +3,7 @@ statically linked SQLite would have to be tracked and patched separately for every SQLite CVE. -Index: rtk-0.48.0/Cargo.toml +Index: rtk-0.49.0/Cargo.toml =================================================================== --- a/Cargo.toml +++ b/Cargo.toml @@ -14,6 +14,7 @@ -rusqlite = { version = "0.31", features = ["bundled"] } +rusqlite = { version = "0.31" } toml = "0.8" + toml_edit = "0.22" chrono = "0.4" tempfile = "3" ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/rtk/vendor.tar.zst /work/SRC/openSUSE:Factory/.rtk.new.1265/vendor.tar.zst differ: char 8, line 1
