Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package inspektor-gadget for
openSUSE:Factory checked in at 2026-09-18 22:07:07
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/inspektor-gadget (Old)
and /work/SRC/openSUSE:Factory/.inspektor-gadget.new.383539 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "inspektor-gadget"
Fri Sep 18 22:07:07 2026 rev:38 rq:1378729 version:0.56.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/inspektor-gadget/inspektor-gadget.changes
2026-08-28 19:55:20.748677860 +0200
+++
/work/SRC/openSUSE:Factory/.inspektor-gadget.new.383539/inspektor-gadget.changes
2026-09-18 22:08:02.241362358 +0200
@@ -1,0 +2,83 @@
+Fri Sep 18 05:16:33 UTC 2026 - Johannes Kastl
<[email protected]>
+
+- Update to version 0.56.0:
+ * Welcome to the v0.56.0 of Inspektor Gadget. These are the most
+ important changes:
+ - Kubernetes multi-tenancy (experimental) — an opt-in mode that
+ authenticates every kubectl-gadget request through Kubernetes
+ (TokenReview) and restricts gadgets to the namespaces
+ authorized by RBAC (SubjectAccessReview). Enforcement runs in
+ the gadget service via KubeManager and covers detached
+ instance list/attach/delete (#5679).
+ - Rootless ig image commands — ig image
+ build/list/inspect/push/pull now run as a normal user against
+ a per-user OCI store at ~/.ig/oci-store. sudo ig run
+ --oci-store-user uses that user store read-only, so gadgets
+ built as your user can be executed without polluting ~ with
+ root-owned files (#5578).
+ - Stripped Go binary uprobes — uprobetracer falls back to Go's
+ .gopclntab (including Go 1.26+ .go.module) when the ELF
+ symbol table is missing, so uprobes can attach to stripped Go
+ binaries such as a production kubelet (#5742). Hardened ELF
+ parsing (safeelf bounded symbol iterator,
+ gopclntab/USDT/debuginfod size limits, container ID
+ validation) prevents crafted binaries from causing large
+ allocations in the privileged IG process (#5568, #5762).
+ - Kubelet /configz via HTTPS — container runtime socket
+ auto-detection now talks to the kubelet's /configz directly
+ and requires nodes/configz instead of the broader nodes/proxy
+ (Kubernetes v1.33+; earlier clusters fall back to the
+ configured socket path) (#5343).
+ - Container-hook reliability — the fanotify container hook is
+ hardened against freezes and lost events (#5730), and
+ FAN_MARK_IGNORED_SURV_MODIFY is added to ignore marks so they
+ take effect even when config.json is open for write (#5733).
+ * Breaking Changes
+ - deploy: Replace nodes/proxy with nodes/configz in #5343
+ - Rootless image commands in #5578
+ * General Improvements
+ - feat: add multi-tenancy support (namespace based) in #5679
+ - uprobetracer: Support stripped Go binaries via .gopclntab
+ fallback in #5742
+ - pkg/signature: Add some checks in #5568
+ - charts: Allow overrding tolerations in #5684
+ - gadgets/trace_mount: Report network namespace in mount gadget
+ in #5758
+ * Bug Fixes
+ - container-hook: harden the fanotify hook against freezes and
+ lost events in #5730
+ - pkg/container-hook: Add FAN_MARK_IGNORED_SURV_MODIFY to
+ ignore marks in #5733
+ - pkg/types, pkg/utils/safeelf: Fix staticcheck issues in #5762
+ - build: Fix broken .PHONY declarations in Makefiles in #5784
+ * Documentation Improvements
+ - docs: Document privileges needed to deploy Inspektor Gadget
+ in k8s. in #5731
+ - docs: Drop the benchmark workflow for a removed package in
+ #5746
+ - docs/gadget-devel: Compile-test the hello-world guide code in
+ #5771
+ - readme: Remove Go Report Card in #5728
+ * Testing and Continuous Integration
+ - gadgets: Serialize gadget push/sign on OCI registries and
+ retry flaky errors in #5719
+ - tests: gadgets/profile_cpu: Run OTel stacks workload in a
+ container in #5747
+ - Artifact Hub: Update gadgets version to v0.55.0 in #5729
+ - Artifact Hub: Update gadgets version to v0.55.1 in #5764
+ * Dependencies updates
+ - Dockerfiles: bump debian from 7b140f3 to abd67ff in
+ /Dockerfiles in #5732
+ - golang: Update to 1.26.6 with @Copilot in #5751
+ - go: Update x/crypto to v0.55.0 in #5780
+ - go.mod: Bump golang.org/x/mod to v0.40.0 in #5761
+ - go: bump the aws-sdk group across 1 directory with 3 updates
+ in #5702
+ - go: bump google.golang.org/grpc from 1.82.1 to 1.83.1 in
+ #5787
+ - go: bump google.golang.org/grpc from 1.82.1 to 1.83.1 in
+ /examples in #5783
+ - go: bump google.golang.org/grpc from 1.82.1 to 1.83.1 in
+ /tools/testjson2md in #5785
+
+-------------------------------------------------------------------
Old:
----
inspektor-gadget-0.55.1.obscpio
New:
----
inspektor-gadget-0.56.0.obscpio
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ inspektor-gadget.spec ++++++
--- /var/tmp/diff_new_pack.s6jNYx/_old 2026-09-18 22:08:04.034437506 +0200
+++ /var/tmp/diff_new_pack.s6jNYx/_new 2026-09-18 22:08:04.036437589 +0200
@@ -17,7 +17,7 @@
Name: inspektor-gadget
-Version: 0.55.1
+Version: 0.56.0
Release: 0
Summary: A eBPF tool and systems inspection framework
License: Apache-2.0
++++++ _service ++++++
--- /var/tmp/diff_new_pack.s6jNYx/_old 2026-09-18 22:08:04.084439601 +0200
+++ /var/tmp/diff_new_pack.s6jNYx/_new 2026-09-18 22:08:04.092439937 +0200
@@ -3,7 +3,7 @@
<param
name="url">https://github.com/inspektor-gadget/inspektor-gadget.git</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
- <param name="revision">refs/tags/v0.55.1</param>
+ <param name="revision">refs/tags/v0.56.0</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="versionrewrite-pattern">v(.*)</param>
<param name="changesgenerate">enable</param>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.s6jNYx/_old 2026-09-18 22:08:04.120441110 +0200
+++ /var/tmp/diff_new_pack.s6jNYx/_new 2026-09-18 22:08:04.126441362 +0200
@@ -3,6 +3,6 @@
<param
name="url">https://github.com/inspektor-gadget/inspektor-gadget</param>
<param
name="changesrevision">7a314380ff61534ea70df9fb086505f958b2dff9</param></service><service
name="tar_scm">
<param
name="url">https://github.com/inspektor-gadget/inspektor-gadget.git</param>
- <param
name="changesrevision">b4a42119fe583a119aa5e975c3834558d91610a5</param></service></servicedata>
+ <param
name="changesrevision">e5a2855f270ca6557f4bd7e4fabaddf6760d8f50</param></service></servicedata>
(No newline at EOF)
++++++ inspektor-gadget-0.55.1.obscpio -> inspektor-gadget-0.56.0.obscpio ++++++
++++ 8058 lines of diff (skipped)
++++++ inspektor-gadget.obsinfo ++++++
--- /var/tmp/diff_new_pack.s6jNYx/_old 2026-09-18 22:08:05.994519653 +0200
+++ /var/tmp/diff_new_pack.s6jNYx/_new 2026-09-18 22:08:05.999519862 +0200
@@ -1,5 +1,5 @@
name: inspektor-gadget
-version: 0.55.1
-mtime: 1787293246
-commit: b4a42119fe583a119aa5e975c3834558d91610a5
+version: 0.56.0
+mtime: 1788760391
+commit: e5a2855f270ca6557f4bd7e4fabaddf6760d8f50
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/inspektor-gadget/vendor.tar.gz
/work/SRC/openSUSE:Factory/.inspektor-gadget.new.383539/vendor.tar.gz differ:
char 32, line 2
