Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package vexctl for openSUSE:Factory checked in at 2026-09-19 22:23:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/vexctl (Old) and /work/SRC/openSUSE:Factory/.vexctl.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "vexctl" Sat Sep 19 22:23:03 2026 rev:15 rq:1379025 version:0.4.4+git91.839fbf5 Changes: -------- --- /work/SRC/openSUSE:Factory/vexctl/vexctl.changes 2026-09-10 11:51:25.099658611 +0200 +++ /work/SRC/openSUSE:Factory/.vexctl.new.383539/vexctl.changes 2026-09-19 22:24:43.846583803 +0200 @@ -1,0 +2,16 @@ +Sat Sep 19 16:04:18 UTC 2026 - Jeff Kowalczyk <[email protected]> + +- Update to version 0.4.4+git91.839fbf5: + * build(deps): Bump golang.org/x/sync from 0.22.0 to 0.23.0 + * build(deps): Bump the all group with 2 updates + * Normalize document products once when attesting + * Resolve image digests concurrently and honor context in attest + * Preallocate slices and drop redundant stat before MkdirAll + * Read SARIF report from stdin without a temp file + * Index VEX statements by vulnerability when filtering SARIF reports + * build(deps): Bump chainguard-dev/actions/boilerplate in the all group + * build(deps): Bump github.com/carabiner-dev/collector in the all group + * build(deps): Bump chainguard-dev/actions/boilerplate in the all group + * build(deps): Bump chainguard-dev/actions/boilerplate in the all group + +------------------------------------------------------------------- Old: ---- vexctl-0.4.4+git70.36f6f3a.tar.gz New: ---- vexctl-0.4.4+git91.839fbf5.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ vexctl.spec ++++++ --- /var/tmp/diff_new_pack.yfACZq/_old 2026-09-19 22:24:46.204682151 +0200 +++ /var/tmp/diff_new_pack.yfACZq/_new 2026-09-19 22:24:46.206682234 +0200 @@ -17,7 +17,7 @@ Name: vexctl -Version: 0.4.4+git70.36f6f3a +Version: 0.4.4+git91.839fbf5 Release: 0 Summary: CLI tool to create, transform and attest VEX metadata License: Apache-2.0 ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.yfACZq/_old 2026-09-19 22:24:46.313686697 +0200 +++ /var/tmp/diff_new_pack.yfACZq/_new 2026-09-19 22:24:46.320686989 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openvex/vexctl.git</param> - <param name="changesrevision">36f6f3a36438e3e514e3ec13394fb7a0c8f0e986</param></service></servicedata> + <param name="changesrevision">839fbf5304434e3dad3d2930687d134989b6611f</param></service></servicedata> (No newline at EOF) ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/vexctl/vendor.tar.gz /work/SRC/openSUSE:Factory/.vexctl.new.383539/vendor.tar.gz differ: char 27, line 1 ++++++ vexctl-0.4.4+git70.36f6f3a.tar.gz -> vexctl-0.4.4+git91.839fbf5.tar.gz ++++++ /work/SRC/openSUSE:Factory/vexctl/vexctl-0.4.4+git70.36f6f3a.tar.gz /work/SRC/openSUSE:Factory/.vexctl.new.383539/vexctl-0.4.4+git91.839fbf5.tar.gz differ: char 12, line 1
