Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package flatpak-builder for openSUSE:Factory
checked in at 2026-09-22 15:54:12
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/flatpak-builder (Old)
and /work/SRC/openSUSE:Factory/.flatpak-builder.new.383539 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "flatpak-builder"
Tue Sep 22 15:54:12 2026 rev:34 rq:1379684 version:1.4.12
Changes:
--------
--- /work/SRC/openSUSE:Factory/flatpak-builder/flatpak-builder.changes
2026-08-21 22:17:22.825067144 +0200
+++
/work/SRC/openSUSE:Factory/.flatpak-builder.new.383539/flatpak-builder.changes
2026-09-22 15:55:43.897456377 +0200
@@ -1,0 +2,23 @@
+Tue Sep 15 16:06:23 UTC 2026 - Bjørn Lie <[email protected]>
+
+- Update to version 1.4.12:
+ + Allow specifying appstream-compose image format and fix tests
+ with appstream >=1.2.0
+ + Various improvements to tests to ensure enough debug
+ information is available when they fail
+
+-------------------------------------------------------------------
+Tue Sep 15 09:07:15 UTC 2026 - Bjørn Lie <[email protected]>
+
+- Update to version 1.4.11:
+ + Skip pre-migrated entry during locale migration
+ + Abort on invalid checksum strings in archive and file sources
+ early
+ + Ensure no source can escape base_dir in sandboxed mode
+ (GHSA-484h-v688-jq5j).
+ + Validate existence of URL during parsing early in bzr, svn
+ sources
+ + Disable git hooks completely when applying patches
+ (CVE-2026-86320)
+
+-------------------------------------------------------------------
Old:
----
flatpak-builder-1.4.10.tar.xz
New:
----
flatpak-builder-1.4.12.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ flatpak-builder.spec ++++++
--- /var/tmp/diff_new_pack.V5BeIi/_old 2026-09-22 15:55:44.588484845 +0200
+++ /var/tmp/diff_new_pack.V5BeIi/_new 2026-09-22 15:55:44.591484969 +0200
@@ -22,7 +22,7 @@
%bcond_without system_debugedit
%endif
Name: flatpak-builder
-Version: 1.4.10
+Version: 1.4.12
Release: 0
Summary: Tool to build flatpaks from source
License: LGPL-2.1-or-later
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.V5BeIi/_old 2026-09-22 15:55:44.630486576 +0200
+++ /var/tmp/diff_new_pack.V5BeIi/_new 2026-09-22 15:55:44.633486699 +0200
@@ -1,6 +1,7 @@
-mtime: 1787226539
-commit: 93838cc2b09c9dd2e22409c769ca185431e4f62d209a64567b3601ac1bd039aa
+mtime: 1789488459
+commit: 8a1bb88a07b3973c425831afda736e6d3cec91a7a86a75f3b38a22641d244bba
url: https://src.opensuse.org/GNOME/flatpak-builder
-revision: 93838cc2b09c9dd2e22409c769ca185431e4f62d209a64567b3601ac1bd039aa
+revision: 8a1bb88a07b3973c425831afda736e6d3cec91a7a86a75f3b38a22641d244bba
+trackingbranch: factory
projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-09-15 18:07:39.000000000 +0200
@@ -0,0 +1,4 @@
+*.obscpio
+*.osc
+_build.*
+.pbuild
++++++ flatpak-builder-1.4.10.tar.xz -> flatpak-builder-1.4.12.tar.xz ++++++
++++ 1923 lines of diff (skipped)