Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package grok-build for openSUSE:Factory checked in at 2026-09-22 20:30:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/grok-build (Old) and /work/SRC/openSUSE:Factory/.grok-build.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grok-build" Tue Sep 22 20:30:41 2026 rev:12 rq:1379708 version:1.0.38+git20260919.4247f66 Changes: -------- --- /work/SRC/openSUSE:Factory/grok-build/grok-build.changes 2026-09-17 15:21:48.293983168 +0200 +++ /work/SRC/openSUSE:Factory/.grok-build.new.383539/grok-build.changes 2026-09-22 20:32:24.471854379 +0200 @@ -1,0 +2,25 @@ +Tue Sep 22 14:58:25 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to git snapshot 1.0.38+git20260919.4247f66 (upstream + 1.0.32 through 1.0.38): + * Security: the new allow_managed_hooks_only policy skips + every non-managed hook, overriding the disabled-hooks file + * Security: a malformed tool_approval_policy now falls back + to always_prompt instead of grants-allowed + * Security: under --sandbox grok's config and trust files + are write-denied, so accepting folder trust continues + session-locally instead of exiting, and is not persisted + * Security: a coding-data-sharing opt-out is always written + back; encrypted reasoning is stripped from memory capture + * Bash permission rules now cover quoted filename variables + instead of always prompting + * Session folders are no longer pruned after 30 days unless + [storage] cleanup_ttl_days is set + * /memory no longer takes subcommands; open the modal, then + press t to toggle memory and s for status + * Many more TUI, MCP, daemon and session fixes; see + upstream's per-release changelogs for the full list +- Build the syntax highlighter against the system oniguruma + instead of the copy bundled by the onig_sys crate + +------------------------------------------------------------------- Old: ---- grok-build-1.0.32+git20260915.4827113.tar.zst New: ---- grok-build-1.0.38+git20260919.4247f66.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ grok-build.spec ++++++ --- /var/tmp/diff_new_pack.v90kQe/_old 2026-09-22 20:32:27.589985111 +0200 +++ /var/tmp/diff_new_pack.v90kQe/_new 2026-09-22 20:32:27.590985153 +0200 @@ -17,13 +17,13 @@ Name: grok-build -Version: 1.0.32+git20260915.4827113 +Version: 1.0.38+git20260919.4247f66 Release: 0 Summary: Terminal AI coding agent by xAI # Legal-Review-Notice (boo#1273104): licences of the statically linked Rust # dependencies, verified against the vendored tree with # "cargo tree -p xai-grok-pager-bin -e normal" (1009 crates in this graph, -# 1245 vendored): +# 1246 vendored): # - pdf_oxide IS shipped (pulled with its "rendering" feature), but it is # "MIT OR Apache-2.0" and carries no GPL code. Its src/decoders/jbig2.rs is # a pass-through stub ("no actual decoding performed"); its sole GPL-3.0 @@ -34,8 +34,16 @@ # - MPL-2.0 below covers the 8 statically linked MPL-2.0 crates: cssparser, # cssparser-macros, dtoa-short, nucleo, nucleo-matcher, option-ext, # selectors and smartstring (MPL-2.0+). -# - colored_json (EPL-2.0) is NOT in this binary's dependency graph; it is -# reachable only from xai-ratatui-inline, which this package does not build. +# - colored_json (EPL-2.0) is NOT in this binary's dependency graph. Its only +# reference is xai-ratatui-inline, which IS built and linked here (via +# xai-grok-pager, -render and -minimal), but names colored_json in its +# [dev-dependencies], so it is never part of a non-test build. +# - onig_sys bundles the Oniguruma C library (BSD-2-Clause), so the src.rpm +# now ships 177 files under vendor/onig_sys-69.9.3/oniguruma/ that were +# absent at 1.0.32. They are NOT compiled: %%build sets +# RUSTONIG_SYSTEM_LIBONIG=1 to link the system libonig instead, and the +# debugsource package contains only vendor/onig-6.5.2/src/*.rs and not one +# oniguruma C file. BSD-2-Clause therefore stays out of License. # - GPL-2.0 WITH Linking-exception and LGPL-2.1-or-later cover the libgit2 C # sources that libgit2-sys bundles and links statically: libgit2 itself is # GPL-2.0 with the linking exception, and its deps/xdiff (LibXDiff) is @@ -57,6 +65,7 @@ BuildRequires: pkgconfig BuildRequires: ripgrep BuildRequires: zstd +BuildRequires: pkgconfig(oniguruma) >= 6.9.3 BuildRequires: pkgconfig(protobuf) BuildRequires: pkgconfig(protobuf-lite) # grok shells out to ripgrep at runtime for its in-tree code search; the build @@ -92,6 +101,10 @@ %global build_rustflags %{build_rustflags} -C debuginfo=1 %limit_build -m 8000 export PROTOC=%{_bindir}/protoc +# syntect's regex engine is onig_sys, which otherwise compiles the oniguruma C +# sources it bundles; link the system library instead (pre-generated bindings, +# so no bindgen is pulled in). +export RUSTONIG_SYSTEM_LIBONIG=1 # The xai-grok-tools and xai-grok-shell build scripts embed a ripgrep binary # and otherwise download it from GitHub at build time. Point both at the # system ripgrep so the build stays offline (see BuildRequires: ripgrep). ++++++ _service ++++++ --- /var/tmp/diff_new_pack.v90kQe/_old 2026-09-22 20:32:27.650987669 +0200 +++ /var/tmp/diff_new_pack.v90kQe/_new 2026-09-22 20:32:27.655987878 +0200 @@ -12,8 +12,8 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/xai-org/grok-build.git</param> <param name="scm">git</param> - <param name="revision">482711333c7195dc16a272777f86086d615e2afb</param> - <param name="versionformat">1.0.32+git%cd.%h</param> + <param name="revision">4247f661689354b831191f11eeeac8424993fe3d</param> + <param name="versionformat">1.0.38+git%cd.%h</param> <param name="changesgenerate">disable</param> </service> <service name="tar" mode="manual"/> ++++++ grok-build-1.0.32+git20260915.4827113.tar.zst -> grok-build-1.0.38+git20260919.4247f66.tar.zst ++++++ /work/SRC/openSUSE:Factory/grok-build/grok-build-1.0.32+git20260915.4827113.tar.zst /work/SRC/openSUSE:Factory/.grok-build.new.383539/grok-build-1.0.38+git20260919.4247f66.tar.zst differ: char 7, line 1 ++++++ grok-build.obsinfo ++++++ --- /var/tmp/diff_new_pack.v90kQe/_old 2026-09-22 20:32:27.713990310 +0200 +++ /var/tmp/diff_new_pack.v90kQe/_new 2026-09-22 20:32:27.717990478 +0200 @@ -1,5 +1,5 @@ name: grok-build -version: 1.0.32+git20260915.4827113 -mtime: 1789478255 -commit: 482711333c7195dc16a272777f86086d615e2afb +version: 1.0.38+git20260919.4247f66 +mtime: 1789837676 +commit: 4247f661689354b831191f11eeeac8424993fe3d ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/grok-build/vendor.tar.zst /work/SRC/openSUSE:Factory/.grok-build.new.383539/vendor.tar.zst differ: char 7, line 1
