Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package picsart-gen-ai for openSUSE:Factory 
checked in at 2026-10-05 12:55:00
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/picsart-gen-ai (Old)
 and      /work/SRC/openSUSE:Factory/.picsart-gen-ai.new.3698736 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "picsart-gen-ai"

Mon Oct  5 12:55:00 2026 rev:9 rq:1382265 version:2.79.1

Changes:
--------
--- /work/SRC/openSUSE:Factory/picsart-gen-ai/picsart-gen-ai.changes    
2026-09-18 22:05:32.185073516 +0200
+++ 
/work/SRC/openSUSE:Factory/.picsart-gen-ai.new.3698736/picsart-gen-ai.changes   
    2026-10-05 12:56:37.757270513 +0200
@@ -1,0 +2,16 @@
+Sat Oct  3 19:17:20 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to version 2.79.1:
+  * No user-visible change: 2.79.1 republishes the 2.78.0
+    artifact. cli.js, bin/gen-ai.mjs, README.md, banner.svg and
+    skills/ are byte-identical to 2.78.0; only the version field
+    in package.json differs
+- Re-vendor: the package set is unchanged, only ansi-regex moves
+  6.3.0 -> 6.4.0, and the licence set of the 71 vendored packages
+  still holds
+- Fix release discovery now that upstream publishes only to npm:
+  URL points at the npm package page and Source2 at the main
+  branch, the only ref still carrying LICENSE since the repo
+  stopped tagging at v2.77.0
+
+-------------------------------------------------------------------

Old:
----
  gen-ai-2.78.0.tgz

New:
----
  gen-ai-2.79.1.tgz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ picsart-gen-ai.spec ++++++
--- /var/tmp/diff_new_pack.DgWZQS/_old  2026-10-05 12:56:38.750310860 +0200
+++ /var/tmp/diff_new_pack.DgWZQS/_new  2026-10-05 12:56:38.751310900 +0200
@@ -16,9 +16,10 @@
 #
 
 
-# Every runtime dependency is vendored in Source1, so the nodejs dependency
-# generator must not turn package.json's "dependencies" into npm(...) Requires
-# that nothing in the distribution provides.
+# Every runtime dependency is vendored (the node_modules service's sources, see
+# the %%include at the bottom), so the nodejs dependency generator must not 
turn
+# package.json's "dependencies" into npm(...) Requires that nothing in the
+# distribution provides.
 %global __nodejs_provides %{nil}
 %global __nodejs_requires %{nil}
 # The RPM is named after the service it talks to, but upstream's npm package,
@@ -28,22 +29,29 @@
 %define npm_name gen-ai
 %define npm_scope @picsart
 Name:           picsart-gen-ai
-Version:        2.78.0
+Version:        2.79.1
 Release:        0
 Summary:        Picsart AI CLI for generating images, video and audio
 # Legal-Review-Notice: the CLI itself is MIT. The published cli.js is a bundle
 # that additionally inlines @picsart/ai-sdk (MIT) and the unpublished
 # @pulse/core and @pulse/server, which upstream distributes only inside this
-# MIT-licensed artifact. Source1 vendors the 71 runtime dependencies the bundle
-# imports; their licence fields were enumerated on this re-vendor and are MIT
-# (63), ISC (5), Apache-2.0 (1), BlueOak-1.0.0 (1, the glob/minimatch family)
-# and one "MIT OR CC0-1.0" satisfied by MIT. No copyleft is present.
+# MIT-licensed artifact. The vendored sources below vendor the 71 runtime
+# dependencies the bundle imports; their licence fields were enumerated on this
+# re-vendor and are MIT (63), ISC (5), Apache-2.0 (1), BlueOak-1.0.0 (1, the
+# glob/minimatch family) and one "MIT OR CC0-1.0" satisfied by MIT. No copyleft
+# is present.
 License:        MIT AND ISC AND Apache-2.0 AND BlueOak-1.0.0
-URL:            https://github.com/PicsArt/gen-ai-cli
+# Releases are published to npm only: the git repo carries no tags past v2.77.0
+# and was last pushed before 2.78.0 was published, so the npm registry — not
+# the repo — is where a release of this package can be discovered.
+URL:            https://www.npmjs.com/package/@picsart/gen-ai
 Source0:        
https://registry.npmjs.org/%{npm_scope}/%{npm_name}/-/%{npm_name}-%{version}.tgz
-# The npm artifact ships no licence file. 2.78.0 has no git tag (newest is
-# v2.77.0), so this is LICENSE from that tag — a v%%{version} URL 404s.
-Source2:        
https://raw.githubusercontent.com/PicsArt/gen-ai-cli/v2.77.0/LICENSE
+# The npm artifact ships no licence file, so it has to come from the repo —
+# which is also why this cannot follow %%{version}: there is no v%%{version} 
tag
+# to point at. main is the only ref that carries LICENSE. The file is committed
+# here, so a change upstream does not silently alter what is built; refresh it
+# if the repo's licence ever changes.
+Source2:        
https://raw.githubusercontent.com/PicsArt/gen-ai-cli/main/LICENSE
 # The upstream git tree cannot be built downstream: its tsup config inlines
 # @pulse/core and @pulse/server, which live in a private registry and are not
 # publishable to npm, so only the published bundle is buildable. Its runtime

++++++ gen-ai-2.78.0.tgz -> gen-ai-2.79.1.tgz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/package/package.json new/package/package.json
--- old/package/package.json    1985-10-26 09:15:00.000000000 +0100
+++ new/package/package.json    1985-10-26 09:15:00.000000000 +0100
@@ -1,6 +1,6 @@
 {
   "name": "@picsart/gen-ai",
-  "version": "2.78.0",
+  "version": "2.79.1",
   "type": "module",
   "description": "Picsart AI CLI — generate images, video, and audio from the 
terminal",
   "license": "MIT",

++++++ node_modules.obscpio ++++++
Binary files old/ansi-regex-6.3.0.tgz and new/ansi-regex-6.3.0.tgz differ
Binary files old/ansi-regex-6.4.0.tgz and new/ansi-regex-6.4.0.tgz differ

++++++ node_modules.spec.inc ++++++
--- /var/tmp/diff_new_pack.DgWZQS/_old  2026-10-05 12:56:39.049323009 +0200
+++ /var/tmp/diff_new_pack.DgWZQS/_new  2026-10-05 12:56:39.052323130 +0200
@@ -10,7 +10,7 @@
 Source10009:         
https://registry.npmjs.org/@oclif/core/-/core-4.14.0.tgz#/@oclif-core-4.14.0.tgz
 Source10010:         
https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz#/ansi-escapes-4.3.2.tgz
 Source10011:         
https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz#/ansi-regex-5.0.1.tgz
-Source10012:         
https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.3.0.tgz#/ansi-regex-6.3.0.tgz
+Source10012:         
https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.4.0.tgz#/ansi-regex-6.4.0.tgz
 Source10013:         
https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz#/ansi-styles-4.3.0.tgz
 Source10014:         
https://registry.npmjs.org/ansis/-/ansis-3.17.0.tgz#/ansis-3.17.0.tgz
 Source10015:         
https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz#/balanced-match-4.0.4.tgz

++++++ node_modules.sums ++++++
--- /var/tmp/diff_new_pack.DgWZQS/_old  2026-10-05 12:56:39.083324390 +0200
+++ /var/tmp/diff_new_pack.DgWZQS/_new  2026-10-05 12:56:39.088324593 +0200
@@ -10,7 +10,7 @@
 SHA512 (@oclif-core-4.14.0.tgz) = 
402248668549c55ee3cb081501496c43097776bdd26b6d647e2e73f4aad8a256dec56254b45484b4ca0d8815a88c3d39998c9c2e7079d20a7f57194675a38244
 SHA512 (ansi-escapes-4.3.2.tgz) = 
80a5e3e402eb29640bb181bd8e54d1991ff12a5bb11d5f99f501303488027ccd7fbb03cc0aecd55678799b04ddf8eb8165cc1220c6eab2c356466d65139d5069
 SHA512 (ansi-regex-5.0.1.tgz) = 
aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15
-SHA512 (ansi-regex-6.3.0.tgz) = 
5a90df2fb34eea3eed1fcf080c13557542710e1f67982b5e0155bd76c7a9f38e977701789da0812befed18b5f728981ca603115c21654ccda1286a0af45b1dad
+SHA512 (ansi-regex-6.4.0.tgz) = 
2b34d5936b425801ed62bbefbda3fc6c9289ab6a558a784b70611076d2c860f6e634637261ef10c0d693518429d89effbc8b142ade500aa01f5246321bd0e43b
 SHA512 (ansi-styles-4.3.0.tgz) = 
cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212
 SHA512 (ansis-3.17.0.tgz) = 
d2a594825b7d244a8b16bdf0d48d696eb0a19f582b85a880476a1c5f53cffdf9519b182dc13ccf1451677c8943e9a30e2d06604ae091962743ef496fc7cca1ce
 SHA512 (balanced-match-4.0.4.tgz) = 
04bae011c453c17da8ea01b118e08dc8cbc64a9df96287ee633c3d87520c4d198aaadb40659554ebb6dd6fd3ebdaf50703cfa3de2dad25f8cee82ebee26c864c

++++++ package-lock.json ++++++
--- /var/tmp/diff_new_pack.DgWZQS/_old  2026-10-05 12:56:39.111325528 +0200
+++ /var/tmp/diff_new_pack.DgWZQS/_new  2026-10-05 12:56:39.114325650 +0200
@@ -1,12 +1,12 @@
 {
   "name": "@picsart/gen-ai",
-  "version": "2.78.0",
+  "version": "2.79.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@picsart/gen-ai",
-      "version": "2.78.0",
+      "version": "2.79.1",
       "license": "MIT",
       "dependencies": {
         "@inquirer/checkbox": "^5.1.2",
@@ -243,9 +243,9 @@
       }
     },
     "node_modules/ansi-regex": {
-      "version": "6.3.0",
-      "resolved": 
"https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.3.0.tgz";,
-      "integrity": 
"sha512-WpDfL7NO6j7tH88IDBNVdUJxDh9nmCteAVW9dsep846XdwF4naCBK+/tGLX3KJgcpgMRXCFlTM2hKGoK9FsdrQ==",
+      "version": "6.4.0",
+      "resolved": 
"https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.4.0.tgz";,
+      "integrity": 
"sha512-KzTVk2tCWAHtYrvvvaP8bJKJq2pVinhLcGEQdtLIYPbmNGNyYe8QwNaTUYQp2J7/vIsUKt5QCqAfUkYyG9DkOw==",
       "license": "MIT",
       "engines": {
         "node": ">=12"

Reply via email to