Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package melange for openSUSE:Factory checked 
in at 2026-10-06 19:17:57
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/melange (Old)
 and      /work/SRC/openSUSE:Factory/.melange.new.3698736 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "melange"

Tue Oct  6 19:17:57 2026 rev:182 rq:1382664 version:0.61.4

Changes:
--------
--- /work/SRC/openSUSE:Factory/melange/melange.changes  2026-10-05 
15:46:44.525352571 +0200
+++ /work/SRC/openSUSE:Factory/.melange.new.3698736/melange.changes     
2026-10-06 19:18:02.544595215 +0200
@@ -1,0 +2,9 @@
+Tue Oct 06 04:45:42 UTC 2026 - Johannes Kastl 
<[email protected]>
+
+- Update to version 0.61.4:
+  * sca: depend on libcrypto.so.4 for go-msft >= 1.27.1.2-r1
+    binaries (#2681)
+  * build(deps): bump chainguard.dev/apko to v1.4.8 (#2684)
+  * build(deps): bump the gomod group with 4 updates (#2682)
+
+-------------------------------------------------------------------

Old:
----
  melange-0.61.3.obscpio

New:
----
  melange-0.61.4.obscpio

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ melange.spec ++++++
--- /var/tmp/diff_new_pack.1qC4nm/_old  2026-10-06 19:18:04.882693380 +0200
+++ /var/tmp/diff_new_pack.1qC4nm/_new  2026-10-06 19:18:04.883693422 +0200
@@ -17,7 +17,7 @@
 
 
 Name:           melange
-Version:        0.61.3
+Version:        0.61.4
 Release:        0
 Summary:        Build APKs from source code
 License:        Apache-2.0

++++++ _service ++++++
--- /var/tmp/diff_new_pack.1qC4nm/_old  2026-10-06 19:18:04.918694892 +0200
+++ /var/tmp/diff_new_pack.1qC4nm/_new  2026-10-06 19:18:04.921695018 +0200
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/chainguard-dev/melange.git</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">refs/tags/v0.61.3</param>
+    <param name="revision">refs/tags/v0.61.4</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.1qC4nm/_old  2026-10-06 19:18:04.944695983 +0200
+++ /var/tmp/diff_new_pack.1qC4nm/_new  2026-10-06 19:18:04.946696067 +0200
@@ -3,6 +3,6 @@
                 <param 
name="url">https://github.com/chainguard-dev/melange</param>
               <param 
name="changesrevision">3f6115b820985d70ca3c93cdf8519c1b3b4cfe81</param></service><service
 name="tar_scm">
                 <param 
name="url">https://github.com/chainguard-dev/melange.git</param>
-              <param 
name="changesrevision">3f6d1d90c151ada269a9d7cc12584d1db35a0187</param></service></servicedata>
+              <param 
name="changesrevision">036337ffd1d1bab54fe90e2ea943385f4a72f4d3</param></service></servicedata>
 (No newline at EOF)
 

++++++ melange-0.61.3.obscpio -> melange-0.61.4.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/melange-0.61.3/go.mod new/melange-0.61.4/go.mod
--- old/melange-0.61.3/go.mod   2026-10-03 17:24:15.000000000 +0200
+++ new/melange-0.61.4/go.mod   2026-10-06 02:51:28.000000000 +0200
@@ -3,10 +3,10 @@
 go 1.27.0
 
 require (
-       chainguard.dev/apko v1.4.6
+       chainguard.dev/apko v1.4.8
        github.com/chainguard-dev/clog v1.8.1
        github.com/chainguard-dev/go-pkgconfig 
v0.0.0-20260625083649-3332107431aa
-       github.com/chainguard-dev/yam v0.2.65
+       github.com/chainguard-dev/yam v0.2.68
        github.com/charmbracelet/log v1.0.0
        github.com/docker/cli v29.8.2+incompatible
        github.com/docker/docker v28.5.2+incompatible
@@ -37,9 +37,9 @@
        github.com/ulikunitz/xz v0.5.17
        github.com/yookoala/realpath v1.0.0
        github.com/zealic/xignore v0.3.3
-       go.opentelemetry.io/otel v1.46.0
-       go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.46.0
-       go.opentelemetry.io/otel/sdk v1.46.0
+       go.opentelemetry.io/otel v1.47.0
+       go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.47.0
+       go.opentelemetry.io/otel/sdk v1.47.0
        go.yaml.in/yaml/v2 v2.4.4
        golang.org/x/crypto v0.57.0
        golang.org/x/exp v0.0.0-20260908205506-85c1c2202aba
@@ -58,7 +58,7 @@
 
 require (
        chainguard.dev/go-grpc-kit v0.20.0 // indirect
-       chainguard.dev/sdk v0.1.305 // indirect
+       chainguard.dev/sdk v0.1.321 // indirect
        cloud.google.com/go/auth v0.24.0 // indirect
        cloud.google.com/go/auth/oauth2adapt v0.3.0 // indirect
        cloud.google.com/go/compute/metadata v0.10.0 // indirect
@@ -156,8 +156,9 @@
        go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0 // indirect
        go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0 
// indirect
        go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0 
// indirect
-       go.opentelemetry.io/otel/metric v1.46.0 // indirect
-       go.opentelemetry.io/otel/trace v1.46.0 // indirect
+       go.opentelemetry.io/otel/log v1.47.0 // indirect
+       go.opentelemetry.io/otel/metric v1.47.0 // indirect
+       go.opentelemetry.io/otel/trace v1.47.0 // indirect
        go.opentelemetry.io/proto/otlp v1.11.0 // indirect
        go.step.sm/crypto v0.91.0 // indirect
        go.yaml.in/yaml/v3 v3.0.5 // indirect
@@ -165,7 +166,7 @@
        golang.org/x/net v0.59.0 // indirect
        golang.org/x/oauth2 v0.37.0 // indirect
        golang.org/x/tools v0.50.0 // indirect
-       google.golang.org/api v0.299.0 // indirect
+       google.golang.org/api v0.300.0 // indirect
        google.golang.org/genproto/googleapis/api 
v0.0.0-20260928230214-8a89bd6388cc // indirect
        google.golang.org/genproto/googleapis/rpc 
v0.0.0-20260928230214-8a89bd6388cc // indirect
        google.golang.org/grpc v1.84.0 // indirect
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/melange-0.61.3/go.sum new/melange-0.61.4/go.sum
--- old/melange-0.61.3/go.sum   2026-10-03 17:24:15.000000000 +0200
+++ new/melange-0.61.4/go.sum   2026-10-06 02:51:28.000000000 +0200
@@ -1,9 +1,9 @@
-chainguard.dev/apko v1.4.6 h1:uNXpseZenHFcgs/hUWRBCNfzeXViRtwOXz7q6+Fqo1U=
-chainguard.dev/apko v1.4.6/go.mod 
h1:cajpmMjyjvEFSTKa6GZENyPnD4bwSi1+tpn6iM+nYjQ=
+chainguard.dev/apko v1.4.8 h1:HwzpMmrGlDGrMu+BnmjFQVdUROQ5GhI9KSusiSLDVT4=
+chainguard.dev/apko v1.4.8/go.mod 
h1:TC+5bcPthlXQoEG8dCQ0cC57mwm9N6MqWVGr+wLJLlI=
 chainguard.dev/go-grpc-kit v0.20.0 
h1:MDwZtTlUlMSMEPcoi9m8tnu4g+M88T1toUZ3Th/+0Gc=
 chainguard.dev/go-grpc-kit v0.20.0/go.mod 
h1:ocuwyRX9tqRRvJkS3/ZkDYGMnl+6FLC4bvF0cm6DGsk=
-chainguard.dev/sdk v0.1.305 h1:8QG80ym4ShC+ma0jt4k+Wbm9B3m/96SedO8hI5pFSjY=
-chainguard.dev/sdk v0.1.305/go.mod 
h1:fDIxqEbOn4iyGhS1ggkdcbrePUTBCJljMzH2XlTWwS4=
+chainguard.dev/sdk v0.1.321 h1:+2dAyMjQ8ptWhFGw0BISWA+cllgXQ4/LTe3l9DlL2Ns=
+chainguard.dev/sdk v0.1.321/go.mod 
h1:fDIxqEbOn4iyGhS1ggkdcbrePUTBCJljMzH2XlTWwS4=
 cloud.google.com/go v0.26.0/go.mod 
h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
 cloud.google.com/go/auth v0.24.0 
h1:UYMbF8otPZnLAkNJ5/LYQYOq0ARcJS1P4JqTeMKbCYU=
 cloud.google.com/go/auth v0.24.0/go.mod 
h1:IFG/AMA1VWfuTrdbieEsB2GcpJyJV/phGAvogkOoPR4=
@@ -44,8 +44,8 @@
 github.com/chainguard-dev/clog v1.8.1/go.mod 
h1:5MQOZi+Iu7fV7GcJG8ag8rCB5elEOpqRMKEASgnGVdo=
 github.com/chainguard-dev/go-pkgconfig v0.0.0-20260625083649-3332107431aa 
h1:v5WawPijEIO9qD7tDH+RWAxLqX7stsi0/axXlGsXRM4=
 github.com/chainguard-dev/go-pkgconfig 
v0.0.0-20260625083649-3332107431aa/go.mod 
h1:KLjjmgdeeSz1A25ua5skKQIsqwaQl4Wlejc2w8xhwmM=
-github.com/chainguard-dev/yam v0.2.65 
h1:Mv+WSP+qH9CFMMljLe8mHZxQg+SzM5WBni+uBmmTRf4=
-github.com/chainguard-dev/yam v0.2.65/go.mod 
h1:Sbt8pVO8DbHoVly44oF5gg03NRxl9AhEImOkqGyoQCs=
+github.com/chainguard-dev/yam v0.2.68 
h1:sl87H79cmtlA1wrGnudk8XLrLQ8mg95z2+ck/sdhp4Y=
+github.com/chainguard-dev/yam v0.2.68/go.mod 
h1:k252QbClUkNnmdlrFpAlBoSz+C7ZV0GJX6gIIFfHp3w=
 github.com/charmbracelet/colorprofile v0.4.3 
h1:QPa1IWkYI+AOB+fE+mg/5/4HRMZcaXex9t5KX76i20Q=
 github.com/charmbracelet/colorprofile v0.4.3/go.mod 
h1:/zT4BhpD5aGFpqQQqw7a+VtHCzu+zrQtt1zhMt9mR4Q=
 github.com/charmbracelet/lipgloss v1.1.0 
h1:vYXsiLHVkK7fp74RkV7b2kq9+zDLoEU4MZoFqR/noCY=
@@ -359,24 +359,26 @@
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 
v0.71.0/go.mod h1:dylvB+ZiiwMvsDij9O84Uy7SijLgHMX4mbkncds+4Sw=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0 
h1:3g7B90UzBltIDKq1/5mrTGxTnOFDV0ICOhLoxiZ8jlg=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0/go.mod 
h1:Ef8SuTh59BT7+ofpDxN9z+yOlc4t2GjLmKDgYNJL/NU=
-go.opentelemetry.io/otel v1.46.0 
h1:FHt5/CDyVxi/8IM1CH7VE/rRgq3kLHa2mSTVMO8AWyc=
-go.opentelemetry.io/otel v1.46.0/go.mod 
h1:Gj3SEScelsNC45tp4nSxRYlS+f5iez7W8XPMCt905kE=
+go.opentelemetry.io/otel v1.47.0 
h1:j7ALJ/zgkS7Z6aeJW09p8VC9804bC+PpeTfCD4XPnOM=
+go.opentelemetry.io/otel v1.47.0/go.mod 
h1:8wS9O2qfXrYrzp6hIF/HOYJJf/wIhFPhR2xLuP+iXQU=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0 
h1:OFnwLJr+pF3iHrlGSzbxyuo6/6HyBlnlN1CWEJmBVcw=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0/go.mod 
h1:716wFneO0ov19A2beH5hjfh9AK5z/VWNAtDijp1Y0/g=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0 
h1:w53CDeOA/Kurp7yRsegSr6pbbr759dOvJ+yNmWM6Hxs=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0/go.mod 
h1:BOmGMCbAtvcJiSJ+hLuhgPLdDbimnraSl8irz3iY8sY=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0 
h1:QBajQ2SrwQijzHyZbQlPsuIzpl/ll8DY6wPWsajeGcI=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0/go.mod 
h1:08ZQLjrPLQ6R4kAXvuOvODEer5Yh4CoFvll5qB2BCI8=
-go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.46.0 
h1:KdRxPiAoMptR3vfWzvjjvutTsSiwbC2uG0496rzZNfo=
-go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.46.0/go.mod 
h1:K/qSA+3G7Eovxi4K09wzrAgkWRnosS0DAOZeEpve7sM=
-go.opentelemetry.io/otel/metric v1.46.0 
h1:yBnkXvgV7AXFILZc5K6IZe/CBFF3OS7BJ8ov6/lj0K8=
-go.opentelemetry.io/otel/metric v1.46.0/go.mod 
h1:iPmdWqifKUdzziPkvvzIJXITl56fQx2mGM/DHLB3/2o=
-go.opentelemetry.io/otel/sdk v1.46.0 
h1:h5CNQQjEbuQXY/JfZtgt3i7HVFV3aHPO2OAwO2eTYPI=
-go.opentelemetry.io/otel/sdk v1.46.0/go.mod 
h1:GAERFXFt5SYCEB+YiKUbMBeza6UaDH7GmGOZEfh2gSM=
-go.opentelemetry.io/otel/sdk/metric v1.46.0 
h1:0piZ26EG4RBfebb2jhDH6ERCYHoVWduc3kLgPCwSnSE=
-go.opentelemetry.io/otel/sdk/metric v1.46.0/go.mod 
h1:I1PbKrdVc8Qu8HYVDNtqVIwLwjNrhsV/uFuxfwg8mO4=
-go.opentelemetry.io/otel/trace v1.46.0 
h1:OULy7ccdJnZtJ0UDYFOIGaCmiWzJ8Vi2G/Rsu60qs1c=
-go.opentelemetry.io/otel/trace v1.46.0/go.mod 
h1:J7GAXweO77XSFkB/rmAqk9D6ihszhFjLU+d9WuUxDLI=
+go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.47.0 
h1:N3YQCxjxQ/bMjyc3heladfRm9t9RTksGQH8z4w6yU/0=
+go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.47.0/go.mod 
h1:Mp8HOFqcaUyypCuGv9IhDdTHnJ56lSudSHMd+pVSCEA=
+go.opentelemetry.io/otel/log v1.47.0 
h1:cOTS1CcLbSQeZKanGJ+0JpF/+t4PELi3O3bbl2lqCcI=
+go.opentelemetry.io/otel/log v1.47.0/go.mod 
h1:9byitSQ5pLC6PpqwGXjqdMKya6ZTswHRZh2vvXT33nw=
+go.opentelemetry.io/otel/metric v1.47.0 
h1:4PptaldXx3Eat1XjMZ68pPJEs5wrhlemctZE9a3UdWY=
+go.opentelemetry.io/otel/metric v1.47.0/go.mod 
h1:ADGSXxRrXM6bjbvLo535EstVFlPpPYZm4LBKixjDHwU=
+go.opentelemetry.io/otel/sdk v1.47.0 
h1:zWXEr4j2lFefG87TU6Yg8a7ngfohIKFZHKp0Hf5hC6I=
+go.opentelemetry.io/otel/sdk v1.47.0/go.mod 
h1:VUc24kiOeoGsxG8G9ULx3fWKvB7jMhnGE8Oi607lgR0=
+go.opentelemetry.io/otel/sdk/metric v1.47.0 
h1:lfISg2j93VT6yqdk9OfUaZmw/GfcZqCCV3jdXtsPnKw=
+go.opentelemetry.io/otel/sdk/metric v1.47.0/go.mod 
h1:ypLp+mW1Nt2x+Szt3b5/i1syodyts49lMOwxpDI3VGw=
+go.opentelemetry.io/otel/trace v1.47.0 
h1:JOjX/Oci8K94QHddo+bbfya/Ai/nf6/dt9ZfrFNWSrM=
+go.opentelemetry.io/otel/trace v1.47.0/go.mod 
h1:jNaSLa2PZEYFG6fRjJABAu+bw4FS08uDmPg28lTghu0=
 go.opentelemetry.io/proto/otlp v1.11.0 
h1:5rrYs0Ykyj50sdU/JU0x8etU+LubXWb+gED6TbEdMIk=
 go.opentelemetry.io/proto/otlp v1.11.0/go.mod 
h1:SmVizdCOAm3XBtG1g1NnOdhW6jtddT72hLMhv8VwA8E=
 go.step.sm/crypto v0.91.0 h1:0mN0DwVOvUuh7VbyTnxABZuAkxwak/Grp8Y/b4YaZDU=
@@ -479,8 +481,8 @@
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod 
h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
 gonum.org/v1/gonum v0.17.0/go.mod 
h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
-google.golang.org/api v0.299.0 h1:b3K+ydSMd0kh6TQI6bJyApRQfqQX2MfSOaVkpM59mJw=
-google.golang.org/api v0.299.0/go.mod 
h1:zlR3GVA8b2R5nv5Ij9UWe37StVB3cxDD7DBFi4ZFsHw=
+google.golang.org/api v0.300.0 h1:2rvPV2bqnPuHOaF4gGOBiT1IIc6JVXYyHCkZeqdzjNk=
+google.golang.org/api v0.300.0/go.mod 
h1:tKfTSDfK+0FlOVl8N30VL5fU5TuaEkJjvdyTIKNwzPg=
 google.golang.org/appengine v1.1.0/go.mod 
h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.4.0/go.mod 
h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod 
h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/melange-0.61.3/pkg/sca/sca.go 
new/melange-0.61.4/pkg/sca/sca.go
--- old/melange-0.61.3/pkg/sca/sca.go   2026-10-03 17:24:15.000000000 +0200
+++ new/melange-0.61.4/pkg/sca/sca.go   2026-10-06 02:51:28.000000000 +0200
@@ -706,6 +706,7 @@
                        return nil
                }
                var dlopen, fipscrypto, fipsgeomys, geomysv1, geomysesv bool
+               libcrypto := "so:libcrypto.so.3"
                fipsexperiments := []string{"boringcrypto", "systemcrypto", 
"opensslcrypto"}
                geomysesvs := []string{"openssl+geomys", "geomys"}
                for _, setting := range buildinfo.Settings {
@@ -738,12 +739,14 @@
                        if setting.Key == "microsoft_systemcrypto" && 
setting.Value == "1" {
                                fipscrypto = true
                        }
+                       if setting.Key == "chainguard_go_package" && 
goSupportsLibcrypto4(setting.Value) {
+                               libcrypto = "so:libcrypto.so.4"
+                       }
                }
                // strong indication of go with openssl compiled binary, will 
dlopen the below at runtime
                if dlopen && fipscrypto {
                        generated.Runtime = append(generated.Runtime, 
"openssl-config-fipshardened")
-                       // likely need to move this to some virtual, because 
go-1.27 supports libcrypto.so.4 abi as well
-                       generated.Runtime = append(generated.Runtime, 
"so:libcrypto.so.3")
+                       generated.Runtime = append(generated.Runtime, libcrypto)
                }
                // geomysv1 by default or as a fallback
                if fipsgeomys && geomysesv && geomysv1 {
@@ -759,6 +762,52 @@
        return nil
 }
 
+// go-msft-1.27 gained the libcrypto.so.4 ABI in 1.27.1.2-r1; all later
+// streams have it.
+var (
+       goMsftLibcrypto4Stream = mustParseVersion("1.27")
+       minGoMsftLibcrypto4    = mustParseVersion("1.27.1.2-r1")
+)
+
+func mustParseVersion(v string) apk.Version {
+       ver, err := apk.ParseVersion(v)
+       if err != nil {
+               panic(err)
+       }
+       return ver
+}
+
+// goSupportsLibcrypto4 reports whether the go toolchain recorded in the
+// chainguard_go_package build setting (formatted as
+// <package-name>-<package-full-version>, e.g. go-msft-1.27-1.27.1.2-r1)
+// supports the libcrypto.so.4 ABI.
+func goSupportsLibcrypto4(goPackage string) bool {
+       rest, ok := strings.CutPrefix(goPackage, "go-msft-")
+       if !ok {
+               return false
+       }
+       // rest is <stream>-<full-version>, e.g. 1.27-1.27.1.2-r1
+       stream, fullVersion, ok := strings.Cut(rest, "-")
+       if !ok {
+               return false
+       }
+       streamVer, err := apk.ParseVersion(stream)
+       if err != nil {
+               return false
+       }
+       switch c := apk.CompareVersions(streamVer, goMsftLibcrypto4Stream); {
+       case c > 0:
+               return true
+       case c < 0:
+               return false
+       }
+       ver, err := apk.ParseVersion(fullVersion)
+       if err != nil {
+               return false
+       }
+       return apk.CompareVersions(ver, minGoMsftLibcrypto4) >= 0
+}
+
 // TODO(xnox): Note remove this feature flag, once successful
 // note this can generate depends on pc: files that do not exist in
 // wolfi, however package install tests will catch that in presubmit
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/melange-0.61.3/pkg/sca/sca_test.go 
new/melange-0.61.4/pkg/sca/sca_test.go
--- old/melange-0.61.3/pkg/sca/sca_test.go      2026-10-03 17:24:15.000000000 
+0200
+++ new/melange-0.61.4/pkg/sca/sca_test.go      2026-10-06 02:51:28.000000000 
+0200
@@ -539,3 +539,28 @@
                }
        }
 }
+
+func TestGoSupportsLibcrypto4(t *testing.T) {
+       for _, tc := range []struct {
+               goPackage string
+               want      bool
+       }{
+               {"", false},
+               {"go-1.27-1.27.1-r0", false},
+               {"go-geomys-1.27-1.27.1-r0", false},
+               {"go-msft-1.26-1.26.5.1-r3", false},
+               {"go-msft-1.27-1.27.1.1-r9", false},
+               {"go-msft-1.27-1.27.1.2-r0", false},
+               {"go-msft-1.27-1.27.1.2-r1", true},
+               {"go-msft-1.27-1.27.1.2-r2", true},
+               {"go-msft-1.27-1.27.1.3-r0", true},
+               {"go-msft-1.27-1.27.2.1-r0", true},
+               {"go-msft-1.28-1.28.0.1-r0", true},
+               {"go-msft-1.30-1.30.0.1-r0", true},
+               {"go-msft-garbage", false},
+       } {
+               if got := goSupportsLibcrypto4(tc.goPackage); got != tc.want {
+                       t.Errorf("goSupportsLibcrypto4(%q) = %v, want %v", 
tc.goPackage, got, tc.want)
+               }
+       }
+}

++++++ melange.obsinfo ++++++
--- /var/tmp/diff_new_pack.1qC4nm/_old  2026-10-06 19:18:06.208749055 +0200
+++ /var/tmp/diff_new_pack.1qC4nm/_new  2026-10-06 19:18:06.212749222 +0200
@@ -1,5 +1,5 @@
 name: melange
-version: 0.61.3
-mtime: 1791041055
-commit: 3f6d1d90c151ada269a9d7cc12584d1db35a0187
+version: 0.61.4
+mtime: 1791247888
+commit: 036337ffd1d1bab54fe90e2ea943385f4a72f4d3
 

++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/melange/vendor.tar.gz 
/work/SRC/openSUSE:Factory/.melange.new.3698736/vendor.tar.gz differ: char 13, 
line 1

Reply via email to