Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package jfrog-cli for openSUSE:Factory checked in at 2026-10-14 18:36:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/jfrog-cli (Old) and /work/SRC/openSUSE:Factory/.jfrog-cli.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "jfrog-cli" Wed Oct 14 18:36:02 2026 rev:56 rq:1384713 version:2.127.0 Changes: -------- --- /work/SRC/openSUSE:Factory/jfrog-cli/jfrog-cli.changes 2026-10-08 11:59:27.528158206 +0200 +++ /work/SRC/openSUSE:Factory/.jfrog-cli.new.3698736/jfrog-cli.changes 2026-10-14 18:36:55.440421085 +0200 @@ -1,0 +2,19 @@ +Wed Oct 14 04:48:13 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 2.127.0: + * New Features + - [jfrog-cli-security] Add jf xr status command to show + artifact download-block status #902 + * Bug Fixes + - [jfrog-cli-security] Fix regression after disable XSC scan + graph for all binary #913 + - [jfrog-cli-security] XRAY-159943 - jf ca anonymous access for + Maven, Gradle, Cargo, Npm #914 + - [jfrog-cli-security] CVE-2026-92892 - Potential command + execution on the host running JFrog CLI #918 + * Other Changes + - [jfrog-cli] RTECO-0000 - Run CLI e2e against the latest + master commit #3727 + - [jfrog-cli-security] Pass project to indexer #912 + +------------------------------------------------------------------- Old: ---- jfrog-cli-2.126.0.obscpio New: ---- jfrog-cli-2.127.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ jfrog-cli.spec ++++++ --- /var/tmp/diff_new_pack.fvAOHM/_old 2026-10-14 18:36:57.223496158 +0200 +++ /var/tmp/diff_new_pack.fvAOHM/_new 2026-10-14 18:36:57.225496243 +0200 @@ -19,7 +19,7 @@ %define executable_name jf Name: jfrog-cli -Version: 2.126.0 +Version: 2.127.0 Release: 0 Summary: A client that automates access to JFrog products License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.fvAOHM/_old 2026-10-14 18:36:57.259497674 +0200 +++ /var/tmp/diff_new_pack.fvAOHM/_new 2026-10-14 18:36:57.262497800 +0200 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="submodules">disable</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v2.126.0</param> + <param name="revision">refs/tags/v2.127.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.fvAOHM/_old 2026-10-14 18:36:57.283498685 +0200 +++ /var/tmp/diff_new_pack.fvAOHM/_new 2026-10-14 18:36:57.286498811 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/jfrog/jfrog-cli.git</param> - <param name="changesrevision">460c1b4e722ecd2c07dcde7cec9eab5c4051065d</param></service></servicedata> + <param name="changesrevision">fd6c2ebec14295fc8fbe1909b4bdad117eb8880c</param></service></servicedata> (No newline at EOF) ++++++ jfrog-cli-2.126.0.obscpio -> jfrog-cli-2.127.0.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/jfrog-cli-2.126.0/.jfrog-pipelines/pipelines.yml new/jfrog-cli-2.127.0/.jfrog-pipelines/pipelines.yml --- old/jfrog-cli-2.126.0/.jfrog-pipelines/pipelines.yml 2026-10-06 15:44:20.000000000 +0200 +++ new/jfrog-cli-2.127.0/.jfrog-pipelines/pipelines.yml 2026-10-13 15:55:16.000000000 +0200 @@ -1,11 +1,4 @@ resources: - - name: jfrog_cli - type: GitRepo - configuration: - path: jfrog/jfrog-cli - gitProvider: jfrog_cli_gh - branches: - include: master - name: cli_coreapps_env_details type: PropertyBag configuration: @@ -62,7 +55,7 @@ allowCustom: true JFROG_CLI_GITHUB_REF: default: "master" - description: "Git ref to checkout in jfrog/jfrog-cli (branch, tag, or SHA)." + description: "Git ref passed to Actions as jfrog_cli_ref. A branch name such as master is resolved to the current tip when the workflow is dispatched." allowCustom: true GITHUB_DISPATCH_TOKEN: default: "${int_github_dispatch_token}" @@ -273,7 +266,6 @@ - name: docker_jfrog_io_reader - name: jfrog_cli_gh inputResources: - - name: jfrog_cli - name: jfrog_oauth_token inputSteps: - name: setup_environment @@ -298,7 +290,7 @@ OAUTH_TOKEN="${res_jfrog_oauth_token_token}" JFROG_URL="${res_jfrog_oauth_token_url}" - CLI_REF="${JFROG_CLI_GITHUB_REF:-${res_jfrog_cli_commitSha}}" + CLI_REF="${JFROG_CLI_GITHUB_REF:-master}" if [[ -z "${OAUTH_TOKEN}" || "${OAUTH_TOKEN}" == "null" ]]; then fail_jf_cli_tests "OAuth token not found on jfrog_oauth_token resource" @@ -306,9 +298,6 @@ if [[ -z "${JFROG_URL}" ]]; then fail_jf_cli_tests "Platform URL not found on jfrog_oauth_token resource" fi - if [[ -z "${CLI_REF}" ]]; then - fail_jf_cli_tests "No CLI ref available; set JFROG_CLI_GITHUB_REF or ensure jfrog_cli resource exposes commit SHA" - fi GH_API_URL="${GITHUB_API_URL:-https://github.jfrog.info/api/v3}"; GH_WORKFLOWS_REPO="${GITHUB_WORKFLOWS_REPO:-JFROG/jfrog-cli-workflows}" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/jfrog-cli-2.126.0/build/npm/v2/package-lock.json new/jfrog-cli-2.127.0/build/npm/v2/package-lock.json --- old/jfrog-cli-2.126.0/build/npm/v2/package-lock.json 2026-10-06 15:44:20.000000000 +0200 +++ new/jfrog-cli-2.127.0/build/npm/v2/package-lock.json 2026-10-13 15:55:16.000000000 +0200 @@ -1,5 +1,5 @@ { "name": "jfrog-cli-v2", - "version": "2.126.0", + "version": "2.127.0", "lockfileVersion": 2 } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/jfrog-cli-2.126.0/build/npm/v2/package.json new/jfrog-cli-2.127.0/build/npm/v2/package.json --- old/jfrog-cli-2.126.0/build/npm/v2/package.json 2026-10-06 15:44:20.000000000 +0200 +++ new/jfrog-cli-2.127.0/build/npm/v2/package.json 2026-10-13 15:55:16.000000000 +0200 @@ -1,6 +1,6 @@ { "name": "jfrog-cli-v2", - "version": "2.126.0", + "version": "2.127.0", "description": "🐸 Command-line interface for JFrog Artifactory, Xray, Distribution, Pipelines and Mission Control 🐸", "homepage": "https://github.com/jfrog/jfrog-cli";, "preferGlobal": true, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/jfrog-cli-2.126.0/build/npm/v2-jf/package-lock.json new/jfrog-cli-2.127.0/build/npm/v2-jf/package-lock.json --- old/jfrog-cli-2.126.0/build/npm/v2-jf/package-lock.json 2026-10-06 15:44:20.000000000 +0200 +++ new/jfrog-cli-2.127.0/build/npm/v2-jf/package-lock.json 2026-10-13 15:55:16.000000000 +0200 @@ -1,5 +1,5 @@ { "name": "jfrog-cli-v2-jf", - "version": "2.126.0", + "version": "2.127.0", "lockfileVersion": 1 } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/jfrog-cli-2.126.0/build/npm/v2-jf/package.json new/jfrog-cli-2.127.0/build/npm/v2-jf/package.json --- old/jfrog-cli-2.126.0/build/npm/v2-jf/package.json 2026-10-06 15:44:20.000000000 +0200 +++ new/jfrog-cli-2.127.0/build/npm/v2-jf/package.json 2026-10-13 15:55:16.000000000 +0200 @@ -1,6 +1,6 @@ { "name": "jfrog-cli-v2-jf", - "version": "2.126.0", + "version": "2.127.0", "description": "🐸 Command-line interface for JFrog Artifactory, Xray, Distribution, Pipelines and Mission Control 🐸", "homepage": "https://github.com/jfrog/jfrog-cli";, "preferGlobal": true, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/jfrog-cli-2.126.0/go.mod new/jfrog-cli-2.127.0/go.mod --- old/jfrog-cli-2.126.0/go.mod 2026-10-06 15:44:20.000000000 +0200 +++ new/jfrog-cli-2.127.0/go.mod 2026-10-13 15:55:16.000000000 +0200 @@ -26,8 +26,8 @@ github.com/jfrog/jfrog-cli-core/v2 v2.60.1-0.20260925084932-b47892ded3a0 github.com/jfrog/jfrog-cli-evidence v0.11.1-0.20260824063609-79b735ec565e github.com/jfrog/jfrog-cli-platform-services v1.10.1-0.20261001090422-65bfb63e9be7 - github.com/jfrog/jfrog-cli-security v1.39.1 - github.com/jfrog/jfrog-client-go v1.55.1-0.20261005090941-0646d7b50f9a + github.com/jfrog/jfrog-cli-security v1.40.0 + github.com/jfrog/jfrog-client-go v1.55.1-0.20261013073510-6053434e9301 github.com/jszwec/csvutil v1.10.0 github.com/moby/moby/api v1.55.0 github.com/spf13/viper v1.21.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/jfrog-cli-2.126.0/go.sum new/jfrog-cli-2.127.0/go.sum --- old/jfrog-cli-2.126.0/go.sum 2026-10-06 15:44:20.000000000 +0200 +++ new/jfrog-cli-2.127.0/go.sum 2026-10-13 15:55:16.000000000 +0200 @@ -410,10 +410,10 @@ github.com/jfrog/jfrog-cli-evidence v0.11.1-0.20260824063609-79b735ec565e/go.mod h1:I83k7IH/cmMh00LyZOp13jctj8/pPKVHSAlu7GMJgwI= github.com/jfrog/jfrog-cli-platform-services v1.10.1-0.20261001090422-65bfb63e9be7 h1:qRAO4OPVFFcd1PBIvFKy9QCMz2UB5DeWSNZP/N+roIs= github.com/jfrog/jfrog-cli-platform-services v1.10.1-0.20261001090422-65bfb63e9be7/go.mod h1:aepFLIsqYJy1rFGkpY5CYwMRNViwjHtJcUaNzrWCCUo= -github.com/jfrog/jfrog-cli-security v1.39.1 h1:d3roHyrgoq/n7Lq34hdrDFCwON9UNoD9jahTEwkovNI= -github.com/jfrog/jfrog-cli-security v1.39.1/go.mod h1:8iL3tzf0l0wJLGdn4At1RSt/I0+CgbK7hj16xH2Ssio= -github.com/jfrog/jfrog-client-go v1.55.1-0.20261005090941-0646d7b50f9a h1:KXO+LsENOD75ZCVvZEf7/1B4z7zgsornGa6924fALzg= -github.com/jfrog/jfrog-client-go v1.55.1-0.20261005090941-0646d7b50f9a/go.mod h1:7B7eMRKuMhZ0rOdMItbJVpWjRUe1L//J3Jq+PgjiNxI= +github.com/jfrog/jfrog-cli-security v1.40.0 h1:LMh7Co4adI7FLl5/KtPOFlhDM8VoGp5NNVrIfAFq3Fs= +github.com/jfrog/jfrog-cli-security v1.40.0/go.mod h1:nYinJnDQ67hn1bNjytWpOasgkcT3E4N3gtJoeDVAYM0= +github.com/jfrog/jfrog-client-go v1.55.1-0.20261013073510-6053434e9301 h1:CJWhxJdhMNhMCUAIJEpid8AQqzWl7uMLXWymBrDSCb0= +github.com/jfrog/jfrog-client-go v1.55.1-0.20261013073510-6053434e9301/go.mod h1:7B7eMRKuMhZ0rOdMItbJVpWjRUe1L//J3Jq+PgjiNxI= github.com/jhump/protoreflect v1.17.0 h1:qOEr613fac2lOuTgWN4tPAtLL7fUSbuJL5X5XumQh94= github.com/jhump/protoreflect v1.17.0/go.mod h1:h9+vUUL38jiBzck8ck+6G/aeMX8Z4QUY/NiJPwPNi+8= github.com/jszwec/csvutil v1.10.0 h1:upMDUxhQKqZ5ZDCs/wy+8Kib8rZR8I8lOR34yJkdqhI= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/jfrog-cli-2.126.0/utils/cliutils/cli_consts.go new/jfrog-cli-2.127.0/utils/cliutils/cli_consts.go --- old/jfrog-cli-2.126.0/utils/cliutils/cli_consts.go 2026-10-06 15:44:20.000000000 +0200 +++ new/jfrog-cli-2.127.0/utils/cliutils/cli_consts.go 2026-10-13 15:55:16.000000000 +0200 @@ -4,7 +4,7 @@ const ( // General CLI constants - CliVersion = "2.126.0" + CliVersion = "2.127.0" ClientAgent = "jfrog-cli-go" // CLI base commands constants: ++++++ jfrog-cli.obsinfo ++++++ --- /var/tmp/diff_new_pack.fvAOHM/_old 2026-10-14 18:36:58.387545169 +0200 +++ /var/tmp/diff_new_pack.fvAOHM/_new 2026-10-14 18:36:58.392545379 +0200 @@ -1,5 +1,5 @@ name: jfrog-cli -version: 2.126.0 -mtime: 1791294260 -commit: 460c1b4e722ecd2c07dcde7cec9eab5c4051065d +version: 2.127.0 +mtime: 1791899716 +commit: fd6c2ebec14295fc8fbe1909b4bdad117eb8880c ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/jfrog-cli/vendor.tar.gz /work/SRC/openSUSE:Factory/.jfrog-cli.new.3698736/vendor.tar.gz differ: char 148, line 1
