Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package zizmor for openSUSE:Factory checked in at 2026-10-15 13:05:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/zizmor (Old) and /work/SRC/openSUSE:Factory/.zizmor.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "zizmor" Thu Oct 15 13:05:15 2026 rev:40 rq:1384921 version:1.31.0 Changes: -------- --- /work/SRC/openSUSE:Factory/zizmor/zizmor.changes 2026-09-17 16:59:55.150372060 +0200 +++ /work/SRC/openSUSE:Factory/.zizmor.new.3698736/zizmor.changes 2026-10-15 13:05:19.762276201 +0200 @@ -1,0 +2,59 @@ +Thu Oct 15 04:53:43 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.31.0: + * Enhancements + - The typosquat-uses audit now supports pre-commit config + inputs (#2437) + - The self-hosted-runner audit is now significantly more + precise (#2350) + - The dangerous-triggers audit now considers the issue_comment + trigger fundamentally dangerous (#2396) + - zizmor is now aware of the image_version workflow trigger + (#2397) + - The dangerous-triggers audit now produces more precise + finding/diagnostic spans (#2402) + - The cache-poisoning audit is now aware of pnpm/setup (#2409) + - The unpinned-images audit now produces more precise findings + when the user's workflow contains an indirect matrix (#2395) + - The cache-poisoning audit is now aware of GitHub's new + cache-mode: setting, and will skip any findings that would + occur when a job has an effective cache-mode: none (#2418) + - The cache-poisoning audit now flags usages of cache-mode: + write and cache-mode: write-only with dangerous triggers, + i.e. triggers that give an attacker privileged code execution + (#2426) + - zizmor now uses a tree-sitter grammar for PowerShell that's + more precise/capable of capturing more non-trivial PowerShell + expressions (#2444) + * Bug Fixes + - Fixed a class of false positives/imprecisions in + adhoc-packages that caused some pnpm and yarn invocations to + be misclassified as package installations (#2386) + - Fixed a bug where zizmor would fail to honor Git submodules + and worktrees when discovering configuration files relative + to a repo root (#2390) + - Fixed a bug where the ref-version-mismatch audit would crash + on unusually placed version comments (#2394) + - Fixed a bug where zizmor would fail to handle some pre-commit + inputs that use prek extensions to the language_version and + default_language_version keys (#2413) + - Fixed a bug where the use-trusted-publishing audit would fail + to detect certain true-positive patterns inside of PowerShell + blocks (#2444) + * Dependencies + - chore(deps): bump the cargo group with 2 updates (#2440) + - chore(deps): bump the github-actions group across 1 directory + with 2 updates (#2442) + - chore(deps): bump the cargo group with 2 updates (#2434) + - chore(deps): bump the cargo group with 3 updates (#2415) + - chore(deps): bump the github-actions group with 2 updates + (#2416) + - chore(deps): bump the cargo group with 3 updates (#2399) + - chore(deps): bump the github-actions group with 3 updates + (#2400) + - chore(deps): bump the cargo group across 1 directory with 7 + updates (#2369) + - chore(deps): bump the github-actions group with 2 updates + (#2370) + +------------------------------------------------------------------- Old: ---- zizmor-1.30.1.obscpio New: ---- zizmor-1.31.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zizmor.spec ++++++ --- /var/tmp/diff_new_pack.Vlu6ne/_old 2026-10-15 13:05:21.508348826 +0200 +++ /var/tmp/diff_new_pack.Vlu6ne/_new 2026-10-15 13:05:21.509348867 +0200 @@ -17,7 +17,7 @@ Name: zizmor -Version: 1.30.1 +Version: 1.31.0 Release: 0 Summary: A static analysis tool for GitHub Actions License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Vlu6ne/_old 2026-10-15 13:05:21.565351197 +0200 +++ /var/tmp/diff_new_pack.Vlu6ne/_new 2026-10-15 13:05:21.569351363 +0200 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="exclude">.git</param> <param name="versionformat">@PARENT_TAG@</param> - <param name="revision">refs/tags/v1.30.1</param> + <param name="revision">refs/tags/v1.31.0</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Vlu6ne/_old 2026-10-15 13:05:21.593352361 +0200 +++ /var/tmp/diff_new_pack.Vlu6ne/_new 2026-10-15 13:05:21.599352611 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/woodruffw/zizmor</param> <param name="changesrevision">597db4d7dc5730bdc1370197bf5678a5ca028abb</param></service><service name="tar_scm"> <param name="url">https://github.com/zizmorcore/zizmor.git</param> - <param name="changesrevision">99a054ed9283c90abdd2d5b9fb5101d27dde9783</param></service></servicedata> + <param name="changesrevision">3b1f99d843832def9062cddb8a5d0b737e44dfe1</param></service></servicedata> (No newline at EOF) ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/zizmor/vendor.tar.zst /work/SRC/openSUSE:Factory/.zizmor.new.3698736/vendor.tar.zst differ: char 7, line 1 ++++++ zizmor-1.30.1.obscpio -> zizmor-1.31.0.obscpio ++++++ ++++ 14710 lines of diff (skipped) ++++++ zizmor.obsinfo ++++++ --- /var/tmp/diff_new_pack.Vlu6ne/_old 2026-10-15 13:05:22.103373575 +0200 +++ /var/tmp/diff_new_pack.Vlu6ne/_new 2026-10-15 13:05:22.109373824 +0200 @@ -1,5 +1,5 @@ name: zizmor -version: 1.30.1 -mtime: 1788930776 -commit: 99a054ed9283c90abdd2d5b9fb5101d27dde9783 +version: 1.31.0 +mtime: 1792035669 +commit: 3b1f99d843832def9062cddb8a5d0b737e44dfe1
