Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package grok-build for openSUSE:Factory checked in at 2026-10-15 12:19:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/grok-build (Old) and /work/SRC/openSUSE:Factory/.grok-build.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grok-build" Thu Oct 15 12:19:23 2026 rev:15 rq:1384842 version:1.0.45+git20260929.2bdd1d6 Changes: -------- --- /work/SRC/openSUSE:Factory/grok-build/grok-build.changes 2026-10-01 16:46:04.796613726 +0200 +++ /work/SRC/openSUSE:Factory/.grok-build.new.3698736/grok-build.changes 2026-10-15 12:20:16.537408545 +0200 @@ -1,0 +2,16 @@ +Wed Oct 14 08:14:09 UTC 2026 - Martin Pluskal <[email protected]> + +- CVE-2026-109349: gix-pack pack version 3 header assertion + failure (boo#1285155) +- CVE-2026-109350: gix-pack ofs-delta base-distance handling + flaw (boo#1285155) +- CVE-2026-109351: gix-pack header object-count denial of + service (boo#1285155) +- Refresh vendored Rust dependencies (gix 0.83.0 -> 0.88.0, + gix-pack 0.70.0 -> 0.75.0, gix-status 0.30.0 -> 0.35.0); + re-audited licences (913 external crates in the shipped + graph, 1247 vendored); licence set unchanged +- Add 0003-gix-0.88-compat.patch: adapt xai-fast-worktree to + the gix 0.88 API (anyhow Context bound, from_bstr signature) + +------------------------------------------------------------------- New: ---- 0003-gix-0.88-compat.patch ----------(New B)---------- New: graph, 1247 vendored); licence set unchanged - Add 0003-gix-0.88-compat.patch: adapt xai-fast-worktree to the gix 0.88 API (anyhow Context bound, from_bstr signature) ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ grok-build.spec ++++++ --- /var/tmp/diff_new_pack.FOl9MY/_old 2026-10-15 12:20:20.528575483 +0200 +++ /var/tmp/diff_new_pack.FOl9MY/_new 2026-10-15 12:20:20.530575567 +0200 @@ -58,6 +58,8 @@ Source1: vendor.tar.zst Patch0: 0001-disable-self-updater.patch Patch1: 0002-disable-telemetry-by-default.patch +# PATCH-FIX-OPENSUSE 0003-gix-0.88-compat.patch [email protected] -- adapt xai-fast-worktree to the gix 0.88 API +Patch2: 0003-gix-0.88-compat.patch BuildRequires: cargo BuildRequires: cargo-packaging >= 1.2.0 # %%limit_build: cap parallel rustc jobs by available memory (see %%build) ++++++ 0003-gix-0.88-compat.patch ++++++ --- a/crates/codegen/xai-fast-worktree/src/git/index.rs 2026-10-14 10:06:55.970242161 +0200 +++ b/crates/codegen/xai-fast-worktree/src/git/index.rs 2026-10-14 10:07:51.068425406 +0200 @@ -181,7 +181,9 @@ false, Default::default(), ) - .context("failed to open git index")?; + // gix-error 0.4 (via gix 0.88) no longer implements the anyhow + // Context bound, so map into anyhow explicitly. + .map_err(|e| anyhow::anyhow!("failed to open git index: {e}"))?; // Update stat info for each file that was copied let mut updated_count = 0; @@ -259,7 +261,8 @@ let num_updated = updated_count; // Write the updated index - index.write(Default::default())?; + index.write(Default::default()) + .map_err(|e| anyhow::anyhow!("failed to write git index: {e}"))?; tracing::debug!( path = %worktree_path.display(), --- a/crates/codegen/xai-fast-worktree/src/git/safety/git_dir.rs 2026-10-14 10:06:55.974242609 +0200 +++ b/crates/codegen/xai-fast-worktree/src/git/safety/git_dir.rs 2026-10-14 10:07:04.767229379 +0200 @@ -125,7 +125,9 @@ let config = repo.config_snapshot(); let configured = config .string("lfs.storage") - .map(|storage| gix::path::from_bstr(storage.as_ref()).into_owned()); + // gix-path 0.13 (via gix 0.88) takes impl Into<Cow<BStr>>, so pass + // the value through instead of an ambiguously-typed as_ref(). + .map(|storage| gix::path::from_bstr(storage).into_owned()); match configured { Some(storage) if storage.is_absolute() => storage.join("objects"), Some(storage) => repo.common_dir().join(storage).join("objects"), ++++++ grok-build-1.0.45+git20260929.2bdd1d6.tar.zst ++++++ /work/SRC/openSUSE:Factory/grok-build/grok-build-1.0.45+git20260929.2bdd1d6.tar.zst /work/SRC/openSUSE:Factory/.grok-build.new.3698736/grok-build-1.0.45+git20260929.2bdd1d6.tar.zst differ: char 6, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/grok-build/vendor.tar.zst /work/SRC/openSUSE:Factory/.grok-build.new.3698736/vendor.tar.zst differ: char 6, line 1
