Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package nono-cli for openSUSE:Factory 
checked in at 2026-10-17 21:24:45
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/nono-cli (Old)
 and      /work/SRC/openSUSE:Factory/.nono-cli.new.3698736 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "nono-cli"

Sat Oct 17 21:24:45 2026 rev:6 rq:1385249 version:0.80.0

Changes:
--------
--- /work/SRC/openSUSE:Factory/nono-cli/nono-cli.changes        2026-09-28 
10:48:22.610789622 +0200
+++ /work/SRC/openSUSE:Factory/.nono-cli.new.3698736/nono-cli.changes   
2026-10-17 21:24:46.398305629 +0200
@@ -1,0 +2,23 @@
+Fri Oct 16 14:37:51 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to version 0.80.0 (skips 0.79.0):
+  * Security advisory GHSA-q7m6-rr8w-vjff: filesystem denials
+    now apply to sockets as well as regular files
+  * Features: launch and attach to remote agent sessions;
+    standalone Snap runtime group; per-command aws_auth;
+    SHA-256 executable pinning; macOS command-level
+    keychain_access grant; diagnostics.redaction.extra_env_vars
+  * Fixes: isolate tool-sandbox network policy by effective
+    command scope; separate network-denial throttling from policy
+    enforcement; honour Linux open ports in proxy fallback;
+    serverAuth EKU on minted TLS intercept certificates; keep
+    Claude Code on its default Keychain service; accept
+    keyring:// credential URIs; allow man pages, font-config
+    and MIME reads on Linux
+  * Breaking: remove legacy Claude hook cleanup
+- Regenerate vendor.tar.zst for the new sources
+- Correct License: re-derived from the statically linked crates
+  (adds Zlib via foldhash, the default hasher) and update the
+  Legal-Review-Notice counts
+
+-------------------------------------------------------------------

Old:
----
  v0.78.0.tar.gz

New:
----
  v0.80.0.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ nono-cli.spec ++++++
--- /var/tmp/diff_new_pack.5rAseK/_old  2026-10-17 21:24:54.380638628 +0200
+++ /var/tmp/diff_new_pack.5rAseK/_new  2026-10-17 21:24:54.381638670 +0200
@@ -17,14 +17,15 @@
 
 
 Name:           nono-cli
-Version:        0.78.0
+Version:        0.80.0
 Release:        0
 Summary:        CLI for nono capability-based sandbox
 # Legal-Review-Notice: licences of the Rust crates statically linked into the
-# shipped nono binary: 351 crates (nono, nono-cli, nono-proxy and 348
-# vendored), identical on x86_64 and aarch64, taken from cargo's unit graph;
-# anything reached only through proc-macros or build scripts is build-time
-# only. Where a crate offers a choice, Apache-2.0, else MIT, is elected:
+# shipped nono binary: 395 crates (nono, nono-cli, nono-proxy and 392
+# vendored) on x86_64, plus cpufeatures on aarch64, taken from cargo's
+# resolve graph for the shipped targets; anything reached only through
+# proc-macro crates or build scripts is build-time only. Where a crate
+# offers a choice, Apache-2.0, else MIT, is elected:
 #  - MPL-2.0: colored (direct dependency) and option-ext (via dirs-sys);
 #    vendor.tar.zst in the source package provides their source.
 #  - ISC: aws-lc-rs, aws-lc-sys, ring, rustls-webpki, untrusted.
@@ -33,12 +34,14 @@
 #  - Unicode-3.0: icu_*, litemap, potential_utf, tinystr, writeable, yoke,
 #    zerofrom, zerotrie, zerovec, and the Unicode tables in regex-syntax.
 #  - CDLA-Permissive-2.0: webpki-roots.
-#  - MIT: 67 crates that do not offer Apache-2.0.
+#  - Zlib: foldhash (default hasher via indexmap/hashbrown from serde_json
+#    with preserve_order).
+#  - MIT: 69 crates that do not offer Apache-2.0.
 #  - OpenSSL- and SSLeay-derived code in aws-lc-sys is Apache-2.0 per its
 #    LICENSE.
-#  - zlib-rs and foldhash (Zlib) are named in the binary's embedded
-#    cargo-auditable dependency list but are not linked.
-License:        Apache-2.0 AND BSD-3-Clause AND CDLA-Permissive-2.0 AND ISC 
AND MIT AND MPL-2.0 AND Unicode-3.0
+#  - zlib-rs is named in the binary's embedded cargo-auditable dependency
+#    list but is not linked.
+License:        Apache-2.0 AND BSD-3-Clause AND CDLA-Permissive-2.0 AND ISC 
AND MIT AND MPL-2.0 AND Unicode-3.0 AND Zlib
 URL:            https://github.com/nolabs-ai/nono/
 Source0:        
https://github.com/nolabs-ai/nono/archive/refs/tags/v%{version}.tar.gz
 Source1:        vendor.tar.zst

++++++ v0.78.0.tar.gz -> v0.80.0.tar.gz ++++++
/work/SRC/openSUSE:Factory/nono-cli/v0.78.0.tar.gz 
/work/SRC/openSUSE:Factory/.nono-cli.new.3698736/v0.80.0.tar.gz differ: char 
26, line 2

++++++ vendor.tar.zst ++++++
/work/SRC/openSUSE:Factory/nono-cli/vendor.tar.zst 
/work/SRC/openSUSE:Factory/.nono-cli.new.3698736/vendor.tar.zst differ: char 7, 
line 1

Reply via email to