Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package graphifyy for openSUSE:Factory checked in at 2026-10-17 21:25:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/graphifyy (Old) and /work/SRC/openSUSE:Factory/.graphifyy.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "graphifyy" Sat Oct 17 21:25:31 2026 rev:3 rq:1385274 version:0.9.91 Changes: -------- --- /work/SRC/openSUSE:Factory/graphifyy/graphifyy.changes 2026-09-24 23:01:54.917407596 +0200 +++ /work/SRC/openSUSE:Factory/.graphifyy.new.3698736/graphifyy.changes 2026-10-17 21:25:46.642818822 +0200 @@ -1,0 +2,29 @@ +Fri Oct 16 14:25:32 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 0.9.91: + * Security: Fortran capital-F sources no longer feed + #include directives to cpp, closing arbitrary host-file + reads into graph.json and LLM context + * Security: --watch snippets read the trusted scan-root + file instead of interpolating INPUT_PATH into shell; + Terraform secret redaction covers variable/output values + * Language coverage: new EJS and Jinja extractors; SQL + triggers, Groovy enums, OCaml/Elixir/Fortran/Julia/Kotlin + structural depth; cross-repo member-call resolution + * Resolution accuracy: self/this/super bind to the caller's + own class chain; unqualified calls prefer own-class scope + * Deterministic, portable graph.json: node ids no longer + leak checkout path, username, or line endings + * MCP retrieval much faster (cached traversal graphs); + query/explain exit codes and truncation hints; hook-guard + for Pi, OpenCode 2 plugin support, automatic stale-skill + refresh + * Raise python-tree-sitter runtime floor to >= 0.25 for + ABI 15 grammars + * %check: skip tests needing newer tree-sitter grammars + than Factory ships (JS tagged-template clash file, one + PHP blanking test that segfaults the older parser) + * Many more fixes and improvements; see upstream's release + notes for the full list + +------------------------------------------------------------------- Old: ---- graphify-0.9.67.tar.gz New: ---- graphify-0.9.91.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ graphifyy.spec ++++++ --- /var/tmp/diff_new_pack.wzlCvX/_old 2026-10-17 21:25:47.397850319 +0200 +++ /var/tmp/diff_new_pack.wzlCvX/_new 2026-10-17 21:25:47.399850402 +0200 @@ -20,7 +20,7 @@ # (successor of the python-graphifyy multibuild package). %define pythons %{primary_python} Name: graphifyy -Version: 0.9.67 +Version: 0.9.91 Release: 0 Summary: Code knowledge graph builder and query CLI for AI assistants License: Apache-2.0 AND MIT @@ -46,7 +46,7 @@ # HTTP MCP tests import starlette; extra floor is 1.3.1 (CVE-2026-48818 / # CVE-2026-54283) BuildRequires: %{primary_python}-starlette >= 1.3.1 -BuildRequires: %{primary_python}-tree-sitter >= 0.23 +BuildRequires: %{primary_python}-tree-sitter >= 0.25 BuildRequires: %{primary_python}-tree-sitter-bash >= 0.23 BuildRequires: %{primary_python}-tree-sitter-c >= 0.23 BuildRequires: %{primary_python}-tree-sitter-c-sharp >= 0.23 @@ -111,7 +111,7 @@ Requires: %{primary_python}-numpy >= 1.21 Requires: %{primary_python}-rapidfuzz >= 3.0 Recommends: %{primary_python}-robotframework >= 4.0 -Recommends: %{primary_python}-tree-sitter >= 0.23 +Recommends: %{primary_python}-tree-sitter >= 0.25 Recommends: %{primary_python}-tree-sitter-bash >= 0.23 Recommends: %{primary_python}-tree-sitter-c >= 0.23 Recommends: %{primary_python}-tree-sitter-c-sharp >= 0.23 @@ -227,10 +227,16 @@ # concurrently (max_concurrency=4), so the observed order is racy # test_built_wheel_ships_the_full_skill_payload runs python -m build; # OBS python3.14 has a conflicting build package without __main__ +# test_ext_tagged_id_clash.py pins JS tagged-template const extraction +# from tree-sitter-javascript 0.25 (upstream lockfile); Factory ships +# 0.23.1, so the sibling-extension nodes never materialize +# test_strings_and_comments_are_never_blanked segfaults the native +# parser with Factory's php grammar 0.23.9 + runtime 0.26 (upstream +# lockfile: php 0.24.1 + runtime 0.25.2) # PYTEST_ADDOPTS --basetemp avoids pytest-of-abuild: two query CLI # tests assert "build" not in the output, which matches the OBS user export PYTEST_ADDOPTS="--basetemp=%{_tmppath}/gfytmp" -%pytest --ignore tests/test_skillgen.py --ignore tests/test_hooks.py --ignore tests/test_terraform.py --ignore tests/test_terraform_modules.py --ignore tests/test_security.py --ignore tests/test_home_sandbox.py --ignore tests/test_manifest_ingest.py --ignore tests/test_llm_backends.py --ignore tests/test_install_strings.py --ignore tests/test_detect.py --ignore tests/test_erlang_extractor.py --ignore tests/test_r_extractor.py --ignore tests/test_solidity_extractor.py --ignore tests/test_vbnet_extractor.py -k "not (anthropic or openai or gemini or bedrock or ollama or test_label_communities_batches_when_over_batch_size or test_built_wheel_ships_the_full_skill_payload)" +%pytest --ignore tests/test_skillgen.py --ignore tests/test_hooks.py --ignore tests/test_terraform.py --ignore tests/test_terraform_modules.py --ignore tests/test_security.py --ignore tests/test_home_sandbox.py --ignore tests/test_manifest_ingest.py --ignore tests/test_llm_backends.py --ignore tests/test_install_strings.py --ignore tests/test_detect.py --ignore tests/test_erlang_extractor.py --ignore tests/test_r_extractor.py --ignore tests/test_solidity_extractor.py --ignore tests/test_vbnet_extractor.py --ignore tests/test_ext_tagged_id_clash.py -k "not (anthropic or openai or gemini or bedrock or ollama or test_label_communities_batches_when_over_batch_size or test_built_wheel_ships_the_full_skill_payload or test_strings_and_comments_are_never_blanked)" %files %doc README.md ++++++ graphify-0.9.67.tar.gz -> graphify-0.9.91.tar.gz ++++++ /work/SRC/openSUSE:Factory/graphifyy/graphify-0.9.67.tar.gz /work/SRC/openSUSE:Factory/.graphifyy.new.3698736/graphify-0.9.91.tar.gz differ: char 12, line 1
