Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rqlite for openSUSE:Factory checked in at 2026-10-18 19:26:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rqlite (Old) and /work/SRC/openSUSE:Factory/.rqlite.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rqlite" Sun Oct 18 19:26:31 2026 rev:58 rq:1385972 version:10.6.1 Changes: -------- --- /work/SRC/openSUSE:Factory/rqlite/rqlite.changes 2026-10-13 17:44:30.510211142 +0200 +++ /work/SRC/openSUSE:Factory/.rqlite.new.3698736/rqlite.changes 2026-10-18 19:27:07.322292601 +0200 @@ -1,0 +2,25 @@ +Sat Oct 17 15:32:39 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 10.6.1: + * Use constant-time comparison when comparing passwords + * Conditionally rewrite SQL during queued writes and fix + rewriting of CURRENT_TIMESTAMP and related tokens + * More robust Leader stepdown node ID detection, reap checks, + and SQL analyze start-time recording + * CDC fixes: encode non-finite floats, always release flush + waiters, and make the HTTP sink follow redirects + * Converted _service from mode=disabled to mode=manual (legacy + leftover; services are run by hand via osc service manualrun) + * Package is not affected by CVE-2026-84445 (boo#1278793), + CVE-2026-84304 (boo#1279102), CVE-2026-84303 (boo#1279253): + vendored grpc is v1.84.0, above the v1.83.1/v1.83.2 fixes + * Package is not affected by CVE-2026-89090 (boo#1280657): + vendored eventstream is v1.7.20, above the v1.7.8 fix + * Package is not affected by CVE-2026-63209 (boo#1283555): + vendored klauspost/compress is v1.20.1, above the v1.18.7 + fix + * Package is not affected by CVE-2026-39821 (boo#1266544): + vendored golang.org/x/net is v0.59.0, above the v0.55.0 + fix + +------------------------------------------------------------------- Old: ---- rqlite-10.6.0.tar.xz New: ---- rqlite-10.6.1.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rqlite.spec ++++++ --- /var/tmp/diff_new_pack.aWarKI/_old 2026-10-18 19:27:07.994320758 +0200 +++ /var/tmp/diff_new_pack.aWarKI/_new 2026-10-18 19:27:07.995320800 +0200 @@ -2,6 +2,7 @@ # spec file for package rqlite # # Copyright (c) 2026 Andreas Stieger <[email protected]> +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +18,7 @@ Name: rqlite -Version: 10.6.0 +Version: 10.6.1 Release: 0 Summary: Distributed relational database built on SQLite License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.aWarKI/_old 2026-10-18 19:27:08.026322099 +0200 +++ /var/tmp/diff_new_pack.aWarKI/_new 2026-10-18 19:27:08.028322183 +0200 @@ -1,19 +1,19 @@ <services> - <service name="tar_scm" mode="disabled"> + <service name="tar_scm" mode="manual"> <param name="url">https://github.com/rqlite/rqlite.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v10.6.0</param> + <param name="revision">v10.6.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> </service> - <service name="set_version" mode="disabled" /> - <service name="recompress" mode="disabled"> + <service name="set_version" mode="manual" /> + <service name="recompress" mode="manual"> <param name="file">*.tar</param> <param name="compression">xz</param> </service> - <service name="go_modules" mode="disabled"> + <service name="go_modules" mode="manual"> <param name="compression">xz</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.aWarKI/_old 2026-10-18 19:27:08.047322979 +0200 +++ /var/tmp/diff_new_pack.aWarKI/_new 2026-10-18 19:27:08.049323063 +0200 @@ -1,7 +1,7 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/rqlite/rqlite.git</param> - <param name="changesrevision">32ff692fd25675674cc5978e95e9e6fade3093cb</param> + <param name="changesrevision">a0445852ef21992867465f28745d8daef80df3d6</param> </service> </servicedata> (No newline at EOF) ++++++ rqlite-10.6.0.tar.xz -> rqlite-10.6.1.tar.xz ++++++ ++++ 4359 lines of diff (skipped) ++++++ vendor.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/github.com/rqlite/sql/parser.go new/vendor/github.com/rqlite/sql/parser.go --- old/vendor/github.com/rqlite/sql/parser.go 2026-10-12 15:02:13.000000000 +0200 +++ new/vendor/github.com/rqlite/sql/parser.go 2026-10-17 17:31:07.000000000 +0200 @@ -2839,6 +2839,8 @@ return ident, nil case tok == STRING: return &StringLit{ValuePos: pos, Value: lit}, nil + case tok == CURRENT_TIME, tok == CURRENT_DATE, tok == CURRENT_TIMESTAMP: + return &TimestampLit{ValuePos: pos, Value: lit}, nil case tok == BLOB: return &BlobLit{ValuePos: pos, Value: lit}, nil case tok == FLOAT, tok == INTEGER: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/github.com/rqlite/sql/token.go new/vendor/github.com/rqlite/sql/token.go --- old/vendor/github.com/rqlite/sql/token.go 2026-10-12 15:02:13.000000000 +0200 +++ new/vendor/github.com/rqlite/sql/token.go 2026-10-17 17:31:07.000000000 +0200 @@ -578,6 +578,11 @@ // These are in bareTokens but have precedence as expression keywords. case CAST, CASE, RAISE, EXISTS, SELECT, NOT: return false + // In an expression these are always the time literals, never a column + // reference, even if a column of the same name exists. They remain usable + // as identifiers outside expressions (column names, SET targets, etc.). + case CURRENT_TIME, CURRENT_DATE, CURRENT_TIMESTAMP: + return false default: // Bare tokens are keywords that can be used as unquoted identifiers // (e.g., DESC, ASC, KEY, ACTION, REPLACE, LIKE, GLOB, IF, etc.) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/modules.txt new/vendor/modules.txt --- old/vendor/modules.txt 2026-10-12 15:02:13.000000000 +0200 +++ new/vendor/modules.txt 2026-10-17 17:31:08.000000000 +0200 @@ -270,7 +270,7 @@ github.com/rqlite/rqlite-disco-clients/dnssrv github.com/rqlite/rqlite-disco-clients/etcd github.com/rqlite/rqlite-disco-clients/expand -# github.com/rqlite/sql v0.0.0-20261009033234-4555bb784427 +# github.com/rqlite/sql v0.0.0-20261016220845-5c0832fea6e1 ## explicit; go 1.17 github.com/rqlite/sql # go.etcd.io/bbolt v1.5.0
