Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package vexctl for openSUSE:Factory checked in at 2026-10-20 12:43:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/vexctl (Old) and /work/SRC/openSUSE:Factory/.vexctl.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "vexctl" Tue Oct 20 12:43:07 2026 rev:16 rq:1386394 version:0.4.4+git106.aa6ffc8 Changes: -------- --- /work/SRC/openSUSE:Factory/vexctl/vexctl.changes 2026-09-19 22:24:43.846583803 +0200 +++ /work/SRC/openSUSE:Factory/.vexctl.new.3698736/vexctl.changes 2026-10-20 12:43:24.980280411 +0200 @@ -1,0 +2,23 @@ +Tue Oct 20 03:18:12 UTC 2026 - Jeff Kowalczyk <[email protected]> + +- Update to version 0.4.4+git106.aa6ffc8: + * build(deps): Bump sigs.k8s.io/release-utils + * build(deps): Bump golang.org/x/sync from 0.23.0 to 0.24.0 + * Bump linter + * build(deps): Bump the all group with 2 updates + * build(deps): Bump chainguard-dev/actions/boilerplate + * build(deps): Bump chainguard-dev/actions/boilerplate in the all group + * build(deps): Bump github.com/carabiner-dev/collector in the all group + * Add a validate subcommand to lint OpenVEX documents +- Packaging improvements: + * _service go.mod replace fixes dependency CVEs: + golang.org/x/net=golang.org/x/[email protected] + GO-2026-6617 CVE-2026-97032 + GO-2026-6612 CVE-2026-78663 + GO-2026-6611 CVE-2026-78669 + GO-2026-6610 CVE-2026-78660 + GO-2026-6603 CVE-2026-78659 + * Fix typo ppc64le not ppc64 in PIE condititional: + %%ifnarch ppc64le GOFLAGS="-buildmode=pie" %%endif go build + +------------------------------------------------------------------- Old: ---- vexctl-0.4.4+git91.839fbf5.tar.gz New: ---- vexctl-0.4.4+git106.aa6ffc8.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ vexctl.spec ++++++ --- /var/tmp/diff_new_pack.PMxLYT/_old 2026-10-20 12:43:26.057325468 +0200 +++ /var/tmp/diff_new_pack.PMxLYT/_new 2026-10-20 12:43:26.059325552 +0200 @@ -17,7 +17,7 @@ Name: vexctl -Version: 0.4.4+git91.839fbf5 +Version: 0.4.4+git106.aa6ffc8 Release: 0 Summary: CLI tool to create, transform and attest VEX metadata License: Apache-2.0 @@ -41,7 +41,7 @@ %autosetup -a 1 %build -%ifnarch ppc64 +%ifnarch ppc64le export GOFLAGS="-buildmode=pie" %endif go build ++++++ _service ++++++ --- /var/tmp/diff_new_pack.PMxLYT/_old 2026-10-20 12:43:26.096327100 +0200 +++ /var/tmp/diff_new_pack.PMxLYT/_new 2026-10-20 12:43:26.105327476 +0200 @@ -15,6 +15,7 @@ <param name="compression">gz</param> </service> <service name="go_modules" mode="manual"> + <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.PMxLYT/_old 2026-10-20 12:43:26.144329108 +0200 +++ /var/tmp/diff_new_pack.PMxLYT/_new 2026-10-20 12:43:26.152329442 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openvex/vexctl.git</param> - <param name="changesrevision">839fbf5304434e3dad3d2930687d134989b6611f</param></service></servicedata> + <param name="changesrevision">aa6ffc8d8d6bb8a1656493b92c61e955c3a2ce2d</param></service></servicedata> (No newline at EOF) ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/vexctl/vendor.tar.gz /work/SRC/openSUSE:Factory/.vexctl.new.3698736/vendor.tar.gz differ: char 15, line 1 ++++++ vexctl-0.4.4+git91.839fbf5.tar.gz -> vexctl-0.4.4+git106.aa6ffc8.tar.gz ++++++ /work/SRC/openSUSE:Factory/vexctl/vexctl-0.4.4+git91.839fbf5.tar.gz /work/SRC/openSUSE:Factory/.vexctl.new.3698736/vexctl-0.4.4+git106.aa6ffc8.tar.gz differ: char 12, line 1
