Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package regclient for openSUSE:Factory checked in at 2026-10-21 20:57:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/regclient (Old) and /work/SRC/openSUSE:Factory/.regclient.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "regclient" Wed Oct 21 20:57:56 2026 rev:18 rq:1386679 version:0.11.7 Changes: -------- --- /work/SRC/openSUSE:Factory/regclient/regclient.changes 2026-09-18 22:07:28.347941888 +0200 +++ /work/SRC/openSUSE:Factory/.regclient.new.2252680/regclient.changes 2026-10-21 20:59:40.198472985 +0200 @@ -1,0 +2,7 @@ +Wed Oct 21 05:05:28 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.11.7: + * Security + - Upgrading Go fixes CVE-2026-111943 (PR 1140) + +------------------------------------------------------------------- Old: ---- regclient-0.11.6.obscpio New: ---- regclient-0.11.7.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ regclient.spec ++++++ --- /var/tmp/diff_new_pack.Kn5ias/_old 2026-10-21 20:59:41.749538018 +0200 +++ /var/tmp/diff_new_pack.Kn5ias/_new 2026-10-21 20:59:41.751538101 +0200 @@ -17,7 +17,7 @@ Name: regclient -Version: 0.11.6 +Version: 0.11.7 Release: 0 Summary: OCI Registry Client in Go and tooling using those libraries License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Kn5ias/_old 2026-10-21 20:59:41.860542672 +0200 +++ /var/tmp/diff_new_pack.Kn5ias/_new 2026-10-21 20:59:41.868543007 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/regclient/regclient.git</param> <param name="scm">git</param> <param name="package-meta">yes</param> - <param name="revision">refs/tags/v0.11.6</param> + <param name="revision">refs/tags/v0.11.7</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Kn5ias/_old 2026-10-21 20:59:41.932545691 +0200 +++ /var/tmp/diff_new_pack.Kn5ias/_new 2026-10-21 20:59:41.951546487 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/regclient/regclient</param> <param name="changesrevision">2bc542b4a19d6e4fd939be150f1443da2395690c</param></service><service name="tar_scm"> <param name="url">https://github.com/regclient/regclient.git</param> - <param name="changesrevision">c2f83e99bd90e92e40d08307acf13138321a4a30</param></service></servicedata> + <param name="changesrevision">36abda84830dae07db00bf9e5cec95d97b78222a</param></service></servicedata> (No newline at EOF) ++++++ regclient-0.11.6.obscpio -> regclient-0.11.7.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/HEAD new/regclient-0.11.7/.git/HEAD --- old/regclient-0.11.6/.git/HEAD 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/HEAD 2026-10-21 02:20:23.000000000 +0200 @@ -1 +1 @@ -c2f83e99bd90e92e40d08307acf13138321a4a30 +36abda84830dae07db00bf9e5cec95d97b78222a diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/ORIG_HEAD new/regclient-0.11.7/.git/ORIG_HEAD --- old/regclient-0.11.6/.git/ORIG_HEAD 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/ORIG_HEAD 2026-10-21 02:20:23.000000000 +0200 @@ -1 +1 @@ -c2f83e99bd90e92e40d08307acf13138321a4a30 +36abda84830dae07db00bf9e5cec95d97b78222a diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/applypatch-msg.sample new/regclient-0.11.7/.git/hooks/applypatch-msg.sample --- old/regclient-0.11.6/.git/hooks/applypatch-msg.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/applypatch-msg.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # An example hook script to check the commit log message taken by # applypatch from an e-mail message. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/commit-msg.sample new/regclient-0.11.7/.git/hooks/commit-msg.sample --- old/regclient-0.11.6/.git/hooks/commit-msg.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/commit-msg.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # An example hook script to check the commit log message. # Called by "git commit" with one argument, the name of the file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/fsmonitor-watchman.sample new/regclient-0.11.7/.git/hooks/fsmonitor-watchman.sample --- old/regclient-0.11.6/.git/hooks/fsmonitor-watchman.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/fsmonitor-watchman.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/w8mnw9h158ikd0cw5wjs9mhvqihbzbr4-perl-5.42.0/bin/perl +#!/nix/store/llas6flzd2875r7zzhhvwnynwqi349jb-perl-5.42.3/bin/perl use strict; use warnings; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/post-update.sample new/regclient-0.11.7/.git/hooks/post-update.sample --- old/regclient-0.11.6/.git/hooks/post-update.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/post-update.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # An example hook script to prepare a packed repository for use over # dumb transports. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/pre-applypatch.sample new/regclient-0.11.7/.git/hooks/pre-applypatch.sample --- old/regclient-0.11.6/.git/hooks/pre-applypatch.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/pre-applypatch.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # An example hook script to verify what is about to be committed # by applypatch from an e-mail message. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/pre-commit.sample new/regclient-0.11.7/.git/hooks/pre-commit.sample --- old/regclient-0.11.6/.git/hooks/pre-commit.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/pre-commit.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # An example hook script to verify what is about to be committed. # Called by "git commit" with no arguments. The hook should diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/pre-merge-commit.sample new/regclient-0.11.7/.git/hooks/pre-merge-commit.sample --- old/regclient-0.11.6/.git/hooks/pre-merge-commit.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/pre-merge-commit.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # An example hook script to verify what is about to be committed. # Called by "git merge" with no arguments. The hook should diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/pre-push.sample new/regclient-0.11.7/.git/hooks/pre-push.sample --- old/regclient-0.11.6/.git/hooks/pre-push.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/pre-push.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # An example hook script to verify what is about to be pushed. Called by "git # push" after it has checked the remote status, but before anything has been diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/pre-rebase.sample new/regclient-0.11.7/.git/hooks/pre-rebase.sample --- old/regclient-0.11.6/.git/hooks/pre-rebase.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/pre-rebase.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # Copyright (c) 2006, 2008 Junio C Hamano # @@ -65,7 +65,7 @@ fi else not_in_next=`git rev-list --pretty=oneline ^${publish} "$topic"` - /nix/store/w8mnw9h158ikd0cw5wjs9mhvqihbzbr4-perl-5.42.0/bin/perl -e ' + /nix/store/llas6flzd2875r7zzhhvwnynwqi349jb-perl-5.42.3/bin/perl -e ' my $topic = $ARGV[0]; my $msg = "* $topic has commits already merged to public branch:\n"; my (%not_in_next) = map { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/pre-receive.sample new/regclient-0.11.7/.git/hooks/pre-receive.sample --- old/regclient-0.11.6/.git/hooks/pre-receive.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/pre-receive.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # An example hook script to make use of push options. # The example simply echoes all push options that start with 'echoback=' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/prepare-commit-msg.sample new/regclient-0.11.7/.git/hooks/prepare-commit-msg.sample --- old/regclient-0.11.6/.git/hooks/prepare-commit-msg.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/prepare-commit-msg.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # An example hook script to prepare the commit log message. # Called by "git commit" with the name of the file that has the @@ -24,11 +24,11 @@ COMMIT_SOURCE=$2 SHA1=$3 -/nix/store/w8mnw9h158ikd0cw5wjs9mhvqihbzbr4-perl-5.42.0/bin/perl -i.bak -ne 'print unless(m/^. Please enter the commit message/..m/^#$/)' "$COMMIT_MSG_FILE" +/nix/store/llas6flzd2875r7zzhhvwnynwqi349jb-perl-5.42.3/bin/perl -i.bak -ne 'print unless(m/^. Please enter the commit message/..m/^#$/)' "$COMMIT_MSG_FILE" # case "$COMMIT_SOURCE,$SHA1" in # ,|template,) -# /nix/store/w8mnw9h158ikd0cw5wjs9mhvqihbzbr4-perl-5.42.0/bin/perl -i.bak -pe ' +# /nix/store/llas6flzd2875r7zzhhvwnynwqi349jb-perl-5.42.3/bin/perl -i.bak -pe ' # print "\n" . `git diff --cached --name-status -r` # if /^#/ && $first++ == 0' "$COMMIT_MSG_FILE" ;; # *) ;; @@ -38,5 +38,5 @@ # git interpret-trailers --in-place --trailer "$SOB" "$COMMIT_MSG_FILE" # if test -z "$COMMIT_SOURCE" # then -# /nix/store/w8mnw9h158ikd0cw5wjs9mhvqihbzbr4-perl-5.42.0/bin/perl -i.bak -pe 'print "\n" if !$first_line++' "$COMMIT_MSG_FILE" +# /nix/store/llas6flzd2875r7zzhhvwnynwqi349jb-perl-5.42.3/bin/perl -i.bak -pe 'print "\n" if !$first_line++' "$COMMIT_MSG_FILE" # fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/push-to-checkout.sample new/regclient-0.11.7/.git/hooks/push-to-checkout.sample --- old/regclient-0.11.6/.git/hooks/push-to-checkout.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/push-to-checkout.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # An example hook script to update a checked-out tree on a git push. # diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/sendemail-validate.sample new/regclient-0.11.7/.git/hooks/sendemail-validate.sample --- old/regclient-0.11.6/.git/hooks/sendemail-validate.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/sendemail-validate.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # An example hook script to validate a patch (and/or patch series) before # sending it via email. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/hooks/update.sample new/regclient-0.11.7/.git/hooks/update.sample --- old/regclient-0.11.6/.git/hooks/update.sample 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/hooks/update.sample 2026-10-21 02:20:23.000000000 +0200 @@ -1,4 +1,4 @@ -#!/nix/store/axl12yr00f105bjqvj628f5f0s6r0cnp-bash-5.3p9/bin/bash +#!/nix/store/jnyfsf2mp08d1xyz2m72ic2vz2kcx0sd-bash-5.3p9/bin/bash # # An example hook script to block unannotated tags from entering. # Called by "git receive-pack" with arguments: refname sha1-old sha1-new Binary files old/regclient-0.11.6/.git/index and new/regclient-0.11.7/.git/index differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/logs/HEAD new/regclient-0.11.7/.git/logs/HEAD --- old/regclient-0.11.6/.git/logs/HEAD 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/logs/HEAD 2026-10-21 02:20:23.000000000 +0200 @@ -1,2 +1,2 @@ -0000000000000000000000000000000000000000 43d2acb9fafd411acbe081bf6c4b6b82cadc6251 kastl <[email protected]> 1789709529 +0200 clone: from https://github.com/regclient/regclient.git -43d2acb9fafd411acbe081bf6c4b6b82cadc6251 c2f83e99bd90e92e40d08307acf13138321a4a30 kastl <[email protected]> 1789709529 +0200 checkout: moving from main to refs/tags/v0.11.6 +0000000000000000000000000000000000000000 36abda84830dae07db00bf9e5cec95d97b78222a kastl <[email protected]> 1792559128 +0200 clone: from https://github.com/regclient/regclient.git +36abda84830dae07db00bf9e5cec95d97b78222a 36abda84830dae07db00bf9e5cec95d97b78222a kastl <[email protected]> 1792559128 +0200 checkout: moving from main to refs/tags/v0.11.7 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/logs/refs/heads/main new/regclient-0.11.7/.git/logs/refs/heads/main --- old/regclient-0.11.6/.git/logs/refs/heads/main 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/logs/refs/heads/main 2026-10-21 02:20:23.000000000 +0200 @@ -1 +1 @@ -0000000000000000000000000000000000000000 43d2acb9fafd411acbe081bf6c4b6b82cadc6251 kastl <[email protected]> 1789709529 +0200 clone: from https://github.com/regclient/regclient.git +0000000000000000000000000000000000000000 36abda84830dae07db00bf9e5cec95d97b78222a kastl <[email protected]> 1792559128 +0200 clone: from https://github.com/regclient/regclient.git diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/logs/refs/remotes/origin/HEAD new/regclient-0.11.7/.git/logs/refs/remotes/origin/HEAD --- old/regclient-0.11.6/.git/logs/refs/remotes/origin/HEAD 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/logs/refs/remotes/origin/HEAD 2026-10-21 02:20:23.000000000 +0200 @@ -1 +1 @@ -0000000000000000000000000000000000000000 43d2acb9fafd411acbe081bf6c4b6b82cadc6251 kastl <[email protected]> 1789709529 +0200 clone: from https://github.com/regclient/regclient.git +0000000000000000000000000000000000000000 36abda84830dae07db00bf9e5cec95d97b78222a kastl <[email protected]> 1792559128 +0200 clone: from https://github.com/regclient/regclient.git Binary files old/regclient-0.11.6/.git/objects/pack/pack-5c8388f3cc1f1a0f5b4962460e7e9eeda8b42d7a.idx and new/regclient-0.11.7/.git/objects/pack/pack-5c8388f3cc1f1a0f5b4962460e7e9eeda8b42d7a.idx differ Binary files old/regclient-0.11.6/.git/objects/pack/pack-5c8388f3cc1f1a0f5b4962460e7e9eeda8b42d7a.pack and new/regclient-0.11.7/.git/objects/pack/pack-5c8388f3cc1f1a0f5b4962460e7e9eeda8b42d7a.pack differ Binary files old/regclient-0.11.6/.git/objects/pack/pack-5c8388f3cc1f1a0f5b4962460e7e9eeda8b42d7a.rev and new/regclient-0.11.7/.git/objects/pack/pack-5c8388f3cc1f1a0f5b4962460e7e9eeda8b42d7a.rev differ Binary files old/regclient-0.11.6/.git/objects/pack/pack-6d59007a59052b417fdc87b907750928de305e6d.idx and new/regclient-0.11.7/.git/objects/pack/pack-6d59007a59052b417fdc87b907750928de305e6d.idx differ Binary files old/regclient-0.11.6/.git/objects/pack/pack-6d59007a59052b417fdc87b907750928de305e6d.pack and new/regclient-0.11.7/.git/objects/pack/pack-6d59007a59052b417fdc87b907750928de305e6d.pack differ Binary files old/regclient-0.11.6/.git/objects/pack/pack-6d59007a59052b417fdc87b907750928de305e6d.rev and new/regclient-0.11.7/.git/objects/pack/pack-6d59007a59052b417fdc87b907750928de305e6d.rev differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/packed-refs new/regclient-0.11.7/.git/packed-refs --- old/regclient-0.11.6/.git/packed-refs 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/packed-refs 2026-10-21 02:20:23.000000000 +0200 @@ -1,5 +1,5 @@ # pack-refs with: peeled fully-peeled sorted -43d2acb9fafd411acbe081bf6c4b6b82cadc6251 refs/remotes/origin/main +36abda84830dae07db00bf9e5cec95d97b78222a refs/remotes/origin/main daa734a0b4dc9c19231cfe691a241f0ce2a7b2f4 refs/remotes/origin/releases/0.0 c3de9bb7b04ad3cd96bb73bc0c72986b83572d12 refs/remotes/origin/releases/0.10 2bc542b4a19d6e4fd939be150f1443da2395690c refs/remotes/origin/releases/0.11 @@ -43,6 +43,10 @@ ^7dec8e57d1eda2904a4858bccc9ade39f5318d3d 9fec97c135b91fbeb963dc58f0e4af91741cdbdf refs/tags/v0.11.6-rc2 ^d149524eabc4b19aa4b1512c5fd54db25949c0be +84ae1437943b0b9006223b0054956ef22a1b6dba refs/tags/v0.11.7 +^36abda84830dae07db00bf9e5cec95d97b78222a +fab975b41972d09ea78f0a2b8864b1dee809b75b refs/tags/v0.11.7-rc1 +^94e654043a3d13ab521486d29ba4fddf47d62222 f5e39881d000960a706d1840f2a43eac7b3fd9de refs/tags/v0.2.0 ^5906ef88ec6ec3f6709d286756d27b77982fa55b 25bacba961cde26845ce0bf5a90edbb8a2bdb2e4 refs/tags/v0.2.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.git/refs/heads/main new/regclient-0.11.7/.git/refs/heads/main --- old/regclient-0.11.6/.git/refs/heads/main 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.git/refs/heads/main 2026-10-21 02:20:23.000000000 +0200 @@ -1 +1 @@ -43d2acb9fafd411acbe081bf6c4b6b82cadc6251 +36abda84830dae07db00bf9e5cec95d97b78222a diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.github/workflows/docker.yml new/regclient-0.11.7/.github/workflows/docker.yml --- old/regclient-0.11.6/.github/workflows/docker.yml 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.github/workflows/docker.yml 2026-10-21 02:20:23.000000000 +0200 @@ -44,7 +44,7 @@ env: ALPINE_NAME: "alpine:3" - ALPINE_DIGEST: "sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b" # 3.24.1 + ALPINE_DIGEST: "sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6" # 3.24.2 RELEASE_GO_VER: "1.27" steps: @@ -111,7 +111,7 @@ echo "repo_url=${REPO_URL}" >>$GITHUB_OUTPUT - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Login to DockerHub if: github.repository_owner == 'regclient' @@ -129,7 +129,7 @@ password: ${{ secrets.GHCR_TOKEN }} - name: Build - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 id: build with: context: . @@ -152,14 +152,14 @@ - name: Install syft if: github.event_name != 'pull_request' && github.repository_owner == 'regclient' - uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 + uses: anchore/sbom-action/download-syft@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3 id: syft with: - syft-version: "v1.51.1" + syft-version: "v1.55.0" # Dogfooding, use regctl to modify regclient images to improve reproducibility - name: Install regctl - uses: regclient/actions/regctl-installer@f9ceff9bbbc63cd1008e60cec2b27627eedc7322 # main + uses: regclient/actions/regctl-installer@dd58ad94f76adb73d8ac1bf75ed25f01545d5b32 # main if: github.event_name != 'pull_request' && github.repository_owner == 'regclient' with: release: main diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.github/workflows/go.yml new/regclient-0.11.7/.github/workflows/go.yml --- old/regclient-0.11.6/.github/workflows/go.yml 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.github/workflows/go.yml 2026-10-21 02:20:23.000000000 +0200 @@ -83,10 +83,10 @@ - name: Install syft if: startsWith( github.ref, 'refs/tags/v' ) || github.ref == 'refs/heads/main' - uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 + uses: anchore/sbom-action/download-syft@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3 id: syft with: - syft-version: "v1.51.1" + syft-version: "v1.55.0" - name: Build artifacts if: startsWith( github.ref, 'refs/tags/v' ) || github.ref == 'refs/heads/main' @@ -152,7 +152,7 @@ - name: Save artifacts if: github.ref == 'refs/heads/main' && matrix.gover == env.RELEASE_GO_VER - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: binaries path: ./artifacts/ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.osv-scanner.toml new/regclient-0.11.7/.osv-scanner.toml --- old/regclient-0.11.6/.osv-scanner.toml 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.osv-scanner.toml 2026-10-21 02:20:23.000000000 +0200 @@ -1 +1 @@ -GoVersionOverride = "1.27.0" +GoVersionOverride = "1.27.3" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/.version-bump.lock new/regclient-0.11.7/.version-bump.lock --- old/regclient-0.11.6/.version-bump.lock 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/.version-bump.lock 2026-10-21 02:20:23.000000000 +0200 @@ -1,53 +1,53 @@ -{"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.24.1","version":"sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b"} -{"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.24.1"} +{"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.24.2","version":"sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6"} +{"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.24.2"} {"name":"docker-arg-ecr","key":"https://github.com/awslabs/amazon-ecr-credential-helper.git","version":"v0.12.0"} {"name":"docker-arg-gcr","key":"https://github.com/GoogleCloudPlatform/docker-credential-gcr.git","version":"v2.2.1"} -{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.27.0-alpine","version":"sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc"} -{"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.27.0"} +{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.27.3-alpine","version":"sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd"} +{"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.27.3"} {"name":"docker-arg-lunajson","key":"https://github.com/grafi-tt/lunajson.git:master","version":"e3a9666eb1275741e887e29926b144f8daee3bef"} {"name":"docker-arg-semver","key":"https://github.com/kikito/semver.lua.git:master","version":"a4b708ba243208d46e575da870af969dca46a94d"} -{"name":"gha-alpine-digest","key":"docker.io/library/alpine:3.24.1","version":"sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b"} +{"name":"gha-alpine-digest","key":"docker.io/library/alpine:3.24.2","version":"sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6"} {"name":"gha-alpine-tag-base","key":"docker.io/library/alpine","version":"3"} -{"name":"gha-alpine-tag-comment","key":"docker.io/library/alpine","version":"3.24.1"} +{"name":"gha-alpine-tag-comment","key":"docker.io/library/alpine","version":"3.24.2"} {"name":"gha-cosign-version","key":"https://github.com/sigstore/cosign.git","version":"v3.1.3"} {"name":"gha-golang-matrix","key":"golang-matrix","version":"[\"1.26\", \"1.27\"]"} {"name":"gha-golang-release","key":"golang-latest","version":"1.27"} -{"name":"gha-syft-version","key":"docker.io/anchore/syft","version":"v1.51.1"} +{"name":"gha-syft-version","key":"docker.io/anchore/syft","version":"v1.55.0"} {"name":"gha-uses-commit","key":"https://github.com/actions/checkout.git:v7.0.1","version":"3d3c42e5aac5ba805825da76410c181273ba90b1"} {"name":"gha-uses-commit","key":"https://github.com/actions/setup-go.git:v7.0.0","version":"b7ad1dad31e06c5925ef5d2fc7ad053ef454303e"} {"name":"gha-uses-commit","key":"https://github.com/actions/stale.git:v11.0.0","version":"4391f3da665fdf50b6810c1a66712fb9ba21aa93"} -{"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v7.0.1","version":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"} -{"name":"gha-uses-commit","key":"https://github.com/anchore/sbom-action.git:v0.24.2","version":"3ad7283483fc7af8ff2b4ea19663c2d5ca935e26"} -{"name":"gha-uses-commit","key":"https://github.com/docker/build-push-action.git:v7.3.0","version":"53b7df96c91f9c12dcc8a07bcb9ccacbed38856a"} +{"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v7.0.2","version":"cf430e030ddbb5b0abf93d22962f4752f3646cd9"} +{"name":"gha-uses-commit","key":"https://github.com/anchore/sbom-action.git:v0.24.3","version":"66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c"} +{"name":"gha-uses-commit","key":"https://github.com/docker/build-push-action.git:v7.4.0","version":"c3c9e263c25d99ce0380d002d59b67737d91b0dc"} {"name":"gha-uses-commit","key":"https://github.com/docker/login-action.git:v4.6.0","version":"dbcb813823bdd20940b903addbd779551569679f"} -{"name":"gha-uses-commit","key":"https://github.com/docker/setup-buildx-action.git:v4.3.0","version":"37fe631027851001ddb9b187196cc803df7f5f0e"} -{"name":"gha-uses-commit","key":"https://github.com/regclient/actions.git:main","version":"f9ceff9bbbc63cd1008e60cec2b27627eedc7322"} +{"name":"gha-uses-commit","key":"https://github.com/docker/setup-buildx-action.git:v4.4.1","version":"f87e5991a6d7451dcb8d9637bfbc97413f497069"} +{"name":"gha-uses-commit","key":"https://github.com/regclient/actions.git:main","version":"dd58ad94f76adb73d8ac1bf75ed25f01545d5b32"} {"name":"gha-uses-commit","key":"https://github.com/sigstore/cosign-installer.git:v4.1.2","version":"6f9f17788090df1f26f669e9d70d6ae9567deba6"} {"name":"gha-uses-commit","key":"https://github.com/softprops/action-gh-release.git:v3.0.3","version":"efb35369e0ad2afab669f228072c1b0d510eae64"} {"name":"gha-uses-semver","key":"https://github.com/actions/checkout.git","version":"v7.0.1"} {"name":"gha-uses-semver","key":"https://github.com/actions/setup-go.git","version":"v7.0.0"} {"name":"gha-uses-semver","key":"https://github.com/actions/stale.git","version":"v11.0.0"} -{"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v7.0.1"} -{"name":"gha-uses-semver","key":"https://github.com/anchore/sbom-action.git","version":"v0.24.2"} -{"name":"gha-uses-semver","key":"https://github.com/docker/build-push-action.git","version":"v7.3.0"} +{"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v7.0.2"} +{"name":"gha-uses-semver","key":"https://github.com/anchore/sbom-action.git","version":"v0.24.3"} +{"name":"gha-uses-semver","key":"https://github.com/docker/build-push-action.git","version":"v7.4.0"} {"name":"gha-uses-semver","key":"https://github.com/docker/login-action.git","version":"v4.6.0"} -{"name":"gha-uses-semver","key":"https://github.com/docker/setup-buildx-action.git","version":"v4.3.0"} +{"name":"gha-uses-semver","key":"https://github.com/docker/setup-buildx-action.git","version":"v4.4.1"} {"name":"gha-uses-semver","key":"https://github.com/sigstore/cosign-installer.git","version":"v4.1.2"} {"name":"gha-uses-semver","key":"https://github.com/softprops/action-gh-release.git","version":"v3.0.3"} {"name":"go-mod-golang-release","key":"golang-oldest","version":"1.26.0"} -{"name":"makefile-ci-distribution","key":"docker.io/library/registry","version":"3.1.1"} -{"name":"makefile-ci-zot","key":"ghcr.io/project-zot/zot-linux-amd64","version":"v2.1.20"} -{"name":"makefile-go-vulncheck","key":"https://go.googlesource.com/vuln.git","version":"v1.7.0"} -{"name":"makefile-gofumpt","key":"https://github.com/mvdan/gofumpt.git","version":"v0.11.0"} +{"name":"makefile-ci-distribution","key":"docker.io/library/registry","version":"3.1.2"} +{"name":"makefile-ci-zot","key":"ghcr.io/project-zot/zot-linux-amd64","version":"v2.1.22"} +{"name":"makefile-go-vulncheck","key":"https://go.googlesource.com/vuln.git","version":"v1.9.0"} +{"name":"makefile-gofumpt","key":"https://github.com/mvdan/gofumpt.git","version":"v0.12.0"} {"name":"makefile-gomajor","key":"https://github.com/icholy/gomajor.git","version":"v0.15.0"} {"name":"makefile-gosec","key":"https://github.com/securego/gosec.git","version":"v2.29.0"} -{"name":"makefile-markdown-lint","key":"docker.io/davidanson/markdownlint-cli2","version":"v0.23.2"} -{"name":"makefile-osv-scanner","key":"https://github.com/google/osv-scanner.git","version":"v2.5.1"} -{"name":"makefile-staticcheck","key":"https://github.com/dominikh/go-tools.git","version":"v0.8.1"} -{"name":"makefile-syft-container-digest","key":"anchore/syft:v1.51.1","version":"sha256:95fe0835e5bebc6f8b1f8acef68d47d63d594ef4c0f25c097ff853b23cbac74c"} -{"name":"makefile-syft-container-tag","key":"anchore/syft","version":"v1.51.1"} -{"name":"makefile-syft-version","key":"docker.io/anchore/syft","version":"v1.51.1"} -{"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.27.0"} -{"name":"shell-alpine-digest","key":"docker.io/library/alpine:3.24.1","version":"sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b"} +{"name":"makefile-markdown-lint","key":"docker.io/davidanson/markdownlint-cli2","version":"v0.23.3"} +{"name":"makefile-osv-scanner","key":"https://github.com/google/osv-scanner.git","version":"v2.7.0"} +{"name":"makefile-staticcheck","key":"https://github.com/dominikh/go-tools.git","version":"v0.8.2"} +{"name":"makefile-syft-container-digest","key":"anchore/syft:v1.55.0","version":"sha256:4cc92b64ca74ffca4c94d4c8fcc01f217731375300be14d0b6eeb2e82eaa110a"} +{"name":"makefile-syft-container-tag","key":"anchore/syft","version":"v1.55.0"} +{"name":"makefile-syft-version","key":"docker.io/anchore/syft","version":"v1.55.0"} +{"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.27.3"} +{"name":"shell-alpine-digest","key":"docker.io/library/alpine:3.24.2","version":"sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6"} {"name":"shell-alpine-tag-base","key":"docker.io/library/alpine","version":"3"} -{"name":"shell-alpine-tag-comment","key":"docker.io/library/alpine","version":"3.24.1"} +{"name":"shell-alpine-tag-comment","key":"docker.io/library/alpine","version":"3.24.2"} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/Makefile new/regclient-0.11.7/Makefile --- old/regclient-0.11.6/Makefile 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/Makefile 2026-10-21 02:20:23.000000000 +0200 @@ -49,25 +49,25 @@ -u "$(shell id -u):$(shell id -g)" \ $(VER_BUMP_CONTAINER) endif -MARKDOWN_LINT_VER?=v0.23.2 -GOFUMPT_VER?=v0.11.0 +MARKDOWN_LINT_VER?=v0.23.3 +GOFUMPT_VER?=v0.12.0 GOMAJOR_VER?=v0.15.0 GOSEC_VER?=v2.29.0 -GO_VULNCHECK_VER?=v1.7.0 -OSV_SCANNER_VER?=v2.5.1 +GO_VULNCHECK_VER?=v1.9.0 +OSV_SCANNER_VER?=v2.7.0 SYFT?=$(shell command -v syft 2>/dev/null) SYFT_CMD_VER:=$(shell [ -x "$(SYFT)" ] && echo "v$$($(SYFT) version | awk '/^Version: / {print $$2}')" || echo "0") -SYFT_VERSION?=v1.51.1 -SYFT_CONTAINER?=anchore/syft:v1.51.1@sha256:95fe0835e5bebc6f8b1f8acef68d47d63d594ef4c0f25c097ff853b23cbac74c +SYFT_VERSION?=v1.55.0 +SYFT_CONTAINER?=anchore/syft:v1.55.0@sha256:4cc92b64ca74ffca4c94d4c8fcc01f217731375300be14d0b6eeb2e82eaa110a ifneq "$(SYFT_CMD_VER)" "$(SYFT_VERSION)" SYFT=docker run --rm \ -v "$(shell pwd)/:$(shell pwd)/" -w "$(shell pwd)" \ -u "$(shell id -u):$(shell id -g)" \ $(SYFT_CONTAINER) endif -STATICCHECK_VER?=v0.8.1 -CI_DISTRIBUTION_VER?=3.1.1 -CI_ZOT_VER?=v2.1.20 +STATICCHECK_VER?=v0.8.2 +CI_DISTRIBUTION_VER?=3.1.2 +CI_ZOT_VER?=v2.1.22 .PHONY: .FORCE .FORCE: @@ -118,10 +118,11 @@ exit 1; \ fi -# excluding types/platform pending resultion to https://github.com/securego/gosec/issues/1116 +# excluding types/platform, see https://github.com/securego/gosec/issues/1116 .PHONY: lint-gosec lint-gosec: $(GOPATH)/bin/gosec .FORCE ## Run gosec - $(GOPATH)/bin/gosec -terse -exclude-dir types/platform ./... + # $(GOPATH)/bin/gosec -terse -exclude-dir types/platform ./... + echo "gosec is disabled pending a new release: https://github.com/securego/gosec/issues/1774"; .PHONY: lint-md lint-md: .FORCE ## Run linting for markdown diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/RELEASE.md new/regclient-0.11.7/RELEASE.md --- old/regclient-0.11.6/RELEASE.md 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/RELEASE.md 2026-10-21 02:20:23.000000000 +0200 @@ -1,5 +1,17 @@ # Release Notes +## Release v0.11.7 + +Security: + +- Upgrading Go fixes CVE-2026-111943 ([PR 1140][pr-1140]) + +Contributors: + +- @sudo-bmitch + +[pr-1140]: https://github.com/regclient/regclient/pull/1140 + ## Release v0.11.6 Features: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/build/Dockerfile.regbot new/regclient-0.11.7/build/Dockerfile.regbot --- old/regclient-0.11.6/build/Dockerfile.regbot 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/build/Dockerfile.regbot 2026-10-21 02:20:23.000000000 +0200 @@ -1,6 +1,6 @@ ARG REGISTRY=docker.io -ARG ALPINE_VER=3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b -ARG GO_VER=1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc +ARG ALPINE_VER=3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +ARG GO_VER=1.27.3-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd ARG ECR_HELPER_VER=v0.12.0 ARG GCR_HELPER_VER=v2.2.1 ARG LUNAJSON_COMMIT=e3a9666eb1275741e887e29926b144f8daee3bef diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/build/Dockerfile.regbot.buildkit new/regclient-0.11.7/build/Dockerfile.regbot.buildkit --- old/regclient-0.11.6/build/Dockerfile.regbot.buildkit 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/build/Dockerfile.regbot.buildkit 2026-10-21 02:20:23.000000000 +0200 @@ -1,8 +1,8 @@ # syntax=docker/dockerfile:1 ARG REGISTRY=docker.io -ARG ALPINE_VER=3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b -ARG GO_VER=1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc +ARG ALPINE_VER=3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +ARG GO_VER=1.27.3-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd ARG ECR_HELPER_VER=v0.12.0 ARG GCR_HELPER_VER=v2.2.1 ARG LUNAJSON_COMMIT=e3a9666eb1275741e887e29926b144f8daee3bef diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/build/Dockerfile.regctl new/regclient-0.11.7/build/Dockerfile.regctl --- old/regclient-0.11.6/build/Dockerfile.regctl 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/build/Dockerfile.regctl 2026-10-21 02:20:23.000000000 +0200 @@ -1,6 +1,6 @@ ARG REGISTRY=docker.io -ARG ALPINE_VER=3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b -ARG GO_VER=1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc +ARG ALPINE_VER=3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +ARG GO_VER=1.27.3-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd ARG ECR_HELPER_VER=v0.12.0 ARG GCR_HELPER_VER=v2.2.1 ARG VCS_VERSION=(devel) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/build/Dockerfile.regctl.buildkit new/regclient-0.11.7/build/Dockerfile.regctl.buildkit --- old/regclient-0.11.6/build/Dockerfile.regctl.buildkit 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/build/Dockerfile.regctl.buildkit 2026-10-21 02:20:23.000000000 +0200 @@ -1,8 +1,8 @@ # syntax=docker/dockerfile:1 ARG REGISTRY=docker.io -ARG ALPINE_VER=3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b -ARG GO_VER=1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc +ARG ALPINE_VER=3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +ARG GO_VER=1.27.3-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd ARG ECR_HELPER_VER=v0.12.0 ARG GCR_HELPER_VER=v2.2.1 ARG VCS_VERSION=(devel) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/build/Dockerfile.regsync new/regclient-0.11.7/build/Dockerfile.regsync --- old/regclient-0.11.6/build/Dockerfile.regsync 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/build/Dockerfile.regsync 2026-10-21 02:20:23.000000000 +0200 @@ -1,6 +1,6 @@ ARG REGISTRY=docker.io -ARG ALPINE_VER=3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b -ARG GO_VER=1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc +ARG ALPINE_VER=3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +ARG GO_VER=1.27.3-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd ARG ECR_HELPER_VER=v0.12.0 ARG GCR_HELPER_VER=v2.2.1 ARG VCS_VERSION=(devel) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/build/Dockerfile.regsync.buildkit new/regclient-0.11.7/build/Dockerfile.regsync.buildkit --- old/regclient-0.11.6/build/Dockerfile.regsync.buildkit 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/build/Dockerfile.regsync.buildkit 2026-10-21 02:20:23.000000000 +0200 @@ -1,8 +1,8 @@ # syntax=docker/dockerfile:1 ARG REGISTRY=docker.io -ARG ALPINE_VER=3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b -ARG GO_VER=1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc +ARG ALPINE_VER=3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +ARG GO_VER=1.27.3-alpine@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd ARG ECR_HELPER_VER=v0.12.0 ARG GCR_HELPER_VER=v2.2.1 ARG VCS_VERSION=(devel) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/build/oci-image.sh new/regclient-0.11.7/build/oci-image.sh --- old/regclient-0.11.6/build/oci-image.sh 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/build/oci-image.sh 2026-10-21 02:20:23.000000000 +0200 @@ -21,7 +21,7 @@ release="scratch" push_tags="" ALPINE_NAME="alpine:3" -ALPINE_DIGEST="sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b" # 3.24.1 +ALPINE_DIGEST="sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6" # 3.24.2 # CLI options to override image, platform, base digest, and comma separated list of tags to push opt_c=0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/go.mod new/regclient-0.11.7/go.mod --- old/regclient-0.11.6/go.mod 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/go.mod 2026-10-21 02:20:23.000000000 +0200 @@ -5,21 +5,21 @@ require ( github.com/docker/libtrust v0.0.0-20160708172513-aabc10ec26b7 github.com/goccy/go-yaml v1.19.2 - github.com/klauspost/compress v1.19.2 + github.com/klauspost/compress v1.20.3 github.com/olareg/olareg v0.2.2 github.com/opencontainers/go-digest v1.0.0 github.com/robfig/cron/v3 v3.0.1 github.com/sirupsen/logrus v1.10.2 github.com/spf13/cobra v1.10.2 - github.com/ulikunitz/xz v0.5.16 + github.com/ulikunitz/xz v0.5.17 github.com/yuin/gopher-lua v1.1.2 - golang.org/x/sys v0.47.0 - golang.org/x/term v0.45.0 + golang.org/x/sys v0.49.0 + golang.org/x/term v0.47.0 ) require ( github.com/inconshreveable/mousetrap v1.1.0 // indirect github.com/spf13/pflag v1.0.10 // indirect github.com/sudo-bmitch/oci-digest v0.1.2 // indirect - golang.org/x/crypto v0.55.0 // indirect + golang.org/x/crypto v0.58.0 // indirect ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.6/go.sum new/regclient-0.11.7/go.sum --- old/regclient-0.11.6/go.sum 2026-09-02 16:54:59.000000000 +0200 +++ new/regclient-0.11.7/go.sum 2026-10-21 02:20:23.000000000 +0200 @@ -5,8 +5,8 @@ github.com/goccy/go-yaml v1.19.2/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA= github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8= github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw= -github.com/klauspost/compress v1.19.2 h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8= -github.com/klauspost/compress v1.19.2/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ= +github.com/klauspost/compress v1.20.3 h1:zWNoFqq/lSuYQRim3dUXlXeA0IqwuZGicdG5ZTfY5j4= +github.com/klauspost/compress v1.20.3/go.mod h1:LUdAzn7YLVvxLpc7y3V1m40wESHTgc1422pwwBSKYuI= github.com/olareg/olareg v0.2.2 h1:H29V0+V2bIW4nRF3B1QAvooXts5eYS9dmQsD/chrBf0= github.com/olareg/olareg v0.2.2/go.mod h1:NxhWTjHaFU51m1+kwi2MZnakJlITH0s1tzdzCT3dXRQ= github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U= @@ -25,17 +25,17 @@ github.com/stretchr/testify v1.12.1/go.mod h1:MDEgiDPPsNp5cuIrHPPCyornHKgEVbtFUmoNlxoYthg= github.com/sudo-bmitch/oci-digest v0.1.2 h1:are0qzWTsFZGZ3Uvdi9OSztJszSWaab6iqquMEEB7rw= github.com/sudo-bmitch/oci-digest v0.1.2/go.mod h1:SH6l5OIe0islKBZBedjiPOeET/0QwGL+/oYfQt51uQo= -github.com/ulikunitz/xz v0.5.16 h1:ld6NyySjx5lowVKwJvMRLnW5nxKX/xnpSiFYZ/Lxur0= -github.com/ulikunitz/xz v0.5.16/go.mod h1:H9Rt/W6/Qj27PGauhQc6nfCDy7vHpzsOThBSaYDoEhw= +github.com/ulikunitz/xz v0.5.17 h1:flR0y/x1hgM8EGV1AW3Xll6T413G0glV8UfBwR617V4= +github.com/ulikunitz/xz v0.5.17/go.mod h1:H9Rt/W6/Qj27PGauhQc6nfCDy7vHpzsOThBSaYDoEhw= github.com/yuin/gopher-lua v1.1.2 h1:yF/FjE3hD65tBbt0VXLE13HWS9h34fdzJmrWRXwobGA= github.com/yuin/gopher-lua v1.1.2/go.mod h1:7aRmXIWl37SqRf0koeyylBEzJ+aPt8A+mmkQ4f1ntR8= go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw= go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg= -golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M= -golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis= -golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= -golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= -golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0= -golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w= +golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54= +golang.org/x/crypto v0.58.0/go.mod h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w= +golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA= +golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= +golang.org/x/term v0.47.0 h1:cpyOwQkr2Nzxe2p6KnrTG7Ei2wtzjsuSjhpXXepZ/BM= +golang.org/x/term v0.47.0/go.mod h1:efAfAuG6RKABvg1ArGebRkvX6LXul14SM67o2e4mUCY= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= ++++++ regclient.obsinfo ++++++ --- /var/tmp/diff_new_pack.Kn5ias/_old 2026-10-21 20:59:43.321603931 +0200 +++ /var/tmp/diff_new_pack.Kn5ias/_new 2026-10-21 20:59:43.333604434 +0200 @@ -1,5 +1,5 @@ name: regclient -version: 0.11.6 -mtime: 1788360899 -commit: c2f83e99bd90e92e40d08307acf13138321a4a30 +version: 0.11.7 +mtime: 1792542023 +commit: 36abda84830dae07db00bf9e5cec95d97b78222a ++++++ vendor.tar.gz ++++++ ++++ 23634 lines of diff (skipped)
