Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kyverno for openSUSE:Factory checked in at 2026-10-21 20:58:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kyverno (Old) and /work/SRC/openSUSE:Factory/.kyverno.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kyverno" Wed Oct 21 20:58:18 2026 rev:64 rq:1386682 version:1.19.2 Changes: -------- --- /work/SRC/openSUSE:Factory/kyverno/kyverno.changes 2026-09-19 22:24:01.767828857 +0200 +++ /work/SRC/openSUSE:Factory/.kyverno.new.2252680/kyverno.changes 2026-10-21 20:59:59.605286668 +0200 @@ -1,0 +2,74 @@ +Wed Oct 21 05:06:12 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.19.2: + * chore: pass GORELEASER_CURRENT_TAG to the goreleaser (#18124) + * [release-1.19] fix: preserve legacy generation scope and + ownership (#17937) + * test: expect the generation label protection webhook in + chainsaw asserts (#18039) + * fix: repair the post-merge Tests workflow on main (#17761) + (#18035) + * fix(deps): backport CVE-2026-78663 fix to release-1.19 (#18025) + * fix(deps): update x/net for CVE-2026-97032 (#18027) + * fix(pss): support user namespace pods in validate.podSecurity + (#17913) + * fix: preserve controller-owned generation labels (#17938) + (#18033) + * fix(security): cherry-pick N4K #1077 and #1164 (namespace + clamp) to release-1.19 (#18021) + * fix(cel): bound the cost of CEL policy expression evaluation + (#17989) + * fix(vap): apply the runtime PolicyException gates in the + admission-policy generator (#17987) + * fix(security): harden cherry-pick workflows against script + injection (#18012) (#18014) + * [1.19] fix(security): API path validation, apiCall + canonicalization, mpol/cleanup namespace confinement (#17984) + * fix(imageverify): verify at admission instead of trusting + prior-stage metadata (#17994) + * fix(engine): bound wildcard matching and variable substitution + (#17991) + * fix(imageverify): bound the reads image verification makes from + a registry (#17996) + * fix(deps): bump go to 1.26.9 to fix CVE-2026-97031 (#17976) + * perf(cel): hoist the request-map build in the ivpol engine + (Cherry-pick #17585) (#17872) + * test(cli): cover CRD-aware policy test mapping (#17808) + (#17816) + * feat: support additionalExtensions for keyless signing in the + ivpol (#17813) (#17814) + * fix: verify annotations properly for cosign v2 and v3 (#17794) + (#17798) + * fix(mpol): evaluate matchConditions during background + mutateExisting evaluation (#17433) (#17782) + * fix(background): resolve generate triggers by name instead of + listing the namespace (#17702) (#17779) + * fix(cli): preserve GeneratingPolicy skips in test results + (#17388) (#17749) + * feat(charts): support Pod user namespaces in PSS policies + (#17693) (#17746) + * fix: preserve MutatingPolicy reinvocation policy (#17324) + (#17745) + * fix(webhook): enforce exceptionNamespace for CEL + PolicyExceptions (#17479) (#17651) + * fix(cli): resolve match constraints for namespaced validating + policies (#17608) (#17612) + * chore(deps): bump kyverno sdk version to the latest commit + (#17616) (#17619) + * fix: autogen fine-grained namespaced image policies (#16840) + (#17614) + * fix(webhook): avoid image validating policy webhook name + collisions (#17558) (#17617) + * fix(deleting): process namespaced resources with pagination + (#17263) (#17603) + * test(ci): CEL admission-path allocation-regression gate + (post-merge) (#17573) (#17589) + * perf(cel): build the request activation once per admission + request (#17572) (#17588) + * ci: record failed job instances in workflow failure issues + (#16889) (#17587) + * perf: reduce engine context checkpoint copy cost (#17565) + * feat: Add filter field to imageExtractors for wildcard array + filtering (#16269) + +------------------------------------------------------------------- Old: ---- kyverno-1.19.1.obscpio New: ---- kyverno-1.19.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kyverno.spec ++++++ --- /var/tmp/diff_new_pack.S5HWBR/_old 2026-10-21 21:00:03.224438410 +0200 +++ /var/tmp/diff_new_pack.S5HWBR/_new 2026-10-21 21:00:03.225438452 +0200 @@ -17,7 +17,7 @@ Name: kyverno -Version: 1.19.1 +Version: 1.19.2 Release: 0 Summary: CLI and kubectl plugin for Kyverno License: Apache-2.0 @@ -26,7 +26,7 @@ Source1: vendor.tar.gz BuildRequires: bash-completion BuildRequires: fish -BuildRequires: go1.26 >= 1.26.6 +BuildRequires: go1.26 >= 1.26.9 BuildRequires: zsh %description ++++++ _service ++++++ --- /var/tmp/diff_new_pack.S5HWBR/_old 2026-10-21 21:00:03.255439710 +0200 +++ /var/tmp/diff_new_pack.S5HWBR/_new 2026-10-21 21:00:03.258439836 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/kyverno/kyverno.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v1.19.1</param> + <param name="revision">refs/tags/v1.19.2</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.S5HWBR/_old 2026-10-21 21:00:03.292441261 +0200 +++ /var/tmp/diff_new_pack.S5HWBR/_new 2026-10-21 21:00:03.298441513 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/kyverno/kyverno</param> <param name="changesrevision">ec14520a11cc25432482bfc0baa6a61d3c309524</param></service><service name="tar_scm"> <param name="url">https://github.com/kyverno/kyverno.git</param> - <param name="changesrevision">40ec788d48bb28d83dbf85538e962a59db9d45c6</param></service></servicedata> + <param name="changesrevision">e63308f1e16c05cd009ac4864be6ec25c66b49be</param></service></servicedata> (No newline at EOF) ++++++ kyverno-1.19.1.obscpio -> kyverno-1.19.2.obscpio ++++++ ++++ 50034 lines of diff (skipped) ++++++ kyverno.obsinfo ++++++ --- /var/tmp/diff_new_pack.S5HWBR/_old 2026-10-21 21:00:12.802840010 +0200 +++ /var/tmp/diff_new_pack.S5HWBR/_new 2026-10-21 21:00:12.816840597 +0200 @@ -1,5 +1,5 @@ name: kyverno -version: 1.19.1 -mtime: 1789017621 -commit: 40ec788d48bb28d83dbf85538e962a59db9d45c6 +version: 1.19.2 +mtime: 1792534429 +commit: e63308f1e16c05cd009ac4864be6ec25c66b49be ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/kyverno/vendor.tar.gz /work/SRC/openSUSE:Factory/.kyverno.new.2252680/vendor.tar.gz differ: char 13, line 1
