Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gotosocial for openSUSE:Factory checked in at 2026-10-22 15:50:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gotosocial (Old) and /work/SRC/openSUSE:Factory/.gotosocial.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gotosocial" Thu Oct 22 15:50:42 2026 rev:21 rq:1386984 version:0.22.3 Changes: -------- --- /work/SRC/openSUSE:Factory/gotosocial/gotosocial.changes 2026-10-10 14:59:43.717856040 +0200 +++ /work/SRC/openSUSE:Factory/.gotosocial.new.2252680/gotosocial.changes 2026-10-22 15:54:36.700956839 +0200 @@ -1,0 +2,11 @@ +Wed Oct 21 17:59:03 UTC 2026 - Flann van der Eik <[email protected]> + +- Update to version 0.22.3: + * Bump required Go build version to v1.26.10 to mitigate + CVE-2026-111943 by distrusting select intermediary authorities + so server admins (and docker users) don't have to update + ca-certificates themselves (see gh#golang/go#82348). + * Fix an issue in the dereferencer where remote accounts could + masquerade as other remote accounts with sneaky URL shenanigans. + +------------------------------------------------------------------- Old: ---- gotosocial-0.22.2-vendor.tar.xz gotosocial-0.22.2.tar.gz New: ---- gotosocial-0.22.3-vendor.tar.xz gotosocial-0.22.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gotosocial.spec ++++++ --- /var/tmp/diff_new_pack.IogSCR/_old 2026-10-22 15:54:40.298107621 +0200 +++ /var/tmp/diff_new_pack.IogSCR/_new 2026-10-22 15:54:40.301107747 +0200 @@ -17,7 +17,7 @@ Name: gotosocial -Version: 0.22.2 +Version: 0.22.3 Release: 0 Summary: An ActivityPub social network server, written in Golang License: AGPL-3.0-only @@ -36,7 +36,7 @@ BuildRequires: sysuser-shadow BuildRequires: sysuser-tools BuildRequires: yarn -BuildRequires: golang(API) >= 1.25.0 +BuildRequires: golang(API) >= 1.26.10 BuildRequires: pkgconfig(systemd) %{?systemd_ordering} %sysusers_requires ++++++ gotosocial-0.22.2-vendor.tar.xz -> gotosocial-0.22.3-vendor.tar.xz ++++++ /work/SRC/openSUSE:Factory/gotosocial/gotosocial-0.22.2-vendor.tar.xz /work/SRC/openSUSE:Factory/.gotosocial.new.2252680/gotosocial-0.22.3-vendor.tar.xz differ: char 15, line 1 ++++++ gotosocial-0.22.2.tar.gz -> gotosocial-0.22.3.tar.gz ++++++ /work/SRC/openSUSE:Factory/gotosocial/gotosocial-0.22.2.tar.gz /work/SRC/openSUSE:Factory/.gotosocial.new.2252680/gotosocial-0.22.3.tar.gz differ: char 26, line 1
