Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gitoxide for openSUSE:Factory checked in at 2026-10-23 20:29:34 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gitoxide (Old) and /work/SRC/openSUSE:Factory/.gitoxide.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gitoxide" Fri Oct 23 20:29:34 2026 rev:15 rq:1392008 version:0.61.0 Changes: -------- --- /work/SRC/openSUSE:Factory/gitoxide/gitoxide.changes 2026-10-09 21:46:14.676492376 +0200 +++ /work/SRC/openSUSE:Factory/.gitoxide.new.2252680/gitoxide.changes 2026-10-23 20:30:54.538150676 +0200 @@ -1,0 +2,23 @@ +Fri Oct 23 08:34:06 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 0.61.0: + * Vendored TLS crates refreshed past their advisory floors: rustls + 0.23.46 (RUSTSEC-2026-0346 through RUSTSEC-2026-0349), + rustls-webpki 0.103.16 (RUSTSEC-2026-0382) and + webpki-root-certs 1.0.11 (RUSTSEC-2026-0383, CVE-2026-111943 + alias); the shipped binaries use the curl-openssl backend and do + not link these crates (reqwest backend only), so this records new + vendored floors, not a fix to gix/ein + * Plumbing crates now use a standard std::error::Error + compatible error type, with more consistent error + handling and greatly improved tracing of all commands + * Add gix worktree locking with a lock override that + preserves changes, and separate linked worktree + registration from checkout +- Drop gix-utils-prodash-feature.patch, restored upstream + in gix-utils 0.5.1. +- Refresh the vendored dependencies. The linked graph still + carries MPL-2.0 only (uluru, option-ext); the License tag + is unchanged. + +------------------------------------------------------------------- Old: ---- gitoxide-0.60.0.tar.gz gix-utils-prodash-feature.patch New: ---- gitoxide-0.61.0.tar.gz ----------(Old B)---------- Old: registration from checkout - Drop gix-utils-prodash-feature.patch, restored upstream in gix-utils 0.5.1. ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gitoxide.spec ++++++ --- /var/tmp/diff_new_pack.3buBOk/_old 2026-10-23 20:30:56.553234876 +0200 +++ /var/tmp/diff_new_pack.3buBOk/_new 2026-10-23 20:30:56.555234959 +0200 @@ -17,13 +17,13 @@ Name: gitoxide -Version: 0.60.0 +Version: 0.61.0 Release: 0 Summary: An idiomatic & safe pure-Rust implementation of Git # Legal-Review-Notice: gitoxide itself is "Apache-2.0 OR MIT", but the # binaries statically link the vendored Rust dependencies. Derived on this # re-vendor with "cargo tree --offline -p gitoxide -e normal" over the -# vendored tree (515 crates, 260 in the linked graph): the only copyleft +# vendored tree (588 crates, 257 in the linked graph): the only copyleft # licence in the graph is MPL-2.0, from two crates - uluru, an LRU cache # pulled in via gix-pack (itself reached through gitoxide-core, gix and # gix-odb), and option-ext, reached through directories and dirs-sys, @@ -38,8 +38,6 @@ URL: https://github.com/GitoxideLabs/gitoxide Source0: https://github.com/GitoxideLabs/gitoxide/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz Source1: vendor.tar.zst -# PATCH-FIX-UPSTREAM gix-utils-prodash-feature.patch [email protected] -- restore the explicit prodash feature gix-utils 0.5.0 dropped in its dep: migration; workspace-wide cargo metadata --features (as run by cargo-auditable) requires it -Patch0: gix-utils-prodash-feature.patch BuildRequires: cargo-packaging BuildRequires: cmake BuildRequires: pkgconfig ++++++ gitoxide-0.60.0.tar.gz -> gitoxide-0.61.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/gitoxide/gitoxide-0.60.0.tar.gz /work/SRC/openSUSE:Factory/.gitoxide.new.2252680/gitoxide-0.61.0.tar.gz differ: char 13, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/gitoxide/vendor.tar.zst /work/SRC/openSUSE:Factory/.gitoxide.new.2252680/vendor.tar.zst differ: char 7, line 1
