Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-altcha for openSUSE:Factory checked in at 2026-10-26 10:00:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-altcha (Old) and /work/SRC/openSUSE:Factory/.python-altcha.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-altcha" Mon Oct 26 10:00:22 2026 rev:9 rq:1392394 version:2.3.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-altcha/python-altcha.changes 2026-08-05 17:50:36.210487048 +0200 +++ /work/SRC/openSUSE:Factory/.python-altcha.new.2252680/python-altcha.changes 2026-10-26 10:01:14.575835010 +0100 @@ -1,0 +2,19 @@ +Sun Oct 25 11:58:31 UTC 2026 - Dirk Müller <[email protected]> + +- update to 2.3.0: + * Aligns the v2 API (`altcha.v2`) with the reference JavaScript + implementation (altcha-lib) and hardens verification + against malformed payloads. + * Challenges signed by earlier versions may fail verification + after upgrading if their `data` contains `None`, floats, + integer-like keys, or integers above 2^53, or + if they use a non-standard algorithm string (e.g. + `'sha-512'`, `'SHA-1'`). Other challenges keep the same + signature and derived key. + * `counter_mode` option (`'uint32'` default, or `'string'`) for + `create_challenge`, `solve_challenge` and `verify_solution`, + matching altcha-lib's `counterMode`. + * `'string'` encodes the counter as decimal digits, as in + v1-compatible challenges. + +------------------------------------------------------------------- Old: ---- altcha-2.1.0.tar.gz New: ---- altcha-2.3.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-altcha.spec ++++++ --- /var/tmp/diff_new_pack.wgH8rU/_old 2026-10-26 10:01:15.333866813 +0100 +++ /var/tmp/diff_new_pack.wgH8rU/_new 2026-10-26 10:01:15.337866981 +0100 @@ -17,7 +17,7 @@ Name: python-altcha -Version: 2.1.0 +Version: 2.3.0 Release: 0 Summary: A library for creating and verifying challenges for ALTCHA License: MIT ++++++ altcha-2.1.0.tar.gz -> altcha-2.3.0.tar.gz ++++++ ++++ 1710 lines of diff (skipped)
