Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kumactl for openSUSE:Factory checked in at 2026-10-27 16:50:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kumactl (Old) and /work/SRC/openSUSE:Factory/.kumactl.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kumactl" Tue Oct 27 16:50:29 2026 rev:35 rq:1392902 version:3.0.0 Changes: -------- --- /work/SRC/openSUSE:Factory/kumactl/kumactl.changes 2026-10-14 18:36:59.745602347 +0200 +++ /work/SRC/openSUSE:Factory/.kumactl.new.2252680/kumactl.changes 2026-10-27 16:50:49.416167712 +0100 @@ -1,0 +2,58 @@ +Sat Oct 24 19:39:53 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 3.0.0 (major release, see upstream UPGRADE.md + for the full migration notes): + * Go module path moved to github.com/kumahq/kuma/v3, upgrade + kumactl together with the control plane + * Remove long-deprecated kumactl flag aliases: --config-file + and --kuma-dp-uid (install transparent-proxy), --config-dump + (inspect dataplane) and --type (generate dataplane-token) + * kumactl inspect <policy> uses the current policy inspect API + with paginated dataplane metadata output + * kumactl get meshes no longer prints the mTLS column, the + Mesh.mtls API is removed + * kumactl generate zone-token no longer accepts --scope ingress + or --scope egress, zone proxies take dataplane tokens + * ZoneIngress/ZoneEgress resources with their kumactl + get/inspect subcommands are gone, the matching kumactl + install control-plane flags are removed too + * kumactl export --profile federation strips + control-plane-owned labels, re-export older output before + applying it to the global control plane + * kumactl apply rejects resources with fields outside the + schema, and warns on control-plane/CLI version mismatch + * Envoy bumped to 1.39.4 + * Spec cleanup: drop obsolete Group: tags (spec-cleaner) + * None of the open kumactl VUL bugs affect the shipped tree + (vendored versions checked against each published fix): + * CVE-2024-45337 (boo#1234570): golang.org/x/crypto is 0.58.0, + above the 0.31.0 fix + * CVE-2024-45338 (boo#1235370): golang.org/x/net is 0.61.0, + above the 0.33.0 fix + * CVE-2024-51744 (boo#1232986): golang-jwt/jwt/v4 is not + vendored, only jwt/v5 5.3.1 is shipped + * CVE-2025-22869 (boo#1239431): golang.org/x/crypto is 0.58.0, + above the 0.35.0 fix + * CVE-2025-22872 (boo#1241849): golang.org/x/net is 0.61.0, + above the 0.38.0 fix + * CVE-2025-30204 (boo#1240478): golang-jwt/jwt/v4 is not + vendored, shipped jwt/v5 5.3.1 is above the 5.2.2 fix + * CVE-2025-47911 (boo#1251492): golang.org/x/net is 0.61.0, + above the 0.45.0 fix + * CVE-2025-47913 (boo#1253599): golang.org/x/crypto is 0.58.0, + above the 0.43.0 fix + * CVE-2025-47914 (boo#1254076): golang.org/x/crypto is 0.58.0, + above the 0.45.0 fix + * CVE-2025-58181 (boo#1253921): golang.org/x/crypto is 0.58.0, + above the 0.45.0 fix + * CVE-2025-58190 (boo#1251697): golang.org/x/net is 0.61.0, + above the 0.45.0 fix + * CVE-2026-26958 (boo#1258590): filippo.io/edwards25519 is + 1.1.1, matching the 1.1.1 fix + * CVE-2026-33186 (boo#1260300): google.golang.org/grpc is + 1.84.0, above the 1.79.3 fix + * CVE-2026-41178 (boo#1276626): go.opentelemetry.io/otel is + 1.47.0, above the 1.44.0 fix + + +------------------------------------------------------------------- Old: ---- kumactl-2.14.6.obscpio New: ---- kumactl-3.0.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kumactl.spec ++++++ --- /var/tmp/diff_new_pack.WEdfVp/_old 2026-10-27 16:50:53.351332631 +0100 +++ /var/tmp/diff_new_pack.WEdfVp/_new 2026-10-27 16:50:53.354332757 +0100 @@ -17,7 +17,7 @@ Name: kumactl -Version: 2.14.6 +Version: 3.0.0 Release: 0 Summary: CLI for the Kuma service mesh License: Apache-2.0 @@ -55,7 +55,6 @@ %package -n %{name}-bash-completion Summary: Bash Completion for %{name} -Group: System/Shells Requires: %{name} = %{version} Requires: bash-completion Supplements: (%{name} and bash-completion) @@ -66,7 +65,6 @@ %package -n %{name}-fish-completion Summary: Fish Completion for %{name} -Group: System/Shells Requires: %{name} = %{version} Supplements: (%{name} and fish) BuildArch: noarch @@ -76,7 +74,6 @@ %package -n %{name}-zsh-completion Summary: Zsh Completion for %{name} -Group: System/Shells Requires: %{name} = %{version} Supplements: (%{name} and zsh) BuildArch: noarch @@ -88,7 +85,7 @@ %autosetup -p 1 -a 1 %build -COMMIT_HASH="$(sed -n 's/commit: \(.*\)/\1/p' %_sourcedir/%{name}.obsinfo)" +COMMIT_HASH="$(sed -n 's/commit: \(.*\)/\1/p' %{_sourcedir}/%{name}.obsinfo)" DATE_FMT="+%%Y-%%m-%%dT%%H:%%M:%%SZ" BUILD_DATE=$(date -u -d "@${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u -r "${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u "${DATE_FMT}") @@ -99,11 +96,11 @@ -mod=vendor \ -buildmode=pie \ -ldflags=" \ - -X github.com/kumahq/kuma/v2/pkg/version.version=v%{version} \ - -X github.com/kumahq/kuma/v2/pkg/version.gitTag=%{version} \ - -X github.com/kumahq/kuma/v2/pkg/version.gitCommit=${COMMIT_HASH} \ - -X github.com/kumahq/kuma/v2/pkg/version.buildDate=${BUILD_DATE} \ - -X github.com/kumahq/kuma/v2/pkg/version.Envoy=${ENVOY_VERSION}" \ + -X github.com/kumahq/kuma/v3/pkg/version.version=v%{version} \ + -X github.com/kumahq/kuma/v3/pkg/version.gitTag=%{version} \ + -X github.com/kumahq/kuma/v3/pkg/version.gitCommit=${COMMIT_HASH} \ + -X github.com/kumahq/kuma/v3/pkg/version.buildDate=${BUILD_DATE} \ + -X github.com/kumahq/kuma/v3/pkg/version.Envoy=${ENVOY_VERSION}" \ -o bin/%{name} ./app/%{name} %install ++++++ _service ++++++ --- /var/tmp/diff_new_pack.WEdfVp/_old 2026-10-27 16:50:53.409335062 +0100 +++ /var/tmp/diff_new_pack.WEdfVp/_new 2026-10-27 16:50:53.414335271 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/kumahq/kuma.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v2.14.6</param> + <param name="revision">refs/tags/v3.0.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.WEdfVp/_old 2026-10-27 16:50:53.455336990 +0100 +++ /var/tmp/diff_new_pack.WEdfVp/_new 2026-10-27 16:50:53.459337157 +0100 @@ -3,6 +3,6 @@ <param name="url">https://github.com/kumahq/kuma</param> <param name="changesrevision">51c6d3819be75d9587942242cdec709bc9934321</param></service><service name="tar_scm"> <param name="url">https://github.com/kumahq/kuma.git</param> - <param name="changesrevision">efb6183ca540284c236216b5e0726477bac7406a</param></service></servicedata> + <param name="changesrevision">8f61b486fc65a0c330c39a413715c03fe52d06d2</param></service></servicedata> (No newline at EOF) ++++++ kumactl-2.14.6.obscpio -> kumactl-3.0.0.obscpio ++++++ ++++ 880511 lines of diff (skipped) ++++++ kumactl.obsinfo ++++++ --- /var/tmp/diff_new_pack.WEdfVp/_old 2026-10-27 16:50:58.259538289 +0100 +++ /var/tmp/diff_new_pack.WEdfVp/_new 2026-10-27 16:50:58.265538540 +0100 @@ -1,5 +1,5 @@ name: kumactl -version: 2.14.6 -mtime: 1791895001 -commit: efb6183ca540284c236216b5e0726477bac7406a +version: 3.0.0 +mtime: 1791987286 +commit: 8f61b486fc65a0c330c39a413715c03fe52d06d2 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/kumactl/vendor.tar.gz /work/SRC/openSUSE:Factory/.kumactl.new.2252680/vendor.tar.gz differ: char 5, line 1
