Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package graphifyy for openSUSE:Factory checked in at 2026-10-28 17:47:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/graphifyy (Old) and /work/SRC/openSUSE:Factory/.graphifyy.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "graphifyy" Wed Oct 28 17:47:05 2026 rev:7 rq:1393179 version:0.9.97 Changes: -------- --- /work/SRC/openSUSE:Factory/graphifyy/graphifyy.changes 2026-10-27 16:59:45.887624290 +0100 +++ /work/SRC/openSUSE:Factory/.graphifyy.new.2252680/graphifyy.changes 2026-10-28 17:47:36.700735276 +0100 @@ -1,0 +2,27 @@ +Tue Oct 27 18:36:54 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 0.9.97: + * Security: centralize rationale-label credential redaction + at a single pre-cache choke point and cover more leak + shapes (URL userinfo, PEM bodies, glued tokens, Slack + refresh tokens, short JWTs); benign strings left alone + * Security: floor anyio at >= 4.14.2 in the mcp extra, above + CVE-2026-63374 (IDNA hostname-validation bypass); anyio is + transitive-only and the lockfile already resolves 4.15.1, + so no spec dependency changes + * Markdown: CommonMark ATX headings and fenced-code tracking, + so headings inside fences no longer leak as structure + * YAML: read the composed node tree, restoring written key + spelling and source lines; 1.1 bare keys (on/off/yes/no) + no longer folded to booleans + * Extractors: aliased Terraform providers get their own nodes; + Razor @implements and Blade wire:click bindings extracted; + COBOL, Pascal, VBNET, Fortran, OCaml and Verilog scoping + fixes; nested JS functions no longer leak into the + file-wide name map + * CLI, build and index robustness: bare query/explain --help + prints usage; relation-less edges dropped; linked git + worktrees pruned from scans; bad pnpm globs warned, not + fatal; wikilink slugs and case-only renames fixed + +------------------------------------------------------------------- Old: ---- graphify-0.9.96.tar.gz New: ---- graphify-0.9.97.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ graphifyy.spec ++++++ --- /var/tmp/diff_new_pack.hZNowH/_old 2026-10-28 17:47:37.482767992 +0100 +++ /var/tmp/diff_new_pack.hZNowH/_new 2026-10-28 17:47:37.484768076 +0100 @@ -20,7 +20,7 @@ # (successor of the python-graphifyy multibuild package). %define pythons %{primary_python} Name: graphifyy -Version: 0.9.96 +Version: 0.9.97 Release: 0 Summary: Code knowledge graph builder and query CLI for AI assistants License: Apache-2.0 AND MIT @@ -106,9 +106,9 @@ BuildRequires: tree-sitter-typescript BuildRequires: tree-sitter-verilog BuildRequires: tree-sitter-zig +Requires: %{primary_python}-PyYAML >= 6.0 Requires: %{primary_python}-networkx >= 3.4 Requires: %{primary_python}-numpy >= 1.21 -Requires: %{primary_python}-PyYAML >= 6.0 Requires: %{primary_python}-rapidfuzz >= 3.0 Recommends: %{primary_python}-robotframework >= 4.0 Recommends: %{primary_python}-tree-sitter >= 0.25 @@ -188,9 +188,9 @@ %package mcp Summary: Model Context Protocol server for graphify -Requires: graphifyy = %{version} Requires: %{primary_python}-mcp >= 1 Requires: %{primary_python}-starlette >= 1.3.1 +Requires: graphifyy = %{version} %description mcp The graphify-mcp entry point, exposing the graphify knowledge graph ++++++ graphify-0.9.96.tar.gz -> graphify-0.9.97.tar.gz ++++++ /work/SRC/openSUSE:Factory/graphifyy/graphify-0.9.96.tar.gz /work/SRC/openSUSE:Factory/.graphifyy.new.2252680/graphify-0.9.97.tar.gz differ: char 16, line 1
