Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package skupper for openSUSE:Factory checked in at 2026-10-28 17:48:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/skupper (Old) and /work/SRC/openSUSE:Factory/.skupper.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "skupper" Wed Oct 28 17:48:05 2026 rev:13 rq:1393236 version:2.2.4 Changes: -------- --- /work/SRC/openSUSE:Factory/skupper/skupper.changes 2026-06-05 15:01:58.932481040 +0200 +++ /work/SRC/openSUSE:Factory/.skupper.new.2252680/skupper.changes 2026-10-28 17:48:16.758411041 +0100 @@ -1,0 +2,41 @@ +Sat Oct 24 16:56:12 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 2.2.4: + * Go toolchain raised to 1.26.10 (go.mod now requires go >= 1.26) + * New Connection Sweeper CLI command + * TLS credential handling: accept Opaque secrets for backward + compatibility, use kubernetes.io/tls secrets for podman link + tokens, skip router ConfigMap entries when TLS secrets are + missing + * Controller reliability: port mapping recovery, MultiKeyListener + status on create, connector status when host and selector are + missing, site flow controller retry after leader lease + * File watcher fixes: drain the fsnotify errors channel, fix the + FileWatcher deadlock + * Respect SKUPPER_PLATFORM env var when auto-reloading namespaces + * skupper-source OCI image for downstream build contexts; + build-oci-images honors IMAGE_TAG from the Makefile + * AfterConfigMap task tolerates missing annotations and labels in + the retry loop + * Curl e2e pod now carries a SecurityContext (runAsUser 65534) + * Fixed Go dependency vulnerabilities GO-2026-5024 through + GO-2026-5030 + * Fixed Go toolchain vulnerabilities GO-2026-6599, GO-2026-6600, + GO-2026-6603, GO-2026-6604, GO-2026-6605, GO-2026-6607, + GO-2026-6608, GO-2026-6609, GO-2026-6610, GO-2026-6611, + GO-2026-6612, GO-2026-6613, GO-2026-6617 and GO-2026-6629 + (including CVE-2026-97032 via x/net v0.60.0), addressed by + the Go 1.26.10 toolchain + * Many more fixes and improvements; see upstream's release notes + for the full list +- Raise the golang(API) BuildRequires floor to >= 1.26 per go.mod +- Regenerate vendor.tar.gz with the + tests/integration/kube/controller _test.go files importing + internal/fixtures set aside, which the 2.2.x branch does not + ship (present on main only), breaking plain 'go mod vendor'; + shipped sources are untouched +- Regen-vendor.sh (`make vendor`) reproduces this: only those + _test.go files move aside and back, output verified + content-identical to the committed vendor tree + +------------------------------------------------------------------- Old: ---- skupper-2.2.1.obscpio New: ---- Makefile regen-vendor.sh skupper-2.2.4.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ skupper.spec ++++++ --- /var/tmp/diff_new_pack.uSQczi/_old 2026-10-28 17:48:18.345477434 +0100 +++ /var/tmp/diff_new_pack.uSQczi/_new 2026-10-28 17:48:18.347477518 +0100 @@ -17,17 +17,19 @@ Name: skupper -Version: 2.2.1 +Version: 2.2.4 Release: 0 Summary: Virtual Application Network, enabling rich hybrid cloud communication License: Apache-2.0 URL: https://github.com/skupperproject/skupper Source: %{name}-%{version}.tar.gz Source1: vendor.tar.gz +Source2: regen-vendor.sh +Source3: Makefile BuildRequires: bash-completion BuildRequires: fish +BuildRequires: golang(API) >= 1.26 BuildRequires: zsh -BuildRequires: golang(API) >= 1.25 %description Skupper enables cloud communication by enabling you to create a Virtual @@ -54,7 +56,6 @@ %package -n %{name}-bash-completion Summary: Bash Completion for %{name} -Group: System/Shells Requires: %{name} = %{version} Requires: bash-completion Supplements: (%{name} and bash-completion) @@ -65,7 +66,6 @@ %package -n %{name}-fish-completion Summary: Fish Completion for %{name} -Group: System/Shells Requires: %{name} = %{version} Requires: fish Supplements: (%{name} and fish) @@ -76,7 +76,6 @@ %package -n %{name}-zsh-completion Summary: Zsh Completion for %{name} -Group: System/Shells Requires: %{name} = %{version} Requires: zsh Supplements: (%{name} and zsh) ++++++ Makefile ++++++ # Helper targets for the skupper OBS package. Not used by the build. VERSION ?= 2.2.4 vendor: ./regen-vendor.sh $(VERSION) .PHONY: vendor ++++++ _service ++++++ --- /var/tmp/diff_new_pack.uSQczi/_old 2026-10-28 17:48:18.488483417 +0100 +++ /var/tmp/diff_new_pack.uSQczi/_new 2026-10-28 17:48:18.500483919 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/skupperproject/skupper</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">2.2.1</param> + <param name="revision">2.2.4</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.uSQczi/_old 2026-10-28 17:48:18.554486178 +0100 +++ /var/tmp/diff_new_pack.uSQczi/_new 2026-10-28 17:48:18.562486513 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/skupperproject/skupper</param> - <param name="changesrevision">5f1ada1125b877826d789cc587582a78167d0e99</param></service></servicedata> + <param name="changesrevision">3153d06e2cff668a7c9fbc751857591320dcee13</param></service></servicedata> (No newline at EOF) ++++++ regen-vendor.sh ++++++ #!/bin/bash # Regenerate vendor.tar.gz for the skupper OBS package. # # Plain `go mod vendor` (what `osc service manualrun go_modules` runs) # fails on the 2.2.x branch: some tests/integration/kube/controller/*_test.go # files import internal/fixtures, which exists on main only. So exactly those # files are moved aside first, then vendored, packed, and moved back. The # remaining suite_test.go still pulls test-only deps (e.g. envtest) into # vendor/, which the build does not use but keeps the tree reproducible. # Everything happens in a throwaway clone, so shipped sources are untouched. # # Usage: ./regen-vendor.sh [revision] # default: 2.2.4 (see _service) set -euo pipefail REV="${1:-2.2.4}" URL="https://github.com/skupperproject/skupper"; # In-module import path whose directory the branch does not ship. MISSING="internal/fixtures" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT git clone --quiet "$URL" "$WORK/skupper" git -C "$WORK/skupper" checkout --quiet "$REV" SRC="$WORK/skupper" mapfile -t BROKEN < <(grep -rl "$MISSING" --include='*_test.go' "$SRC/tests" || true) [ "${#BROKEN[@]}" -gt 0 ] || { echo "no test files importing $MISSING, nothing to set aside"; exit 1; } mkdir "$WORK/aside" for f in "${BROKEN[@]}"; do mv "$f" "$WORK/aside/" done ( cd "$SRC" go mod vendor ) tar -C "$SRC" -czf "$WORK/vendor.tar.gz" vendor for f in "${BROKEN[@]}"; do mv "$WORK/aside/$(basename "$f")" "$f" done cp "$WORK/vendor.tar.gz" ./vendor.tar.gz echo "wrote ./vendor.tar.gz from $URL@$REV" ++++++ skupper-2.2.1.obscpio -> skupper-2.2.4.obscpio ++++++ ++++ 7683 lines of diff (skipped) ++++++ skupper.obsinfo ++++++ --- /var/tmp/diff_new_pack.uSQczi/_old 2026-10-28 17:48:19.608530273 +0100 +++ /var/tmp/diff_new_pack.uSQczi/_new 2026-10-28 17:48:19.617530649 +0100 @@ -1,5 +1,5 @@ name: skupper -version: 2.2.1 -mtime: 1780493614 -commit: 5f1ada1125b877826d789cc587582a78167d0e99 +version: 2.2.4 +mtime: 1792681404 +commit: 3153d06e2cff668a7c9fbc751857591320dcee13 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/skupper/vendor.tar.gz /work/SRC/openSUSE:Factory/.skupper.new.2252680/vendor.tar.gz differ: char 13, line 1
