Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kubeseal for openSUSE:Factory checked in at 2026-10-29 16:07:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kubeseal (Old) and /work/SRC/openSUSE:Factory/.kubeseal.new.1255 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubeseal" Thu Oct 29 16:07:00 2026 rev:53 rq:1393536 version:0.41.2 Changes: -------- --- /work/SRC/openSUSE:Factory/kubeseal/kubeseal.changes 2026-10-27 16:51:06.047864361 +0100 +++ /work/SRC/openSUSE:Factory/.kubeseal.new.1255/kubeseal.changes 2026-10-29 16:10:39.443924300 +0100 @@ -1,0 +2,6 @@ +Thu Oct 29 06:16:08 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.41.2: + * Release notes 0.41.2 (#2082) + +------------------------------------------------------------------- Old: ---- kubeseal-0.41.1.obscpio New: ---- kubeseal-0.41.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kubeseal.spec ++++++ --- /var/tmp/diff_new_pack.NguA5n/_old 2026-10-29 16:10:41.033990983 +0100 +++ /var/tmp/diff_new_pack.NguA5n/_new 2026-10-29 16:10:41.035991067 +0100 @@ -17,7 +17,7 @@ Name: kubeseal -Version: 0.41.1 +Version: 0.41.2 Release: 0 Summary: CLI for encrypting secrets to SealedSecrets License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.NguA5n/_old 2026-10-29 16:10:41.072992619 +0100 +++ /var/tmp/diff_new_pack.NguA5n/_new 2026-10-29 16:10:41.075992745 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/bitnami-labs/sealed-secrets.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v0.41.1</param> + <param name="revision">refs/tags/v0.41.2</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.NguA5n/_old 2026-10-29 16:10:41.098993709 +0100 +++ /var/tmp/diff_new_pack.NguA5n/_new 2026-10-29 16:10:41.102993877 +0100 @@ -3,6 +3,6 @@ <param name="url">https://github.com/bitnami-labs/sealed-secrets</param> <param name="changesrevision">97e5023c97fa29a5a91706c6d140851fa282bae7</param></service><service name="tar_scm"> <param name="url">https://github.com/bitnami-labs/sealed-secrets.git</param> - <param name="changesrevision">f845e8f80a1ff6d112e2116d552f4670bf22895c</param></service></servicedata> + <param name="changesrevision">51799eb6dd970239e356c1ccffd354fe74408700</param></service></servicedata> (No newline at EOF) ++++++ kubeseal-0.41.1.obscpio -> kubeseal-0.41.2.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.gitattributes new/kubeseal-0.41.2/.gitattributes --- old/kubeseal-0.41.1/.gitattributes 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.gitattributes 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -vendor_jsonnet/ linguist-generated=true diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/CODEOWNERS new/kubeseal-0.41.2/.github/CODEOWNERS --- old/kubeseal-0.41.1/.github/CODEOWNERS 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/CODEOWNERS 1970-01-01 01:00:00.000000000 +0100 @@ -1,5 +0,0 @@ -# These owners will be the default owners for everything in -# the repo. Unless a later match takes precedence, -# @alvneiayu @agarcia-oss @alemorcuq will be requested for -# review when someone opens a pull request. -* @alvneiayu @agarcia-oss diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/ISSUE_TEMPLATE/bug_report.md new/kubeseal-0.41.2/.github/ISSUE_TEMPLATE/bug_report.md --- old/kubeseal-0.41.1/.github/ISSUE_TEMPLATE/bug_report.md 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/ISSUE_TEMPLATE/bug_report.md 1970-01-01 01:00:00.000000000 +0100 @@ -1,42 +0,0 @@ ---- -name: Bug report -about: Create a report to help us improve -title: '' -labels: triage -assignees: '' - ---- - -<!-- - Before you open the bug report please review the following FAQ: - - - [Sealed Secrets FAQ](https://github.com/bitnami/sealed-secrets#faq) - --> - -**Which component**: -The name (and version) of the affected component (controller or kubeseal) - -**Describe the bug** -A clear and concise description of what the bug is. - -**To Reproduce** -Steps to reproduce the behavior: - -1. Go to '...' -2. Run the command '....' -3. Wait for '....' -4. See error - -**Expected behavior** -A clear and concise description of what you expected to happen. - -**Version of Kubernetes**: - -- Output of `kubectl version`: - -``` -(paste your output here) -``` - -**Additional context** -Add any other context about the problem here. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/ISSUE_TEMPLATE/feature_request.md new/kubeseal-0.41.2/.github/ISSUE_TEMPLATE/feature_request.md --- old/kubeseal-0.41.1/.github/ISSUE_TEMPLATE/feature_request.md 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/ISSUE_TEMPLATE/feature_request.md 1970-01-01 01:00:00.000000000 +0100 @@ -1,23 +0,0 @@ ---- -name: Feature request -about: Suggest an idea for this project -title: '' -labels: triage -assignees: '' - ---- - -**Which component**: -The name (and version) of the affected component (controller or kubeseal) - -**Is your feature request related to a problem? Please describe.** -A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] - -**Describe the solution you'd like** -A clear and concise description of what you want to happen. - -**Describe alternatives you've considered** -A clear and concise description of any alternative solutions or features you've considered. - -**Additional context** -Add any other context or screenshots about the feature request here. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/PULL_REQUEST_TEMPLATE.md new/kubeseal-0.41.2/.github/PULL_REQUEST_TEMPLATE.md --- old/kubeseal-0.41.1/.github/PULL_REQUEST_TEMPLATE.md 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/PULL_REQUEST_TEMPLATE.md 1970-01-01 01:00:00.000000000 +0100 @@ -1,33 +0,0 @@ -<!-- - Before you open the request please review the following guidelines and tips to help it be more easily integrated: - - - Describe the scope of your change - i.e. what the change does. - - Describe any known limitations with your change. - - Please run any tests or examples that can exercise your modified code. - - Thank you for contributing! We will try to test and integrate the change as soon as we can, but be aware we have many GitHub repositories to manage and can't immediately respond to every request. There is no need to bump or check in on a pull request (it will clutter the discussion of the request). - - Also don't be worried if the request is closed or not integrated sometimes the priorities of Bitnami might not match the priorities of the pull request. Don't fret, the open source community thrives on forks and GitHub makes it easy to keep your changes in a forked repo. - --> - -**Description of the change** - -<!-- Describe the scope of your change - i.e. what the change does. --> - -**Benefits** - -<!-- What benefits will be realized by the code change? --> - -**Possible drawbacks** - -<!-- Describe any known limitations with your change --> - -**Applicable issues** - -<!-- Enter any applicable Issues here (You can reference an issue using #) --> -- fixes # - -**Additional information** - -<!-- If there's anything else that's important and relevant to your pull -request, mention that information here.--> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/dependabot.yml new/kubeseal-0.41.2/.github/dependabot.yml --- old/kubeseal-0.41.1/.github/dependabot.yml 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/dependabot.yml 1970-01-01 01:00:00.000000000 +0100 @@ -1,21 +0,0 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates - -version: 2 -updates: - - package-ecosystem: "gomod" # See documentation for possible values - directory: "/" # Location of package manifests - schedule: - interval: "weekly" - cooldown: - default-days: 5 - - # Enable version updates for Docker - - package-ecosystem: "docker" - directory: "/docker" - schedule: - interval: "weekly" - cooldown: - default-days: 5 \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/workflows/ci.yml new/kubeseal-0.41.2/.github/workflows/ci.yml --- old/kubeseal-0.41.1/.github/workflows/ci.yml 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/workflows/ci.yml 1970-01-01 01:00:00.000000000 +0100 @@ -1,290 +0,0 @@ -name: CI - -on: - push: - branches: [ main ] - pull_request: - branches: [ main ] - -permissions: - contents: read - -env: - controller_registry: docker.io - controller_repository: bitnami/sealed-secrets-controller - controller_tag: latest - -jobs: - load-versions: - name: Load versions.env - runs-on: ubuntu-latest - steps: - - name: checkout repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - id: load-versions - run: | - source $GITHUB_WORKSPACE/versions.env - # env vars - echo "GO_VERSION=$GO_VERSION" >> $GITHUB_ENV - echo "GO_VERSION_LIST=$GO_VERSION_LIST" >> $GITHUB_ENV - # outputs - echo "go_version=${GO_VERSION}" >> $GITHUB_OUTPUT - echo "go_version_list=${GO_VERSION_LIST}" >> $GITHUB_OUTPUT - outputs: - go_version: ${{ steps.load-versions.outputs.go_version }} - go_version_list: ${{ steps.load-versions.outputs.go_version_list }} - linter: - needs: load-versions - name: Run linters - runs-on: ubuntu-latest - strategy: - matrix: - go: ${{ fromJSON(needs.load-versions.outputs.go_version_list) }} - os: [ubuntu-latest] - golangci-lint: ["2.15.0"] - # No gosec release can read Go 1.27 export data yet, so pin the first commit that can (post v2.29.0). - gosec: ["1cbfd7e6488c2464f18603623354de1be9565b39"] - steps: - - name: Set up Go 1.x - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 - with: - go-version: ${{ matrix.go }} - id: go - - - name: Check out code into the Go module directory - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - - name: Install dependencies - run: | - go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v${{ matrix.golangci-lint }} - go install github.com/securego/gosec/v2/cmd/gosec@${{ matrix.gosec }} - - - name: Run linter - run: make lint - - - name: Run gosec - run: make lint-gosec - - test: - needs: load-versions - name: Build - runs-on: ${{ matrix.os }} - strategy: - matrix: - go: ${{ fromJSON(needs.load-versions.outputs.go_version_list) }} - os: [macos-latest, windows-latest, ubuntu-latest] - gotestsum: ["1.8.1"] - steps: - - - name: Set up Go 1.x - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 - with: - go-version: ${{ matrix.go }} - id: go - - - name: Check out code into the Go module directory - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - - name: Install dependencies - run: | - go install gotest.tools/gotestsum@v${{ matrix.gotestsum }} - - - name: Test - run: make GO_FLAGS="--junitfile report.xml --format testname" test - - - name: Test Summary - uses: test-summary/action@31493c76ec9e7aa675f1585d3ed6f1da69269a86 # v2.4 - with: - paths: | - report.xml - - container: - needs: load-versions - name: Build Container - runs-on: ubuntu-latest - steps: - - name: "Set environmental variables" - run: | - echo "CONTROLLER_IMAGE=$controller_registry/$controller_repository:$controller_tag" >> $GITHUB_ENV - - - name: Check out code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - - name: Install Cosign - uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0 - with: - cosign-release: v2.2.3 - - - name: Distroless verify - run: | - diff <(grep FROM docker/kubeseal.Dockerfile | awk '{print $2}') \ - <(grep FROM docker/controller.Dockerfile | awk '{print $2}') - cosign verify "$(grep FROM docker/controller.Dockerfile | awk '{print $2}')" --certificate-oidc-issuer https://accounts.google.com --certificate-identity [email protected] - - - name: Setup kubecfg - run: | - mkdir -p ~/bin - curl -sLf https://github.com/kubecfg/kubecfg/releases/download/v0.26.0/kubecfg_Linux_X64 >~/bin/kubecfg - chmod +x ~/bin/kubecfg - - - name: Set up Go 1.x - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 - with: - go-version: ${{ needs.load-versions.outputs.go_version }} - id: go - - - name: Docker build - run: | - export PATH=~/bin:$PATH - make CONTROLLER_IMAGE=$CONTROLLER_IMAGE IMAGE_PULL_POLICY=Never controller.yaml - make CONTROLLER_IMAGE=$CONTROLLER_IMAGE controller.image.linux-amd64 - docker tag $CONTROLLER_IMAGE-linux-amd64 $CONTROLLER_IMAGE - docker save $CONTROLLER_IMAGE -o /tmp/controller-image.tar - - - name: Upload manifest artifact - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - with: - name: controller-manifest - path: controller.yaml - - - name: Upload container image artifact - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 - with: - name: controller-image - path: /tmp/controller-image.tar - - integration-yaml: - needs: [ load-versions, container ] - name: Integration (controller.yaml) - runs-on: ubuntu-latest - strategy: - matrix: - k8s: ["1.33.10","1.34.6","1.35.3", "1.36.0"] - env: - MINIKUBE_WANTUPDATENOTIFICATION: "false" - MINIKUBE_WANTREPORTERRORPROMPT: "false" - CHANGE_MINIKUBE_NONE_USER: "true" - steps: - - name: "Set environmental variables" - run: | - echo "CONTROLLER_IMAGE=$controller_registry/$controller_repository:$controller_tag" >> $GITHUB_ENV - - - name: Set up Go 1.x - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 - with: - go-version: ${{ needs.load-versions.outputs.go_version }} - id: go - - - name: Set up Ginkgo - run: | - go install github.com/onsi/ginkgo/[email protected] - - - name: Check out code into the Go module directory - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - - uses: medyagh/setup-minikube@e9e035a86bbc3caea26a450bd4dbf9d0c453682e # v0.0.21 - with: - minikube-version: 1.38.0 - kubernetes-version: ${{ matrix.k8s }} - - # need to delete old state of the cluster, see: - # https://github.com/kubernetes/minikube/issues/8765 - - name: K8s setup - run: | - minikube delete - minikube config set kubernetes-version v${{ matrix.k8s }} - minikube start --vm-driver=docker - minikube update-context - kubectl cluster-info - - - name: Download manifest artifact - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 - with: - name: controller-manifest - - - name: Download container image artifact - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 - with: - name: controller-image - - - name: Load docker image - run: | - eval $(minikube docker-env) - docker load -i controller-image.tar - docker inspect $CONTROLLER_IMAGE - - - name: Testing environment setup - run: | - kubectl apply -f controller.yaml - kubectl rollout status deployment/sealed-secrets-controller -n kube-system -w --timeout=1m || kubectl -n kube-system describe pod -lname=sealed-secrets-controller - - - name: Integration tests - run: make integrationtest CONTROLLER_IMAGE=$CONTROLLER_IMAGE GINKGO="ginkgo -v --randomizeSuites --failOnPending --trace --progress --compilers=2 --nodes=4" - - integration-chart: - needs: [ load-versions, container ] - name: Integration (Helm Chart) - runs-on: ubuntu-latest - strategy: - matrix: - k8s: ["1.33.10","1.34.6","1.35.3", "1.36.0"] - env: - MINIKUBE_WANTUPDATENOTIFICATION: "false" - MINIKUBE_WANTREPORTERRORPROMPT: "false" - CHANGE_MINIKUBE_NONE_USER: "true" - steps: - - name: "Set environmental variables" - run: | - echo "CONTROLLER_IMAGE=$controller_registry/$controller_repository:$controller_tag" >> $GITHUB_ENV - - - name: Set up Go 1.x - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 - with: - go-version: ${{ needs.load-versions.outputs.go_version }} - id: go - - - name: Set up Ginkgo - run: | - go install github.com/onsi/ginkgo/[email protected] - - - name: Check out code into the Go module directory - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - - uses: medyagh/setup-minikube@e9e035a86bbc3caea26a450bd4dbf9d0c453682e # v0.0.21 - with: - minikube-version: 1.38.0 - kubernetes-version: ${{ matrix.k8s }} - - - name: Install Helm - uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5.5 - with: - version: v3.12.0 - - # need to delete old state of the cluster, see: - # https://github.com/kubernetes/minikube/issues/8765 - - name: K8s setup - run: | - minikube delete - minikube config set kubernetes-version v${{ matrix.k8s }} - minikube start --vm-driver=docker - minikube update-context - kubectl cluster-info - - - name: Download container image artifact - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 - with: - name: controller-image - - - name: Load docker image - run: | - eval $(minikube docker-env) - docker load -i controller-image.tar - docker inspect $CONTROLLER_IMAGE - - - name: Testing environment setup - run: | - helm install sealed-secrets -n kube-system --set fullnameOverride=sealed-secrets-controller --set image.registry=$controller_registry --set image.repository=$controller_repository --set image.tag=$controller_tag --set image.pullPolicy=Never helm/sealed-secrets - kubectl rollout status deployment/sealed-secrets-controller -n kube-system -w --timeout=1m || kubectl -n kube-system describe pod -lapp.kubernetes.io/name=sealed-secrets - - - name: Integration tests - run: make integrationtest CONTROLLER_IMAGE=$CONTROLLER_IMAGE GINKGO="ginkgo -v --randomizeSuites --failOnPending --trace --progress --compilers=2 --nodes=4" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/workflows/cosign.pub new/kubeseal-0.41.2/.github/workflows/cosign.pub --- old/kubeseal-0.41.1/.github/workflows/cosign.pub 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/workflows/cosign.pub 1970-01-01 01:00:00.000000000 +0100 @@ -1,4 +0,0 @@ ------BEGIN PUBLIC KEY----- -MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEseWNtEaI73oDVgjfLzU4eQYHE11i -MzRSNs1TA+cTT/Lw70ckfCC/vHnOXKACF2dnhsZsNNj647p9mAiYNVl9ug== ------END PUBLIC KEY----- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/workflows/helm-release.yaml new/kubeseal-0.41.2/.github/workflows/helm-release.yaml --- old/kubeseal-0.41.1/.github/workflows/helm-release.yaml 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/workflows/helm-release.yaml 1970-01-01 01:00:00.000000000 +0100 @@ -1,105 +0,0 @@ -name: Release Helm Chart and Carvel package - -on: - push: - paths: - # update this file to trigger helm chart release - - 'helm/sealed-secrets/Chart.yaml' - branches: - - main - workflow_dispatch: - -permissions: - contents: write - packages: write - pull-requests: write - -jobs: - release: - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - fetch-depth: 0 - - - name: Configure Git - run: | - git config user.name "$GITHUB_ACTOR" - git config user.email "[email protected]" - - - name: Install Helm - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1 - with: - version: v4.1.1 - - - name: Run chart-releaser - uses: helm/chart-releaser-action@98bccfd32b0f76149d188912ac8e45ddd3f8695f # v1.4.1 - with: - charts_dir: helm - env: - CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}" - CR_RELEASE_NAME_TEMPLATE: "helm-v{{ .Version }}" - - - name: Install Carvel - uses: carvel-dev/setup-action@a11507416d8fea298e923fe4356f4e4f4097f15b # v1.3.0 - with: - only: kbld, imgpkg - token: ${{ secrets.GITHUB_TOKEN }} - - - name: Install yq - run: | - mkdir -p ~/bin - wget https://github.com/mikefarah/yq/releases/download/v4.30.8/yq_linux_amd64 -O ~/bin/yq - chmod +x ~/bin/yq - - - name: Get chart version - run: | - export PATH=~/bin:$PATH - echo "chart_version=$(yq .version < ./helm/sealed-secrets/Chart.yaml)" >> $GITHUB_ENV - - - name: Configure DNS for registry access - run: | - echo "nameserver 8.8.8.8" | sudo tee /etc/resolv.conf > /dev/null - echo "nameserver 8.8.4.4" | sudo tee -a /etc/resolv.conf > /dev/null - - - name: OCI Push - env: - OCI_PASS: ${{ secrets.OCI_PASSWORD }} - OCI_USR: ${{ secrets.OCI_USERNAME }} - HELM_EXPERIMENTAL_OCI: 1 - run: | - echo $OCI_PASS | helm registry login -u $OCI_USR --password-stdin registry-1.docker.io - helm package helm/sealed-secrets/ - helm push sealed-secrets-${{ env.chart_version }}.tgz oci://registry-1.docker.io/bitnamicharts - - - name: Create imglock file - working-directory: ./helm - run: | - mkdir -p .imgpkg - kbld -f <(helm template sealed-secrets) --imgpkg-lock-output .imgpkg/images.yml - - - name: Push imgpkg bundle - working-directory: ./helm - env: - IMGPKG_REGISTRY_HOSTNAME: ghcr.io - IMGPKG_REGISTRY_USERNAME: ${{ github.actor }} - IMGPKG_REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }} - run: | - imgpkg push -b ghcr.io/${{ github.repository_owner }}/sealed-secrets-carvel:${{ env.chart_version }} -f . --json > output - echo carvel_pkg=$(cat output | grep Pushed | cut -d "'" -f2 ) >> $GITHUB_ENV - - - name: Update package.yaml - run: | - yq -i '.spec.version = "${{ env.chart_version }}"' carvel/package.yaml - yq -i '.metadata.name = "sealedsecrets.bitnami.com.${{ env.chart_version }}"' carvel/package.yaml - yq -i '.spec.template.spec.fetch.0.imgpkgBundle.image = "${{ env.carvel_pkg }}"' carvel/package.yaml - git checkout -B 'release-carvel-${{ env.chart_version }}' - git add carvel/package.yaml - git commit -sm 'Release carvel package ${{ env.chart_version }}' - git push origin 'release-carvel-${{ env.chart_version }}' - - - name: Create PR - run: gh pr create --fill --base main --repo $GITHUB_REPOSITORY - env: - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/workflows/helm-vib.yaml new/kubeseal-0.41.2/.github/workflows/helm-vib.yaml --- old/kubeseal-0.41.1/.github/workflows/helm-vib.yaml 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/workflows/helm-vib.yaml 1970-01-01 01:00:00.000000000 +0100 @@ -1,42 +0,0 @@ -name: Verify Helm Chart -on: - workflow_dispatch: - push: - branches: - - main - paths: - - 'helm/**' - -permissions: - contents: read - -env: - CSP_API_URL: https://console.tanzu.broadcom.com - CSP_API_TOKEN: ${{ secrets.CSP_API_TOKEN }} - VIB_PUBLIC_URL: https://cp.app-catalog.vmware.com - -jobs: - # verify chart in multiple target platforms - vib-k8s-verify: - runs-on: ubuntu-latest - environment: vmware-image-builder - strategy: - matrix: - include: - - name: Openshift - target-platform: openshift - target-platform-id: ebac9e0d-3931-4515-ba54-e6adada1f174 - target-pipeline: vib-platform-verify-openshift.json - fail-fast: false - name: Verify chart (${{ matrix.name }}) - steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - ref: ${{ github.event.pull_request.head.ref }} - repository: ${{ github.event.pull_request.head.repo.full_name }} - - uses: vmware-labs/vmware-image-builder-action@90ab5b51680627fe01ea9b2d9ba5d7c9db4c56bc # v0.11.0 - with: - pipeline: ${{ matrix.target-pipeline }} - max-pipeline-duration: 7200 - env: - TARGET_PLATFORM: ${{ matrix.target-platform-id }} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/workflows/publish-release.yaml new/kubeseal-0.41.2/.github/workflows/publish-release.yaml --- old/kubeseal-0.41.1/.github/workflows/publish-release.yaml 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/workflows/publish-release.yaml 1970-01-01 01:00:00.000000000 +0100 @@ -1,48 +0,0 @@ -name: Publish Release - -on: - workflow_dispatch: - inputs: - chart: - description: 'Chart version (e.g. 2.11.3)' - required: true - type: string - -permissions: - contents: write - pull-requests: write - -jobs: - chart-pr: - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - fetch-depth: 0 - - - name: Config Git - run: | - git config user.name "$GITHUB_ACTOR" - git config user.email "[email protected]" - - - name: Fetch Versions - run: | - echo NEW_VERSION=$(git describe --tags --match "v[0-9]*" --abbrev=0 | tr -d v) >> "$GITHUB_ENV" - echo PREV_VERSION=$(grep appVersion helm/sealed-secrets/Chart.yaml | grep -o '[0-9.]*') >> "$GITHUB_ENV" - - - name: Update Version - run: | - sed -i "s/version: .*/version: ${{ inputs.chart }}/" helm/sealed-secrets/Chart.yaml - sed -i "s/appVersion: .*/appVersion: $NEW_VERSION/" helm/sealed-secrets/Chart.yaml - sed -i "s/tag: .*/tag: $NEW_VERSION/" helm/sealed-secrets/values.yaml - sed -i "s/\`$PREV_VERSION\`/\`$NEW_VERSION\`/" helm/sealed-secrets/README.md - git checkout -B 'release-chart-${{ inputs.chart }}' - git add helm/sealed-secrets/Chart.yaml helm/sealed-secrets/values.yaml helm/sealed-secrets/README.md - git commit -sm 'Release chart ${{ inputs.chart }}' - git push origin 'release-chart-${{ inputs.chart }}' - - - name: Create PR - run: gh pr create --fill --base main --repo $GITHUB_REPOSITORY - env: - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/workflows/release.yaml new/kubeseal-0.41.2/.github/workflows/release.yaml --- old/kubeseal-0.41.1/.github/workflows/release.yaml 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/workflows/release.yaml 1970-01-01 01:00:00.000000000 +0100 @@ -1,157 +0,0 @@ -name: Prepare Release - -# Only release when a new GH release branch is pushed -on: - push: - branches: - - 'release/v[0-9]+.[0-9]+.[0-9]+' - -permissions: - contents: write - packages: write - -jobs: - build: - runs-on: ubuntu-latest - env: - controller_dockerhub_image_name: docker.io/bitnami/sealed-secrets-controller - controller_ghcr_image_name: ghcr.io/bitnami/sealed-secrets-controller - kubeseal_dockerhub_image_name: docker.io/bitnami/sealed-secrets-kubeseal - kubeseal_ghcr_image_name: ghcr.io/bitnami/sealed-secrets-kubeseal - steps: - # Checkout and set env - - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - fetch-depth: 0 - - id: load-version - run: | - source $GITHUB_WORKSPACE/versions.env - echo "GO_VERSION=$GO_VERSION" >> $GITHUB_ENV - - name: Set up Go - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 - with: - go-version: ${{ env.GO_VERSION }} - - name: Setup kubecfg - run: | - mkdir -p ~/bin - curl -sLf https://github.com/kubecfg/kubecfg/releases/download/v0.26.0/kubecfg_Linux_X64 >~/bin/kubecfg - chmod +x ~/bin/kubecfg - - - name: Install dependencies - run: | - go install gotest.tools/[email protected] - - # Run tests - - name: Tests - run: make test - - # Generate K8s manifests - - name: K8s manifests - run: | - export PATH=~/bin:$PATH - RELEASE_BRANCH="${{ github.ref }}" - VERSION_TAG=$(echo "${RELEASE_BRANCH}" | awk -F'/' '{print $NF}') - echo "VERSION_TAG=$VERSION_TAG" >> $GITHUB_ENV - IMAGE_TAG=$(echo "${VERSION_TAG}" | sed 's/^v//') - echo "IMAGE_TAG=$IMAGE_TAG" >> $GITHUB_ENV - make CONTROLLER_IMAGE=${{ env.controller_dockerhub_image_name }}:${IMAGE_TAG} controller.yaml controller-norbac.yaml - - # Setup env for multi-arch builds - - name: Set up QEMU - uses: docker/setup-qemu-action@8b122486cedac8393e77aa9734c3528886e4a1a8 # v2.0.0 - with: - image: tonistiigi/binfmt:latest - platforms: arm64,arm,ppc64le - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@dc7b9719a96d48369863986a06765841d7ea23f6 # v2.0.0 - - # Setup Cosign - - name: Install Cosign - uses: sigstore/cosign-installer@0f983226cbf1ee0368469d3e2b33417ceec4c225 # v3.0.2 - - name: Write Cosign key - run: echo "$COSIGN_KEY" > /tmp/cosign.key - env: - COSIGN_KEY: ${{ secrets.COSIGN_KEY }} - - # Tag for GoReleaser from release branch name - - name: Tag Release - run: | - git tag "${VERSION_TAG}" - - # Build & Release binaries - - name: Run GoReleaser - uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0 - if: success() && startsWith(github.ref, 'refs/heads/') - with: - distribution: goreleaser - version: v2.11.2 - args: release --clean - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }} - - # Build & Publish multi-arch image - - name: Login to Docker Hub - uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b # v2.0.0 - with: - username: ${{ secrets.BITNAMI_USERNAME }} - password: ${{ secrets.BITNAMI_PASSWORD }} - - name: Login to GHRC - uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b # v2.0.0 - with: - registry: ghcr.io - username: ${{ github.actor }} - password: ${{ secrets.GITHUB_TOKEN }} - - name: Extract metadata (tags, labels) for Docker controller image - id: meta_controller - uses: docker/metadata-action@69f6fc9d46f2f8bf0d5491e4aabe0bb8c6a4678a # v4.0.1 - with: - images: | - ${{ env.controller_dockerhub_image_name }} - ${{ env.controller_ghcr_image_name }} - tags: | - type=raw,value=${{ env.IMAGE_TAG }} - type=raw,value=latest - - name: Build and push controller image - id: docker_build_controller - uses: docker/build-push-action@c56af957549030174b10d6867f20e78cfd7debc5 # v3.2.0 - with: - context: . - file: ./docker/controller.Dockerfile - platforms: linux/amd64,linux/arm64,linux/arm,linux/ppc64le - push: true - tags: ${{ steps.meta_controller.outputs.tags }} - - name: Extract metadata (tags, labels) for Docker kubeseal image - id: meta_kubeseal - uses: docker/metadata-action@69f6fc9d46f2f8bf0d5491e4aabe0bb8c6a4678a # v4.0.1 - with: - images: | - ${{ env.kubeseal_dockerhub_image_name }} - ${{ env.kubeseal_ghcr_image_name }} - tags: | - type=raw,value=${{ env.IMAGE_TAG }} - type=raw,value=latest - - name: Build and push kubeseal image - id: docker_build_kubeseal - uses: docker/build-push-action@c56af957549030174b10d6867f20e78cfd7debc5 # v3.2.0 - with: - context: . - file: ./docker/kubeseal.Dockerfile - platforms: linux/amd64,linux/arm64,linux/arm,linux/ppc64le - push: true - tags: ${{ steps.meta_kubeseal.outputs.tags }} - - name: Sign controller image with a key in GHCR - run: | - echo -n "$COSIGN_PASSWORD" | cosign sign --key /tmp/cosign.key --yes $TAG_CURRENT - env: - COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }} - TAG_CURRENT: ${{ steps.meta_controller.outputs.tags }} - COSIGN_REPOSITORY: ${{ env.controller_ghcr_image_name }}/signs - - name: Sign kubeseal image with a key in GHCR - run: | - echo -n "$COSIGN_PASSWORD" | cosign sign --key /tmp/cosign.key --yes $TAG_CURRENT - env: - COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }} - TAG_CURRENT: ${{ steps.meta_kubeseal.outputs.tags }} - COSIGN_REPOSITORY: ${{ env.kubeseal_ghcr_image_name }}/signs diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.github/workflows/stale.yml new/kubeseal-0.41.2/.github/workflows/stale.yml --- old/kubeseal-0.41.1/.github/workflows/stale.yml 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.github/workflows/stale.yml 1970-01-01 01:00:00.000000000 +0100 @@ -1,27 +0,0 @@ -name: 'Close stale issues and PRs' -on: - schedule: - # Stalebot will be executed at 1:00 AM every day - - cron: '0 1 * * *' - -permissions: - contents: write - issues: write - pull-requests: write - -jobs: - stale: - runs-on: ubuntu-latest - steps: - - uses: actions/stale@997185467fa4f803885201cee163a9f38240193d # v10.1.1 - with: - repo-token: ${{ secrets.GITHUB_TOKEN }} - stale-issue-message: 'This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.' - stale-pr-message: 'This Pull Request has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thank you for your contribution.' - close-issue-message: 'Due to the lack of activity in the last 7 days since it was marked as "stale", we proceed to close this Issue. Do not hesitate to reopen it later if necessary.' - close-pr-message: 'Due to the lack of activity in the last 7 days since it was marked as "stale", we proceed to close this Pull Request. Do not hesitate to reopen it later if necessary.' - days-before-stale: 15 - days-before-close: 7 - exempt-issue-labels: 'backlog,help wanted,triage' - exempt-pr-labels: 'backlog,help wanted,triage' - operations-per-run: 500 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/.gitignore new/kubeseal-0.41.2/.gitignore --- old/kubeseal-0.41.1/.gitignore 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/.gitignore 1970-01-01 01:00:00.000000000 +0100 @@ -1,46 +0,0 @@ -# Binaries for programs and plugins -*.exe -*.dll -*.so -*.dylib - -# Test binary, build with `go test -c` -*.test - -# Output of the go coverage tool, specifically when used with LiteIDE -*.out - -# Project-local glide cache, RE: https://github.com/Masterminds/glide/issues/736 -.glide/ - -# Project-local vscode config -.vscode/ - -/controller -/kubeseal -/kubeseal-arm -/kubeseal-arm64 - -/controller.image -/controller.image.* -/kubeseal.image -/kubeseal.image.* -/pushed.controller.image.* -/pushed.kubeseal.image.* -/controller-manifest-* -/push-controller-image -/*-static -/*-static-* -/controller.yaml -/controller-norbac.yaml -/controller-podmonitor.yaml -/docker/controller -*.iml -.idea - -# GoReleaser output dir -dist/ - -# Vendor folder -vendor/ -report.xml diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeseal-0.41.1/RELEASE-NOTES.md new/kubeseal-0.41.2/RELEASE-NOTES.md --- old/kubeseal-0.41.1/RELEASE-NOTES.md 2026-10-23 14:13:56.000000000 +0200 +++ new/kubeseal-0.41.2/RELEASE-NOTES.md 2026-10-26 13:39:57.000000000 +0100 @@ -4,6 +4,9 @@ [](https://github.com/bitnami/sealed-secrets/releases/latest) +## v0.41.2 +- Failing pipelines during release + ## v0.41.1 - Failing pipelines during release ++++++ kubeseal.obsinfo ++++++ --- /var/tmp/diff_new_pack.NguA5n/_old 2026-10-29 16:10:41.376005326 +0100 +++ /var/tmp/diff_new_pack.NguA5n/_new 2026-10-29 16:10:41.380005494 +0100 @@ -1,5 +1,5 @@ name: kubeseal -version: 0.41.1 -mtime: 1792757636 -commit: f845e8f80a1ff6d112e2116d552f4670bf22895c +version: 0.41.2 +mtime: 1793018397 +commit: 51799eb6dd970239e356c1ccffd354fe74408700 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/kubeseal/vendor.tar.gz /work/SRC/openSUSE:Factory/.kubeseal.new.1255/vendor.tar.gz differ: char 5, line 1
