Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-dulwich for openSUSE:Factory checked in at 2026-11-03 17:57:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-dulwich (Old) and /work/SRC/openSUSE:Factory/.python-dulwich.new.1257 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-dulwich" Tue Nov 3 17:57:56 2026 rev:79 rq:1394576 version:1.2.20 Changes: -------- --- /work/SRC/openSUSE:Factory/python-dulwich/python-dulwich.changes 2026-10-23 20:30:26.377970303 +0200 +++ /work/SRC/openSUSE:Factory/.python-dulwich.new.1257/python-dulwich.changes 2026-11-03 17:59:12.764476260 +0100 @@ -1,0 +2,19 @@ +Mon Nov 2 22:43:00 UTC 2026 - Lukas Müller <[email protected]> + +- Update to version 1.2.20. + Changelog: https://github.com/jelmer/dulwich/releases/tag/dulwich-1.2.20 + * Validate object ids in LFS server batch requests, so a client can no longer probe for arbitrary files on the server via an absolute path or .. in the oid. + * Refuse ref names outside refs/ (such as HEAD) or malformed ones in receive-pack. + * Only pass successfully updated refs to the post-receive hook. + * Refuse to check out .gitmodules as a symlink. + * Parse repeated or misplaced commit and tag headers the same way git does, and reject commits and tags git refuses to parse. + * Verify commit signatures against the raw commit, and support SHA-256 commit signatures (gpgsig-sha256). + * Split a tag's signature from its message at the last signature marker, and recognise PGP message and X.509 signatures. + * Add PySequoiaSignatureVendor for signing and verifying with pysequoia and explicitly provided keys. + * Fix fetching into a shallow clone over protocol v2, which could drop the pack while still updating the remote ref. + * Report the remote's stderr when an ssh connection closes before the server sends anything. + * Apply zero-context insertion hunks (diff -U0) at the right line. + * Accept max_input_size in MemoryObjectStore.add_thin_pack. + * Speed up indexing of received thin packs in DiskObjectStore.add_thin_pack. + +------------------------------------------------------------------- Old: ---- dulwich-1.2.19.tar.gz New: ---- dulwich-1.2.20.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-dulwich.spec ++++++ --- /var/tmp/diff_new_pack.KPfcby/_old 2026-11-03 17:59:15.846605318 +0100 +++ /var/tmp/diff_new_pack.KPfcby/_new 2026-11-03 17:59:15.848605402 +0100 @@ -29,7 +29,7 @@ %endif %{?sle15_python_module_pythons} Name: python-dulwich -Version: 1.2.19 +Version: 1.2.20 Release: 0 Summary: Pure-Python Git Library License: Apache-2.0 OR GPL-2.0-or-later ++++++ dulwich-1.2.19.tar.gz -> dulwich-1.2.20.tar.gz ++++++ ++++ 4501 lines of diff (skipped)
