Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package git-annex for openSUSE:Factory checked in at 2026-11-06 19:51:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/git-annex (Old) and /work/SRC/openSUSE:Factory/.git-annex.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "git-annex" Fri Nov 6 19:51:17 2026 rev:60 rq:1395624 version:10.20261026 Changes: -------- --- /work/SRC/openSUSE:Factory/git-annex/git-annex.changes 2026-06-28 21:06:58.606969074 +0200 +++ /work/SRC/openSUSE:Factory/.git-annex.new.3759290/git-annex.changes 2026-11-06 19:58:39.211881347 +0100 @@ -1,0 +2,170 @@ +Thu Nov 5 18:53:04 UTC 2026 - Peter Simons <[email protected]> + +- Enable support for Blake3, Botan, and XXH3. + +------------------------------------------------------------------- +Mon Oct 26 18:01:10 UTC 2026 - Peter Simons <[email protected]> + +- Update git-annex to version 10.20261026. + git-annex (10.20261026) upstream; urgency=high + + * This releases fixes a security hole that allowed private data + exfiltration from special remotes. (CVE-2026-112818) + https://git-annex.branchable.com/security/cross_repository_data_exfiltration_via_special_remote/ + * verifyremote: New command, used to verify the configuration of special + remotes is safe. + * enableremote: Display configuration and prompt for verifyremote to be + run. Until it is verified, the special remote cannot be used, + and git pushes to all remotes will be prevented. + * When a special remote has been autoenabled, allow it to be used without + verification, but prevent sending annexed files or git pushes to any + remote until it is verified. + * After upgrading git-annex, existing special remotes will continue to work + as before. If a special remote could have been configured by a third + party, you should verify its configuration using the + `git-annex verifyremote` command. + * Changes to special remote configuration received in the git-annex + branch no longer take effect until git-annex verifyremote is run to + review and verify the new configuration. + * init: When run in an already initialized repository, avoid + autoenabling new special remotes, since files received from + them could leak out via other git-annex processes running in the + repository. + * init --autoenable: Refuse to perform probably unsafe action unless + forced. + * Added remote.name.annex-verified git config. + * git-annex.cabal: Added Memory build flag to support building with + older versions of crypton that don't use ram. + + -- Joey Hess <[email protected]> Mon, 26 Oct 2026 14:00:00 -0400 + + git-annex (10.20261020) upstream; urgency=medium + + * adjust --hide-unwanted: New option to make an adjusted branch + containing only wanted files. + * push: Force push to remote git-annex branch when it has been + supersceded by a transition. + * Fix handling of --sameas special remotes with onlyencryptcreds=yes. + * Linux standalone builds bundled CA certs updated for + EMudhra Intermediate CA Compromise. + + -- Joey Hess <[email protected]> Tue, 20 Oct 2026 16:45:06 -0400 + + git-annex (10.20261006) upstream; urgency=medium + + * Fix stack build. + + -- Joey Hess <[email protected]> Tue, 06 Oct 2026 10:06:34 -0400 + + git-annex (10.20261005) upstream; urgency=medium + + * Fix mask special remote to not hang after the first file. + * Fix concurrent import of identical files to not fail with + "transfer already in progress". + * Also fixes possible data corruption when importing identical small files. + * Use git-credential in more situations when accessing urls that need a + password or other authentication, including the web, bittorrent and + httpalso special remotes, and git-annex addurl and importfeed. + * external: Fix DOWNLOAD-URL to support git-credential, which it + was already documented to do. + * external: Support git-credential in TRANSFER-RETRIEVE-URL, + CHECKPRESENT-URL, and RETRIEVEIMPORT-URL + * webdav: Fix a hang when credentials are not available. + (Reversion introduced in 10.20260901) + * export: Display a warning when the user is either in the middle + of an export conflict, or has been unsafely writing directly to a + remote that is configured with exporttree=yes but without + importtree=yes. + * importfeed: Avoid displaying empty feed titles. + * Allow retrieval from some importtree=yes special remotes when there + is no recorded content identifier. + * Automate updating remote.name.annexUrl for annex+https servers, + by re-probing the http remote's annex.url config when unable to connect + to an annex+https server. + * test, testremote: Support --tap output when built with TastyTap build + flag. + * testremote: Add --ensure-readonly mode. + * Support bup 0.34, while also still working with previous versions. + * When built with Botan, also use it for HMAC. + * NoLLMDependencies: Update for crypton. + * NoLLMDependencies: Update for tls. + * Support building with QuickCheck 2.17. + * Support building with crypton 1.1.0. + + -- Joey Hess <[email protected]> Mon, 05 Oct 2026 10:44:55 -0400 + + git-annex (10.20260901) upstream; urgency=medium + + * Behavior change: drop --auto --from a remote does not any longer + try to drop content that is not known to be present on the remote. + This avoids unncessary work and makes it consistent with the behavior + of git-annex sync and push. + * External special remote protocol extended to support IMPORTKEY. + * git-annex-remote-internetarchive supports --no-content imports. + * diffdriver: Avoid crashing when git passes an (undocumented) 8th + parameter. + * The preferred content groupwanted expression will no longer + consider a groupwanted expression of "" to be set, which allows + another group's groupwanted expression to be used instead. + * Fixed buggy handling of preferred content + "balanced=groupname:lackingcopies" + * Expand preferred content "lackingcopies" and "approxlackingcopies" + expression syntax to support "groupname:number" + * Expand preferred content "copies", "lackingcopies", and + "approxlackingcopies" expression syntax to support group limits which + can include/exclude multiple groups. Eg + "copies=archive+backup-offsite=3" + * Also expanded --lackingcopies, --approxlackingcopies, and --copies + with the same syntax. + * Expand preferred content "balanced", "fullybalanced", + "sizebalanced" and "fullysizebalanced" expression syntax to support + group limits as well. Eg + "balanced=backup:lackingcopies=archive-offsite" + * importfeed: Fix reporting and logging of problems with feeds. + * importfeed: When adding an url, indicate which feed it is from. + * Fix reversion in 8.20200226 that broke git-annex benchmark --databases + * Remove the ParallelBuild cabal flag and add cabal.project that + enables parallel build by default with ghc 9.8+ and cabal-install 3.12. + * NoLLMDependencies: Update for warp and magic. + * git-annex.cabal: Pin magic to 1.1 avoiding build failure on Windows + with newer version. + * stack.yaml: Update to lts-24.52 + + -- Joey Hess <[email protected]> Tue, 01 Sep 2026 11:25:45 -0400 + + git-annex (10.20260717) upstream; urgency=medium + + * External special remote protocol extended to support import. + Developers of external special remotes should consider if import makes + sense for them and add support. + * Support importtree=yes with rsync special remotes. + * Added git-annex-remote-internetarchive special remote that imports an + Internet Archive item and serves as an example for how to easily write + importtree=yes external special remotes. + https://git-annex.branchable.com/tips/how_to_make_a_simple_importtree_special_remote/ + * Added DOWNLOAD-URL extension to the external special remote protocol. + * git-annex is guaranteed to not contain LLM generated code, + and will attempt to remain buildable with versions of dependencies + that predate the addition of any LLM generated code. + See https://git-annex.branchable.com/no_llm_code/ + * git-annex.cabal: Added NoLLMDependencies build flag. + * Added stack-NoLLMDependencies.yaml + * Avoid redundant hash verification after a hash verification fails. + * Fix build with time-1.15. + + -- Joey Hess <[email protected]> Mon, 20 Jul 2026 13:04:47 -0400 + +- drop obsolete "0001-persistent-2.12.0.1-include-the-code-from-persistent.patch" + +- refresh "0001-Build-with-ram-instead-of-memory-package-to-support-.patch" + +------------------------------------------------------------------- +Tue Aug 25 18:26:12 UTC 2026 - Bernhard Wiedemann <[email protected]> + +- Create tmp/configure-stamp after building so that the Makefile's + install targets reuse the configuration from %build instead of + reconfiguring with different cabal flags and ghc options and + rebuilding+relinking the binary during %install; drops a full + second build and helps reproducible builds + +------------------------------------------------------------------- Old: ---- 0001-persistent-2.12.0.1-include-the-code-from-persistent.patch git-annex-10.20260624.tar.gz New: ---- git-annex-10.20261026.tar.gz ----------(Old B)---------- Old: - drop obsolete "0001-persistent-2.12.0.1-include-the-code-from-persistent.patch" ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ git-annex.spec ++++++ --- /var/tmp/diff_new_pack.3sM7PG/_old 2026-11-06 19:58:40.487934764 +0100 +++ /var/tmp/diff_new_pack.3sM7PG/_new 2026-11-06 19:58:40.492934973 +0100 @@ -17,14 +17,13 @@ Name: git-annex -Version: 10.20260624 +Version: 10.20261026 Release: 0 Summary: Manage files with git, without checking their contents into git License: AGPL-3.0-or-later AND GPL-3.0-or-later AND BSD-2-Clause AND MIT AND GPL-2.0-only URL: https://hackage.haskell.org/package/%{name} Source0: https://github.com/opensuse-haskell/git-annex/archive/%{version}.tar.gz#/%{name}-%{version}.tar.gz -Patch0: 0001-persistent-2.12.0.1-include-the-code-from-persistent.patch -Patch1: 0001-Build-with-ram-instead-of-memory-package-to-support-.patch +Patch01: 0001-Build-with-ram-instead-of-memory-package-to-support-.patch BuildRequires: bash-completion BuildRequires: chrpath BuildRequires: curl @@ -50,10 +49,14 @@ BuildRequires: ghc-aws-prof BuildRequires: ghc-base-devel BuildRequires: ghc-base-prof +BuildRequires: ghc-blake3-devel +BuildRequires: ghc-blake3-prof BuildRequires: ghc-blaze-builder-devel BuildRequires: ghc-blaze-builder-prof BuildRequires: ghc-bloomfilter-devel BuildRequires: ghc-bloomfilter-prof +BuildRequires: ghc-botan-low-devel +BuildRequires: ghc-botan-low-prof BuildRequires: ghc-bytestring-devel BuildRequires: ghc-bytestring-prof BuildRequires: ghc-case-insensitive-devel @@ -118,8 +121,6 @@ BuildRequires: ghc-http-types-prof BuildRequires: ghc-magic-devel BuildRequires: ghc-magic-prof -BuildRequires: ghc-memory-devel -BuildRequires: ghc-memory-prof BuildRequires: ghc-microlens-devel BuildRequires: ghc-microlens-prof BuildRequires: ghc-monad-control-devel @@ -144,8 +145,12 @@ BuildRequires: ghc-persistent-prof BuildRequires: ghc-persistent-sqlite-devel BuildRequires: ghc-persistent-sqlite-prof +BuildRequires: ghc-persistent-template-devel +BuildRequires: ghc-persistent-template-prof BuildRequires: ghc-process-devel BuildRequires: ghc-process-prof +BuildRequires: ghc-ram-devel +BuildRequires: ghc-ram-prof BuildRequires: ghc-random-devel BuildRequires: ghc-random-prof BuildRequires: ghc-regex-tdfa-devel @@ -219,6 +224,8 @@ BuildRequires: ghc-warp-prof BuildRequires: ghc-warp-tls-devel BuildRequires: ghc-warp-tls-prof +BuildRequires: ghc-xxhash-ffi-devel +BuildRequires: ghc-xxhash-ffi-prof BuildRequires: ghc-yesod-core-devel BuildRequires: ghc-yesod-core-prof BuildRequires: ghc-yesod-devel @@ -273,10 +280,15 @@ %prep %autosetup -p1 +cabal-tweak-dep-ver magic '<= 1.1' '< 2' %build -%define cabal_configure_options -f+assistant -f+dbus -f+magicmime -f+production -f+torrentparser -f-benchmark -f-ospath +%define cabal_configure_options -f+assistant -f+blake3 -f+botan -f+dbus -f+magicmime -f+production -f+torrentparser -f+xxh3 -f-benchmark -f-debuglocks -f-memory -f-nollmdependencies -f-ospath -f-tastytap %ghc_bin_build +# without the stamp, `make install-bins` reconfigures with the Makefile's own +# options, discarding the ones above, and rebuilds+relinks the binary +mkdir -p tmp +touch tmp/configure-stamp %check %make_build DESTDIR=%{buildroot} BUILDER=./Setup test ++++++ 0001-Build-with-ram-instead-of-memory-package-to-support-.patch ++++++ --- /var/tmp/diff_new_pack.3sM7PG/_old 2026-11-06 19:58:40.547937276 +0100 +++ /var/tmp/diff_new_pack.3sM7PG/_new 2026-11-06 19:58:40.554937569 +0100 @@ -1,14 +1,53 @@ -diff --git a/git-annex.cabal b/git-annex.cabal -index 2fef9ae934..9ddfd828ea 100644 ---- a/git-annex.cabal -+++ b/git-annex.cabal -@@ -265,7 +265,7 @@ Executable git-annex - socks (>= 0.6.0), - stm-chans, - crypto-api, -- memory, -+ ram, - deepseq, - split, - attoparsec (>= 0.13.2.2), +diff --git a/Utility/AuthToken.hs b/Utility/AuthToken.hs +index 46a7c4a7b6..4f94c984a1 100644 +--- a/Utility/AuthToken.hs ++++ b/Utility/AuthToken.hs +@@ -25,7 +25,7 @@ import Utility.Exception + + import Data.Maybe + import Data.Char +-import qualified "memory" Data.ByteArray as BA ++import qualified Data.ByteArray as BA + import qualified Data.Text as T + import qualified Data.Text.Encoding as TE + import qualified Data.ByteString.Lazy as L +diff --git a/Utility/Hash/Crypton.hs b/Utility/Hash/Crypton.hs +index 91091038db..a7c60578f7 100644 +--- a/Utility/Hash/Crypton.hs ++++ b/Utility/Hash/Crypton.hs +@@ -73,7 +73,7 @@ import Data.IORef + #if MIN_VERSION_crypton(1,1,0) + import qualified "ram" Data.ByteArray as BA + #else +-import qualified "memory" Data.ByteArray as BA ++import qualified Data.ByteArray as BA + #endif + import "crypton" Crypto.Hash + +diff --git a/Utility/Hash/Types.hs b/Utility/Hash/Types.hs +index 2e63e9c805..8bcf0a6e84 100644 +--- a/Utility/Hash/Types.hs ++++ b/Utility/Hash/Types.hs +@@ -11,7 +11,7 @@ + module Utility.Hash.Types where + + import qualified Data.ByteString as S +-import qualified "memory" Data.ByteArray.Encoding as BAE ++import qualified Data.ByteArray.Encoding as BAE + import Data.String + import Control.DeepSeq + import GHC.Generics +diff --git a/Utility/IPAddress.hs b/Utility/IPAddress.hs +index cde446b642..e2d677af10 100644 +--- a/Utility/IPAddress.hs ++++ b/Utility/IPAddress.hs +@@ -22,7 +22,7 @@ import Utility.Exception + + import Network.Socket + import Data.Word +-import "memory" Data.Memory.Endian ++import Data.Memory.Endian + import Data.List + import Text.Printf + ++++++ git-annex-10.20260624.tar.gz -> git-annex-10.20261026.tar.gz ++++++ /work/SRC/openSUSE:Factory/git-annex/git-annex-10.20260624.tar.gz /work/SRC/openSUSE:Factory/.git-annex.new.3759290/git-annex-10.20261026.tar.gz differ: char 14, line 1
