Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package headroom for openSUSE:Factory checked in at 2026-11-07 23:32:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/headroom (Old) and /work/SRC/openSUSE:Factory/.headroom.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "headroom" Sat Nov 7 23:32:09 2026 rev:6 rq:1395908 version:0.42.0 Changes: -------- --- /work/SRC/openSUSE:Factory/headroom/headroom.changes 2026-10-15 16:13:03.188299853 +0200 +++ /work/SRC/openSUSE:Factory/.headroom.new.3759290/headroom.changes 2026-11-07 23:32:13.471583950 +0100 @@ -1,0 +2,17 @@ +Thu Oct 29 10:21:22 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 0.42.0: + * Proxy turn hooks rewrite OpenAI Responses requests over HTTP + and WebSocket; their savings show in /stats extension_savings + * Per-request saved-tokens and counterfactual savings records + * Cache: bounded router compression cache (overflow in SQLite), + prefix-tracker state survives graceful proxy restarts + * Batch: live contexts survive capacity cleanup; native Gemini + continuation tools preserved + * HEADROOM_TELEMETRY=off now stops the anonymous beacon + * CVE-2026-59951: MCP SDK floor raised to 1.30.0 (proxy extra) + * Vendored Rust tree refreshed (rustls 0.23.46 for + RUSTSEC-2026-0346..0349, base64 0.23.1); licence set + unchanged (Apache-2.0 AND MPL-2.0) + +------------------------------------------------------------------- Old: ---- headroom-0.41.0.tar.gz New: ---- headroom-0.42.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ headroom.spec ++++++ --- /var/tmp/diff_new_pack.tDWx7k/_old 2026-11-07 23:32:16.848723489 +0100 +++ /var/tmp/diff_new_pack.tDWx7k/_new 2026-11-07 23:32:16.850723571 +0100 @@ -20,20 +20,21 @@ # the distribution primary interpreter. %define pythons %{primary_python} Name: headroom -Version: 0.41.0 +Version: 0.42.0 Release: 0 Summary: Context optimization layer for LLM applications -# Legal-Review-Notice: headroom-ai is Apache-2.0. The shipped artefact is -# the maturin cdylib from crates/headroom-py (cargo tree --offline -# -p headroom-py -e normal, 335 crates over 553 vendored). The only -# copyleft licence in that graph is MPL-2.0 from option-ext 0.2.0 (via -# hf-hub -> dirs -> dirs-sys). r-efi offers LGPL-2.1-or-later but is -# UEFI-target-only and is not in the Linux graph. aws-lc-sys is vendored -# with the workspace but is not linked into headroom-py. MPL-2.0 section -# 3.2 is satisfied because vendor.tar.zst ships in the src.rpm. +# Legal-Review-Notice: headroom-ai is Apache-2.0; the shipped artefact is +# the maturin cdylib from crates/headroom-py. +# - MPL-2.0: option-ext 0.2.0 (via hf-hub -> dirs -> dirs-sys); section 3.2 +# satisfied — its sources ship in vendor.tar.zst. +# - r-efi (LGPL-2.1-or-later): UEFI-target-only, absent from the Linux graph. +# - aws-lc-sys: vendored with the workspace but not linked into headroom-py. License: Apache-2.0 AND MPL-2.0 URL: https://github.com/headroomlabs-ai/headroom Source0: %{url}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz +# vendor.tar.zst is cargo-vendor output minus dead prebuilt binaries (aws-lc +# prebuilt-nasm and ring pregenerated COFF, winapi/windows import libs, +# wit-bindgen wasm/cabi, libloading test DLLs); checksums repaired, lock intact. Source1: vendor.tar.zst BuildRequires: %{python_module PyYAML >= 6.0} BuildRequires: %{python_module click >= 8.3.3} @@ -93,8 +94,8 @@ Requires: %{primary_python}-h2 >= 3.0 Requires: %{primary_python}-httpx >= 0.24.0 Requires: %{primary_python}-magika >= 0.6.0 -# Extra is mcp>=1.28.1,<2; Factory python-mcp is 1.28.1 -Requires: %{primary_python}-mcp >= 1.28.1 +# Extra is mcp>=1.30.0,<2; CVE-2026-59951 fixed in 1.30.0 +Requires: %{primary_python}-mcp >= 1.30.0 Requires: %{primary_python}-onnxruntime >= 1.24.0 Requires: %{primary_python}-openai >= 2.14.0 Requires: %{primary_python}-orjson >= 3.9.14 ++++++ headroom-0.41.0.tar.gz -> headroom-0.42.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/headroom/headroom-0.41.0.tar.gz /work/SRC/openSUSE:Factory/.headroom.new.3759290/headroom-0.42.0.tar.gz differ: char 30, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/headroom/vendor.tar.zst /work/SRC/openSUSE:Factory/.headroom.new.3759290/vendor.tar.zst differ: char 7, line 1
