Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package afterburn for openSUSE:Factory checked in at 2022-01-19 00:35:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/afterburn (Old) and /work/SRC/openSUSE:Factory/.afterburn.new.1892 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "afterburn" Wed Jan 19 00:35:30 2022 rev:7 rq:947296 version:5.0.0 Changes: -------- --- /work/SRC/openSUSE:Factory/afterburn/afterburn.changes 2021-11-17 01:15:21.162190963 +0100 +++ /work/SRC/openSUSE:Factory/.afterburn.new.1892/afterburn.changes 2022-01-19 00:36:08.198330802 +0100 @@ -1,0 +2,35 @@ +Thu Jan 13 19:05:51 UTC 2022 - [email protected] + +- Update some dependencies + * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1 + This fixes the following security issues: + https://rustsec.org/advisories/RUSTSEC-2021-0119 + * build(deps): bump generic-array from 0.12.3 to 0.12.4 + This fixes a security issue: + https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465 + * build(deps): bump futures-util from 0.3.6 to 0.3.15 + This fixes a security issue: + https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905 + * build(deps): bump rand_core from 0.6.1 to 0.6.3 + This fixes a security issue: + https://rustsec.org/advisories/RUSTSEC-2021-0023 + AKA CVE-2021-27378, bsc#1182432 + * build(deps): bump hyper from 0.14.2 to 0.14.11 + This fixes two security issues: + https://rustsec.org/advisories/RUSTSEC-2021-0078 + AKA CVE-2021-32715, bsc#1188173 + https://rustsec.org/advisories/RUSTSEC-2021-0079 + AKA CVE-2021-32714, bsc#1188174 + * build(deps): bump tokio from 1.0.1 to 1.15.0 + This fixes two security issues: + https://rustsec.org/advisories/RUSTSEC-2021-0124 + AKA CVE-2021-45710, bsc#1194119 + https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191 +- Remove cargo_audit service, as it makes no sense as a service (it doesn't + automatically get rerun), it would make more sense during the build process + as then it gets rerun if the package or the vulnerability database get + changed +- switch services from disabled to manual +- remove hard coded author for tar_scm service + +------------------------------------------------------------------- New: ---- _servicedata ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ afterburn.spec ++++++ --- /var/tmp/diff_new_pack.uu7SPk/_old 2022-01-19 00:36:09.582331791 +0100 +++ /var/tmp/diff_new_pack.uu7SPk/_new 2022-01-19 00:36:09.586331793 +0100 @@ -1,7 +1,7 @@ # # spec file for package afterburn # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed ++++++ _service ++++++ --- /var/tmp/diff_new_pack.uu7SPk/_old 2022-01-19 00:36:09.622331819 +0100 +++ /var/tmp/diff_new_pack.uu7SPk/_new 2022-01-19 00:36:09.626331822 +0100 @@ -1,26 +1,24 @@ <services> - <service name="tar_scm" mode="disabled"> - <param name="url">https://github.com/coreos/afterburn.git</param> + <service name="tar_scm" mode="manual"> + <!-- <param name="url">https://github.com/coreos/afterburn.git</param> --> + <param name="url">https://github.com/JanZerebecki/afterburn.git</param> <param name="scm">git</param> <param name="exclude">.git</param> <param name="filename">afterburn</param> - <param name="revision">v5.0.0</param> + <!-- <param name="revision">v5.0.0</param> --> + <param name="revision">origin/for-5.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> - <param name="changesauthor">[email protected]</param> </service> - <service name="set_version" mode="disabled"/> - <service name="recompress" mode="disabled"> + <service name="set_version" mode="manual"/> + <service name="recompress" mode="manual"> <param name="file">*.tar</param> <param name="compression">xz</param> </service> - <service name="cargo_vendor" mode="disabled"> + <service name="cargo_vendor" mode="manual"> <param name="srcdir">afterburn</param> <param name="compression">xz</param> </service> - <service name="cargo_audit" mode="disabled"> - <param name="srcdir">afterburn</param> - </service> </services> ++++++ _servicedata ++++++ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/coreos/afterburn.git</param> <param name="changesrevision">8c366ef408e755f557aaead99c74bfc35c1c5bf5</param></service><service name="tar_scm"> <param name="url">https://github.com/JanZerebecki/afterburn.git</param> <param name="changesrevision">104ec25049bf429578c60877c0ea503ee96354e4</param></service></servicedata> (No newline at EOF) ++++++ afterburn-5.0.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/afterburn/afterburn-5.0.0.tar.xz /work/SRC/openSUSE:Factory/.afterburn.new.1892/afterburn-5.0.0.tar.xz differ: char 15, line 1 ++++++ vendor.tar.xz ++++++ /work/SRC/openSUSE:Factory/afterburn/vendor.tar.xz /work/SRC/openSUSE:Factory/.afterburn.new.1892/vendor.tar.xz differ: char 26, line 1
