June 2024 - openSUSE Commits - openSUSE Mailing Lists

commit libmediainfo for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libmediainfo for openSUSE:Factory checked in at 2024-06-03 17:42:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libmediainfo (Old) and /work/SRC/openSUSE:Factory/.libmediainfo.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libmediainfo" Mon Jun 3 17:42:53 2024 rev:37 rq:1178081 version:24.05 Changes: -------- --- /work/SRC/openSUSE:Factory/libmediainfo/libmediainfo.changes 2024-04-23 18:55:52.950050819 +0200 +++ /work/SRC/openSUSE:Factory/.libmediainfo.new.24587/libmediainfo.changes 2024-06-03 17:43:03.930154275 +0200 @@ -1,0 +2,36 @@ +Sat Jun 1 20:41:26 UTC 2024 - Maxime Gervais <maxime(a)mediaarea.net> + +- Update to version 24.05 + Added features: + * I2029, MXF: decode of VBI (Line 21 & VITC) + * I2058, VorbisCom: show MusicBrainz IDs in XML or + full text output + * I1881, MXF & MOV: customizable seek pos and duration of + caption probe + * I2005, WavPack: support of non-standard sampling rate + * I2021, MP4: support of Qt style AudioSampleEntry in ISO MP4 + * Conformance checker: report of malformed frames for + AVC & HEVC & AAC + * Conformance checker: an element is indicated bigger than its + upper element + * Conformance checker: Add more stream synchronization + related checks + * Conformance checker: Check coherency of MXF elements having + vectors + * Conformance checker: check of MPEG Audio sync loss in raw + MP3 & truncated file + * Conformance checker: FFV1 checks also when in AVI and MOV/MP4 + * Conformance checker: check if a TIFF file is complete + * Conformance checker: span of frames & frame/timestamp/byte + offset + Fixed bugs: + * Avoid infinite loop with distant files + * MXF: Support of SMPTE ST 422-2019 I2 + * I2055, Dolby Vision: fix crash with some files + * I2054, ID3v2: fix crash with some malformed files + * FFV1: fix conformance checker crash with Golomb Rice parsing + * AC-3: fix crash with some TrueHD files + * I2005, WavPack: handle of small files + * BMP: fix bitdepth info + +------------------------------------------------------------------- Old: ---- libmediainfo_24.04.tar.xz New: ---- libmediainfo_24.05.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libmediainfo.spec ++++++ --- /var/tmp/diff_new_pack.WEAYiP/_old 2024-06-03 17:43:05.870225774 +0200 +++ /var/tmp/diff_new_pack.WEAYiP/_new 2024-06-03 17:43:05.894226658 +0200 @@ -19,7 +19,7 @@ %define sover 0 Name: libmediainfo -Version: 24.04 +Version: 24.05 Release: 0 Summary: Library for supplying technical and tag information about a video or audio file License: BSD-2-Clause ++++++ libmediainfo_24.04.tar.xz -> libmediainfo_24.05.tar.xz ++++++ ++++ 5804 lines of diff (skipped)

1 0

commit python-unittest-mixins for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-unittest-mixins for openSUSE:Factory checked in at 2024-06-03 17:42:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-unittest-mixins (Old) and /work/SRC/openSUSE:Factory/.python-unittest-mixins.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-unittest-mixins" Mon Jun 3 17:42:51 2024 rev:3 rq:1178076 version:1.6 Changes: -------- --- /work/SRC/openSUSE:Factory/python-unittest-mixins/python-unittest-mixins.changes 2021-09-03 21:25:33.974135883 +0200 +++ /work/SRC/openSUSE:Factory/.python-unittest-mixins.new.24587/python-unittest-mixins.changes 2024-06-03 17:43:01.886078944 +0200 @@ -1,0 +2,10 @@ +Sat Jun 1 20:10:03 UTC 2024 - Matej Cepl <mcepl(a)cepl.eu> + +- Clean up SPEC file. + +------------------------------------------------------------------- +Thu May 30 08:11:07 UTC 2024 - Markéta Machová <mmachova(a)suse.com> + +- Add drop-old-pythons.patch to get rid of six + +------------------------------------------------------------------- New: ---- drop-old-pythons.patch BETA DEBUG BEGIN: New: - Add drop-old-pythons.patch to get rid of six BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-unittest-mixins.spec ++++++ --- /var/tmp/diff_new_pack.EXkPSZ/_old 2024-06-03 17:43:03.234128624 +0200 +++ /var/tmp/diff_new_pack.EXkPSZ/_new 2024-06-03 17:43:03.238128772 +0200 @@ -1,7 +1,7 @@ # # spec file for package python-unittest-mixins # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,37 +16,35 @@ # -%{?!python_module:%define python_module() python-%{**} python3-%{**}} Name: python-unittest-mixins Version: 1.6 Release: 0 -License: Apache-2.0 Summary: Helpful mixins for unittest classes -URL: https://github.com/nedbat/unittest-mixins +License: Apache-2.0 Group: Development/Languages/Python +URL: https://github.com/nedbat/unittest-mixins Source: https://files.pythonhosted.org/packages/source/u/unittest-mixins/unittest-m… +# PATCH-FIX-UPSTREAM https://github.com/nedbat/unittest-mixins/pull/4 drop python<=3.7 support and use of six module +Patch0: drop-old-pythons.patch +BuildRequires: %{python_module pip} BuildRequires: %{python_module setuptools} -BuildRequires: python-rpm-macros -# SECTION test requirements -BuildRequires: %{python_module six >= 1.4.0} -# /SECTION +BuildRequires: %{python_module wheel} BuildRequires: fdupes -Requires: python-six >= 1.4.0 +BuildRequires: python-rpm-macros BuildArch: noarch - %python_subpackages %description Helpful mixins for unittest classes. %prep -%setup -q -n unittest-mixins-%{version} +%autosetup -p1 -n unittest-mixins-%{version} %build -%python_build +%pyproject_wheel %install -%python_install +%pyproject_install %python_expand %fdupes %{buildroot}%{$python_sitelib} %check @@ -55,5 +53,6 @@ %files %{python_files} %doc README.rst %license LICENSE.txt -%{python_sitelib}/* +%{python_sitelib}/unittest_mixins +%{python_sitelib}/unittest_mixins-%{version}*-info ++++++ drop-old-pythons.patch ++++++ From 99244d2230110568234e3156647ee16d5b4bd0af Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tomasz=20K=C5=82oczko?= <kloczek(a)github.com> Date: Sat, 9 Mar 2024 12:17:46 +0000 Subject: [PATCH 1/2] drop python<=3.7 support MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Pass all code over `pyupgrade --py38`. Signed-off-by: Tomasz Kłoczko <kloczek(a)github.com> --- tests/test_mixins.py | 9 ++++----- unittest_mixins/mixins.py | 29 +++++++++++++---------------- 2 files changed, 17 insertions(+), 21 deletions(-) diff --git a/tests/test_mixins.py b/tests/test_mixins.py index 2fd7ca0..edebf53 100644 --- a/tests/test_mixins.py +++ b/tests/test_mixins.py @@ -1,4 +1,3 @@ -# -*- coding: utf-8 -*- # Licensed under the Apache License: http://www.apache.org/licenses/LICENSE-2.0 # For details: https://github.com/nedbat/unittest-mixins/blob/master/NOTICE.txt @@ -32,7 +31,7 @@ class ChangeDirTest(unittest.TestCase): """Test the change_dir decorator.""" def setUp(self): - super(ChangeDirTest, self).setUp() + super().setUp() self.root = tempfile.mkdtemp(prefix="change_dir_test") self.addCleanup(shutil.rmtree, self.root) self.a_dir = os.path.join(self.root, "a_dir") @@ -132,7 +131,7 @@ class EnvironmentAwareMixinTest(EnvironmentAwareMixin, unittest.TestCase): """Tests of test_helpers.EnvironmentAwareMixin.""" def setUp(self): - super(EnvironmentAwareMixinTest, self).setUp() + super().setUp() # Find a pre-existing environment variable. # Not sure what environment variables are available in all of our @@ -229,7 +228,7 @@ def test_two_delayed_assertions(self): - w + z """)) - with six.assertRaisesRegex(self, AssertionError, msg): + with self.assertRaisesRegex(AssertionError, msg): with self.delayed_assertions(): self.assertEqual("x", "y") self.assertEqual("w", "z") @@ -241,7 +240,7 @@ def test_only_one_fails(self): - w + z """)) - with six.assertRaisesRegex(self, AssertionError, msg): + with self.assertRaisesRegex(AssertionError, msg): with self.delayed_assertions(): self.assertEqual("x", "x") self.assertEqual("w", "z") diff --git a/unittest_mixins/mixins.py b/unittest_mixins/mixins.py index d9591ed..36cee46 100644 --- a/unittest_mixins/mixins.py +++ b/unittest_mixins/mixins.py @@ -21,7 +21,7 @@ import six -class _Tee(object): +class _Tee: """A file-like that writes to all the file-likes it has.""" def __init__(self, *files): @@ -101,7 +101,7 @@ def test_foo(self): return val -class ModuleCleaner(object): +class ModuleCleaner: """Remember the state of sys.modules, and provide a way to restore it.""" def __init__(self): @@ -122,7 +122,7 @@ class ModuleAwareMixin(unittest.TestCase): """A test case mixin that isolates changes to sys.modules.""" def setUp(self): - super(ModuleAwareMixin, self).setUp() + super().setUp() self._module_cleaner = ModuleCleaner() self.addCleanup(self._module_cleaner.cleanup_modules) @@ -135,7 +135,7 @@ class SysPathAwareMixin(unittest.TestCase): """A test case mixin that isolates changes to sys.path.""" def setUp(self): - super(SysPathAwareMixin, self).setUp() + super().setUp() setup_with_context_manager(self, saved_sys_path()) @@ -143,7 +143,7 @@ class EnvironmentAwareMixin(unittest.TestCase): """A test case mixin that isolates changes to the environment.""" def setUp(self): - super(EnvironmentAwareMixin, self).setUp() + super().setUp() # Record environment variables that we changed with set_environ. self._environ_undos = {} @@ -202,7 +202,7 @@ class StdStreamCapturingMixin(unittest.TestCase): show_stderr = False def setUp(self): - super(StdStreamCapturingMixin, self).setUp() + super().setUp() # Capture stdout and stderr so we can examine them in tests. # nose keeps stdout from littering the screen, so we can safely _Tee @@ -255,7 +255,7 @@ class DelayedAssertionMixin(unittest.TestCase): """ def __init__(self, *args, **kwargs): - super(DelayedAssertionMixin, self).__init__(*args, **kwargs) + super().__init__(*args, **kwargs) # This mixin only works with assert methods that call `self.fail`. In # Python 2.7, `assertEqual` didn't, but we can do what Python 3 does, # and use `assertMultiLineEqual` for comparing strings. @@ -277,7 +277,7 @@ def delayed_assertions(self): self.fail(self._delayed_assertions[0]) else: self.fail( - "{0} failed assertions:\n{1}".format( + "{} failed assertions:\n{}".format( len(self._delayed_assertions), "\n".join(self._delayed_assertions), ) @@ -310,10 +310,7 @@ def make_file(filename, text="", bytes=b"", newline=None): text = textwrap.dedent(text) if newline: text = text.replace("\n", newline) - if six.PY3: - data = text.encode('utf8') - else: - data = text + data = text.encode('utf8') # Make sure the directories are available. dirs, _ = os.path.split(filename) @@ -355,7 +352,7 @@ class TempDirMixin(SysPathAwareMixin, ModuleAwareMixin, unittest.TestCase): temp_dir_prefix = "test_" def setUp(self): - super(TempDirMixin, self).setUp() + super().setUp() if self.run_in_temp_dir: # Create a temporary directory. @@ -385,7 +382,7 @@ def _check_behavior(self): def _make_temp_dir(self): """Make a temp directory that is cleaned up when the test is done.""" slug = re.sub(r"[^\w]+", "_", self.id()) - name = "{0}{1}_{2:08d}".format( + name = "{}{}_{:08d}".format( self.temp_dir_prefix, slug, random.randint(0, 99999999) @@ -403,7 +400,7 @@ def _delete_temp_dir(self, temp_dir): def skipTest(self, reason): """Skip this test, and give a reason.""" self._class_behavior().skipped += 1 - super(TempDirMixin, self).skipTest(reason) + super().skipTest(reason) def chdir(self, new_dir): """Change directory, and change back when the test is done.""" @@ -427,7 +424,7 @@ def make_file(self, filename, text="", bytes=b"", newline=None): # then report at the end of the process on test classes that were set # wrong. - class _ClassBehavior(object): + class _ClassBehavior: """A value object to store per-class.""" def __init__(self): self.klass = None From b7a7db348acc372c881f0ca72012c49bf0bf5e6a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tomasz=20K=C5=82oczko?= <kloczek(a)github.com> Date: Sat, 9 Mar 2024 12:18:30 +0000 Subject: [PATCH 2/2] manual changes to remove python<=3.7 support and remove use `six module MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Manual changes to remove python<=3.7 support Remove use `six module and use standard io. Add entries for python 3.8 and 3.9 in setup.py. Signed-off-by: Tomasz Kłoczko <kloczek(a)github.com> --- requirements.txt | 1 - setup.py | 11 ++--------- tests/test_mixins.py | 7 +++---- unittest_mixins/mixins.py | 8 +++----- 4 files changed, 8 insertions(+), 19 deletions(-) diff --git a/requirements.txt b/requirements.txt index b6e34eb..e69de29 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +0,0 @@ -six==1.10.0 diff --git a/setup.py b/setup.py index a3a5a5b..c902351 100644 --- a/setup.py +++ b/setup.py @@ -9,13 +9,9 @@ Intended Audience :: Developers License :: OSI Approved :: Apache Software License Operating System :: OS Independent -Programming Language :: Python :: 2.6 -Programming Language :: Python :: 2.7 -Programming Language :: Python :: 3.3 -Programming Language :: Python :: 3.4 -Programming Language :: Python :: 3.5 -Programming Language :: Python :: 3.6 Programming Language :: Python :: 3.7 +Programming Language :: Python :: 3.8 +Programming Language :: Python :: 3.9 Programming Language :: Python :: Implementation :: CPython Programming Language :: Python :: Implementation :: PyPy Topic :: Software Development :: Quality Assurance @@ -31,9 +27,6 @@ author_email='ned(a)nedbatchelder.com', url='https://github.com/nedbat/unittest-mixins', packages=['unittest_mixins'], - install_requires=[ - 'six >= 1.4.0', - ], license='Apache 2.0', classifiers=classifiers.splitlines(), ) diff --git a/tests/test_mixins.py b/tests/test_mixins.py index edebf53..50969e9 100644 --- a/tests/test_mixins.py +++ b/tests/test_mixins.py @@ -4,6 +4,7 @@ """Tests that our test infrastructure is really working!""" import contextlib +import io import os import os.path import re @@ -16,8 +17,6 @@ except ImportError: import unittest -import six - from unittest_mixins import ( change_dir, DelayedAssertionMixin, @@ -323,8 +322,8 @@ def test_stderr(self): old_stdout = sys.stdout old_stderr = sys.stderr self.addCleanup(self._cleanup_streams, old_stdout, old_stderr) - sys.stdout = my_stdout = six.StringIO() - sys.stderr = my_stderr = six.StringIO() + sys.stdout = my_stdout = io.StringIO() + sys.stderr = my_stderr = io.StringIO() results = run_tests_from_class(TheTestsToTest) assert_all_passed(results, tests_run=2) diff --git a/unittest_mixins/mixins.py b/unittest_mixins/mixins.py index 36cee46..479e9d0 100644 --- a/unittest_mixins/mixins.py +++ b/unittest_mixins/mixins.py @@ -6,6 +6,7 @@ import atexit import collections import contextlib +import io import os import random import re @@ -18,9 +19,6 @@ except ImportError: import unittest -import six - - class _Tee: """A file-like that writes to all the file-likes it has.""" @@ -209,11 +207,11 @@ def setUp(self): # it, but it doesn't capture stderr, so we don't want to _Tee stderr to # the real stderr, since it will interfere with our nice field of dots. old_stdout = sys.stdout - self.captured_stdout = six.StringIO() + self.captured_stdout = io.StringIO() sys.stdout = _Tee(sys.stdout, self.captured_stdout) old_stderr = sys.stderr - self.captured_stderr = six.StringIO() + self.captured_stderr = io.StringIO() if self.show_stderr: sys.stderr = _Tee(sys.stderr, self.captured_stderr) else:

1 0

commit gojq for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gojq for openSUSE:Factory checked in at 2024-06-03 17:42:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gojq (Old) and /work/SRC/openSUSE:Factory/.gojq.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "gojq" Mon Jun 3 17:42:45 2024 rev:6 rq:1178069 version:0.12.16 Changes: -------- --- /work/SRC/openSUSE:Factory/gojq/gojq.changes 2024-04-02 16:45:14.331207630 +0200 +++ /work/SRC/openSUSE:Factory/.gojq.new.24587/gojq.changes 2024-06-03 17:42:55.561845875 +0200 @@ -1,0 +2,10 @@ +Sat Jun 1 15:43:28 UTC 2024 - Arnav Singh <opensuse(a)arnavion.dev> + +- Update to v0.12.16 + * Fix offset of query parsing error on multi-byte characters. + * Fix tests of `exp10` and `atan2` failing on some platforms. + * Fix `debug/1` to be available only when `debug/0` is defined. + * Improve parser to allow binary operators as object values. + * Improve compiler to emit error if query is missing. + +------------------------------------------------------------------- Old: ---- gojq-0.12.15.tar.gz New: ---- gojq-0.12.16.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gojq.spec ++++++ --- /var/tmp/diff_new_pack.JcxCkd/_old 2024-06-03 17:42:56.881894523 +0200 +++ /var/tmp/diff_new_pack.JcxCkd/_new 2024-06-03 17:42:56.885894670 +0200 @@ -17,7 +17,7 @@ Name: gojq -Version: 0.12.15 +Version: 0.12.16 Release: 0 Summary: Pure Go implementation of jq License: MIT ++++++ gojq-0.12.15.tar.gz -> gojq-0.12.16.tar.gz ++++++ ++++ 3142 lines of diff (skipped) ++++++ vendor.tar.zst ++++++ ++++ 15385 lines of diff (skipped)

1 0

commit gitleaks for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gitleaks for openSUSE:Factory checked in at 2024-06-03 17:42:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gitleaks (Old) and /work/SRC/openSUSE:Factory/.gitleaks.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "gitleaks" Mon Jun 3 17:42:43 2024 rev:4 rq:1178068 version:8.18.3 Changes: -------- --- /work/SRC/openSUSE:Factory/gitleaks/gitleaks.changes 2024-05-06 17:56:09.317427129 +0200 +++ /work/SRC/openSUSE:Factory/.gitleaks.new.24587/gitleaks.changes 2024-06-03 17:42:51.913711428 +0200 @@ -1,0 +2,19 @@ +Sat Jun 01 15:28:13 UTC 2024 - opensuse_buildservice(a)ojkastl.de + +- Update to version 8.18.3: + * extend FB access token discovery (#1407) + * tests: scalingo validation consistent test (#1359) + * add real (test) standard and restricted keys (#1375) + * Add Cloudflare API and Origin CA keys (#1374) + * Update "contributing guidelines" link (#1390) + * add update token from square (#1370) + * feat: facebook secret, access token, and page access token + rules (#1372) + * update mailchimp with new tokens (#1376) + * Append ordered rules when extending (#1304) + * fix: age rule id with dashes (#1349) + * patching golang.org/x/text for CVE-2021-38561 and + CVE-2022-32149 (#1342) + * Use latest base images. (#1334) + +------------------------------------------------------------------- @@ -5 +24,2 @@ - * Remove IAM identifiers for non-credential resources in the aws-access-token rule + * Remove IAM identifiers for non-credential resources in the + aws-access-token rule @@ -7 +27,2 @@ - * --max-target-megabytes flag now supported for --no-git flag as well + * --max-target-megabytes flag now supported for --no-git flag as + well @@ -13,2 +34,4 @@ - * chore(config): refactor to go generate; simplify configRules init - * pretty apparent 'protect' and 'detect' should be merged into one command + * chore(config): refactor to go generate; simplify configRules + init + * pretty apparent 'protect' and 'detect' should be merged into + one command Old: ---- gitleaks-8.18.2.tar.gz New: ---- gitleaks-8.18.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gitleaks.spec ++++++ --- /var/tmp/diff_new_pack.fZB3aH/_old 2024-06-03 17:42:53.105755359 +0200 +++ /var/tmp/diff_new_pack.fZB3aH/_new 2024-06-03 17:42:53.109755506 +0200 @@ -1,7 +1,7 @@ # # spec file for package gitleaks # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # Copyright (c) 2024 Andreas Stieger <Andreas.Stieger(a)gmx.de> # # All modifications and additions to the file contributed by third parties @@ -20,7 +20,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: gitleaks -Version: 8.18.2 +Version: 8.18.3 Release: 0 Summary: Protect and discover secrets using Gitleaks License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.fZB3aH/_old 2024-06-03 17:42:53.157757275 +0200 +++ /var/tmp/diff_new_pack.fZB3aH/_new 2024-06-03 17:42:53.161757423 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/zricethezav/gitleaks</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v8.18.2</param> + <param name="revision">v8.18.3</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.fZB3aH/_old 2024-06-03 17:42:53.185758307 +0200 +++ /var/tmp/diff_new_pack.fZB3aH/_new 2024-06-03 17:42:53.189758455 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/zricethezav/gitleaks</param> - <param name="changesrevision">ac4b5146b0f112df989b4374abb2b12799e37cba</param></service></servicedata> + <param name="changesrevision">39947b0b0d3f1829438000819c1ba9dbeb023a89</param></service></servicedata> (No newline at EOF) ++++++ gitleaks-8.18.2.tar.gz -> gitleaks-8.18.3.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/Dockerfile new/gitleaks-8.18.3/Dockerfile --- old/gitleaks-8.18.2/Dockerfile 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/Dockerfile 2024-05-31 22:51:43.000000000 +0200 @@ -1,10 +1,10 @@ -FROM golang:1.19 AS build +FROM golang:1.21 AS build WORKDIR /go/src/github.com/zricethezav/gitleaks COPY . . RUN VERSION=$(git describe --tags --abbrev=0) && \ CGO_ENABLED=0 go build -o bin/gitleaks -ldflags "-X="github.com/zricethezav/gitleaks/v8/cmd.Version=${VERSION} -FROM alpine:3.16 +FROM alpine:3.19 RUN apk add --no-cache bash git openssh-client COPY --from=build /go/src/github.com/zricethezav/gitleaks/bin/* /usr/bin/ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/README.md new/gitleaks-8.18.3/README.md --- old/gitleaks-8.18.2/README.md 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/README.md 2024-05-31 22:51:43.000000000 +0200 @@ -382,7 +382,7 @@ ] ``` -Refer to the default [gitleaks config](https://github.com/zricethezav/gitleaks/blob/master/config/gitleaks… for examples or follow the [contributing guidelines](https://github.com/zricethezav/gitleaks/blob/master/README.md) if you would like to contribute to the default configuration. Additionally, you can check out [this gitleaks blog post](https://blog.gitleaks.io/stop-leaking-secrets-configuration-2-3-aeed293b1fbf) which covers advanced configuration setups. +Refer to the default [gitleaks config](https://github.com/zricethezav/gitleaks/blob/master/config/gitleaks… for examples or follow the [contributing guidelines](https://github.com/gitleaks/gitleaks/blob/master/CONTRIBUTING.m… if you would like to contribute to the default configuration. Additionally, you can check out [this gitleaks blog post](https://blog.gitleaks.io/stop-leaking-secrets-configuration-2-3-aeed293b1fbf) which covers advanced configuration setups. ### Additional Configuration diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/cmd/generate/config/main.go new/gitleaks-8.18.3/cmd/generate/config/main.go --- old/gitleaks-8.18.2/cmd/generate/config/main.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/cmd/generate/config/main.go 2024-05-31 22:51:43.000000000 +0200 @@ -45,6 +45,9 @@ rules.CodecovAccessToken(), rules.CoinbaseAccessToken(), rules.Clojars(), + rules.CloudflareAPIKey(), + rules.CloudflareGlobalAPIKey(), + rules.CloudflareOriginCAKey(), rules.ConfluentAccessToken(), rules.ConfluentSecretKey(), rules.Contentful(), @@ -67,7 +70,9 @@ rules.EasyPost(), rules.EasyPostTestAPI(), rules.EtsyAccessToken(), - rules.Facebook(), + rules.FacebookSecret(), + rules.FacebookAccessToken(), + rules.FacebookPageAccessToken(), rules.FastlyAPIToken(), rules.FinicityClientSecret(), rules.FinicityAPIToken(), diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/cmd/generate/config/rules/age.go new/gitleaks-8.18.3/cmd/generate/config/rules/age.go --- old/gitleaks-8.18.2/cmd/generate/config/rules/age.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/cmd/generate/config/rules/age.go 2024-05-31 22:51:43.000000000 +0200 @@ -10,7 +10,7 @@ // define rule r := config.Rule{ Description: "Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information.", - RuleID: "age secret key", + RuleID: "age-secret-key", Regex: regexp.MustCompile(`AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}`), Keywords: []string{"AGE-SECRET-KEY-1"}, } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/cmd/generate/config/rules/cloudflare.go new/gitleaks-8.18.3/cmd/generate/config/rules/cloudflare.go --- old/gitleaks-8.18.2/cmd/generate/config/rules/cloudflare.go 1970-01-01 01:00:00.000000000 +0100 +++ new/gitleaks-8.18.3/cmd/generate/config/rules/cloudflare.go 2024-05-31 22:51:43.000000000 +0200 @@ -0,0 +1,76 @@ +package rules + +import ( + "github.com/zricethezav/gitleaks/v8/config" +) + +var global_keys = []string{ + `cloudflare_global_api_key = "d3d1443e0adc9c24564c6c5676d679d47e2ca"`, // gitleaks:allow + `CLOUDFLARE_GLOBAL_API_KEY: 674538c7ecac77d064958a04a83d9e9db068c`, // gitleaks:allow + `cloudflare: "0574b9f43978174cc2cb9a1068681225433c4"`, // gitleaks:allow +} + +var api_keys = []string{ + `cloudflare_api_key = "Bu0rrK-lerk6y0Suqo1qSqlDDajOk61wZchCkje4"`, // gitleaks:allow + `CLOUDFLARE_API_KEY: 5oK0U90ME14yU6CVxV90crvfqVlNH2wRKBwcLWDc`, // gitleaks:allow + `cloudflare: "oj9Yoyq0zmOyWmPPob1aoY5YSNNuJ0fbZSOURBlX"`, // gitleaks:allow +} + +var origin_ca_keys = []string{ + `CLOUDFLARE_ORIGIN_CA: v1.0-aaa334dc886f30631ba0a610-0d98ef66290d7e50aac7c27b5986c99e6f3f1084c881d8ac0eae5de1d1aa0644076ff57022069b3237d19afe60ad045f207ef2b16387ee37b749441b2ae2e9ebe5b4606e846475d4a5`, + `CLOUDFLARE_ORIGIN_CA: v1.0-15d20c7fccb4234ac5cdd756-d5c2630d1b606535cf9320ae7456b090e0896cec64169a92fae4e931ab0f72f111b2e4ffed5b2bb40f6fba6b2214df23b188a23693d59ce3fb0d28f7e89a2206d98271b002dac695ed`, +} + +var identifiers = []string{"cloudflare"} + +func CloudflareGlobalAPIKey() *config.Rule { + // define rule + r := config.Rule{ + Description: "Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security.", + RuleID: "cloudflare-global-api-key", + Regex: generateSemiGenericRegex(identifiers, hex("37"), true), + + Keywords: identifiers, + } + + // validate + tps := global_keys + fps := append(api_keys, origin_ca_keys...) + + return validate(r, tps, fps) +} + +func CloudflareAPIKey() *config.Rule { + // define rule + r := config.Rule{ + Description: "Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security.", + RuleID: "cloudflare-api-key", + Regex: generateSemiGenericRegex(identifiers, alphaNumericExtendedShort("40"), true), + + Keywords: identifiers, + } + + // validate + tps := api_keys + fps := append(global_keys, origin_ca_keys...) + + return validate(r, tps, fps) +} + +func CloudflareOriginCAKey() *config.Rule { + ca_identifiers := append(identifiers, "v1.0-") + // define rule + r := config.Rule{ + Description: "Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security.", + RuleID: "cloudflare-origin-ca-key", + Regex: generateUniqueTokenRegex(`v1\.0-`+hex("24")+"-"+hex("146"), false), + + Keywords: ca_identifiers, + } + + // validate + tps := origin_ca_keys + fps := append(global_keys, api_keys...) + + return validate(r, tps, fps) +} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/cmd/generate/config/rules/facebook.go new/gitleaks-8.18.3/cmd/generate/config/rules/facebook.go --- old/gitleaks-8.18.2/cmd/generate/config/rules/facebook.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/cmd/generate/config/rules/facebook.go 2024-05-31 22:51:43.000000000 +0200 @@ -5,11 +5,13 @@ "github.com/zricethezav/gitleaks/v8/config" ) -func Facebook() *config.Rule { +// This rule includes both App Secret and Client Access Token +// https://developers.facebook.com/docs/facebook-login/guides/access-tokens/ +func FacebookSecret() *config.Rule { // define rule r := config.Rule{ - Description: "Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.", - RuleID: "facebook", + Description: "Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure.", + RuleID: "facebook-secret", Regex: generateSemiGenericRegex([]string{"facebook"}, hex("32"), true), Keywords: []string{"facebook"}, @@ -18,6 +20,46 @@ // validate tps := []string{ generateSampleSecret("facebook", secrets.NewSecret(hex("32"))), + `facebook_app_secret = "6dca6432e45d933e13650d1882bd5e69"`, // gitleaks:allow + `facebook_client_access_token: 26f5fd13099f2c1331aafb86f6489692`, // gitleaks:allow + } + return validate(r, tps, nil) +} + +// https://developers.facebook.com/docs/facebook-login/guides/access-tokens/#a… +func FacebookAccessToken() *config.Rule { + // define rule + r := config.Rule{ + Description: "Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.", + RuleID: "facebook-access-token", + Regex: generateUniqueTokenRegex(`\d{15,16}(\||%)[0-9a-z\-_]{27,40}`, true), + } + + // validate + tps := []string{ + `{"access_token":"911602140448729|AY-lRJZq9BoDLobvAiP25L7RcMg","token_type":"bearer"}`, // gitleaks:allow + `1308742762612587|rhoK1cbv0DOU_RTX_87O4MkX7AI`, // gitleaks:allow + `1477036645700765|wRPf2v3mt2JfMqCLK8n7oltrEmc`, // gitleaks:allow + } + return validate(r, tps, nil) +} + +// https://developers.facebook.com/docs/facebook-login/guides/access-tokens/#p… +func FacebookPageAccessToken() *config.Rule { + // define rule + r := config.Rule{ + Description: "Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.", + RuleID: "facebook-page-access-token", + Regex: generateUniqueTokenRegex("EAA[MC]"+alphaNumeric("20,"), true), + Keywords: []string{"EAAM", "EAAC"}, + } + + // validate + tps := []string{ + `EAAM9GOnCB9kBO2frzOAWGN2zMnZClQshlWydZCrBNdodesbwimx1mfVJgqZBP5RSpMfUzWhtjTTXHG5I1UlvlwRZCgjm3ZBVGeTYiqAAoxyED6HaUdhpGVNoPUwAuAWWFsi9OvyYBQt22DGLqMIgD7VktuCTTZCWKasz81Q822FPhMTB9VFFyClNzQ0NLZClt9zxpsMMrUZCo1VU1rL3CKavir5QTfBjfCEzHNlWAUDUV2YZD`, // gitleaks:allow + `EAAM9GOnCB9kBO2zXpAtRBmCrsPPjdA3KeBl4tqsEpcYd09cpjm9MZCBIklZBjIQBKGIJgFwm8IE17G5pipsfRBRBEHMWxvJsL7iHLUouiprxKRQfAagw8BEEDucceqxTiDhVW2IZAQNNbf0d1JhcapAGntx5S1Csm4j0GgZB3DuUfI2HJ9aViTtdfH2vjBy0wtpXm2iamevohGfoF4NgyRHusDLjqy91uYMkfrkc`, // gitleaks:allow + `- name: FACEBOOK_TOKEN + value: "EAACEdEose0cBA1bad3afsf2aew"`, // gitleaks:allow } return validate(r, tps, nil) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/cmd/generate/config/rules/heroku.go new/gitleaks-8.18.3/cmd/generate/config/rules/heroku.go --- old/gitleaks-8.18.2/cmd/generate/config/rules/heroku.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/cmd/generate/config/rules/heroku.go 2024-05-31 22:51:43.000000000 +0200 @@ -17,6 +17,7 @@ // validate tps := []string{ `const HEROKU_KEY = "12345678-ABCD-ABCD-ABCD-1234567890AB"`, // gitleaks:allow + `heroku_api_key = "832d2129-a846-4e27-99f4-7004b6ad53ef"`, // gitleaks:allow } return validate(r, tps, nil) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/cmd/generate/config/rules/mailchimp.go new/gitleaks-8.18.3/cmd/generate/config/rules/mailchimp.go --- old/gitleaks-8.18.2/cmd/generate/config/rules/mailchimp.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/cmd/generate/config/rules/mailchimp.go 2024-05-31 22:51:43.000000000 +0200 @@ -10,7 +10,7 @@ r := config.Rule{ RuleID: "mailchimp-api-key", Description: "Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data.", - Regex: generateSemiGenericRegex([]string{"mailchimp"}, `[a-f0-9]{32}-us20`, true), + Regex: generateSemiGenericRegex([]string{"MailchimpSDK.initialize", "mailchimp"}, hex("32")+`-us\d\d`, true), Keywords: []string{ "mailchimp", @@ -20,6 +20,12 @@ // validate tps := []string{ generateSampleSecret("mailchimp", secrets.NewSecret(hex("32"))+"-us20"), + `mailchimp_api_key: cefa780880ba5f5696192a34f6292c35-us18`, // gitleaks:allow + `MAILCHIMPE_KEY = "b5b9f8e50c640da28993e8b6a48e3e53-us18"`, // gitleaks:allow } - return validate(r, tps, nil) + fps := []string{ + // False Negative + `MailchimpSDK.initialize(token: 3012a5754bbd716926f99c028f7ea428-us18)`, // gitleaks:allow + } + return validate(r, tps, fps) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/cmd/generate/config/rules/scalingo.go new/gitleaks-8.18.3/cmd/generate/config/rules/scalingo.go --- old/gitleaks-8.18.2/cmd/generate/config/rules/scalingo.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/cmd/generate/config/rules/scalingo.go 2024-05-31 22:51:43.000000000 +0200 @@ -1,8 +1,6 @@ package rules import ( - "regexp" - "github.com/zricethezav/gitleaks/v8/cmd/generate/secrets" "github.com/zricethezav/gitleaks/v8/config" ) @@ -12,13 +10,14 @@ r := config.Rule{ Description: "Found a Scalingo API token, posing a risk to cloud platform services and application deployment security.", RuleID: "scalingo-api-token", - Regex: regexp.MustCompile(`\btk-us-[a-zA-Z0-9-_]{48}\b`), + Regex: generateUniqueTokenRegex(`tk-us-[a-zA-Z0-9-_]{48}`, false), Keywords: []string{"tk-us-"}, } // validate tps := []string{ generateSampleSecret("scalingo", "tk-us-"+secrets.NewSecret(alphaNumericExtendedShort("48"))), + `scalingo_api_token = "tk-us-loys7ib9yrxcys_ta2sq85mjar6lgcsspkd9x61s7h5epf_-"`, // gitleaks:allow } return validate(r, tps, nil) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/cmd/generate/config/rules/square.go new/gitleaks-8.18.3/cmd/generate/config/rules/square.go --- old/gitleaks-8.18.2/cmd/generate/config/rules/square.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/cmd/generate/config/rules/square.go 2024-05-31 22:51:43.000000000 +0200 @@ -10,13 +10,15 @@ r := config.Rule{ RuleID: "square-access-token", Description: "Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure.", - Regex: generateUniqueTokenRegex(`sq0atp-[0-9A-Za-z\-_]{22}`, true), - Keywords: []string{"sq0atp-"}, + Regex: generateUniqueTokenRegex(`(EAAA|sq0atp-)[0-9A-Za-z\-_]{22,60}`, true), + Keywords: []string{"sq0atp-", "EAAA"}, } // validate tps := []string{ generateSampleSecret("square", secrets.NewSecret(`sq0atp-[0-9A-Za-z\-_]{22}`)), + "ARG token=sq0atp-812erere3wewew45678901", // gitleaks:allow + "ARG token=EAAAlsBxkkVgvmr7FasTFbM6VUGZ31EJ4jZKTJZySgElBDJ_wyafHuBFquFexY7E", // gitleaks:allow", } return validate(r, tps, nil) } @@ -33,6 +35,7 @@ // validate tps := []string{ generateSampleSecret("square", secrets.NewSecret(`sq0csp-[0-9A-Za-z\\-_]{43}`)), + `value: "sq0csp-0p9h7g6f4s3s3s3-4a3ardgwa6ADRDJDDKUFYDYDYDY"`, // gitleaks:allow } return validate(r, tps, nil) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/cmd/generate/config/rules/stripe.go new/gitleaks-8.18.3/cmd/generate/config/rules/stripe.go --- old/gitleaks-8.18.2/cmd/generate/config/rules/stripe.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/cmd/generate/config/rules/stripe.go 2024-05-31 22:51:43.000000000 +0200 @@ -10,15 +10,23 @@ r := config.Rule{ Description: "Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data.", RuleID: "stripe-access-token", - Regex: generateUniqueTokenRegex(`(sk)_(test|live)_[0-9a-z]{10,32}`, true), + Regex: generateUniqueTokenRegex(`(sk|rk)_(test|live|prod)_[0-9a-z]{10,99}`, true), Keywords: []string{ "sk_test", "sk_live", + "sk_prod", + "rk_test", + "rk_live", + "rk_prod", }, } // validate - tps := []string{"stripeToken := \"sk_test_" + secrets.NewSecret(alphaNumeric("30")) + "\""} + tps := []string{ + "stripeToken := \"sk_test_" + secrets.NewSecret(alphaNumeric("30")) + "\"", + "sk_test_51OuEMLAlTWGaDypq4P5cuDHbuKeG4tAGPYHJpEXQ7zE8mKK3jkhTFPvCxnSSK5zB5EQZrJsYdsatNmAHGgb0vSKD00GTMSWRHs", // gitleaks:allow + "rk_prod_51OuEMLAlTWGaDypquDn9aZigaJOsa9NR1w1BxZXs9JlYsVVkv5XDu6aLmAxwt5Tgun5WcSwQMKzQyqV16c9iD4sx00BRijuoon", // gitleaks:allow + } fps := []string{"nonMatchingToken := \"task_test_" + secrets.NewSecret(alphaNumeric("30")) + "\""} return validate(r, tps, fps) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/config/allowlist.go new/gitleaks-8.18.3/config/allowlist.go --- old/gitleaks-8.18.2/config/allowlist.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/config/allowlist.go 2024-05-31 22:51:43.000000000 +0200 @@ -14,7 +14,13 @@ // Regexes is slice of content regular expressions that are allowed to be ignored. Regexes []*regexp.Regexp - // RegexTarget + // Can be `match` or `line`. + // + // If `match` the _Regexes_ will be tested against the match of the _Rule.Regex_. + // + // If `line` the _Regexes_ will be tested against the entire line. + // + // If RegexTarget is empty, it will be tested against the found secret. RegexTarget string // Paths is a slice of path regular expressions that are allowed to be ignored. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/config/config.go new/gitleaks-8.18.3/config/config.go --- old/gitleaks-8.18.2/config/config.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/config/config.go 2024-05-31 22:51:43.000000000 +0200 @@ -4,6 +4,7 @@ _ "embed" "fmt" "regexp" + "sort" "strings" "github.com/rs/zerolog/log" @@ -62,7 +63,7 @@ Keywords []string // used to keep sarif results consistent - orderedRules []string + OrderedRules []string } // Extend is a struct that allows users to define how they want their @@ -158,7 +159,7 @@ StopWords: vc.Allowlist.StopWords, }, Keywords: keywords, - orderedRules: orderedRules, + OrderedRules: orderedRules, } if maxExtendDepth != extendDepth { @@ -177,9 +178,9 @@ return c, nil } -func (c *Config) OrderedRules() []Rule { +func (c *Config) GetOrderedRules() []Rule { var orderedRules []Rule - for _, id := range c.orderedRules { + for _, id := range c.OrderedRules { if _, ok := c.Rules[id]; ok { orderedRules = append(orderedRules, c.Rules[id]) } @@ -240,6 +241,7 @@ log.Trace().Msgf("adding %s to base config", ruleID) c.Rules[ruleID] = rule c.Keywords = append(c.Keywords, rule.Keywords...) + c.OrderedRules = append(c.OrderedRules, ruleID) } } @@ -250,4 +252,7 @@ extensionConfig.Allowlist.Paths...) c.Allowlist.Regexes = append(c.Allowlist.Regexes, extensionConfig.Allowlist.Regexes...) + + // sort to keep extended rules in order + sort.Strings(c.OrderedRules) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/config/gitleaks.toml new/gitleaks-8.18.3/config/gitleaks.toml --- old/gitleaks-8.18.2/config/gitleaks.toml 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/config/gitleaks.toml 2024-05-31 22:51:43.000000000 +0200 @@ -50,7 +50,7 @@ ] [[rules]] -id = "age secret key" +id = "age-secret-key" description = "Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information." regex = '''AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}''' keywords = [ @@ -178,6 +178,30 @@ ] [[rules]] +id = "cloudflare-api-key" +description = "Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security." +regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)''' +keywords = [ + "cloudflare", +] + +[[rules]] +id = "cloudflare-global-api-key" +description = "Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security." +regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{37})(?:['|\"|\n|\r|\s|\x60|;]|$)''' +keywords = [ + "cloudflare", +] + +[[rules]] +id = "cloudflare-origin-ca-key" +description = "Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security." +regex = '''\b(v1\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:['|\"|\n|\r|\s|\x60|;]|$)''' +keywords = [ + "cloudflare","v1.0-", +] + +[[rules]] id = "codecov-access-token" description = "Found a pattern resembling a Codecov Access Token, posing a risk of unauthorized access to code coverage reports and sensitive data." regex = '''(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)''' @@ -370,8 +394,21 @@ ] [[rules]] -id = "facebook" +id = "facebook-access-token" description = "Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure." +regex = '''(?i)\b(\d{15,16}(\||%)[0-9a-z\-_]{27,40})(?:['|\"|\n|\r|\s|\x60|;]|$)''' + +[[rules]] +id = "facebook-page-access-token" +description = "Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure." +regex = '''(?i)\b(EAA[MC][a-z0-9]{20,})(?:['|\"|\n|\r|\s|\x60|;]|$)''' +keywords = [ + "eaam","eaac", +] + +[[rules]] +id = "facebook-secret" +description = "Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure." regex = '''(?i)(?:facebook)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)''' keywords = [ "facebook", @@ -2237,7 +2274,7 @@ [[rules]] id = "mailchimp-api-key" description = "Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data." -regex = '''(?i)(?:mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us20)(?:['|\"|\n|\r|\s|\x60|;]|$)''' +regex = '''(?i)(?:MailchimpSDK.initialize|mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us\d\d)(?:['|\"|\n|\r|\s|\x60|;]|$)''' keywords = [ "mailchimp", ] @@ -2487,7 +2524,7 @@ [[rules]] id = "scalingo-api-token" description = "Found a Scalingo API token, posing a risk to cloud platform services and application deployment security." -regex = '''\btk-us-[a-zA-Z0-9-_]{48}\b''' +regex = '''\b(tk-us-[a-zA-Z0-9-_]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)''' keywords = [ "tk-us-", ] @@ -2672,9 +2709,9 @@ [[rules]] id = "square-access-token" description = "Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure." -regex = '''(?i)\b(sq0atp-[0-9A-Za-z\-_]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)''' +regex = '''(?i)\b((EAAA|sq0atp-)[0-9A-Za-z\-_]{22,60})(?:['|\"|\n|\r|\s|\x60|;]|$)''' keywords = [ - "sq0atp-", + "sq0atp-","eaaa", ] [[rules]] @@ -2688,9 +2725,9 @@ [[rules]] id = "stripe-access-token" description = "Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data." -regex = '''(?i)\b((sk)_(test|live)_[0-9a-z]{10,32})(?:['|\"|\n|\r|\s|\x60|;]|$)''' +regex = '''(?i)\b((sk|rk)_(test|live|prod)_[0-9a-z]{10,99})(?:['|\"|\n|\r|\s|\x60|;]|$)''' keywords = [ - "sk_test","sk_live", + "sk_test","sk_live","sk_prod","rk_test","rk_live","rk_prod", ] [[rules]] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/go.mod new/gitleaks-8.18.3/go.mod --- old/gitleaks-8.18.2/go.mod 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/go.mod 2024-05-31 22:51:43.000000000 +0200 @@ -41,7 +41,7 @@ github.com/subosito/gotenv v1.2.0 // indirect golang.org/x/sync v0.0.0-20210220032951-036812b2e83c // indirect golang.org/x/sys v0.6.0 // indirect - golang.org/x/text v0.3.6 // indirect + golang.org/x/text v0.3.8 // indirect gopkg.in/ini.v1 v1.62.0 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/go.sum new/gitleaks-8.18.3/go.sum --- old/gitleaks-8.18.2/go.sum 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/go.sum 2024-05-31 22:51:43.000000000 +0200 @@ -448,8 +448,9 @@ golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= -golang.org/x/text v0.3.6 h1:aRYxNxv6iGQlyVaZmk6ZgYEDa+Jg18DxebPSrd6bg1M= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.8 h1:nAL+RVCQ9uMn3vJZbV+MRnydTJFPf8qqY42YiA6MrqY= +golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gitleaks-8.18.2/report/sarif.go new/gitleaks-8.18.3/report/sarif.go --- old/gitleaks-8.18.2/report/sarif.go 2024-02-01 15:23:13.000000000 +0100 +++ new/gitleaks-8.18.3/report/sarif.go 2024-05-31 22:51:43.000000000 +0200 @@ -55,7 +55,7 @@ func getRules(cfg config.Config) []Rules { // TODO for _, rule := range cfg.Rules { var rules []Rules - for _, rule := range cfg.OrderedRules() { + for _, rule := range cfg.GetOrderedRules() { shortDescription := ShortDescription{ Text: rule.Description, } ++++++ vendor.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/golang.org/x/text/AUTHORS new/vendor/golang.org/x/text/AUTHORS --- old/vendor/golang.org/x/text/AUTHORS 2024-05-05 17:19:32.000000000 +0200 +++ new/vendor/golang.org/x/text/AUTHORS 1970-01-01 01:00:00.000000000 +0100 @@ -1,3 +0,0 @@ -# This source code refers to The Go Authors for copyright purposes. -# The master list of authors is in the main Go distribution, -# visible at http://tip.golang.org/AUTHORS. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/golang.org/x/text/CONTRIBUTORS new/vendor/golang.org/x/text/CONTRIBUTORS --- old/vendor/golang.org/x/text/CONTRIBUTORS 2024-05-05 17:19:32.000000000 +0200 +++ new/vendor/golang.org/x/text/CONTRIBUTORS 1970-01-01 01:00:00.000000000 +0100 @@ -1,3 +0,0 @@ -# This source code was written by the Go contributors. -# The master list of contributors is in the main Go distribution, -# visible at http://tip.golang.org/CONTRIBUTORS. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/golang.org/x/text/unicode/norm/forminfo.go new/vendor/golang.org/x/text/unicode/norm/forminfo.go --- old/vendor/golang.org/x/text/unicode/norm/forminfo.go 2024-05-05 17:19:32.000000000 +0200 +++ new/vendor/golang.org/x/text/unicode/norm/forminfo.go 2024-06-01 17:28:17.000000000 +0200 @@ -110,10 +110,11 @@ } // We pack quick check data in 4 bits: -// 5: Combines forward (0 == false, 1 == true) -// 4..3: NFC_QC Yes(00), No (10), or Maybe (11) -// 2: NFD_QC Yes (0) or No (1). No also means there is a decomposition. -// 1..0: Number of trailing non-starters. +// +// 5: Combines forward (0 == false, 1 == true) +// 4..3: NFC_QC Yes(00), No (10), or Maybe (11) +// 2: NFD_QC Yes (0) or No (1). No also means there is a decomposition. +// 1..0: Number of trailing non-starters. // // When all 4 bits are zero, the character is inert, meaning it is never // influenced by normalization. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/golang.org/x/text/unicode/norm/normalize.go new/vendor/golang.org/x/text/unicode/norm/normalize.go --- old/vendor/golang.org/x/text/unicode/norm/normalize.go 2024-05-05 17:19:32.000000000 +0200 +++ new/vendor/golang.org/x/text/unicode/norm/normalize.go 2024-06-01 17:28:17.000000000 +0200 @@ -18,16 +18,17 @@ // A Form denotes a canonical representation of Unicode code points. // The Unicode-defined normalization and equivalence forms are: // -// NFC Unicode Normalization Form C -// NFD Unicode Normalization Form D -// NFKC Unicode Normalization Form KC -// NFKD Unicode Normalization Form KD +// NFC Unicode Normalization Form C +// NFD Unicode Normalization Form D +// NFKC Unicode Normalization Form KC +// NFKD Unicode Normalization Form KD // // For a Form f, this documentation uses the notation f(x) to mean // the bytes or string x converted to the given form. // A position n in x is called a boundary if conversion to the form can // proceed independently on both sides: -// f(x) == append(f(x[0:n]), f(x[n:])...) +// +// f(x) == append(f(x[0:n]), f(x[n:])...) // // References: https://unicode.org/reports/tr15/ and // https://unicode.org/notes/tn5/. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/golang.org/x/text/unicode/norm/tables13.0.0.go new/vendor/golang.org/x/text/unicode/norm/tables13.0.0.go --- old/vendor/golang.org/x/text/unicode/norm/tables13.0.0.go 2024-05-05 17:19:32.000000000 +0200 +++ new/vendor/golang.org/x/text/unicode/norm/tables13.0.0.go 2024-06-01 17:28:17.000000000 +0200 @@ -7315,7 +7315,7 @@ "\x00V\x03\x03\x00\x00\x1e|" + // 0x00560303: 0x00001E7C "\x00v\x03\x03\x00\x00\x1e}" + // 0x00760303: 0x00001E7D "\x00V\x03#\x00\x00\x1e~" + // 0x00560323: 0x00001E7E - "\x00v\x03#\x00\x00\x1e\u007f" + // 0x00760323: 0x00001E7F + "\x00v\x03#\x00\x00\x1e\x7f" + // 0x00760323: 0x00001E7F "\x00W\x03\x00\x00\x00\x1e\x80" + // 0x00570300: 0x00001E80 "\x00w\x03\x00\x00\x00\x1e\x81" + // 0x00770300: 0x00001E81 "\x00W\x03\x01\x00\x00\x1e\x82" + // 0x00570301: 0x00001E82 @@ -7342,7 +7342,7 @@ "\x00t\x03\b\x00\x00\x1e\x97" + // 0x00740308: 0x00001E97 "\x00w\x03\n\x00\x00\x1e\x98" + // 0x0077030A: 0x00001E98 "\x00y\x03\n\x00\x00\x1e\x99" + // 0x0079030A: 0x00001E99 - "\x01\u007f\x03\a\x00\x00\x1e\x9b" + // 0x017F0307: 0x00001E9B + "\x01\x7f\x03\a\x00\x00\x1e\x9b" + // 0x017F0307: 0x00001E9B "\x00A\x03#\x00\x00\x1e\xa0" + // 0x00410323: 0x00001EA0 "\x00a\x03#\x00\x00\x1e\xa1" + // 0x00610323: 0x00001EA1 "\x00A\x03\t\x00\x00\x1e\xa2" + // 0x00410309: 0x00001EA2 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/modules.txt new/vendor/modules.txt --- old/vendor/modules.txt 2024-05-05 17:19:32.000000000 +0200 +++ new/vendor/modules.txt 2024-06-01 17:28:17.000000000 +0200 @@ -116,8 +116,8 @@ golang.org/x/sys/internal/unsafeheader golang.org/x/sys/unix golang.org/x/sys/windows -# golang.org/x/text v0.3.6 -## explicit; go 1.11 +# golang.org/x/text v0.3.8 +## explicit; go 1.17 golang.org/x/text/transform golang.org/x/text/unicode/norm # gopkg.in/ini.v1 v1.62.0

1 0

commit wayland-protocols for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package wayland-protocols for openSUSE:Factory checked in at 2024-06-03 17:42:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/wayland-protocols (Old) and /work/SRC/openSUSE:Factory/.wayland-protocols.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "wayland-protocols" Mon Jun 3 17:42:28 2024 rev:39 rq:1178339 version:1.36 Changes: -------- --- /work/SRC/openSUSE:Factory/wayland-protocols/wayland-protocols.changes 2024-05-09 12:08:35.823453145 +0200 +++ /work/SRC/openSUSE:Factory/.wayland-protocols.new.24587/wayland-protocols.changes 2024-06-03 17:42:50.857672510 +0200 @@ -13,0 +14,11 @@ +Tue Apr 30 08:15:19 UTC 2024 - Christophe Marin <christophe(a)krop.fr> + +- Update to 1.36 + * Fix to the xdg dialog protocol + * tablet-v2 protocol is now stable + * alpha-modifier: new protocol + * Bug fix to the cursor shape documentation + * The xdg-shell protocol now also explicitly recommends against + drawing decorations outside of the window geometry when tiled + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit glibc for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package glibc for openSUSE:Factory checked in at 2024-06-03 17:42:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/glibc (Old) and /work/SRC/openSUSE:Factory/.glibc.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "glibc" Mon Jun 3 17:42:27 2024 rev:293 rq:1178284 version:2.39 Changes: -------- --- /work/SRC/openSUSE:Factory/glibc/glibc.changes 2024-05-30 15:32:06.767490678 +0200 +++ /work/SRC/openSUSE:Factory/.glibc.new.24587/glibc.changes 2024-06-03 17:42:49.197611330 +0200 @@ -1,0 +2,8 @@ +Mon Jun 3 08:24:38 UTC 2024 - Dominique Leuenberger <dimstar(a)opensuse.org> + +- Also provide glibc-locale-base-<targettype> from + glibc-<targettype>: the package was merged in the baselibs.conf + case, so the capability is there. Steam for one has a requires + on the symbol (boo#1225809). + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.BTmoQC/_old 2024-06-03 17:42:50.329653050 +0200 +++ /var/tmp/diff_new_pack.BTmoQC/_new 2024-06-03 17:42:50.329653050 +0200 @@ -20,6 +20,7 @@ post "/usr/sbin/iconvconfig-<extension>" postun "/usr/sbin/iconvconfig-<extension>" obsoletes "glibc-locale-base-<targettype>" + provides "glibc-locale-base-<targettype> = %version" glibc-devel requires "glibc-<targettype> = %version" arch i586 block!

1 0

commit teleport for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package teleport for openSUSE:Factory checked in at 2024-06-03 17:42:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/teleport (Old) and /work/SRC/openSUSE:Factory/.teleport.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "teleport" Mon Jun 3 17:42:22 2024 rev:104 rq:1178067 version:15.4.0 Changes: -------- --- /work/SRC/openSUSE:Factory/teleport/teleport.changes 2024-05-24 19:52:18.796082526 +0200 +++ /work/SRC/openSUSE:Factory/.teleport.new.24587/teleport.changes 2024-06-03 17:42:45.329468776 +0200 @@ -1,0 +2,49 @@ +Sat Jun 1 09:58:28 UTC 2024 - Johannes Kastl <opensuse_buildservice(a)ojkastl.de> + +- update to 15.4.0: + * Access requests notification routing rules + Hosted Slack plugin users can now configure notification + routing rules for role-based access requests. + * Database access for Spanner + Database access users can now connect to GCP Spanner. + * Unix Workload Attestation + Teleport Workload ID now supports basic workload attestation on + Unix systems, allowing cluster administrators to restrict the + issuance of SVIDs to specific workloads based on UID/PID/GID. + * Other improvements and fixes + - Fixed an issue where mix-and-match of join tokens could + interfere with some services appearing correctly in + heartbeats. #42189 + - Added an alternate EC2 auto discover flow using AWS Systems + Manager as a more scalable method than EICE in the "Enroll + New Resource" view in the web UI. #42205 + - Fixed kubectl exec functionality when Teleport is running + behind L7 load balancer. #42192 + - Fixed the plugins AMR cache to be updated when Access + requests are removed from the subject of an existing rule. + #42186 + - Improved temporary disk space usage for session recording + processing. #42174 + - Fixed a regression where Kubernetes Exec audit events were + not properly populated and lacked error details. #42145 + - Fixed Azure join method when using Resource Groups in the + allow section. #42141 + - Added new teleport debug set-log-level / profile commands + changing instance log level without a restart and collecting + pprof profiles. #42122 + - Added ability to manage access monitoring rules via tctl. + #42092 + - Added access monitoring rule routing for slack access plugin. + #42087 + - Extended Discovery Service to self-bootstrap necessary + permissions for Kubernetes Service to interact with the + Kubernetes API on behalf of users. #42075 + - Fixed resource leak in session recording cleanup. #42066 + - Reduced memory and CPU usage after control plane restarts in + clusters with a high number of roles. #42062 + - Added an option to send a Ctrl+Alt+Del sequence to remote + desktops. #41720 + - Added support for GCP Spanner to Teleport Database Service. + #41349 + +------------------------------------------------------------------- Old: ---- teleport-15.3.6.obscpio New: ---- teleport-15.4.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ teleport.spec ++++++ --- /var/tmp/diff_new_pack.4H6IVK/_old 2024-06-03 17:42:48.513586122 +0200 +++ /var/tmp/diff_new_pack.4H6IVK/_new 2024-06-03 17:42:48.517586269 +0200 @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: teleport -Version: 15.3.6 +Version: 15.4.0 Release: 0 Summary: Identity-aware, multi-protocol access proxy License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.4H6IVK/_old 2024-06-03 17:42:48.549587448 +0200 +++ /var/tmp/diff_new_pack.4H6IVK/_new 2024-06-03 17:42:48.553587596 +0200 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="submodules">disable</param> <param name="exclude">.git</param> - <param name="revision">v15.3.6</param> + <param name="revision">v15.4.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">disable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ teleport-15.3.6.obscpio -> teleport-15.4.0.obscpio ++++++ /work/SRC/openSUSE:Factory/teleport/teleport-15.3.6.obscpio /work/SRC/openSUSE:Factory/.teleport.new.24587/teleport-15.4.0.obscpio differ: char 49, line 1 ++++++ teleport.obsinfo ++++++ --- /var/tmp/diff_new_pack.4H6IVK/_old 2024-06-03 17:42:48.617589955 +0200 +++ /var/tmp/diff_new_pack.4H6IVK/_new 2024-06-03 17:42:48.617589955 +0200 @@ -1,5 +1,5 @@ name: teleport -version: 15.3.6 -mtime: 1716463822 -commit: 51cbf3516d3e8287c835fd130975e345023a0b67 +version: 15.4.0 +mtime: 1717175881 +commit: 0da3a67d7d5ab0f5e99b4d1ed4d069750a1ef82c ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/teleport/vendor.tar.gz /work/SRC/openSUSE:Factory/.teleport.new.24587/vendor.tar.gz differ: char 5, line 1

1 0

commit terragrunt for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package terragrunt for openSUSE:Factory checked in at 2024-06-03 17:42:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/terragrunt (Old) and /work/SRC/openSUSE:Factory/.terragrunt.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "terragrunt" Mon Jun 3 17:42:19 2024 rev:127 rq:1178043 version:0.58.13 Changes: -------- --- /work/SRC/openSUSE:Factory/terragrunt/terragrunt.changes 2024-05-31 22:16:36.483564446 +0200 +++ /work/SRC/openSUSE:Factory/.terragrunt.new.24587/terragrunt.changes 2024-06-03 17:42:36.621147845 +0200 @@ -1,0 +2,10 @@ +Sat Jun 01 09:56:00 UTC 2024 - opensuse_buildservice(a)ojkastl.de + +- Update to version 0.58.13: + * Improved errors printing returned from Sops (#3174) + * fix: Correcting docs on default binary used by Terragrunt + (#3173) + * s/trragrunt/terragrunt/ (#3170) + * feat: Adding binary signing test (#3166) + +------------------------------------------------------------------- Old: ---- terragrunt-0.58.12.obscpio New: ---- terragrunt-0.58.13.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ terragrunt.spec ++++++ --- /var/tmp/diff_new_pack.RG6lLe/_old 2024-06-03 17:42:39.465252660 +0200 +++ /var/tmp/diff_new_pack.RG6lLe/_new 2024-06-03 17:42:39.469252808 +0200 @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: terragrunt -Version: 0.58.12 +Version: 0.58.13 Release: 0 Summary: Thin wrapper for Terraform for working with multiple Terraform modules License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.RG6lLe/_old 2024-06-03 17:42:39.517254576 +0200 +++ /var/tmp/diff_new_pack.RG6lLe/_new 2024-06-03 17:42:39.521254724 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/gruntwork-io/terragrunt</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.58.12</param> + <param name="revision">v0.58.13</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.RG6lLe/_old 2024-06-03 17:42:39.549255756 +0200 +++ /var/tmp/diff_new_pack.RG6lLe/_new 2024-06-03 17:42:39.553255903 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/gruntwork-io/terragrunt</param> - <param name="changesrevision">0eec714b486c6341ae30e8c36610a56d28bcfd7d</param></service></servicedata> + <param name="changesrevision">11ab667934192e441e1b783cd27b0f2645482b37</param></service></servicedata> (No newline at EOF) ++++++ terragrunt-0.58.12.obscpio -> terragrunt-0.58.13.obscpio ++++++ /work/SRC/openSUSE:Factory/terragrunt/terragrunt-0.58.12.obscpio /work/SRC/openSUSE:Factory/.terragrunt.new.24587/terragrunt-0.58.13.obscpio differ: char 50, line 1 ++++++ terragrunt.obsinfo ++++++ --- /var/tmp/diff_new_pack.RG6lLe/_old 2024-06-03 17:42:39.589257230 +0200 +++ /var/tmp/diff_new_pack.RG6lLe/_new 2024-06-03 17:42:39.593257378 +0200 @@ -1,5 +1,5 @@ name: terragrunt -version: 0.58.12 -mtime: 1716920164 -commit: 0eec714b486c6341ae30e8c36610a56d28bcfd7d +version: 0.58.13 +mtime: 1717184800 +commit: 11ab667934192e441e1b783cd27b0f2645482b37 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/terragrunt/vendor.tar.gz /work/SRC/openSUSE:Factory/.terragrunt.new.24587/vendor.tar.gz differ: char 14, line 1

1 0

commit tempo-cli for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tempo-cli for openSUSE:Factory checked in at 2024-06-03 17:42:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tempo-cli (Old) and /work/SRC/openSUSE:Factory/.tempo-cli.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "tempo-cli" Mon Jun 3 17:42:11 2024 rev:2 rq:1178035 version:2.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/tempo-cli/tempo-cli.changes 2024-05-20 18:13:41.918864820 +0200 +++ /work/SRC/openSUSE:Factory/.tempo-cli.new.24587/tempo-cli.changes 2024-06-03 17:42:26.120764056 +0200 @@ -1,0 +2,9 @@ +Sat Jun 01 09:13:28 UTC 2024 - opensuse_buildservice(a)ojkastl.de + +- Update to version 2.5.0: + https://github.com/grafana/tempo/releases/tag/v2.5.0 + CLI-related changes: + * [ENHANCEMENT] Tempo CLI - add percentage support for query + blocks #3697 #3697 (@edgarkz) + +------------------------------------------------------------------- Old: ---- tempo-2.4.2.obscpio New: ---- tempo-2.5.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tempo-cli.spec ++++++ --- /var/tmp/diff_new_pack.jNkp5R/_old 2024-06-03 17:42:28.572853634 +0200 +++ /var/tmp/diff_new_pack.jNkp5R/_new 2024-06-03 17:42:28.584854072 +0200 @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: tempo-cli -Version: 2.4.2 +Version: 2.5.0 Release: 0 Summary: CLI for the Grafana Tempo tracing backend License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.jNkp5R/_old 2024-06-03 17:42:28.956867662 +0200 +++ /var/tmp/diff_new_pack.jNkp5R/_new 2024-06-03 17:42:29.000869270 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/grafana/tempo</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v2.4.2</param> + <param name="revision">v2.5.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> @@ -18,7 +18,7 @@ <param name="compression">gz</param> </service> <service name="go_modules" mode="manual"> - <param name="archive">tempo-2.4.2.obscpio</param> + <param name="archive">tempo-2.5.0.obscpio</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.jNkp5R/_old 2024-06-03 17:42:29.028870293 +0200 +++ /var/tmp/diff_new_pack.jNkp5R/_new 2024-06-03 17:42:29.032870438 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/grafana/tempo</param> - <param name="changesrevision">2225623e72362fa29496b1f3fcba337c4a982687</param></service></servicedata> + <param name="changesrevision">46dad34116020a57b16410e020b56111ff357864</param></service></servicedata> (No newline at EOF) ++++++ tempo-2.4.2.obscpio -> tempo-2.5.0.obscpio ++++++ /work/SRC/openSUSE:Factory/tempo-cli/tempo-2.4.2.obscpio /work/SRC/openSUSE:Factory/.tempo-cli.new.24587/tempo-2.5.0.obscpio differ: char 49, line 1 ++++++ tempo.obsinfo ++++++ --- /var/tmp/diff_new_pack.jNkp5R/_old 2024-06-03 17:42:29.064871608 +0200 +++ /var/tmp/diff_new_pack.jNkp5R/_new 2024-06-03 17:42:29.068871754 +0200 @@ -1,5 +1,5 @@ name: tempo -version: 2.4.2 -mtime: 1715778722 -commit: 2225623e72362fa29496b1f3fcba337c4a982687 +version: 2.5.0 +mtime: 1717161958 +commit: 46dad34116020a57b16410e020b56111ff357864 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/tempo-cli/vendor.tar.gz /work/SRC/openSUSE:Factory/.tempo-cli.new.24587/vendor.tar.gz differ: char 5, line 1

1 0

commit cilium-cli for openSUSE:Factory
by Source-Sync 03 Jun '24

03 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cilium-cli for openSUSE:Factory checked in at 2024-06-03 17:42:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cilium-cli (Old) and /work/SRC/openSUSE:Factory/.cilium-cli.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cilium-cli" Mon Jun 3 17:42:02 2024 rev:67 rq:1178034 version:0.16.9 Changes: -------- --- /work/SRC/openSUSE:Factory/cilium-cli/cilium-cli.changes 2024-05-30 15:35:53.991791729 +0200 +++ /work/SRC/openSUSE:Factory/.cilium-cli.new.24587/cilium-cli.changes 2024-06-03 17:42:19.760531710 +0200 @@ -1,0 +2,10 @@ +Sat Jun 01 09:11:49 UTC 2024 - opensuse_buildservice(a)ojkastl.de + +- Update to version 0.16.9: + * Prepare for v0.16.9 release + * fix(deps): update github.com/cilium/charts digest to f365292 + * clustermesh: fix status retrieval on v1.14 with kvstoremesh + enabled + * Update stable release to v0.16.8 + +------------------------------------------------------------------- Old: ---- cilium-cli-0.16.8.obscpio New: ---- cilium-cli-0.16.9.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cilium-cli.spec ++++++ --- /var/tmp/diff_new_pack.OQ4y8p/_old 2024-06-03 17:42:23.132654897 +0200 +++ /var/tmp/diff_new_pack.OQ4y8p/_new 2024-06-03 17:42:23.132654897 +0200 @@ -21,7 +21,7 @@ %define executable_name cilium Name: cilium-cli -Version: 0.16.8 +Version: 0.16.9 Release: 0 Summary: CLI to install, manage & troubleshoot Kubernetes clusters running Cilium License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.OQ4y8p/_old 2024-06-03 17:42:23.164656066 +0200 +++ /var/tmp/diff_new_pack.OQ4y8p/_new 2024-06-03 17:42:23.164656066 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/cilium/cilium-cli</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.16.8</param> + <param name="revision">v0.16.9</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.OQ4y8p/_old 2024-06-03 17:42:23.200657381 +0200 +++ /var/tmp/diff_new_pack.OQ4y8p/_new 2024-06-03 17:42:23.204657528 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/cilium/cilium-cli</param> - <param name="changesrevision">3d71144d223f1062c7226211418ddebe524cc53d</param></service></servicedata> + <param name="changesrevision">d86ae1ca5755139d6ca9423b9606cb047fc8e00f</param></service></servicedata> (No newline at EOF) ++++++ cilium-cli-0.16.8.obscpio -> cilium-cli-0.16.9.obscpio ++++++ /work/SRC/openSUSE:Factory/cilium-cli/cilium-cli-0.16.8.obscpio /work/SRC/openSUSE:Factory/.cilium-cli.new.24587/cilium-cli-0.16.9.obscpio differ: char 50, line 1 ++++++ cilium-cli.obsinfo ++++++ --- /var/tmp/diff_new_pack.OQ4y8p/_old 2024-06-03 17:42:23.240658843 +0200 +++ /var/tmp/diff_new_pack.OQ4y8p/_new 2024-06-03 17:42:23.244658989 +0200 @@ -1,5 +1,5 @@ name: cilium-cli -version: 0.16.8 -mtime: 1717019629 -commit: 3d71144d223f1062c7226211418ddebe524cc53d +version: 0.16.9 +mtime: 1717172885 +commit: d86ae1ca5755139d6ca9423b9606cb047fc8e00f ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/cilium-cli/vendor.tar.gz /work/SRC/openSUSE:Factory/.cilium-cli.new.24587/vendor.tar.gz differ: char 5, line 1

1 0