commit rekor for openSUSE:Factory

26 Jul 2024

Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package rekor for openSUSE:Factory checked in at 2024-07-26 16:16:23
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/rekor (Old)
 and      /work/SRC/openSUSE:Factory/.rekor.new.1882 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "rekor"

Fri Jul 26 16:16:23 2024 rev:22 rq:1189775 version:1.3.6

Changes:
--------

--- /work/SRC/openSUSE:Factory/rekor/rekor.changes	2024-02-05 22:02:53.678689888 +0100
+++ /work/SRC/openSUSE:Factory/.rekor.new.1882/rekor.changes	2024-07-26 16:16:43.224652523 +0200
@@ -1,0 +2,21 @@
+Fri Jul 26 12:01:47 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 1.3.6:
+  * New Features
+    - Add support for IEEE P1363 encoded ECDSA signatures
+    - Add index performance script (#2042)
+    - Add support for ed25519ph user keys in hashedrekord (#1945)
+    - Add metrics for index insertion (#2015)
+    - Add TLS support for Redis Client implementation (#1998)
+  * Bug Fixes
+    - fix typo in remoteIp and set full name for trace field
+
+-------------------------------------------------------------------
+Fri Jul 26 12:00:14 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- refactor spec file
+- switch to using obs_scm to generate the source obscpio archive
+  * this way we do no longer need to hardcode the commit hash
+  * and the tarball was never verified anyway
+
+-------------------------------------------------------------------

Old:
----
  rekor-1.3.5.tar.gz

New:
----
  _servicedata
  rekor-1.3.6.obscpio
  rekor.obsinfo

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ rekor.spec ++++++
--- /var/tmp/diff_new_pack.KWBbAs/_old	2024-07-26 16:16:44.100687776 +0200
+++ /var/tmp/diff_new_pack.KWBbAs/_new	2024-07-26 16:16:44.100687776 +0200
@@ -19,13 +19,12 @@
 %define apps cli server
 
 Name:           rekor
-Version:        1.3.5
+Version:        1.3.6
 Release:        0
-%define revision 488eb9782d8d95c83ac70bfb2f5049928504127e
 Summary:        Supply Chain Transparency Log
 License:        Apache-2.0
 URL:            https://github.com/sigstore/rekor
-Source:         https://github.com/sigstore/rekor/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+Source:         %{name}-%{version}.tar.gz
 Source1:        vendor.tar.zst
 Source2:        rekor-zypper-verify.sh
 BuildRequires:  golang-packaging
@@ -43,13 +42,27 @@
 %autosetup -p1 -a1
 
 %build
+COMMIT_HASH="$(sed -n 's/commit: \(.*\)/\1/p' %_sourcedir/%{name}.obsinfo)"
+
 DATE_FMT="+%%Y-%%m-%%dT%%H:%%M:%%SZ"
 BUILD_DATE=$(date -u -d "@${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u -r "${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u "${DATE_FMT}")
-for app in %{apps} ; do
-CLI_PKG=sigs.k8s.io/release-utils/version
-CLI_LDFLAGS="-X ${CLI_PKG}.gitVersion=%{version} -X ${CLI_PKG}.gitCommit=%{revision} -X ${CLI_PKG}.gitTreeState=release -X ${CLI_PKG}.buildDate=${BUILD_DATE}"
-go build -mod=vendor -trimpath -buildmode=pie -ldflags "${CLI_LDFLAGS}" ./cmd/rekor-${app}
-./rekor-${app} version
+
+for app in %{apps}
+do
+    CLI_PKG=sigs.k8s.io/release-utils/version
+    CLI_LDFLAGS="-X ${CLI_PKG}.gitVersion=%{version} -X ${CLI_PKG}.gitCommit=%{COMMIT_HASH} -X ${CLI_PKG}.gitTreeState=release -X ${CLI_PKG}.buildDate=${BUILD_DATE}"
+
+    go build \
+      -mod=vendor \
+      -trimpath \
+      -buildmode=pie \
+      -ldflags "${CLI_LDFLAGS}" ./cmd/rekor-${app}
+done
+
+%check
+for app in %{apps}
+do
+    ./rekor-${app} version | grep %{version}
 done
 
 %install

++++++ _service ++++++
--- /var/tmp/diff_new_pack.KWBbAs/_old	2024-07-26 16:16:44.136689225 +0200
+++ /var/tmp/diff_new_pack.KWBbAs/_new	2024-07-26 16:16:44.140689386 +0200
@@ -1,6 +1,24 @@
 <services>
+  <service name="obs_scm" mode="manual">
+    <param name="url">https://github.com/sigstore/rekor</param>
+    <param name="scm">git</param>
+    <param name="exclude">.git</param>
+    <param name="revision">v1.3.6</param>
+    <param name="versionformat">@PARENT_TAG@</param>
+    <param name="changesgenerate">enable</param>
+    <param name="versionrewrite-pattern">v(.*)</param>
+  </service>
+  <service name="set_version" mode="manual">
+  </service>
   <service name="go_modules" mode="manual">
     <param name="compression">zst</param>
   </service>
+  <!-- services below are running at buildtime -->
+  <service name="tar" mode="buildtime">
+  </service>
+  <service name="recompress" mode="buildtime">
+    <param name="file">*.tar</param>
+    <param name="compression">gz</param>
+  </service>
 </services>
 

++++++ _servicedata ++++++
<servicedata>
<service name="tar_scm">
                <param name="url">https://github.com/sigstore/rekor</param>
              <param name="changesrevision">a6788566cd62facb0fb0450e9d2c2867f551e37c</param></service></servicedata>
(No newline at EOF)

++++++ rekor.obsinfo ++++++
name: rekor
version: 1.3.6
mtime: 1712031396
commit: a6788566cd62facb0fb0450e9d2c2867f551e37c

++++++ vendor.tar.zst ++++++
/work/SRC/openSUSE:Factory/rekor/vendor.tar.zst /work/SRC/openSUSE:Factory/.rekor.new.1882/vendor.tar.zst differ: char 5, line 1

    

commit rekor for openSUSE:Factory

Source-Sync