Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package istioctl for openSUSE:Factory checked in at 2024-07-04 16:25:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/istioctl (Old) and /work/SRC/openSUSE:Factory/.istioctl.new.2080 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "istioctl" Thu Jul 4 16:25:28 2024 rev:21 rq:1185225 version:1.22.2 Changes: -------- --- /work/SRC/openSUSE:Factory/istioctl/istioctl.changes 2024-06-06 12:32:34.720386835 +0200 +++ /work/SRC/openSUSE:Factory/.istioctl.new.2080/istioctl.changes 2024-07-04 16:26:58.231609133 +0200 @@ -1,0 +2,45 @@ +Wed Jul 3 19:03:11 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de> + +- update to 1.22.2: + https://istio.io/latest/news/releases/1.22.x/announcing-1.22.2/ + This release implements the security updates described in our + 27th of June post, ISTIO-SECURITY-2024-005 along with bug fixes + to improve robustness. + https://istio.io/latest/news/security/istio-security-2024-005/ + * Improved waypoint proxies to no longer run as root. + * Added gateways.securityContext to manifests to provide an + option to customize the gateway securityContext. (Issue #49549) + * Added a new option in ztunnel to completely disable IPv6, to + enable running on kernels with IPv6 disabled. + * Fixed an issue where istioctl analyze returned IST0162 false + positives. (Issue #51257) + * Fixed ENABLE_ENHANCED_RESOURCE_SCOPING not being part of helm + compatibility profiles for Istio 1.20/1.21. (Issue #51399) + * Fixed Kubernetes job pod IPs may not be fully unenrolled from + ambient despite being in a terminated state. + * Fixed false positives in IST0128 and IST0129 when + credentialName and workloadSelector were set. (Issue #51567) + * Fixed an issue where JWKS fetched from URIs were not updated + promptly when there are errors fetching other URIs. (Issue + #51636) + * Fixed an issue causing workloadSelector policies to apply to + the wrong namespace in ztunnel. (Issue #51556) + * Fixed a bug causing discoverySelectors to accidentally filter + out all GatewayClasses. + * Fixed certificate chains parsing avoid unnecessary parsing + errors by trimming unnecessary intermediate certificates. + * Fixed a bug in ambient mode causing requests at the start of a + Pod lifetime to be rejected with unknown source. + * Fixed an issue in ztunnel where some expected connection + terminations were reported as errors. + * Fixed an issue in ztunnel when connecting to a service with a + targetPort that exists only on a subset of pods. + * Fixed an issue when deleting a ServiceEntry when there are + duplicate hostnames across multiple ServiceEntries. + * Fixed an issue where ztunnel would send directly to pods when + connecting to a LoadBalancer IP, instead of going through the + LoadBalancer. + * Fixed an issue where ztunnel would send traffic to terminating + pods. + +------------------------------------------------------------------- Old: ---- istio-1.22.1.obscpio New: ---- istio-1.22.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ istioctl.spec ++++++ --- /var/tmp/diff_new_pack.x686Xu/_old 2024-07-04 16:27:01.059712373 +0200 +++ /var/tmp/diff_new_pack.x686Xu/_new 2024-07-04 16:27:01.059712373 +0200 @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: istioctl -Version: 1.22.1 +Version: 1.22.2 Release: 0 Summary: CLI for the istio servic mesh in Kubernetes License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.x686Xu/_old 2024-07-04 16:27:01.091713541 +0200 +++ /var/tmp/diff_new_pack.x686Xu/_new 2024-07-04 16:27:01.095713687 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/istio/istio</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">1.22.1</param> + <param name="revision">1.22.2</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">disable</param> </service> @@ -16,7 +16,7 @@ <param name="compression">gz</param> </service> <service name="go_modules" mode="manual"> - <param name="archive">istio-1.22.1.obscpio</param> + <param name="archive">istio-1.22.2.obscpio</param> </service> </services> ++++++ istio-1.22.1.obscpio -> istio-1.22.2.obscpio ++++++ /work/SRC/openSUSE:Factory/istioctl/istio-1.22.1.obscpio /work/SRC/openSUSE:Factory/.istioctl.new.2080/istio-1.22.2.obscpio differ: char 49, line 1 ++++++ istio.obsinfo ++++++ --- /var/tmp/diff_new_pack.x686Xu/_old 2024-07-04 16:27:01.139715293 +0200 +++ /var/tmp/diff_new_pack.x686Xu/_new 2024-07-04 16:27:01.143715439 +0200 @@ -1,5 +1,5 @@ name: istio -version: 1.22.1 -mtime: 1717274947 -commit: a1a76b8e75f810eb6c808b04531343ae2c7b8082 +version: 1.22.2 +mtime: 1719426913 +commit: 204da5ba47f295a8dc56936333e692f6a8707649 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/istioctl/vendor.tar.gz /work/SRC/openSUSE:Factory/.istioctl.new.2080/vendor.tar.gz differ: char 5, line 1