Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rekor for openSUSE:Factory checked in at 2024-01-29 22:32:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rekor (Old) and /work/SRC/openSUSE:Factory/.rekor.new.1815 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "rekor" Mon Jan 29 22:32:47 2024 rev:20 rq:1142230 version:1.3.4 Changes: -------- --- /work/SRC/openSUSE:Factory/rekor/rekor.changes 2023-11-24 23:36:11.858546483 +0100 +++ /work/SRC/openSUSE:Factory/.rekor.new.1815/rekor.changes 2024-01-29 22:33:10.258469005 +0100 @@ -1,0 +2,13 @@ +Sun Jan 28 18:45:08 UTC 2024 - Dirk Müller <dmueller@suse.com> + +- update to 1.3.4: + * add mysql indexstorage backend + * add s3 storage for attestations + * fix: Do not check for pubsub.topics.get on initialization + * fix optional field in cose schema + * Update ranges.go + * update indexstorage interface to reduce roundtrips + * use a single validator library in rekor-cli + * Remove go-playground/validator dependency from pkg/pki + +------------------------------------------------------------------- Old: ---- rekor-1.3.3.tar.gz vendor.tar.xz New: ---- _service rekor-1.3.4.tar.gz vendor.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rekor.spec ++++++ --- /var/tmp/diff_new_pack.69Wms0/_old 2024-01-29 22:33:20.198828783 +0100 +++ /var/tmp/diff_new_pack.69Wms0/_new 2024-01-29 22:33:20.198828783 +0100 @@ -1,7 +1,7 @@ # # spec file for package rekor # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,18 +19,18 @@ %define apps cli server Name: rekor -Version: 1.3.3 +Version: 1.3.4 Release: 0 -%define revision 2ea1ef00f03b493ace47b1f26a8bfd4ab3b17fe9 +%define revision 5072901241fc6370a78457219e7aa2da490f399f Summary: Supply Chain Transparency Log License: Apache-2.0 URL: https://github.com/sigstore/rekor Source: https://github.com/sigstore/rekor/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz -Source1: vendor.tar.xz +Source1: vendor.tar.zst Source2: rekor-zypper-verify.sh BuildRequires: golang-packaging +BuildRequires: zstd BuildRequires: golang(API) -%{go_nostrip} %description Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. Rekor will enable software maintainers and build systems to record signed metadata to an immutable record. Other parties can then query said metadata to enable them to make informed decisions on trust and non-repudiation of an object's lifecycle. For more details visit the sigstore website @@ -46,9 +46,9 @@ DATE_FMT="+%%Y-%%m-%%dT%%H:%%M:%%SZ" BUILD_DATE=$(date -u -d "@${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u -r "${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u "${DATE_FMT}") for app in %{apps} ; do -CLI_PKG=github.com/sigstore/rekor/cmd/rekor-${app}/app +CLI_PKG=sigs.k8s.io/release-utils/version CLI_LDFLAGS="-X ${CLI_PKG}.gitVersion=%{version} -X ${CLI_PKG}.gitCommit=%{revision} -X ${CLI_PKG}.gitTreeState=release -X ${CLI_PKG}.buildDate=${BUILD_DATE}" -go build -mod=vendor -buildmode=pie -ldflags "${CLI_LDFLAGS}" ./cmd/rekor-${app} +go build -mod=vendor -trimpath -buildmode=pie -ldflags "${CLI_LDFLAGS}" ./cmd/rekor-${app} ./rekor-${app} version done ++++++ _service ++++++ <services> <service name="go_modules" mode="manual"> <param name="compression">zst</param> </service> </services> ++++++ rekor-1.3.3.tar.gz -> rekor-1.3.4.tar.gz ++++++ ++++ 4435 lines of diff (skipped)