August 2024 - Open Build Service Commits

[openSUSE/osc] 48baf9: Fix errorneous double quotes in core.py
by Daniel Mach 20 Aug '24

20 Aug '24

Branch: refs/heads/0.x-maint Home: https://github.com/openSUSE/osc Commit: 48baf9c84fa2a67a30da05c87d0bbf4db1087d58 https://github.com/openSUSE/osc/commit/48baf9c84fa2a67a30da05c87d0bbf4db108… Author: Daniel Mach <daniel.mach(a)suse.com> Date: 2024-07-18 (Thu, 18 Jul 2024) Changed paths: M osc/core.py Log Message: ----------- Fix errorneous double quotes in core.py Commit: 56c08df3d632a462a805be687336a8dfbbb1a4ab https://github.com/openSUSE/osc/commit/56c08df3d632a462a805be687336a8dfbbb1… Author: Daniel Mach <daniel.mach(a)suse.com> Date: 2024-07-29 (Mon, 29 Jul 2024) Changed paths: M osc/commandline.py M osc/core.py M tests/common.py M tests/test_addfiles.py M tests/test_commit.py M tests/test_deletefiles.py M tests/test_repairwc.py M tests/test_revertfiles.py M tests/test_update.py Log Message: ----------- Fix possibility to overwrite special files in .osc (CVE-2024-22034 boo#1225911) Source files are now stored in the 'sources' subdirectory which prevents name collisons. This requires changing version of '.osc' store to 2.0. Commit: 6c214d92558c6858b4d0ed604104d8e4919f1493 https://github.com/openSUSE/osc/commit/6c214d92558c6858b4d0ed604104d8e4919f… Author: Daniel Mach <daniel.mach(a)suse.com> Date: 2024-07-29 (Mon, 29 Jul 2024) Changed paths: M NEWS M osc/core.py Log Message: ----------- release 0.183.0 Compare: https://github.com/openSUSE/osc/compare/6eb8a6480485...6c214d92558c To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/osc/settings/notifications

1 0

[openSUSE/osc] a887ad: Fix possibility to overwrite special files in .osc...
by Daniel Mach 20 Aug '24

20 Aug '24

Branch: refs/heads/master Home: https://github.com/openSUSE/osc Commit: a887ade78fb6fcf615679555cc6196ba1ce8a6a4 https://github.com/openSUSE/osc/commit/a887ade78fb6fcf615679555cc6196ba1ce8… Author: Daniel Mach <daniel.mach(a)suse.com> Date: 2024-07-29 (Mon, 29 Jul 2024) Changed paths: M osc/commandline.py M osc/core.py M osc/obs_scm/package.py M osc/obs_scm/store.py M tests/common.py M tests/test_addfiles.py M tests/test_commit.py M tests/test_deletefiles.py M tests/test_repairwc.py M tests/test_revertfiles.py M tests/test_update.py Log Message: ----------- Fix possibility to overwrite special files in .osc (CVE-2024-22034 boo#1225911) Source files are now stored in the 'sources' subdirectory which prevents name collisons. This requires changing version of '.osc' store to 2.0. Commit: 780d70d4b565cffcc65b535785d2e5009107b4af https://github.com/openSUSE/osc/commit/780d70d4b565cffcc65b535785d2e5009107… Author: Daniel Mach <daniel.mach(a)suse.com> Date: 2024-07-29 (Mon, 29 Jul 2024) Changed paths: M NEWS M contrib/osc.spec M osc/__init__.py Log Message: ----------- release 1.9.0 Compare: https://github.com/openSUSE/osc/compare/d8bfd4521e72...780d70d4b565 To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/osc/settings/notifications

1 0

[openSUSE/open-build-service]
by dependabot[bot] 19 Aug '24

19 Aug '24

Branch: refs/heads/dependabot/github_actions/github/codeql-action-3.26.2 Home: https://github.com/openSUSE/open-build-service To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/open-build-service/settings/notifications

1 0

[openSUSE/open-build-service] a0fb18: Bump github/codeql-action from 3.26.0 to 3.26.2
by dependabot[bot] 19 Aug '24

19 Aug '24

Branch: refs/heads/master Home: https://github.com/openSUSE/open-build-service Commit: a0fb1863d4c7747df1054f40318f0c1c3b29caf4 https://github.com/openSUSE/open-build-service/commit/a0fb1863d4c7747df1054… Author: dependabot[bot] <49699333+dependabot[bot](a)users.noreply.github.com> Date: 2024-08-19 (Mon, 19 Aug 2024) Changed paths: M .github/workflows/scorecards.yml Log Message: ----------- Bump github/codeql-action from 3.26.0 to 3.26.2 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.0 to 3.26.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/eb055d739abdc2e8de… --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support(a)github.com> Commit: 77a22ae86edd143156b910f4887cf3a2b9b149d6 https://github.com/openSUSE/open-build-service/commit/77a22ae86edd143156b91… Author: dependabot[bot] <49699333+dependabot[bot](a)users.noreply.github.com> Date: 2024-08-19 (Mon, 19 Aug 2024) Changed paths: M .github/workflows/scorecards.yml Log Message: ----------- Merge pull request #16720 from openSUSE/dependabot/github_actions/github/codeql-action-3.26.2 Compare: https://github.com/openSUSE/open-build-service/compare/1baf8ef4f1db...77a22… To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/open-build-service/settings/notifications

1 0

[openSUSE/open-build-service] a0fb18: Bump github/codeql-action from 3.26.0 to 3.26.2
by dependabot[bot] 19 Aug '24

19 Aug '24

Branch: refs/heads/dependabot/github_actions/github/codeql-action-3.26.2 Home: https://github.com/openSUSE/open-build-service Commit: a0fb1863d4c7747df1054f40318f0c1c3b29caf4 https://github.com/openSUSE/open-build-service/commit/a0fb1863d4c7747df1054… Author: dependabot[bot] <49699333+dependabot[bot](a)users.noreply.github.com> Date: 2024-08-19 (Mon, 19 Aug 2024) Changed paths: M .github/workflows/scorecards.yml Log Message: ----------- Bump github/codeql-action from 3.26.0 to 3.26.2 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.0 to 3.26.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/eb055d739abdc2e8de… --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support(a)github.com> To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/open-build-service/settings/notifications

1 0

[openSUSE/open-build-service]
by depfu[bot] 19 Aug '24

19 Aug '24

Branch: refs/heads/depfu/update/srcapi/delayed_job_active_record-4.1.9 Home: https://github.com/openSUSE/open-build-service To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/open-build-service/settings/notifications

1 0

[openSUSE/open-build-service] 1baf8e: Update delayed_job_active_record to version 4.1.9 ...
by depfu[bot] 19 Aug '24

19 Aug '24

Branch: refs/heads/master Home: https://github.com/openSUSE/open-build-service Commit: 1baf8ef4f1db3b393d7a057d509396fbdebb236e https://github.com/openSUSE/open-build-service/commit/1baf8ef4f1db3b393d7a0… Author: depfu[bot] <23717796+depfu[bot](a)users.noreply.github.com> Date: 2024-08-19 (Mon, 19 Aug 2024) Changed paths: M src/api/Gemfile.lock R src/api/vendor/cache/delayed_job_active_record-4.1.8.gem A src/api/vendor/cache/delayed_job_active_record-4.1.9.gem Log Message: ----------- Update delayed_job_active_record to version 4.1.9 (#16713) To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/open-build-service/settings/notifications

1 0

[openSUSE/open-build-service]
by depfu[bot] 19 Aug '24

19 Aug '24

Branch: refs/heads/depfu/update/srcapi/rubocop-ast-1.32.1 Home: https://github.com/openSUSE/open-build-service To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/open-build-service/settings/notifications

1 0

[openSUSE/open-build-service] 0e57df: Update rubocop-ast to version 1.32.1 (#16719)
by depfu[bot] 19 Aug '24

19 Aug '24

Branch: refs/heads/master Home: https://github.com/openSUSE/open-build-service Commit: 0e57df8e2722e062d107f6fdd48608c5645f1997 https://github.com/openSUSE/open-build-service/commit/0e57df8e2722e062d107f… Author: depfu[bot] <23717796+depfu[bot](a)users.noreply.github.com> Date: 2024-08-19 (Mon, 19 Aug 2024) Changed paths: M src/api/Gemfile.lock R src/api/vendor/cache/rubocop-ast-1.32.0.gem A src/api/vendor/cache/rubocop-ast-1.32.1.gem Log Message: ----------- Update rubocop-ast to version 1.32.1 (#16719) To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/open-build-service/settings/notifications

1 0

[openSUSE/open-build-service] 83ff34: Update delayed_job_active_record to version 4.1.9
by depfu[bot] 19 Aug '24

19 Aug '24

Branch: refs/heads/depfu/update/srcapi/delayed_job_active_record-4.1.9 Home: https://github.com/openSUSE/open-build-service Commit: 83ff344be0c6aec40567353418a8d6614a043c05 https://github.com/openSUSE/open-build-service/commit/83ff344be0c6aec405673… Author: depfu[bot] <23717796+depfu[bot](a)users.noreply.github.com> Date: 2024-08-19 (Mon, 19 Aug 2024) Changed paths: M src/api/Gemfile.lock R src/api/vendor/cache/delayed_job_active_record-4.1.8.gem A src/api/vendor/cache/delayed_job_active_record-4.1.9.gem Log Message: ----------- Update delayed_job_active_record to version 4.1.9 To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/open-build-service/settings/notifications

1 0