Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package melange for openSUSE:Factory checked in at 2024-11-26 20:56:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/melange (Old) and /work/SRC/openSUSE:Factory/.melange.new.28523 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "melange" Tue Nov 26 20:56:31 2024 rev:47 rq:1226535 version:0.15.14 Changes: -------- --- /work/SRC/openSUSE:Factory/melange/melange.changes 2024-11-22 23:54:11.944082551 +0100 +++ /work/SRC/openSUSE:Factory/.melange.new.28523/melange.changes 2024-11-26 20:57:54.119426435 +0100 @@ -1,0 +2,10 @@ +Tue Nov 26 13:50:47 UTC 2024 - [email protected] + +- Update to version 0.15.14: + * fix(pipeline): validate expected commit before passing to + git-checkout pipeline (#1667) + * Add git version to Summarize output + * RELEASE.md update, add statement that tags and releases will + update + +------------------------------------------------------------------- Old: ---- melange-0.15.13.obscpio New: ---- melange-0.15.14.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ melange.spec ++++++ --- /var/tmp/diff_new_pack.ZiAE4v/_old 2024-11-26 20:57:56.839539431 +0100 +++ /var/tmp/diff_new_pack.ZiAE4v/_new 2024-11-26 20:57:56.843539598 +0100 @@ -17,7 +17,7 @@ Name: melange -Version: 0.15.13 +Version: 0.15.14 Release: 0 Summary: Build APKs from source code License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.ZiAE4v/_old 2024-11-26 20:57:56.879541093 +0100 +++ /var/tmp/diff_new_pack.ZiAE4v/_new 2024-11-26 20:57:56.883541259 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/chainguard-dev/melange</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.15.13</param> + <param name="revision">v0.15.14</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.ZiAE4v/_old 2024-11-26 20:57:56.907542257 +0100 +++ /var/tmp/diff_new_pack.ZiAE4v/_new 2024-11-26 20:57:56.911542422 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/chainguard-dev/melange</param> - <param name="changesrevision">907019c0549969cbe7b39bf8eaf0e906248d8cf9</param></service></servicedata> + <param name="changesrevision">2fff904cdf10b30b8948fa803069f7e62487d93c</param></service></servicedata> (No newline at EOF) ++++++ melange-0.15.13.obscpio -> melange-0.15.14.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.15.13/RELEASE.md new/melange-0.15.14/RELEASE.md --- old/melange-0.15.13/RELEASE.md 2024-11-22 00:19:21.000000000 +0100 +++ new/melange-0.15.14/RELEASE.md 2024-11-23 13:53:56.000000000 +0100 @@ -8,6 +8,9 @@ 4. In the dropdown, click on the `Run workflow` button. 5. Wait for the workflow to complete successfully. +After workflow completes the new release will show up in [tags](https://github.com/chainguard-dev/melange/tags) +and [releases](https://github.com/chainguard-dev/melange/releases). + ### Useful things to know #### Detecting whether a new release is needed diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.15.13/pkg/build/build.go new/melange-0.15.14/pkg/build/build.go --- old/melange-0.15.13/pkg/build/build.go 2024-11-22 00:19:21.000000000 +0100 +++ new/melange-0.15.14/pkg/build/build.go 2024-11-23 13:53:56.000000000 +0100 @@ -48,6 +48,7 @@ "google.golang.org/api/iterator" "google.golang.org/api/option" "k8s.io/kube-openapi/pkg/util/sets" + "sigs.k8s.io/release-utils/version" "chainguard.dev/melange/pkg/config" "chainguard.dev/melange/pkg/container" @@ -1081,7 +1082,7 @@ func (b *Build) summarize(ctx context.Context) { log := clog.FromContext(ctx) - log.Infof("melange is building:") + log.Infof("melange %s is building:", version.GetVersionInfo().GitVersion) log.Infof(" configuration file: %s", b.ConfigFile) b.SummarizePaths(ctx) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.15.13/pkg/build/pipeline.go new/melange-0.15.14/pkg/build/pipeline.go --- old/melange-0.15.13/pkg/build/pipeline.go 2024-11-22 00:19:21.000000000 +0100 +++ new/melange-0.15.14/pkg/build/pipeline.go 2024-11-23 13:53:56.000000000 +0100 @@ -159,6 +159,14 @@ return data, fmt.Errorf("checksum input %q for pipeline, invalid length", k) } } + if k == "expected-commit" && data[k] != "" { + if !matchValidShaChars(data[k]) { + return data, fmt.Errorf("expectec commit %q for pipeline contains invalid characters", k) + } + if len(data[k]) != 40 { + return data, fmt.Errorf("expected commit %q for pipeline, invalid length", k) + } + } if v.Required && data[k] == "" { return data, fmt.Errorf("required input %q for pipeline is missing", k) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.15.13/pkg/build/test.go new/melange-0.15.14/pkg/build/test.go --- old/melange-0.15.13/pkg/build/test.go 2024-11-22 00:19:21.000000000 +0100 +++ new/melange-0.15.14/pkg/build/test.go 2024-11-23 13:53:56.000000000 +0100 @@ -36,6 +36,7 @@ "github.com/chainguard-dev/clog" "github.com/yookoala/realpath" "go.opentelemetry.io/otel" + "sigs.k8s.io/release-utils/version" "chainguard.dev/melange/pkg/config" "chainguard.dev/melange/pkg/container" @@ -535,7 +536,7 @@ func (t *Test) Summarize(ctx context.Context) { log := clog.FromContext(ctx) - log.Infof("melange is testing:") + log.Infof("melange %s is testing:", version.GetVersionInfo().GitVersion) log.Infof(" configuration file: %s", t.ConfigFile) t.SummarizePaths(ctx) } ++++++ melange.obsinfo ++++++ --- /var/tmp/diff_new_pack.ZiAE4v/_old 2024-11-26 20:57:57.251556547 +0100 +++ /var/tmp/diff_new_pack.ZiAE4v/_new 2024-11-26 20:57:57.255556713 +0100 @@ -1,5 +1,5 @@ name: melange -version: 0.15.13 -mtime: 1732231161 -commit: 907019c0549969cbe7b39bf8eaf0e906248d8cf9 +version: 0.15.14 +mtime: 1732366436 +commit: 2fff904cdf10b30b8948fa803069f7e62487d93c ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/melange/vendor.tar.gz /work/SRC/openSUSE:Factory/.melange.new.28523/vendor.tar.gz differ: char 5, line 1
