Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package slsa-verifier for openSUSE:Factory checked in at 2025-07-02 12:09:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/slsa-verifier (Old) and /work/SRC/openSUSE:Factory/.slsa-verifier.new.7067 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "slsa-verifier" Wed Jul 2 12:09:53 2025 rev:3 rq:1289479 version:2.7.1 Changes: -------- --- /work/SRC/openSUSE:Factory/slsa-verifier/slsa-verifier.changes 2025-02-10 18:34:27.101964972 +0100 +++ /work/SRC/openSUSE:Factory/.slsa-verifier.new.7067/slsa-verifier.changes 2025-07-02 12:12:47.614945798 +0200 @@ -1,0 +2,33 @@ +Mon Jun 30 05:58:01 UTC 2025 - Johannes Kastl <opensuse_buildserv...@ojkastl.de> + +- update to 2.7.1: + * chore: Update docs for v2.7.0 by @ramonpetgrave64 in #829 + * docs(npm): "exmaple" spelling fix by @scop in #832 + * chore: update test files for v2.1.0 by @ramonpetgrave64 in #836 + * feat: verify provenance for bcr modules produced by trusted + reusable workflows by @loosebazooka in #840 + * chore(deps): update golang:1.23 docker digest to cc458d7 by + @renovate-bot in #838 + * fix: less parallelism in tests by @ramonpetgrave64 in #851 + * chore(deps): bump @octokit/request-error from 5.0.1 to 5.1.1 in + /actions/installer in the npm_and_yarn group across 1 directory + by @dependabot in #833 + * chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to + 4.0.5 in the go_modules group by @dependabot in #835 + * chore(deps): bump the go_modules group across 1 directory with + 2 updates by @dependabot in #853 + * fix(deps): update npm by @renovate-bot in #843 + * fix(deps): update golang.org/x/exp digest to dcc06ee by + @renovate-bot in #839 + * fix: no parallel regression tests by @ramonpetgrave64 in #855 + * chore(deps): update golang:1.23 docker digest to dd5cc4b by + @renovate-bot in #847 + * chore(deps): update gcr.io/distroless/base:nonroot docker + digest to 0a0dc20 by @renovate-bot in #844 + * chore(deps): bump the npm_and_yarn group across 2 directories + with 5 updates by @dependabot in #854 + * feat: Bazel not experimental by @ramonpetgrave64 in #850 + * docs: add section for verify-github-attestation by + @loosebazooka in #858 + +------------------------------------------------------------------- Old: ---- slsa-verifier-2.7.0.tar.gz New: ---- slsa-verifier-2.7.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ slsa-verifier.spec ++++++ --- /var/tmp/diff_new_pack.qe66yJ/_old 2025-07-02 12:12:49.643030030 +0200 +++ /var/tmp/diff_new_pack.qe66yJ/_new 2025-07-02 12:12:49.647030197 +0200 @@ -17,7 +17,7 @@ Name: slsa-verifier -Version: 2.7.0 +Version: 2.7.1 Release: 0 Summary: Verify provenance from SLSA compliant builders License: Apache-2.0 ++++++ slsa-verifier-2.7.0.tar.gz -> slsa-verifier-2.7.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/slsa-verifier/slsa-verifier-2.7.0.tar.gz /work/SRC/openSUSE:Factory/.slsa-verifier.new.7067/slsa-verifier-2.7.1.tar.gz differ: char 28, line 1 ++++++ vendor.tar.zst ++++++ ++++ 3514 lines of diff (skipped)
