Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package regclient for openSUSE:Factory checked in at 2025-12-09 12:48:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/regclient (Old) and /work/SRC/openSUSE:Factory/.regclient.new.1939 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "regclient" Tue Dec 9 12:48:04 2025 rev:12 rq:1321522 version:0.11.1 Changes: -------- --- /work/SRC/openSUSE:Factory/regclient/regclient.changes 2025-12-05 16:53:14.235857569 +0100 +++ /work/SRC/openSUSE:Factory/.regclient.new.1939/regclient.changes 2025-12-09 12:55:39.893336790 +0100 @@ -1,0 +2,12 @@ +Mon Dec 08 08:37:08 UTC 2025 - Johannes Kastl <[email protected]> + +- Update to version 0.11.1: + * Security: + - Go 1.25.5 fixes CVE-2025-61729 (PR 1025) + - Go 1.25.5 fixes CVE-2025-61727 (PR 1025) + * Fixes: + - Correct selection of previous tag for releases. (PR 1023) + - Make sure ContentLength is correctly set in the request. (PR + 1024) + +------------------------------------------------------------------- Old: ---- regclient-0.11.0.obscpio New: ---- regclient-0.11.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ regclient.spec ++++++ --- /var/tmp/diff_new_pack.LRuWfE/_old 2025-12-09 12:55:46.833629554 +0100 +++ /var/tmp/diff_new_pack.LRuWfE/_new 2025-12-09 12:55:46.833629554 +0100 @@ -17,7 +17,7 @@ Name: regclient -Version: 0.11.0 +Version: 0.11.1 Release: 0 Summary: OCI Registry Client in Go and tooling using those libraries License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.LRuWfE/_old 2025-12-09 12:55:46.881631579 +0100 +++ /var/tmp/diff_new_pack.LRuWfE/_new 2025-12-09 12:55:46.885631748 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/regclient/regclient</param> <param name="scm">git</param> <param name="package-meta">yes</param> - <param name="revision">v0.11.0</param> + <param name="revision">v0.11.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.LRuWfE/_old 2025-12-09 12:55:46.909632760 +0100 +++ /var/tmp/diff_new_pack.LRuWfE/_new 2025-12-09 12:55:46.913632929 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/regclient/regclient</param> - <param name="changesrevision">9a4fd6b957345e2f625f0c18dfbea4db59fc2b23</param></service></servicedata> + <param name="changesrevision">bf3bcfc47173b49ee8000d1d3a1ac15036e83cf0</param></service></servicedata> (No newline at EOF) ++++++ regclient-0.11.0.obscpio -> regclient-0.11.1.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/HEAD new/regclient-0.11.1/.git/HEAD --- old/regclient-0.11.0/.git/HEAD 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/HEAD 2025-12-07 16:00:47.000000000 +0100 @@ -1 +1 @@ -9a4fd6b957345e2f625f0c18dfbea4db59fc2b23 +bf3bcfc47173b49ee8000d1d3a1ac15036e83cf0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/ORIG_HEAD new/regclient-0.11.1/.git/ORIG_HEAD --- old/regclient-0.11.0/.git/ORIG_HEAD 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/ORIG_HEAD 2025-12-07 16:00:47.000000000 +0100 @@ -1 +1 @@ -9a4fd6b957345e2f625f0c18dfbea4db59fc2b23 +bf3bcfc47173b49ee8000d1d3a1ac15036e83cf0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/applypatch-msg.sample new/regclient-0.11.1/.git/hooks/applypatch-msg.sample --- old/regclient-0.11.0/.git/hooks/applypatch-msg.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/applypatch-msg.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # An example hook script to check the commit log message taken by # applypatch from an e-mail message. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/commit-msg.sample new/regclient-0.11.1/.git/hooks/commit-msg.sample --- old/regclient-0.11.0/.git/hooks/commit-msg.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/commit-msg.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # An example hook script to check the commit log message. # Called by "git commit" with one argument, the name of the file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/fsmonitor-watchman.sample new/regclient-0.11.1/.git/hooks/fsmonitor-watchman.sample --- old/regclient-0.11.0/.git/hooks/fsmonitor-watchman.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/fsmonitor-watchman.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/k9lfh0l007sp61rag7d9bf3nn5bg3qy7-perl-5.40.0/bin/perl +#!/nix/store/h2jsb5i4yfblr2f3ac2c7zpmlmj7zjym-perl-5.40.0/bin/perl use strict; use warnings; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/post-update.sample new/regclient-0.11.1/.git/hooks/post-update.sample --- old/regclient-0.11.0/.git/hooks/post-update.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/post-update.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # An example hook script to prepare a packed repository for use over # dumb transports. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/pre-applypatch.sample new/regclient-0.11.1/.git/hooks/pre-applypatch.sample --- old/regclient-0.11.0/.git/hooks/pre-applypatch.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/pre-applypatch.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # An example hook script to verify what is about to be committed # by applypatch from an e-mail message. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/pre-commit.sample new/regclient-0.11.1/.git/hooks/pre-commit.sample --- old/regclient-0.11.0/.git/hooks/pre-commit.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/pre-commit.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # An example hook script to verify what is about to be committed. # Called by "git commit" with no arguments. The hook should diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/pre-merge-commit.sample new/regclient-0.11.1/.git/hooks/pre-merge-commit.sample --- old/regclient-0.11.0/.git/hooks/pre-merge-commit.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/pre-merge-commit.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # An example hook script to verify what is about to be committed. # Called by "git merge" with no arguments. The hook should diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/pre-push.sample new/regclient-0.11.1/.git/hooks/pre-push.sample --- old/regclient-0.11.0/.git/hooks/pre-push.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/pre-push.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # An example hook script to verify what is about to be pushed. Called by "git # push" after it has checked the remote status, but before anything has been diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/pre-rebase.sample new/regclient-0.11.1/.git/hooks/pre-rebase.sample --- old/regclient-0.11.0/.git/hooks/pre-rebase.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/pre-rebase.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # Copyright (c) 2006, 2008 Junio C Hamano # @@ -65,7 +65,7 @@ fi else not_in_next=`git rev-list --pretty=oneline ^${publish} "$topic"` - /nix/store/k9lfh0l007sp61rag7d9bf3nn5bg3qy7-perl-5.40.0/bin/perl -e ' + /nix/store/h2jsb5i4yfblr2f3ac2c7zpmlmj7zjym-perl-5.40.0/bin/perl -e ' my $topic = $ARGV[0]; my $msg = "* $topic has commits already merged to public branch:\n"; my (%not_in_next) = map { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/pre-receive.sample new/regclient-0.11.1/.git/hooks/pre-receive.sample --- old/regclient-0.11.0/.git/hooks/pre-receive.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/pre-receive.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # An example hook script to make use of push options. # The example simply echoes all push options that start with 'echoback=' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/prepare-commit-msg.sample new/regclient-0.11.1/.git/hooks/prepare-commit-msg.sample --- old/regclient-0.11.0/.git/hooks/prepare-commit-msg.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/prepare-commit-msg.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # An example hook script to prepare the commit log message. # Called by "git commit" with the name of the file that has the @@ -24,11 +24,11 @@ COMMIT_SOURCE=$2 SHA1=$3 -/nix/store/k9lfh0l007sp61rag7d9bf3nn5bg3qy7-perl-5.40.0/bin/perl -i.bak -ne 'print unless(m/^. Please enter the commit message/..m/^#$/)' "$COMMIT_MSG_FILE" +/nix/store/h2jsb5i4yfblr2f3ac2c7zpmlmj7zjym-perl-5.40.0/bin/perl -i.bak -ne 'print unless(m/^. Please enter the commit message/..m/^#$/)' "$COMMIT_MSG_FILE" # case "$COMMIT_SOURCE,$SHA1" in # ,|template,) -# /nix/store/k9lfh0l007sp61rag7d9bf3nn5bg3qy7-perl-5.40.0/bin/perl -i.bak -pe ' +# /nix/store/h2jsb5i4yfblr2f3ac2c7zpmlmj7zjym-perl-5.40.0/bin/perl -i.bak -pe ' # print "\n" . `git diff --cached --name-status -r` # if /^#/ && $first++ == 0' "$COMMIT_MSG_FILE" ;; # *) ;; @@ -38,5 +38,5 @@ # git interpret-trailers --in-place --trailer "$SOB" "$COMMIT_MSG_FILE" # if test -z "$COMMIT_SOURCE" # then -# /nix/store/k9lfh0l007sp61rag7d9bf3nn5bg3qy7-perl-5.40.0/bin/perl -i.bak -pe 'print "\n" if !$first_line++' "$COMMIT_MSG_FILE" +# /nix/store/h2jsb5i4yfblr2f3ac2c7zpmlmj7zjym-perl-5.40.0/bin/perl -i.bak -pe 'print "\n" if !$first_line++' "$COMMIT_MSG_FILE" # fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/push-to-checkout.sample new/regclient-0.11.1/.git/hooks/push-to-checkout.sample --- old/regclient-0.11.0/.git/hooks/push-to-checkout.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/push-to-checkout.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # An example hook script to update a checked-out tree on a git push. # diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/sendemail-validate.sample new/regclient-0.11.1/.git/hooks/sendemail-validate.sample --- old/regclient-0.11.0/.git/hooks/sendemail-validate.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/sendemail-validate.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # An example hook script to validate a patch (and/or patch series) before # sending it via email. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/hooks/update.sample new/regclient-0.11.1/.git/hooks/update.sample --- old/regclient-0.11.0/.git/hooks/update.sample 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/hooks/update.sample 2025-12-07 16:00:47.000000000 +0100 @@ -1,4 +1,4 @@ -#!/nix/store/l9k32vj2aczxw62134j1x0dsh569jz2l-bash-5.2p37/bin/bash +#!/nix/store/rlq03x4cwf8zn73hxaxnx0zn5q9kifls-bash-5.3p3/bin/bash # # An example hook script to block unannotated tags from entering. # Called by "git receive-pack" with arguments: refname sha1-old sha1-new Binary files old/regclient-0.11.0/.git/index and new/regclient-0.11.1/.git/index differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/logs/HEAD new/regclient-0.11.1/.git/logs/HEAD --- old/regclient-0.11.0/.git/logs/HEAD 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/logs/HEAD 2025-12-07 16:00:47.000000000 +0100 @@ -1,2 +1,2 @@ -0000000000000000000000000000000000000000 1b734bf7e919e7df1e35417f33afd068b5bc07a2 kastl <[email protected]> 1764828511 +0100 clone: from https://github.com/regclient/regclient -1b734bf7e919e7df1e35417f33afd068b5bc07a2 9a4fd6b957345e2f625f0c18dfbea4db59fc2b23 kastl <[email protected]> 1764828511 +0100 checkout: moving from main to v0.11.0 +0000000000000000000000000000000000000000 de049e91ce43638a27d8fdfb540c3cfa5712898f kastl <[email protected]> 1765183028 +0100 clone: from https://github.com/regclient/regclient +de049e91ce43638a27d8fdfb540c3cfa5712898f bf3bcfc47173b49ee8000d1d3a1ac15036e83cf0 kastl <[email protected]> 1765183028 +0100 checkout: moving from main to v0.11.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/logs/refs/heads/main new/regclient-0.11.1/.git/logs/refs/heads/main --- old/regclient-0.11.0/.git/logs/refs/heads/main 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/logs/refs/heads/main 2025-12-07 16:00:47.000000000 +0100 @@ -1 +1 @@ -0000000000000000000000000000000000000000 1b734bf7e919e7df1e35417f33afd068b5bc07a2 kastl <[email protected]> 1764828511 +0100 clone: from https://github.com/regclient/regclient +0000000000000000000000000000000000000000 de049e91ce43638a27d8fdfb540c3cfa5712898f kastl <[email protected]> 1765183028 +0100 clone: from https://github.com/regclient/regclient diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/logs/refs/remotes/origin/HEAD new/regclient-0.11.1/.git/logs/refs/remotes/origin/HEAD --- old/regclient-0.11.0/.git/logs/refs/remotes/origin/HEAD 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/logs/refs/remotes/origin/HEAD 2025-12-07 16:00:47.000000000 +0100 @@ -1 +1 @@ -0000000000000000000000000000000000000000 1b734bf7e919e7df1e35417f33afd068b5bc07a2 kastl <[email protected]> 1764828511 +0100 clone: from https://github.com/regclient/regclient +0000000000000000000000000000000000000000 de049e91ce43638a27d8fdfb540c3cfa5712898f kastl <[email protected]> 1765183028 +0100 clone: from https://github.com/regclient/regclient Binary files old/regclient-0.11.0/.git/objects/pack/pack-35f938a3b2cfc8bf206a30fbf87af242435c59bb.idx and new/regclient-0.11.1/.git/objects/pack/pack-35f938a3b2cfc8bf206a30fbf87af242435c59bb.idx differ Binary files old/regclient-0.11.0/.git/objects/pack/pack-35f938a3b2cfc8bf206a30fbf87af242435c59bb.pack and new/regclient-0.11.1/.git/objects/pack/pack-35f938a3b2cfc8bf206a30fbf87af242435c59bb.pack differ Binary files old/regclient-0.11.0/.git/objects/pack/pack-35f938a3b2cfc8bf206a30fbf87af242435c59bb.rev and new/regclient-0.11.1/.git/objects/pack/pack-35f938a3b2cfc8bf206a30fbf87af242435c59bb.rev differ Binary files old/regclient-0.11.0/.git/objects/pack/pack-d78df5fde3b1b54ff71823fa74ef53a7bf9c58d3.idx and new/regclient-0.11.1/.git/objects/pack/pack-d78df5fde3b1b54ff71823fa74ef53a7bf9c58d3.idx differ Binary files old/regclient-0.11.0/.git/objects/pack/pack-d78df5fde3b1b54ff71823fa74ef53a7bf9c58d3.pack and new/regclient-0.11.1/.git/objects/pack/pack-d78df5fde3b1b54ff71823fa74ef53a7bf9c58d3.pack differ Binary files old/regclient-0.11.0/.git/objects/pack/pack-d78df5fde3b1b54ff71823fa74ef53a7bf9c58d3.rev and new/regclient-0.11.1/.git/objects/pack/pack-d78df5fde3b1b54ff71823fa74ef53a7bf9c58d3.rev differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/packed-refs new/regclient-0.11.1/.git/packed-refs --- old/regclient-0.11.0/.git/packed-refs 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/packed-refs 2025-12-07 16:00:47.000000000 +0100 @@ -1,8 +1,8 @@ # pack-refs with: peeled fully-peeled sorted -1b734bf7e919e7df1e35417f33afd068b5bc07a2 refs/remotes/origin/main +de049e91ce43638a27d8fdfb540c3cfa5712898f refs/remotes/origin/main daa734a0b4dc9c19231cfe691a241f0ce2a7b2f4 refs/remotes/origin/releases/0.0 c3de9bb7b04ad3cd96bb73bc0c72986b83572d12 refs/remotes/origin/releases/0.10 -9a4fd6b957345e2f625f0c18dfbea4db59fc2b23 refs/remotes/origin/releases/0.11 +bf3bcfc47173b49ee8000d1d3a1ac15036e83cf0 refs/remotes/origin/releases/0.11 4c6dd972a3c609f7c0997bb6e464aee431f8c971 refs/remotes/origin/releases/0.2 6a1a13c410f734f5e18a6032936bc6764814eae7 refs/remotes/origin/releases/0.3 847254c7ac7d6f027dcdfb196a9aa4c11eb61ed9 refs/remotes/origin/releases/0.4 @@ -27,6 +27,8 @@ ^c3de9bb7b04ad3cd96bb73bc0c72986b83572d12 3d39816ed1fd27384e80977617ca14dff38269b4 refs/tags/v0.11.0 ^9a4fd6b957345e2f625f0c18dfbea4db59fc2b23 +68b75c2e5e18585758937da221644a69457c2fa4 refs/tags/v0.11.1 +^bf3bcfc47173b49ee8000d1d3a1ac15036e83cf0 f5e39881d000960a706d1840f2a43eac7b3fd9de refs/tags/v0.2.0 ^5906ef88ec6ec3f6709d286756d27b77982fa55b 25bacba961cde26845ce0bf5a90edbb8a2bdb2e4 refs/tags/v0.2.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.git/refs/heads/main new/regclient-0.11.1/.git/refs/heads/main --- old/regclient-0.11.0/.git/refs/heads/main 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.git/refs/heads/main 2025-12-07 16:00:47.000000000 +0100 @@ -1 +1 @@ -1b734bf7e919e7df1e35417f33afd068b5bc07a2 +de049e91ce43638a27d8fdfb540c3cfa5712898f diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.github/release.sh new/regclient-0.11.1/.github/release.sh --- old/regclient-0.11.0/.github/release.sh 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.github/release.sh 2025-12-07 16:00:47.000000000 +0100 @@ -96,7 +96,7 @@ # prompt with last tag, asking for next tag, defaulting to patch update if [ -z "$prev_tag" ]; then - prev_tag="$(git tag -l | tail -1)" + prev_tag="$(git tag --sort=version:refname -l | tail -1)" fi # for dry-run, output the change list from the prev_tag to main and stop # TODO: add a dry-run func to echo vs exec commands that would change things diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.github/workflows/ci-registry.yml new/regclient-0.11.1/.github/workflows/ci-registry.yml --- old/regclient-0.11.0/.github/workflows/ci-registry.yml 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.github/workflows/ci-registry.yml 2025-12-07 16:00:47.000000000 +0100 @@ -23,7 +23,7 @@ steps: - name: Check out code - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Set up Go ${{ env.RELEASE_GO_VER }}" uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.github/workflows/docker.yml new/regclient-0.11.1/.github/workflows/docker.yml --- old/regclient-0.11.0/.github/workflows/docker.yml 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.github/workflows/docker.yml 2025-12-07 16:00:47.000000000 +0100 @@ -29,11 +29,11 @@ env: ALPINE_NAME: "alpine:3" - ALPINE_DIGEST: "sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412" # 3.22.2 + ALPINE_DIGEST: "sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375" # 3.23.0 steps: - name: Check out code - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Prepare id: prep @@ -133,7 +133,7 @@ # Dogfooding, use regctl to modify regclient images to improve reproducibility - name: Install regctl - uses: regclient/actions/regctl-installer@ed5268e995795eb54f4187ada5728d118ad674f3 # main + uses: regclient/actions/regctl-installer@1ea6cfdb5365b98ff1201dde150f417efc4a2079 # main if: github.event_name != 'pull_request' && github.repository_owner == 'regclient' with: release: main diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.github/workflows/go.yml new/regclient-0.11.1/.github/workflows/go.yml --- old/regclient-0.11.0/.github/workflows/go.yml 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.github/workflows/go.yml 2025-12-07 16:00:47.000000000 +0100 @@ -32,7 +32,7 @@ steps: - name: Check out code - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Set up Go ${{ matrix.gover }}" uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.github/workflows/inactive-cleanup.yml new/regclient-0.11.1/.github/workflows/inactive-cleanup.yml --- old/regclient-0.11.0/.github/workflows/inactive-cleanup.yml 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.github/workflows/inactive-cleanup.yml 2025-12-07 16:00:47.000000000 +0100 @@ -13,7 +13,7 @@ issues: write # for actions/stale to close stale issues pull-requests: write # for actions/stale to close stale PRs steps: - - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0 + - uses: actions/stale@997185467fa4f803885201cee163a9f38240193d # v10.1.1 with: days-before-stale: 60 days-before-close: 28 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.github/workflows/version-check.yml new/regclient-0.11.1/.github/workflows/version-check.yml --- old/regclient-0.11.0/.github/workflows/version-check.yml 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.github/workflows/version-check.yml 2025-12-07 16:00:47.000000000 +0100 @@ -15,7 +15,7 @@ steps: - name: Check out code - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Version Check uses: docker://ghcr.io/sudo-bmitch/version-bump:edge with: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.github/workflows/vulnscans.yml new/regclient-0.11.1/.github/workflows/vulnscans.yml --- old/regclient-0.11.0/.github/workflows/vulnscans.yml 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.github/workflows/vulnscans.yml 2025-12-07 16:00:47.000000000 +0100 @@ -17,7 +17,7 @@ steps: - name: Check out code - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Set up Go" uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.osv-scanner.toml new/regclient-0.11.1/.osv-scanner.toml --- old/regclient-0.11.0/.osv-scanner.toml 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.osv-scanner.toml 2025-12-07 16:00:47.000000000 +0100 @@ -1 +1 @@ -GoVersionOverride = "1.25.4" +GoVersionOverride = "1.25.5" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/.version-bump.lock new/regclient-0.11.1/.version-bump.lock --- old/regclient-0.11.0/.version-bump.lock 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/.version-bump.lock 2025-12-07 16:00:47.000000000 +0100 @@ -1,32 +1,32 @@ -{"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.22.2","version":"sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412"} -{"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.22.2"} +{"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.23.0","version":"sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375"} +{"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.23.0"} {"name":"docker-arg-ecr","key":"https://github.com/awslabs/amazon-ecr-credential-helper.git","version":"v0.11.0"} {"name":"docker-arg-gcr","key":"https://github.com/GoogleCloudPlatform/docker-credential-gcr.git","version":"v2.1.30"} -{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.25.4-alpine","version":"sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb"} -{"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.25.4"} +{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.25.5-alpine","version":"sha256:26111811bc967321e7b6f852e914d14bede324cd1accb7f81811929a6a57fea9"} +{"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.25.5"} {"name":"docker-arg-lunajson","key":"https://github.com/grafi-tt/lunajson.git:master","version":"3d10600874527d71519b33ecbb314eb93ccd1df6"} {"name":"docker-arg-semver","key":"https://github.com/kikito/semver.lua.git:master","version":"a4b708ba243208d46e575da870af969dca46a94d"} -{"name":"gha-alpine-digest","key":"docker.io/library/alpine:3.22.2","version":"sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412"} +{"name":"gha-alpine-digest","key":"docker.io/library/alpine:3.23.0","version":"sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375"} {"name":"gha-alpine-tag-base","key":"docker.io/library/alpine","version":"3"} -{"name":"gha-alpine-tag-comment","key":"docker.io/library/alpine","version":"3.22.2"} +{"name":"gha-alpine-tag-comment","key":"docker.io/library/alpine","version":"3.23.0"} {"name":"gha-cosign-version","key":"https://github.com/sigstore/cosign.git","version":"v3.0.2"} {"name":"gha-golang-matrix","key":"golang-matrix","version":"[\"1.24\", \"1.25\"]"} {"name":"gha-golang-release","key":"golang-latest","version":"1.25"} {"name":"gha-syft-version","key":"docker.io/anchore/syft","version":"v1.38.0"} -{"name":"gha-uses-commit","key":"https://github.com/actions/checkout.git:v6.0.0","version":"1af3b93b6815bc44a9784bd300feb67ff0d1eeb3"} +{"name":"gha-uses-commit","key":"https://github.com/actions/checkout.git:v6.0.1","version":"8e8c483db84b4bee98b60c0593521ed34d9990e8"} {"name":"gha-uses-commit","key":"https://github.com/actions/setup-go.git:v6.1.0","version":"4dc6199c7b1a012772edbd06daecab0f50c9053c"} -{"name":"gha-uses-commit","key":"https://github.com/actions/stale.git:v10.1.0","version":"5f858e3efba33a5ca4407a664cc011ad407f2008"} +{"name":"gha-uses-commit","key":"https://github.com/actions/stale.git:v10.1.1","version":"997185467fa4f803885201cee163a9f38240193d"} {"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v5.0.0","version":"330a01c490aca151604b8cf639adc76d48f6c5d4"} {"name":"gha-uses-commit","key":"https://github.com/anchore/sbom-action.git:v0.20.10","version":"fbfd9c6c189226748411491745178e0c2017392d"} {"name":"gha-uses-commit","key":"https://github.com/docker/build-push-action.git:v6.18.0","version":"263435318d21b8e681c14492fe198d362a7d2c83"} {"name":"gha-uses-commit","key":"https://github.com/docker/login-action.git:v3.6.0","version":"5e57cd118135c172c3672efd75eb46360885c0ef"} {"name":"gha-uses-commit","key":"https://github.com/docker/setup-buildx-action.git:v3.11.1","version":"e468171a9de216ec08956ac3ada2f0791b6bd435"} -{"name":"gha-uses-commit","key":"https://github.com/regclient/actions.git:main","version":"ed5268e995795eb54f4187ada5728d118ad674f3"} +{"name":"gha-uses-commit","key":"https://github.com/regclient/actions.git:main","version":"1ea6cfdb5365b98ff1201dde150f417efc4a2079"} {"name":"gha-uses-commit","key":"https://github.com/sigstore/cosign-installer.git:v4.0.0","version":"faadad0cce49287aee09b3a48701e75088a2c6ad"} {"name":"gha-uses-commit","key":"https://github.com/softprops/action-gh-release.git:v2.5.0","version":"a06a81a03ee405af7f2048a818ed3f03bbf83c7b"} -{"name":"gha-uses-semver","key":"https://github.com/actions/checkout.git","version":"v6.0.0"} +{"name":"gha-uses-semver","key":"https://github.com/actions/checkout.git","version":"v6.0.1"} {"name":"gha-uses-semver","key":"https://github.com/actions/setup-go.git","version":"v6.1.0"} -{"name":"gha-uses-semver","key":"https://github.com/actions/stale.git","version":"v10.1.0"} +{"name":"gha-uses-semver","key":"https://github.com/actions/stale.git","version":"v10.1.1"} {"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v5.0.0"} {"name":"gha-uses-semver","key":"https://github.com/anchore/sbom-action.git","version":"v0.20.10"} {"name":"gha-uses-semver","key":"https://github.com/docker/build-push-action.git","version":"v6.18.0"} @@ -41,13 +41,13 @@ {"name":"makefile-gofumpt","key":"https://github.com/mvdan/gofumpt.git","version":"v0.9.2"} {"name":"makefile-gomajor","key":"https://github.com/icholy/gomajor.git","version":"v0.15.0"} {"name":"makefile-gosec","key":"https://github.com/securego/gosec.git","version":"v2.22.10"} -{"name":"makefile-markdown-lint","key":"docker.io/davidanson/markdownlint-cli2","version":"v0.19.1"} +{"name":"makefile-markdown-lint","key":"docker.io/davidanson/markdownlint-cli2","version":"v0.20.0"} {"name":"makefile-osv-scanner","key":"https://github.com/google/osv-scanner.git","version":"v2.3.0"} {"name":"makefile-staticcheck","key":"https://github.com/dominikh/go-tools.git","version":"v0.6.1"} {"name":"makefile-syft-container-digest","key":"anchore/syft:v1.38.0","version":"sha256:825cad3a952c87676a6d07e9a3bb05ac9c401d598360070e970aa46d54c1727e"} {"name":"makefile-syft-container-tag","key":"anchore/syft","version":"v1.38.0"} {"name":"makefile-syft-version","key":"docker.io/anchore/syft","version":"v1.38.0"} -{"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.25.4"} -{"name":"shell-alpine-digest","key":"docker.io/library/alpine:3.22.2","version":"sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412"} +{"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.25.5"} +{"name":"shell-alpine-digest","key":"docker.io/library/alpine:3.23.0","version":"sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375"} {"name":"shell-alpine-tag-base","key":"docker.io/library/alpine","version":"3"} -{"name":"shell-alpine-tag-comment","key":"docker.io/library/alpine","version":"3.22.2"} +{"name":"shell-alpine-tag-comment","key":"docker.io/library/alpine","version":"3.23.0"} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/Makefile new/regclient-0.11.1/Makefile --- old/regclient-0.11.0/Makefile 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/Makefile 2025-12-07 16:00:47.000000000 +0100 @@ -35,7 +35,7 @@ -u "$(shell id -u):$(shell id -g)" \ $(VER_BUMP_CONTAINER) endif -MARKDOWN_LINT_VER?=v0.19.1 +MARKDOWN_LINT_VER?=v0.20.0 GOFUMPT_VER?=v0.9.2 GOMAJOR_VER?=v0.15.0 GOSEC_VER?=v2.22.10 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/build/Dockerfile.regbot new/regclient-0.11.1/build/Dockerfile.regbot --- old/regclient-0.11.0/build/Dockerfile.regbot 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/build/Dockerfile.regbot 2025-12-07 16:00:47.000000000 +0100 @@ -1,6 +1,6 @@ ARG REGISTRY=docker.io -ARG ALPINE_VER=3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 -ARG GO_VER=1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb +ARG ALPINE_VER=3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 +ARG GO_VER=1.25.5-alpine@sha256:26111811bc967321e7b6f852e914d14bede324cd1accb7f81811929a6a57fea9 ARG ECR_HELPER_VER=v0.11.0 ARG GCR_HELPER_VER=v2.1.30 ARG LUNAJSON_COMMIT=3d10600874527d71519b33ecbb314eb93ccd1df6 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/build/Dockerfile.regbot.buildkit new/regclient-0.11.1/build/Dockerfile.regbot.buildkit --- old/regclient-0.11.0/build/Dockerfile.regbot.buildkit 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/build/Dockerfile.regbot.buildkit 2025-12-07 16:00:47.000000000 +0100 @@ -1,8 +1,8 @@ # syntax=docker/dockerfile:1 ARG REGISTRY=docker.io -ARG ALPINE_VER=3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 -ARG GO_VER=1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb +ARG ALPINE_VER=3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 +ARG GO_VER=1.25.5-alpine@sha256:26111811bc967321e7b6f852e914d14bede324cd1accb7f81811929a6a57fea9 ARG ECR_HELPER_VER=v0.11.0 ARG GCR_HELPER_VER=v2.1.30 ARG LUNAJSON_COMMIT=3d10600874527d71519b33ecbb314eb93ccd1df6 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/build/Dockerfile.regctl new/regclient-0.11.1/build/Dockerfile.regctl --- old/regclient-0.11.0/build/Dockerfile.regctl 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/build/Dockerfile.regctl 2025-12-07 16:00:47.000000000 +0100 @@ -1,6 +1,6 @@ ARG REGISTRY=docker.io -ARG ALPINE_VER=3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 -ARG GO_VER=1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb +ARG ALPINE_VER=3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 +ARG GO_VER=1.25.5-alpine@sha256:26111811bc967321e7b6f852e914d14bede324cd1accb7f81811929a6a57fea9 ARG ECR_HELPER_VER=v0.11.0 ARG GCR_HELPER_VER=v2.1.30 ARG VCS_VERSION=(devel) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/build/Dockerfile.regctl.buildkit new/regclient-0.11.1/build/Dockerfile.regctl.buildkit --- old/regclient-0.11.0/build/Dockerfile.regctl.buildkit 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/build/Dockerfile.regctl.buildkit 2025-12-07 16:00:47.000000000 +0100 @@ -1,8 +1,8 @@ # syntax=docker/dockerfile:1 ARG REGISTRY=docker.io -ARG ALPINE_VER=3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 -ARG GO_VER=1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb +ARG ALPINE_VER=3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 +ARG GO_VER=1.25.5-alpine@sha256:26111811bc967321e7b6f852e914d14bede324cd1accb7f81811929a6a57fea9 ARG ECR_HELPER_VER=v0.11.0 ARG GCR_HELPER_VER=v2.1.30 ARG VCS_VERSION=(devel) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/build/Dockerfile.regsync new/regclient-0.11.1/build/Dockerfile.regsync --- old/regclient-0.11.0/build/Dockerfile.regsync 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/build/Dockerfile.regsync 2025-12-07 16:00:47.000000000 +0100 @@ -1,6 +1,6 @@ ARG REGISTRY=docker.io -ARG ALPINE_VER=3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 -ARG GO_VER=1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb +ARG ALPINE_VER=3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 +ARG GO_VER=1.25.5-alpine@sha256:26111811bc967321e7b6f852e914d14bede324cd1accb7f81811929a6a57fea9 ARG ECR_HELPER_VER=v0.11.0 ARG GCR_HELPER_VER=v2.1.30 ARG VCS_VERSION=(devel) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/build/Dockerfile.regsync.buildkit new/regclient-0.11.1/build/Dockerfile.regsync.buildkit --- old/regclient-0.11.0/build/Dockerfile.regsync.buildkit 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/build/Dockerfile.regsync.buildkit 2025-12-07 16:00:47.000000000 +0100 @@ -1,8 +1,8 @@ # syntax=docker/dockerfile:1 ARG REGISTRY=docker.io -ARG ALPINE_VER=3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 -ARG GO_VER=1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb +ARG ALPINE_VER=3.23.0@sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375 +ARG GO_VER=1.25.5-alpine@sha256:26111811bc967321e7b6f852e914d14bede324cd1accb7f81811929a6a57fea9 ARG ECR_HELPER_VER=v0.11.0 ARG GCR_HELPER_VER=v2.1.30 ARG VCS_VERSION=(devel) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/build/oci-image.sh new/regclient-0.11.1/build/oci-image.sh --- old/regclient-0.11.0/build/oci-image.sh 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/build/oci-image.sh 2025-12-07 16:00:47.000000000 +0100 @@ -7,7 +7,7 @@ release="scratch" push_tags="" ALPINE_NAME="alpine:3" -ALPINE_DIGEST="sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412" # 3.22.2 +ALPINE_DIGEST="sha256:51183f2cfa6320055da30872f211093f9ff1d3cf06f39a0bdb212314c5dc7375" # 3.23.0 # CLI options to override image, platform, base digest, and comma separated list of tags to push opt_c=0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/go.mod new/regclient-0.11.1/go.mod --- old/regclient-0.11.0/go.mod 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/go.mod 2025-12-07 16:00:47.000000000 +0100 @@ -10,7 +10,7 @@ github.com/opencontainers/go-digest v1.0.0 github.com/robfig/cron/v3 v3.0.1 github.com/sirupsen/logrus v1.9.3 - github.com/spf13/cobra v1.10.1 + github.com/spf13/cobra v1.10.2 github.com/ulikunitz/xz v0.5.15 github.com/yuin/gopher-lua v1.1.1 golang.org/x/sys v0.38.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/go.sum new/regclient-0.11.1/go.sum --- old/regclient-0.11.0/go.sum 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/go.sum 2025-12-07 16:00:47.000000000 +0100 @@ -21,8 +21,8 @@ github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= -github.com/spf13/cobra v1.10.1 h1:lJeBwCfmrnXthfAupyUTzJ/J4Nc1RsHC/mSRU2dll/s= -github.com/spf13/cobra v1.10.1/go.mod h1:7SmJGaTHFVBY0jW4NXGluQoLvhqFQM+6XSKD+P4XaB0= +github.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU= +github.com/spf13/cobra v1.10.2/go.mod h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiTUUS4= github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk= github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= @@ -33,12 +33,12 @@ github.com/ulikunitz/xz v0.5.15/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14= github.com/yuin/gopher-lua v1.1.1 h1:kYKnWBjvbNP4XLT3+bPEwAXJx262OhaHDWDVOPjL46M= github.com/yuin/gopher-lua v1.1.1/go.mod h1:GBR0iDaNXjAgGg9zfCvksxSRnQx76gclCIb7kdAd1Pw= +go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc= golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU= golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo= gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= -gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= -gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/internal/reqresp/reqresp.go new/regclient-0.11.1/internal/reqresp/reqresp.go --- old/regclient-0.11.0/internal/reqresp/reqresp.go 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/internal/reqresp/reqresp.go 2025-12-07 16:00:47.000000000 +0100 @@ -4,6 +4,7 @@ import ( "bytes" "encoding/base64" + "fmt" "io" "math/rand" "net/http" @@ -93,6 +94,7 @@ (reqMatch.Path != "" && reqMatch.Path != req.URL.Path) || !strMapMatch(reqMatch.Query, req.URL.Query()) || !strMapMatch(reqMatch.Headers, req.Header) || + (reqMatch.Headers != nil && reqMatch.Headers.Get("Content-Length") != "" && reqMatch.Headers.Get("Content-Length") != fmt.Sprintf("%d", req.ContentLength)) || (len(reqMatch.Body) > 0 && !bytes.Equal(reqMatch.Body, reqBody)) { // skip if any field does not match continue diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/regclient-0.11.0/release.md new/regclient-0.11.1/release.md --- old/regclient-0.11.0/release.md 2025-12-01 20:38:07.000000000 +0100 +++ new/regclient-0.11.1/release.md 2025-12-07 16:00:47.000000000 +0100 @@ -1,30 +1,19 @@ -# Release v0.11.0 +# Release v0.11.1 -Features: +Security: -- Build artifacts for riscv64. ([PR 1011][pr-1011]) -- Generate FreeBSD amd64 binaries. ([PR 1013][pr-1013]) -- Add support for cosign v3 bundles. ([PR 1018][pr-1018]) +- Go 1.25.5 fixes CVE-2025-61729 ([PR 1025][pr-1025]) +- Go 1.25.5 fixes CVE-2025-61727 ([PR 1025][pr-1025]) Fixes: -- Fix ECR Helper version pin. ([PR 1017][pr-1017]) -- Fix the cosign use-signing-config flag. ([PR 1019][pr-1019]) -- Improve reproducibility in Dockerfiles. ([PR 1020][pr-1020]) - -Other Changes: - -- Add a policy for LLM generated contributions. ([PR 1016][pr-1016]) +- Correct selection of previous tag for releases. ([PR 1023][pr-1023]) +- Make sure ContentLength is correctly set in the request. ([PR 1024][pr-1024]) Contributors: -- @ffgan - @sudo-bmitch -[pr-1011]: https://github.com/regclient/regclient/pull/1011 -[pr-1013]: https://github.com/regclient/regclient/pull/1013 -[pr-1016]: https://github.com/regclient/regclient/pull/1016 -[pr-1017]: https://github.com/regclient/regclient/pull/1017 -[pr-1018]: https://github.com/regclient/regclient/pull/1018 -[pr-1019]: https://github.com/regclient/regclient/pull/1019 -[pr-1020]: https://github.com/regclient/regclient/pull/1020 +[pr-1023]: https://github.com/regclient/regclient/pull/1023 +[pr-1024]: https://github.com/regclient/regclient/pull/1024 +[pr-1025]: https://github.com/regclient/regclient/pull/1025 ++++++ regclient.obsinfo ++++++ --- /var/tmp/diff_new_pack.LRuWfE/_old 2025-12-09 12:55:47.853672583 +0100 +++ /var/tmp/diff_new_pack.LRuWfE/_new 2025-12-09 12:55:47.869673257 +0100 @@ -1,5 +1,5 @@ name: regclient -version: 0.11.0 -mtime: 1764617887 -commit: 9a4fd6b957345e2f625f0c18dfbea4db59fc2b23 +version: 0.11.1 +mtime: 1765119647 +commit: bf3bcfc47173b49ee8000d1d3a1ac15036e83cf0 ++++++ vendor.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/github.com/spf13/cobra/.golangci.yml new/vendor/github.com/spf13/cobra/.golangci.yml --- old/vendor/github.com/spf13/cobra/.golangci.yml 2025-12-01 20:38:07.000000000 +0100 +++ new/vendor/github.com/spf13/cobra/.golangci.yml 2025-12-07 16:00:47.000000000 +0100 @@ -57,3 +57,10 @@ - common-false-positives - legacy - std-error-handling + settings: + govet: + # Disable buildtag check to allow dual build tag syntax (both //go:build and // +build). + # This is necessary for Go 1.15 compatibility since //go:build was introduced in Go 1.17. + # This can be removed once Cobra requires Go 1.17 or higher. + disable: + - buildtag diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/github.com/spf13/cobra/command.go new/vendor/github.com/spf13/cobra/command.go --- old/vendor/github.com/spf13/cobra/command.go 2025-12-01 20:38:07.000000000 +0100 +++ new/vendor/github.com/spf13/cobra/command.go 2025-12-07 16:00:47.000000000 +0100 @@ -557,7 +557,7 @@ } } -var minUsagePadding = 25 +const minUsagePadding = 25 // UsagePadding return padding for the usage. func (c *Command) UsagePadding() int { @@ -567,7 +567,7 @@ return c.parent.commandsMaxUseLen } -var minCommandPathPadding = 11 +const minCommandPathPadding = 11 // CommandPathPadding return padding for the command path. func (c *Command) CommandPathPadding() int { @@ -577,7 +577,7 @@ return c.parent.commandsMaxCommandPathLen } -var minNamePadding = 11 +const minNamePadding = 11 // NamePadding returns padding for the name. func (c *Command) NamePadding() int { @@ -1939,7 +1939,7 @@ fn func(io.Writer, interface{}) error } -var defaultUsageTemplate = `Usage:{{if .Runnable}} +const defaultUsageTemplate = `Usage:{{if .Runnable}} {{.UseLine}}{{end}}{{if .HasAvailableSubCommands}} {{.CommandPath}} [command]{{end}}{{if gt (len .Aliases) 0}} @@ -2039,7 +2039,7 @@ return nil } -var defaultHelpTemplate = `{{with (or .Long .Short)}}{{. | trimTrailingWhitespaces}} +const defaultHelpTemplate = `{{with (or .Long .Short)}}{{. | trimTrailingWhitespaces}} {{end}}{{if or .Runnable .HasSubCommands}}{{.UsageString}}{{end}}` @@ -2061,7 +2061,7 @@ return nil } -var defaultVersionTemplate = `{{with .DisplayName}}{{printf "%s " .}}{{end}}{{printf "version %s" .Version}} +const defaultVersionTemplate = `{{with .DisplayName}}{{printf "%s " .}}{{end}}{{printf "version %s" .Version}} ` // defaultVersionFunc is equivalent to executing defaultVersionTemplate. The two should be changed in sync. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/modules.txt new/vendor/modules.txt --- old/vendor/modules.txt 2025-12-01 20:38:07.000000000 +0100 +++ new/vendor/modules.txt 2025-12-07 16:00:47.000000000 +0100 @@ -43,7 +43,7 @@ # github.com/sirupsen/logrus v1.9.3 ## explicit; go 1.13 github.com/sirupsen/logrus -# github.com/spf13/cobra v1.10.1 +# github.com/spf13/cobra v1.10.2 ## explicit; go 1.15 github.com/spf13/cobra # github.com/spf13/pflag v1.0.10
