Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package obs-service-source_validator for 
openSUSE:Factory checked in at 2026-01-27 18:32:41
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/obs-service-source_validator (Old)
 and      /work/SRC/openSUSE:Factory/.obs-service-source_validator.new.1928 
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "obs-service-source_validator"

Tue Jan 27 18:32:41 2026 rev:89 rq:1329518 version:0.42+6

Changes:
--------
--- 
/work/SRC/openSUSE:Factory/obs-service-source_validator/obs-service-source_validator.changes
        2025-12-09 12:56:58.296643584 +0100
+++ 
/work/SRC/openSUSE:Factory/.obs-service-source_validator.new.1928/obs-service-source_validator.changes
      2026-01-27 18:32:43.181401893 +0100
@@ -1,0 +2,11 @@
+Tue Jan 27 16:20:32 CET 2026 - Ruediger Oertel <[email protected]>
+
+- add recommends for minisign in specfile
+
+-------------------------------------------------------------------
+Tue Jan 27 15:20:04 UTC 2026 - Ruediger Oertel <[email protected]>
+
+- Update to version 0.42+6:
+  * 25-keyring-validate: add minisign support
+
+-------------------------------------------------------------------

Old:
----
  obs-service-source_validator-0.42+4.tar.xz

New:
----
  obs-service-source_validator-0.42+6.tar.xz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ obs-service-source_validator.spec ++++++
--- /var/tmp/diff_new_pack.kKeH0Y/_old  2026-01-27 18:32:44.153442200 +0100
+++ /var/tmp/diff_new_pack.kKeH0Y/_new  2026-01-27 18:32:44.153442200 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package obs-service-source_validator
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2026 SUSE LLC
 # Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
@@ -24,7 +24,7 @@
 %endif
 
 Name:           obs-service-source_validator
-Version:        0.42+4
+Version:        0.42+6
 Release:        0
 Summary:        An OBS source service: running all the osc source-validator 
checks
 License:        GPL-2.0-or-later
@@ -53,6 +53,7 @@
 # Fedora
 Requires:       gnupg2
 %endif
+Recommends:     minisign
 
 %description
 This is a source service for openSUSE Build Service.

++++++ PKGBUILD ++++++
--- /var/tmp/diff_new_pack.kKeH0Y/_old  2026-01-27 18:32:44.193443858 +0100
+++ /var/tmp/diff_new_pack.kKeH0Y/_new  2026-01-27 18:32:44.197444024 +0100
@@ -1,6 +1,6 @@
 pkgname=obs-service-source_validator
-pkgver=0.42+4
-pkgrel=0
+pkgver=0.42+6
+pkgrel=78f7818cb454e90eb5267787d0eac2ed
 pkgdesc='An OBS source service: running all the osc source-validator checks'
 arch=('any')
 url='https://github.com/openSUSE/obs-service-source_validator'

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.kKeH0Y/_old  2026-01-27 18:32:44.237445683 +0100
+++ /var/tmp/diff_new_pack.kKeH0Y/_new  2026-01-27 18:32:44.245446015 +0100
@@ -3,6 +3,6 @@
             <param 
name="url">git://github.com/openSUSE/obs-service-source_validator.git</param>
           <param 
name="changesrevision">c68d7a28c4ecd88b179359b030098503e75adc0b</param></service><service
 name="tar_scm">
                 <param 
name="url">https://github.com/openSUSE/obs-service-source_validator.git</param>
-              <param 
name="changesrevision">3be834b0a3ef0b947e93d40646a284e3acfda3c5</param></service></servicedata>
+              <param 
name="changesrevision">90e729c1f733d8a5dc54965efc806449781582c0</param></service></servicedata>
 (No newline at EOF)
 

++++++ debian.dsc ++++++
--- /var/tmp/diff_new_pack.kKeH0Y/_old  2026-01-27 18:32:44.281447507 +0100
+++ /var/tmp/diff_new_pack.kKeH0Y/_new  2026-01-27 18:32:44.285447673 +0100
@@ -1,6 +1,6 @@
 Format: 1.0
 Source: obs-service-source-validator
-Version: 0.42+4-0
+Version: 0.42+6-0
 Binary: obs-service-source-validator
 Maintainer: Hib Eris <[email protected]>
 Architecture: all

++++++ obs-service-source_validator-0.42+4.tar.xz -> 
obs-service-source_validator-0.42+6.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/obs-service-source_validator-0.42+4/25-keyring-validate 
new/obs-service-source_validator-0.42+6/25-keyring-validate
--- old/obs-service-source_validator-0.42+4/25-keyring-validate 2025-12-09 
10:31:10.000000000 +0100
+++ new/obs-service-source_validator-0.42+6/25-keyring-validate 2026-01-27 
16:19:15.000000000 +0100
@@ -19,12 +19,28 @@
     RETURN=1
 elif test ${#keyrings[@]} -lt 1; then
     # check for missing .keyring files
-    for i in "$DIR_TO_CHECK"/*.sig "$DIR_TO_CHECK"/*.sign 
"$DIR_TO_CHECK"/*.asc; do
+    for i in "$DIR_TO_CHECK"/*.sig "$DIR_TO_CHECK"/*.sign 
"$DIR_TO_CHECK"/*.asc "$DIR_TO_CHECK"/*.minisig; do
        test -f "$i" || continue
        if test ! -f "${keyrings[0]}"; then
            echo "Warning: Need a $(basename -- "$DIR_TO_CHECK").keyring file 
for validating '$(basename -- $i)'"
        fi
     done
+elif test -f "$DIR_TO_CHECK"/*.minisig; then
+    # verify minisign signatures
+    MINISIGN="minisign"
+    if ! $MINISIGN -v &> /dev/null; then
+        echo "ERROR: $MINISIGN command not available"
+        RETURN=2
+    else 
+        for i in "$DIR_TO_CHECK"/*.minisig; do
+            test -f "$i" || continue
+            validatefn=${i%.minisig}
+            if ! $MINISIGN -V -q -p "${keyrings[0]}" -x "$i" -m "$validatefn"; 
then
+                echo "ERROR: signature $i does not validate"
+                RETURN=2
+            fi
+        done
+    fi
 else
     # verify GPG signatures
     GPGTMP=$(mktemp -d)

Reply via email to