Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package melange for openSUSE:Factory checked 
in at 2026-01-30 18:26:52
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/melange (Old)
 and      /work/SRC/openSUSE:Factory/.melange.new.1995 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "melange"

Fri Jan 30 18:26:52 2026 rev:134 rq:1329947 version:0.40.2

Changes:
--------
--- /work/SRC/openSUSE:Factory/melange/melange.changes  2026-01-26 
11:07:34.923177800 +0100
+++ /work/SRC/openSUSE:Factory/.melange.new.1995/melange.changes        
2026-01-30 18:27:07.213725974 +0100
@@ -1,0 +2,20 @@
+Fri Jan 30 06:34:41 UTC 2026 - Johannes Kastl 
<[email protected]>
+
+- Update to version 0.40.2:
+  * chore: run make generate to update schema JSON and testdata
+    (#2314)
+
+-------------------------------------------------------------------
+Fri Jan 30 06:24:48 UTC 2026 - Johannes Kastl 
<[email protected]>
+
+- Update to version 0.40.1:
+  * fix: set num-queues to at least 1 (#2313)
+  * build(deps): bump github.com/docker/cli (#2312)
+  * pipelines/patch: reword info message
+  * pipelines/patch: report explicitly what patch file is being
+    applied
+  * build(deps): bump step-security/harden-runner in the actions
+    group (#2308)
+  * build(deps): bump the gomod group with 2 updates (#2309)
+
+-------------------------------------------------------------------

Old:
----
  melange-0.40.0.obscpio

New:
----
  melange-0.40.2.obscpio

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ melange.spec ++++++
--- /var/tmp/diff_new_pack.2rl22P/_old  2026-01-30 18:27:10.601868215 +0100
+++ /var/tmp/diff_new_pack.2rl22P/_new  2026-01-30 18:27:10.605868384 +0100
@@ -17,7 +17,7 @@
 
 
 Name:           melange
-Version:        0.40.0
+Version:        0.40.2
 Release:        0
 Summary:        Build APKs from source code
 License:        Apache-2.0

++++++ _service ++++++
--- /var/tmp/diff_new_pack.2rl22P/_old  2026-01-30 18:27:10.637869727 +0100
+++ /var/tmp/diff_new_pack.2rl22P/_new  2026-01-30 18:27:10.645870063 +0100
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/chainguard-dev/melange</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.40.0</param>
+    <param name="revision">v0.40.2</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.2rl22P/_old  2026-01-30 18:27:10.669871071 +0100
+++ /var/tmp/diff_new_pack.2rl22P/_new  2026-01-30 18:27:10.673871239 +0100
@@ -1,6 +1,6 @@
 <servicedata>
 <service name="tar_scm">
                 <param 
name="url">https://github.com/chainguard-dev/melange</param>
-              <param 
name="changesrevision">2dc47d0666a4a13854174f673303460e7aaf5139</param></service></servicedata>
+              <param 
name="changesrevision">cf4859ef43a5f281065186f3f1773a5e2cce0fd8</param></service></servicedata>
 (No newline at EOF)
 

++++++ melange-0.40.0.obscpio -> melange-0.40.2.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/melange-0.40.0/go.mod new/melange-0.40.2/go.mod
--- old/melange-0.40.0/go.mod   2026-01-23 16:30:52.000000000 +0100
+++ new/melange-0.40.2/go.mod   2026-01-28 23:16:57.000000000 +0100
@@ -3,12 +3,12 @@
 go 1.25.0
 
 require (
-       chainguard.dev/apko v1.0.4
+       chainguard.dev/apko v1.0.5
        github.com/chainguard-dev/clog v1.8.0
        github.com/chainguard-dev/go-pkgconfig 
v0.0.0-20240404163941-6351b37b2a10
-       github.com/chainguard-dev/yam v0.2.45
+       github.com/chainguard-dev/yam v0.2.46
        github.com/charmbracelet/log v0.4.2
-       github.com/docker/cli v29.1.5+incompatible
+       github.com/docker/cli v29.2.0+incompatible
        github.com/docker/docker v28.5.2+incompatible
        github.com/dprotaso/go-yit v0.0.0-20250513224043-18a80f8f6df4
        github.com/github/go-spdx/v2 v2.3.6
@@ -76,7 +76,7 @@
 require (
        chainguard.dev/go-grpc-kit v0.17.15 // indirect
        chainguard.dev/sdk v0.1.47 // indirect
-       cloud.google.com/go/auth v0.18.0 // indirect
+       cloud.google.com/go/auth v0.18.1 // indirect
        cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
        cloud.google.com/go/compute/metadata v0.9.0 // indirect
        filippo.io/edwards25519 v1.1.0 // indirect
@@ -119,7 +119,7 @@
        github.com/google/s2a-go v0.1.9 // indirect
        github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
        github.com/google/uuid v1.6.0 // indirect
-       github.com/googleapis/enterprise-certificate-proxy v0.3.9 // indirect
+       github.com/googleapis/enterprise-certificate-proxy v0.3.11 // indirect
        github.com/googleapis/gax-go/v2 v2.16.0 // indirect
        github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect
        github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
@@ -167,11 +167,11 @@
        go.opentelemetry.io/otel/trace v1.39.0 // indirect
        go.step.sm/crypto v0.75.0 // indirect
        golang.org/x/mod v0.31.0 // indirect
-       golang.org/x/net v0.48.0 // indirect
+       golang.org/x/net v0.49.0 // indirect
        golang.org/x/oauth2 v0.34.0 // indirect
-       google.golang.org/api v0.260.0 // indirect
+       google.golang.org/api v0.262.0 // indirect
        google.golang.org/genproto/googleapis/api 
v0.0.0-20251202230838-ff82c1b0f217 // indirect
-       google.golang.org/genproto/googleapis/rpc 
v0.0.0-20251222181119-0a764e51fe1b // indirect
+       google.golang.org/genproto/googleapis/rpc 
v0.0.0-20260120174246-409b4a993575 // indirect
        google.golang.org/grpc v1.78.0 // indirect
        google.golang.org/protobuf v1.36.11
        gopkg.in/warnings.v0 v0.1.2 // indirect
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/melange-0.40.0/go.sum new/melange-0.40.2/go.sum
--- old/melange-0.40.0/go.sum   2026-01-23 16:30:52.000000000 +0100
+++ new/melange-0.40.2/go.sum   2026-01-28 23:16:57.000000000 +0100
@@ -1,12 +1,12 @@
-chainguard.dev/apko v1.0.4 h1:yelNSoarpWWm2vWFKy9Ys7UK2OJp1U7gP8ZpxRUogZU=
-chainguard.dev/apko v1.0.4/go.mod 
h1:jW8B5bVi+WqTL5HS50mpe0KlOMB0SG7Xj4yjOM2ryWs=
+chainguard.dev/apko v1.0.5 h1:8FudG9/TKER72yb+g4RPrZx67hwjLMhfvED1AWUUods=
+chainguard.dev/apko v1.0.5/go.mod 
h1:NZypbx3cU7xLpojOpI41VF3OjTf8RyaPAiO7c3z7g6g=
 chainguard.dev/go-grpc-kit v0.17.15 
h1:y+FBjta2lsC0XxlkG+W5P1VxYl0zG74GRvoYN2o+p7s=
 chainguard.dev/go-grpc-kit v0.17.15/go.mod 
h1:1wAVAX2CCamtFlfMs9PFzfgQQxX1/TQyF6cbWApbJ2U=
 chainguard.dev/sdk v0.1.47 h1:BQEVQWj1ZnL9DNgHWcAVbj8BNNN/blAZHhbWGKSKzZI=
 chainguard.dev/sdk v0.1.47/go.mod 
h1:b4isqRFaCBaRuVcHUrFeaqvt3d8J9GNOMS0RAyoawXw=
 cloud.google.com/go v0.26.0/go.mod 
h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
-cloud.google.com/go/auth v0.18.0 
h1:wnqy5hrv7p3k7cShwAU/Br3nzod7fxoqG+k0VZ+/Pk0=
-cloud.google.com/go/auth v0.18.0/go.mod 
h1:wwkPM1AgE1f2u6dG443MiWoD8C3BtOywNsUMcUTVDRo=
+cloud.google.com/go/auth v0.18.1 
h1:IwTEx92GFUo2pJ6Qea0EU3zYvKnTAeRCODxfA/G5UWs=
+cloud.google.com/go/auth v0.18.1/go.mod 
h1:GfTYoS9G3CWpRA3Va9doKN9mjPGRS+v41jmZAhBzbrA=
 cloud.google.com/go/auth/oauth2adapt v0.2.8 
h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc=
 cloud.google.com/go/auth/oauth2adapt v0.2.8/go.mod 
h1:XQ9y31RkqZCcwJWNSx2Xvric3RrU88hAYYbjDWYDL+c=
 cloud.google.com/go/compute/metadata v0.9.0 
h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs=
@@ -44,8 +44,8 @@
 github.com/chainguard-dev/clog v1.8.0/go.mod 
h1:5MQOZi+Iu7fV7GcJG8ag8rCB5elEOpqRMKEASgnGVdo=
 github.com/chainguard-dev/go-pkgconfig v0.0.0-20240404163941-6351b37b2a10 
h1:XR2vgQC024I9/boh9r1ihVv8Z14+pbvWqXeYMCnZJpc=
 github.com/chainguard-dev/go-pkgconfig 
v0.0.0-20240404163941-6351b37b2a10/go.mod 
h1:1p6+MesLcjKeON5BRWa7I87mvAY0QmKjgginIM3w6BI=
-github.com/chainguard-dev/yam v0.2.45 
h1:A/izIRL1ytLO7LGRgR4KDl4yIyxF4i+JxlOu5jMTB6c=
-github.com/chainguard-dev/yam v0.2.45/go.mod 
h1:Dwk2i+W3mifDxxM5nILZrvUs9GYZsIjVjEONgKMtBrI=
+github.com/chainguard-dev/yam v0.2.46 
h1:DDgOPW9GUlmH634TaeCnEyyFk7IAQ2+p/RDU22DqeCo=
+github.com/chainguard-dev/yam v0.2.46/go.mod 
h1:Dwk2i+W3mifDxxM5nILZrvUs9GYZsIjVjEONgKMtBrI=
 github.com/charmbracelet/colorprofile v0.3.2 
h1:9J27WdztfJQVAQKX2WOlSSRB+5gaKqqITmrvb1uTIiI=
 github.com/charmbracelet/colorprofile v0.3.2/go.mod 
h1:mTD5XzNeWHj8oqHb+S1bssQb7vIHbepiebQ2kPKVKbI=
 github.com/charmbracelet/lipgloss v1.1.0 
h1:vYXsiLHVkK7fp74RkV7b2kq9+zDLoEU4MZoFqR/noCY=
@@ -91,8 +91,8 @@
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod 
h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/distribution/reference v0.6.0 
h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk=
 github.com/distribution/reference v0.6.0/go.mod 
h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
-github.com/docker/cli v29.1.5+incompatible 
h1:GckbANUt3j+lsnQ6eCcQd70mNSOismSHWt8vk2AX8ao=
-github.com/docker/cli v29.1.5+incompatible/go.mod 
h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
+github.com/docker/cli v29.2.0+incompatible 
h1:9oBd9+YM7rxjZLfyMGxjraKBKE4/nVyvVfN4qNl9XRM=
+github.com/docker/cli v29.2.0+incompatible/go.mod 
h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/distribution v2.8.3+incompatible 
h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
 github.com/docker/distribution v2.8.3+incompatible/go.mod 
h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
 github.com/docker/docker v28.5.2+incompatible 
h1:DBX0Y0zAjZbSrm1uzOkdr1onVghKaftjlSWt4AFexzM=
@@ -188,8 +188,8 @@
 github.com/google/uuid v1.1.2/go.mod 
h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod 
h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/googleapis/enterprise-certificate-proxy v0.3.9 
h1:TOpi/QG8iDcZlkQlGlFUti/ZtyLkliXvHDcyUIMuFrU=
-github.com/googleapis/enterprise-certificate-proxy v0.3.9/go.mod 
h1:MkHOF77EYAE7qfSuSS9PU6g4Nt4e11cnsDUowfwewLA=
+github.com/googleapis/enterprise-certificate-proxy v0.3.11 
h1:vAe81Msw+8tKUxi2Dqh/NZMz7475yUvmRIkXr4oN2ao=
+github.com/googleapis/enterprise-certificate-proxy v0.3.11/go.mod 
h1:RFV7MUdlb7AgEq2v7FmMCfeSMCllAzWxFgRdusoGks8=
 github.com/googleapis/gax-go/v2 v2.16.0 
h1:iHbQmKLLZrexmb0OSsNGTeSTS0HO4YvFOG8g5E4Zd0Y=
 github.com/googleapis/gax-go/v2 v2.16.0/go.mod 
h1:o1vfQjjNZn4+dPnRdl/4ZD7S9414Y4xA+a/6Icj6l14=
 github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.1.0 
h1:QGLs/O40yoNK9vmy4rhUGBVyMf1lISBGtXRpsu/Qu/o=
@@ -419,8 +419,8 @@
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod 
h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
-golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
-golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
+golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
+golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod 
h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw=
 golang.org/x/oauth2 v0.34.0/go.mod 
h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
@@ -482,8 +482,8 @@
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod 
h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
 gonum.org/v1/gonum v0.16.0/go.mod 
h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
-google.golang.org/api v0.260.0 h1:XbNi5E6bOVEj/uLXQRlt6TKuEzMD7zvW/6tNwltE4P4=
-google.golang.org/api v0.260.0/go.mod 
h1:Shj1j0Phr/9sloYrKomICzdYgsSDImpTxME8rGLaZ/o=
+google.golang.org/api v0.262.0 h1:4B+3u8He2GwyN8St3Jhnd3XRHlIvc//sBmgHSp78oNY=
+google.golang.org/api v0.262.0/go.mod 
h1:jNwmH8BgUBJ/VrUG6/lIl9YiildyLd09r9ZLHiQ6cGI=
 google.golang.org/appengine v1.1.0/go.mod 
h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.4.0/go.mod 
h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod 
h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
@@ -491,8 +491,8 @@
 google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod 
h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
 google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 
h1:fCvbg86sFXwdrl5LgVcTEvNC+2txB5mgROGmRL5mrls=
 google.golang.org/genproto/googleapis/api 
v0.0.0-20251202230838-ff82c1b0f217/go.mod 
h1:+rXWjjaukWZun3mLfjmVnQi18E1AsFbDN9QdJ5YXLto=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b 
h1:Mv8VFug0MP9e5vUxfBcE3vUkV6CImK3cMNMIDFjmzxU=
-google.golang.org/genproto/googleapis/rpc 
v0.0.0-20251222181119-0a764e51fe1b/go.mod 
h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260120174246-409b4a993575 
h1:vzOYHDZEHIsPYYnaSYo60AqHkJronSu0rzTz/s4quL0=
+google.golang.org/genproto/googleapis/rpc 
v0.0.0-20260120174246-409b4a993575/go.mod 
h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ=
 google.golang.org/grpc v1.19.0/go.mod 
h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
 google.golang.org/grpc v1.23.0/go.mod 
h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
 google.golang.org/grpc v1.25.1/go.mod 
h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/melange-0.40.0/pkg/build/pipelines/patch.yaml 
new/melange-0.40.2/pkg/build/pipelines/patch.yaml
--- old/melange-0.40.0/pkg/build/pipelines/patch.yaml   2026-01-23 
16:30:52.000000000 +0100
+++ new/melange-0.40.2/pkg/build/pipelines/patch.yaml   2026-01-28 
23:16:57.000000000 +0100
@@ -38,5 +38,6 @@
       fi
 
       grep -v -E '^(#|$)' $series | (while read patchfile; do
+        echo "INFO: applying patch file $patchfile"
         patch '-p${{inputs.strip-components}}' --fuzz=${{inputs.fuzz}} 
--verbose < $patchfile
       done)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/melange-0.40.0/pkg/config/schema.json 
new/melange-0.40.2/pkg/config/schema.json
--- old/melange-0.40.0/pkg/config/schema.json   2026-01-23 16:30:52.000000000 
+0100
+++ new/melange-0.40.2/pkg/config/schema.json   2026-01-28 23:16:57.000000000 
+0100
@@ -3,6 +3,18 @@
   "$id": "https://chainguard.dev/melange/pkg/config/configuration";,
   "$ref": "#/$defs/Configuration",
   "$defs": {
+    "AdditionalCertificateEntry": {
+      "properties": {
+        "name": {
+          "type": "string"
+        },
+        "content": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": false,
+      "type": "object"
+    },
     "BaseImageDescriptor": {
       "properties": {
         "image": {
@@ -396,6 +408,18 @@
       "additionalProperties": false,
       "type": "object"
     },
+    "ImageCertificates": {
+      "properties": {
+        "additional": {
+          "items": {
+            "$ref": "#/$defs/AdditionalCertificateEntry"
+          },
+          "type": "array"
+        }
+      },
+      "additionalProperties": false,
+      "type": "object"
+    },
     "ImageConfiguration": {
       "properties": {
         "contents": {
@@ -454,6 +478,9 @@
         },
         "layering": {
           "$ref": "#/$defs/Layering"
+        },
+        "certificates": {
+          "$ref": "#/$defs/ImageCertificates"
         }
       },
       "additionalProperties": false,
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/melange-0.40.0/pkg/container/qemu_runner.go 
new/melange-0.40.2/pkg/container/qemu_runner.go
--- old/melange-0.40.0/pkg/container/qemu_runner.go     2026-01-23 
16:30:52.000000000 +0100
+++ new/melange-0.40.2/pkg/container/qemu_runner.go     2026-01-28 
23:16:57.000000000 +0100
@@ -859,7 +859,7 @@
 
        // append raw disk, init will take care of formatting it if present.
        baseargs = append(baseargs, "-object", "iothread,id=io1")
-       baseargs = append(baseargs, "-device", 
"virtio-blk-pci,drive=disk0,iothread=io1,packed=on,num-queues="+fmt.Sprintf("%d",
 nproc/2))
+       baseargs = append(baseargs, "-device", 
"virtio-blk-pci,drive=disk0,iothread=io1,packed=on,num-queues="+fmt.Sprintf("%d",
 max(1, nproc/2)))
        if runtime.GOOS == "linux" {
                baseargs = append(baseargs, "-drive", 
"if=none,id=disk0,cache=unsafe,cache.direct=on,format=raw,aio=native,file="+diskFile)
        }
@@ -869,7 +869,7 @@
 
        // append the rootfs tar.gz, init will take care of populating the disk 
with it
        baseargs = append(baseargs, "-object", "iothread,id=io2")
-       baseargs = append(baseargs, "-device", 
"virtio-blk-pci,drive=image.tar,iothread=io2,packed=on,num-queues="+fmt.Sprintf("%d",
 nproc/2))
+       baseargs = append(baseargs, "-device", 
"virtio-blk-pci,drive=image.tar,iothread=io2,packed=on,num-queues="+fmt.Sprintf("%d",
 max(1, nproc/2)))
        baseargs = append(baseargs, "-blockdev", 
"driver=raw,node-name=image.tar,file.driver=file,file.filename="+cfg.ImgRef)
 
        // qemu-system-x86_64 or qemu-system-aarch64...
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/go-fips-bin-0.0.1-r0.apk 
and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/go-fips-bin-0.0.1-r0.apk 
differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/ld-so-conf-d-test-1-r1.apk 
and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/ld-so-conf-d-test-1-r1.apk 
differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-bzimage-6.17.7-r0.apk
 and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-bzimage-6.17.7-r0.apk
 differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-gzipped-vmlinux-6.17.7-r0.apk
 and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-gzipped-vmlinux-6.17.7-r0.apk
 differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-modules-6.17.7-r0.apk
 and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-modules-6.17.7-r0.apk
 differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-modules-gzip-6.17.7-r0.apk
 and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-modules-gzip-6.17.7-r0.apk
 differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-modules-xz-6.17.7-r0.apk
 and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-modules-xz-6.17.7-r0.apk
 differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-modules-zstd-6.17.7-r0.apk
 and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-modules-zstd-6.17.7-r0.apk
 differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-uki-6.17.7-r0.apk 
and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-uki-6.17.7-r0.apk 
differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-vmlinux-6.17.7-r0.apk
 and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-vmlinux-6.17.7-r0.apk
 differ
Binary files 
old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/shbang-test-1-r1.apk and 
new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/shbang-test-1-r1.apk differ

++++++ melange.obsinfo ++++++
--- /var/tmp/diff_new_pack.2rl22P/_old  2026-01-30 18:27:11.433903146 +0100
+++ /var/tmp/diff_new_pack.2rl22P/_new  2026-01-30 18:27:11.441903482 +0100
@@ -1,5 +1,5 @@
 name: melange
-version: 0.40.0
-mtime: 1769182252
-commit: 2dc47d0666a4a13854174f673303460e7aaf5139
+version: 0.40.2
+mtime: 1769638617
+commit: cf4859ef43a5f281065186f3f1773a5e2cce0fd8
 

++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/melange/vendor.tar.gz 
/work/SRC/openSUSE:Factory/.melange.new.1995/vendor.tar.gz differ: char 133, 
line 3

Reply via email to