Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package melange for openSUSE:Factory checked in at 2026-01-30 18:26:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/melange (Old) and /work/SRC/openSUSE:Factory/.melange.new.1995 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "melange" Fri Jan 30 18:26:52 2026 rev:134 rq:1329947 version:0.40.2 Changes: -------- --- /work/SRC/openSUSE:Factory/melange/melange.changes 2026-01-26 11:07:34.923177800 +0100 +++ /work/SRC/openSUSE:Factory/.melange.new.1995/melange.changes 2026-01-30 18:27:07.213725974 +0100 @@ -1,0 +2,20 @@ +Fri Jan 30 06:34:41 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.40.2: + * chore: run make generate to update schema JSON and testdata + (#2314) + +------------------------------------------------------------------- +Fri Jan 30 06:24:48 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.40.1: + * fix: set num-queues to at least 1 (#2313) + * build(deps): bump github.com/docker/cli (#2312) + * pipelines/patch: reword info message + * pipelines/patch: report explicitly what patch file is being + applied + * build(deps): bump step-security/harden-runner in the actions + group (#2308) + * build(deps): bump the gomod group with 2 updates (#2309) + +------------------------------------------------------------------- Old: ---- melange-0.40.0.obscpio New: ---- melange-0.40.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ melange.spec ++++++ --- /var/tmp/diff_new_pack.2rl22P/_old 2026-01-30 18:27:10.601868215 +0100 +++ /var/tmp/diff_new_pack.2rl22P/_new 2026-01-30 18:27:10.605868384 +0100 @@ -17,7 +17,7 @@ Name: melange -Version: 0.40.0 +Version: 0.40.2 Release: 0 Summary: Build APKs from source code License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.2rl22P/_old 2026-01-30 18:27:10.637869727 +0100 +++ /var/tmp/diff_new_pack.2rl22P/_new 2026-01-30 18:27:10.645870063 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/chainguard-dev/melange</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.40.0</param> + <param name="revision">v0.40.2</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.2rl22P/_old 2026-01-30 18:27:10.669871071 +0100 +++ /var/tmp/diff_new_pack.2rl22P/_new 2026-01-30 18:27:10.673871239 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/chainguard-dev/melange</param> - <param name="changesrevision">2dc47d0666a4a13854174f673303460e7aaf5139</param></service></servicedata> + <param name="changesrevision">cf4859ef43a5f281065186f3f1773a5e2cce0fd8</param></service></servicedata> (No newline at EOF) ++++++ melange-0.40.0.obscpio -> melange-0.40.2.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.40.0/go.mod new/melange-0.40.2/go.mod --- old/melange-0.40.0/go.mod 2026-01-23 16:30:52.000000000 +0100 +++ new/melange-0.40.2/go.mod 2026-01-28 23:16:57.000000000 +0100 @@ -3,12 +3,12 @@ go 1.25.0 require ( - chainguard.dev/apko v1.0.4 + chainguard.dev/apko v1.0.5 github.com/chainguard-dev/clog v1.8.0 github.com/chainguard-dev/go-pkgconfig v0.0.0-20240404163941-6351b37b2a10 - github.com/chainguard-dev/yam v0.2.45 + github.com/chainguard-dev/yam v0.2.46 github.com/charmbracelet/log v0.4.2 - github.com/docker/cli v29.1.5+incompatible + github.com/docker/cli v29.2.0+incompatible github.com/docker/docker v28.5.2+incompatible github.com/dprotaso/go-yit v0.0.0-20250513224043-18a80f8f6df4 github.com/github/go-spdx/v2 v2.3.6 @@ -76,7 +76,7 @@ require ( chainguard.dev/go-grpc-kit v0.17.15 // indirect chainguard.dev/sdk v0.1.47 // indirect - cloud.google.com/go/auth v0.18.0 // indirect + cloud.google.com/go/auth v0.18.1 // indirect cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect cloud.google.com/go/compute/metadata v0.9.0 // indirect filippo.io/edwards25519 v1.1.0 // indirect @@ -119,7 +119,7 @@ github.com/google/s2a-go v0.1.9 // indirect github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect github.com/google/uuid v1.6.0 // indirect - github.com/googleapis/enterprise-certificate-proxy v0.3.9 // indirect + github.com/googleapis/enterprise-certificate-proxy v0.3.11 // indirect github.com/googleapis/gax-go/v2 v2.16.0 // indirect github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect @@ -167,11 +167,11 @@ go.opentelemetry.io/otel/trace v1.39.0 // indirect go.step.sm/crypto v0.75.0 // indirect golang.org/x/mod v0.31.0 // indirect - golang.org/x/net v0.48.0 // indirect + golang.org/x/net v0.49.0 // indirect golang.org/x/oauth2 v0.34.0 // indirect - google.golang.org/api v0.260.0 // indirect + google.golang.org/api v0.262.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20260120174246-409b4a993575 // indirect google.golang.org/grpc v1.78.0 // indirect google.golang.org/protobuf v1.36.11 gopkg.in/warnings.v0 v0.1.2 // indirect diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.40.0/go.sum new/melange-0.40.2/go.sum --- old/melange-0.40.0/go.sum 2026-01-23 16:30:52.000000000 +0100 +++ new/melange-0.40.2/go.sum 2026-01-28 23:16:57.000000000 +0100 @@ -1,12 +1,12 @@ -chainguard.dev/apko v1.0.4 h1:yelNSoarpWWm2vWFKy9Ys7UK2OJp1U7gP8ZpxRUogZU= -chainguard.dev/apko v1.0.4/go.mod h1:jW8B5bVi+WqTL5HS50mpe0KlOMB0SG7Xj4yjOM2ryWs= +chainguard.dev/apko v1.0.5 h1:8FudG9/TKER72yb+g4RPrZx67hwjLMhfvED1AWUUods= +chainguard.dev/apko v1.0.5/go.mod h1:NZypbx3cU7xLpojOpI41VF3OjTf8RyaPAiO7c3z7g6g= chainguard.dev/go-grpc-kit v0.17.15 h1:y+FBjta2lsC0XxlkG+W5P1VxYl0zG74GRvoYN2o+p7s= chainguard.dev/go-grpc-kit v0.17.15/go.mod h1:1wAVAX2CCamtFlfMs9PFzfgQQxX1/TQyF6cbWApbJ2U= chainguard.dev/sdk v0.1.47 h1:BQEVQWj1ZnL9DNgHWcAVbj8BNNN/blAZHhbWGKSKzZI= chainguard.dev/sdk v0.1.47/go.mod h1:b4isqRFaCBaRuVcHUrFeaqvt3d8J9GNOMS0RAyoawXw= cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= -cloud.google.com/go/auth v0.18.0 h1:wnqy5hrv7p3k7cShwAU/Br3nzod7fxoqG+k0VZ+/Pk0= -cloud.google.com/go/auth v0.18.0/go.mod h1:wwkPM1AgE1f2u6dG443MiWoD8C3BtOywNsUMcUTVDRo= +cloud.google.com/go/auth v0.18.1 h1:IwTEx92GFUo2pJ6Qea0EU3zYvKnTAeRCODxfA/G5UWs= +cloud.google.com/go/auth v0.18.1/go.mod h1:GfTYoS9G3CWpRA3Va9doKN9mjPGRS+v41jmZAhBzbrA= cloud.google.com/go/auth/oauth2adapt v0.2.8 h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc= cloud.google.com/go/auth/oauth2adapt v0.2.8/go.mod h1:XQ9y31RkqZCcwJWNSx2Xvric3RrU88hAYYbjDWYDL+c= cloud.google.com/go/compute/metadata v0.9.0 h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs= @@ -44,8 +44,8 @@ github.com/chainguard-dev/clog v1.8.0/go.mod h1:5MQOZi+Iu7fV7GcJG8ag8rCB5elEOpqRMKEASgnGVdo= github.com/chainguard-dev/go-pkgconfig v0.0.0-20240404163941-6351b37b2a10 h1:XR2vgQC024I9/boh9r1ihVv8Z14+pbvWqXeYMCnZJpc= github.com/chainguard-dev/go-pkgconfig v0.0.0-20240404163941-6351b37b2a10/go.mod h1:1p6+MesLcjKeON5BRWa7I87mvAY0QmKjgginIM3w6BI= -github.com/chainguard-dev/yam v0.2.45 h1:A/izIRL1ytLO7LGRgR4KDl4yIyxF4i+JxlOu5jMTB6c= -github.com/chainguard-dev/yam v0.2.45/go.mod h1:Dwk2i+W3mifDxxM5nILZrvUs9GYZsIjVjEONgKMtBrI= +github.com/chainguard-dev/yam v0.2.46 h1:DDgOPW9GUlmH634TaeCnEyyFk7IAQ2+p/RDU22DqeCo= +github.com/chainguard-dev/yam v0.2.46/go.mod h1:Dwk2i+W3mifDxxM5nILZrvUs9GYZsIjVjEONgKMtBrI= github.com/charmbracelet/colorprofile v0.3.2 h1:9J27WdztfJQVAQKX2WOlSSRB+5gaKqqITmrvb1uTIiI= github.com/charmbracelet/colorprofile v0.3.2/go.mod h1:mTD5XzNeWHj8oqHb+S1bssQb7vIHbepiebQ2kPKVKbI= github.com/charmbracelet/lipgloss v1.1.0 h1:vYXsiLHVkK7fp74RkV7b2kq9+zDLoEU4MZoFqR/noCY= @@ -91,8 +91,8 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk= github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= -github.com/docker/cli v29.1.5+incompatible h1:GckbANUt3j+lsnQ6eCcQd70mNSOismSHWt8vk2AX8ao= -github.com/docker/cli v29.1.5+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8= +github.com/docker/cli v29.2.0+incompatible h1:9oBd9+YM7rxjZLfyMGxjraKBKE4/nVyvVfN4qNl9XRM= +github.com/docker/cli v29.2.0+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8= github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk= github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w= github.com/docker/docker v28.5.2+incompatible h1:DBX0Y0zAjZbSrm1uzOkdr1onVghKaftjlSWt4AFexzM= @@ -188,8 +188,8 @@ github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= -github.com/googleapis/enterprise-certificate-proxy v0.3.9 h1:TOpi/QG8iDcZlkQlGlFUti/ZtyLkliXvHDcyUIMuFrU= -github.com/googleapis/enterprise-certificate-proxy v0.3.9/go.mod h1:MkHOF77EYAE7qfSuSS9PU6g4Nt4e11cnsDUowfwewLA= +github.com/googleapis/enterprise-certificate-proxy v0.3.11 h1:vAe81Msw+8tKUxi2Dqh/NZMz7475yUvmRIkXr4oN2ao= +github.com/googleapis/enterprise-certificate-proxy v0.3.11/go.mod h1:RFV7MUdlb7AgEq2v7FmMCfeSMCllAzWxFgRdusoGks8= github.com/googleapis/gax-go/v2 v2.16.0 h1:iHbQmKLLZrexmb0OSsNGTeSTS0HO4YvFOG8g5E4Zd0Y= github.com/googleapis/gax-go/v2 v2.16.0/go.mod h1:o1vfQjjNZn4+dPnRdl/4ZD7S9414Y4xA+a/6Icj6l14= github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.1.0 h1:QGLs/O40yoNK9vmy4rhUGBVyMf1lISBGtXRpsu/Qu/o= @@ -419,8 +419,8 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg= -golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU= -golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY= +golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o= +golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw= golang.org/x/oauth2 v0.34.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA= @@ -482,8 +482,8 @@ golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk= gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E= -google.golang.org/api v0.260.0 h1:XbNi5E6bOVEj/uLXQRlt6TKuEzMD7zvW/6tNwltE4P4= -google.golang.org/api v0.260.0/go.mod h1:Shj1j0Phr/9sloYrKomICzdYgsSDImpTxME8rGLaZ/o= +google.golang.org/api v0.262.0 h1:4B+3u8He2GwyN8St3Jhnd3XRHlIvc//sBmgHSp78oNY= +google.golang.org/api v0.262.0/go.mod h1:jNwmH8BgUBJ/VrUG6/lIl9YiildyLd09r9ZLHiQ6cGI= google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc= @@ -491,8 +491,8 @@ google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo= google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 h1:fCvbg86sFXwdrl5LgVcTEvNC+2txB5mgROGmRL5mrls= google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:+rXWjjaukWZun3mLfjmVnQi18E1AsFbDN9QdJ5YXLto= -google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b h1:Mv8VFug0MP9e5vUxfBcE3vUkV6CImK3cMNMIDFjmzxU= -google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ= +google.golang.org/genproto/googleapis/rpc v0.0.0-20260120174246-409b4a993575 h1:vzOYHDZEHIsPYYnaSYo60AqHkJronSu0rzTz/s4quL0= +google.golang.org/genproto/googleapis/rpc v0.0.0-20260120174246-409b4a993575/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ= google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c= google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg= google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.40.0/pkg/build/pipelines/patch.yaml new/melange-0.40.2/pkg/build/pipelines/patch.yaml --- old/melange-0.40.0/pkg/build/pipelines/patch.yaml 2026-01-23 16:30:52.000000000 +0100 +++ new/melange-0.40.2/pkg/build/pipelines/patch.yaml 2026-01-28 23:16:57.000000000 +0100 @@ -38,5 +38,6 @@ fi grep -v -E '^(#|$)' $series | (while read patchfile; do + echo "INFO: applying patch file $patchfile" patch '-p${{inputs.strip-components}}' --fuzz=${{inputs.fuzz}} --verbose < $patchfile done) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.40.0/pkg/config/schema.json new/melange-0.40.2/pkg/config/schema.json --- old/melange-0.40.0/pkg/config/schema.json 2026-01-23 16:30:52.000000000 +0100 +++ new/melange-0.40.2/pkg/config/schema.json 2026-01-28 23:16:57.000000000 +0100 @@ -3,6 +3,18 @@ "$id": "https://chainguard.dev/melange/pkg/config/configuration", "$ref": "#/$defs/Configuration", "$defs": { + "AdditionalCertificateEntry": { + "properties": { + "name": { + "type": "string" + }, + "content": { + "type": "string" + } + }, + "additionalProperties": false, + "type": "object" + }, "BaseImageDescriptor": { "properties": { "image": { @@ -396,6 +408,18 @@ "additionalProperties": false, "type": "object" }, + "ImageCertificates": { + "properties": { + "additional": { + "items": { + "$ref": "#/$defs/AdditionalCertificateEntry" + }, + "type": "array" + } + }, + "additionalProperties": false, + "type": "object" + }, "ImageConfiguration": { "properties": { "contents": { @@ -454,6 +478,9 @@ }, "layering": { "$ref": "#/$defs/Layering" + }, + "certificates": { + "$ref": "#/$defs/ImageCertificates" } }, "additionalProperties": false, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.40.0/pkg/container/qemu_runner.go new/melange-0.40.2/pkg/container/qemu_runner.go --- old/melange-0.40.0/pkg/container/qemu_runner.go 2026-01-23 16:30:52.000000000 +0100 +++ new/melange-0.40.2/pkg/container/qemu_runner.go 2026-01-28 23:16:57.000000000 +0100 @@ -859,7 +859,7 @@ // append raw disk, init will take care of formatting it if present. baseargs = append(baseargs, "-object", "iothread,id=io1") - baseargs = append(baseargs, "-device", "virtio-blk-pci,drive=disk0,iothread=io1,packed=on,num-queues="+fmt.Sprintf("%d", nproc/2)) + baseargs = append(baseargs, "-device", "virtio-blk-pci,drive=disk0,iothread=io1,packed=on,num-queues="+fmt.Sprintf("%d", max(1, nproc/2))) if runtime.GOOS == "linux" { baseargs = append(baseargs, "-drive", "if=none,id=disk0,cache=unsafe,cache.direct=on,format=raw,aio=native,file="+diskFile) } @@ -869,7 +869,7 @@ // append the rootfs tar.gz, init will take care of populating the disk with it baseargs = append(baseargs, "-object", "iothread,id=io2") - baseargs = append(baseargs, "-device", "virtio-blk-pci,drive=image.tar,iothread=io2,packed=on,num-queues="+fmt.Sprintf("%d", nproc/2)) + baseargs = append(baseargs, "-device", "virtio-blk-pci,drive=image.tar,iothread=io2,packed=on,num-queues="+fmt.Sprintf("%d", max(1, nproc/2))) baseargs = append(baseargs, "-blockdev", "driver=raw,node-name=image.tar,file.driver=file,file.filename="+cfg.ImgRef) // qemu-system-x86_64 or qemu-system-aarch64... Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/go-fips-bin-0.0.1-r0.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/go-fips-bin-0.0.1-r0.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/ld-so-conf-d-test-1-r1.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/ld-so-conf-d-test-1-r1.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-bzimage-6.17.7-r0.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-bzimage-6.17.7-r0.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-gzipped-vmlinux-6.17.7-r0.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-gzipped-vmlinux-6.17.7-r0.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-modules-6.17.7-r0.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-modules-6.17.7-r0.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-modules-gzip-6.17.7-r0.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-modules-gzip-6.17.7-r0.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-modules-xz-6.17.7-r0.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-modules-xz-6.17.7-r0.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-modules-zstd-6.17.7-r0.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-modules-zstd-6.17.7-r0.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-uki-6.17.7-r0.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-uki-6.17.7-r0.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/linux-vmlinux-6.17.7-r0.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/linux-vmlinux-6.17.7-r0.apk differ Binary files old/melange-0.40.0/pkg/sca/testdata/generated/x86_64/shbang-test-1-r1.apk and new/melange-0.40.2/pkg/sca/testdata/generated/x86_64/shbang-test-1-r1.apk differ ++++++ melange.obsinfo ++++++ --- /var/tmp/diff_new_pack.2rl22P/_old 2026-01-30 18:27:11.433903146 +0100 +++ /var/tmp/diff_new_pack.2rl22P/_new 2026-01-30 18:27:11.441903482 +0100 @@ -1,5 +1,5 @@ name: melange -version: 0.40.0 -mtime: 1769182252 -commit: 2dc47d0666a4a13854174f673303460e7aaf5139 +version: 0.40.2 +mtime: 1769638617 +commit: cf4859ef43a5f281065186f3f1773a5e2cce0fd8 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/melange/vendor.tar.gz /work/SRC/openSUSE:Factory/.melange.new.1995/vendor.tar.gz differ: char 133, line 3
