Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package melange for openSUSE:Factory checked in at 2026-03-30 18:32:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/melange (Old) and /work/SRC/openSUSE:Factory/.melange.new.1999 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "melange" Mon Mar 30 18:32:14 2026 rev:149 rq:1343566 version:0.47.0 Changes: -------- --- /work/SRC/openSUSE:Factory/melange/melange.changes 2026-03-27 06:44:36.393841859 +0100 +++ /work/SRC/openSUSE:Factory/.melange.new.1999/melange.changes 2026-03-30 18:35:50.114436402 +0200 @@ -1,0 +2,20 @@ +Mon Mar 30 05:18:08 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.47.0: + * Expose schema to dependents (#2443) + * chore(harden-runner): add more Go endpoints (#2442) + * build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 + in the actions group (#2440) + * build(deps): bump github.com/docker/cli from + 29.3.0+incompatible to 29.3.1+incompatible in the gomod group + (#2439) + * build(deps): bump github.com/moby/moby/v2 from 2.0.0-beta.7 to + 2.0.0-beta.8 (#2441) + * feat(harden-runner): move to inline block policies (#2438) + * chore(melange): Add OCI update monitor config and docs (#2435) + * chore(pipelines/python/import): Add virtual env support (#2436) + * build(deps): bump the gomod group across 1 directory with 3 + updates (#2433) + * Source fetch from melange (#2170) + +------------------------------------------------------------------- Old: ---- melange-0.46.1.obscpio New: ---- melange-0.47.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ melange.spec ++++++ --- /var/tmp/diff_new_pack.pjaTU2/_old 2026-03-30 18:35:53.902594777 +0200 +++ /var/tmp/diff_new_pack.pjaTU2/_new 2026-03-30 18:35:53.914595279 +0200 @@ -17,7 +17,7 @@ Name: melange -Version: 0.46.1 +Version: 0.47.0 Release: 0 Summary: Build APKs from source code License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.pjaTU2/_old 2026-03-30 18:35:54.110603474 +0200 +++ /var/tmp/diff_new_pack.pjaTU2/_new 2026-03-30 18:35:54.134604477 +0200 @@ -1,9 +1,9 @@ <services> <service name="obs_scm" mode="manual"> - <param name="url">https://github.com/chainguard-dev/melange</param> + <param name="url">https://github.com/chainguard-dev/melange.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.46.1</param> + <param name="revision">refs/tags/v0.47.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.pjaTU2/_old 2026-03-30 18:35:54.182606484 +0200 +++ /var/tmp/diff_new_pack.pjaTU2/_new 2026-03-30 18:35:54.186606651 +0200 @@ -1,6 +1,8 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/chainguard-dev/melange</param> - <param name="changesrevision">3f6115b820985d70ca3c93cdf8519c1b3b4cfe81</param></service></servicedata> + <param name="changesrevision">3f6115b820985d70ca3c93cdf8519c1b3b4cfe81</param></service><service name="tar_scm"> + <param name="url">https://github.com/chainguard-dev/melange.git</param> + <param name="changesrevision">3fa79327ebf36fb4b3700d6a053b95836e45ccd8</param></service></servicedata> (No newline at EOF) ++++++ melange-0.46.1.obscpio -> melange-0.47.0.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.46.1/go.mod new/melange-0.47.0/go.mod --- old/melange-0.46.1/go.mod 2026-03-26 04:08:54.000000000 +0100 +++ new/melange-0.47.0/go.mod 2026-03-27 00:06:38.000000000 +0100 @@ -8,7 +8,7 @@ github.com/chainguard-dev/go-pkgconfig v0.0.0-20240404163941-6351b37b2a10 github.com/chainguard-dev/yam v0.2.53 github.com/charmbracelet/log v1.0.0 - github.com/docker/cli v29.3.0+incompatible + github.com/docker/cli v29.3.1+incompatible github.com/docker/docker v28.5.2+incompatible github.com/dprotaso/go-yit v0.0.0-20250513224043-18a80f8f6df4 github.com/github/go-spdx/v2 v2.4.0 @@ -22,7 +22,7 @@ github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 github.com/klauspost/compress v1.18.5 github.com/klauspost/pgzip v1.2.6 - github.com/moby/moby/v2 v2.0.0-beta.7 + github.com/moby/moby/v2 v2.0.0-beta.8 github.com/opencontainers/image-spec v1.1.1 github.com/package-url/packageurl-go v0.1.5 github.com/pkg/errors v0.9.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.46.1/go.sum new/melange-0.47.0/go.sum --- old/melange-0.46.1/go.sum 2026-03-26 04:08:54.000000000 +0100 +++ new/melange-0.47.0/go.sum 2026-03-27 00:06:38.000000000 +0100 @@ -91,8 +91,8 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk= github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= -github.com/docker/cli v29.3.0+incompatible h1:z3iWveU7h19Pqx7alZES8j+IeFQZ1lhTwb2F+V9SVvk= -github.com/docker/cli v29.3.0+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8= +github.com/docker/cli v29.3.1+incompatible h1:M04FDj2TRehDacrosh7Vlkgc7AuQoWloQkf1PA5hmoI= +github.com/docker/cli v29.3.1+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8= github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk= github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w= github.com/docker/docker v28.5.2+incompatible h1:DBX0Y0zAjZbSrm1uzOkdr1onVghKaftjlSWt4AFexzM= @@ -255,8 +255,8 @@ github.com/moby/moby/api v1.54.0/go.mod h1:8mb+ReTlisw4pS6BRzCMts5M49W5M7bKt1cJy/YbAqc= github.com/moby/moby/client v0.3.0 h1:UUGL5okry+Aomj3WhGt9Aigl3ZOxZGqR7XPo+RLPlKs= github.com/moby/moby/client v0.3.0/go.mod h1:HJgFbJRvogDQjbM8fqc1MCEm4mIAGMLjXbgwoZp6jCQ= -github.com/moby/moby/v2 v2.0.0-beta.7 h1:f+Sc06mGJ5eBskZlSEb8+2MgVPTn74Y6xG04xS3VNLw= -github.com/moby/moby/v2 v2.0.0-beta.7/go.mod h1:rKqTDjHJippfr+QpXtKL8G0tZDDc7vanyxaVBL43o8s= +github.com/moby/moby/v2 v2.0.0-beta.8 h1:3D/xW0DrCNuGPSJ+dnw9A97IJ3qwBmTxqmCWDEYtY38= +github.com/moby/moby/v2 v2.0.0-beta.8/go.mod h1:92sEyRcWIBbM9stp3xl4I2t/gJzOFgrZ8prBT0IfD4g= github.com/moby/sys/atomicwriter v0.1.0 h1:kw5D/EqkBwsBFi0ss9v1VG3wIkVhzGvLklJ+w3A14Sw= github.com/moby/sys/atomicwriter v0.1.0/go.mod h1:Ul8oqv2ZMNHOceF643P6FKPXeCmYtlQMvpizfsSoaWs= github.com/moby/sys/sequential v0.6.0 h1:qrx7XFUd/5DxtqcoH1h438hF5TmOvzC/lspjy7zgvCU= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.46.1/pkg/config/config.go new/melange-0.47.0/pkg/config/config.go --- old/melange-0.46.1/pkg/config/config.go 2026-03-26 04:08:54.000000000 +0100 +++ new/melange-0.47.0/pkg/config/config.go 2026-03-27 00:06:38.000000000 +0100 @@ -47,8 +47,13 @@ "gopkg.in/yaml.v3" "chainguard.dev/melange/pkg/util" + + _ "embed" ) +//go:embed schema.json +var SchemaJSON []byte + const ( buildUser = "build" purlTypeAPK = "apk" ++++++ melange.obsinfo ++++++ --- /var/tmp/diff_new_pack.pjaTU2/_old 2026-03-30 18:35:57.598749306 +0200 +++ /var/tmp/diff_new_pack.pjaTU2/_new 2026-03-30 18:35:57.618750142 +0200 @@ -1,5 +1,5 @@ name: melange -version: 0.46.1 -mtime: 1774494534 -commit: 3f6115b820985d70ca3c93cdf8519c1b3b4cfe81 +version: 0.47.0 +mtime: 1774566398 +commit: 3fa79327ebf36fb4b3700d6a053b95836e45ccd8 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/melange/vendor.tar.gz /work/SRC/openSUSE:Factory/.melange.new.1999/vendor.tar.gz differ: char 134, line 1
