Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package polaris for openSUSE:Factory checked 
in at 2026-04-22 17:00:53
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/polaris (Old)
 and      /work/SRC/openSUSE:Factory/.polaris.new.11940 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "polaris"

Wed Apr 22 17:00:53 2026 rev:48 rq:1348688 version:10.1.8

Changes:
--------
--- /work/SRC/openSUSE:Factory/polaris/polaris.changes  2026-04-02 
17:42:57.511798096 +0200
+++ /work/SRC/openSUSE:Factory/.polaris.new.11940/polaris.changes       
2026-04-22 17:01:39.789123797 +0200
@@ -1,0 +2,10 @@
+Wed Apr 22 06:25:31 UTC 2026 - Johannes Kastl 
<[email protected]>
+
+- Update to version 10.1.8:
+  * INS-2239: Fix polaris vulnerabilities (#1187)
+    
https://github.com/FairwindsOps/polaris/commit/9dfb4262e6c52fa870940a544c6fb1cad1dd4a0e
+  * Revert "Fix vulnerabilities"
+  * Fix vulnerabilities
+  * remove adhoc envsubst process on goreleaser (#1186)
+
+-------------------------------------------------------------------

Old:
----
  polaris-10.1.7.obscpio

New:
----
  polaris-10.1.8.obscpio

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ polaris.spec ++++++
--- /var/tmp/diff_new_pack.DlmgUk/_old  2026-04-22 17:01:41.013174307 +0200
+++ /var/tmp/diff_new_pack.DlmgUk/_new  2026-04-22 17:01:41.013174307 +0200
@@ -17,7 +17,7 @@
 
 
 Name:           polaris
-Version:        10.1.7
+Version:        10.1.8
 Release:        0
 Summary:        Validation of best practices in your Kubernetes clusters
 License:        Apache-2.0

++++++ _service ++++++
--- /var/tmp/diff_new_pack.DlmgUk/_old  2026-04-22 17:01:41.069176618 +0200
+++ /var/tmp/diff_new_pack.DlmgUk/_new  2026-04-22 17:01:41.073176782 +0200
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/FairwindsOps/polaris</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">10.1.7</param>
+    <param name="revision">10.1.8</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
   </service>

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.DlmgUk/_old  2026-04-22 17:01:41.109178269 +0200
+++ /var/tmp/diff_new_pack.DlmgUk/_new  2026-04-22 17:01:41.117178599 +0200
@@ -1,6 +1,6 @@
 <servicedata>
 <service name="tar_scm">
                 <param 
name="url">https://github.com/FairwindsOps/polaris</param>
-              <param 
name="changesrevision">47c7deddfd66a762729f0d3b94d72e55871a4970</param></service></servicedata>
+              <param 
name="changesrevision">9dfb4262e6c52fa870940a544c6fb1cad1dd4a0e</param></service></servicedata>
 (No newline at EOF)
 

++++++ polaris-10.1.7.obscpio -> polaris-10.1.8.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/polaris-10.1.7/.circleci/config.yml 
new/polaris-10.1.8/.circleci/config.yml
--- old/polaris-10.1.7/.circleci/config.yml     2026-04-01 20:17:52.000000000 
+0200
+++ new/polaris-10.1.8/.circleci/config.yml     2026-04-21 20:32:09.000000000 
+0200
@@ -14,8 +14,6 @@
     description: Installs dependencies for CI scripts
     steps:
     - run: apk update
-    # gettext provides envsubst
-    - run: apk add gettext
     # Register other docker platforms, to build arm64.
     # This shouldn't be needed, why TBD.
     - run: docker run --privileged --rm tonistiigi/binfmt --install all
@@ -120,7 +118,7 @@
 
   test:
     docker:
-      - image: cimg/go:1.26
+      - image: cimg/go:1.26.2
     steps:
       - checkout
       - *set_environment_variables
@@ -136,7 +134,7 @@
       # The goreleaser image tag determins the version of Go.
       # Manually check goreleaser images for their version of Go.
       # Ref: https://hub.docker.com/r/goreleaser/goreleaser/tags
-      - image: goreleaser/goreleaser:v2.14.2
+      - image: goreleaser/goreleaser:v2.15.4
     steps:
       - checkout
       - setup_remote_docker
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/polaris-10.1.7/.goreleaser.yml 
new/polaris-10.1.8/.goreleaser.yml
--- old/polaris-10.1.7/.goreleaser.yml  1970-01-01 01:00:00.000000000 +0100
+++ new/polaris-10.1.8/.goreleaser.yml  2026-04-21 20:32:09.000000000 +0200
@@ -0,0 +1,113 @@
+version: 2
+checksum:
+  name_template: 'checksums.txt'
+changelog:
+  sort: asc
+  filters:
+    exclude:
+    - '^docs:'
+    - '^test:'
+env:
+  - GOBIN={{ .Env.TMPDIR }}/go-bin
+before:
+  hooks:
+    - go mod download
+builds:
+  - id: polaris
+    ldflags:
+      - -X main.Version={{.Version}} -X main.Commit={{.Commit}} -s -w
+    env:
+      - CGO_ENABLED=0
+      - GO111MODULE=on
+    goos:
+      - linux
+      - darwin
+      - windows
+    goarch:
+      - amd64
+      - arm
+      - arm64
+    goarm:
+      - "6"
+      - "7"
+     # Go does not support windows/arm (32-bit); only windows/arm64 is 
supported.
+    ignore:
+      - goos: windows
+        goarch: arm
+archives:
+  - id: polaris
+    builds: ["polaris"]
+    name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}{{ if .Arm }}v{{ 
.Arm }}{{ end }}{{ if .Mips }}_{{ .Mips }}{{ end }}"
+signs:
+- cmd: cosign
+  args: ["sign-blob", "--key=hashivault://cosign", 
"-output-signature=${signature}", "${artifact}"]
+  artifacts: checksum
+release:
+  # Branch/PR builds set GORELEASER_SKIP_RELEASE=true; tag builds set false.
+  disable: '{{ eq .Env.GORELEASER_SKIP_RELEASE "true" }}'
+  prerelease: auto
+  footer: |
+    You can verify the signature of the checksums.txt file using 
[cosign](https://github.com/sigstore/cosign).
+
+    ```
+    cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key 
https://artifacts.fairwinds.com/cosign.pub
+    ```
+brews:
+  - name: polaris
+    skip_upload: '{{ eq .Env.GORELEASER_SKIP_RELEASE "true" }}'
+    repository:
+      owner: FairwindsOps
+      name: homebrew-tap
+    directory: Formula
+    description: Open Source Best Practices for Kubernetes
+    url_template: 
"https://github.com/FairwindsOps/polaris/releases/download/{{ .Tag }}/{{ 
.ArtifactName }}"
+    test: |
+      system "#{bin}/polaris version"
+dockers:
+  # There are multiple images to match the `--platform` docker build flag with
+  # combinations of `GOOS`, `GOARCH`, and `GOARM`
+- image_templates:
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
+  use: buildx
+  build_flag_templates:
+  - "--platform=linux/amd64"
+- image_templates:
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
+  use: buildx
+  goarch: arm64
+  goos: linux
+  build_flag_templates:
+  - "--platform=linux/arm64"
+docker_manifests:
+# Create Docker manifests that make multiple architectures available within a 
tag,
+# and provide partial-version tags like 2, and 2.2.
+- name_template: quay.io/fairwinds/polaris:{{ .FullCommit }}
+  image_templates:
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
+- name_template: 'quay.io/fairwinds/polaris:{{ envOrDefault 
"FEATURE_DOCKER_TAG" "none" }}'
+  # Tag builds set GORELEASER_SKIP_FEATURE_DOCKER_TAGS=true; feature branches 
set false.
+  skip_push: '{{ eq .Env.GORELEASER_SKIP_FEATURE_DOCKER_TAGS "true" }}'
+  image_templates:
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
+- name_template: quay.io/fairwinds/polaris:latest
+  skip_push: '{{ eq .Env.GORELEASER_SKIP_RELEASE "true" }}'
+  image_templates:
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
+- name_template: quay.io/fairwinds/polaris:{{ .Tag }}
+  skip_push: '{{ eq .Env.GORELEASER_SKIP_RELEASE "true" }}'
+  image_templates:
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
+- name_template: quay.io/fairwinds/polaris:{{ .Major }}
+  skip_push: '{{ eq .Env.GORELEASER_SKIP_RELEASE "true" }}'
+  image_templates:
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
+- name_template: quay.io/fairwinds/polaris:{{ .Major }}.{{ .Minor }}
+  skip_push: '{{ eq .Env.GORELEASER_SKIP_RELEASE "true" }}'
+  image_templates:
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
+  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/polaris-10.1.7/.goreleaser.yml.envsubst 
new/polaris-10.1.8/.goreleaser.yml.envsubst
--- old/polaris-10.1.7/.goreleaser.yml.envsubst 2026-04-01 20:17:52.000000000 
+0200
+++ new/polaris-10.1.8/.goreleaser.yml.envsubst 1970-01-01 01:00:00.000000000 
+0100
@@ -1,118 +0,0 @@
-version: 2
-checksum:
-  name_template: 'checksums.txt'
-changelog:
-  sort: asc
-  filters:
-    exclude:
-    - '^docs:'
-    - '^test:'
-env:
-  - GOBIN={{ .Env.TMPDIR }}/go-bin
-before:
-  hooks:
-    - go mod download
-builds:
-  - id: polaris
-    ldflags:
-      - -X main.Version={{.Version}} -X main.Commit={{.Commit}} -s -w
-    env:
-      - CGO_ENABLED=0
-      - GO111MODULE=on
-    goos:
-      - linux
-      - darwin
-      - windows
-    goarch:
-      - amd64
-      - arm
-      - arm64
-    goarm:
-      - 6
-      - 7
-    # Go does not support windows/arm (32-bit); only windows/arm64 is 
supported.
-    ignore:
-      - goos: windows
-        goarch: arm
-archives:
-  - id: polaris
-    builds: ["polaris"]
-    name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}{{ if .Arm }}v{{ 
.Arm }}{{ end }}{{ if .Mips }}_{{ .Mips }}{{ end }}"
-signs:
-- cmd: cosign
-  args: ["sign-blob", "--key=hashivault://cosign", 
"-output-signature=${signature}", "${artifact}"]
-  artifacts: checksum
-release:
-  # This is replaced using `envsubst`, depending on the git branch.
-  disable: ${skip_release}
-  prerelease: auto
-  footer: |
-    You can verify the signature of the checksums.txt file using 
[cosign](https://github.com/sigstore/cosign).
-
-    ```
-    cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key 
https://artifacts.fairwinds.com/cosign.pub
-    ```
-brews:
-  - name: polaris
-    # This is replaced using `envsubst`, depending on the git branch.
-    skip_upload: ${skip_release}
-    repository:
-      owner: FairwindsOps
-      name: homebrew-tap
-    directory: Formula
-    description: Open Source Best Practices for Kubernetes
-    url_template: 
"https://github.com/FairwindsOps/polaris/releases/download/{{ .Tag }}/{{ 
.ArtifactName }}"
-    test: |
-      system "#{bin}/polaris version"
-dockers:
-  # There are multiple images to match the `--platform` docker build flag with
-  # combinations of `GOOS`, `GOARCH`, and `GOARM`
-- image_templates:
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
-  use: buildx
-  build_flag_templates:
-  - "--platform=linux/amd64"
-- image_templates:
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
-  use: buildx
-  goarch: arm64
-  goos: linux
-  build_flag_templates:
-  - "--platform=linux/arm64"
-docker_manifests:
-# Create DOcker manifests that make multiple architectures available within a 
tag,
-# and provide partial-version tags like 2, and 2.2.
-- name_template: quay.io/fairwinds/polaris:{{ .FullCommit }}
-  image_templates:
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
-- name_template: quay.io/fairwinds/polaris:{{ .Env.feature_docker_tag }}
-  # This is replaced using `envsubst`, depending on the git branch.
-  skip_push: ${skip_feature_docker_tags}
-  image_templates:
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
-- name_template: quay.io/fairwinds/polaris:latest
-  # This is replaced using `envsubst`, depending on the git branch.
-  skip_push: ${skip_release}
-  image_templates:
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
-- name_template: quay.io/fairwinds/polaris:{{ .Tag }}
-  # This is replaced using `envsubst`, depending on the git branch.
-  skip_push: ${skip_release}
-  image_templates:
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
-- name_template: quay.io/fairwinds/polaris:{{ .Major }}
-  # This is replaced using `envsubst`, depending on the git branch.
-  skip_push: ${skip_release}
-  image_templates:
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
-- name_template: quay.io/fairwinds/polaris:{{ .Major }}.{{ .Minor }}
-  # This is replaced using `envsubst`, depending on the git branch.
-  skip_push: ${skip_release}
-  image_templates:
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
-  - "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/polaris-10.1.7/Dockerfile 
new/polaris-10.1.8/Dockerfile
--- old/polaris-10.1.7/Dockerfile       2026-04-01 20:17:52.000000000 +0200
+++ new/polaris-10.1.8/Dockerfile       2026-04-21 20:32:09.000000000 +0200
@@ -1,4 +1,4 @@
-FROM alpine:3.23
+FROM alpine:3.23.4
 
 LABEL org.opencontainers.image.authors="FairwindsOps, Inc." \
       org.opencontainers.image.vendor="FairwindsOps, Inc." \
@@ -12,8 +12,6 @@
 WORKDIR /usr/local/bin
 # Install ca-certs
 RUN apk --no-cache add ca-certificates
-# Upgrade only packages with known HIGH/CRITICAL issues (not a full apk 
upgrade).
-RUN apk --no-cache add --upgrade libcrypto3 libssl3 zlib
 
 RUN addgroup -S polaris && adduser -u 1200 -S polaris -G polaris
 USER 1200
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/polaris-10.1.7/go.mod new/polaris-10.1.8/go.mod
--- old/polaris-10.1.7/go.mod   2026-04-01 20:17:52.000000000 +0200
+++ new/polaris-10.1.8/go.mod   2026-04-21 20:32:09.000000000 +0200
@@ -1,6 +1,6 @@
 module github.com/fairwindsops/polaris
 
-go 1.26
+go 1.26.2
 
 require (
        github.com/fairwindsops/controller-utils v0.3.4
@@ -15,9 +15,9 @@
        github.com/thoas/go-funk v0.9.3
        gomodules.xyz/jsonpatch/v2 v2.5.0
        gopkg.in/yaml.v3 v3.0.1
-       k8s.io/api v0.35.3
-       k8s.io/apimachinery v0.35.3
-       k8s.io/client-go v0.35.3
+       k8s.io/api v0.35.4
+       k8s.io/apimachinery v0.35.4
+       k8s.io/client-go v0.35.4
        sigs.k8s.io/controller-runtime v0.23.3
        sigs.k8s.io/yaml v1.6.0
 )
@@ -77,7 +77,7 @@
        google.golang.org/protobuf v1.36.11 // indirect
        gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
        gopkg.in/inf.v0 v0.9.1 // indirect
-       k8s.io/apiextensions-apiserver v0.35.3 // indirect
+       k8s.io/apiextensions-apiserver v0.35.4 // indirect
        k8s.io/klog/v2 v2.140.0 // indirect
        k8s.io/kube-openapi v0.0.0-20260304202019-5b3e3fdb0acf // indirect
        k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 // indirect
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/polaris-10.1.7/go.sum new/polaris-10.1.8/go.sum
--- old/polaris-10.1.7/go.sum   2026-04-01 20:17:52.000000000 +0200
+++ new/polaris-10.1.8/go.sum   2026-04-21 20:32:09.000000000 +0200
@@ -195,14 +195,14 @@
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.35.3 h1:pA2fiBc6+N9PDf7SAiluKGEBuScsTzd2uYBkA5RzNWQ=
-k8s.io/api v0.35.3/go.mod h1:9Y9tkBcFwKNq2sxwZTQh1Njh9qHl81D0As56tu42GA4=
-k8s.io/apiextensions-apiserver v0.35.3 
h1:2fQUhEO7P17sijylbdwt0nBdXP0TvHrHj0KeqHD8FiU=
-k8s.io/apiextensions-apiserver v0.35.3/go.mod 
h1:tK4Kz58ykRpwAEkXUb634HD1ZAegEElktz/B3jgETd8=
-k8s.io/apimachinery v0.35.3 h1:MeaUwQCV3tjKP4bcwWGgZ/cp/vpsRnQzqO6J6tJyoF8=
-k8s.io/apimachinery v0.35.3/go.mod 
h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
-k8s.io/client-go v0.35.3 h1:s1lZbpN4uI6IxeTM2cpdtrwHcSOBML1ODNTCCfsP1pg=
-k8s.io/client-go v0.35.3/go.mod h1:RzoXkc0mzpWIDvBrRnD+VlfXP+lRzqQjCmKtiwZ8Q9c=
+k8s.io/api v0.35.4 h1:P7nFYKl5vo9AGUp1Z+Pmd3p2tA7bX2wbFWCvDeRv988=
+k8s.io/api v0.35.4/go.mod h1:yl4lqySWOgYJJf9RERXKUwE9g2y+CkuwG+xmcOK8wXU=
+k8s.io/apiextensions-apiserver v0.35.4 
h1:HeP+Upp7ItdvnyGmub0yoix+2z5+ev4M5cE5TCgtOUU=
+k8s.io/apiextensions-apiserver v0.35.4/go.mod 
h1:ogQlk+stIE8mnoRthSYCwlOS12fVqgWFiErMwPaXA7c=
+k8s.io/apimachinery v0.35.4 h1:xtdom9RG7e+yDp71uoXoJDWEE2eOiHgeO4GdBzwWpds=
+k8s.io/apimachinery v0.35.4/go.mod 
h1:NNi1taPOpep0jOj+oRha3mBJPqvi0hGdaV8TCqGQ+cc=
+k8s.io/client-go v0.35.4 h1:DN6fyaGuzK64UvnKO5fOA6ymSjvfGAnCAHAR0C66kD8=
+k8s.io/client-go v0.35.4/go.mod h1:2Pg9WpsS4NeOpoYTfHHfMxBG8zFMSAUi4O/qoiJC3nY=
 k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc=
 k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0=
 k8s.io/kube-openapi v0.0.0-20260304202019-5b3e3fdb0acf 
h1:btPscg4cMql0XdYK2jLsJcNEKmACJz8l+U7geC06FiM=
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/polaris-10.1.7/scripts/goreleaser.sh 
new/polaris-10.1.8/scripts/goreleaser.sh
--- old/polaris-10.1.7/scripts/goreleaser.sh    2026-04-01 20:17:52.000000000 
+0200
+++ new/polaris-10.1.8/scripts/goreleaser.sh    2026-04-21 20:32:09.000000000 
+0200
@@ -1,8 +1,8 @@
 #!/usr/bin/env sh
-# Wrap goreleaser by using envsubst on .goreleaser.yml,
-# and creating a temporary git tag.
+# Wrap goreleaser with branch/tag-specific env (see .goreleaser.yml templates)
+# and, on non-tag CI runs, a temporary git tag.
 
-function cleanup {
+cleanup() {
   if [ "${CIRCLE_TAG}" == "" ] ; then
     echo "${this_script} deleting git tag ${temporary_git_tag} for goreleaser"
     unset GORELEASER_CURRENT_TAG
@@ -13,15 +13,14 @@
 set -eE # errexit and errtrace
 trap 'cleanup' ERR
 this_script="$(basename $0)"
-hash envsubst
 hash goreleaser
 if [ "${TMPDIR}" == "" ] ; then
   export TMPDIR="/tmp"
   echo "${this_script} temporarily set the TMPDIR environment variable to 
${TMPDIR}, used for a temporary GOBIN environment variable"
 fi
 
-export skip_feature_docker_tags=false
-export skip_release=true
+export GORELEASER_SKIP_FEATURE_DOCKER_TAGS=false
+export GORELEASER_SKIP_RELEASE=true
 if [ "${CIRCLE_TAG}" == "" ] ; then
   # Create a temporary tag for goreleaser, incrementing the last tag.
   last_git_tag="$(git describe --tags --abbrev=0 2>/dev/null)"
@@ -41,23 +40,16 @@
   # The -f is included to overwrite existing tags, perhaps from previous CI 
jobs.
   git tag -f -m "temporary local tag for goreleaser" ${temporary_git_tag}
   export GORELEASER_CURRENT_TAG=${temporary_git_tag}
-  # Use an adjusted git feature branch name as a docker tag.
-  export feature_docker_tag=$(echo "${CIRCLE_BRANCH:0:26}" | sed 
's/[^a-zA-Z0-9]/-/g' | sed 's/-\+$//')
-  echo "${this_script} also using docker tag ${feature_docker_tag} since 
${CIRCLE_BRANCH} is a feature branch"
+  # Use an adjusted git feature branch name as a docker tag; export so 
goreleaser receives .Env.FEATURE_DOCKER_TAG.
+  export FEATURE_DOCKER_TAG=$(echo "${CIRCLE_BRANCH:0:26}" | sed 
's/[^a-zA-Z0-9]/-/g' | sed 's/-\+$//')
+  echo "${this_script} also using docker tag ${FEATURE_DOCKER_TAG} since 
${CIRCLE_BRANCH} is a feature branch"
 else
   export GORELEASER_CURRENT_TAG=${CIRCLE_TAG}
-  echo "${this_script} setting skip_release to false, and 
skip_feature_docker_tags to true,  because CIRCLE_TAG is set"
-  export skip_feature_docker_tags=true
-  export skip_release=false
+  echo "${this_script} setting GORELEASER_SKIP_RELEASE to false, and 
GORELEASER_SKIP_FEATURE_DOCKER_TAGS to true, because CIRCLE_TAG is set"
+  export GORELEASER_SKIP_FEATURE_DOCKER_TAGS=true
+  export GORELEASER_SKIP_RELEASE=false
 fi
 
 echo "${this_script} using git tag ${GORELEASER_CURRENT_TAG}"
-# Only substitute specific variables, as goreleaser uses shell variable syntax
-# for its `signs` section `signature` and `artifact` variables.
-cat .goreleaser.yml.envsubst |envsubst '${skip_release} 
${skip_feature_docker_tags} ${feature_docker_tag}' >.goreleaser.yml
-goreleaser --skip=sign $@
-if [ $? -eq 0 ] ; then
-  echo "${this_script} removing the temporary .goreleaser.yml since goreleaser 
was successful"
-  rm .goreleaser.yml # Keep git clean for additional goreleaser runs
-fi
+goreleaser --skip=sign "$@"
 cleanup

++++++ polaris.obsinfo ++++++
--- /var/tmp/diff_new_pack.DlmgUk/_old  2026-04-22 17:01:42.013215573 +0200
+++ /var/tmp/diff_new_pack.DlmgUk/_new  2026-04-22 17:01:42.033216398 +0200
@@ -1,5 +1,5 @@
 name: polaris
-version: 10.1.7
-mtime: 1775067472
-commit: 47c7deddfd66a762729f0d3b94d72e55871a4970
+version: 10.1.8
+mtime: 1776796329
+commit: 9dfb4262e6c52fa870940a544c6fb1cad1dd4a0e
 

++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/polaris/vendor.tar.gz 
/work/SRC/openSUSE:Factory/.polaris.new.11940/vendor.tar.gz differ: char 142, 
line 1

Reply via email to