Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package melange for openSUSE:Factory checked in at 2026-07-13 14:27:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/melange (Old) and /work/SRC/openSUSE:Factory/.melange.new.1991 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "melange" Mon Jul 13 14:27:26 2026 rev:170 rq:1365193 version:0.56.2 Changes: -------- --- /work/SRC/openSUSE:Factory/melange/melange.changes 2026-07-06 12:37:04.997311822 +0200 +++ /work/SRC/openSUSE:Factory/.melange.new.1991/melange.changes 2026-07-13 14:27:43.882728737 +0200 @@ -1,0 +2,14 @@ +Mon Jul 13 04:50:33 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.56.2: + * build(deps): bump chainguard.dev/apko in the gomod group + (#2593) + * build(deps): bump step-security/harden-runner in the actions + group (#2591) + * build(deps): bump docker/setup-docker-action from 5.2.0 to + 5.3.0 in the actions group across 1 directory (#2587) + * build(deps): bump the gomod group across 1 directory with 4 + updates (#2590) + * Fix/improve shell comparison syntax (#2588) + +------------------------------------------------------------------- Old: ---- melange-0.56.1.obscpio New: ---- melange-0.56.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ melange.spec ++++++ --- /var/tmp/diff_new_pack.I15ICb/_old 2026-07-13 14:27:47.310845951 +0200 +++ /var/tmp/diff_new_pack.I15ICb/_new 2026-07-13 14:27:47.326846498 +0200 @@ -17,7 +17,7 @@ Name: melange -Version: 0.56.1 +Version: 0.56.2 Release: 0 Summary: Build APKs from source code License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.I15ICb/_old 2026-07-13 14:27:47.662857986 +0200 +++ /var/tmp/diff_new_pack.I15ICb/_new 2026-07-13 14:27:47.710859627 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/chainguard-dev/melange.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v0.56.1</param> + <param name="revision">refs/tags/v0.56.2</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.I15ICb/_old 2026-07-13 14:27:47.918866739 +0200 +++ /var/tmp/diff_new_pack.I15ICb/_new 2026-07-13 14:27:47.970868516 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/chainguard-dev/melange</param> <param name="changesrevision">3f6115b820985d70ca3c93cdf8519c1b3b4cfe81</param></service><service name="tar_scm"> <param name="url">https://github.com/chainguard-dev/melange.git</param> - <param name="changesrevision">5ada93b409f95dd135342fea5f04b3e6298b5630</param></service></servicedata> + <param name="changesrevision">2e909fb6a4f1a8285af678ba8b2fcf936a744480</param></service></servicedata> (No newline at EOF) ++++++ melange-0.56.1.obscpio -> melange-0.56.2.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/go.mod new/melange-0.56.2/go.mod --- old/melange-0.56.1/go.mod 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/go.mod 2026-07-10 18:40:06.000000000 +0200 @@ -3,7 +3,7 @@ go 1.26.2 require ( - chainguard.dev/apko v1.2.20 + chainguard.dev/apko v1.2.23 github.com/chainguard-dev/clog v1.8.1 github.com/chainguard-dev/go-pkgconfig v0.0.0-20240404163941-6351b37b2a10 github.com/chainguard-dev/yam v0.2.65 @@ -38,10 +38,10 @@ go.yaml.in/yaml/v2 v2.4.4 golang.org/x/crypto v0.53.0 golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f - golang.org/x/sync v0.21.0 - golang.org/x/sys v0.46.0 + golang.org/x/sync v0.22.0 + golang.org/x/sys v0.47.0 golang.org/x/term v0.44.0 - golang.org/x/text v0.38.0 + golang.org/x/text v0.39.0 golang.org/x/time v0.15.0 gopkg.in/ini.v1 v1.67.3 gopkg.in/yaml.v3 v3.0.1 @@ -70,7 +70,7 @@ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 // indirect go.yaml.in/yaml/v3 v3.0.4 // indirect go.yaml.in/yaml/v4 v4.0.0-rc.2 // indirect - golang.org/x/tools v0.46.0 // indirect + golang.org/x/tools v0.47.0 // indirect k8s.io/klog/v2 v2.140.0 // indirect ) @@ -81,7 +81,7 @@ require ( chainguard.dev/go-grpc-kit v0.17.17 // indirect - chainguard.dev/sdk v0.1.74 // indirect + chainguard.dev/sdk v0.1.94 // indirect cloud.google.com/go/auth v0.20.0 // indirect cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect cloud.google.com/go/compute/metadata v0.9.0 // indirect @@ -160,14 +160,14 @@ go.lsp.dev/uri v0.3.0 // indirect go.opentelemetry.io/auto/sdk v1.2.1 // indirect go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 // indirect - go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 // indirect go.opentelemetry.io/otel/metric v1.44.0 // indirect go.opentelemetry.io/otel/trace v1.44.0 // indirect - go.step.sm/crypto v0.83.0 // indirect + go.step.sm/crypto v0.84.1 // indirect golang.org/x/mod v0.37.0 // indirect golang.org/x/net v0.56.0 // indirect golang.org/x/oauth2 v0.36.0 // indirect - google.golang.org/api v0.285.0 // indirect + google.golang.org/api v0.286.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20260610212136-7ab31c22f7ad // indirect google.golang.org/grpc v1.81.1 // indirect diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/go.sum new/melange-0.56.2/go.sum --- old/melange-0.56.1/go.sum 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/go.sum 2026-07-10 18:40:06.000000000 +0200 @@ -1,9 +1,9 @@ -chainguard.dev/apko v1.2.20 h1:Gsz78qrXgkZmr2huiLU5pTiCryccCBSNRPlNlxw5P1U= -chainguard.dev/apko v1.2.20/go.mod h1:JjoDT54U37vRGjHtbZFNyX9++hEbtwBYamKVnR0BQ24= +chainguard.dev/apko v1.2.23 h1:gJcWEObpJ3delpNYr78eTcb3KP+jIgO4G/AEHOnX08M= +chainguard.dev/apko v1.2.23/go.mod h1:bXhGAcxyjY/mG0OOD5GfWUYt5YFCZmdPGfGYtnlRLWU= chainguard.dev/go-grpc-kit v0.17.17 h1:Jwhc0zyUwQbC2hNcsi+YMeUX/JUnM+dXVCkTw6wtPzs= chainguard.dev/go-grpc-kit v0.17.17/go.mod h1:qn0meP6RtrbLicE1bgBZnnVU9dvX95eLs0x0T6kZ+b4= -chainguard.dev/sdk v0.1.74 h1:igqNf9pavV8+yAM8CI5ICGgeIgNfzy1ps8ILw2Pecto= -chainguard.dev/sdk v0.1.74/go.mod h1:t8m9wn52ylTmEaOCQWUkfxvXOIQe5xD3UsvYn1CP7Bo= +chainguard.dev/sdk v0.1.94 h1:bdRWsrS6W2z5cYOdXJYX4fGvmr1TpTljTD0VUrTYSl0= +chainguard.dev/sdk v0.1.94/go.mod h1:INq9LfC/tADHJLUBKvWGJ6TUslgMt55tVSpEWRdH5vM= cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= cloud.google.com/go/auth v0.20.0 h1:kXTssoVb4azsVDoUiF8KvxAqrsQcQtB53DcSgta74CA= cloud.google.com/go/auth v0.20.0/go.mod h1:942/yi/itH1SsmpyrbnTMDgGfdy2BUqIKyd0cyYLc5Q= @@ -352,8 +352,8 @@ go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 h1:yI1/OhfEPy7J9eoa6Sj051C7n5dvpj0QX8g4sRchg04= go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0/go.mod h1:NoUCKYWK+3ecatC4HjkRktREheMeEtrXoQxrqYFeHSc= -go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 h1:OyrsyzuttWTSur2qN/Lm0m2a8yqyIjUVBZcxFPuXq2o= -go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0/go.mod h1:C2NGBr+kAB4bk3xtMXfZ94gqFDtg/GkI7e9zqGh5Beg= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 h1:8tvICD4vSTOOsNrsI4Ljf6C+6UKvpTEH5XY3JMoyPoo= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0/go.mod h1:z9+yiacE0IHRqM4qFfkbt/JYlmYXgss8GY/jXoNuPJI= go.opentelemetry.io/otel v1.44.0 h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU= go.opentelemetry.io/otel v1.44.0/go.mod h1:BMgjTHL9WPRlRjL2oZCBTL4whCGtXch2H4BhOPIAyYc= go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 h1:88Y4s2C8oTui1LGM6bTWkw0ICGcOLCAI5l6zsD1j20k= @@ -372,8 +372,8 @@ go.opentelemetry.io/otel/trace v1.44.0/go.mod h1:oLl1jrMQAVo6v3GAggN+1VH9VIz9iUSvW53sW1Q8PIE= go.opentelemetry.io/proto/otlp v1.10.0 h1:IQRWgT5srOCYfiWnpqUYz9CVmbO8bFmKcwYxpuCSL2g= go.opentelemetry.io/proto/otlp v1.10.0/go.mod h1:/CV4QoCR/S9yaPj8utp3lvQPoqMtxXdzn7ozvvozVqk= -go.step.sm/crypto v0.83.0 h1:llCPEiL2f+kUPY+CUJrOCsuSBoJZ2qooFG9EqGast6w= -go.step.sm/crypto v0.83.0/go.mod h1:qyLTv666WJ6ImFPUjljux+684Y/GGYUjAZcKCnc6yBs= +go.step.sm/crypto v0.84.1 h1:i0JNkcLT7LcXef00TNpckjoTTH0QP6REHcAvnY3qrNY= +go.step.sm/crypto v0.84.1/go.mod h1:T54MIdw42uZnz3+mjOIOpJbsbTZF+O3IOLhvU9lBoJk= go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto= go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE= go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ= @@ -421,8 +421,8 @@ golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.21.0 h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM= -golang.org/x/sync v0.21.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= +golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek= +golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -440,8 +440,8 @@ golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= -golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw= -golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= +golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= @@ -456,8 +456,8 @@ golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= -golang.org/x/text v0.38.0 h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE= -golang.org/x/text v0.38.0/go.mod h1:YXZt3QhHUKYT53r2lLKFIVi6Ao1jdzrTR/KQ09qyxF4= +golang.org/x/text v0.39.0 h1:UbZz4pLOvn600D6Oh6GGEI6VAmndrEBLv8/6BEXzyus= +golang.org/x/text v0.39.0/go.mod h1:3UwRclnC2g0TU9x8PZiyfOajCd1zaUNHF9cvqcQZ+ZM= golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U= golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= @@ -468,21 +468,21 @@ golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU= -golang.org/x/tools v0.46.0 h1:7jTurBkPZu4moS/Uy4OQT1M+QBlsj3wejyZwsT8Z7rk= -golang.org/x/tools v0.46.0/go.mod h1:FrD85F8l+NWL+9XWBSyVSHO6Ne4jutsfIFba7AWQ5Ys= +golang.org/x/tools v0.47.0 h1:7Kn5x/d1svx/PzryTsqeoZN4TZwqeH5pGWjefhLi/1Q= +golang.org/x/tools v0.47.0/go.mod h1:dFHnyTvFWY212G+h7ZY4Vsp/K3U4/7W9TyVaAul8uCA= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4= gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E= -google.golang.org/api v0.285.0 h1:B7eHHoKGAX/LrPkQvhQqnGwjgWxofbdGwCTQvpm8FkM= -google.golang.org/api v0.285.0/go.mod h1:NlOlUIr8MPoIhT9Bb/oUnRuHbJOLwxb6JSYJM8Yz+jQ= +google.golang.org/api v0.286.0 h1:TdTXMvzYKnWV1/lPbCdbXRqBrkDqjPto22H2xeZZ8LI= +google.golang.org/api v0.286.0/go.mod h1:NlOlUIr8MPoIhT9Bb/oUnRuHbJOLwxb6JSYJM8Yz+jQ= google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc= google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc= google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo= -google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 h1:XzmzkmB14QhVhgnawEVsOn6OFsnpyxNPRY9QV01dNB0= -google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7/go.mod h1:L43LFes82YgSonw6iTXTxXUX1OlULt4AQtkik4ULL/I= +google.golang.org/genproto v0.0.0-20260406210006-6f92a3bedf2d h1:N1Ec54vZnIPd7MnxRiYLW+oY4fDR4BOS/LrssdD9+ek= +google.golang.org/genproto v0.0.0-20260406210006-6f92a3bedf2d/go.mod h1:c2hJ1grtnH0xUiEKGDGkjGNTJ1Hy2LrblyKOHF0sqRM= google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 h1:VPWxll4HlMw1Vs/qXtN7BvhZqsS9cdAittCNvVENElA= google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9/go.mod h1:7QBABkRtR8z+TEnmXTqIqwJLlzrZKVfAUm7tY3yGv0M= google.golang.org/genproto/googleapis/rpc v0.0.0-20260610212136-7ab31c22f7ad h1:45WmJvIV6C2+O/jjLkPUH+F3aOj/1miDoU2DD0+NWbg= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/fetch.yaml new/melange-0.56.2/pkg/build/pipelines/fetch.yaml --- old/melange-0.56.1/pkg/build/pipelines/fetch.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/fetch.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -75,14 +75,14 @@ pipeline: - runs: | - if [ "${{inputs.expected-sha256}}" == "" ] && [ "${{inputs.expected-sha512}}" == "" ] && [ "${{inputs.expected-none}}" == "" ]; then - printf "One of expected-sha256 or expected-sha512 is required" + if [ -z "${{inputs.expected-sha256}}" ] && [ -z "${{inputs.expected-sha512}}" ] && [ -z "${{inputs.expected-none}}" ]; then + printf "One of expected-sha256 or expected-sha512 is required\n" exit 1 fi bn=$(basename ${{inputs.uri}}) - if [ ! "${{inputs.expected-sha256}}" == "" ]; then + if [ -n "${{inputs.expected-sha256}}" ]; then fn="/var/cache/melange/sha256:${{inputs.expected-sha256}}" if [ -f $fn ]; then printf "fetch: found $fn in cache\n" @@ -100,9 +100,9 @@ wget '-T${{inputs.timeout}}' '--dns-timeout=${{inputs.dns-timeout}}' '--tries=${{inputs.retry-limit}}' --random-wait --retry-connrefused --continue '${{inputs.uri}}' fi - if [ "${{inputs.expected-none}}" != "" ]; then + if [ -n "${{inputs.expected-none}}" ]; then printf "fetch: Checksum validation skipped\n" - elif [ "${{inputs.expected-sha256}}" != "" ]; then + elif [ -n "${{inputs.expected-sha256}}" ]; then printf "fetch: Expected sha256: ${{inputs.expected-sha256}}\n" sum=$(sha256sum $bn | awk '{print $1}') if [ "${{inputs.expected-sha256}}" != "$sum" ]; then diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/git-checkout.yaml new/melange-0.56.2/pkg/build/pipelines/git-checkout.yaml --- old/melange-0.56.1/pkg/build/pipelines/git-checkout.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/git-checkout.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -204,7 +204,7 @@ unshallow_arg="" is_shallow=$(git rev-parse --is-shallow-repository) - if [ "$is_shallow" == "true" ] ; then + if [ "$is_shallow" = "true" ] ; then unshallow_arg="--unshallow" fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/go/build.yaml new/melange-0.56.2/pkg/build/pipelines/go/build.yaml --- old/melange-0.56.1/pkg/build/pipelines/go/build.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/go/build.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -135,7 +135,7 @@ export GOMODCACHE=/var/cache/melange/gomodcache # Install any specified dependencies - if [ ! "${{inputs.deps}}" == "" ]; then + if [ -n "${{inputs.deps}}" ]; then for dep in ${{inputs.deps}}; do go get $dep done diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/go/install.yaml new/melange-0.56.2/pkg/build/pipelines/go/install.yaml --- old/melange-0.56.1/pkg/build/pipelines/go/install.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/go/install.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -77,7 +77,7 @@ # Installed binaries will be stored in a tmp dir export GOBIN=$(mktemp -d) - if [ ! "${{inputs.version}}" == "" ]; then + if [ -n "${{inputs.version}}" ]; then VERSION="@${{inputs.version}}" fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/npm/install.yaml new/melange-0.56.2/pkg/build/pipelines/npm/install.yaml --- old/melange-0.56.1/pkg/build/pipelines/npm/install.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/npm/install.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -35,7 +35,7 @@ pipeline: - runs: | # Require npm-package to be 'npm' or 'pnpm' - if [ ! "${{inputs.npm-package}}" == "npm" ] && [ ! "${{inputs.npm-package}}" == "pnpm" ]; then + if [ ! "${{inputs.npm-package}}" = "npm" ] && [ ! "${{inputs.npm-package}}" = "pnpm" ]; then echo "Invalid npm-package '${{inputs.npm-package}}'; must be 'npm' or 'pnpm'." exit 1 fi @@ -43,7 +43,7 @@ mkdir -p "${{inputs.prefix}}"/bin mkdir -p "${{inputs.prefix}}"/lib mkdir -p $HOME/.pnpm/store - if [ "${{inputs.npm-package}}" == "pnpm" ]; then + if [ "${{inputs.npm-package}}" = "pnpm" ]; then export PNPM_HOME=~/.pnpm/store export SHELL=sh export ENV=/etc/profile @@ -56,7 +56,7 @@ # Does not support overrides; to be fixed below if needed. ${{inputs.npm-package}} install -g "${{inputs.package}}@${{inputs.version}}" -prefix "${{inputs.prefix}}" - if [ ! "${{inputs.overrides}}" == "" ]; then + if [ -n "${{inputs.overrides}}" ]; then # Move to /lib, which contains the node_modules folder. cd "${{inputs.prefix}}/lib" @@ -92,7 +92,7 @@ # ... to reinstall non-vulnerable node_modules. args="" - if [ "${{inputs.npm-package}}" == "npm" ]; then + if [ "${{inputs.npm-package}}" = "npm" ]; then args="${args} --install-strategy=shallow " fi ${{inputs.npm-package}} i ${args} . diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/split/debug.yaml new/melange-0.56.2/pkg/build/pipelines/split/debug.yaml --- old/melange-0.56.1/pkg/build/pipelines/split/debug.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/split/debug.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -19,7 +19,7 @@ PACKAGE_DIR="${{targets.outdir}}/${{inputs.package}}" fi - if [ "$PACKAGE_DIR" == "${{targets.contextdir}}" ]; then + if [ "$PACKAGE_DIR" = "${{targets.contextdir}}" ]; then echo "ERROR: Package can not split files from itself!" && exit 1 fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/split/dev.yaml new/melange-0.56.2/pkg/build/pipelines/split/dev.yaml --- old/melange-0.56.1/pkg/build/pipelines/split/dev.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/split/dev.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -21,11 +21,10 @@ PACKAGE_DIR="${{targets.outdir}}/${{inputs.package}}" fi - if [ "$PACKAGE_DIR" == "${{targets.contextdir}}" ]; then + if [ "$PACKAGE_DIR" = "${{targets.contextdir}}" ]; then echo "ERROR: Package can not split files from itself!" && exit 1 fi - i= j= cd "$PACKAGE_DIR" || exit 0 prefix="${{inputs.prefix}}" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/split/infodir.yaml new/melange-0.56.2/pkg/build/pipelines/split/infodir.yaml --- old/melange-0.56.1/pkg/build/pipelines/split/infodir.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/split/infodir.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -17,7 +17,7 @@ PACKAGE_DIR="${{targets.outdir}}/${{inputs.package}}" fi - if [ "$PACKAGE_DIR" == "${{targets.contextdir}}" ]; then + if [ "$PACKAGE_DIR" = "${{targets.contextdir}}" ]; then echo "ERROR: Package can not split files from itself!" && exit 1 fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/split/lib.yaml new/melange-0.56.2/pkg/build/pipelines/split/lib.yaml --- old/melange-0.56.1/pkg/build/pipelines/split/lib.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/split/lib.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -36,7 +36,7 @@ PACKAGE_DIR="${{targets.outdir}}/${{inputs.package}}" fi - if [ "$PACKAGE_DIR" == "${{targets.contextdir}}" ]; then + if [ "$PACKAGE_DIR" = "${{targets.contextdir}}" ]; then echo "ERROR: Package can not split files from itself!" && exit 1 fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/split/locales.yaml new/melange-0.56.2/pkg/build/pipelines/split/locales.yaml --- old/melange-0.56.1/pkg/build/pipelines/split/locales.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/split/locales.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -17,7 +17,7 @@ PACKAGE_DIR="${{targets.outdir}}/${{inputs.package}}" fi - if [ "$PACKAGE_DIR" == "${{targets.contextdir}}" ]; then + if [ "$PACKAGE_DIR" = "${{targets.contextdir}}" ]; then echo "ERROR: Package can not split files from itself!" && exit 1 fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/build/pipelines/split/static.yaml new/melange-0.56.2/pkg/build/pipelines/split/static.yaml --- old/melange-0.56.1/pkg/build/pipelines/split/static.yaml 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/build/pipelines/split/static.yaml 2026-07-10 18:40:06.000000000 +0200 @@ -17,7 +17,7 @@ PACKAGE_DIR="${{targets.outdir}}/${{inputs.package}}" fi - if [ "$PACKAGE_DIR" == "${{targets.contextdir}}" ]; then + if [ "$PACKAGE_DIR" = "${{targets.contextdir}}" ]; then echo "ERROR: Package can not split files from itself!" && exit 1 fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/melange-0.56.1/pkg/cond/subst_test.go new/melange-0.56.2/pkg/cond/subst_test.go --- old/melange-0.56.1/pkg/cond/subst_test.go 2026-07-04 22:27:09.000000000 +0200 +++ new/melange-0.56.2/pkg/cond/subst_test.go 2026-07-10 18:40:06.000000000 +0200 @@ -124,7 +124,7 @@ } func TestSubstVarShellFragment(t *testing.T) { - doc := `if [ "${{inputs.expected-sha256}}" == "" ] && [ "${{inputs.expected-sha512}}" == "" ]; then + doc := `if [ -z "${{inputs.expected-sha256}}" ] && [ -z "${{inputs.expected-sha512}}" ]; then printf "One of expected-sha256 or expected-sha512 is required" exit 1 fi` ++++++ melange.obsinfo ++++++ --- /var/tmp/diff_new_pack.I15ICb/_old 2026-07-13 14:27:51.594992417 +0200 +++ /var/tmp/diff_new_pack.I15ICb/_new 2026-07-13 14:27:51.610992964 +0200 @@ -1,5 +1,5 @@ name: melange -version: 0.56.1 -mtime: 1783196829 -commit: 5ada93b409f95dd135342fea5f04b3e6298b5630 +version: 0.56.2 +mtime: 1783701606 +commit: 2e909fb6a4f1a8285af678ba8b2fcf936a744480 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/melange/vendor.tar.gz /work/SRC/openSUSE:Factory/.melange.new.1991/vendor.tar.gz differ: char 13, line 1
