Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package helm3 for openSUSE:Factory checked in at 2026-08-22 21:35:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/helm3 (Old) and /work/SRC/openSUSE:Factory/.helm3.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "helm3" Sat Aug 22 21:35:26 2026 rev:20 rq:1372957 version:3.21.3 Changes: -------- --- /work/SRC/openSUSE:Factory/helm3/helm3.changes 2026-07-28 18:15:16.140991535 +0200 +++ /work/SRC/openSUSE:Factory/.helm3.new.1258/helm3.changes 2026-08-22 21:37:34.018272874 +0200 @@ -1,0 +2,9 @@ +Fri Aug 21 22:25:58 UTC 2026 - Dirk Müller <[email protected]> + +- bump vendor to address various security issues: + * golang.org/x/[email protected] + * oras.land/oras-go/[email protected] + * google.golang.org/[email protected] + * go.opentelemetry.io/[email protected] + +------------------------------------------------------------------- Old: ---- vendor.tar.gz New: ---- vendor.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ helm3.spec ++++++ --- /var/tmp/diff_new_pack.XWaOBL/_old 2026-08-22 21:37:34.912304832 +0200 +++ /var/tmp/diff_new_pack.XWaOBL/_new 2026-08-22 21:37:34.915304939 +0200 @@ -26,12 +26,13 @@ Group: Development/Languages/Other URL: https://github.com/helm/helm Source0: %{name}-%{version}.tar.gz -Source1: vendor.tar.gz +Source1: vendor.tar.zst Patch1: CVE-2026-63308.patch Provides: helm = %{version} BuildRequires: fish BuildRequires: golang-packaging BuildRequires: zsh +BuildRequires: zstd %if 0%{?suse_version} >= 1600 && 0%{?suse_version} < 1699 # go is not available on Framework one for x86 ExcludeArch: %ix86 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.XWaOBL/_old 2026-08-22 21:37:34.981307299 +0200 +++ /var/tmp/diff_new_pack.XWaOBL/_new 2026-08-22 21:37:34.984307406 +0200 @@ -12,8 +12,13 @@ <service name="set_version" mode="manual"> </service> <service name="go_modules" mode="manual"> + <param name="compression">zst</param> + <param name="replace">golang.org/x/mod=golang.org/x/[email protected]</param> <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> <param name="replace">golang.org/x/text=golang.org/x/[email protected]</param> + <param name="replace">oras.land/oras-go/v2=oras.land/oras-go/[email protected]</param> + <param name="replace">google.golang.org/grpc=google.golang.org/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel=go.opentelemetry.io/[email protected]</param> </service> <!-- services below are running at buildtime --> <service name="tar" mode="buildtime">
