Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rekor for openSUSE:Factory checked in at 2026-08-28 19:54:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rekor (Old) and /work/SRC/openSUSE:Factory/.rekor.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rekor" Fri Aug 28 19:54:50 2026 rev:35 rq:1374351 version:1.5.4 Changes: -------- --- /work/SRC/openSUSE:Factory/rekor/rekor.changes 2026-08-21 16:59:45.146684832 +0200 +++ /work/SRC/openSUSE:Factory/.rekor.new.1265/rekor.changes 2026-08-28 19:57:48.759852586 +0200 @@ -1,0 +2,22 @@ +Fri Aug 28 07:40:31 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.5.4: + * add changelog for v1.5.4 release (#2944) + * Apply proactive hardening against malformed requests + (GHSA-843x-px86-vq42) (#2945) + * build(deps): Bump github.com/go-swagger/go-swagger from 0.33.2 + to 0.36.4 in /hack/tools in the all group across 1 directory + (#2840) + * better handle connection issues (#2931) + * build(deps): Bump github.com/tink-crypto/tink-go-gcpkms/v2 from + 2.2.0 to 2.4.0 (#2939) + * remove repetitive viper lookups from api endpoints (#2922) + * move CI containers to GHCR (#2943) + * build(deps): Bump the all group across 1 directory with 3 + updates (#2942) + * build(deps): Bump golang.org/x/crypto from 0.54.0 to 0.55.0 + (#2938) + * build(deps): Bump cloud.google.com/go/iam from 1.11.0 to 1.13.0 + (#2937) + +------------------------------------------------------------------- Old: ---- rekor-1.5.3.obscpio New: ---- rekor-1.5.4.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rekor.spec ++++++ --- /var/tmp/diff_new_pack.7IhhTW/_old 2026-08-28 19:57:50.643918456 +0200 +++ /var/tmp/diff_new_pack.7IhhTW/_new 2026-08-28 19:57:50.645918526 +0200 @@ -19,7 +19,7 @@ %define apps cli server Name: rekor -Version: 1.5.3 +Version: 1.5.4 Release: 0 Summary: Supply Chain Transparency Log License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.7IhhTW/_old 2026-08-28 19:57:50.777923141 +0200 +++ /var/tmp/diff_new_pack.7IhhTW/_new 2026-08-28 19:57:50.790923596 +0200 @@ -1,9 +1,9 @@ <services> <service name="obs_scm" mode="manual"> - <param name="url">https://github.com/sigstore/rekor</param> + <param name="url">https://github.com/sigstore/rekor.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v1.5.3</param> + <param name="revision">refs/tags/v1.5.4</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.7IhhTW/_old 2026-08-28 19:57:50.844925484 +0200 +++ /var/tmp/diff_new_pack.7IhhTW/_new 2026-08-28 19:57:50.854925834 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> - <param name="url">https://github.com/sigstore/rekor</param> - <param name="changesrevision">7d9dcffcc27c4912e7d17fc768db01aa2d5cf26c</param></service></servicedata> + <param name="url">https://github.com/sigstore/rekor.git</param> + <param name="changesrevision">a36bd716fd0d81c314092718f37b53dc26b2af38</param></service></servicedata> (No newline at EOF) ++++++ rekor-1.5.3.obscpio -> rekor-1.5.4.obscpio ++++++ ++++ 18072 lines of diff (skipped) ++++++ rekor.obsinfo ++++++ --- /var/tmp/diff_new_pack.7IhhTW/_old 2026-08-28 19:57:51.755957335 +0200 +++ /var/tmp/diff_new_pack.7IhhTW/_new 2026-08-28 19:57:51.766957720 +0200 @@ -1,5 +1,5 @@ name: rekor -version: 1.5.3 -mtime: 1782942632 -commit: 7d9dcffcc27c4912e7d17fc768db01aa2d5cf26c +version: 1.5.4 +mtime: 1787243146 +commit: a36bd716fd0d81c314092718f37b53dc26b2af38 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/rekor/vendor.tar.zst /work/SRC/openSUSE:Factory/.rekor.new.1265/vendor.tar.zst differ: char 5, line 1
