Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package trufflehog for openSUSE:Factory checked in at 2026-08-29 17:42:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/trufflehog (Old) and /work/SRC/openSUSE:Factory/.trufflehog.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "trufflehog" Sat Aug 29 17:42:37 2026 rev:130 rq:1374517 version:3.97.1 Changes: -------- --- /work/SRC/openSUSE:Factory/trufflehog/trufflehog.changes 2026-07-28 17:56:49.318191334 +0200 +++ /work/SRC/openSUSE:Factory/.trufflehog.new.1265/trufflehog.changes 2026-08-29 17:43:45.753017562 +0200 @@ -1,0 +2,50 @@ +Fri Aug 28 07:11:50 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 3.97.1: + * Carry GitHub App installation ID on repo units (#5215) + * Refine SECURITY.md (#5216) + * [SCAN-101] s3 source accept persisted unit envelopes in UnmarshalSourceUnit (#5224) + * preallocate bindings capacity in dockerhub and groq, with unit tests (#5213) + * Doubled timeout, as MongoDB secrets are repeatedly hitting this and failing to verify (#5222) + * [SCAN-1020] neon scram pgx (#5217) + * fix(detectors/docker): don't greedy match in keyPat (#5214) + * docs: add generic config-secret custom detector example (#5195) + * Fix GHEC with Data Residency (`*.ghe.com`) base URL (#4777) + * Update module github.com/go-git/go-git/v5 to v5.19.2 [SECURITY] (#5196) +- Update to version 3.97.0: + * fix(detectors/harness): allow underscore in PAT account segment (#5153) + * Add AWS Secrets Manager metadata type (#5210) + * update huggingface to fix unbounded resources bug (#5204) + * fix blogger detector to use Google API prefix instead of generic hex string (#5203) + * Add custom endpoint support to the S3 source (#5202) + * fix(jiratoken): stop 202 reverification retry loop (#5200) + * Add SolarWinds Observability detector (#5199) + * Deprecated bingsubscriptionkey detector (#5179) + * Anthropic detector: surface API error detail on non-2xx verification (#5180) + * Deprecate AppOptics detector (#5198) + * Update regex pattern and 403 handling in the Lob detector to fix false positives (#5188) + * Updated protos to support bitbucket Api token authentication (#5171) + * fix(github): fallback resource Name to avoid empty-string proto validation failure (#5182) + * Add Figma Personal Access Token v3 Detector (#4790) + * surface git clone errors at v(0) (#5162) + * [INS-456] Add Microsoft Teams Webhook V2 detector (#4902) + * make cwd-changing normalization tests non-parallel to fix flaky clone failures (#5178) + * [SCAN-1018] Treat SlackWebhook invalid_token (HTTP 400) as determinate not-live (#5177) + * feat(output): add SARIF output format for GitHub code scanning (#5165) + * Give each clone its own directory under `--clone-path` (#5175) + * [INS-344] Add New Relic Mobile App Token Detector (#4810) + * Update aws-sdk-go-v2 monorepo (#4890) + * Update github-actions (#5036) + * Update github.com/shurcooL/githubv4 digest to 2402fdf (#5038) + * Set CircleCI project count to 3 in tests (#5166) + * fix(sources): stop UnitHook Close racing in-flight Finish sends (#5154) + * [INS-345] Add New Relic Insights Query Key detector (#4781) + * [INS-339] Add New Relic User Key detector (#4794) + * [INS-348] Add New Relic Browser Key detector (#4769) + * [INS-318] Add New Relic License Key Detector (#4760) + * Update github.com/avast/apkparser digest to 7fcaee4 (#5037) + * Remove url tag from common HTTP client metrics (#5158) + * Update module go.mongodb.org/mongo-driver to v1.17.7 [SECURITY] (#5058) + * fix(detectors/privatekey): report encrypted keys with uncrackable passphrases (#5127) + +------------------------------------------------------------------- Old: ---- trufflehog-3.96.0.obscpio New: ---- trufflehog-3.97.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ trufflehog.spec ++++++ --- /var/tmp/diff_new_pack.vpwCRK/_old 2026-08-29 17:43:46.890057779 +0200 +++ /var/tmp/diff_new_pack.vpwCRK/_new 2026-08-29 17:43:46.892057849 +0200 @@ -17,7 +17,7 @@ Name: trufflehog -Version: 3.96.0 +Version: 3.97.1 Release: 0 Summary: CLI tool to find exposed secrets in source and archives License: AGPL-3.0-or-later AND MPL-2.0 AND LGPL-3.0-or-later ++++++ _service ++++++ --- /var/tmp/diff_new_pack.vpwCRK/_old 2026-08-29 17:43:46.933059300 +0200 +++ /var/tmp/diff_new_pack.vpwCRK/_new 2026-08-29 17:43:46.937059441 +0200 @@ -2,11 +2,11 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/trufflesecurity/trufflehog.git</param> <param name="scm">git</param> - <param name="revision">refs/tags/v3.96.0</param> - <param name="match-tag">v*</param> - <param name="versionformat">@PARENT_TAG@</param> - <param name="versionrewrite-pattern">v(.*)</param> - <param name="changesgenerate">enable</param> + <param name="revision">refs/tags/v3.97.1</param> + <param name="match-tag">v*</param> + <param name="versionformat">@PARENT_TAG@</param> + <param name="versionrewrite-pattern">v(.*)</param> + <param name="changesgenerate">enable</param> </service> <service name="set_version" mode="manual"/> <service name="tar" mode="buildtime"/> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.vpwCRK/_old 2026-08-29 17:43:46.959060219 +0200 +++ /var/tmp/diff_new_pack.vpwCRK/_new 2026-08-29 17:43:46.964060396 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/trufflesecurity/trufflehog.git</param> - <param name="changesrevision">6f3c981e7b77f235fd2702dd74af25fc4b72bf11</param></service></servicedata> + <param name="changesrevision">20652fbbdefffcdaa493a5bf57ab2ac6b1db715b</param></service></servicedata> (No newline at EOF) ++++++ trufflehog-3.96.0.obscpio -> trufflehog-3.97.1.obscpio ++++++ ++++ 16601 lines of diff (skipped) ++++++ trufflehog.obsinfo ++++++ --- /var/tmp/diff_new_pack.vpwCRK/_old 2026-08-29 17:43:48.912129298 +0200 +++ /var/tmp/diff_new_pack.vpwCRK/_new 2026-08-29 17:43:48.928129864 +0200 @@ -1,5 +1,5 @@ name: trufflehog -version: 3.96.0 -mtime: 1784914726 -commit: 6f3c981e7b77f235fd2702dd74af25fc4b72bf11 +version: 3.97.1 +mtime: 1787583849 +commit: 20652fbbdefffcdaa493a5bf57ab2ac6b1db715b ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/trufflehog/vendor.tar.gz /work/SRC/openSUSE:Factory/.trufflehog.new.1265/vendor.tar.gz differ: char 29, line 1
