Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package netbird for openSUSE:Factory checked in at 2026-09-19 22:22:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/netbird (Old) and /work/SRC/openSUSE:Factory/.netbird.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "netbird" Sat Sep 19 22:22:45 2026 rev:47 rq:1379014 version:0.79.0 Changes: -------- --- /work/SRC/openSUSE:Factory/netbird/netbird.changes 2026-09-17 15:23:01.043032152 +0200 +++ /work/SRC/openSUSE:Factory/.netbird.new.383539/netbird.changes 2026-09-19 22:24:15.904418441 +0200 @@ -1,0 +2,125 @@ +Fri Sep 18 19:02:34 UTC 2026 - Marcus Rueckert <[email protected]> + +- Update to 0.79.0 + - Client Improvements + - Added MDM policy bridges and shared enforcement for the iOS + and Android SDKs, keeping managed settings and profile + restrictions consistent with the desktop client. #6435 by + @riccardomanfrin + - Accepted MDM boolean values delivered as JSON numbers, so + policies using 0 and 1 are applied correctly. #7471 by + @riccardomanfrin + - Compared MDM-managed URLs by their normalized endpoints, + avoiding false conflicts between equivalent URLs. #7472 by + @riccardomanfrin + - Refreshed system information on every management sync + reconnect, keeping local network addresses and posture + information current after network changes. #7409 by @pappz + - Used host prefixes for Android TUN addresses so local network + protection does not classify the entire overlay as a local + network. #7414 by @pappz + - Replaced the eBPF DNS forwarder with UDP and TCP DNAT rules + when the resolver cannot listen on port 53, with rollback and + cleanup for incomplete redirects. #7439 by @lixmal + - Fixed a relay address race that could advertise a URL and IP + from different connections during a reconnect. #7498 by + @pappz + - Returned the context cancellation or timeout error when an + SSH handshake is interrupted. #7426 by @pappz + - Updated wireguard-go to 8bf8fa968f1a, fixing keepalive + buffer-pool stalls, keeping timer paths non-blocking, and + making netstack interface shutdown idempotent. #7532 by + @pappz + - Allowed buffer-pool limits to be adjusted while a device is + stalled, and bounded proxy-wide updates so one stuck client + does not block the others. #7452 by @riccardomanfrin + - Management Improvements + - Restored networks using individual peers as routers in the + SQLite network map when peer_groups is empty or null. #7418 + by @mlsmaycon + - Fixed SQLite network-map reads for users with null automatic + groups and expanded coverage for empty and null router + groups. #7425 by @dmitri-netbird + - Included offline peers when scheduling login expiration and + ensured expired peers are disconnected, while protecting + peers that have just logged in again. #7467 by + @pascal-fischer + - Applied duplicate-key sync protection to user-owned peers as + well as peers registered with setup keys. #7427 by + @pascal-fischer + - Validated that a peer exists before adding it to a group. + #7486 by @pascal-fischer + - Prevented other users from deleting the account owner. #7456 + by @pascal-fischer + - Hardened OIDC issuer validation by requiring HTTPS, rejecting + credentials, query strings, and fragments in issuer URLs, + refusing discovery redirects, and limiting discovery response + size. #7435 by @bcmmbaga + - Cleaned up resources when WebSocket-to-gRPC proxy connections + close. #7484 by @dmitri-netbird + - Agent Network + - Added managed proxy provisioning endpoints and response types + to the API specification. #7433 by @bison + - Prevented deletion of groups referenced by Agent Network + budget rules, preserving the rules' spending limits. #7450 by + @Tyagiquamar + - Reverse Proxy Improvements + - Added NB_PROXY_UPSTREAM_HTTP_VERSION with auto, 1.1, and 2 + options. The default auto mode negotiates with HTTPS + upstreams and falls back to HTTP/1.1 when an upstream's + negotiated HTTP/2 connection fails at the protocol level. + #7410 by @lixmal + - Enforced group access both when issuing session cookies and + when accepting existing sessions. #7240 by @lixmal + - Required custom domain validation before creating a service + or moving one to a different custom domain. #7341 by + @mlsmaycon + - Added a 48-hour validation window for custom domain + registrations. Existing pending registrations receive a fresh + window on upgrade; expired registrations are removed unless + they still have services attached. #7497 by @mlsmaycon + - Rejected unsupported direct-upstream IP addresses, including + loopback, multicast, link-local, and IPv6 addresses with zone + identifiers. #7400 by @dmitri-netbird + - Validated domain names before creating certificate lock + files. #7501 by @pascal-fischer + - Self-Hosting Improvements + - Added a rootless Red Hat UBI image for AMD64 and ARM64, + published with the 0.79.0-rootless-ubi tag. #7469 by @jnfrati + - Supported arbitrary non-root UIDs without a passwd entry, as + used by OpenShift. #7440 by @jnfrati + - Added RPM dependencies, license and documentation files, a + generated changelog, and an example /etc/sysconfig/netbird to + meet Red Hat software certification packaging requirements. + #7562, #7573 by @mlsmaycon + - Kept deployments using the embedded identity provider on a + single account, with stricter configuration checks and + migration handling. #7380 by @bcmmbaga + - Passed the combined server's TLS configuration through to the + management listener. #7499 by @pascal-fischer + - Updated peer connection-IP extraction to honor configured + TrustedPeers, with X-Forwarded-For taking precedence over + X-Real-IP. The final release preserves trust in all IPv4 and + IPv6 sources when TrustedPeers is empty; configure your + reverse proxy's address or network to restrict which sources + can supply forwarded-IP headers. #7454, #7589 by @bcmmbaga; + #7561, #7577 by @dmitri-netbird and @bcmmbaga + - Internal, CI, and Docs + - Added atomic SetNX and GetDel cache operations. #7084 by + @bcmmbaga + - Allowed binaries embedding management to extend its command + tree. #7483 by @bison + - Extracted peer update handling and added test coverage. #7338 + by @dmitri-netbird + - Replaced a hard-coded temporary directory in WebSocket + adapter tests with the platform's temporary directory. #7503 + by @dmitri-netbird + - Switched the MinIO test image to quay.io after it became + unavailable on Docker Hub. #7516 by @Silex + - Preserved image variant suffixes in snapshot tags. #7511 by + @jnfrati + - Skipped the protobuf breaking-change check on branch-creation + pushes, which have no previous commit to compare against. + #7411 by @bison + +------------------------------------------------------------------- Old: ---- netbird-0.78.2.obscpio New: ---- netbird-0.79.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ netbird.spec ++++++ --- /var/tmp/diff_new_pack.ssaio7/_old 2026-09-19 22:24:17.194472244 +0200 +++ /var/tmp/diff_new_pack.ssaio7/_new 2026-09-19 22:24:17.196472328 +0200 @@ -32,7 +32,7 @@ %bcond_with stub_config Name: netbird -Version: 0.78.2 +Version: 0.79.0 Release: 0 Summary: Mesh VPN based on WireGuard License: AGPL-3.0-only AND BSD-3-Clause ++++++ _service ++++++ --- /var/tmp/diff_new_pack.ssaio7/_old 2026-09-19 22:24:17.233473871 +0200 +++ /var/tmp/diff_new_pack.ssaio7/_new 2026-09-19 22:24:17.236473996 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/netbirdio/netbird.git</param> <param name="scm">git</param> <param name="package-meta">yes</param> - <param name="revision">refs/tags/v0.78.2</param> + <param name="revision">refs/tags/v0.79.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">disable</param> ++++++ netbird-0.78.2.obscpio -> netbird-0.79.0.obscpio ++++++ /work/SRC/openSUSE:Factory/netbird/netbird-0.78.2.obscpio /work/SRC/openSUSE:Factory/.netbird.new.383539/netbird-0.79.0.obscpio differ: char 50, line 1 ++++++ netbird.obsinfo ++++++ --- /var/tmp/diff_new_pack.ssaio7/_old 2026-09-19 22:24:17.300476665 +0200 +++ /var/tmp/diff_new_pack.ssaio7/_new 2026-09-19 22:24:17.303476790 +0200 @@ -1,5 +1,5 @@ name: netbird -version: 0.78.2 -mtime: 1789402990 -commit: 300b6695012158bdede367738a0389a25d83cf04 +version: 0.79.0 +mtime: 1789745353 +commit: 396795ebb6822402ad4eff88c90682d99f77d987 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/netbird/vendor.tar.zst /work/SRC/openSUSE:Factory/.netbird.new.383539/vendor.tar.zst differ: char 8, line 1
