Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tekton-cli for openSUSE:Factory checked in at 2026-09-22 15:51:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tekton-cli (Old) and /work/SRC/openSUSE:Factory/.tekton-cli.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tekton-cli" Tue Sep 22 15:51:53 2026 rev:11 rq:1379567 version:0.46.1 Changes: -------- --- /work/SRC/openSUSE:Factory/tekton-cli/tekton-cli.changes 2026-08-06 16:26:47.154043037 +0200 +++ /work/SRC/openSUSE:Factory/.tekton-cli.new.383539/tekton-cli.changes 2026-09-22 15:52:44.503047455 +0200 @@ -1,0 +2,36 @@ +Tue Sep 22 04:39:10 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.46.1: + This patch release includes dependency updates and security fixes + addressing multiple CVEs and improving dependency security. It + also includes fixes for tar layer allocation, TLS handling, and + plugin validation to improve overall security and reliability. + * [release-v0.46.x] bump google.golang.org/protobuf from + 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 in #3150 + * [release-v0.46.x] bump github.com/google/go-containerregistry + from 0.21.8 to 0.21.9 in #3147 + * [release-v0.46.x] bump the all group with 4 updates in #3153 + * [release-v0.46.x] bump the go-k8s-dependencies group with 3 + updates in #3171 + * [release-v0.46.x] bump the all group with 3 updates in #3175 + * [release-v0.46.x] bump the all group with 3 updates in #3198 + * [release-v0.46.x] bump google.golang.org/grpc from 1.82.1 to + 1.82.2 in #3196 + * [release-v0.46.x] bump the all group with 3 updates in #3217 + * [release-v0.46.x] bump github.com/go-jose/go-jose/v4 from 4.1.4 + to 4.1.5 in #3215 + * [cherry-pick: release-v0.46.x] fix: prevent unbounded tar layer + allocation in #3228 + * [cherry-pick: release-v0.46.x] fix(bundle): gate name.Insecure + behind --remote-skip-tls (CWE-319) in #3232 + * [release-v0.46.x] fix(plugins): reject relative plugin dirs to + prevent cwd fallback (CWE-426) in #3220 + * [cherry-pick: release-v0.46.x] fix: add execute-bit check in + FindPlugin in #3238 + * [release-v0.46.x] bump chainguard-dev/actions/kind-diag from + 1.6.34 to 1.6.35 in the all group in #3262 + * [release-v0.46.x] chore: add rebase and cherry-pick slash + command workflows in #3224 + * chore(deps): update Go and deps to fix CVEs in #3276 + +------------------------------------------------------------------- Old: ---- tekton-cli-0.46.0.obscpio New: ---- tekton-cli-0.46.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tekton-cli.spec ++++++ --- /var/tmp/diff_new_pack.eHJmx7/_old 2026-09-22 15:52:47.535173090 +0200 +++ /var/tmp/diff_new_pack.eHJmx7/_new 2026-09-22 15:52:47.537173173 +0200 @@ -19,7 +19,7 @@ %define executable_name tkn Name: tekton-cli -Version: 0.46.0 +Version: 0.46.1 Release: 0 Summary: CLI for interacting with the Tekton CD system License: Apache-2.0 @@ -28,7 +28,7 @@ Source1: vendor.tar.gz BuildRequires: bash-completion BuildRequires: fish -BuildRequires: go1.26 >= 1.26.5 +BuildRequires: go1.26 >= 1.26.6 BuildRequires: zsh Provides: tkn = %{version} ++++++ _service ++++++ --- /var/tmp/diff_new_pack.eHJmx7/_old 2026-09-22 15:52:47.640177440 +0200 +++ /var/tmp/diff_new_pack.eHJmx7/_new 2026-09-22 15:52:47.649177814 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/tektoncd/cli.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v0.46.0</param> + <param name="revision">refs/tags/v0.46.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.eHJmx7/_old 2026-09-22 15:52:47.710180341 +0200 +++ /var/tmp/diff_new_pack.eHJmx7/_new 2026-09-22 15:52:47.719180714 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/tektoncd/cli</param> <param name="changesrevision">ce6edf3f84e96315ffba6752bf81620a9b90aa8d</param></service><service name="tar_scm"> <param name="url">https://github.com/tektoncd/cli.git</param> - <param name="changesrevision">a5be122db5668429f5140e914ab9d9a87ddf3b51</param></service></servicedata> + <param name="changesrevision">f88b13cffa7d1f6fe4d41ea61452e98fc4df3ad8</param></service></servicedata> (No newline at EOF) ++++++ tekton-cli-0.46.0.obscpio -> tekton-cli-0.46.1.obscpio ++++++ ++++ 7812 lines of diff (skipped) ++++++ tekton-cli.obsinfo ++++++ --- /var/tmp/diff_new_pack.eHJmx7/_old 2026-09-22 15:52:55.894519456 +0200 +++ /var/tmp/diff_new_pack.eHJmx7/_new 2026-09-22 15:52:55.898519622 +0200 @@ -1,5 +1,5 @@ name: tekton-cli -version: 0.46.0 -mtime: 1785903547 -commit: a5be122db5668429f5140e914ab9d9a87ddf3b51 +version: 0.46.1 +mtime: 1790007936 +commit: f88b13cffa7d1f6fe4d41ea61452e98fc4df3ad8 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/tekton-cli/vendor.tar.gz /work/SRC/openSUSE:Factory/.tekton-cli.new.383539/vendor.tar.gz differ: char 13, line 1
