Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package hauler for openSUSE:Factory checked in at 2026-10-02 23:09:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/hauler (Old) and /work/SRC/openSUSE:Factory/.hauler.new.1631729 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "hauler" Fri Oct 2 23:09:04 2026 rev:27 rq:1382130 version:2.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/hauler/hauler.changes 2026-09-12 21:26:01.951235460 +0200 +++ /work/SRC/openSUSE:Factory/.hauler.new.1631729/hauler.changes 2026-10-02 23:09:07.980850138 +0200 @@ -1,0 +2,18 @@ +Fri Oct 2 14:08:33 UTC 2026 - Dirk Müller <[email protected]> + +- update to 2.1.1: + * bumped go version to v1.26.7 (backport #771) + * https registry auth fix (backport #763) + * adjust supporting artifact retrieval (backport #777) + * reject --platform on digest-pinned multi-platform images + * fix: serve registry returns an empty /v2/_catalog list + * added airgapped support for install.sh and added windows + install.ps1 + * added/fixed basic auth with registry and fileserver + * fixed store inventory race with concurrent processes + * added type filter to store copy + * fixed missing dirs in containers + * updated github workflows with versions, permissions, and + concurrency + +------------------------------------------------------------------- @@ -27 +45,2 @@ -- update to 2.1.0 (bsc#1265425, CVE-2026-41888): +- update to 2.1.0 (bsc#1265425, CVE-2026-41888, + bsc#1283673, CVE-2026-63209): Old: ---- hauler-2.1.0.tar.gz New: ---- hauler-2.1.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ hauler.spec ++++++ --- /var/tmp/diff_new_pack.PoqCMY/_old 2026-10-02 23:09:10.228944118 +0200 +++ /var/tmp/diff_new_pack.PoqCMY/_new 2026-10-02 23:09:10.232944285 +0200 @@ -17,8 +17,8 @@ Name: hauler -Version: 2.1.0 -%global git_commit ea64cff66fae4f4c3cf5b5ab9195765cbdae8dbd +Version: 2.1.1 +%global git_commit f2511b1d6a809832c128b6bb8ab33fd34b1dd927 Release: 0 Summary: Airgap Swiss Army Knife License: Apache-2.0 @@ -30,7 +30,7 @@ BuildRequires: cosign BuildRequires: golang-packaging BuildRequires: zstd -BuildRequires: golang(API) = 1.26 +BuildRequires: golang(API) = 1.27 %description Rancher Government Hauler simplifies the airgap experience without requiring ++++++ _service ++++++ --- /var/tmp/diff_new_pack.PoqCMY/_old 2026-10-02 23:09:10.328948298 +0200 +++ /var/tmp/diff_new_pack.PoqCMY/_new 2026-10-02 23:09:10.333948507 +0200 @@ -2,9 +2,6 @@ <service name="download_files" mode="manual"/> <service name="go_modules" mode="manual"> <param name="compression">zst</param> - <param name="replace">google.golang.org/grpc=google.golang.org/[email protected]</param> - <param name="replace">golang.org/x/crypto=golang.org/x/[email protected]</param> - <param name="replace">github.com/containerd/containerd/v2=github.com/containerd/containerd/[email protected]</param> </service> </services> ++++++ hauler-2.1.0.tar.gz -> hauler-2.1.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/hauler/hauler-2.1.0.tar.gz /work/SRC/openSUSE:Factory/.hauler.new.1631729/hauler-2.1.1.tar.gz differ: char 20, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/hauler/vendor.tar.zst /work/SRC/openSUSE:Factory/.hauler.new.1631729/vendor.tar.zst differ: char 7, line 1
