Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package hauler for openSUSE:Factory checked in at 2026-10-20 12:37:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/hauler (Old) and /work/SRC/openSUSE:Factory/.hauler.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "hauler" Tue Oct 20 12:37:04 2026 rev:28 rq:1386177 version:2.1.2 Changes: -------- --- /work/SRC/openSUSE:Factory/hauler/hauler.changes 2026-10-02 23:09:07.980850138 +0200 +++ /work/SRC/openSUSE:Factory/.hauler.new.3698736/hauler.changes 2026-10-20 12:37:38.925832891 +0200 @@ -1,0 +2,11 @@ +Sun Oct 18 22:08:43 UTC 2026 - Dirk Müller <[email protected]> + +- update to 2.1.2 (bsc#1285270, CVE-2026-78669): + * It fixes credential and presigned url leaks, local chart + handling, haul formats from `--filename`, and `hauler store + copy` with image-type files and cosign bundles. It adds + `hauler`, `hauler-dev`, and `hauler@` homebrew casks, and it + is the first release published through them. It also bumps go + to `1.27.2`. + +------------------------------------------------------------------- Old: ---- hauler-2.1.1.tar.gz New: ---- hauler-2.1.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ hauler.spec ++++++ --- /var/tmp/diff_new_pack.k2WfkL/_old 2026-10-20 12:37:40.627904240 +0200 +++ /var/tmp/diff_new_pack.k2WfkL/_new 2026-10-20 12:37:40.629904324 +0200 @@ -17,8 +17,8 @@ Name: hauler -Version: 2.1.1 -%global git_commit f2511b1d6a809832c128b6bb8ab33fd34b1dd927 +Version: 2.1.2 +%global git_commit f16c6e34474320ccff846aa7c7147fcd0b875fcf Release: 0 Summary: Airgap Swiss Army Knife License: Apache-2.0 @@ -34,8 +34,8 @@ %description Rancher Government Hauler simplifies the airgap experience without requiring -users to adopt a specific workflow. Hauler simplifies the airgapping process, -by representing assets (images, charts, files, etc...) as content and +users to adopt a specific workflow. Hauler simplifies the airgapping process +by representing assets (images, charts, files, etc.) as content and collections to allow users to easily fetch, store, package, and distribute these assets with declarative manifests or through the command line. @@ -57,9 +57,10 @@ cp -p %{_bindir}/cosign cmd/hauler/binaries/cosign-linux-amd64 %endif # s -w -X {{ .Env.vpkg }}.gitVersion={{ .Version }} -X {{ .Env.vpkg }}.gitCommit={{ .ShortCommit }} -X {{ .Env.vpkg }}.gitTreeState={{if .IsGitDirty}}dirty{{else}}clean{{end}} -X {{ .Env.vpkg }}.buildDate={{ .Date }} -go build -o hauler -mod=vendor -buildmode=pie -trimpath -ldflags "-s -w -X github.com/rancherfederal/hauler/internal/version.gitVersion=%{version} \ - -X github.com/rancherfederal/hauler/internal/version.gitCommit=%{git_commit} \ - -X github.com/rancherfederal/hauler/internal/version.gitTreeState=clean" cmd/hauler/main.go + +go build -o hauler -mod=vendor -buildmode=pie -trimpath -ldflags "-s -w -X hauler.dev/go/hauler/v2/internal/version.gitVersion=%{version} \ + -X hauler.dev/go/hauler/v2/internal/version.gitCommit=%{git_commit} \ + -X hauler.dev/go/hauler/v2/internal/version.gitTreeState=clean" cmd/hauler/main.go %install install -D -m 755 hauler %{buildroot}/%{_bindir}/%{name} ++++++ hauler-2.1.1.tar.gz -> hauler-2.1.2.tar.gz ++++++ /work/SRC/openSUSE:Factory/hauler/hauler-2.1.1.tar.gz /work/SRC/openSUSE:Factory/.hauler.new.3698736/hauler-2.1.2.tar.gz differ: char 20, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/hauler/vendor.tar.zst /work/SRC/openSUSE:Factory/.hauler.new.3698736/vendor.tar.zst differ: char 7, line 1
