Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package otpclient for openSUSE:Factory checked in at 2026-10-26 10:00:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/otpclient (Old) and /work/SRC/openSUSE:Factory/.otpclient.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "otpclient" Mon Oct 26 10:00:40 2026 rev:59 rq:1392417 version:5.3.0 Changes: -------- --- /work/SRC/openSUSE:Factory/otpclient/otpclient.changes 2026-10-06 19:18:14.701105606 +0200 +++ /work/SRC/openSUSE:Factory/.otpclient.new.2252680/otpclient.changes 2026-10-26 10:01:51.336377291 +0100 @@ -1,0 +2,92 @@ +Fri Oct 23 07:29:52 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Update to version 5.3.0: + * Feature release. Tokens that fail validation used to be preserved in the + database file with a single toast to say so and nothing to do about it; a + banner now counts them and opens a review where each one can be repaired or + deleted. Several tokens can be selected at once to move to a group, export + or delete, a group can be renamed or removed across all its tokens, and an + import shows what it will add and what it will skip before anything is + written. Underneath, reading a backup, writing an export and changing the + database password or key-derivation parameters now run off the main thread, + a stored algorithm in lowercase no longer silently produces SHA1 codes, and + otpauth links are checked field by field instead of being imported with + guessed values. There is no on-disk format change; existing databases open + unchanged.: + + NEW: review and repair tokens the app had to set aside. A banner above + the token list counts them and opens a review dialog. Each token can be + repaired in a form that validates every field before saving, or deleted. + A repair that fails validation changes nothing and says why, a repaired + token is stored with its type and algorithm in their canonical upper-case + spelling, and deleting asks first, because there is no Undo and the + preserved token may be the only copy of its secret + + NEW: select several tokens. The Select button in the header bar shows a + checkbox on every row, and the checked tokens can be assigned to a group, + exported, or deleted; a bulk delete can be undone from its toast. Only + checked tokens that are still visible are acted on, so changing the + search text or the group filter unchecks the ones it hides. Tokens from + other databases that appear in search results are read-only + + NEW: Manage Groups, in the main menu, renames a group across all its + tokens or removes the group from them, as one transaction + + NEW: import preview. Choosing a file lists what it contains before + anything is written. Exact duplicates are unchecked, tokens that share an + issuer and account but differ in secret are flagged, and only the checked + tokens are imported. The file is parsed on a worker thread, so a large + backup no longer freezes the window + + NEW: the edit dialog for an HOTP token can raise the stored counter, to + catch up with a provider that is ahead. It cannot be lowered, and a value + outside the supported range is refused + + NEW: a search or filter that matches nothing now shows a "No matching + tokens" page with a Clear Filters button, which also clears a filter that + is only a group + + IMPROVED: writing an export, and changing the database password or the + key-derivation parameters, no longer freeze the window during the + Argon2id run. The token actions are disabled until the job finishes, the + application stays open until it does, a password change reports how it + ended, and one that finishes after the app locked still reaches the + keyring + + IMPROVED: the export dialog stays open and reports "Export completed + successfully." instead of closing, and it suggests a file name that + OTPClient's own import dialog accepts: .txt for FreeOTP+ and .bin for + encrypted Authenticator Pro + + IMPROVED: group-qualified searches (group:name or #name) match every + group whose name contains the text. Before, the first matching group was + selected and filtered on exactly, which hid the others + + IMPROVED: the QR code shown for a token has the white quiet zone that + scanners require around it + + IMPROVED: cross-database search results are refreshed when another + database file changes, including when a token is moved into it, instead + of staying stale until a lock or a database switch + + FIX: a token stored with its algorithm in lowercase, such as "sha256", + was accepted on load but its codes were generated with SHA1, because the + generators matched the name case-sensitively and fell back to SHA1. They + now accept any case, as the validator always did + + FIX: an Auto-Lock timeout that is not one of the presets, which an + imported settings file can carry, was shown in Settings as the first + preset although the stored value was different. It now appears as a + Custom entry, and a zero or oversized stored value is replaced with five + minutes instead of becoming a negative timeout + + CHANGE: otpauth links are checked field by field. An HOTP link with no + counter, an unsupported algorithm, or a digits, period or counter value + out of range is refused with the reason, in the import dialog, the + command line, a scanned QR code and a link pasted into Add Token, instead + of being imported with a default. Before, a bad period or digits value + was silently replaced by its default + + CHANGE: importing settings validates what it reads. Colors must be + hexadecimal (#rgb, #rgba, #rrggbb or #rrggbbaa) and the Auto-Lock timeout + must be at least one second; anything else is skipped. The unused + search-column key is no longer exported + + CHANGE: otpclient-cli --show in table format prints an Account and Issuer + line above each code, so several matches can be told apart + + TEST: GUI flow tests now cover quarantine repair and delete, bulk + selection and its filter, the import preview, group management, Undo + while a database job runs, password-change completion with and without a + lock, and the cross-database change monitors, alongside transaction tests + for reordered duplicates and hash collisions + +------------------------------------------------------------------- +Fri Oct 23 07:29:28 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Migrate to _service for easy source management. + +------------------------------------------------------------------- Old: ---- otpclient.keyring v5.2.2.tar.gz v5.2.2.tar.gz.asc New: ---- OTPClient-5.3.0.tar.xz OTPClient.obsinfo _service ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ otpclient.spec ++++++ --- /var/tmp/diff_new_pack.afnBmi/_old 2026-10-26 10:01:52.056407500 +0100 +++ /var/tmp/diff_new_pack.afnBmi/_new 2026-10-26 10:01:52.058407584 +0100 @@ -18,15 +18,13 @@ %define uclname OTPClient Name: otpclient -Version: 5.2.2 +Version: 5.3.0 Release: 0 Summary: Simple GTK+ client for managing TOTP and HOTP License: GPL-3.0-or-later Group: Productivity/Security URL: https://github.com/paolostivanin/%{name} -Source0: https://github.com/paolostivanin/%{name}/archive/v%{version}.tar.gz -Source1: https://github.com/paolostivanin/%{uclname}/releases/download/v%{version}/v%{version}.tar.gz.asc -Source2: otpclient.keyring +Source0: %{uclname}-%{version}.tar.xz BuildRequires: cmake BuildRequires: gcc BuildRequires: gcc-c++ ++++++ OTPClient.obsinfo ++++++ name: OTPClient version: 5.3.0 mtime: 1792590464 commit: 6218b85b9ce416f4d93d7d75d05a0e9c8e14f8f3 ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.afnBmi/_old 2026-10-26 10:01:52.127410479 +0100 +++ /var/tmp/diff_new_pack.afnBmi/_new 2026-10-26 10:01:52.132410688 +0100 @@ -1,7 +1,7 @@ -mtime: 1791220076 -commit: 78e50474e35b129584a7f88afe955f79c5494df7295b3d65c9d2eb570ea17d03 +mtime: 1792835563 +commit: a475249c0d1df9813b1036051fea7cf27185edafd079daaa210a412548e017bd url: https://src.opensuse.org/GNOME/otpclient -revision: 78e50474e35b129584a7f88afe955f79c5494df7295b3d65c9d2eb570ea17d03 +revision: a475249c0d1df9813b1036051fea7cf27185edafd079daaa210a412548e017bd trackingbranch: factory projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ _service ++++++ <?xml version="1.0"?> <services> <service name="obs_scm" mode="manual"> <param name="scm">git</param> <param name="url">https://github.com/paolostivanin/OTPClient.git</param> <param name="revision">v5.3.0</param> <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param> <param name="versionrewrite-pattern">v?(.*)\+0</param> <param name="versionrewrite-replacement">\1</param> <!-- <param name="changesgenerate">enable</param> --> </service> <service name="tar" mode="manual"/> <service name="recompress" mode="manual"> <param name="file">*.tar</param> <param name="compression">xz</param> </service> <service name="set_version" mode="manual"/> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-24 11:52:43.000000000 +0200 @@ -0,0 +1,5 @@ +*.obscpio +*.osc +_build.* +.pbuild +osc-collab.*
