Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package zizmor for openSUSE:Factory checked in at 2026-11-06 19:46:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/zizmor (Old) and /work/SRC/openSUSE:Factory/.zizmor.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "zizmor" Fri Nov 6 19:46:29 2026 rev:42 rq:1395467 version:1.32.0 Changes: -------- --- /work/SRC/openSUSE:Factory/zizmor/zizmor.changes 2026-10-16 20:13:01.210569788 +0200 +++ /work/SRC/openSUSE:Factory/.zizmor.new.3759290/zizmor.changes 2026-11-06 19:52:29.616407373 +0100 @@ -1,0 +2,50 @@ +Thu Nov 05 14:35:06 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.32.0: + * New Features + - zizmor now has experimental support for GitHub Actions + workflow lockfiles. Please see the limitations documentation + for more information about the current implementation and its + limitations (#2463) + * Enhancements + - zizmor's input collection is now "root-aware" by default, + meaning that invocations like zizmor . will no longer collect + inputs unless they would actually be used by GitHub Actions, + etc. This should eliminate spurious findings from (e.g.) + workflow definitions in vendored directories. See the input + collection documentation for more information. (#2454) + - zizmor's LSP now honors the didChangeWorkspaceFolders event + (#2461) + - zizmor's LSP now audits pre-commit inputs (#2485) + - zizmor now provides Windows ARM64 wheels on PyPI (#2424) + * Bug Fixes + - Fixed a bug where the bot-conditions audit did not properly + flag if: condition of jobs that call a reusable workflow + (#2457) + - Fixed a bug where the obfuscation audit would incorrectly + flag (and suggest an incorrect auto-fix for) expressions that + constant-reduce to other expressions (#2483) + - Fixed a bug where the template-injection audit did not flag + attacker-controllable contexts wrapped in fromJSON(...), such + as fromJSON(toJSON(github.event.issue.title)) (#2495) + - Fixed a bug where the template-injection audit did not flag + attacker-controllable contexts in the values of case(...), + such as case(cond, github.event.issue.title, 'x') (#2504) + - Fixed a class of bugs in the obfuscation audit where a + constant-reducible subexpression would not be replaced with a + contextually correct form (#2483) + - Fixed a bug where zizmor would incorrectly audit pre-commit + inputs that ended with .yml, despite pre-commit requiring the + .yaml suffix (#2485) + - Fixed a bug where zizmor would not honor some ignore comments + for the stale-action-refs audit (#2494) + - Fixed a bug where zizmor would not honor some ignore comments + for the ref-version-mismatch audit (#2494) + * Dependencies + - chore(deps): bump jsonschema from 0.58.6 to 0.59.0 in the + cargo group (#2486) + - chore(deps): bump the cargo group across 1 directory with 5 + updates (#2478) + - fix(deps): Bump `rustls-webpki` to 0.103.16 (#2474) + +------------------------------------------------------------------- Old: ---- zizmor-1.31.1.obscpio New: ---- zizmor-1.32.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zizmor.spec ++++++ --- /var/tmp/diff_new_pack.OZl7R3/_old 2026-11-06 19:52:36.165681596 +0100 +++ /var/tmp/diff_new_pack.OZl7R3/_new 2026-11-06 19:52:36.168681721 +0100 @@ -17,7 +17,7 @@ Name: zizmor -Version: 1.31.1 +Version: 1.32.0 Release: 0 Summary: A static analysis tool for GitHub Actions License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.OZl7R3/_old 2026-11-06 19:52:36.241684778 +0100 +++ /var/tmp/diff_new_pack.OZl7R3/_new 2026-11-06 19:52:36.253685280 +0100 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="exclude">.git</param> <param name="versionformat">@PARENT_TAG@</param> - <param name="revision">refs/tags/v1.31.1</param> + <param name="revision">refs/tags/v1.32.0</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.OZl7R3/_old 2026-11-06 19:52:36.315687877 +0100 +++ /var/tmp/diff_new_pack.OZl7R3/_new 2026-11-06 19:52:36.320688086 +0100 @@ -3,6 +3,6 @@ <param name="url">https://github.com/woodruffw/zizmor</param> <param name="changesrevision">597db4d7dc5730bdc1370197bf5678a5ca028abb</param></service><service name="tar_scm"> <param name="url">https://github.com/zizmorcore/zizmor.git</param> - <param name="changesrevision">effdb35fa7868863f11655db256d9008922fa427</param></service></servicedata> + <param name="changesrevision">21bd300700d43d9ba04b0c1fce72a89391ac80b4</param></service></servicedata> (No newline at EOF) ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/zizmor/vendor.tar.zst /work/SRC/openSUSE:Factory/.zizmor.new.3759290/vendor.tar.zst differ: char 7, line 1 ++++++ zizmor-1.31.1.obscpio -> zizmor-1.32.0.obscpio ++++++ ++++ 8869 lines of diff (skipped) ++++++ zizmor.obsinfo ++++++ --- /var/tmp/diff_new_pack.OZl7R3/_old 2026-11-06 19:52:36.846710111 +0100 +++ /var/tmp/diff_new_pack.OZl7R3/_new 2026-11-06 19:52:36.850710278 +0100 @@ -1,5 +1,5 @@ name: zizmor -version: 1.31.1 -mtime: 1792105173 -commit: effdb35fa7868863f11655db256d9008922fa427 +version: 1.32.0 +mtime: 1793661186 +commit: 21bd300700d43d9ba04b0c1fce72a89391ac80b4
