Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package perl-Sereal-Decoder for
openSUSE:Factory checked in at 2026-11-06 19:43:56
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-Sereal-Decoder (Old)
and /work/SRC/openSUSE:Factory/.perl-Sereal-Decoder.new.3759290 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-Sereal-Decoder"
Fri Nov 6 19:43:56 2026 rev:19 rq:1395901 version:7.1.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/perl-Sereal-Decoder/perl-Sereal-Decoder.changes
2026-10-31 23:10:43.715778704 +0100
+++
/work/SRC/openSUSE:Factory/.perl-Sereal-Decoder.new.3759290/perl-Sereal-Decoder.changes
2026-11-06 19:49:53.898885273 +0100
@@ -1,0 +2,45 @@
+Fri Nov 6 11:37:26 UTC 2026 - Tina Müller <[email protected]>
+
+- updated to 7.1.0 (7.001)
+ see /usr/share/doc/packages/perl-Sereal-Decoder/Changes
+
+ 7.001
+ * Read protocol versions 1 through 7. Decode portable little-endian
+ v7 floats, including IEEE binary128 on Perl builds without
+ quadmath, converting values to the local NV type.
+ * Validate v7 native long-double declarations and reject known
+ format, byte-order and size mismatches. Add
+ allow_unknown_long_double for explicitly trusted same-build reads
+ of unidentified layouts; storage sizes must still match.
+ * Preserve native floating-point behavior for protocol v1-v6 input.
+ Add legacy_float_byteorder for older data with a known source byte
+ order.
+ * Include protocol v6 v-string and negative-integer support, keyed
+ SipHash verification, checksum keys, modes, policies and defaults.
+ Add prepare_checksum_key(), get_sereal_checksum() and
+ validate_sereal_checksum().
+ * Restore regexp character-set modifiers, /n and /xx, and report the
+ required Perl version for unsupported modifiers.
+ * Harden malformed-input and object handling. Retain Decoder handles
+ across callbacks, and run output DESTROY callbacks before
+ capturing input on Perl 5.24.
+ * Restore older-Perl builds, avoid read-only regexp buffer
+ corruption on Perl 5.14, and correct 32-bit size handling and
+ allocation diagnostics.
+ * Fix bundled Snappy builds on Haiku and hobodecoder compatibility
+ with BusyBox od. Improve optional-dependency diagnostics.
+ * Extend independent wire-format and stored corpus coverage,
+ including real Fedora s390x producer captures. Add a
+ floating-point corpus collector and named declarations in
+ diagnostics and hobodecoder. Thanks to pghmcfc for the report and
+ corpus (issue #337).
+ * Ship the shared SECURITY policy and clarify security, checksum and
+ floating-point interoperability documentation.
+
+-------------------------------------------------------------------
+Sat Oct 31 10:58:56 UTC 2026 - Tina Müller <[email protected]>
+
+- updated to 6.3.0 (6.003)
+ see /usr/share/doc/packages/perl-Sereal-Decoder/Changes
+
+-------------------------------------------------------------------
Old:
----
Sereal-Decoder-5.010.tar.gz
Sereal-Decoder-5.011.tar.gz
New:
----
Sereal-Decoder-7.001.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ perl-Sereal-Decoder.spec ++++++
--- /var/tmp/diff_new_pack.EZJd3P/_old 2026-11-06 19:49:56.149979578 +0100
+++ /var/tmp/diff_new_pack.EZJd3P/_new 2026-11-06 19:49:56.153979746 +0100
@@ -18,10 +18,10 @@
%define cpan_name Sereal-Decoder
Name: perl-Sereal-Decoder
-Version: 5.11.0
+Version: 7.1.0
Release: 0
-# 5.011 -> normalize -> 5.11.0
-%define cpan_version 5.011
+# 7.001 -> normalize -> 7.1.0
+%define cpan_version 7.001
License: Artistic-1.0 OR GPL-1.0-or-later
Summary: Binary serialization module for Perl (decoder part)
URL: https://metacpan.org/release/%{cpan_name}
@@ -52,12 +52,10 @@
This distribution requires Perl 5.14 or newer.
-The Sereal protocol versions that are compatible with this decoder
-implementation are currently protocol versions 1, 2, 3, 4 and 5. As it
-stands, it will refuse to attempt to decode future versions of the
-protocol, but if necessary there is likely going to be an option to decode
-the parts of the input that are compatible with version 5 of the protocol.
-The protocol was designed to allow for this.
+This decoder supports Sereal protocol versions 1 through 7 and rejects
+unsupported protocol versions. Tags and compression formats that require a
+newer protocol version than the version declared in a document are
+rejected.
The protocol specification and many other bits of documentation can be
found in the github repository. Right now, the specification is at
@@ -86,5 +84,5 @@
%perl_gen_filelist
%files -f %{name}.files
-%doc Changes
+%doc Changes SECURITY
++++++ Sereal-Decoder-5.010.tar.gz -> Sereal-Decoder-7.001.tar.gz ++++++
++++ 19420 lines of diff (skipped)
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.EZJd3P/_old 2026-11-06 19:49:57.108019713 +0100
+++ /var/tmp/diff_new_pack.EZJd3P/_new 2026-11-06 19:49:57.120020216 +0100
@@ -1,6 +1,6 @@
-mtime: 1792750143
-commit: ea30a24c2b759bcf048e6e5b73ace87478e93ab803028f5dfecc8847f3f8220d
+mtime: 1793984895
+commit: 3cbaaa959462e78db86c1b58aea78583c3da06456d3733c1df1c5eaddb6d1ce5
url: https://src.opensuse.org/perl/perl-Sereal-Decoder
-revision: ea30a24c2b759bcf048e6e5b73ace87478e93ab803028f5dfecc8847f3f8220d
+revision: 3cbaaa959462e78db86c1b58aea78583c3da06456d3733c1df1c5eaddb6d1ce5
projectscmsync: https://src.opensuse.org/perl/_ObsPrj
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-11-06 18:08:15.000000000 +0100
@@ -0,0 +1 @@
+.osc