Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ansible-lint for openSUSE:Factory checked in at 2026-11-08 19:22:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ansible-lint (Old) and /work/SRC/openSUSE:Factory/.ansible-lint.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ansible-lint" Sun Nov 8 19:22:42 2026 rev:88 rq:1396162 version:26.11.0 Changes: -------- --- /work/SRC/openSUSE:Factory/ansible-lint/ansible-lint.changes 2026-11-06 20:01:00.384818895 +0100 +++ /work/SRC/openSUSE:Factory/.ansible-lint.new.3759290/ansible-lint.changes 2026-11-08 19:23:24.360406095 +0100 @@ -1,0 +2,9 @@ +Sat Nov 7 22:47:59 UTC 2026 - Harshvardhan Sharma <[email protected]> + +- On SLE 16, require filelock >= 3.18.0, the version SLE 16 ships, + so ansible-lint installs there: upstream raised the floor to + 3.20.3 for CVE-2025-68146 and CVE-2026-22701, and the SLE 16 + filelock carries both fixes. Tumbleweed keeps the upstream + minimum, and the SLE 16 build fails if upstream changes it. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ansible-lint.spec ++++++ --- /var/tmp/diff_new_pack.mBELLA/_old 2026-11-08 19:23:25.105436915 +0100 +++ /var/tmp/diff_new_pack.mBELLA/_new 2026-11-08 19:23:25.107436998 +0100 @@ -37,18 +37,21 @@ %define ansible_python_sitelib %python3_sitelib %endif -# SLE 16 ships black 25.1 and cryptography 44: ansible-lint does not import -# cryptography (upstream raised the floor for CVE fixes, which SUSE backports) -# and the jinja rule works with black 25.1 +# SLE 16 ships black 25.1, cryptography 44 and filelock 3.18: ansible-lint does +# not import cryptography, upstream raised the cryptography and filelock floors +# for CVE fixes, which SUSE backports, and the jinja rule works with black 25.1 # upstream minimums from pyproject.toml; prep section fails on SLE 16 if they change %define black_upstream 25.2.0 %define cryptography_upstream 46.0.7 +%define filelock_upstream 3.20.3 %if 0%{?suse_version} >= 1600 && 0%{?suse_version} < 1699 %define black_min 25.1.0 %define cryptography_min 44.0.0 +%define filelock_min 3.18.0 %else %define black_min %{black_upstream} %define cryptography_min %{cryptography_upstream} +%define filelock_min %{filelock_upstream} %endif %global lib_name ansiblelint @@ -89,7 +92,7 @@ # indirect dependency of ruamel-yaml BuildRequires: %{ansible_python}-cffi >= 1.15.1 BuildRequires: %{ansible_python}-cryptography >= %{cryptography_min} -BuildRequires: %{ansible_python}-filelock >= 3.20.3 +BuildRequires: %{ansible_python}-filelock >= %{filelock_min} BuildRequires: %{ansible_python}-importlib_metadata >= 8.7.0 BuildRequires: %{ansible_python}-jsonschema >= 4.10.0 BuildRequires: %{ansible_python}-packaging >= 22.0 @@ -110,7 +113,7 @@ # indirect dependency of ruamel-yaml Requires: %{ansible_python}-cffi >= 1.15.1 Requires: %{ansible_python}-cryptography >= %{cryptography_min} -Requires: %{ansible_python}-filelock >= 3.20.3 +Requires: %{ansible_python}-filelock >= %{filelock_min} Requires: %{ansible_python}-importlib_metadata >= 8.7.0 Requires: %{ansible_python}-jsonschema >= 4.10.0 Requires: %{ansible_python}-packaging >= 22.0 @@ -140,9 +143,14 @@ exit 1 } done +echo "$deps" | grep -qF "\"filelock>=%{filelock_upstream} ;" || { + echo "pyproject.toml no longer requires filelock>=%{filelock_upstream}: review the SLE 16 minimums" >&2 + exit 1 +} sed -i '/^dependencies = \[/,/^\]/{ s/"black>=%{black_upstream}"/"black>=%{black_min}"/ s/"cryptography>=%{cryptography_upstream}"/"cryptography>=%{cryptography_min}"/ + s/"filelock>=%{filelock_upstream} ;/"filelock>=%{filelock_min} ;/ }' pyproject.toml %endif
