Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cosign for openSUSE:Factory checked in at 2023-04-05 21:28:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cosign (Old) and /work/SRC/openSUSE:Factory/.cosign.new.19717 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cosign" Wed Apr 5 21:28:00 2023 rev:14 rq:1077439 version:2.0.0 Changes: -------- --- /work/SRC/openSUSE:Factory/cosign/cosign.changes 2023-02-28 12:49:01.192627673 +0100 +++ /work/SRC/openSUSE:Factory/.cosign.new.19717/cosign.changes 2023-04-05 21:35:40.010572498 +0200 @@ -1,0 +2,6 @@ +Tue Apr 4 20:02:41 UTC 2023 - Dirk Müller <dmuel...@suse.com> + +- fix buildtags +- build against a maintained golang version (upstream uses go1.20) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cosign.spec ++++++ --- /var/tmp/diff_new_pack.SsluC2/_old 2023-04-05 21:35:40.722576562 +0200 +++ /var/tmp/diff_new_pack.SsluC2/_new 2023-04-05 21:35:40.734576630 +0200 @@ -16,19 +16,18 @@ # +%define revision 69c9b37f2a021326c67b2aa9552c790e12ae5fb8 Name: cosign Version: 2.0.0 Release: 0 -%define revision 69c9b37f2a021326c67b2aa9552c790e12ae5fb8 Summary: Container Signing, Verification and Storage in an OCI registry License: Apache-2.0 URL: https://github.com/sigstore/cosign Source: https://github.com/sigstore/cosign/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz Source1: vendor.tar.zst -BuildRequires: go1.18 BuildRequires: golang-packaging BuildRequires: zstd -BuildRequires: golang(API) +BuildRequires: golang(API) = 1.20 %description Cosign aims to make signatures invisible infrastructure. @@ -47,14 +46,16 @@ DATE_FMT="+%%Y-%%m-%%dT%%H:%%M:%%SZ" BUILD_DATE=$(date -u -d "@${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u -r "${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u "${DATE_FMT}") -CLI_PKG=github.com/sigstore/cosign/pkg/version +CLI_PKG=sigs.k8s.io/release-utils/version CLI_LDFLAGS="-X ${CLI_PKG}.gitVersion=%{version} -X ${CLI_PKG}.gitCommit=%{revision} -X ${CLI_PKG}.gitTreeState=release -X ${CLI_PKG}.buildDate=${BUILD_DATE}" -go build -mod=vendor -buildmode=pie -ldflags "${CLI_LDFLAGS}" -o cosign ./cmd/cosign -go build -mod=vendor -buildmode=pie -ldflags "${CLI_LDFLAGS}" -o sget ./cmd/sget +CGO_ENABLED=0 go build -mod=vendor -buildmode=pie -trimpath -ldflags "${CLI_LDFLAGS}" -o cosign ./cmd/cosign +go build -mod=vendor -buildmode=pie -trimpath -ldflags "${CLI_LDFLAGS}" -o sget ./cmd/sget + +%check ./cosign version +./cosign version | grep -q unknown && exit 1 ./sget version -# ./cosigned version ... wants something kubernetes %install install -D -m 0755 cosign %{buildroot}%{_bindir}/cosign
