Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package rage-encryption for openSUSE:Factory
checked in at 2023-09-28 00:25:11
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/rage-encryption (Old)
and /work/SRC/openSUSE:Factory/.rage-encryption.new.23327 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rage-encryption"
Thu Sep 28 00:25:11 2023 rev:15 rq:1113697 version:0.9.2+0
Changes:
--------
--- /work/SRC/openSUSE:Factory/rage-encryption/rage-encryption.changes
2023-06-14 16:31:05.291113179 +0200
+++
/work/SRC/openSUSE:Factory/.rage-encryption.new.23327/rage-encryption.changes
2023-09-28 00:48:04.269754594 +0200
@@ -1,0 +2,14 @@
+Tue Sep 26 03:59:43 UTC 2023 - William Brown <william.br...@suse.com>
+
+- bsc#1215657 - chosen ciphertext attack possible against aes-gcm
+ * update vendor.tar.zst to contain aes-gcm >= 0.10.3
+
+-------------------------------------------------------------------
+Tue Sep 26 01:06:56 UTC 2023 - william.br...@suse.com
+
+- Update to version 0.9.2+0:
+ * CI: Ensure `apt` repository is up-to-date before installing build deps
+ * CI: Build Linux releases using `ubuntu-20.04` runner
+ * CI: Remove most uses of `actions-rs` actions
+
+-------------------------------------------------------------------
Old:
----
vendor.tar.xz
New:
----
vendor.tar.zst
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ rage-encryption.spec ++++++
--- /var/tmp/diff_new_pack.MjS2cB/_old 2023-09-28 00:48:07.425868766 +0200
+++ /var/tmp/diff_new_pack.MjS2cB/_new 2023-09-28 00:48:07.441869345 +0200
@@ -31,7 +31,7 @@
Group: Productivity/Security
URL: https://github.com/str4d/rage
Source0: rage-%{version}.tar.gz
-Source1: vendor.tar.xz
+Source1: vendor.tar.zst
Source2: cargo_config
%if %{suse_version} > 1500
BuildRequires: cargo-packaging
++++++ _service ++++++
--- /var/tmp/diff_new_pack.MjS2cB/_old 2023-09-28 00:48:07.749880487 +0200
+++ /var/tmp/diff_new_pack.MjS2cB/_new 2023-09-28 00:48:07.789881934 +0200
@@ -18,7 +18,7 @@
<service mode="disabled" name="set_version"/>
<service name="cargo_vendor" mode="disabled">
<param name="srcdir">rage</param>
- <param name="compression">xz</param>
+ <param name="compression">zst</param>
<param name="update">true</param>
</service>
<service name="cargo_audit" mode="disabled">
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.MjS2cB/_old 2023-09-28 00:48:07.925886853 +0200
+++ /var/tmp/diff_new_pack.MjS2cB/_new 2023-09-28 00:48:07.949887722 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/str4d/rage.git</param>
- <param
name="changesrevision">267f383d3c1623c10bc6715c07fa77689171f940</param></service></servicedata>
+ <param
name="changesrevision">e6180f1a2004008873b8e8d40110995ecec416c4</param></service></servicedata>
(No newline at EOF)
++++++ rage-0.9.2+0.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/rage-0.9.2+0/.github/workflows/audits.yml
new/rage-0.9.2+0/.github/workflows/audits.yml
--- old/rage-0.9.2+0/.github/workflows/audits.yml 2023-06-12
22:36:20.000000000 +0200
+++ new/rage-0.9.2+0/.github/workflows/audits.yml 2023-06-13
06:00:52.000000000 +0200
@@ -11,20 +11,9 @@
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
-
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: stable
- override: true
-
+ - uses: dtolnay/rust-toolchain@stable
+ id: toolchain
+ - run: rustup override set ${{steps.toolchain.outputs.name}}
- name: Install cargo-vet
- uses: actions-rs/cargo@v1
- with:
- command: install
- args: cargo-vet
-
- - name: Run cargo vet --locked
- uses: actions-rs/cargo@v1
- with:
- command: vet
- args: --locked
+ run: cargo install cargo-vet
+ - run: cargo vet --locked
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/rage-0.9.2+0/.github/workflows/ci.yml
new/rage-0.9.2+0/.github/workflows/ci.yml
--- old/rage-0.9.2+0/.github/workflows/ci.yml 2023-06-12 22:36:20.000000000
+0200
+++ new/rage-0.9.2+0/.github/workflows/ci.yml 2023-06-13 06:00:52.000000000
+0200
@@ -12,24 +12,11 @@
steps:
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: 1.59.0
- override: true
- - name: cargo fetch
- uses: actions-rs/cargo@v1
- with:
- command: fetch
+ - run: cargo fetch
- name: Build tests
- uses: actions-rs/cargo@v1
- with:
- command: build
- args: --all --verbose --exclude rage --all-features --tests
+ run: cargo build --workspace --verbose --exclude rage --all-features
--tests
- name: Run tests
- uses: actions-rs/cargo@v1
- with:
- command: test
- args: --all --verbose --exclude rage --all-features
+ run: cargo test --workspace --verbose --exclude rage --all-features
build:
name: Build target ${{ matrix.target }}
@@ -41,16 +28,9 @@
steps:
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: 1.59.0
- override: true
- name: Add target
run: rustup target add ${{ matrix.target }}
- - name: cargo fetch
- uses: actions-rs/cargo@v1
- with:
- command: fetch
+ - run: cargo fetch
- name: Build for target
working-directory: ./age
run: cargo build --verbose --no-default-features --target ${{
matrix.target }}
@@ -58,38 +38,23 @@
bitrot:
name: Bitrot
runs-on: ubuntu-latest
-
steps:
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: 1.59.0
- override: true
- name: Install linux build dependencies
- run: sudo apt install libfuse-dev
- - name: cargo check
- uses: actions-rs/cargo@v1
- with:
- command: check
- args: --tests --examples --benches --all-features
+ run: sudo apt update && sudo apt install libfuse-dev
+ - run: cargo check --all-targets --all-features
clippy:
- name: Clippy (1.59.0)
+ name: Clippy (MSRV)
runs-on: ubuntu-latest
-
steps:
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: 1.59.0
- components: clippy
- override: true
- name: Install linux build dependencies
- run: sudo apt install libfuse-dev
+ run: sudo apt update && sudo apt install libfuse-dev
- name: Clippy check
uses: actions-rs/clippy-check@v1
with:
- name: Clippy (1.59.0)
+ name: Clippy (MSRV)
token: ${{ secrets.GITHUB_TOKEN }}
args: --all-features --all-targets -- -D warnings
@@ -99,12 +64,11 @@
steps:
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: stable
- override: true
+ - uses: dtolnay/rust-toolchain@stable
+ id: toolchain
+ - run: rustup override set ${{steps.toolchain.outputs.name}}
- name: Install linux build dependencies
- run: sudo apt install libfuse-dev
+ run: sudo apt update && sudo apt install libfuse-dev
- name: Generate coverage report
uses: actions-rs/tarpaulin@v0.1
with:
@@ -118,39 +82,17 @@
doc-links:
name: Intra-doc links
runs-on: ubuntu-latest
-
steps:
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: 1.59.0
- override: true
- - name: cargo fetch
- uses: actions-rs/cargo@v1
- with:
- command: fetch
-
- # Ensure intra-documentation links all resolve correctly
- # Requires #![deny(intra_doc_link_resolution_failure)] in crates.
+ - run: cargo fetch
+ # Requires #![deny(rustdoc::broken_intra_doc_links)] in crates.
- name: Check intra-doc links
- uses: actions-rs/cargo@v1
- with:
- command: doc
- args: --all --exclude rage --all-features --document-private-items
+ run: cargo doc --all --exclude rage --all-features
--document-private-items
fmt:
name: Rustfmt
runs-on: ubuntu-latest
-
steps:
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: 1.59.0
- components: rustfmt
- override: true
- name: Check formatting
- uses: actions-rs/cargo@v1
- with:
- command: fmt
- args: --all -- --check
+ run: cargo fmt --all -- --check
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/rage-0.9.2+0/.github/workflows/interop.yml
new/rage-0.9.2+0/.github/workflows/interop.yml
--- old/rage-0.9.2+0/.github/workflows/interop.yml 2023-06-12
22:36:20.000000000 +0200
+++ new/rage-0.9.2+0/.github/workflows/interop.yml 2023-06-13
06:00:52.000000000 +0200
@@ -17,10 +17,6 @@
--data '{"state": "pending", "target_url": "https://github.com/${{
github.repository }}/actions/runs/${{ github.run_id }}", "description": "In
progress", "context": "Interoperability tests / Build rage"}'
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
- with:
- toolchain: 1.59.0
- override: true
- name: cargo build
run: cargo build --release --features unstable
working-directory: ./rage
@@ -118,7 +114,7 @@
# Prepare the test environment
- name: Install dos2unix for simulating Windows files
- run: sudo apt install dos2unix
+ run: sudo apt update && sudo apt install dos2unix
- name: Write (very not private) age X25519 key
if: matrix.recipient == 'x25519'
run: echo
"AGE-SECRET-KEY-1TRYTV7PQS5XPUYSTAQZCD7DQCWC7Q77YJD7UVFJRMW4J82Q6930QS70MRX"
>key.txt
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/rage-0.9.2+0/.github/workflows/release.yml
new/rage-0.9.2+0/.github/workflows/release.yml
--- old/rage-0.9.2+0/.github/workflows/release.yml 2023-06-12
22:36:20.000000000 +0200
+++ new/rage-0.9.2+0/.github/workflows/release.yml 2023-06-13
06:00:52.000000000 +0200
@@ -20,7 +20,7 @@
name: [linux, armv7, arm64, windows, macos]
include:
- name: linux
- os: ubuntu-18.04
+ os: ubuntu-20.04
build_deps: >
libfuse-dev
build_flags: --features mount
@@ -28,7 +28,7 @@
asset_suffix: x86_64-linux.tar.gz
- name: armv7
- os: ubuntu-18.04
+ os: ubuntu-20.04
target: armv7-unknown-linux-gnueabihf
build_deps: >
gcc-arm-linux-gnueabihf
@@ -40,7 +40,7 @@
asset_suffix: armv7-linux.tar.gz
- name: arm64
- os: ubuntu-18.04
+ os: ubuntu-20.04
target: aarch64-unknown-linux-gnu
build_deps: >
gcc-aarch64-linux-gnu
@@ -63,16 +63,14 @@
steps:
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
+ - uses: dtolnay/rust-toolchain@stable
+ id: toolchain
with:
- toolchain: stable
- override: true
- - name: Add target
- run: rustup target add ${{ matrix.target }}
- if: matrix.target != ''
+ targets: ${{ matrix.target }}
+ - run: rustup override set ${{steps.toolchain.outputs.name}}
- name: Install linux build dependencies
- run: sudo apt install ${{ matrix.build_deps }}
+ run: sudo apt update && sudo apt install ${{ matrix.build_deps }}
if: matrix.build_deps != ''
- name: Set up .cargo/config
@@ -115,7 +113,7 @@
deb:
name: Debian ${{ matrix.name }}
- runs-on: ubuntu-18.04
+ runs-on: ubuntu-20.04
strategy:
matrix:
name: [linux, linux-musl, armv7, armv7-musl, arm64, arm64-musl]
@@ -170,20 +168,16 @@
steps:
- uses: actions/checkout@v3
- - uses: actions-rs/toolchain@v1
+ - uses: dtolnay/rust-toolchain@stable
+ id: toolchain
with:
- toolchain: stable
- override: true
- - name: Add target
- run: rustup target add ${{ matrix.target }}
+ targets: ${{ matrix.target }}
+ - run: rustup override set ${{steps.toolchain.outputs.name}}
- name: cargo install cargo-deb
- uses: actions-rs/cargo@v1
- with:
- command: install
- args: cargo-deb
+ run: cargo install cargo-deb
- name: Install build dependencies
- run: sudo apt install ${{ matrix.build_deps }}
+ run: sudo apt update && sudo apt install ${{ matrix.build_deps }}
if: matrix.build_deps != ''
- name: Set up .cargo/config
@@ -197,26 +191,17 @@
working-directory: ./rage
- name: Generate completions
- uses: actions-rs/cargo@v1
- with:
- command: run
- args: --example generate-completions
+ run: cargo run --example generate-completions
- name: Generate manpages
- uses: actions-rs/cargo@v1
- with:
- command: run
- args: --example generate-docs
+ run: cargo run --example generate-docs
- name: Update Debian package config for cross-compile
run: sed -i '/\/rage-mount/d' rage/Cargo.toml
if: matrix.name != 'linux'
- name: cargo deb
- uses: actions-rs/cargo@v1
- with:
- command: deb
- args: --package rage --no-build --target ${{ matrix.target }} ${{
matrix.deb_flags }}
+ run: cargo deb --package rage --no-build --target ${{ matrix.target }}
${{ matrix.deb_flags }}
- name: Upload Debian package to release
uses: svenstaro/upload-release-action@2.6.1
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/rage-0.9.2+0/rage/CHANGELOG.md
new/rage-0.9.2+0/rage/CHANGELOG.md
--- old/rage-0.9.2+0/rage/CHANGELOG.md 2023-06-12 22:36:20.000000000 +0200
+++ new/rage-0.9.2+0/rage/CHANGELOG.md 2023-06-13 06:00:52.000000000 +0200
@@ -19,6 +19,7 @@
the `PINENTRY_PROGRAM` environment variable. It accepts either a binary name
or a path. Setting this to the empty string will disable `pinentry` usage and
fall back to the CLI interface.
+- Linux release binaries are now built using Ubuntu 20.04.
## [0.9.1] - 2023-03-24
### Added
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/rage-0.9.2+0/rust-toolchain
new/rage-0.9.2+0/rust-toolchain
--- old/rage-0.9.2+0/rust-toolchain 2023-06-12 22:36:20.000000000 +0200
+++ new/rage-0.9.2+0/rust-toolchain 1970-01-01 01:00:00.000000000 +0100
@@ -1 +0,0 @@
-1.59.0
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/rage-0.9.2+0/rust-toolchain.toml
new/rage-0.9.2+0/rust-toolchain.toml
--- old/rage-0.9.2+0/rust-toolchain.toml 1970-01-01 01:00:00.000000000
+0100
+++ new/rage-0.9.2+0/rust-toolchain.toml 2023-06-13 06:00:52.000000000
+0200
@@ -0,0 +1,3 @@
+[toolchain]
+channel = "1.59.0"
+components = ["clippy", "rustfmt"]
