1
0

Compare commits

...

58 Commits

Author SHA256 Message Date
Marcus Meissner
f82b6807a3 hide several javas, mcphost and livepatches 2025-11-28 09:40:55 +00:00
dae02011d2 Update patchinfo incident numbers [skip actions] 2025-11-27 15:48:48 +00:00
AutoGits PR Review Bot
b1b5c5f7fd Merging
PR: products/PackageHub!237
2025-11-27 15:48:30 +00:00
ba6df4c406 Update patchinfo.20251126120323268597.93181000773252/_patchinfo
removed <seperate_build_arch/>
2025-11-27 15:50:22 +01:00
0eaae79071 Update patchinfo incident numbers [skip actions] 2025-11-27 13:58:24 +00:00
AutoGits PR Review Bot
b074f5c749 Merging
PR: products/PackageHub!220
2025-11-27 13:58:03 +00:00
33ce60f6de Update patchinfo incident numbers [skip actions] 2025-11-27 12:19:20 +00:00
AutoGits PR Review Bot
9f4c49bf19 Merging
PR: products/PackageHub!235
2025-11-27 12:19:01 +00:00
4eab647a7d Update patchinfo incident numbers [skip actions] 2025-11-27 12:18:52 +00:00
AutoGits PR Review Bot
f7738c948d Merging
PR: products/PackageHub!236
2025-11-27 12:18:34 +00:00
c3280f05b0 Update patchinfo incident numbers [skip actions] 2025-11-27 12:18:26 +00:00
AutoGits PR Review Bot
7b8e7b071e Merging
PR: products/PackageHub!238
2025-11-27 12:18:07 +00:00
d38f10df84 Update patchinfo incident numbers [skip actions] 2025-11-27 12:17:41 +00:00
AutoGits PR Review Bot
aaa01dd7ed Merging
PR: products/PackageHub!239
2025-11-27 12:17:21 +00:00
438cc66231 Update patchinfo incident numbers [skip actions] 2025-11-27 12:17:13 +00:00
AutoGits PR Review Bot
70174ad4a3 Merging
PR: products/PackageHub!240
2025-11-27 12:16:53 +00:00
AutoGits PR Review Bot
1afea80a74 Merging
PR: products/PackageHub!232
2025-11-27 11:16:44 +00:00
AutoGits PR Review Bot
759fe81cae Merging
PR: products/PackageHub!234
2025-11-27 11:16:21 +00:00
c83081c0c2 Update submodules from pool/pnpm#2 and create patchinfo.20251126142846164969.93181000773252/_patchinfo 2025-11-26 15:31:02 +01:00
fb7efde7e7 Update submodules from pool/rnp#1 and create patchinfo.20251126142654688873.93181000773252/_patchinfo 2025-11-26 15:27:41 +01:00
2b9d482f04 Update patchinfo incident numbers [skip actions] 2025-11-26 14:05:15 +00:00
AutoGits PR Review Bot
35ecd457d9 Merging
PR: products/PackageHub!213
2025-11-26 14:04:55 +00:00
60e7b0a97e Update submodules from pool/redis#1 and create patchinfo.20251126120323268597.93181000773252/_patchinfo 2025-11-26 13:03:41 +01:00
4dcb2da4e3 Update submodules from pool/gitea-tea#1 and create patchinfo.20251126115642933537.93181000773252/_patchinfo 2025-11-26 12:58:07 +01:00
cdcb5df40e Update submodules from pool/tcpreplay#1 and create patchinfo.20251126115242783292.93181000773252/_patchinfo 2025-11-26 12:53:29 +01:00
Marcus Meissner
97cb21a1da remove mcphost 2025-11-26 11:52:25 +00:00
315fd347cb Update patchinfo incident numbers [skip actions] 2025-11-24 17:36:46 +00:00
AutoGits PR Review Bot
1aaeefe3e7 Merging
PR: products/PackageHub!216
2025-11-24 17:36:25 +00:00
Marcus Meissner
97b914e32f ship llvmjit from here 2025-11-24 15:56:52 +00:00
890fcb23db Update patchinfo incident numbers [skip actions] 2025-11-24 09:34:14 +00:00
AutoGits PR Review Bot
0d83b2f97d Merging
PR: products/PackageHub!215
2025-11-24 09:33:54 +00:00
AutoGits PR Review Bot
d3fa2d8093 Merging
PR: products/PackageHub!214
2025-11-24 09:33:09 +00:00
35d43b7128 Update patchinfo incident numbers [skip actions] 2025-11-20 17:06:50 +00:00
AutoGits PR Review Bot
3d3d411edd Merging
PR: products/PackageHub!227
2025-11-20 17:06:31 +00:00
244f0464f8 Update patchinfo incident numbers [skip actions] 2025-11-20 17:05:59 +00:00
AutoGits PR Review Bot
f9cfafe0d2 Merging
PR: products/PackageHub!229
2025-11-20 17:05:38 +00:00
98183c2d10 Update patchinfo incident numbers [skip actions] 2025-11-20 17:05:23 +00:00
AutoGits PR Review Bot
d6124c97ca Merging
PR: products/PackageHub!230
2025-11-20 17:04:46 +00:00
782985afd7 Update patchinfo incident numbers [skip actions] 2025-11-20 10:06:56 +00:00
AutoGits PR Review Bot
10e754d7a4 Merging
PR: products/PackageHub!226
2025-11-20 10:06:21 +00:00
56c30f1899 Update patchinfo incident numbers [skip actions] 2025-11-19 17:36:23 +00:00
AutoGits PR Review Bot
89bbb673f7 Merging
PR: products/PackageHub!221
2025-11-19 17:35:41 +00:00
797087a546 Update submodules from pool/nmon#2 and create patchinfo.20251119130842836205.187004354831441/_patchinfo 2025-11-19 14:09:11 +01:00
ef2d057210 Update submodules from pool/synce4l#1 and create patchinfo.20251119124936938893.187004354831441/_patchinfo 2025-11-19 13:50:10 +01:00
AutoGits PR Review Bot
c086cc996d auto-created for evolution
This commit was autocreated by AutoGits PR Review Bot

referencing PRs:
 PR: pool/evolution!2
2025-11-18 15:31:37 +00:00
854f44ed9c Update patchinfo.20251118105940725571.187004354831441/_patchinfo 2025-11-18 14:19:54 +01:00
4b3a8849e6 Update patchinfo.20251118110024655567.187004354831441/_patchinfo 2025-11-18 14:19:31 +01:00
ec5f90ea17 Update submodules from pool/MozillaThunderbird#9 and create patchinfo.20251118110024655567.187004354831441/_patchinfo 2025-11-18 12:01:06 +01:00
43e7874d50 Update submodules from pool/chromium#17 and create patchinfo.20251118105940725571.187004354831441/_patchinfo 2025-11-18 11:59:47 +01:00
699f39f21c Update patchinfo.20251117131911819330.187004354831441/_patchinfo
remove seperate buildarch
2025-11-17 14:44:57 +01:00
2d261f7863 Update patchinfo.20251117132013106524.187004354831441/_patchinfo
remove seperate buildarch
2025-11-17 14:44:25 +01:00
48b938ad1f Update patchinfo.20251112155258859667.187004354831441/_patchinfo
remove seperate build arch
2025-11-17 14:43:13 +01:00
5291ba32bb Update submodules from pool/quilt#1 and create patchinfo.20251117132013106524.187004354831441/_patchinfo 2025-11-17 14:20:51 +01:00
fef51770f9 Update submodules from pool/evolution#2 and create patchinfo.20251117131911819330.187004354831441/_patchinfo 2025-11-17 14:19:18 +01:00
817b1cd1f8 Update submodules from pool/gramps#2 and create patchinfo.20251113161402184432.187004354831441/_patchinfo 2025-11-13 17:14:44 +01:00
4028bd4bf0 Update submodules from pool/product-composer#8 and create patchinfo.20251113160751974202.187004354831441/_patchinfo 2025-11-13 17:07:58 +01:00
Marcus Meissner
082d652565 filterlivepath set from update 1 2025-11-13 13:36:25 +00:00
69430026ed Update submodules from pool/helmfile#1 and create patchinfo.20251112155258859667.187004354831441/_patchinfo 2025-11-12 16:53:23 +01:00
30 changed files with 2337 additions and 22 deletions

View File

@@ -147,6 +147,10 @@ packagesets:
- kernel-livepatch-6_12_0-160000_4-rt
- kernel-livepatch-6_12_0-160000_5-default
- kernel-livepatch-6_12_0-160000_5-rt
- kernel-livepatch-6_12_0-160000_6-default
- kernel-livepatch-6_12_0-160000_6-rt
- kernel-livepatch-6_12_0-160000_7-default
- kernel-livepatch-6_12_0-160000_7-rt
- kernel-rt-livepatch
- kernel-rt-livepatch-devel
- krb5-mini
@@ -1920,6 +1924,27 @@ packagesets:
- java-21-openjdk-javadoc
- java-21-openjdk-jmods
- java-21-openjdk-src
- java-22-openjdk
- java-22-openjdk-demo
- java-22-openjdk-devel
- java-22-openjdk-headless
- java-22-openjdk-javadoc
- java-22-openjdk-jmods
- java-22-openjdk-src
- java-23-openjdk
- java-23-openjdk-demo
- java-23-openjdk-devel
- java-23-openjdk-headless
- java-23-openjdk-javadoc
- java-23-openjdk-jmods
- java-23-openjdk-src
- java-24-openjdk
- java-24-openjdk-demo
- java-24-openjdk-devel
- java-24-openjdk-headless
- java-24-openjdk-javadoc
- java-24-openjdk-jmods
- java-24-openjdk-src
- java-cup
- java-cup-manual
- javacc
@@ -4359,6 +4384,7 @@ packagesets:
- maven-wagon-ssh-common
- maven-wagon-ssh-external
- mbimcli-bash-completion
- mcphost
- mcstrans
- md_monitor
- mdadm
@@ -5427,7 +5453,6 @@ packagesets:
- postgresql-docs
- postgresql-jdbc
- postgresql-jdbc-javadoc
- postgresql-llvmjit
- postgresql-plperl
- postgresql-plpython
- postgresql-pltcl
@@ -5437,7 +5462,6 @@ packagesets:
- postgresql13-contrib
- postgresql13-devel
- postgresql13-docs
- postgresql13-llvmjit
- postgresql13-pgaudit
- postgresql13-pgvector
- postgresql13-plperl
@@ -5449,7 +5473,6 @@ packagesets:
- postgresql14-contrib
- postgresql14-devel
- postgresql14-docs
- postgresql14-llvmjit
- postgresql14-pgaudit
- postgresql14-pgvector
- postgresql14-plperl
@@ -5461,7 +5484,6 @@ packagesets:
- postgresql15-contrib
- postgresql15-devel
- postgresql15-docs
- postgresql15-llvmjit
- postgresql15-pgaudit
- postgresql15-pgvector
- postgresql15-plperl
@@ -5473,7 +5495,6 @@ packagesets:
- postgresql16-contrib
- postgresql16-devel
- postgresql16-docs
- postgresql16-llvmjit
- postgresql16-pgaudit
- postgresql16-pgvector
- postgresql16-plperl
@@ -5485,7 +5506,6 @@ packagesets:
- postgresql17-contrib
- postgresql17-devel
- postgresql17-docs
- postgresql17-llvmjit
- postgresql17-pgaudit
- postgresql17-pgvector
- postgresql17-plperl
@@ -7935,6 +7955,8 @@ packagesets:
- kernel-kvmsmall
- kernel-kvmsmall-devel
- kernel-livepatch-6_12_0-160000_5-default
- kernel-livepatch-6_12_0-160000_6-default
- kernel-livepatch-6_12_0-160000_7-default
- libLLVMSPIRVLib19
- libatopology2
- libdpdk-25
@@ -8046,6 +8068,8 @@ packagesets:
- grub2-s390x-emu
- kernel-default-livepatch
- kernel-livepatch-6_12_0-160000_5-default
- kernel-livepatch-6_12_0-160000_6-default
- kernel-livepatch-6_12_0-160000_7-default
- kernel-zfcpdump
- kiwi-settings
- libHBAAPI2
@@ -8185,6 +8209,8 @@ packagesets:
- kernel-kvmsmall-devel
- kernel-kvmsmall-vdso
- kernel-livepatch-6_12_0-160000_5-default
- kernel-livepatch-6_12_0-160000_6-default
- kernel-livepatch-6_12_0-160000_7-default
- kiwi-pxeboot
- kubevirt-virtctl
- libFLAC++10-x86-64-v3

2
gramps

Submodule gramps updated: 2fc8a56341...9feff03b4b

2
nmon

Submodule nmon updated: 5d929ec369...031ccfb27f

View File

@@ -0,0 +1,571 @@
<patchinfo incident="packagehub-30">
<issue tracker="cve" id="2025-0377">VUL-0: CVE-2025-0377: TRACKERBUG: go-slug: improper validation of paths when extracting tar files containing Terraform configuration files can lead to arbitrary file writes</issue>
<issue tracker="cve" id="2024-45338">VUL-0: CVE-2024-45338: TRACKERBUG: golang.org/x/net/html: denial of service due to non-linear parsing of case-insensitive content</issue>
<packager>manfred-h</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for helmfile</summary>
<description>This update for helmfile fixes the following issues:
Changes in helmfile:
Update to version 1.1.9:
* feat: update strategy for reinstall by @simbou2000 in #2019
* build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
from 1.88.7 to 1.89.0 by @dependabot[bot] in #2239
* Fix: Handle empty helmBinary in base files with environment
values by @Copilot in #2237
Update to version 1.1.8:
* build(deps): bump github.com/hashicorp/go-getter from 1.8.0 to
1.8.1 by @dependabot[bot] in #2194
* fix typos in both comment and error message by @d-fal in #2199
* cleanup disk in release ci by @yxxhero in #2203
* Migrate AWS SDK from v1 to v2 to resolve deprecation warnings
by @Copilot in #2202
* build(deps): bump github.com/helmfile/vals from 0.42.1 to 0.42.2
by @dependabot[bot] in #2200
* build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from
1.88.2 to 1.88.3 by @dependabot[bot] in #2206
* Bump Alpine to 3.22 in Dockerfile by @orishamir in #2205
* build(deps): bump github.com/aws/aws-sdk-go-v2/config from
1.31.10 to 1.31.12 by @dependabot[bot] in #2207
* Add yq to Dockerfile by @orishamir in #2208
* fix: skip chartify for build command jsonPatches by @sstarcher
in #2212
* build(deps): bump github.com/hashicorp/go-getter from 1.8.1 to
1.8.2 by @dependabot[bot] in #2210
* build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from
1.88.3 to 1.88.4 by @dependabot[bot] in #2213
* build(deps): bump golang.org/x/term from 0.35.0 to 0.36.0 by
@dependabot[bot] in #2214
* Avoid fetching same chart/version multiple times by @Copilot
in #2197
* build(deps): bump github.com/helmfile/vals from 0.42.2 to
0.42.4 by @dependabot[bot] in #2217
* docs: add zread badge to README by @yxxhero in #2219
* Bump helm-diff to v3.13.1 by @Copilot in #2223
* build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from
1.88.4 to 1.88.5 by @dependabot[bot] in #2226
* build(deps): bump github.com/aws/aws-sdk-go-v2/config from
1.31.12 to 1.31.13 by @dependabot[bot] in #2225
* build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from
1.88.5 to 1.88.6 by @dependabot[bot] in #2230
* build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from
1.88.6 to 1.88.7 by @dependabot[bot] in #2232
* build(deps): bump github.com/aws/aws-sdk-go-v2/config from
1.31.13 to 1.31.15 by @dependabot[bot] in #2233
* Fix helmBinary and kustomizeBinary being ignored when using
bases by @Copilot in #2228
Update to version 1.1.7:
What's Changed
* fix pflag error by @zhaque44 in #2164
* build(deps): bump actions/setup-go from 5 to 6 by
@dependabot[bot] in #2166
* build(deps): bump github.com/hashicorp/go-getter from 1.7.9 to
1.7.10 by @dependabot[bot] in #2165
* build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10
by @dependabot[bot] in #2163
* Add helm diff installation to README by @nwneisen in #2170
* build(deps): bump github.com/hashicorp/go-getter from 1.7.10
to 1.8.0 by @dependabot[bot] in #2175
* build(deps): bump golang.org/x/term from 0.34.0 to 0.35.0 by
@dependabot[bot] in #2174
* build(deps): bump github.com/zclconf/go-cty from 1.16.4 to
1.17.0 by @dependabot[bot] in #2173
* Fix panic when helm isn't installed by @nwneisen in #2169
* build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 by
@dependabot[bot] in #2172
* ci: update minikube and kubernetes versions by @yxxhero in #2181
* build(deps): bump k8s.io/apimachinery from 0.34.0 to 0.34.1 by
@dependabot[bot] in #2180
* Remove deprecated --wait-retries flag support to fix Helm
compatibility error by @Copilot in #2179
* build(deps): bump go.yaml.in/yaml/v2 from 2.4.2 to 2.4.3 by
@dependabot[bot] in #2183
* build: update Helm to v3.19.0 across all components by @yxxhero
in #2187
* build: update helm-diff plugin to v3.13.0 by @yxxhero in #2189
* feat: Implement caching for pulling OCI charts by @mustdiechik
in #2171
* build(deps): bump github.com/helmfile/chartify from 0.24.7 to
0.25.0 by @dependabot[bot] in #2190
- Update to version 1.1.6:
What's Changed
* build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to
1.7.9 by @dependabot[bot] in #2139
* build(deps): bump github.com/zclconf/go-cty from 1.16.3 to
1.16.4 by @dependabot[bot] in #2145
* build: update helm to v3.18.6 by @yxxhero in #2144
* build(deps): bump github.com/stretchr/testify from 1.10.0 to
1.11.0 by @dependabot[bot] in #2150
* Add missing --timeout flag to helmfile sync command with
documentation by @Copilot in #2148
* Fix enableDNS flag missing in diff command and refactor
duplicate logic by @Copilot in #2147
* build(deps): bump github.com/stretchr/testify from 1.11.0 to
1.11.1 by @dependabot[bot] in #2151
* build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.14
by @dependabot[bot] in #2154
* Bump github.com/ulikunitz/xz from v0.5.14 to v0.5.15 by @Copilot
in #2159
* build(deps): bump github.com/helmfile/vals from 0.42.0 to
0.42.1 by @dependabot[bot] in #2161
* build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.9
by @dependabot[bot] in #2160
* build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
by @dependabot[bot] in #2162
* Fix error propagation in helmfile diff when Kubernetes is
unreachable by @Copilot in #2149
- Update to version 1.1.5:
What's Changed
* build(deps): bump actions/checkout from 4 to 5 by
@dependabot[bot] in #2128
* Update recommended Helm versions in init.go and run.sh by
@yxxhero in #2129
* Add comprehensive .github/copilot-instructions.md for coding
agents by @Copilot in #2131
* refactor(state): extract getMissingFileHandler method for
clarity by @yxxhero in #2133
* Fix parseHelmVersion to handle helm versions without 'v'
prefix by @Copilot in #2132
* build(deps): bump k8s.io/apimachinery from 0.33.3 to 0.33.4
by @dependabot[bot] in #2136
* build(deps): bump github.com/helmfile/chartify from 0.24.6 to
0.24.7 by @dependabot[bot] in #2135
- Update to version 1.1.4:
What's Changed
* build(deps): bump github.com/helmfile/vals from 0.41.2 to
0.41.3 by @dependabot[bot] in #2100
* build(deps): bump k8s.io/apimachinery from 0.33.2 to 0.33.3
by @dependabot[bot] in #2101
* fix: update Helm version to v3.17.4 in CI and init.go by
@yxxhero in #2102
* build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7
by @dependabot[bot] in #2104
* feat(state): add missingFileHandlerConfig and related logic
by @yxxhero in #2105
* refactor(filesystem): add CopyDir method and optimize Fetch
function by @yxxhero in #2111
* Allow caching of remote files to be disabled by @jess-sol in
#2112
* refactor(yaml): switch yaml library import paths from gopkg.in
to go.yaml.in by @yxxhero in #2114
* build(deps): bump actions/download-artifact from 4 to 5 by
@dependabot[bot] in #2121
* build(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 by
@dependabot[bot] in #2123
- Update to version 1.1.3:
What's Changed
* build: update Helm to v3.18.3 and related dependencies by
@yxxhero in #2082
* Expose release version as .Release.ChartVersion for templating
by @Simske in #2080
* build(deps): bump github.com/helmfile/chartify from 0.24.3 to
0.24.4 by @dependabot[bot] in #2083
* build(deps): bump k8s.io/apimachinery from 0.33.1 to 0.33.2
by @dependabot[bot] in #2086
* build(deps): bump github.com/helmfile/chartify from 0.24.4 to
0.24.5 by @dependabot[bot] in #2087
* build(deps): bump github.com/Masterminds/semver/v3 from 3.3.1
to 3.4.0 by @dependabot[bot] in #2089
* build(deps): bump github.com/hashicorp/hcl/v2 from 2.23.0 to
2.24.0 by @dependabot[bot] in #2092
* build: update Helm and plugin versions to v3.18.4 and v3.12.3
by @yxxhero in #2093
* docs: update status section with May 2025 release information
by @yxxhero in #2096
* build(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by
@dependabot[bot] in #2099
* build(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 by
@dependabot[bot] in #2098
- Update to version 1.1.2:
What's Changed
* build(deps): bump github.com/helmfile/chartify from 0.24.2 to
0.24.3 by @dependabot in #2065
* build: update Helm to v3.18.2 and adjust related configurations
by @yxxhero in #2064
* build(deps): bump github.com/helmfile/vals from 0.41.1 to
0.41.2 by @dependabot in #2067
* build(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0
by @dependabot in #2068
* fix-insecure-flag by @anontrex in #2072
* build(deps): bump github.com/cloudflare/circl from 1.4.0 to
1.6.1 by @dependabot in #2074
* fix: update helm-diff to version 3.12.2 in CI and Dockerfiles
by @yxxhero in #2073
* fix: TestToYaml not working with 32-bit architectures by
@ProbstDJakob in #2075
- Update to version 1.1.1:
What's Changed
* Update README.md by @mumoshu in #2046
* build(deps): bump github.com/helmfile/vals from 0.41.0 to
0.41.1 by @dependabot in #2048
* build(helm) update to v3.18.0 by @yxxhero in #2044
* build(deps): bump github.com/helmfile/chartify from 0.23.0 to
0.24.1 by @dependabot in #2049
* build: update Helm and plugin versions in CI and Dockerfiles
by @yxxhero in #2059
- Update to version 1.1.0:
What's Changed
* chore: fix typo in create_test.go by @sadikkuzu in #2025
* build(deps): bump golangci/golangci-lint-action from 7 to 8 by
@dependabot in #2029
* build(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 by
@dependabot in #2028
* build(deps): bump github.com/helmfile/chartify from 0.22.0 to
0.23.0 by @dependabot in #2027
* chore: remove test data files by @yxxhero in #2026
* build(deps): bump golang.org/x/term from 0.31.0 to 0.32.0 by
@dependabot in #2033
* build(deps): bump github.com/helmfile/vals from 0.40.1 to
0.41.0 by @dependabot in #2032
* build(deps): bump dario.cat/mergo from 1.0.1 to 1.0.2 by
@dependabot in #2035
* feat(tmpl): enhance ToYaml test with multiple scenarios by
@yxxhero in #2031
* [sops, age] update to have SSH key support with sops by
@itscaro in #2036
* feat(yaml): add JSON style encoding option to NewEncoder by
@yxxhero in #2038
* refactor(yaml): upgrade from gopkg.in/yaml.v2 to v3 by @yxxhero
in #2039
* Update readme &amp; documentation with 2025 status of helmfile
project by @zhaque44 in #2040
* build(deps): bump k8s.io/apimachinery from 0.33.0 to 0.33.1 by
@dependabot in #2041
* build(deps): bump github.com/zclconf/go-cty from 1.16.2 to
1.16.3 by @dependabot in #2043
- Update to version 1.0.0:
PLEASE READ
https://github.com/helmfile/helmfile/blob/main/docs/proposals/towards-1.0.md
What's Changed:
* build(deps): bump github.com/helmfile/vals from 0.39.0 to 0.39.1
by @dependabot in #1926
* Bump kubectl to current version (1.32.1) by @DerDaku in #1924
* build(deps): bump github.com/goccy/go-yaml from 1.15.21 to 1.15.22
by @dependabot in #1925
* build: update Helm to v3.17.1 and related dependencies by
@yxxhero in #1928
* build(deps): bump k8s.io/apimachinery from 0.32.1 to 0.32.2 by
@dependabot in #1931
* feat: inject cli state values (--state-values-set) into environment
templating context by @Vince-Chenal in #1917
* docs: add skipSchemaValidation to index.md and update related
structs by @yxxhero in #1935
* refactor(state): optimize HelmState flags handling by @yxxhero
in #1937
* Update vals package to v0.39.2 by @aditmeno in #1938
* build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by
@dependabot in #1940
* build(deps): bump github.com/goccy/go-yaml from 1.15.22 to 1.15.23
by @dependabot in #1941
* build(deps): bump github.com/helmfile/chartify from 0.20.8 to
0.20.9 by @dependabot in #1942
* feat: colorized DELETED by @yurrriq in #1944
* feat(docs): add proposal to remove charts and delete subcommands
by @yxxhero in #1936
* build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0
by @dependabot in #1945
* build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to
4.0.5 by @dependabot in #1946
* build: update golang version to 1.24 and golangci-lint to
v1.64.5 by @yxxhero in #1949
* build(deps): bump github.com/helmfile/vals from 0.39.2 to 0.39.3
by @dependabot in #1951
* build(deps): bump github.com/helmfile/chartify from 0.20.9 to
0.21.0 by @dependabot in #1950
* build(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0 by
@dependabot in #1955
* build(deps): bump jinja2 from 3.1.5 to 3.1.6 in /docs by
@dependabot in #1956
* Don't warn if this and the needed release set installed: false
by @jayme-github in #1958
* build(deps): bump golang.org/x/term from 0.29.0 to 0.30.0 by
@dependabot in #1959
* Remove all v0.x references by @yxxhero in #1919
* build(deps): bump k8s.io/apimachinery from 0.32.2 to 0.32.3
by @dependabot in #1960
* build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 by
@dependabot in #1961
* build(deps): bump github.com/helmfile/vals from 0.39.3 to 0.39.4
by @dependabot in #1962
* build: update Helm to v3.17.2 and related dependencies by
@yxxhero in #1965
* build: update yaml.v3 dependency and remove colega/go-yaml-yaml
by @yxxhero in #1929
* build(deps): bump github.com/containerd/containerd from 1.7.24
to 1.7.27 by @dependabot in #1966
* build(deps): bump github.com/goccy/go-yaml from 1.15.23 to
1.16.0 by @dependabot in #1967
* build(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to
5.2.2 by @dependabot in #1969
* build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to
4.5.2 by @dependabot in #1970
* build(deps): bump golangci/golangci-lint-action from 6 to 7
by @dependabot in #1975
* build(deps): bump github.com/helmfile/vals from 0.39.4 to
0.40.0 by @dependabot in #1978
* build(deps): bump github.com/helmfile/chartify from 0.21.0 to
0.21.1 by @dependabot in #1979
* docs(fix): correct typo in 'tier=fronted' to 'tier=frontend'
by @yxxhero in #1980
* feat: add labels for helm release by @yxxhero in #1046
* build(deps): bump github.com/helmfile/vals from 0.40.0 to
0.40.1 by @dependabot in #1981
* build(deps): bump github.com/goccy/go-yaml from 1.16.0 to 1.17.1
by @dependabot in #1982
* fix: Check needs with context and namespace by @aarnq in #1986
* build(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 by
@dependabot in #1991
* build(deps): bump golang.org/x/term from 0.30.0 to 0.31.0 by
@dependabot in #1990
* fix(state): enhance error message for missing .gotmpl extension
in helmfile v1 by @yxxhero in #1989
* build(deps): bump github.com/helmfile/chartify from 0.21.1 to
0.22.0 by @dependabot in #1996
* build: update Helm plugin versions in CI and Dockerfiles by
@yxxhero in #1995
* build: update Helm to v3.17.3 and update related Dockerfiles
by @yxxhero in #1993
* build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by
@dependabot in #2010
* feat: add helmfile archive configuration in goreleaser by
@yxxhero in #2000
* docs: add more complex examples section in README by @yxxhero
in #2013
* Feat: setting reuseValues flag in release by @blaskoa in #2004
* build(deps): bump k8s.io/apimachinery from 0.32.3 to 0.32.4 by
@dependabot in #2016
* build(deps): bump github.com/aws/aws-sdk-go from 1.55.6 to
1.55.7 by @dependabot in #2015
* chore: support parsing any type with fromYaml by @ProbstDJakob
in #2017
* build(deps): bump k8s.io/apimachinery from 0.32.4 to 0.33.0 by
@dependabot in #2018
* feat: add --take-ownership flag to helm diff and related config
by @yxxhero in #1992
- Update to version 0.171.0:
* feat: execute templates against postRendererHooks by @allanger
in #1839
* build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
by @dependabot in #1897
* build(deps): bump github.com/goccy/go-yaml from 1.15.15 to
1.15.16 by @dependabot in #1901
* build(deps): bump github.com/goccy/go-yaml from 1.15.16 to
1.15.17 by @dependabot in #1905
* Use a regex to match --state-values-set-string arguments
by @gllb in #1902
* build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0
by @dependabot in #1911
* Chartify v0.20.8 update by @scodeman in #1908
* cleanup: remove all about v0.x by @yxxhero in #1903
* build(deps): bump golang.org/x/term from 0.28.0 to 0.29.0
by @dependabot in #1913
* chore: update babel to resolve CVEs by @zhaque44 in #1916
* remove deprecated charts.yaml by @yxxhero in #1437
* Revert "cleanup: remove all about v0.x" by @yxxhero in #1918
* build(deps): bump github.com/goccy/go-yaml from 1.15.17 to
1.15.19 by @dependabot in #1920
* build(deps): bump github.com/goccy/go-yaml from 1.15.19 to
1.15.20 by @dependabot in #1921
* feat: Add support for --wait-retries flag. by @connyay in #1922
* build: update go-yaml to v1.15.21 by @yxxhero in #1923
- Update to version 0.170.1:
* build(deps): bump github.com/goccy/go-yaml from 1.15.14 to
1.15.15 by @dependabot in #1882
* build(deps): bump github.com/hashicorp/go-slug from 0.15.0 to
0.16.3 by @dependabot in #1886 (CVE-2025-0377)
* Ensure 'helm repo add' is also not pollute on helmfile template
by @baurmatt in #1887
* build(deps): bump github.com/zclconf/go-cty from 1.16.1 to
1.16.2 by @dependabot in #1888
* fix: using correct option for takeOwnership flag by @blaskoa
in #1892
* fix typo in docs by @adamab48 in #1889
- Update to version 0.170.0:
* build(deps): bump github.com/goccy/go-yaml from 1.15.6 to 1.15.7
by @dependabot in #1818
* build(deps): bump golang.org/x/term from 0.26.0 to 0.27.0 by
@dependabot in #1817
* chore(doc): fix the indent of the selector usage sample yaml by
@Ladicle in #1819
* feat(state): add support for setString in ReleaseSpec and
HelmState by @yxxhero in #1821
* build(deps): bump github.com/goccy/go-yaml from 1.15.7 to 1.15.8
by @dependabot in #1822
* test(state): add TestHelmState_setStringFlags for setStringFlags
method by @yxxhero in #1823
* build(deps): bump k8s.io/apimachinery from 0.31.3 to 0.31.4 by
@dependabot in #1826
* build(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0 by
@dependabot in #1828
* build(deps): bump github.com/goccy/go-yaml from 1.15.8 to
1.15.9 by @dependabot in #1831
* build(deps): bump k8s.io/apimachinery from 0.31.4 to 0.32.0 by
@dependabot in #1830
* feat: updating sops version to 3.9.2 by @zhaque44 in #1834
* build(deps): bump github.com/goccy/go-yaml from 1.15.9 to
1.15.10 by @dependabot in #1835
* build(deps): bump helm.sh/helm/v3 from 3.16.3 to 3.16.4 by
@dependabot in #1836
* build: update Helm version to v3.16.4 in CI and Dockerfiles by
@yxxhero in #1837
* build(deps): bump github.com/goccy/go-yaml from 1.15.10 to
1.15.11 by @dependabot in #1838
* build(deps): bump filippo.io/age from 1.2.0 to 1.2.1 by
@dependabot in #1840
* build(deps): bump github.com/goccy/go-yaml from 1.15.11 to
1.15.12 by @dependabot in #1843
* build: update helm-diff to v3.9.13 in Dockerfiles and init.go
by @yxxhero in #1841
* build(deps): bump github.com/helmfile/chartify from 0.20.4 to
0.20.5 by @dependabot in #1845
* build(deps): bump github.com/goccy/go-yaml from 1.15.12 to
1.15.13 by @dependabot in #1844
* build(deps): bump jinja2 from 3.1.4 to 3.1.5 in /docs by
@dependabot in #1846
* CVE-2024-45338: updating golang.org/x/net: to version: v0.33.0
by @zhaque44 in #1849
* build(deps): bump github.com/zclconf/go-cty from 1.15.1 to
1.16.0 by @dependabot in #1851
* build(deps): bump golang.org/x/term from 0.27.0 to 0.28.0
by @dependabot in #1852
* update sops versions to 3.9.3 by @zhaque44 in #1861
* build(deps): bump github.com/hashicorp/go-getter from 1.7.6
to 1.7.7 by @dependabot in #1862
* feat: add --take-ownership flag to apply and sync commands by
@yxxhero in #1863
* fix: ensure plain http is supported across all helmfile
commands by @purpleclay in #1858
* fix: ensure development versions of charts can be used across
helmfile commands by @purpleclay in #1865
* build(deps): bump github.com/helmfile/chartify from 0.20.5 to
0.20.6 by @dependabot in #1866
* update kubectl version (1.30) to stay up to date with new
releases by @zhaque44 in #1867
* build(deps): bump github.com/zclconf/go-cty from 1.16.0 to
1.16.1 by @dependabot in #1870
* build(deps): bump github.com/hashicorp/go-getter from 1.7.7 to
1.7.8 by @dependabot in #1869
* feat: Add "--no-hooks" to helmfile template by @jwlai in #1813
* update helm and k8s versions in ci, dockerfiles, and go.mod by
@yxxhero in #1872
* build(deps): bump github.com/helmfile/vals from 0.38.0 to 0.39.0
by @dependabot in #1876
* build(deps): bump k8s.io/apimachinery from 0.32.0 to 0.32.1 by
@dependabot in #1873
* build(deps): bump github.com/goccy/go-yaml from 1.15.13 to
1.15.14 by @dependabot in #1874
* build: update helm-diff to v3.9.14 in Dockerfiles and init.go
by @yxxhero in #1877
- Update to version 0.169.2:
* build(deps): bump github.com/helmfile/vals from 0.37.6 to 0.37.7
by @dependabot in #1747
* build(deps): bump k8s.io/apimachinery from 0.31.1 to 0.31.2 by
@dependabot in #1754
* Reset extra args before running 'dependency build' by @baurmatt
in #1751
* Introducing Helmfile Guru on Gurubase.io by @kursataktas in #1748
* feat: add skip json schema validation during the install /upgrade
of a Chart by @zhaque44 in #1737
* fix(maputil): prevent nil value overwrite by @ban11111 in #1755
* build(deps): bump github.com/goccy/go-yaml from 1.12.0 to
1.13.0 by @dependabot in #1759
* fix: this url doesn't work anymore by @zekena2 in #1760
* build(deps): bump github.com/goccy/go-yaml from 1.13.0 to
1.13.1 by @dependabot in #1762
* build(deps): bump github.com/goccy/go-yaml from 1.13.1 to
1.13.2 by @dependabot in #1763
* build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to
4.5.1 by @dependabot in #1767
* build(deps): bump github.com/helmfile/vals from 0.37.7 to
0.37.8 by @dependabot in #1764
* build(deps): bump github.com/goccy/go-yaml from 1.13.2 to
1.13.4 by @dependabot in #1765
* fix(integration-tests): read correct minikube status (#1768)
by @ceriath in #1769
* build(deps): bump github.com/goccy/go-yaml from 1.13.4 to
1.13.5 by @dependabot in #1770
* Add integration tests for #1749 by @baurmatt in #1766
* fix: update acme chart URL in input.yaml by @yxxhero in #1773
* build(deps): bump github.com/goccy/go-yaml from 1.13.5 to
1.13.6 by @dependabot in #1771
* build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 by
@dependabot in #1775
* build(deps): bump golang.org/x/term from 0.25.0 to 0.26.0
by @dependabot in #1774
* Revive dead badge links by @eggplants in #1776
* feat: refactor label creation in state.go by @yxxhero in #1758
* docs: Add Gurubase badge to README-zh_CN by @yxxhero in #1777
* build(deps): bump github.com/goccy/go-yaml from 1.13.6 to
1.13.9 by @dependabot in #1781
* build(deps): bump github.com/goccy/go-yaml from 1.13.9 to
1.14.0 by @dependabot in #1782
* build(deps): bump github.com/goccy/go-yaml from 1.14.0 to
1.14.3 by @dependabot in #1788
* build(deps): bump helm.sh/helm/v3 from 3.16.2 to 3.16.3 by
@dependabot in #1786
* fix: update helm-diff to version 3.9.12 in CI and Dockerfiles
by @yxxhero in #1792
* build: update Helm version to v3.16.3 in CI and Dockerfiles
by @yxxhero in #1791
* feat: add HELMFILE_INTERACTIVE env var to enable interactive
mode by @thevops in #1787
* build(deps): bump github.com/hashicorp/hcl/v2 from 2.22.0 to
2.23.0 by @dependabot in #1793
* build(deps): bump github.com/Masterminds/semver/v3 from 3.3.0
to 3.3.1 by @dependabot in #1795
* chore: update with testify/assert assertion and table driven
tests for fs.go by @zhaque44 in #1794
* build(deps): bump k8s.io/apimachinery from 0.31.2 to 0.31.3
by @dependabot in #1798
* build(deps): bump github.com/stretchr/testify from 1.9.0 to
1.10.0 by @dependabot in #1800
* build(deps): bump github.com/goccy/go-yaml from 1.14.3 to
1.15.0 by @dependabot in #1804
* build(deps): bump github.com/goccy/go-yaml from 1.15.0 to
1.15.1 by @dependabot in #1807
* build(deps): bump github.com/zclconf/go-cty from 1.15.0 to
1.15.1 by @dependabot in #1806
* update example chart URL in remote-secrets doc by @daveneeley
in #1809
* build(deps): bump github.com/goccy/go-yaml from 1.15.1 to
1.15.3 by @dependabot in #1811
* build(deps): bump github.com/goccy/go-yaml from 1.15.3 to
1.15.6 by @dependabot in #1812
* fix: inject global values in Chartify by @xabufr in #1805
* build(deps): bump github.com/helmfile/vals from 0.37.8 to
0.38.0 by @dependabot in #1814
* build(deps): bump github.com/helmfile/chartify from 0.20.3 to
0.20.4 by @dependabot in #1815
* build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 by
@dependabot in #1816
- Update to version 0.169.1:
* feat: update sops version to 3.9.1 by @zhaque44 in #1742
* chore: improve test assertions and descriptions for file
download test by @zhaque44 in #1745
* feat: add 'hide-notes' flag to helm in sync and apply commands
by @yxxhero in #1746
</description>
<package>helmfile</package>
</patchinfo>

View File

@@ -0,0 +1,16 @@
<patchinfo incident="packagehub-28">
<packager>adrianSuSE</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for product-composer</summary>
<description>This update for product-composer fixes the following issues:
Changes in product-composer:
Update to version 0.6.18:
- Fix filtering of not used rpms in updateinfo
</description>
<package>product-composer</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,140 @@
<patchinfo incident="packagehub-29">
<packager>mgorse</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for gramps</summary>
<description>This update for gramps fixes the following issues:
Changes in gramps:
Update to version 6.0.3:
* Revert “Pass an object rather than a handle to the note editor callback”.
Fixes #13884.
* Update translations.
Update to version 6.0.2;
* Fix date modifiers for lt.
* Update translation template for new release.
* Add optimization to HasIdOf rules.
* Connect the Help button in the repository reference editor. Fixes #13352.
* Pass an object rather than a handle to the note editor callback. Fixes
#13702.
* Fix broken compound dates with bce year in XML import. Fixes #13631.
* Avoid multiple copies of Rules after Plugin manager reload. Fixes #13844.
* Fix bad surname list after upgrade from bsddb. Fixes #13807.
* Fix narrated web when two places have same name but a different type. Fixes
#13841.
* Fix crash in citation view due to wrong filter_info. Fixes #13796.
* Dont attempt to call set_orientation if self.pui is None. Fixes #13820.
* Dont crash in search_changed if self.search_list has no active item. Fixes
#13793.
* Fix incorrect addons project after upgrade from Gramps 5.2. Fixes #13789.
* Respect user choice of CSS files for existing narrated web site. Fixes
#13792.
* Ensure that the spell checker gets removed with the editor. Fixes #13795.
* Fix Optimizer class when combining sub-filters. Fixes #13799.
* Remove check for Gtk translations in Snap packages.
* Update translations.
Update to version 6.0.1:
* Update translations: ar, br, ca, cs, de, de_AT, el, en_GB, es, fi, fr, ga,
he, it, ja, ko, nb, nl, pl, pt_PT, ro, sk, sv, tr, uk, zh_CN.
* Update translation template for new release.
* Extend SearchBar so that it supports text search and filters. Fixes #13720.
* Fix patronymic in name display. Fixes #13764.
* Update links in the README to v6.0.
* Update the INSTALL file. Issue #13717.
+ Change install from setup.py to pip.
+ Update typical installation locations.
+ Remove the --resourcepath option which no longer exists.
* Fix wiki help link in the Addon Manager. Fixes #13735.
* Remove the outer progress meter from the filter prepare phase. Fixes #13725.
* Fix error when importing a GEDCOM file into an existing tree. Fixes #13726.
* Avoid empty metadata fields. Fixes #13721.
* Update Italian date modifiers.
Update to version 6.0.0:
* Full changelog available at
https://gramps-project.org/blog/2025/03/gramps-6-0-0-released/
* Reports
+ The narrative web report has four main improvements:
- New indexes for big databases.
- Add heatmap.
- Improve language and hamburger menus.
- Show other roles for an event.
+ Other report changes:
- Add gender symbol option to the detailed descendant, detailed ancestral
and descendant report.
- Add Gramps ID option to Kinship Report.
- Tree reports convert images to thumbnails for embedding. This allows
cropped rectangles selected in the media references to be displayed.
- Report options are now memorised on a per family tree (database) level.
* Gramplets
+ Improvements to the backlinks (References) gramplets:
+ Allow an object to be made active from within the backlinks gramplet.
+ Add a context menu to make “Edit” and “Make Active” more discoverable.
+ Allow objects in the backlinks gramplets to be dragged to the clipboard.
+ Add edit capability to the notes gramplets.
+ Enhanced version of the Filter gramplet.
* Selector dialogs
+ A standard search bar has been added to the person selector dialog. It
may default to selecting men or women by default, but selecting on other
columns is possible.
+ It is now possible to select multiple media objects in the media selector
and gallery tabs.
+ The media selector has a new path column.
* Other changes
+ Improvements to the Probably Alive code.
+ New rules: “Has Event”, “Has Source” and “Having Note of Type”.
+ New Gedcom 7.0 event roles: “Father”, Mother”, “Parent”, “Child”, “Multiple”, Friend”, “Neighbour” and “Officiator”.
+ Allow web-accessible file references in media objects.
+ Add a preference option for the selection of the toolbar style.
+ Enhancements to the help display. This is ongoing though.
+ Enable Web Connection menu in all list views.
Update to version 5.2.4:
* Fix Citations gramplet to recognize event reference citations. Fixes #13555.
* Fix exception when finding relationship to home person. Fixes #13495.
* Fix mouse scroll direction in pedigree view.
* Fix incorrect usage of exec. As of PEP558, locals() is not populated by
exec(). This change means that this call is broken on Python 3.13.
* Remove some usage of globals().
* Remove unnecessary use of exec.
* Test current_date being an empty date in probably alive function. Fixes #13431.
* Improve warning message in date_test.py when 3 tests are skipped.
* Correctly assign sortval = 0 when a date is EMPTY. Fixes #13415, #13423.
* Fix unicode conversion bug when upgrading from schema 16 to 17.
* Correct the documentation for the match() method of the Date class. Also
added more detail to documentation in 3 other cases. Fixes #13428.
* Gramps version output now reports OS rather than Platform. Fixes #12285.
* Downgrade upgrade messages from warning to informational level. Fixes #13464.
* Fix list size option in the top surnames gramplet. Allow users to specify
how many surnames appear in the list from 10 to 1000. Fixes #13448.
* Correct misleading description of GUI element placement.
* Use the preferred calendar for new dates only in the date editor. Fixes #13403.
* Fix docs typo in INSTALL file.
* Fix printing of Books. Fixes #12804.
* Render reports with styled notes containing subscript and strikethrough. Fixes #13417.
* Remove broken link to svn2cl package in the About dialog. Fixes #13152.
* Improve media performance in the narrative web report. Fixes #13370.
* Updated translations.
</description>
<package>gramps</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,15 @@
<patchinfo incident="packagehub-36">
<issue tracker="bnc" id="1252722">Evolution crashes when opening JPEG attachments after webkit2gtk3 security update</issue>
<packager>mgorse</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for evolution</summary>
<description>This update for evolution fixes the following issues:
Changes in evolution:
- Fix JavaScript dictionary objects creation. Needed for WebKitGTK &gt;= 2.50
(bsc#1252722 glgo#GNOME/evolution#3124).
</description>
<package>evolution</package>
</patchinfo>

View File

@@ -0,0 +1,31 @@
<patchinfo incident="packagehub-23">
<issue tracker="bnc" id="1238516">quilt: cannot refresh patches for non-x86 code</issue>
<issue tracker="bnc" id="1236907">rpm,quilt: update to rpm 4.20 breaks many "quilt setup" invocations</issue>
<packager>jdelvare</packager>
<rating>important</rating>
<category>recommended</category>
<summary>Recommended update for quilt</summary>
<description>This update for quilt fixes the following issues:
Changes in quilt:
Update to version 0.69:
* Fix escaping of % and backslash in patch names
* new: Stop claiming support of option -p ab
* patches: Several performance optimizations
* series: Simplify the code
- Make it possible to run "quilt setup" on a spec file which excludes the local
architecture (boo#1238516).
- Fix building noarch packages with rpm &gt;= 4.20 (boo#1236907).
- Make it possible to preprocess spec files which do not comply with the standard. Most
notably multibuild OBS spec files need to be preprocessed. Use
option "--spec-filter=obs" for these (boo#1236907).
- Detect the change of build root path hierarchy introduced by rpm 4.20 (boo#1236907).
- Install the bash completion file to the right directory (reported
by rpmlint).
</description>
<package>quilt</package>
</patchinfo>

View File

@@ -0,0 +1,19 @@
<patchinfo incident="packagehub-24">
<issue tracker="bnc" id="1253698">(CVE-2025-13223) (CVE-2025-13224) VUL-0 chromium: release 142.0.7444.175</issue>
<issue tracker="cve" id="2025-13224">(CVE-2025-13223) (CVE-2025-13224) VUL-0 chromium: release 142.0.7444.175</issue>
<issue tracker="cve" id="2025-13223"/>
<packager>oertel</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for chromium</summary>
<description>This update for chromium fixes the following issues:
Changes in chromium:
Chromium 142.0.7444.175 (boo#1253698):
* CVE-2025-13223: Type Confusion in V8
* CVE-2025-13224: Type Confusion in V8
</description>
<package>chromium</package>
</patchinfo>

View File

@@ -0,0 +1,67 @@
<patchinfo incident="packagehub-27">
<issue tracker="cve" id="2025-13016">firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component</issue>
<issue tracker="cve" id="2025-13019">firefox: Same-origin policy bypass in the DOM: Workers component</issue>
<issue tracker="cve" id="2025-13020">firefox: Use-after-free in the WebRTC: Audio/Video component</issue>
<issue tracker="cve" id="2025-13017">firefox: Same-origin policy bypass in the DOM: Notifications component</issue>
<issue tracker="cve" id="2025-13015">firefox: Spoofing issue in Firefox</issue>
<issue tracker="cve" id="2025-13012">VUL-0: MozillaFirefox / MozillaThunderbird: update to 145.0 and 140.5esr</issue>
<issue tracker="cve" id="2025-13018">firefox: Mitigation bypass in the DOM: Security component</issue>
<issue tracker="cve" id="2025-13014">firefox: Use-after-free in the Audio/Video component</issue>
<issue tracker="cve" id="2025-13013">firefox: Mitigation bypass in the DOM: Core &amp; HTML component</issue>
<issue tracker="bnc" id="1253188">VUL-0: MozillaFirefox / MozillaThunderbird: update to 145.0 and 140.5esr</issue>
<packager>Yoshio_Sato</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for MozillaThunderbird</summary>
<description>This update for MozillaThunderbird fixes the following issues:
Changes in MozillaThunderbird:
Mozilla Thunderbird 140.5.0 ESR
MFSA 2025-91 (bsc#1253188):
* CVE-2025-13012
Race condition in the Graphics component
* CVE-2025-13016
Incorrect boundary conditions in the JavaScript: WebAssembly
component
* CVE-2025-13017
Same-origin policy bypass in the DOM: Notifications component
* CVE-2025-13018
Mitigation bypass in the DOM: Security component
* CVE-2025-13019
Same-origin policy bypass in the DOM: Workers component
* CVE-2025-13013
Mitigation bypass in the DOM: Core &amp; HTML component
* CVE-2025-13020
Use-after-free in the WebRTC: Audio/Video component
* CVE-2025-13014
Use-after-free in the Audio/Video component
* CVE-2025-13015
Spoofing issue in Thunderbird
* fixed: Could not drag and drop ICS file to Today Pane
* fixed: With Thunderbird closed, clicking a 'mailto:' link to
send signed message failed
* fixed: Upgrade from 128.x-&gt;140.x broke authentication for
@att.net using Yahoo backend
Mozilla Thunderbird 140.4.0 ESR
* Account Hub is now disabled by default for second email account
* Users could not read mail signed with OpenPGP v6 and PQC keys
* Image preview in Insert Image dialog failed with CSP error for web resources
* Emptying trash on exit did not work with some providers
* Thunderbird could crash when applying filters
* Users were unable to override expired mail server certificate
* Opening Website header link in RSS feed incorrectly re-encoded
URL parameters
Mozilla Thunderbird 140.3.1 ESR:
* several bugfixes listed here
https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes
-------------------------------------------------------------------
</description>
<package>MozillaThunderbird</package>
</patchinfo>

View File

@@ -0,0 +1,25 @@
<patchinfo incident="packagehub-26">
<packager>cfconrad</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for synce4l</summary>
<description>This update for synce4l fixes the following issues:
synce4l was updated to 1.1.1:
* fix possible resource leak
* fix requested thread stack size
* fix scorecard.yml
* initialize pin ID to -1
* fix crash in dpll_rt_recv()
* create scorecard.yml
* unlink smc_socket_path before binding
* check smc_socket_path length
* change default smc_socket_path to /run/synce4l_socket
* fix more compiler warnings
- Initial packaging of version 1.0.0.
</description>
<package>synce4l</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,54 @@
<patchinfo incident="packagehub-25">
<issue tracker="bnc" id="1247368">nmon does not support max cpu configuration</issue>
<packager>dirkmueller</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for nmon</summary>
<description>This update for nmon fixes the following issues:
Changes in nmon:
- Increase CPU MAX to 2048 (bsc#1247368)
update to 16q:
* bugfixes
* POWER pool_capacity now correctly divided by 100.
* Online view POWER Welcome panel on POWER reports the top MHz
Small changes only:
* Boottime shown online in the Kernel "k" panel
* Utilisation stats: /proc/stat now reports 10 Utilisation stats
* Bug caused Seg Faults core dumps fixed while collecting to a
* Fix: Improved memory handling for extreme numbers of processes
(1000's) or rapid exec of processes (100's in a millisecond)
for large Linux servers. We have examples on Intel of 80 CPU
* Online Dot "." command no longer also changes what is displayed
as users said it was confusing.
* Minor online start-up flash screen text changes to include C
concise CPU stats and U for full Utilisation stats (all 10 of
them) instead of a file.
* Copyright and GPL v3 notice in the code plus online "h" and
* Source code re-indented.
* Fixes for Welcome screen on Mainframe
* Fixed for Curses handling when collecting data to file - big
bug for main frame and x86.
* Fixes for Welcome screen on Mainframe
* Fixed for Curses handling when collecting data to file - big
bug for main frame and x86.
+ You need a S822LC With NVIDIA GPU(s) and Nvidia Library
installed libnvidia-ml.so
* CPU Wide View - online view for up to 192 CPUs
* CPU MHz per Core ratings for machine that allow cores with
different MHz - online &amp; saved to file
* lscpu stats capture - online &amp; to file
* Z experiment mode showing CPU interrupts - Renamed U stats in
version 16b - online only
* Online colourising stats to aid usability - online only
* Massive improvement in help information: nmon -? and nmon -h
* Code change to alphabetic order for getopt() and key input
* New nmon logo on flash screen - online only
* Extra kernel stats - online only
</description>
<package>nmon</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,54 @@
<patchinfo incident="packagehub-35">
<issue tracker="cve" id="2023-43279">cve#2023-43279 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2023-43279</issue>
<issue tracker="bnc" id="1248964">VUL-0: CVE-2025-9649: tcpreplay: division-by-zero in the `calc_sleep_time` function of file send_packets.c when processing malformed PPS parameters</issue>
<issue tracker="bnc" id="1243845">VUL-0: CVE-2024-22654: tcpreplay: Infinite loop in tcpreplay with malformed ipv6 headers</issue>
<issue tracker="cve" id="2025-9649">cve#2025-9649 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9649</issue>
<issue tracker="cve" id="2025-8746">cve#2025-8746 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-8746</issue>
<issue tracker="bnc" id="1248596">VUL-0: CVE-2025-9385: A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use after free. The attack is restri ...</issue>
<issue tracker="cve" id="2023-4256">cve#2023-4256 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2023-4256</issue>
<issue tracker="bnc" id="1247919">VUL-0: CVE-2025-8746: tcpreplay: autogen: improper input validation and memory bounds checking when processing certain malformed configuration files</issue>
<issue tracker="cve" id="2025-9385">cve#2025-9385 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9385</issue>
<issue tracker="bnc" id="1222131">VUL-0: CVE-2024-3024: tcpreplay: heap-based buffer overflow</issue>
<issue tracker="cve" id="2025-9157">cve#2025-9157 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9157</issue>
<issue tracker="bnc" id="1218249">VUL-0: CVE-2023-4256: tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c</issue>
<issue tracker="cve" id="2025-9386">cve#2025-9386 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9386</issue>
<issue tracker="bnc" id="1248595">VUL-0: CVE-2025-9384: A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The manipulation results in null pointer dereference. The attack is only possible w ...</issue>
<issue tracker="cve" id="2025-9384">cve#2025-9384 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9384</issue>
<issue tracker="cve" id="2025-51006">cve#2025-51006 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-51006</issue>
<issue tracker="bnc" id="1248597">VUL-0: CVE-2025-9386: A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must b ...</issue>
<issue tracker="cve" id="2024-22654">cve#2024-22654 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2024-22654</issue>
<issue tracker="bnc" id="1221324">VUL-0: CVE-2023-43279: tcpreplay: null pointer dereference in mask_cidr6 component at cidr.c</issue>
<issue tracker="bnc" id="1248322">VUL-0: CVE-2025-9157: tcpreplay: The impacted element is the function untrunc_packet of the file src/tcpedit/edit_packet.c of the component tcprewrite.</issue>
<issue tracker="bnc" id="1250356">VUL-0: CVE-2025-51006: tcpreplay: double free in tcprewrite via a crafted pcap file</issue>
<issue tracker="cve" id="2024-3024">cve#2024-3024 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2024-3024</issue>
<packager>mkubecek</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for tcpreplay</summary>
<description>This update for tcpreplay fixes the following issues:
- update to 4.5.2:
* features added since 4.4.4
- fix/recalculate header checksum for ipv6-frag
- IPv6 frag checksum support
- AF_XDP socket support
- tcpreplay -w (write into a pcap file)
- tcpreplay --fixhdrlen
- --include and --exclude options
- SLL2 support
- Haiku support
* security fixes reported for 4.4.4 fixed in 4.5.2
- CVE-2023-4256 / bsc#1218249
- CVE-2023-43279 / bsc#1221324
- CVE-2024-3024 / bsc#1222131 (likely)
- CVE-2024-22654 / bsc#1243845
- CVE-2025-9157 / bsc#1248322
- CVE-2025-9384 / bsc#1248595
- CVE-2025-9385 / bsc#1248596
- CVE-2025-9386 / bsc#1248597
- CVE-2025-9649 / bsc#1248964
- CVE-2025-51006 / bsc#1250356
</description>
<package>tcpreplay</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,86 @@
<patchinfo incident="packagehub-34">
<issue tracker="bnc" id="1251471">VUL-0: CVE-2025-47911: gitea-tea: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents</issue>
<issue tracker="bnc" id="1251663">VUL-0: CVE-2025-58190: gitea-tea: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input</issue>
<issue tracker="cve" id="2025-58190">cve#2025-58190 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-58190</issue>
<issue tracker="cve" id="2025-47911">cve#2025-47911 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-47911</issue>
<packager>olh</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for gitea-tea</summary>
<description>This update for gitea-tea fixes the following issues:
Changes in gitea-tea:
- update to 0.11.1:
* 61d4e57 Fix Pr Create crash (#823)
* 4f33146 add test for matching logins (#820)
* 08b8398 Update README.md (#819)
- CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input (boo#1251663)
- CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (boo#1251471)
- update to 0.11.0:
* Fix yaml output single quote (#814)
* generate man page (#811)
* feat: add validation for object-format flag in repo create
command (#741)
* Fix release version (#815)
* update gitea sdk to v0.22 (#813)
* don't fallback login directly (#806)
* Check duplicated login name in interact mode when creating new
login (#803)
* Fix bug when output json with special chars (#801)
* add debug mode and update readme (#805)
* update go.mod to retract the wrong tag v1.3.3 (#802)
* revert completion scripts removal (#808)
* Remove pagination from context (#807)
* Continue auth when failed to open browser (#794)
* Fix bug (#793)
* Fix tea login add with ssh public key bug (#789)
* Add temporary authentication via environment variables (#639)
* Fix attachment size (#787)
* deploy image when tagging (#792)
* Add Zip URL for release list (#788)
* Use bubbletea instead of survey for interacting with TUI (#786)
* capitalize a few items
* rm out of date comparison file
* README: Document logging in to gitea (#790)
* remove autocomplete command (#782)
* chore(deps): update ghcr.io/devcontainers/features/git-lfs
docker tag to v1.2.5 (#773)
* replace arch package url (#783)
* fix: Reenable -p and --limit switches (#778)
- Update to 0.10.1+git.1757695903.cc20b52:
- feat: add validation for object-format flag in repo create
command (see gh#openSUSE/openSUSE-git#60)
- Fix release version
- update gitea sdk to v0.22
- don't fallback login directly
- Check duplicated login name in interact mode when creating
new login
- Fix bug when output json with special chars
- add debug mode and update readme
- update go.mod to retract the wrong tag v1.3.3
- revert completion scripts removal
- Remove pagination from context
- Continue auth when failed to open browser
- Fix bug
- Fix tea login add with ssh public key bug
- Add temporary authentication via environment variables
- Fix attachment size
- deploy image when tagging
- Add Zip URL for release list
- Use bubbletea instead of survey for interacting with TUI
- capitalize a few items
- rm out of date comparison file
- README: Document logging in to gitea
- remove autocomplete command
- chore(deps): update ghcr.io/devcontainers/features/git-lfs
docker tag to v1.2.5
- replace arch package url
- fix: Reenable `-p` and `--limit` switches
</description>
<package>gitea-tea</package>
<seperate_build_arch/>
</patchinfo>

View File

@@ -0,0 +1,62 @@
<patchinfo incident="packagehub-37">
<issue tracker="cve" id="2025-46817">cve#2025-46817 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-46817</issue>
<issue tracker="cve" id="2025-62507">cve#2025-62507 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-62507</issue>
<issue tracker="cve" id="2025-49844">cve#2025-49844 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-49844</issue>
<issue tracker="cve" id="2025-46818">cve#2025-46818 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-46818</issue>
<issue tracker="bnc" id="1250995">VUL-0: CVE-2025-49844,CVE-2025-46817,CVE-2025-46818,CVE-2025-46819: valkey,redis,redis7: multiple LUA issues</issue>
<issue tracker="bnc" id="1252996">VUL-0: CVE-2025-62507: redis,redis7,valkey: XACKDEL - potential stack overflow and RCE</issue>
<issue tracker="cve" id="2025-46819">cve#2025-46819 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-46819</issue>
<packager>ateixeira</packager>
<rating>critical</rating>
<category>security</category>
<summary>Security update for redis</summary>
<description>This update for redis fixes the following issues:
- Updated to 8.2.3 (boo#1252996 CVE-2025-62507)
* https://github.com/redis/redis/releases/tag/8.2.3
- Security fixes
- (CVE-2025-62507) Bug in `XACKDEL` may lead to stack overflow
and potential RCE
- Bug fixes
- `HGETEX`: A missing `numfields` argument when `FIELDS` is
used can lead to Redis crash
- An overflow in `HyperLogLog` with 2GB+ entries may result in
a Redis crash
- Cuckoo filter - Division by zero in Cuckoo filter insertion
- Cuckoo filter - Counter overflow
- Bloom filter - Arbitrary memory read/write with invalid
filter
- Bloom filter - Out-of-bounds access with empty chain
- Top-k - Out-of-bounds access
- Bloom filter - Restore invalid filter [We thank AWS security
for responsibly disclosing the security bug]
- Updated to 8.2.2 (boo#1250995)
* https://github.com/redis/redis/releases/tag/8.2.2
* Fixed Lua script may lead to remote code execution (CVE-2025-49844).
* Fixed Lua script may lead to integer overflow (CVE-2025-46817).
* Fixed Lua script can be executed in the context of another user
(CVE-2025-46818).
* Fixed LUA out-of-bound read (CVE-2025-46819).
* Fixed potential crash on Lua script or streams and HFE defrag.
* Fixed potential crash when using ACL rules.
* Added VSIM: new EPSILON argument to specify maximum distance.
* Added SVS-VAMANA: allow use of BUILD_INTEL_SVS_OPT flag.
* Added RESP3 serialization performance.
* Added INFO SEARCH: new SVS-VAMANA metrics.
- Updated to 8.2.1
* https://github.com/redis/redis/releases/tag/8.2.1
- Bug fixes
* #14240 INFO KEYSIZES - potential incorrect histogram updates
on cluster mode with modules
* #14274 Disable Active Defrag during flushing replica
* #14276 XADD or XTRIM can crash the server after loading RDB
* #Q6601 Potential crash when running FLUSHDB (MOD-10681)
* Performance and resource utilization
* Query Engine - LeanVec and LVQ proprietary Intel
optimizations were removed from Redis Open Source
* #Q6621 Fix regression in INFO (MOD-10779)
</description>
<package>redis</package>
</patchinfo>

View File

@@ -1,4 +1,4 @@
<patchinfo>
<patchinfo incident="packagehub-33">
<issue tracker="bnc" id="1250625">VUL-0: CVE-2025-11065: trivy: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs</issue>
<issue tracker="cve" id="2025-30204">VUL-0: CVE-2025-30204: TRACKERBUG: github.com/golang-jwt/jwt/v4,github.com/golang-jwt/jwt/v5: jwt-go allows excessive memory allocation during header parsing</issue>
<issue tracker="cve" id="2024-3817">VUL-0: CVE-2024-3817: TRACKERBUG: hashicorp/go-getter: argument injection when fetching remote default git branches</issue>
@@ -710,4 +710,4 @@ Update to version 0.56.2:
- Update to version 0.51.1 (bsc#1227010, CVE-2024-3817):
</description>
<package>trivy</package>
</patchinfo>
</patchinfo>

View File

@@ -0,0 +1,18 @@
<patchinfo incident="packagehub-32">
<issue tracker="bnc" id="1253957">VUL-0: CVE-2025-13470,CVE-2025-13402: rnp: rnp PKESK session keys generated as allzero</issue>
<issue tracker="cve" id="2025-13470">cve#2025-13470 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-13470</issue>
<issue tracker="cve" id="2025-13402">cve#2025-13402 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-13402</issue>
<packager>AndreasStieger</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for rnp</summary>
<description>This update for rnp fixes the following issues:
- update to 0.18.1:
* CVE-2025-13470: PKESK (public-key encrypted) session keys were
generated as all-zero, allowing trivial decryption of messages
encrypted with public keys only (boo#1253957, CVE-2025-13402)
</description>
<package>rnp</package>
<seperate_build_arch/>
</patchinfo>

File diff suppressed because it is too large Load Diff

2
pnpm

Submodule pnpm updated: 94b9cc28e1...4d55e02518

2
quilt

Submodule quilt updated: 7e71b8b100...819b5349fc

2
redis

Submodule redis updated: 17306a0a53...b68befea6b

2
rnp

Submodule rnp updated: 653d18b13f...b790fd4c71

Submodule synce4l updated: 3d3b1d48af...b86ac19f62