Commit Graph

  • e8f7ed9227 Accepting request 1320299 from utilities factory leap-16.0 Ana Guerrero 2025-11-27 14:21:33 +00:00
  • 5081763a68 For some reason changelog was forgotten Michael Vetter 2025-11-27 08:37:59 +00:00
  • 7087e87f5d - Security: * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0 Fixes CVE-2025-47913 (bsc#1253593), CVE-2025-58181 (bsc#1253922), CVE-2025-47914 (bsc#1254051) Michael Vetter 2025-11-26 17:55:12 +00:00
  • fe1c7181bd Accepting request 1300995 from utilities Ana Guerrero 2025-08-25 18:37:06 +00:00
  • b284749fa5 - Packaging improvements: * Drop Requires: golang-packaging. The recommended Go toolchain dependency expression is BuildRequires: golang(API) >= 1.x or optionally the metapackage BuildRequires: go * Use BuildRequires: golang(API) >= 1.19 matching go.mod * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Remove go build -o output binary location and name. Default binary has the same name as package of func main() and is placed in the top level of the build directory. * Add basic %check to execute binary --help Michael Vetter 2025-08-22 15:22:53 +00:00
  • 3d9846b1c6 - Packaging improvements: * Service go_modules replace dependencies with CVEs * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1 Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm * Replace golang.org/x/net=golang.org/x/net@v0.36.0 Fixes GO-2025-3503 CVE-2025-22870 * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0 Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8 Fixes GO-2025-3487 CVE-2025-22869 * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0 Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4 Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m * Service tar_scm set mode manual from disabled * Service tar_scm create archive from git so we can exclude vendor directory upstream committed to git. Committed vendor directory contents have build issues even after go mod tidy. * Service tar_scm exclude dir vendor * Service set_version set mode manual from disabled * Service set_version remove param basename not needed Michael Vetter 2025-08-22 06:39:43 +00:00
  • bda4e81f54 Use go-git 5.13.0 via replace in _service Michael Vetter 2025-08-21 13:15:33 +00:00
  • 27221c02f9 - bsc#1247629 (CVE-2025-21613): Update go-git to 5.13 Update vendor tarball and add cheat-CVE-2025-21613.patch Michael Vetter 2025-08-21 12:18:11 +00:00
  • 27656594fe Accepting request 1133591 from utilities leap-16.1 Ana Guerrero 2023-12-17 20:32:07 +00:00
  • 5ba79c0c0a - Update to 4.4.2: * Bump chroma to newest version * Remove plan9 support due to build failure * Upgrade to yaml.v3 Michael Vetter 2023-12-16 11:29:36 +00:00
  • 387aaacb7c Accepting request 1132917 from utilities Ana Guerrero 2023-12-15 20:47:29 +00:00
  • 41fbee69c3 - Update to 4.4.1: * Update dependencies * Make minor changes to appease revive (linter) Michael Vetter 2023-12-13 15:52:19 +00:00
  • 4897b271ad Accepting request 1058676 from utilities Dominique Leuenberger 2023-01-16 16:58:58 +00:00
  • d857fed737 - Remove dependency on pandoc: Upsteam ships a man page. Lets assume they update it upon each release and take it without generating ourselves Michael Vetter 2023-01-16 10:59:45 +00:00
  • d399e036ec - Only build manpage using pandoc when on x86_64. Pandoc seems to not be available on all archs. Michael Vetter 2023-01-13 08:38:04 +00:00
  • c659f2e7f0 Accepting request 1057771 from home:jubalh Michael Vetter 2023-01-11 12:00:03 +00:00