update vendored packages to the versions required for testing

- fix: typos
  - Use default temporary directory in tests
  - Go 1.24 is out, drop Go 1.22
bsc#1239200 (CVE-2025-22868): revendor
  to use golang.org/x/oauth2 v0.28.0
  (https://pkg.go.dev/vuln/GO-2025-3488).

.gitignore

@@ -1 +1,5 @@
 .osc
+_scmsync.obsinfo
+.assets/
+_buildconfig-*
+_buildinfo-*.xml

_scmsync.obsinfo

@@ -1,4 +0,0 @@
-mtime: 1721313376
-commit: 1f4f910ecae2f7532d113b38509d0c2a3ab66a0f1dc59a4810cf9f23ac6c0e46
-url: https://src.opensuse.org/mcepl_pkgs/fake-gcs-server.git
-revision: 1f4f910ecae2f7532d113b38509d0c2a3ab66a0f1dc59a4810cf9f23ac6c0e46

fake-gcs-server.changes

@@ -1,3 +1,57 @@
+-------------------------------------------------------------------
+Thu May 15 16:31:21 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
+
+- Drop BuildRequires: golang-packaging. The original macros for
+  file movements into GOPATH are obsolete with Go modules.
+- Update vendoring manually to make tests pass, even on non-Intel
+  architectures (bsc#1242242).
+
+-------------------------------------------------------------------
+Tue Mar 11 08:23:03 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
+
+- Update to 1.52.2:
+  - fix: typos
+  - Use default temporary directory in tests
+  - Go 1.24 is out, drop Go 1.22
+- bsc#1239200 (CVE-2025-22868): add update-golang-oauth2.patch to
+  revendor to use golang.org/x/oauth2 v0.28.0
+  (https://pkg.go.dev/vuln/GO-2025-3488).
+
+-------------------------------------------------------------------
+Tue Jan 28 22:48:18 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
+
+- Update to v1.52.1
+    - backend: always set StorageClass
+- Update to v1.52.0
+    - feat: Add _internal/delete_all to delete all data
+    - Add disposition and language to ComposeObject
+- Update to v1.51.0
+    - Disallow uppercase in bucket names
+    - Add POST workaround for clients which cannot PATCH
+    - Add support for getObjectACL and deleteObjectACL
+    - internal/backend: support OpenBSD to get file status last
+      changed info
+    - Persist created and updated time in compose
+    - fix: avoid IncompleteRead on completed partial reads
+    - Add support for StorageClass
+    - Add support for Content-Language
+    - Add support for canceling resumable uploads
+    - Add support for MaxResults when listing objects
+    - Upgrade deps
+- Update to v1.50.2
+    - Revert "fakestorage: remove unused type"
+- Update to v1.50.1
+    - internal/grpc: use the generated proto provided by Google
+- Update to v1.50.0
+    - github/workflows: add job to validate cross-compilation and
+      fix build on freebsd
+    - ci: fix goreleaser config
+    - Support content-disposition
+    - Support setting cache-control of object
+    - add aliases to support specifying EventOptions
+- Update to v1.49.3
+    - Go 1.23 is out, adopt it (CVE-2023-45288, bsc#1236521)
+
 -------------------------------------------------------------------
 Thu Jul 18 14:27:33 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
 
@@ -13,6 +67,7 @@ Thu Jul 18 14:27:33 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
   - Don't omit versioning.enabled in bucket response
   - Additional ACL response attributes
   - Additional bucket response attributes
+  - Upgrade deps (CVE-2023-45288, bsc#1236521)
 - Update to v1.48.0:
   - Fix brittle test
   - Fill the errors attribute for HTTP errors

fake-gcs-server.spec

@@ -21,18 +21,19 @@
 %global provider_prefix github.com/fsouza/fake-gcs-server/fakestorage
 %global import_path     %{provider_prefix}
 Name:           fake-gcs-server
-Version:        1.49.2
+Version:        1.52.2
 Release:        0
 Summary:        Google Cloud Storage emulator & testing library
 License:        BSD-2-Clause
 URL:            https://github.com/fsouza/fake-gcs-server
 Source0:        https://github.com/fsouza/%{name}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 Source1:        vendor.tar.xz
+# PATCH-FIX-UPSTREAM update-golang-oauth2.patch bsc#[0-9]+ mcepl@suse.com
+# update vendored golang-oauth2 (CVE-2025-22868, GO-2025-3488)
+Patch0:         update-golang-oauth2.patch
 BuildRequires:  fdupes
-BuildRequires:  golang-packaging
+BuildRequires:  golang(API) >= 1.23
 BuildRequires:  xz
-%{go_nostrip}
-%{go_provides}
 
 %description
 fake-gcs-server provides an emulator for Google Cloud Storage API. It can be used as a library in Go projects and/or as a standalone binary/Docker image.
@@ -41,22 +42,17 @@ fake-gcs-server provides an emulator for Google Cloud Storage API. It can be use
 %autosetup -p1 -a1
 
 %build
-%goprep %{import_path}
+export GOFLAGS="-buildmode=pie"
 go build
 
 %install
-%goinstall
+# find . -newer %%{_sourcedir}/*.spec -ls
 install -Dm755 fake-gcs-server %{buildroot}%{_bindir}/fake-gcs-server
-%gosrc
-
-%fdupes %{buildroot}%{_datadir}/go
-
-%{gofilelist}
 
 %check
-%gotest %{import_path}
+go test -v ./...
 
-%files -f file.lst
+%files
 %license LICENSE
 %doc README.md
 %{_bindir}/fake-gcs-server

update-golang-oauth2.patch

@@ -0,0 +1,149 @@
+---
+ go.mod |   24 +++++++++++++-----------
+ go.sum |   40 ++++++++++++++++++++--------------------
+ 2 files changed, 33 insertions(+), 31 deletions(-)
+
+Index: fake-gcs-server-1.52.2/go.mod
+===================================================================
+--- fake-gcs-server-1.52.2.orig/go.mod	2025-02-16 03:33:40.000000000 +0000
++++ fake-gcs-server-1.52.2/go.mod	2025-05-15 18:50:59.244413859 +0000
+@@ -7,10 +7,10 @@
+ 	github.com/google/go-cmp v0.6.0
+ 	github.com/gorilla/handlers v1.5.2
+ 	github.com/gorilla/mux v1.8.1
+-	github.com/minio/minio-go/v7 v7.0.86
++	github.com/minio/minio-go/v7 v7.0.91
+ 	github.com/pkg/xattr v0.4.10
+ 	github.com/stretchr/testify v1.10.0
+-	golang.org/x/oauth2 v0.26.0
++	golang.org/x/oauth2 v0.28.0
+ 	google.golang.org/api v0.215.0
+ )
+ 
+@@ -33,9 +33,9 @@
+ 	github.com/go-logr/stdr v1.2.2 // indirect
+ 	github.com/goccy/go-json v0.10.5 // indirect
+ 	github.com/google/s2a-go v0.1.8 // indirect
+-	github.com/klauspost/compress v1.17.11 // indirect
+-	github.com/klauspost/cpuid/v2 v2.2.9 // indirect
+-	github.com/minio/crc64nvme v1.0.0 // indirect
++	github.com/klauspost/compress v1.18.0 // indirect
++	github.com/klauspost/cpuid/v2 v2.2.10 // indirect
++	github.com/minio/crc64nvme v1.0.1 // indirect
+ 	github.com/minio/md5-simd v1.1.2 // indirect
+ 	github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
+ 	github.com/rs/xid v1.6.0 // indirect
+@@ -48,7 +48,7 @@
+ 	go.opentelemetry.io/otel/sdk v1.33.0 // indirect
+ 	go.opentelemetry.io/otel/sdk/metric v1.33.0 // indirect
+ 	go.opentelemetry.io/otel/trace v1.33.0 // indirect
+-	golang.org/x/crypto v0.33.0 // indirect
++	golang.org/x/crypto v0.36.0 // indirect
+ 	golang.org/x/time v0.8.0 // indirect
+ 	google.golang.org/genproto/googleapis/api v0.0.0-20250102185135-69823020774d // indirect
+ 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250102185135-69823020774d // indirect
+@@ -67,14 +67,16 @@
+ 	github.com/googleapis/gax-go/v2 v2.14.1 // indirect
+ 	github.com/pmezard/go-difflib v1.0.0 // indirect
+ 	go.opencensus.io v0.24.0 // indirect
+-	golang.org/x/net v0.35.0 // indirect
+-	golang.org/x/sync v0.11.0 // indirect
+-	golang.org/x/sys v0.30.0 // indirect
+-	golang.org/x/text v0.22.0 // indirect
++	golang.org/x/net v0.38.0 // indirect
++	golang.org/x/sync v0.12.0 // indirect
++	golang.org/x/sys v0.31.0 // indirect
++	golang.org/x/text v0.23.0 // indirect
+ 	google.golang.org/genproto v0.0.0-20241118233622-e639e219e697
+ 	google.golang.org/grpc v1.68.1
+ 	google.golang.org/protobuf v1.36.5
+ 	gopkg.in/yaml.v3 v3.0.1 // indirect
+ )
+ 
+-go 1.23
++go 1.23.0
++
++toolchain go1.24.1
+Index: fake-gcs-server-1.52.2/go.sum
+===================================================================
+--- fake-gcs-server-1.52.2.orig/go.sum	2025-02-16 03:33:40.000000000 +0000
++++ fake-gcs-server-1.52.2/go.sum	2025-05-15 18:52:25.107726836 +0000
+@@ -112,21 +112,21 @@
+ github.com/gorilla/handlers v1.5.2/go.mod h1:dX+xVpaxdSw+q0Qek8SSsl3dfMk3jNddUkMzo0GtH0w=
+ github.com/gorilla/mux v1.8.1 h1:TuBL49tXwgrFYWhqrNgrUNEY92u81SPhu7sTdzQEiWY=
+ github.com/gorilla/mux v1.8.1/go.mod h1:AKf9I4AEqPTmMytcMc0KkNouC66V3BtZ4qD5fmWSiMQ=
+-github.com/klauspost/compress v1.17.11 h1:In6xLpyWOi1+C7tXUUWv2ot1QvBjxevKAaI6IXrJmUc=
+-github.com/klauspost/compress v1.17.11/go.mod h1:pMDklpSncoRMuLFrf1W9Ss9KT+0rH90U12bZKk7uwG0=
++github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=
++github.com/klauspost/compress v1.18.0/go.mod h1:2Pp+KzxcywXVXMr50+X0Q/Lsb43OQHYWRCY2AiWywWQ=
+ github.com/klauspost/cpuid/v2 v2.0.1/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
+-github.com/klauspost/cpuid/v2 v2.2.9 h1:66ze0taIn2H33fBvCkXuv9BmCwDfafmiIVpKV9kKGuY=
+-github.com/klauspost/cpuid/v2 v2.2.9/go.mod h1:rqkxqrZ1EhYM9G+hXH7YdowN5R5RGN6NK4QwQ3WMXF8=
++github.com/klauspost/cpuid/v2 v2.2.10 h1:tBs3QSyvjDyFTq3uoc/9xFpCuOsJQFNPiAhYdw2skhE=
++github.com/klauspost/cpuid/v2 v2.2.10/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0=
+ github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+ github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
+ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+ github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+-github.com/minio/crc64nvme v1.0.0 h1:MeLcBkCTD4pAoU7TciAfwsfxgkhM2u5hCe48hSEVFr0=
+-github.com/minio/crc64nvme v1.0.0/go.mod h1:eVfm2fAzLlxMdUGc0EEBGSMmPwmXD5XiNRpnu9J3bvg=
++github.com/minio/crc64nvme v1.0.1 h1:DHQPrYPdqK7jQG/Ls5CTBZWeex/2FMS3G5XGkycuFrY=
++github.com/minio/crc64nvme v1.0.1/go.mod h1:eVfm2fAzLlxMdUGc0EEBGSMmPwmXD5XiNRpnu9J3bvg=
+ github.com/minio/md5-simd v1.1.2 h1:Gdi1DZK69+ZVMoNHRXJyNcxrMA4dSxoYHZSQbirFg34=
+ github.com/minio/md5-simd v1.1.2/go.mod h1:MzdKDxYpY2BT9XQFocsiZf/NKVtR7nkE4RoEpN+20RM=
+-github.com/minio/minio-go/v7 v7.0.86 h1:DcgQ0AUjLJzRH6y/HrxiZ8CXarA70PAIufXHodP4s+k=
+-github.com/minio/minio-go/v7 v7.0.86/go.mod h1:VbfO4hYwUu3Of9WqGLBZ8vl3Hxnxo4ngxK4hzQDf4x4=
++github.com/minio/minio-go/v7 v7.0.91 h1:tWLZnEfo3OZl5PoXQwcwTAPNNrjyWwOh6cbZitW5JQc=
++github.com/minio/minio-go/v7 v7.0.91/go.mod h1:uvMUcGrpgeSAAI6+sD3818508nUyMULw94j2Nxku/Go=
+ github.com/pkg/xattr v0.4.10 h1:Qe0mtiNFHQZ296vRgUjRCoPHPqH7VdTOrZx3g0T+pGA=
+ github.com/pkg/xattr v0.4.10/go.mod h1:di8WF84zAKk8jzR1UBTEWh9AUlIZZ7M/JNt8e9B6ktU=
+ github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo=
+@@ -172,8 +172,8 @@
+ go.opentelemetry.io/otel/trace v1.33.0/go.mod h1:uIcdVUZMpTAmz0tI1z04GoVSezK37CbGV4fr1f2nBck=
+ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+ golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+-golang.org/x/crypto v0.33.0 h1:IOBPskki6Lysi0lo9qQvbxiQ+FvsCC/YWOecCHAixus=
+-golang.org/x/crypto v0.33.0/go.mod h1:bVdXmD7IV/4GdElGPozy6U7lWdRXA4qyRVGJV57uQ5M=
++golang.org/x/crypto v0.36.0 h1:AnAEvhDddvBdpY+uR+MyHmuZzzNqXSe/GvuDeob5L34=
++golang.org/x/crypto v0.36.0/go.mod h1:Y4J0ReaxCR1IMaabaSMugxJES1EpwhBHhv2bDHklZvc=
+ golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+ golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
+ golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
+@@ -184,27 +184,27 @@
+ golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+ golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+ golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+-golang.org/x/net v0.35.0 h1:T5GQRQb2y08kTAByq9L4/bz8cipCdA8FbRTXewonqY8=
+-golang.org/x/net v0.35.0/go.mod h1:EglIi67kWsHKlRzzVMUD93VMSWGFOMSZgxFjparz1Qk=
++golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8=
++golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
+ golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
+-golang.org/x/oauth2 v0.26.0 h1:afQXWNNaeC4nvZ0Ed9XvCCzXM6UHJG7iCg0W4fPqSBE=
+-golang.org/x/oauth2 v0.26.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI=
++golang.org/x/oauth2 v0.28.0 h1:CrgCKl8PPAVtLnU3c+EDw6x11699EWlsDeWNWKdIOkc=
++golang.org/x/oauth2 v0.28.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8=
+ golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+ golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+ golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+-golang.org/x/sync v0.11.0 h1:GGz8+XQP4FvTTrjZPzNKTMFtSXH80RAzG+5ghFPgK9w=
+-golang.org/x/sync v0.11.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
++golang.org/x/sync v0.12.0 h1:MHc5BpPuC30uJk597Ri8TV3CNZcTLu6B6z4lJy+g6Jw=
++golang.org/x/sync v0.12.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
+ golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+ golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+ golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+ golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+ golang.org/x/sys v0.0.0-20220408201424-a24fb2fb8a0f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+-golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
+-golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
++golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik=
++golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+ golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+ golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+-golang.org/x/text v0.22.0 h1:bofq7m3/HAFvbF51jz3Q9wLg3jkvSPuiZu/pD1XwgtM=
+-golang.org/x/text v0.22.0/go.mod h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY=
++golang.org/x/text v0.23.0 h1:D71I7dUrlY+VX0gQShAThNGHFxZ13dGLBHQLVl1mJlY=
++golang.org/x/text v0.23.0/go.mod h1:/BLNzu4aZCJ1+kcD0DNRotWKage4q2rGVAg4o22unh4=
+ golang.org/x/time v0.8.0 h1:9i3RxcPv3PZnitoVGMPDKZSq1xW1gK1Xy3ArNOGZfEg=
+ golang.org/x/time v0.8.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
+ golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=