Accepting request 1296090 from Application:Geo

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1296090
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/geoipupdate?expand=0&rev=30

_service

@@ -2,7 +2,7 @@
     <service name="tar_scm" mode="disabled">
         <param name="scm">git</param>
         <param name="url">https://github.com/maxmind/geoipupdate</param>
-        <param name="revision">v7.0.1</param>
+        <param name="revision">v7.1.1</param>
         <param name="exclude">.git</param>
         <param name="versionformat">@PARENT_TAG@</param>
         <param name="changesgenerate">enable</param>

_servicedata

@@ -1,6 +1,6 @@
 <servicedata>
     <service name="tar_scm">
         <param name="url">https://github.com/maxmind/geoipupdate</param>
-        <param name="changesrevision">0df16c46069da6157a6e00ac7b9c552f037d906a</param>
+        <param name="changesrevision">6664d8b979d8ee43be2cfd2f92b8bdeed93c0ad7</param>
     </service>
 </servicedata>

geoipupdate-7.1.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a6b0d823904168ca902c2ed0279c5567c41ebea9e48a0bad1601c0b0482c5f09
+size 56681

geoipupdate.changes

@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Mon Jul 21 10:07:05 UTC 2025 - Valentin Lefebvre <valentin.lefebvre@suse.com>
+
+- Update to version 7.1.1:
+  * Update dependencies and re-build binaries with new Go version.
+    No substantive changes.
+
+-------------------------------------------------------------------
+Tue Apr 15 01:16:35 UTC 2025 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
+
+- Add more hardening options, restrict write access to system
+- Update twice a week, following current MaxMind release schedule
+- Track timer units in scriptlets
+
+-------------------------------------------------------------------
+Mon Mar 10 09:53:16 UTC 2025 - valentin.lefebvre@suse.com
+
+- Update to version 7.1.0:
+  * Update for v7.1.0
+  * Set release date
+  * Bump bobg/modver from 2.10.1 to 2.10.2
+  * Don't mix receiver type
+  * Remove deactivated linters
+  * Bump golang.org/x/net from 0.30.0 to 0.31.0
+  * Export HTTPError
+  * Bump golang.org/x/net from 0.29.0 to 0.30.0
+  * Bump bobg/modver from 2.10.0 to 2.10.1
+  * Bump golang.org/x/net from 0.28.0 to 0.29.0
+  * Bump bobg/modver from 2.9.0 to 2.10.0
+  * Bump golang.org/x/net from 0.27.0 to 0.28.0
+  * Bump golang.org/x/sync from 0.7.0 to 0.8.0
+  * Bump github.com/gofrs/flock from 0.12.0 to 0.12.1
+  * Bump golang.org/x/net from 0.26.0 to 0.27.0
+  * Bump github.com/gofrs/flock from 0.11.0 to 0.12.0
+  * Bump bobg/modver from 2.8.1 to 2.9.0
+  * Bump github.com/gofrs/flock from 0.9.0 to 0.11.0
+  * Run go mod tidy
+  * Bump github.com/gofrs/flock from 0.8.1 to 0.9.0
+  * Updates for GoReleaser v2
+  * Add permission for scheduled CodeQL run
+  * Add modver action
+  * Do not run CodeQL on push
+  * Remove example crontab file
+  * Update frequency references database release schedule
+  * Bump golang.org/x/net from 0.25.0 to 0.26.0
+  * Update golangci-lint config
+  * Do not require from HTTP handlers
+  * Bump golangci/golangci-lint-action from 5 to 6
+  * Bump golang.org/x/net from 0.24.0 to 0.25.0
+  * Update golangci-lint config
+  * Bump golangci/golangci-lint-action from 4 to 5
+  * Add change-log item for #310
+  * Respect host scheme if set
+  * Add check to verify that tag matches go.mod
+  * Ignore dist dir
+
 -------------------------------------------------------------------
 Mon May 06 14:36:34 UTC 2024 - valentin.lefebvre@suse.com
 

geoipupdate.service

@@ -1,22 +1,38 @@
 [Unit]
-Description=Update GeoIP databases
+Description=Update of GeoIP2/GeoLite2 databases
 Documentation=man:geoipupdate(1) man:GeoIP.conf(5)
 
 [Service]
-# added automatically, for details please see
-# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
-ProtectSystem=full
-ProtectHome=true
-PrivateDevices=true
-ProtectHostname=true
-ProtectClock=true
-ProtectKernelTunables=true
-ProtectKernelModules=true
-ProtectKernelLogs=true
-ProtectControlGroups=true
-RestrictRealtime=true
-# end of automatic additions 
 Type=oneshot
-WorkingDirectory=/var/lib/GeoIP
 
 ExecStart=/usr/bin/geoipupdate
+
+AmbientCapabilities=
+CapabilityBoundingSet=
+KeyringMode=private
+LockPersonality=yes
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+MountFlags=private
+NoNewPrivileges=yes
+PrivateDevices=yes
+PrivateTmp=yes
+PrivateUsers=yes
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHome=yes
+ProtectHostname=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectSystem=strict
+RemoveIPC=yes
+RestrictAddressFamilies=AF_INET AF_INET6
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+SystemCallArchitectures=native
+SystemCallFilter=@basic-io @file-system @io-event @network-io @process @signal flock fsync madvise uname
+
+ReadWritePaths=/var/lib/GeoIP
+WorkingDirectory=/var/lib/GeoIP

geoipupdate.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package geoipupdate
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,14 +17,13 @@
 
 
 Name:           geoipupdate
-Version:        7.0.1
+Version:        7.1.1
 Release:        0
 Summary:        GeoIP update client code
 License:        Apache-2.0 OR MIT
 Group:          Productivity/Networking/Other
 URL:            https://github.com/maxmind/geoipupdate
 Source0:        %{name}-%{version}.tar.gz
-# go mod vendor && tar cf vendor.tar.gz vendor/
 Source1:        vendor.tar.gz
 Source2:        geoipupdate.timer
 Source3:        geoipupdate.service
@@ -84,16 +83,16 @@ sed -ri \
 
 %if 0%{?suse_version} >= 1500
 %pre
-%service_add_pre %{name}.service
+%service_add_pre %{name}.service %{name}.timer
 
 %post
-%service_add_post %{name}.service
+%service_add_post %{name}.service %{name}.timer
 
 %preun
-%service_del_preun %{name}.service
+%service_del_preun %{name}.service %{name}.timer
 
 %postun
-%service_del_postun %{name}.service
+%service_del_postun %{name}.service %{name}.timer
 %endif
 
 %files

geoipupdate.timer

@@ -1,12 +1,14 @@
 [Unit]
-Description=Weekly update of GeoLite2 databases
+Description=Scheduled update of GeoIP2/GeoLite2 databases
 Documentation=man:geoipupdate(1) man:GeoIP.conf(5)
 
 [Timer]
-OnUnitInactiveSec=1w
-OnStartupSec=1h
+OnCalendar=Wed,Sat America/New_York
+
 AccuracySec=1h
+RandomizedDelaySec=3h
+
+Persistent=true
 
 [Install]
 WantedBy=timers.target
-