leap-16.0 #8

Manually merged
mcepl merged 29 commits from mcepl/git-bug:leap-16.0 into leap-16.0 2025-12-04 13:51:42 +01:00

29 Commits

Author SHA256 Message Date
2390ae6cee Revendor to include fixed version of depending libraries
- GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade
    golang.org/x/crypto to v0.43.0
  - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade
    github.com/go-viper/mapstructure/v2 to v2.4.0
  - GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous
  - GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade
    github.com/cloudflare/circl to v1.6.1
  - GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade
    golang.org/x/crypto/ssh to v0.45.0
  - GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade
    golang.org/x/crypto/ssh/agent to v0.45.0
2025-12-01 12:49:34 +01:00
c59d8fd39f Update to version 0.10.1:
- cli: ignore missing sections when removing configuration (ddb22a2f)
Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)
2025-12-01 12:49:12 +01:00
1d76ad48de Update to version 0.8.1+git.1746484874.96c7a111:
* docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch
2025-12-01 12:48:52 +01:00
2f237648f6 - Update to version 0.8.0+git.1742269202.0ab94c9:
* deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).
- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).
2025-12-01 12:48:34 +01:00
4826cd1151 Update vendorization. 2025-12-01 12:47:33 +01:00
8c2532d6f1 Revendor to include fixed version of depending libraries
- GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade
    golang.org/x/crypto to v0.43.0
  - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade
    github.com/go-viper/mapstructure/v2 to v2.4.0
  - GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous
  - GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade
    github.com/cloudflare/circl to v1.6.1
  - GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade
    golang.org/x/crypto/ssh to v0.45.0
  - GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade
    golang.org/x/crypto/ssh/agent to v0.45.0
2025-12-01 12:47:15 +01:00
addf54ad77 Update to version 0.10.1:
- cli: ignore missing sections when removing configuration (ddb22a2f)
Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)
2025-12-01 12:46:48 +01:00
25a56cc742 - Update to version 0.8.0+git.1742269202.0ab94c9:
* deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).
- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).
2025-12-01 12:46:21 +01:00
ee758f0302 Update vendorization. 2025-12-01 12:46:03 +01:00
cbfe50b11c Update to version 0.8.0+git.1733745604.d499b6e:
* fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).
2025-12-01 12:45:27 +01:00
4a4372415e Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
reading git-bug.remote config value before defaulting to 'origin'
when no explicit REMOTE argument.
2025-12-01 12:45:26 +01:00
a3a4f99fcb Merge remote-tracking branch 'origin/leap-16.0' into HEAD 2025-12-01 12:43:08 +01:00
43a25d6598 Accepting request 1320059 from devel:tools:scm
- Revendor to include fixed version of depending libraries:
  - GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade
    golang.org/x/crypto to v0.43.0
  - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade
    github.com/go-viper/mapstructure/v2 to v2.4.0
  - GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous
  - GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade
    github.com/cloudflare/circl to v1.6.1
  - GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade
    golang.org/x/crypto/ssh to v0.45.0
  - GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade
    golang.org/x/crypto/ssh/agent to v0.45.0

OBS-URL: https://build.opensuse.org/request/show/1320059
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=13
2025-11-26 16:15:50 +00:00
6911af6e1c Accepting request 1312668 from devel:tools:scm
- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).

OBS-URL: https://build.opensuse.org/request/show/1312668
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=12
2025-10-21 09:17:02 +00:00
e594f64458 Accepting request 1278375 from devel:tools:scm
- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)

OBS-URL: https://build.opensuse.org/request/show/1278375
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=11
2025-05-20 07:38:42 +00:00
53d65ccf0f Accepting request 1275060 from devel:tools:scm
- Update to version 0.8.1+git.1746484874.96c7a111:
* docs: update install, contrib, and usage documentation (#1222)
* fix: resolve the remote URI using url.*.insteadOf (#1394)
* build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
* chore: gofmt simplify gitlab/export_test.go (#1392)
* fix: checkout repo before setting up go environment (#1390)
* feat: bump to go v1.24.2 (#1389)
* chore: update golang.org/x/net (#1379)
* fix: use -0700 when formatting time (#1388)
* fix: use correct url for gitlab PATs (#1384)
* refactor: remove depdendency on pnpm for auto-label action (#1383)
* feat: add action: auto-label (#1380)
* feat: remove lifecycle/frozen (#1377)
* build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
* feat: support new exclusion label: lifecycle/pinned (#1375)
* fix: refactor how gitlab title changes are detected (#1370)
* revert: "Create Dependabot config file" (#1374)
* refactor: rename //:git-bug.go to //:main.go (#1373)
* build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
* fix: set GitLastTag to an empty string when git-describe errors (#1355)
* chore: update go-git to v5@masterupdate_mods (#1284)
* refactor: Directly swap two variables to optimize code (#1272)
* Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
- CVE-2025-22869-bump-go-crypto-ssh.patch

OBS-URL: https://build.opensuse.org/request/show/1275060
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=10
2025-05-07 17:19:03 +00:00
736dfb254c Accepting request 1256145 from devel:Factory:git-workflow:staging:mcepl:git-bug:7
- Update to version 0.8.0+git.1742269202.0ab94c9:

- Update to version 0.8.0+git.1742269202.0ab94c9:

(🤖: Submission of git-bug via #7 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1256145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=9
2025-03-26 20:20:52 +00:00
62690c0dc5 Accepting request 1239615 from devel:Factory:git-workflow:staging:mcepl:git-bug:4
Update To D499b6e

Update to the commit d499b6e.

(🤖: Submission of git-bug via #4 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1239615
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=8
2025-01-23 17:02:39 +00:00
f84e3f119c [info=ab782b159e8850be0471942de2f849b659567314a17a59e7663ce792e9f48abc]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=6
2025-01-22 16:33:00 +00:00
a45cc7b70a [info=f332bd0a0cbb8c2e69a5ca29a0c130cb7c2e5b77e43712f39412b52dc47c8ac8]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=5
2025-01-22 15:43:03 +00:00
8eda2c2f40 Accepting request 1235844 from devel:Factory:git-workflow:staging:mcepl:git-bug:4
Update To D499b6e

Update to the commit d499b6e.

(🤖: Submission of git-bug via #4 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1235844
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=7
2025-01-09 14:07:47 +00:00
49bc748fa9 [info=aaf8ee748406cfd8a24815afb6cad5ebfcd523a41bb54afe583ce5f567c16682]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=4
2025-01-08 09:16:06 +00:00
6fa5e7c335 [info=eff75f601dc996202884e1ff651d125e45bc69e73c9530e62abe3be97c7eb860]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=3
2025-01-08 09:03:15 +00:00
c87da1ac25 [info=5b5e1e4425abe81c6eb06b5f66c4a96f5fb3fbba1e7e492a2890642bbbeaa96c]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=2
2025-01-08 09:00:38 +00:00
600eb6be4a [info=8d9522113e7a913f925136b2791d03c574a9ebb8c3769f747425dd7821d9e7dd]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=1
2025-01-08 08:59:16 +00:00
c2907d34aa Accepting request 1231700 from devel:Factory:git-workflow:staging:mcepl:git-bug:2
Cve 2024 45337 Crypto Bump

- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).

(🤖: Submission of git-bug via #2 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1231700
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=6
2024-12-17 18:25:24 +00:00
57f0d29002 [info=fb65c5d555a534c3ef98b414d3cce1673c2de7ec09a005f8718ebf92aab17b08]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:2/git-bug?expand=0&rev=2
2024-12-17 14:09:44 +00:00
cd87a14c18 Accepting request 1205581 from devel:Factory:git-workflow:staging:mcepl:git-bug:1
Update to version 0.8.0+git.1725552198.b0cc690:

Also switch to _service and generated tarball

(🤖: Submission of git-bug via #1 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1205581
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=5
2024-10-04 15:10:44 +00:00
e43f811c53 [info=6747d5f7671b55c0ff5e8a8c7910ab57476d8671674e9ffa239cb588c8f7443a]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:1/git-bug?expand=0&rev=1
2024-10-03 18:49:59 +00:00