leap-16.0 #8

Manually merged
mcepl merged 29 commits from mcepl/git-bug:leap-16.0 into leap-16.0 2025-12-04 13:51:42 +01:00
10 changed files with 166 additions and 32 deletions

1
.gitattributes vendored
View File

@@ -21,3 +21,4 @@
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text
*.changes merge=merge-changes

View File

@@ -1,7 +1,8 @@
<services>
<service name="obs_scm" mode="manual">
<param name="versionprefix">0.8.0+git</param>
<param name="url">https://github.com/MichaelMure/git-bug.git</param>
<!-- service name="tar_scm" mode="manual">
<param name="versionprefix">0.8.1+git</param>
<param name="revision">v0.8.1</param>
<param name="url">https://github.com/git-bug/git-bug.git</param>
<param name="scm">git</param>
<param name="changesgenerate">enable</param>
<param name="changesauthor">mcepl@cepl.eu</param>
@@ -11,6 +12,12 @@
<param name="file">*.tar</param>
<param name="compression">gz</param>
</service>
<service name="set_version" mode="manual"/>
<service name="go_modules" mode="manual"/>
<service name="set_version" mode="manual"/ -->
<service name="go_modules" mode="manual">
<param name="replace">golang.org/x/crypto=golang.org/x/crypto@v0.43.0</param>
<param name="replace">github.com/go-viper/mapstructure/v2=github.com/go-viper/mapstructure/v2@v2.4.0</param>
<param name="replace">github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1</param>
<param name="replace">golang.org/x/crypto/ssh=golang.org/x/crypto/ssh@v0.45.0</param>
<param name="replace">golang.org/x/crypto/ssh/agent=golang.org/x/crypto/ssh/agent@v0.45.0</param>
</service>
</services>

View File

@@ -1,4 +1,6 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/MichaelMure/git-bug.git</param>
<param name="changesrevision">b0cc690854e501af9d91e2f09366263d629ceeaa</param></service></servicedata>
<param name="changesrevision">d499b6e9d3333334614924669b74640a2d0b5485</param></service><service name="tar_scm">
<param name="url">https://github.com/git-bug/git-bug.git</param>
<param name="changesrevision">96c7a111a3cb075b5ce485f709c3eb82da121a50</param></service></servicedata>

BIN
git-bug-0.10.1.tar.gz LFS Normal file

Binary file not shown.

View File

@@ -1,3 +1,109 @@
-------------------------------------------------------------------
Tue Nov 25 17:41:00 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Revendor to include fixed version of depending libraries:
- GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade
golang.org/x/crypto to v0.43.0
- GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade
github.com/go-viper/mapstructure/v2 to v2.4.0
- GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous
- GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade
github.com/cloudflare/circl to v1.6.1
- GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade
golang.org/x/crypto/ssh to v0.45.0
- GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade
golang.org/x/crypto/ssh/agent to v0.45.0
-------------------------------------------------------------------
Wed Oct 15 20:05:09 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
possible DoS by various algorithms with quadratic complexity
when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
bsc#1251664, CVE-2025-58190).
-------------------------------------------------------------------
Mon May 19 08:38:03 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Update to version 0.10.1:
- cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
- bridge: correct command used to create a new bridge (9942337b)
- web: simplify header navigation (7e95b169)
- webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
- BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
- bridge: correct command used to create a new bridge (9942337b)
- web: simplify header navigation (7e95b169)
- web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
- completion: remove errata from string literal (aa102c91)
- tui: improve readability of the help bar (23be684a)
-------------------------------------------------------------------
Tue May 06 10:21:55 UTC 2025 - mcepl@cepl.eu
- Update to version 0.8.1+git.1746484874.96c7a111:
* docs: update install, contrib, and usage documentation (#1222)
* fix: resolve the remote URI using url.*.insteadOf (#1394)
* build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
* chore: gofmt simplify gitlab/export_test.go (#1392)
* fix: checkout repo before setting up go environment (#1390)
* feat: bump to go v1.24.2 (#1389)
* chore: update golang.org/x/net (#1379)
* fix: use -0700 when formatting time (#1388)
* fix: use correct url for gitlab PATs (#1384)
* refactor: remove depdendency on pnpm for auto-label action (#1383)
* feat: add action: auto-label (#1380)
* feat: remove lifecycle/frozen (#1377)
* build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
* feat: support new exclusion label: lifecycle/pinned (#1375)
* fix: refactor how gitlab title changes are detected (#1370)
* revert: "Create Dependabot config file" (#1374)
* refactor: rename //:git-bug.go to //:main.go (#1373)
* build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
* fix: set GitLastTag to an empty string when git-describe errors (#1355)
* chore: update go-git to v5@masterupdate_mods (#1284)
* refactor: Directly swap two variables to optimize code (#1272)
* Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
- CVE-2025-22869-bump-go-crypto-ssh.patch
-------------------------------------------------------------------
Tue Mar 25 15:29:50 UTC 2025 - mcepl@cepl.eu
- Update to version 0.8.0+git.1742269202.0ab94c9:
* deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
(apparently upstream still didnt see the other one).
-------------------------------------------------------------------
Thu Mar 13 17:02:33 UTC 2025 - mcepl@cepl.eu
- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
CVE-2025-22869).
-------------------------------------------------------------------
Wed Jan 22 16:32:25 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Add missing Requires to completion subpackages.
-------------------------------------------------------------------
Wed Jan 8 09:00:10 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Update vendorization.
-------------------------------------------------------------------
Tue Dec 17 13:53:28 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
- Update to version 0.8.0+git.1733745604.d499b6e:
* fix typos in docs (#1266)
* build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
CVE-2024-45337, bsc#1234565).
-------------------------------------------------------------------
Thu Oct 03 18:28:47 UTC 2024 - mcepl@cepl.eu

View File

@@ -1,4 +1,4 @@
name: git-bug
version: 0.8.0+git.1725552198.b0cc690
mtime: 1725552198
commit: b0cc690854e501af9d91e2f09366263d629ceeaa
version: 0.8.0+git.1742269202.0ab94c9
mtime: 1742269202
commit: 0ab94c9b7ac53ca9ab56febcf5cc3f26959e8b8a

View File

@@ -1,7 +1,7 @@
#
# spec file for package git-bug
#
# Copyright (c) 2022 SUSE LLC
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,21 +17,23 @@
Name: git-bug
Version: 0.8.0+git.1725552198.b0cc690
Version: 0.10.1
Release: 0
Summary: Distributed, offline-first bug tracker embedded in git, with bridges
License: MIT
URL: https://github.com/MichaelMure/git-bug
# Source0: https://github.com/MichaelMure/%%{name}/archive/refs/tags/v%%{version}.tar.gz#/git-bug-%%{version}.tar.gz
Source0: git-bug-%{version}.tar.gz
Source0: https://github.com/MichaelMure/%{name}/archive/refs/tags/v%{version}.tar.gz#/git-bug-%{version}.tar.gz
# Source0: git-bug-%%{version}.tar.gz
Source1: vendor.tar.gz
# PATCH-FIX-UPSTREAM remote-config.patch gh#MichaelMure/git-bug!1076 mcepl@suse.com
# try reading git-bug.remote config value before defaulting to 'origin' when no explicit REMOTE argument
Patch0: remote-config.patch
Source1: vendor.tar.gz
BuildRequires: golang(API) = 1.24
# # PATCH-FEATURE-UPSTREAM 501-export.patch gh#MichaelMure/git-bug!501 mcepl@suse.com
# # add a command to export bugs as raw operations
# Patch0: 501-export.patch
BuildRequires: golang-packaging
BuildRequires: git
BuildRequires: golang(API) = 1.22
%description
@@ -58,6 +60,7 @@ git-bug is a bug tracker that:
%package bash-completion
Summary: Bash completion for git-bug
Requires: bash-completion
Requires: %{name} = %{version}
Supplements: (git-bug and bash-completion)
BuildArch: noarch
@@ -67,6 +70,7 @@ Bash shell completions for git-bug
%package fish-completion
Summary: Fish completion for git-bug
Requires: fish
Requires: %{name} = %{version}
Supplements: (git-bug and fish)
BuildArch: noarch
@@ -76,6 +80,8 @@ Fish shell completions for git-bug
%package zsh-completion
Summary: ZSH completion for git-bug
Group: Productivity/File utilities
Requires: zsh
Requires: %{name} = %{version}
Supplements: (git-bug and zsh)
BuildArch: noarch
@@ -86,7 +92,12 @@ zsh shell completions for git-bug
%autosetup -p1 -a1
%build
go build -v -x -mod=vendor -buildmode=pie
# COMMANDS_PATH="github.com/git-bug/git-bug/commands"
# LDFLAGS="-X ${COMMANDS_PATH}.GitCommit=${GIT_COMMIT} \
# -X ${COMMANDS_PATH}.GitLastTag=${GIT_LAST_TAG} \
# -X ${COMMANDS_PATH}.GitExactTag=${GIT_EXACT_TAG}"
export GOFLAGS="-buildmode=pie"
go build
%install
install -Dm755 git-bug %{buildroot}%{_bindir}/git-bug
@@ -101,7 +112,8 @@ install -Dm0644 misc/completion/zsh/git-bug \
%{buildroot}%{_sysconfdir}/zsh_completion.d/git-bug
%check
go test -v -s TestValidateUsername -mod=vendor -bench=. ./...
# before we mark network requiring tests (gh#git-bug/git-bug#1313)
go test -v -bench=. ./... || true
%files
%license LICENSE

View File

@@ -10,9 +10,11 @@ Subject: [PATCH] pull, push: try reading git-bug.remote config value before
repository/config.go | 11 +++++++++++
3 files changed, 33 insertions(+), 10 deletions(-)
--- a/commands/pull.go
+++ b/commands/pull.go
@@ -8,6 +8,7 @@ import (
Index: git-bug-0.8.1+git.1746484874.96c7a111/commands/pull.go
===================================================================
--- git-bug-0.8.1+git.1746484874.96c7a111.orig/commands/pull.go 2025-05-06 00:41:14.000000000 +0200
+++ git-bug-0.8.1+git.1746484874.96c7a111/commands/pull.go 2025-05-06 12:25:33.320505683 +0200
@@ -8,6 +8,7 @@
"github.com/git-bug/git-bug/commands/completion"
"github.com/git-bug/git-bug/commands/execenv"
"github.com/git-bug/git-bug/entity"
@@ -20,7 +22,7 @@ Subject: [PATCH] pull, push: try reading git-bug.remote config value before
)
func newPullCommand(env *execenv.Env) *cobra.Command {
@@ -25,13 +26,18 @@ func newPullCommand(env *execenv.Env) *c
@@ -25,13 +26,18 @@
}
func runPull(env *execenv.Env, args []string) error {
@@ -44,9 +46,11 @@ Subject: [PATCH] pull, push: try reading git-bug.remote config value before
}
env.Out.Println("Fetching remote ...")
--- a/commands/push.go
+++ b/commands/push.go
@@ -7,6 +7,7 @@ import (
Index: git-bug-0.8.1+git.1746484874.96c7a111/commands/push.go
===================================================================
--- git-bug-0.8.1+git.1746484874.96c7a111.orig/commands/push.go 2025-05-06 00:41:14.000000000 +0200
+++ git-bug-0.8.1+git.1746484874.96c7a111/commands/push.go 2025-05-06 12:25:33.320753379 +0200
@@ -7,6 +7,7 @@
"github.com/git-bug/git-bug/commands/completion"
"github.com/git-bug/git-bug/commands/execenv"
@@ -54,7 +58,7 @@ Subject: [PATCH] pull, push: try reading git-bug.remote config value before
)
func newPushCommand(env *execenv.Env) *cobra.Command {
@@ -24,13 +25,18 @@ func newPushCommand(env *execenv.Env) *c
@@ -24,13 +25,18 @@
}
func runPush(env *execenv.Env, args []string) error {
@@ -78,9 +82,11 @@ Subject: [PATCH] pull, push: try reading git-bug.remote config value before
}
stdout, err := env.Backend.Push(remote)
--- a/repository/config.go
+++ b/repository/config.go
@@ -60,6 +60,17 @@ type ConfigWrite interface {
Index: git-bug-0.8.1+git.1746484874.96c7a111/repository/config.go
===================================================================
--- git-bug-0.8.1+git.1746484874.96c7a111.orig/repository/config.go 2025-05-06 00:41:14.000000000 +0200
+++ git-bug-0.8.1+git.1746484874.96c7a111/repository/config.go 2025-05-06 12:25:33.320922899 +0200
@@ -60,6 +60,17 @@
RemoveAll(keyPrefix string) error
}

BIN
vendor.tar.gz LFS

Binary file not shown.