Accepting request 1323252 from devel:tools:scm

OBS-URL: https://build.opensuse.org/request/show/1323252
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gitsign?expand=0&rev=10

_service

@@ -3,18 +3,20 @@
     <param name="url">https://github.com/sigstore/gitsign</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.10.2</param>
+    <param name="revision">v0.13.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
-    <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
+    <param name="changesgenerate">enable</param>
   </service>
   <service name="set_version" mode="manual">
   </service>
-  <service name="tar" mode="buildtime"/>
+  <service name="go_modules" mode="manual">
+  </service>
+  <!-- services below are running at buildtime -->
+  <service name="tar" mode="buildtime">
+  </service>
   <service name="recompress" mode="buildtime">
     <param name="file">*.tar</param>
     <param name="compression">gz</param>
   </service>
-  <service name="go_modules" mode="manual">
-  </service>
 </services>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/sigstore/gitsign</param>
-              <param name="changesrevision">537cd20b0873a456650d2c018376f01b4dbe5a3f</param></service></servicedata>
+              <param name="changesrevision">b17948db1402b33caa005637f40e8df9eab56daf</param></service></servicedata>

gitsign-0.10.2.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:43a8b9fd18cf94102cf140014f16ccf49bdd0380a59a39149466bfa372c2f7fc
-size 664588

gitsign-0.13.0.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5b8ea11201c39ebef32c736543aedab07ac1f42280918832eb5b20acde42b78c
+size 676364

gitsign-credential-cache.service

@@ -0,0 +1,9 @@
+[Unit]
+Description=GitSign credential cache
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/gitsign-credential-cache
+
+[Install]
+WantedBy=default.target

gitsign-credential-cache.socket

@@ -0,0 +1,9 @@
+[Unit]
+Description=GitSign credential cache socket
+
+[Socket]
+ListenStream=%C/sigstore/gitsign/cache.sock
+DirectoryMode=0700
+
+[Install]
+WantedBy=default.target

gitsign.changes

@@ -1,3 +1,159 @@
+-------------------------------------------------------------------
+Fri Dec  5 16:27:25 UTC 2025 - Thomas Bechtold <thomasbechtold@jpberlin.de>
+
+- Move gitsign-credential-cache into its own package
+- Add systemd user units for gitsign-credential-cache
+
+-------------------------------------------------------------------
+Thu Dec  4 08:55:13 UTC 2025 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- BuildRequire go1.23
+
+-------------------------------------------------------------------
+Tue Dec  2 10:59:42 UTC 2025 - Thomas Bechtold <thomasbechtold@jpberlin.de>
+
+- Add the gitsign-credential-cache binary
+
+-------------------------------------------------------------------
+Wed Apr 09 17:53:53 UTC 2025 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- Update to version 0.13.0:
+  * Add verify-tag command for Git tag signature verification
+    (#659)
+  * Bump goreleaser/goreleaser-action in the actions group (#661)
+  * Bump the gomod group with 2 updates (#651)
+  * Enable signing with --detached-sign flag. (#657)
+  * Bump the actions group with 3 updates (#656)
+  * Bump github.com/golang-jwt/jwt/v4 in the go_modules group
+    (#654)
+  * Bump github.com/golang-jwt/jwt/v5 in the go_modules group
+    (#653)
+  * Bump the actions group with 2 updates (#650)
+  * Bump golang.org/x/net from 0.35.0 to 0.36.0 in the go_modules
+    group (#649)
+  * Bump golang.org/x/oauth2 from 0.27.0 to 0.28.0 (#647)
+  * Bump github.com/sigstore/sigstore from 1.8.15 to 1.9.0 (#646)
+  * Bump golang.org/x/crypto from 0.35.0 to 0.36.0 (#648)
+  * Bump actions/attest-build-provenance in the actions group
+    (#645)
+  * Bump golang.org/x/crypto from 0.33.0 to 0.35.0 (#642)
+  * Bump github.com/go-git/go-git/v5 from 5.13.2 to 5.14.0 (#643)
+  * Bump golang.org/x/oauth2 from 0.26.0 to 0.27.0 (#644)
+  * Bump the actions group with 2 updates (#641)
+  * Bump the gomod group with 6 updates (#636)
+  * Bump github.com/go-jose/go-jose/v3 in the go_modules group
+    (#640)
+  * Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#637)
+  * Bump github.com/go-jose/go-jose/v4 in the go_modules group
+    (#639)
+  * Bump the actions group with 2 updates (#638)
+  * Bump the gomod group across 1 directory with 8 updates (#635)
+  * Bump the actions group with 2 updates (#634)
+  * Fix test for go-git update (#632)
+  * goreleaser: Replace deprecated options (#633)
+  * Bump the actions group with 2 updates (#628)
+  * Enable CGO on riscv64 (#631)
+  * Bump the actions group with 3 updates (#625)
+  * Modernize attest statements (#620)
+  * Bump golangci/golangci-lint-action in the actions group (#622)
+  * Fix non-constant format string error (#619)
+  * Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#614)
+  * Bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 (#615)
+  * Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 (#616)
+
+-------------------------------------------------------------------
+Sat Jan 04 08:08:43 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.12.0:
+  * attest: force https for rekor client (#610)
+  * Bump the gomod group with 2 updates (#608)
+  * Bump google.golang.org/protobuf from 1.35.2 to 1.36.0 (#607)
+  * Bump github.com/sigstore/sigstore in the gomod group across 1
+    directory (#606)
+  * Bump the actions group with 3 updates (#603)
+  * Bump github.com/secure-systems-lab/go-securesystemslib (#605)
+  * fix zizmor issues (#602)
+  * Bump actions/cache from 4.1.2 to 4.2.0 in the actions group
+    (#599)
+  * Bump actions/attest-build-provenance from 1.4.4 to 2.0.1 (#600)
+  * Bump golang.org/x/crypto from 0.29.0 to 0.30.0 (#601)
+  * README: add warning about internet access (#596)
+  * Bump the gomod group with 2 updates (#598)
+  * Bump anchore/sbom-action from 0.17.7 to 0.17.8 in the actions
+    group (#597)
+  * Bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in the
+    gomod group (#595)
+  * Bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 (#593)
+  * Bump the actions group with 3 updates (#592)
+  * Bump golang.org/x/crypto from 0.28.0 to 0.29.0 (#594)
+  * Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#591)
+  * Bump anchore/sbom-action from 0.17.5 to 0.17.6 in the actions
+    group (#590)
+  * Bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#587)
+  * Bump the actions group with 4 updates (#588)
+  * Update release.yml - add attestations:write (#586)
+
+-------------------------------------------------------------------
+Thu Oct 24 08:17:01 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.11.0:
+  * Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.4.1 (#573)
+  * Fix matching of tlog entries to payload (#584)
+  * Fix unhandled extension issue for cached certs (#583)
+  * Update credential-cache messages to user (#582)
+  * Support gitsign-credential-cache on Windows (#579)
+  * Bump google.golang.org/protobuf from 1.34.2 to 1.35.1 (#580)
+  * Bump anchore/sbom-action from 0.17.3 to 0.17.4 in the actions
+    group (#581)
+  * Trigger workflows on push only to main branch (#578)
+  * Bump the gomod group across 1 directory with 2 updates (#577)
+  * Bump github.com/sigstore/fulcio from 1.5.1 to 1.6.5 (#575)
+  * Bump Go to 1.23.2 and golangci-lint to 1.61 (#576)
+  * Bump anchore/sbom-action from 0.17.2 to 0.17.3 in the actions
+    group (#572)
+  * Bump github.com/docker/docker (#553)
+  * Handle GeneralName as SAN (#571)
+  * Bump the actions group across 1 directory with 6 updates (#569)
+  * Fix gitsign env test (#568)
+  * Bump the actions group with 2 updates (#552)
+  * e2e tests: Use beacon token. (#549)
+  * Bump github.com/sigstore/fulcio from 1.4.5 to 1.5.1 (#541)
+  * Bump github.com/mattn/go-tty from 0.0.5 to 0.0.7 in the gomod
+    group (#546)
+  * Bump docker/login-action from 3.2.0 to 3.3.0 in the actions
+    group (#545)
+  * Bump anchore/sbom-action from 0.16.1 to 0.17.0 in the actions
+    group (#543)
+  * update go to 1.22.5 and fix golangci-lint action (#542)
+  * Bump github.com/sigstore/sigstore from 1.8.6 to 1.8.7 in the
+    gomod group (#539)
+  * Bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 (#540)
+  * Bump the actions group with 3 updates (#538)
+  * Bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#536)
+  * Bump golang.org/x/crypto from 0.24.0 to 0.25.0 (#535)
+  * Bump github.com/sigstore/sigstore from 1.8.4 to 1.8.6 in the
+    gomod group (#534)
+  * Support for Client Secret File (#533)
+  * Point to homebrew-core (#531)
+  * Bump actions/attest-build-provenance in the actions group
+    (#530)
+  * Bump actions/attest-build-provenance in the actions group
+    (#529)
+  * Updates ci/dependabot/release (#528)
+  * Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#527)
+  * Bump imjasonh/setup-crane from 0.3 to 0.4 (#524)
+  * Bump actions/checkout from 4.1.6 to 4.1.7 (#525)
+  * Bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 (#521)
+  * Bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 (#522)
+  * Bump golang.org/x/crypto from 0.23.0 to 0.24.0 (#523)
+  * resolves #516 adds support for private rekor for gitsign attest
+    (#517)
+  * launchctl commands for macOS users (#520)
+  * Bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 (#518)
+  * Bump docker/login-action from 3.1.0 to 3.2.0 (#519)
+  * Bump anchore/sbom-action from 0.15.11 to 0.16.0 (#514)
+  * Bump actions/checkout from 4.1.5 to 4.1.6 (#513)
+
 -------------------------------------------------------------------
 Tue May 14 05:24:06 UTC 2024 - opensuse_buildservice@ojkastl.de
 

gitsign.obsinfo

@@ -1,4 +1,4 @@
 name: gitsign
-version: 0.10.2
-mtime: 1715588197
-commit: 537cd20b0873a456650d2c018376f01b4dbe5a3f
+version: 0.13.0
+mtime: 1743436627
+commit: b17948db1402b33caa005637f40e8df9eab56daf

gitsign.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package gitsign
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,22 +16,32 @@
 #
 
 
-%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
-
 Name:           gitsign
-Version:        0.10.2
+Version:        0.13.0
 Release:        0
 Summary:        Keyless Git signing using Sigstore
 License:        Apache-2.0
 URL:            https://github.com/sigstore/gitsign
 Source:         gitsign-%{version}.tar.gz
 Source1:        vendor.tar.gz
-BuildRequires:  go >= 1.22
+Source2:        gitsign-credential-cache.service
+Source3:        gitsign-credential-cache.socket
+BuildRequires:  golang(API) >= 1.23
 
 %description
 Keyless Git signing with Sigstore!
 
-This is heavily inspired by https://github.com/github/smimesign, but uses keyless Sigstore to sign Git commits with your own GitHub / OIDC identity.
+This is heavily inspired by https://github.com/github/smimesign, but uses
+keyless Sigstore to sign Git commits with your own GitHub / OIDC identity.
+
+%package credential-cache
+Summary:        Credential cache for gitsign
+Requires:       %{name} = %{version}-%{release}
+Provides:       gitsign:%{_bindir}/gitsign-credential-cache
+
+%description credential-cache
+This package provides the gitsign-credential-cache binary and systemd
+user units for caching Sigstore credentials.
 
 %prep
 %autosetup -p 1 -a 1
@@ -43,13 +53,43 @@ go build \
    -ldflags="-X github.com/sigstore/gitsign/pkg/version.gitVersion=%{version}" \
    -o bin/gitsign .
 
+go build \
+   -mod=vendor \
+   -buildmode=pie \
+   -ldflags="-X github.com/sigstore/gitsign/pkg/version.gitVersion=%{version}" \
+   -o bin/gitsign-credential-cache ./cmd/gitsign-credential-cache/
+
 %install
 # Install the binary.
 install -D -m 0755 bin/%{name} "%{buildroot}/%{_bindir}/%{name}"
+install -D -m 0755 bin/gitsign-credential-cache "%{buildroot}/%{_bindir}/gitsign-credential-cache"
+# systemd user unit files
+install -D -m 644 %{SOURCE2} %{buildroot}%{_userunitdir}/gitsign-credential-cache.service
+install -D -m 644 %{SOURCE3} %{buildroot}%{_userunitdir}/gitsign-credential-cache.socket
+# move README so both READMEs can be packaged
+mv cmd/gitsign-credential-cache/README.md cmd/gitsign-credential-cache/README-credential-cache.md
 
 %files
 %doc README.md
 %license LICENSE
 %{_bindir}/%{name}
 
+%pre credential-cache
+%service_add_pre gitsign-credential-cache.service gitsign-credential-cache.socket
+
+%post credential-cache
+%service_add_post gitsign-credential-cache.service gitsign-credential-cache.socket
+
+%preun credential-cache
+%service_del_preun gitsign-credential-cache.service gitsign-credential-cache.socket
+
+%postun credential-cache
+%service_del_postun gitsign-credential-cache.service gitsign-credential-cache.socket
+
+%files credential-cache
+%doc cmd/gitsign-credential-cache/README-credential-cache.md
+%{_bindir}/gitsign-credential-cache
+%{_userunitdir}/gitsign-credential-cache.service
+%{_userunitdir}/gitsign-credential-cache.socket
+
 %changelog

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:d7d7c4b74fc8e773684cede39988b642f859e9500a7b9ec2c582cbaa936db1e6
-size 12373961
+oid sha256:b35e1133031e739ae6b9c4f27121f80088bd1f633497f85d3b7514583f824831
+size 14228972