Accepting request 1320580 from Virtualization:containers

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1320580
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/go-containerregistry?expand=0&rev=11

go-containerregistry-0.20.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4bae53f34011e35ef874a60123b8ae70a5e992d804decb030479dbb888afe6d1
-size 4420194

go-containerregistry-0.20.6.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:53f17964ade63f63b2c66231a6e1ea606345cfcc325e49a5267017bb475bdcb4
+size 4684582

go-containerregistry.changes

@@ -1,3 +1,48 @@
+-------------------------------------------------------------------
+Sat Nov 22 14:18:36 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- set version
+
+-------------------------------------------------------------------
+Mon Sep 29 10:06:16 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- update to 0.20.6:
+  * Ensure that tag name is not empty if name contains colon
+  * Bump some deps
+- update to 0.20.5:
+  * build(deps): bump docker/docker to v28.0.0+incompatible
+  * Migrate linter to v2
+  * bump go version + bump deps
+  * implement TextMarshaler/JSONMarshaler more consistently
+  * Update CodeQL permissions
+  * Update goreleaser permissions
+  * Update provenance action in release
+  * Update validator action
+- drop CVE-2025-22868.patch (merged upstream)
+
+-------------------------------------------------------------------
+Mon Mar 17 21:11:46 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- add CVE-2025-22868.patch (bsc#1239277, CVE-2025-22868)
+
+-------------------------------------------------------------------
+Fri Mar 14 09:53:13 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- update to 0.20.3:
+  * remote/transport: Make bearer transport go-routine-safe
+  * Expose compare package
+  * fix: redact.URL uses (*URL).Redacted to omit basic-auth
+    password
+  * bump actions to latest
+  * don't pin chainguard-dev/actions
+  * Check for 406 status code when handling referrers API
+    endpoint response
+  * mutate: Create a defensive annotations copy
+  * Detect zstd in crane append
+  * bump deps using hack/bump-deps.sh
+- update to 0.20.2:
+  * deps: bump docker dep
+
 -------------------------------------------------------------------
 Thu Jul 18 08:46:33 UTC 2024 - Dirk Müller <dmueller@suse.com>
 

go-containerregistry.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package go-containerregistry
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 
 Name:           go-containerregistry
-Version:        0.20.1
+Version:        0.20.6
 Release:        0
 Summary:        Container Library and tools for working with container registries
 License:        Apache-2.0
@@ -27,7 +27,7 @@ URL:            https://github.com/google/go-containerregistry
 Source:         https://github.com/google/go-containerregistry/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 Source1:        vendor.tar.gz
 BuildRequires:  golang-packaging
-BuildRequires:  golang(API) = 1.21
+BuildRequires:  golang(API) = 1.24
 Conflicts:      distribution-registry
 
 %description
@@ -128,14 +128,19 @@ BuildArch:      noarch
 zsh command line completion support for gcrane.
 
 %prep
-%setup -qa1
-%autopatch -p1
+%autosetup -p1 -a1
 
 %build
 for i in crane gcrane registry; do
-    go build -mod=vendor -buildmode=pie -trimpath ./cmd/$i
+    go build -mod=vendor -buildmode=pie -trimpath \
+        -ldflags "-X github.com/google/go-containerregistry/cmd/crane/cmd.Version=%{version}" \
+        -ldflags "-X github.com/google/go-containerregistry/pkg/v1/remote/transport.Version=%{version}" \
+        ./cmd/$i
 done
 
+%check
+go test ./cmd/crane ./cmd/gcrane
+
 %install
 find -name crane
 for bin in crane gcrane registry; do

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ad53b4dadd1e5094b5ce7bfafed8180a4461c32a2f7d5344471b1948a36eb82f
-size 2649765
+oid sha256:7bc00c595697b2eb5c9941cad90e3f3b24ce0255b64e38cd4a023133b69b3d6b
+size 2924918