Accepting request 1063593 from server:monitoring

OBS-URL: https://build.opensuse.org/request/show/1063593
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grafana?expand=0&rev=39

_service

@@ -5,7 +5,7 @@
     <param name="exclude">.git</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
-    <param name="revision">v8.5.15</param>
+    <param name="revision">v8.5.20</param>
     <param name="changesgenerate">enable</param>
   </service>
   <service name="recompress" mode="disabled">

_servicedata

@@ -1,6 +1,6 @@
 <servicedata>
   <service name="tar_scm">
     <param name="url">https://github.com/grafana/grafana</param>
-    <param name="changesrevision">be4228db5a43f65a989239f891185d45912d39ad</param>
+    <param name="changesrevision">e927a6459fd6c493628fa2cf5ba494c01427bca2</param>
   </service>
 </servicedata>

grafana-8.5.15.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fcdcdbb5021344ee8f21decd8cfaac7c23928385fe0f7d550cb795ceab5cead1
-size 51544910

grafana-8.5.20.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5250d3fa4a312d88dd1f5e2554043f70e403e6adaee92ecc40307d7f9ecf9243
+size 51575837

grafana.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Mon Feb 06 09:12:33 UTC 2023 - witold.bedyk@suse.com
+
+- Update to version 8.5.20:
+  * Security: SVG: Add dompurify preprocessor step
+    (bsc#1207749, CVE-2022-23552)
+  * Security: Snapshots: Fix originalUrl spoof security issue
+    (bsc#1207750, CVE-2022-39324)
+  * Security: Omit error from http response 
+  * Bug fix: Email and username trimming and invitation validation
+
 -------------------------------------------------------------------
 Fri Nov 18 10:52:52 UTC 2022 - witold.bedyk@suse.com
 

grafana.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package grafana
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,7 +22,7 @@
 %endif
 
 Name:           grafana
-Version:        8.5.15
+Version:        8.5.20
 Release:        0
 Summary:        The open-source platform for monitoring and observability
 License:        AGPL-3.0-only

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:2c2877e029bff95ab8f00142f38a53f40d197ebc1e711747a70fc1af3f7d9a78
-size 19588389
+oid sha256:e1085edc2bb688d98424321e77970b4beaa211a54a4242b04765df7f10c5c30e
+size 19677383