leap-16.0 #2
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: pool/hauler#2
Reference in New Issue
Block a user
Delete Branch "dirkmueller/hauler:leap-16.0"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
* Bump golang.org/x/net from 0.37.0 to 0.38.0 in the go_modules group across 1 directory * minor tests updates OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/hauler?expand=0&rev=19- update to 1.2.4 (CVE-2025-22872, bsc#1241804): * Bump golang.org/x/net from 0.37.0 to 0.38.0 in the go_modules group across 1 directory * minor tests updates OBS-URL: https://build.opensuse.org/request/show/1273864 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/hauler?expand=0&rev=7* Bump github.com/open-policy-agent/opa from 1.1.0 to 1.4.0 in the go_modules group across 1 directory * deprecate auth from hauler store copy * Bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in the go_modules group across 1 directory * Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in the go_modules group across 1 directory * upgraded go and dependencies versions - Update to version 1.2.5: * upgraded go and dependencies versions (#444) * Bump github.com/go-viper/mapstructure/v2 (#442) * bump github.com/cloudflare/circl (#441) * deprecate auth from hauler store copy (#440) * Bump github.com/open-policy-agent/opa (#438) OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/hauler?expand=0&rev=21- update to 1.2.5 (bsc#1246722, CVE-2025-46569): * Bump github.com/open-policy-agent/opa from 1.1.0 to 1.4.0 in the go_modules group across 1 directory (CVE-2025-46569) * deprecate auth from hauler store copy * Bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in the go_modules group across 1 directory * Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in the go_modules group across 1 directory * upgraded go and dependencies versions - Update to version 1.2.5: * upgraded go and dependencies versions (#444) * Bump github.com/go-viper/mapstructure/v2 (#442) * bump github.com/cloudflare/circl (#441) * deprecate auth from hauler store copy (#440) * Bump github.com/open-policy-agent/opa (#438) OBS-URL: https://build.opensuse.org/request/show/1294822 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/hauler?expand=0&rev=8Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .
Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment:
@opensuse-review: approve.To request changes on behalf of the group, create the following comment:
@opensuse-review: declinefollowed with lines justifying the decision.Future edits of the comments are ignored, a new comment is required to change the review state.
Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .
Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment:
@maintenance-release-review: approve.To request changes on behalf of the group, create the following comment:
@maintenance-release-review: declinefollowed with lines justifying the decision.Future edits of the comments are ignored, a new comment is required to change the review state.
Legal review in progress.
@maintenance-release-review: approve
merge ok
rfrohl approved a review on behalf of maintenance-release-review
@opensuse-review : approve
LGTM
merge ok
oertel approved a review on behalf of opensuse-review
Legal reviewed by dec16180 as acceptable_by_lawyer:
[ 13s] + go build -o hauler -mod=vendor -buildmode=pie -trimpath -ldflags '-s -w -X github.com/rancherfederal/hauler/internal/version.gitVersion=1.3.1 -X github.com/rancherfederal/hauler/internal/version.gitCommit=5edc8802eec20adc7d0b75847f77446d6f531012 -X github.com/rancherfederal/hauler/internal/version.gitTreeState=clean' cmd/hauler/main.go
[ 13s] go: go.mod requires go >= 1.25.3 (running go 1.25.0; GOTOOLCHAIN=local)
[ 13s] error: Bad exit status from /var/tmp/rpm-tmp.wBQsj4 (%build)
did not build.
go1.25 is too old currently in SLFO 1.2 ... I emailed the maintainer already.
We do need the newer go 1.25.x version in the codestream, as it includes security fixes in the stdlib that are relevant. I prefer to not workaround this with a local patch to hauler.