pool/melange
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: pool:factory
Branches Tags
pool:factory
pool:devel
rpm:factory
rpm:devel
..
compare: rpm:factory
Branches Tags
rpm:factory
rpm:devel
pool:factory
pool:devel

No commits in common. "factory" and "factory" have entirely different histories.
factory ... factory

8 changed files with 31 additions and 761 deletions
Show Stats Expand all files Collapse all files

13
_service
View File

@ -3,20 +3,19 @@
<param name="url">https://github.com/chainguard-dev/melange</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
<param name="revision">v0.19.5</param>
<param name="revision">v0.11.1</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="versionrewrite-pattern">v(.*)</param>
<param name="changesgenerate">enable</param>
<param name="versionrewrite-pattern">v(.*)</param>
</service>
<service name="set_version" mode="manual">
<param name="basename">melange</param>
</service>
<service name="go_modules" mode="manual">
</service>
<!-- services below are running at buildtime -->
<service name="tar" mode="buildtime">
</service>
<service name="tar" mode="buildtime"/>
<service name="recompress" mode="buildtime">
<param name="file">*.tar</param>
<param name="compression">gz</param>
</service>
<service name="go_modules" mode="manual">
</service>
</services>

2
_servicedata
View File

@ -1,4 +1,4 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/chainguard-dev/melange</param>
<param name="changesrevision">d80100d2a5e5b4a222d23a770863f15886b8c9e7</param></service></servicedata>
<param name="changesrevision">a52edcc075ebf1dc89aea87893e3821944171ee3</param></service></servicedata>

3
melange-0.11.1.obscpio Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:aadf06a4fb142a2a9f89966a94404c5cd7996967cf9a4ee0a2a9bb8956647340
size 4489228

3
melange-0.19.5.obscpio
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ee76650c55685002f6a370b5faa75abb9983dfc93ee5dde379198e7134a288c5
size 2061324

728
melange.changes
View File

@ -1,731 +1,3 @@
-------------------------------------------------------------------
Mon Feb 10 07:38:47 UTC 2025 - opensuse_buildservice@ojkastl.de
- Update to version 0.19.5:
* Move buildUser to existing const block
* Consolidate build user/group strings
* Pass GID pointer to apko_types.GID in test_test.go
* Add build user to test pipeline environments (#1747)
* keep using /usr as prefix
* add npm and update prefix location
-------------------------------------------------------------------
Fri Feb 07 08:21:56 UTC 2025 - opensuse_buildservice@ojkastl.de
- Update to version 0.19.4:
* patch: expose fuzz flag value
* sbom: update copyrightText from "/n" to "NOASSERTION"
* Fix some white space issues
* Add ${{subpkg.name}} string substitution
* lint: Add linter for usrmerge
* Fix documentation update
* Update the documentation for the new linter
* Fix a linting error
* Add a linter which checks for pkgconfig files
* patch: add --verbose flag to patch pipeline
-------------------------------------------------------------------
Mon Jan 27 15:58:37 UTC 2025 - opensuse_buildservice@ojkastl.de
- Update to version 0.19.3:
* disallow uses: with a nested pipeline
-------------------------------------------------------------------
Mon Jan 20 05:59:17 UTC 2025 - opensuse_buildservice@ojkastl.de
- Update to version 0.19.2:
* move some spammy logs to debug
* docs
* fix lint, use 22.04 where needed
* try ubuntu-22.04
* remove 'melange convert gem'
* remove 'melange convert python'
-------------------------------------------------------------------
Fri Jan 17 06:19:20 UTC 2025 - opensuse_buildservice@ojkastl.de
- Update to version 0.19.1:
* Update pkg/build/build.go
* Update pkg/build/build.go
* sbom: switch SPDX namespace from SHA1 to FNV-1a
* Compress the initrd to workaround issue (#1745)
* stop generation homebrew update as melange in in homebrew core
* build(deps): bump the actions group with 2 updates
* build: Write a GCC specs file into workspace
-------------------------------------------------------------------
Sat Jan 11 12:10:16 UTC 2025 - opensuse_buildservice@ojkastl.de
- Update to version 0.19.0:
* feat: add support to add and drop linux capabilities (#1702)
* Update pkg/build/pipeline.go
* Update pkg/build/pipeline.go
* build(deps): bump golang.org/x/time from 0.8.0 to 0.9.0
* build(deps): bump github.com/invopop/jsonschema from 0.12.0 to
0.13.0
* build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
* build(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to
5.13.1
* minor go cleanup
* minor go cleanup
* build(deps): bump sigs.k8s.io/release-utils from 0.8.5 to 0.9.0
* Fix(piepline): use correct comment systax
* fix: Move the go mod tidy after cd to modrootfeat: Check if
go.mod file exiest in modroot dir to ensure modroot is set
correctly
-------------------------------------------------------------------
Mon Dec 30 07:23:42 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.18.3:
* build(deps): bump actions/upload-artifact in the actions group
-------------------------------------------------------------------
Mon Dec 23 06:59:51 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.18.2:
* update apko to 0.22.4
* build(deps): bump cloud.google.com/go/storage from 1.48.0 to
1.49.0
* build(deps): bump google.golang.org/api from 0.211.0 to 0.214.0
* build(deps): bump the gomod group with 2 updates
* Fix numpy-test to work across python 3.12 to 3.13 transition.
(#1715)
* fix(qemu): remove redundant check
* bump: double-quote bumped version strings, avoid trailing
newline
* build(deps): bump actions/setup-go in the actions group
* build(deps): bump the gomod group with 2 updates
* fix linting
* respect ctx error
* fix(qemu): improve logging, make connection check less spammy
-------------------------------------------------------------------
Mon Dec 16 06:21:41 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.18.1:
* fix error
* also drop util.RightJoinMap
* undo whitespace change
* remove unnecessary util.Dedup method
-------------------------------------------------------------------
Sat Dec 14 21:14:54 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.18.0:
* build(deps): bump chainguard.dev/apko from 0.21.0 to 0.22.1
* build(deps): bump
go.opentelemetry.io/otel/exporters/stdout/stdouttrace
* build(deps): bump dagger.io/dagger in the gomod group
* upgrade to 3.13
* sign: switch to SHA2-256 signature by default
* feat(pipelines/cargo): add support for rustflags (#1698)
* pipelines/split/dev - grab files in /usr/share/cmake
-------------------------------------------------------------------
Thu Dec 12 05:56:35 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.17.7:
* Bump apko and fix the thing I broke
* Handle WalkDir errors
* build(deps): bump dagger.io/dagger from 0.14.0 to 0.15.0
-------------------------------------------------------------------
Thu Dec 12 05:55:01 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.17.6:
* Bump apko to v0.20.2
-------------------------------------------------------------------
Thu Dec 12 05:53:56 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.17.5:
* drop spammy slog attributes
* build(deps): bump cloud.google.com/go/storage from 1.47.0 to
1.48.0
-------------------------------------------------------------------
Tue Dec 10 08:48:22 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.17.4:
* build(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0
* build(deps): bump github.com/chainguard-dev/clog
* build(deps): bump github.com/chainguard-dev/yam in the gomod
group
* melange/update block: provide config option to indicate that
automated pull requests should be merged in order rather than
superseding and closing previous unmerged PRs
-------------------------------------------------------------------
Sun Dec 08 09:04:12 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.17.3:
* fix(sca): Revert recent SCA changes for Ruby
-------------------------------------------------------------------
Sun Dec 08 08:48:12 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.17.2:
* fix(qemu): fix MacOS crosscompile path (#1678)
* fix(sca): Don't generate ruby dep when found in shebang
* fix(sca_test): Check for ruby-base
* fix(sca): Generate dependency for ruby-*-base instead of ruby-*
* Improve comment stripping errors
* Add package.srcdir substitution to README
-------------------------------------------------------------------
Mon Dec 02 10:02:15 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.17.1:
* test(compile): basic tests for stripComments
* fix(compile): label when compile error is for test pipeline
-------------------------------------------------------------------
Fri Nov 29 12:16:20 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.17.0:
* feat: add project.srcdir variable (#1666)
-------------------------------------------------------------------
Wed Nov 27 09:43:18 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.16.0:
* Include locked melange config in control section
* build(deps): bump github.com/stretchr/testify from 1.9.0 to
1.10.0
* build(deps): bump the gomod group with 2 updates
* build(deps): bump step-security/harden-runner in the actions
group
-------------------------------------------------------------------
Tue Nov 26 13:50:47 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.14:
* fix(pipeline): validate expected commit before passing to
git-checkout pipeline (#1667)
* Add git version to Summarize output
* RELEASE.md update, add statement that tags and releases will
update
-------------------------------------------------------------------
Fri Nov 22 19:27:01 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.13:
* Consider symlinks as potential provides for so:
* drop ntia e2e test
-------------------------------------------------------------------
Wed Nov 20 09:22:47 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.12:
* pipelines/cargo: ability to override output-dir
* fix(pipeline): check also checksum length
* fix(pipeline): do preliminary checks for checksum invalid chars
* docs: re-add release documentation markdown file
* hack: remove release.md
* docs: update automatic release interval
* add a dependency on texinfo or man-db as appropriate
-------------------------------------------------------------------
Tue Nov 19 08:38:41 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.11:
* build(deps): bump cloud.google.com/go/storage from 1.46.0 to
1.47.0
-------------------------------------------------------------------
Tue Nov 19 08:35:58 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.10:
* release: check for both tag and release
-------------------------------------------------------------------
Tue Nov 19 08:31:33 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.9:
* change release frequency to weekly
* review feedback
* docs(release): update release.md based on new workflow design
* fix(releases): more reliable releases
* Bump apko to v0.20.0
* Clean up workspace dir from inside runner to avoid permission
errors. (#1648)
-------------------------------------------------------------------
Fri Nov 15 07:06:41 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.8:
* Create sub-package directories in WorkDir before building
subpackage
-------------------------------------------------------------------
Thu Nov 14 10:13:58 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.7:
* build(deps): bump golang.org/x/text from 0.19.0 to 0.20.0
-------------------------------------------------------------------
Wed Nov 13 10:02:12 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.6:
* build(deps): bump golang.org/x/time from 0.7.0 to 0.8.0
* build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0
* Give a pointer to solution if bubblewrap runner cannot use user
namespace.
* build(deps): bump
go.opentelemetry.io/otel/exporters/stdout/stdouttrace
* build(deps): bump dagger.io/dagger from 0.13.7 to 0.14.0
-------------------------------------------------------------------
Tue Nov 12 10:04:04 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.5:
* anotha one
* qemu: reduce logspam for qemu runner
* build(deps): bump google.golang.org/api from 0.204.0 to 0.205.0
* build(deps): bump go.opentelemetry.io/otel from 1.31.0 to
1.32.0
* build(deps): bump chainguard.dev/apko in the gomod group
* build(deps): bump goreleaser/goreleaser-action in the actions
group
* cleanup: remove unnecessary utils
* chore(pipelines/fetch): Print expected and found checksums
-------------------------------------------------------------------
Tue Nov 12 09:51:27 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.4:
* fix(qemu): use proper machine type and cpu model based on host
arch (#1627)
* Switch the copy to pick up hidden files. (#1624)
-------------------------------------------------------------------
Tue Nov 12 09:45:23 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.3:
* Add man-db for doc packages
-------------------------------------------------------------------
Tue Nov 12 09:42:56 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.2:
* check ReplacesPriority if it is an integer
-------------------------------------------------------------------
Tue Nov 12 09:39:32 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.1:
* build(deps): bump the gomod group with 2 updates
* build(deps): bump google.golang.org/api from 0.203.0 to 0.204.0
* build(deps): bump cloud.google.com/go/storage from 1.45.0 to
1.46.0
-------------------------------------------------------------------
Sat Nov 02 08:22:10 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.15.0:
* feat(qemu): fix qemu command on cross-compilation cases
* update docs
* feat(qemu): add flag to specify cpu model to use, useful for
cases where /dev/kvm is not available
* fix(qemu): remove ssh ignoreHostKey, set an host-key retrieval
step, then use host key verification for all successive
commands
* fix linting
* fix(qemu): improve error when not finding a suitable kernel
image
* fix(qemu): use net.Listen to find open port, simplify random
port logic
* fix(qemu): use package go-shellquote and simplify cmd handling
* fix(qemu): use package go-shellquote and simplify cmd handling
* fix(qemu): specify KVM accelleration on linux, use only if
/dev/kvm is present
* fix(qemu): fix typos
-------------------------------------------------------------------
Tue Oct 29 15:08:52 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.11:
* build(deps): bump github.com/chainguard-dev/yam in the gomod
group
* build(deps): bump the actions group with 2 updates
-------------------------------------------------------------------
Sat Oct 26 08:39:55 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.10:
* build(deps): bump the gomod group across 1 directory with 2
updates
-------------------------------------------------------------------
Fri Oct 25 12:22:11 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.9:
* chore: unexport build pkg methods
* bump apko to get http key support
* go mod tidy
* bump apko to pick up chainguard key fix
-------------------------------------------------------------------
Thu Oct 24 08:27:07 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.8:
* fix(bubblewrap_runner): run as build 1000 by default (#1572)
* use --target-dir to target with cargo build
* pass --release as default opts
* allow passing more than one opts to cargo build
-------------------------------------------------------------------
Wed Oct 23 16:42:33 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.7:
* fix breakage
* go mod tidy
* bump apko dep to fix modtime issue
-------------------------------------------------------------------
Wed Oct 23 16:28:25 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.6:
* fix(build): require build config repo URL
* add build base to cargo-build pipeline
-------------------------------------------------------------------
Wed Oct 23 09:27:57 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.5 (0.14.4 was not properly released):
* fix(sbom): unique package IDs for upstream source
* test: (tdd) add failing test for dup spdx IDs
-------------------------------------------------------------------
Wed Oct 23 09:17:45 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.3:
* fix(build): use fallback values at entrypoint for git info
* fix(build): use the config file dir path for git detection
-------------------------------------------------------------------
Wed Oct 23 09:13:43 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.2:
* ci: add workflow to tag releases daily
-------------------------------------------------------------------
Wed Oct 23 09:08:38 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.1:
* Do not specify versions during 'melange test' (Revert #1579 and
#1518)
-------------------------------------------------------------------
Wed Oct 23 08:56:22 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.14.0:
* fix(build): make git autodetection best effort
* test: use x86_64 for build int tests
* move sbom test inside build test
* test(build): favor bwrap, fallback to docker
* chore: dedup test targets in makefile
* docs: run make docs-repo
* try qemu runner
* test: remove e2e tests for SBOM external refs
* unique SPDX IDs for multiple git repo checkouts
* chore: add make target for integration tests
* test: add integration test for build and SBOMs
* chore: bump Go version
* feat(sbom): overhaul SBOM generation logic
-------------------------------------------------------------------
Wed Oct 23 08:47:47 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.13.7:
* Pin the package version with ~ rather than =.
* build(deps): bump google.golang.org/api from 0.200.0 to 0.201.0
* build(deps): bump cloud.google.com/go/storage from 1.44.0 to
1.45.0
* bublewrap_runner: add /sys mount
* fix lint finding
* pipe it through cli
* cleanup glow up
* fix(qemu): fix missing pty allocation for debug shell in qemu
runners
* Do not add a cmd:awk dependency as nothing will ever provide
cmd:awk
* fix formatting lint
* fix(test): update tests to reflect new struct
* fix(qemu): fix failing test pipeline when using qemu runner
* fix test
* Pin the package version used during tests
-------------------------------------------------------------------
Wed Oct 16 07:52:03 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.13.6:
* run `make generate`
* rename exported GetTagFilterPrefix and GetTagFilterContains
functions to be normalized GetFilterPrefix and GetFilterPrefix
* update config: add version filter prefix and contains to
release monitor config block so implementations can perform the
same behaviour as git and github configs
* build(deps): bump
go.opentelemetry.io/otel/exporters/stdout/stdouttrace
* build(deps): bump google.golang.org/api from 0.199.0 to 0.200.0
* build(deps): bump the actions group with 2 updates
* build(deps): bump go.opentelemetry.io/otel/sdk from 1.30.0 to
1.31.0
* build(deps): bump the gomod group with 4 updates
* pipelines: fix split/debug
-------------------------------------------------------------------
Sun Oct 13 18:08:10 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.13.5:
* Enable pc file dependencies
* generateRuntimePkgConfigDeps: only do so for public .pc, not
vendored
* Improve some config parsing errors
-------------------------------------------------------------------
Fri Oct 11 09:25:44 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.13.4:
* Revert "sca: Properly detect .so files as deps"
* Revert "sca: check if runtime dependencies are vendored"
-------------------------------------------------------------------
Fri Oct 11 09:19:23 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.13.3:
* cmake: switch from MinSizeRel to Release
-------------------------------------------------------------------
Fri Oct 11 09:13:44 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.13.2:
* fix: pc provides
* build(deps): bump golang.org/x/time from 0.6.0 to 0.7.0
-------------------------------------------------------------------
Fri Oct 11 09:11:28 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.13.1:
* tidy
* build(deps): bump cloud.google.com/go/storage from 1.43.0 to
1.44.0
* build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
* build(deps): bump github.com/chainguard-dev/yam in the gomod
group
* build(deps): bump the actions group with 2 updates
* sca: check if runtime dependencies are vendored
-------------------------------------------------------------------
Sun Oct 06 08:01:56 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.13.0:
* Fix typo in README
* test: Fix typo
* Added additional documentation for package version selection
* sca: Properly detect .so files as deps
* Adjust an e2e-test that made a bad assumption.
* update the docs
* add --cleanup flag (default true)
* build(deps): bump github.com/chainguard-dev/yam from 0.1.1 to
0.2.0
* build(deps): bump google.golang.org/api from 0.198.0 to 0.199.0
* build(deps): bump actions/checkout in the actions group
* Support string replacement in ImageContents
* build(deps): bump the gomod group with 5 updates
* git-checkout: support scheduled updates
* sca: never emit libcuda.so.1 runtime dep
* Add table of contents
* Add pipeline markdown reference markdown generator.
* feat(melange): Add sub for output directory
-------------------------------------------------------------------
Sat Sep 21 16:30:34 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.12.1:
* build(deps): bump github.com/docker/cli
* build(deps): bump github.com/docker/docker
* build(deps): bump the gomod group with 2 updates
* build(deps): bump chainguard.dev/apko from 0.18.1 to 0.19.1
* sca: remove set but never used variable
* update_config: expose function to get valid schedule messages
* Add uses and name to slog values
* Include subpackage name in slog values
* Only read the first line for shbang.
* pombump: add flag to display the dependency tree
* build(deps): bump dagger.io/dagger from 0.12.7 to 0.13.0
* build(deps): bump step-security/harden-runner in the actions
group
* build(deps): bump
go.opentelemetry.io/otel/exporters/stdout/stdouttrace
* build(deps): bump the gomod group with 2 updates
* keygen: reject bit size < 4096
* cleanup: remove some direct imports of charm log
-------------------------------------------------------------------
Sat Sep 14 15:42:45 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.12.0:
* Upgrade to new hash-agnostic APIs for sign and verify
* Upgrade to apko v0.18.0
* index: stop writing APKINDEX.json
* update to go1.23.1
* build(deps): bump google.golang.org/api from 0.195.0 to 0.196.0
* build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
* build(deps): bump the gomod group with 2 updates
* pipelines/ruby: remove signing_key by default
* config: Whack more moles for string replacement
* install go
* lint
* upgrade to golang 1.23
-------------------------------------------------------------------
Sat Sep 14 15:36:42 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.11.6:
* adds git checkout fetch,update,test and yams the melange
apkbuild yamls
-------------------------------------------------------------------
Sat Sep 14 15:33:26 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.11.5:
* fix(split pipelines): Don't split lib64 libraries
-------------------------------------------------------------------
Sat Sep 14 15:27:45 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.11.4:
* fix(split pipelines): Check package was defined, not package
directory
* fix(split/dev): Support for /usr/local
* fix(split pipelines): Add support for lib64
* fix(split pipelines): Use package name instead of package dir,
use exact paths
* Update dev.yaml
* feat(pipelines/split): Support overriding source package
directory
* build(deps): bump dagger.io/dagger in the gomod group
* build(deps): bump actions/upload-artifact in the actions group
-------------------------------------------------------------------
Sat Sep 14 15:18:12 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 0.11.3:
(0.11.2 is the same commit hash as 0.11.1):
* fix(sca): Correctly check for existing Ruby runtime dependency
by @EyeCantCU in #1387
* build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 in the
actions group by @dependabot in #1378
* build(deps): bump google.golang.org/api from 0.187.0 to 0.188.0
by @dependabot in #1382
* build(deps): bump github.com/google/go-containerregistry from
0.19.2 to 0.20.1 by @dependabot in #1392
* build(deps): bump step-security/harden-runner from 2.8.1 to
2.9.0 in the actions group by @dependabot in #1391
* build(deps): bump the gomod group across 1 directory with 2
updates by @dependabot in #1390
* build(deps): bump dagger.io/dagger from 0.11.9 to 0.12.1 by
@dependabot in #1389
* build(deps): bump github.com/docker/cli from
27.0.3+incompatible to 27.1.0+incompatible by @dependabot in
#1397
* Expose ignoreSignatures functionality by @Kevin-Molina in #1375
* build(deps): bump github.com/docker/docker from
27.0.3+incompatible to 27.1.0+incompatible by @dependabot in
#1396
* build(deps): bump docker/login-action from 3.2.0 to 3.3.0 in
the actions group by @dependabot in #1398
* build(deps): bump google.golang.org/api from 0.188.0 to 0.189.0
by @dependabot in #1401
* fix: ignore resource requests for the docker runner by
@imjasonh in #1403
* build(deps): bump dagger.io/dagger from 0.12.1 to 0.12.2 in the
gomod group by @dependabot in #1400
* Bump apko dependency by @mattmoor in #1404
* fix ruby sca by @xnox in #1410
* Add HOME=/root to default test environment. by @smoser in #1408
* build(deps): bump the gomod group with 4 updates by @dependabot
in #1405
* update config: provide configuration to describe polling and
schedules by @rawlingsj in #1412
* build(deps): bump the gomod group with 2 updates by @dependabot
in #1416
* build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0
by @dependabot in #1419
* build(deps): bump the actions group with 2 updates by
@dependabot in #1415
* build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 by
@dependabot in #1418
* build(deps): bump golang.org/x/time from 0.5.0 to 0.6.0 by
@dependabot in #1417
* build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0 by
@dependabot in #1420
* update config: replace recently added polling with git struct
by @rawlingsj in #1421
* build(deps): bump github.com/google/go-containerregistry from
0.20.1 to 0.20.2 in the gomod group by @dependabot in #1423
* build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 by
@dependabot in #1424
* build(deps): bump google.golang.org/api from 0.190.0 to 0.191.0
by @dependabot in #1426
* build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 by
@dependabot in #1428
* move 'adding package %q for pipeline %q' to debug logging by
@imjasonh in #1429
* don't depend on apko's custom log package by @imjasonh in #1430
* build(deps): bump github.com/chainguard-dev/yam from 0.0.13 to
0.1.0 by @dependabot in #1431
* Feat/qemu runners by @89luca89 in #1386
* Attempt to fix qemu ci by @jonjohnsonjr in #1434
* build(deps): bump the actions group with 3 updates by
@dependabot in #1432
* Centralize sca options handling by @jonjohnsonjr in #1433
* Add test to catch duplicate package names by @jonjohnsonjr in
#1439
* build(deps): bump the gomod group with 4 updates by @dependabot
in #1437
* build(deps): bump google.golang.org/api from 0.191.0 to 0.192.0
by @dependabot in #1438
* move 'found pipeline' log message to debug by @imjasonh in
#1440
* melange convert python: use normalized names by @pnasrat in
#1441
* Bump apko to get chainctl auth error log by @jonjohnsonjr in
#1442
* Replace "needs" in range pipelines by @jonjohnsonjr in #1445
* docs: Add information on the repository used with the git
update configuration option by @philroche in #1447
* Refactor parts of the ParseConfiguration by @jonjohnsonjr in
#1446
* build(deps): bump
go.opentelemetry.io/otel/exporters/stdout/stdouttrace from
1.28.0 to 1.29.0 by @dependabot in #1455
* build(deps): bump google.golang.org/api from 0.192.0 to 0.194.0
by @dependabot in #1452
* config: Replace pipelines at top level by @jonjohnsonjr in
#1456
* refactor(sbom): cleanup, simplify, and document code by
@luhring in #1458
* More SBOM logic improvements by @luhring in #1459
* build(deps): bump github.com/docker/cli from
27.1.2+incompatible to 27.2.0+incompatible by @dependabot in
#1461
* build(deps): bump google.golang.org/api from 0.194.0 to 0.195.0
by @dependabot in #1463
* build(deps): bump github.com/docker/docker from
27.1.2+incompatible to 27.2.0+incompatible by @dependabot in
#1462
* build(deps): bump dagger.io/dagger from 0.12.5 to 0.12.6 in the
gomod group by @dependabot in #1465
* chore(cargo/build): Allow changing install dir, add busybox by
@EyeCantCU in #1466
* sca: add support for more go fips toolchains by @xnox in #1471
* sca: make pc: provides/vendored use full package version by
@xnox in #1467
-------------------------------------------------------------------
Fri Jul 19 05:38:35 UTC 2024 - opensuse_buildservice@ojkastl.de

6
melange.obsinfo
View File

@ -1,4 +1,4 @@
name: melange
version: 0.19.5
mtime: 1738970196
commit: d80100d2a5e5b4a222d23a770863f15886b8c9e7
version: 0.11.1
mtime: 1721353354
commit: a52edcc075ebf1dc89aea87893e3821944171ee3

33
melange.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package melange
#
# Copyright (c) 2025 SUSE LLC
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -16,33 +16,27 @@
#
%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
Name: melange
Version: 0.19.5
Version: 0.11.1
Release: 0
Summary: Build APKs from source code
License: Apache-2.0
URL: https://github.com/chainguard-dev/melange
Source: melange-%{version}.tar.gz
Source1: vendor.tar.gz
BuildRequires: bash-completion
BuildRequires: fish
BuildRequires: go >= 1.23
BuildRequires: zsh
BuildRequires: go >= 1.22
%description
Build apk packages using declarative pipelines.
Commonly used to provide custom packages for container images built with apko.
The majority of apks are built for use with either the Wolfi or Alpine Linux
ecosystems.
Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems.
Key features:
* Pipeline-oriented builds. Every step of the build pipeline is defined and
controlled by you, unlike traditional package managers which have distinct
phases.
* Multi-architecture by default. QEMU is used to emulate various architectures,
avoiding the need for cross-compilation steps.
* Pipeline-oriented builds. Every step of the build pipeline is defined and controlled by you, unlike traditional package managers which have distinct phases.
* Multi-architecture by default. QEMU is used to emulate various architectures, avoiding the need for cross-compilation steps.
%package -n %{name}-bash-completion
Summary: Bash Completion for %{name}
@ -102,8 +96,8 @@ mkdir -p %{buildroot}%{_datarootdir}/fish/vendor_completions.d/
%{buildroot}/%{_bindir}/%{name} completion fish > %{buildroot}%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
# create the zsh completion file
mkdir -p %{buildroot}%{_datarootdir}/zsh/site-functions/
%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh/site-functions/_%{name}
mkdir -p %{buildroot}%{_datarootdir}/zsh_completion.d/
%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh_completion.d/_%{name}
%files
%doc README.md
@ -111,12 +105,17 @@ mkdir -p %{buildroot}%{_datarootdir}/zsh/site-functions/
%{_bindir}/%{name}
%files -n %{name}-bash-completion
%dir %{_datarootdir}/bash-completion/completions/
%{_datarootdir}/bash-completion/completions/%{name}
%files -n %{name}-fish-completion
%dir %{_datarootdir}/fish
%dir %{_datarootdir}/fish/vendor_completions.d
%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
%files -n %{name}-zsh-completion
%{_datarootdir}/zsh/site-functions/_%{name}
%defattr(-,root,root)
%dir %{_datarootdir}/zsh_completion.d/
%{_datarootdir}/zsh_completion.d/_%{name}
%changelog

4
vendor.tar.gz
View File

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:5e9a13746c659c88d4aba7fab1605e951f4c774ebda92525eb1324824396bbc8
size 12934844
oid sha256:9db0b2132c06068d0b29926546808cd21efd7c31e697faff46a482e937ff38aa
size 9950544