_service

@@ -3,20 +3,19 @@
     <param name="url">https://github.com/chainguard-dev/melange</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.22.0</param>
+    <param name="revision">v0.11.1</param>
     <param name="versionformat">@PARENT_TAG@</param>
-    <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>
+    <param name="versionrewrite-pattern">v(.*)</param>
   </service>
   <service name="set_version" mode="manual">
+    <param name="basename">melange</param>
   </service>
-  <service name="go_modules" mode="manual">
+  <service name="tar" mode="buildtime"/>
-  </service>
-  <!-- services below are running at buildtime -->
-  <service name="tar" mode="buildtime">
-  </service>
   <service name="recompress" mode="buildtime">
     <param name="file">*.tar</param>
     <param name="compression">gz</param>
   </service>
+  <service name="go_modules" mode="manual">
+  </service>
 </services>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/chainguard-dev/melange</param>
-              <param name="changesrevision">3337f81591f7bcd9aa5d9d09d032f2a97e86d67d</param></service></servicedata>
+              <param name="changesrevision">a52edcc075ebf1dc89aea87893e3821944171ee3</param></service></servicedata>

melange-0.11.1.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:aadf06a4fb142a2a9f89966a94404c5cd7996967cf9a4ee0a2a9bb8956647340
+size 4489228

melange-0.22.0.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7fa28d0a3f6d15c1b2613252656eac7d01e4d0b3b4c9e0300932da16b5b8c082
-size 2086924

melange.changes

@@ -1,805 +1,3 @@
--------------------------------------------------------------------
-Fri Feb 28 05:40:30 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.22.0:
-  * feat(build/pipelines): add llvm/covreport (#1822)
-  * build(deps): bump
-    go.opentelemetry.io/otel/exporters/stdout/stdouttrace (#1797)
-  * build(deps): bump github.com/moby/moby (#1820)
-  * build(deps): bump github.com/go-jose/go-jose/v3 in the
-    go_modules group (#1815)
-  * chore(docs): automatic generate pipeline docs (#1699)
-  * feat(build/pipelines): add go/covdata pipeline (#1821)
-
--------------------------------------------------------------------
-Thu Feb 27 16:51:36 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.21.2:
-  * bump apko, check repro with --repo-append (#1812)
-  * feat: build config can specify package CPE (#1768)
-  * rebuild: populate Config directly without file (#1813)
-  * Improve cmake build verbosity (#1806)
-  * build(deps): bump the gomod group across 1 directory with 3
-    updates (#1809)
-  * build(deps): bump the actions group across 1 directory with 5
-    updates (#1808)
-  * build(deps): bump github.com/go-jose/go-jose/v4 in the
-    go_modules group (#1811)
-  * Add ${{context.name}} string substitution (#1810)
-  * Add support in e2e-tests for melange build and then test.
-    (#1801)
-
--------------------------------------------------------------------
-Mon Feb 24 06:03:12 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.21.1:
-  * Give better names for invalid pipelines errors (#1805)
-  * Fix pkgconf lint (#1802)
-
--------------------------------------------------------------------
-Thu Feb 20 18:19:36 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.21.0:
-  * feat(pipelines/go/build): add extra-args input variable by
-    @maxgio92 in #1792
-  * rebuild: add e2e test by @imjasonh in #1789
-  * Add annotations field map[string]string by @jvanzyl in #1793
-
--------------------------------------------------------------------
-Mon Feb 17 06:17:18 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.20.1:
-  * rebuild: make SBOM more reproducible
-  * hide 'melange rebuild'
-  * fix unit test
-  * regen docs
-  * fix lint finding
-  * new command: rebuild
-  * config: Add option to allow udpates to common prerelease tags
-
--------------------------------------------------------------------
-Thu Feb 13 06:17:12 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.20.0:
-  * bump to latest apko
-  * fix lint finding
-  * bump apko to get quieter logs
-  * build(deps): bump the gomod group across 1 directory with 5
-    updates
-  * move unnecessary logs from info to debug or error (#1781)
-  * build(deps): bump the actions group across 1 directory with 4
-    updates
-  * build(deps): bump cloud.google.com/go/storage from 1.49.0 to
-    1.50.0
-
--------------------------------------------------------------------
-Mon Feb 10 07:38:47 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.19.5:
-  * Move buildUser to existing const block
-  * Consolidate build user/group strings
-  * Pass GID pointer to apko_types.GID in test_test.go
-  * Add build user to test pipeline environments (#1747)
-  * keep using /usr as prefix
-  * add npm and update prefix location
-
--------------------------------------------------------------------
-Fri Feb 07 08:21:56 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.19.4:
-  * patch: expose fuzz flag value
-  * sbom: update copyrightText from "/n" to "NOASSERTION"
-  * Fix some white space issues
-  * Add ${{subpkg.name}} string substitution
-  * lint: Add linter for usrmerge
-  * Fix documentation update
-  * Update the documentation for the new linter
-  * Fix a linting error
-  * Add a linter which checks for pkgconfig files
-  * patch: add --verbose flag to patch pipeline
-
--------------------------------------------------------------------
-Mon Jan 27 15:58:37 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.19.3:
-  * disallow uses: with a nested pipeline
-
--------------------------------------------------------------------
-Mon Jan 20 05:59:17 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.19.2:
-  * move some spammy logs to debug
-  * docs
-  * fix lint, use 22.04 where needed
-  * try ubuntu-22.04
-  * remove 'melange convert gem'
-  * remove 'melange convert python'
-
--------------------------------------------------------------------
-Fri Jan 17 06:19:20 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.19.1:
-  * Update pkg/build/build.go
-  * Update pkg/build/build.go
-  * sbom: switch SPDX namespace from SHA1 to FNV-1a
-  * Compress the initrd to workaround issue (#1745)
-  * stop generation homebrew update as melange in in homebrew core
-  * build(deps): bump the actions group with 2 updates
-  * build: Write a GCC specs file into workspace
-
--------------------------------------------------------------------
-Sat Jan 11 12:10:16 UTC 2025 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.19.0:
-  * feat: add support to add and drop linux capabilities (#1702)
-  * Update pkg/build/pipeline.go
-  * Update pkg/build/pipeline.go
-  * build(deps): bump golang.org/x/time from 0.8.0 to 0.9.0
-  * build(deps): bump github.com/invopop/jsonschema from 0.12.0 to
-    0.13.0
-  * build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
-  * build(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to
-    5.13.1
-  * minor go cleanup
-  * minor go cleanup
-  * build(deps): bump sigs.k8s.io/release-utils from 0.8.5 to 0.9.0
-  * Fix(piepline): use correct comment systax
-  * fix: Move the go mod tidy after cd to modrootfeat: Check if
-    go.mod file exiest in modroot dir to ensure modroot is set
-    correctly
-
--------------------------------------------------------------------
-Mon Dec 30 07:23:42 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.18.3:
-  * build(deps): bump actions/upload-artifact in the actions group
-
--------------------------------------------------------------------
-Mon Dec 23 06:59:51 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.18.2:
-  * update apko to 0.22.4
-  * build(deps): bump cloud.google.com/go/storage from 1.48.0 to
-    1.49.0
-  * build(deps): bump google.golang.org/api from 0.211.0 to 0.214.0
-  * build(deps): bump the gomod group with 2 updates
-  * Fix numpy-test to work across python 3.12 to 3.13 transition.
-    (#1715)
-  * fix(qemu): remove redundant check
-  * bump: double-quote bumped version strings, avoid trailing
-    newline
-  * build(deps): bump actions/setup-go in the actions group
-  * build(deps): bump the gomod group with 2 updates
-  * fix linting
-  * respect ctx error
-  * fix(qemu): improve logging, make connection  check less spammy
-
--------------------------------------------------------------------
-Mon Dec 16 06:21:41 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.18.1:
-  * fix error
-  * also drop util.RightJoinMap
-  * undo whitespace change
-  * remove unnecessary util.Dedup method
-
--------------------------------------------------------------------
-Sat Dec 14 21:14:54 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.18.0:
-  * build(deps): bump chainguard.dev/apko from 0.21.0 to 0.22.1
-  * build(deps): bump
-    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
-  * build(deps): bump dagger.io/dagger in the gomod group
-  * upgrade to 3.13
-  * sign: switch to SHA2-256 signature by default
-  * feat(pipelines/cargo): add support for rustflags (#1698)
-  * pipelines/split/dev - grab files in /usr/share/cmake
-
--------------------------------------------------------------------
-Thu Dec 12 05:56:35 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.17.7:
-  * Bump apko and fix the thing I broke
-  * Handle WalkDir errors
-  * build(deps): bump dagger.io/dagger from 0.14.0 to 0.15.0
-
--------------------------------------------------------------------
-Thu Dec 12 05:55:01 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.17.6:
-  * Bump apko to v0.20.2
-
--------------------------------------------------------------------
-Thu Dec 12 05:53:56 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.17.5:
-  * drop spammy slog attributes
-  * build(deps): bump cloud.google.com/go/storage from 1.47.0 to
-    1.48.0
-
--------------------------------------------------------------------
-Tue Dec 10 08:48:22 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.17.4:
-  * build(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0
-  * build(deps): bump github.com/chainguard-dev/clog
-  * build(deps): bump github.com/chainguard-dev/yam in the gomod
-    group
-  * melange/update block: provide config option to indicate that
-    automated pull requests should be merged in order rather than
-    superseding and closing previous unmerged PRs
-
--------------------------------------------------------------------
-Sun Dec 08 09:04:12 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.17.3:
-  * fix(sca): Revert recent SCA changes for Ruby
-
--------------------------------------------------------------------
-Sun Dec 08 08:48:12 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.17.2:
-  * fix(qemu): fix MacOS crosscompile path (#1678)
-  * fix(sca): Don't generate ruby dep when found in shebang
-  * fix(sca_test): Check for ruby-base
-  * fix(sca): Generate dependency for ruby-*-base instead of ruby-*
-  * Improve comment stripping errors
-  * Add package.srcdir substitution to README
-
--------------------------------------------------------------------
-Mon Dec 02 10:02:15 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.17.1:
-  * test(compile): basic tests for stripComments
-  * fix(compile): label when compile error is for test pipeline
-
--------------------------------------------------------------------
-Fri Nov 29 12:16:20 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.17.0:
-  * feat: add project.srcdir variable (#1666)
-
--------------------------------------------------------------------
-Wed Nov 27 09:43:18 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.16.0:
-  * Include locked melange config in control section
-  * build(deps): bump github.com/stretchr/testify from 1.9.0 to
-    1.10.0
-  * build(deps): bump the gomod group with 2 updates
-  * build(deps): bump step-security/harden-runner in the actions
-    group
-
--------------------------------------------------------------------
-Tue Nov 26 13:50:47 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.14:
-  * fix(pipeline): validate expected commit before passing to
-    git-checkout pipeline (#1667)
-  * Add git version to Summarize output
-  * RELEASE.md update, add statement that tags and releases will
-    update
-
--------------------------------------------------------------------
-Fri Nov 22 19:27:01 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.13:
-  * Consider symlinks as potential provides for so:
-  * drop ntia e2e test
-
--------------------------------------------------------------------
-Wed Nov 20 09:22:47 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.12:
-  * pipelines/cargo: ability to override output-dir
-  * fix(pipeline): check also checksum length
-  * fix(pipeline): do preliminary checks for checksum invalid chars
-  * docs: re-add release documentation markdown file
-  * hack: remove release.md
-  * docs: update automatic release interval
-  * add a dependency on texinfo or man-db as appropriate
-
--------------------------------------------------------------------
-Tue Nov 19 08:38:41 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.11:
-  * build(deps): bump cloud.google.com/go/storage from 1.46.0 to
-    1.47.0
-
--------------------------------------------------------------------
-Tue Nov 19 08:35:58 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.10:
-  * release: check for both tag and release
-
--------------------------------------------------------------------
-Tue Nov 19 08:31:33 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.9:
-  * change release frequency to weekly
-  * review feedback
-  * docs(release): update release.md based on new workflow design
-  * fix(releases): more reliable releases
-  * Bump apko to v0.20.0
-  * Clean up workspace dir from inside runner to avoid permission
-    errors. (#1648)
-
--------------------------------------------------------------------
-Fri Nov 15 07:06:41 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.8:
-  * Create sub-package directories in WorkDir before building
-    subpackage
-
--------------------------------------------------------------------
-Thu Nov 14 10:13:58 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.7:
-  * build(deps): bump golang.org/x/text from 0.19.0 to 0.20.0
-
--------------------------------------------------------------------
-Wed Nov 13 10:02:12 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.6:
-  * build(deps): bump golang.org/x/time from 0.7.0 to 0.8.0
-  * build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0
-  * Give a pointer to solution if bubblewrap runner cannot use user
-    namespace.
-  * build(deps): bump
-    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
-  * build(deps): bump dagger.io/dagger from 0.13.7 to 0.14.0
-
--------------------------------------------------------------------
-Tue Nov 12 10:04:04 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.5:
-  * anotha one
-  * qemu: reduce logspam for qemu runner
-  * build(deps): bump google.golang.org/api from 0.204.0 to 0.205.0
-  * build(deps): bump go.opentelemetry.io/otel from 1.31.0 to
-    1.32.0
-  * build(deps): bump chainguard.dev/apko in the gomod group
-  * build(deps): bump goreleaser/goreleaser-action in the actions
-    group
-  * cleanup: remove unnecessary utils
-  * chore(pipelines/fetch): Print expected and found checksums
-
--------------------------------------------------------------------
-Tue Nov 12 09:51:27 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.4:
-  * fix(qemu): use proper machine type and cpu model based on host
-    arch (#1627)
-  * Switch the copy to pick up hidden files. (#1624)
-
--------------------------------------------------------------------
-Tue Nov 12 09:45:23 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.3:
-  * Add man-db for doc packages
-
--------------------------------------------------------------------
-Tue Nov 12 09:42:56 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.2:
-  * check ReplacesPriority if it is an integer
-
--------------------------------------------------------------------
-Tue Nov 12 09:39:32 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.1:
-  * build(deps): bump the gomod group with 2 updates
-  * build(deps): bump google.golang.org/api from 0.203.0 to 0.204.0
-  * build(deps): bump cloud.google.com/go/storage from 1.45.0 to
-    1.46.0
-
--------------------------------------------------------------------
-Sat Nov 02 08:22:10 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.15.0:
-  * feat(qemu): fix qemu command on cross-compilation cases
-  * update docs
-  * feat(qemu): add flag to specify cpu model to use, useful for
-    cases where /dev/kvm is not available
-  * fix(qemu): remove ssh ignoreHostKey, set an host-key retrieval
-    step, then use host key verification for all successive
-    commands
-  * fix linting
-  * fix(qemu): improve error when not finding a suitable kernel
-    image
-  * fix(qemu): use net.Listen to find open port, simplify random
-    port logic
-  * fix(qemu): use package go-shellquote and simplify cmd handling
-  * fix(qemu): use package go-shellquote and simplify cmd handling
-  * fix(qemu): specify KVM accelleration on linux, use only if
-    /dev/kvm is present
-  * fix(qemu): fix typos
-
--------------------------------------------------------------------
-Tue Oct 29 15:08:52 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.11:
-  * build(deps): bump github.com/chainguard-dev/yam in the gomod
-    group
-  * build(deps): bump the actions group with 2 updates
-
--------------------------------------------------------------------
-Sat Oct 26 08:39:55 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.10:
-  * build(deps): bump the gomod group across 1 directory with 2
-    updates
-
--------------------------------------------------------------------
-Fri Oct 25 12:22:11 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.9:
-  * chore: unexport build pkg methods
-  * bump apko to get http key support
-  * go mod tidy
-  * bump apko to pick up chainguard key fix
-
--------------------------------------------------------------------
-Thu Oct 24 08:27:07 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.8:
-  * fix(bubblewrap_runner): run as build 1000 by default (#1572)
-  * use --target-dir to target with cargo build
-  * pass --release as default opts
-  * allow passing more than one opts to cargo build
-
--------------------------------------------------------------------
-Wed Oct 23 16:42:33 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.7:
-  * fix breakage
-  * go mod tidy
-  * bump apko dep to fix modtime issue
-
--------------------------------------------------------------------
-Wed Oct 23 16:28:25 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.6:
-  * fix(build): require build config repo URL
-  * add build base to cargo-build pipeline
-
--------------------------------------------------------------------
-Wed Oct 23 09:27:57 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.5 (0.14.4 was not properly released):
-  * fix(sbom): unique package IDs for upstream source
-  * test: (tdd) add failing test for dup spdx IDs
-
--------------------------------------------------------------------
-Wed Oct 23 09:17:45 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.3:
-  * fix(build): use fallback values at entrypoint for git info
-  * fix(build): use the config file dir path for git detection
-
--------------------------------------------------------------------
-Wed Oct 23 09:13:43 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.2:
-  * ci: add workflow to tag releases daily
-
--------------------------------------------------------------------
-Wed Oct 23 09:08:38 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.1:
-  * Do not specify versions during 'melange test' (Revert #1579 and
-    #1518)
-
--------------------------------------------------------------------
-Wed Oct 23 08:56:22 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.14.0:
-  * fix(build): make git autodetection best effort
-  * test: use x86_64 for build int tests
-  * move sbom test inside build test
-  * test(build): favor bwrap, fallback to docker
-  * chore: dedup test targets in makefile
-  * docs: run make docs-repo
-  * try qemu runner
-  * test: remove e2e tests for SBOM external refs
-  * unique SPDX IDs for multiple git repo checkouts
-  * chore: add make target for integration tests
-  * test: add integration test for build and SBOMs
-  * chore: bump Go version
-  * feat(sbom): overhaul SBOM generation logic
-
--------------------------------------------------------------------
-Wed Oct 23 08:47:47 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.13.7:
-  * Pin the package version with ~ rather than =.
-  * build(deps): bump google.golang.org/api from 0.200.0 to 0.201.0
-  * build(deps): bump cloud.google.com/go/storage from 1.44.0 to
-    1.45.0
-  * bublewrap_runner: add /sys mount
-  * fix lint finding
-  * pipe it through cli
-  * cleanup glow up
-  * fix(qemu): fix missing pty allocation for debug shell in qemu
-    runners
-  * Do not add a cmd:awk dependency as nothing will ever provide
-    cmd:awk
-  * fix formatting lint
-  * fix(test): update tests to reflect new struct
-  * fix(qemu): fix failing test pipeline when using qemu runner
-  * fix test
-  * Pin the package version used during tests
-
--------------------------------------------------------------------
-Wed Oct 16 07:52:03 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.13.6:
-  * run `make generate`
-  * rename exported GetTagFilterPrefix and GetTagFilterContains
-    functions to be normalized GetFilterPrefix and GetFilterPrefix
-  * update config: add version filter prefix and contains to
-    release monitor config block so implementations can perform the
-    same behaviour as git and github configs
-  * build(deps): bump
-    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
-  * build(deps): bump google.golang.org/api from 0.199.0 to 0.200.0
-  * build(deps): bump the actions group with 2 updates
-  * build(deps): bump go.opentelemetry.io/otel/sdk from 1.30.0 to
-    1.31.0
-  * build(deps): bump the gomod group with 4 updates
-  * pipelines: fix split/debug
-
--------------------------------------------------------------------
-Sun Oct 13 18:08:10 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.13.5:
-  * Enable pc file dependencies
-  * generateRuntimePkgConfigDeps: only do so for public .pc, not
-    vendored
-  * Improve some config parsing errors
-
--------------------------------------------------------------------
-Fri Oct 11 09:25:44 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.13.4:
-  * Revert "sca: Properly detect .so files as deps"
-  * Revert "sca: check if runtime dependencies are vendored"
-
--------------------------------------------------------------------
-Fri Oct 11 09:19:23 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.13.3:
-  * cmake: switch from MinSizeRel to Release
-
--------------------------------------------------------------------
-Fri Oct 11 09:13:44 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.13.2:
-  * fix: pc provides
-  * build(deps): bump golang.org/x/time from 0.6.0 to 0.7.0
-
--------------------------------------------------------------------
-Fri Oct 11 09:11:28 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.13.1:
-  * tidy
-  * build(deps): bump cloud.google.com/go/storage from 1.43.0 to
-    1.44.0
-  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
-  * build(deps): bump github.com/chainguard-dev/yam in the gomod
-    group
-  * build(deps): bump the actions group with 2 updates
-  * sca: check if runtime dependencies are vendored
-
--------------------------------------------------------------------
-Sun Oct 06 08:01:56 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.13.0:
-  * Fix typo in README
-  * test: Fix typo
-  * Added additional documentation for package version selection
-  * sca: Properly detect .so files as deps
-  * Adjust an e2e-test that made a bad assumption.
-  * update the docs
-  * add --cleanup flag (default true)
-  * build(deps): bump github.com/chainguard-dev/yam from 0.1.1 to
-    0.2.0
-  * build(deps): bump google.golang.org/api from 0.198.0 to 0.199.0
-  * build(deps): bump actions/checkout in the actions group
-  * Support string replacement in ImageContents
-  * build(deps): bump the gomod group with 5 updates
-  * git-checkout: support scheduled updates
-  * sca: never emit libcuda.so.1 runtime dep
-  * Add table of contents
-  * Add pipeline markdown reference markdown generator.
-  * feat(melange): Add sub for output directory
-
--------------------------------------------------------------------
-Sat Sep 21 16:30:34 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.12.1:
-  * build(deps): bump github.com/docker/cli
-  * build(deps): bump github.com/docker/docker
-  * build(deps): bump the gomod group with 2 updates
-  * build(deps): bump chainguard.dev/apko from 0.18.1 to 0.19.1
-  * sca: remove set but never used variable
-  * update_config: expose function to get valid schedule messages
-  * Add uses and name to slog values
-  * Include subpackage name in slog values
-  * Only read the first line for shbang.
-  * pombump: add flag to display the dependency tree
-  * build(deps): bump dagger.io/dagger from 0.12.7 to 0.13.0
-  * build(deps): bump step-security/harden-runner in the actions
-    group
-  * build(deps): bump
-    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
-  * build(deps): bump the gomod group with 2 updates
-  * keygen: reject bit size < 4096
-  * cleanup: remove some direct imports of charm log
-
--------------------------------------------------------------------
-Sat Sep 14 15:42:45 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.12.0:
-  * Upgrade to new hash-agnostic APIs for sign and verify
-  * Upgrade to apko v0.18.0
-  * index: stop writing APKINDEX.json
-  * update to go1.23.1
-  * build(deps): bump google.golang.org/api from 0.195.0 to 0.196.0
-  * build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
-  * build(deps): bump the gomod group with 2 updates
-  * pipelines/ruby: remove signing_key by default
-  * config: Whack more moles for string replacement
-  * install go
-  * lint
-  * upgrade to golang 1.23
-
--------------------------------------------------------------------
-Sat Sep 14 15:36:42 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.11.6:
-  * adds git checkout fetch,update,test and yams the melange
-    apkbuild yamls
-
--------------------------------------------------------------------
-Sat Sep 14 15:33:26 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.11.5:
-  * fix(split pipelines): Don't split lib64 libraries
-
--------------------------------------------------------------------
-Sat Sep 14 15:27:45 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.11.4:
-  * fix(split pipelines): Check package was defined, not package
-    directory
-  * fix(split/dev): Support for /usr/local
-  * fix(split pipelines): Add support for lib64
-  * fix(split pipelines): Use package name instead of package dir,
-    use exact paths
-  * Update dev.yaml
-  * feat(pipelines/split): Support overriding source package
-    directory
-  * build(deps): bump dagger.io/dagger in the gomod group
-  * build(deps): bump actions/upload-artifact in the actions group
-
--------------------------------------------------------------------
-Sat Sep 14 15:18:12 UTC 2024 - opensuse_buildservice@ojkastl.de
-
-- Update to version 0.11.3:
-  (0.11.2 is the same commit hash as 0.11.1):
-  * fix(sca): Correctly check for existing Ruby runtime dependency
-    by @EyeCantCU in #1387
-  * build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 in the
-    actions group by @dependabot in #1378
-  * build(deps): bump google.golang.org/api from 0.187.0 to 0.188.0
-    by @dependabot in #1382
-  * build(deps): bump github.com/google/go-containerregistry from
-    0.19.2 to 0.20.1 by @dependabot in #1392
-  * build(deps): bump step-security/harden-runner from 2.8.1 to
-    2.9.0 in the actions group by @dependabot in #1391
-  * build(deps): bump the gomod group across 1 directory with 2
-    updates by @dependabot in #1390
-  * build(deps): bump dagger.io/dagger from 0.11.9 to 0.12.1 by
-    @dependabot in #1389
-  * build(deps): bump github.com/docker/cli from
-    27.0.3+incompatible to 27.1.0+incompatible by @dependabot in
-    #1397
-  * Expose ignoreSignatures functionality by @Kevin-Molina in #1375
-  * build(deps): bump github.com/docker/docker from
-    27.0.3+incompatible to 27.1.0+incompatible by @dependabot in
-    #1396
-  * build(deps): bump docker/login-action from 3.2.0 to 3.3.0 in
-    the actions group by @dependabot in #1398
-  * build(deps): bump google.golang.org/api from 0.188.0 to 0.189.0
-    by @dependabot in #1401
-  * fix: ignore resource requests for the docker runner by
-    @imjasonh in #1403
-  * build(deps): bump dagger.io/dagger from 0.12.1 to 0.12.2 in the
-    gomod group by @dependabot in #1400
-  * Bump apko dependency by @mattmoor in #1404
-  * fix ruby sca by @xnox in #1410
-  * Add HOME=/root to default test environment. by @smoser in #1408
-  * build(deps): bump the gomod group with 4 updates by @dependabot
-    in #1405
-  * update config: provide configuration to describe polling and
-    schedules by @rawlingsj in #1412
-  * build(deps): bump the gomod group with 2 updates by @dependabot
-    in #1416
-  * build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0
-    by @dependabot in #1419
-  * build(deps): bump the actions group with 2 updates by
-    @dependabot in #1415
-  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 by
-    @dependabot in #1418
-  * build(deps): bump golang.org/x/time from 0.5.0 to 0.6.0 by
-    @dependabot in #1417
-  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0 by
-    @dependabot in #1420
-  * update config: replace recently added polling with git struct
-    by @rawlingsj in #1421
-  * build(deps): bump github.com/google/go-containerregistry from
-    0.20.1 to 0.20.2 in the gomod group by @dependabot in #1423
-  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 by
-    @dependabot in #1424
-  * build(deps): bump google.golang.org/api from 0.190.0 to 0.191.0
-    by @dependabot in #1426
-  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 by
-    @dependabot in #1428
-  * move 'adding package %q for pipeline %q' to debug logging by
-    @imjasonh in #1429
-  * don't depend on apko's custom log package by @imjasonh in #1430
-  * build(deps): bump github.com/chainguard-dev/yam from 0.0.13 to
-    0.1.0 by @dependabot in #1431
-  * Feat/qemu runners by @89luca89 in #1386
-  * Attempt to fix qemu ci by @jonjohnsonjr in #1434
-  * build(deps): bump the actions group with 3 updates by
-    @dependabot in #1432
-  * Centralize sca options handling by @jonjohnsonjr in #1433
-  * Add test to catch duplicate package names by @jonjohnsonjr in
-    #1439
-  * build(deps): bump the gomod group with 4 updates by @dependabot
-    in #1437
-  * build(deps): bump google.golang.org/api from 0.191.0 to 0.192.0
-    by @dependabot in #1438
-  * move 'found pipeline' log message to debug by @imjasonh in
-    #1440
-  * melange convert python: use normalized names by @pnasrat in
-    #1441
-  * Bump apko to get chainctl auth error log by @jonjohnsonjr in
-    #1442
-  * Replace "needs" in range pipelines by @jonjohnsonjr in #1445
-  * docs: Add information on the repository used with the git
-    update configuration option by @philroche in #1447
-  * Refactor parts of the ParseConfiguration by @jonjohnsonjr in
-    #1446
-  * build(deps): bump
-    go.opentelemetry.io/otel/exporters/stdout/stdouttrace from
-    1.28.0 to 1.29.0 by @dependabot in #1455
-  * build(deps): bump google.golang.org/api from 0.192.0 to 0.194.0
-    by @dependabot in #1452
-  * config: Replace pipelines at top level by @jonjohnsonjr in
-    #1456
-  * refactor(sbom): cleanup, simplify, and document code by
-    @luhring in #1458
-  * More SBOM logic improvements by @luhring in #1459
-  * build(deps): bump github.com/docker/cli from
-    27.1.2+incompatible to 27.2.0+incompatible by @dependabot in
-    #1461
-  * build(deps): bump google.golang.org/api from 0.194.0 to 0.195.0
-    by @dependabot in #1463
-  * build(deps): bump github.com/docker/docker from
-    27.1.2+incompatible to 27.2.0+incompatible by @dependabot in
-    #1462
-  * build(deps): bump dagger.io/dagger from 0.12.5 to 0.12.6 in the
-    gomod group by @dependabot in #1465
-  * chore(cargo/build): Allow changing install dir, add busybox by
-    @EyeCantCU in #1466
-  * sca: add support for more go fips toolchains by @xnox in #1471
-  * sca: make pc: provides/vendored use full package version by
-    @xnox in #1467
-
 -------------------------------------------------------------------
 Fri Jul 19 05:38:35 UTC 2024 - opensuse_buildservice@ojkastl.de
 

melange.obsinfo

@@ -1,4 +1,4 @@
 name: melange
-version: 0.22.0
+version: 0.11.1
-mtime: 1740691938
+mtime: 1721353354
-commit: 3337f81591f7bcd9aa5d9d09d032f2a97e86d67d
+commit: a52edcc075ebf1dc89aea87893e3821944171ee3

melange.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package melange
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,33 +16,27 @@
 #
 
 
+%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
+
 Name:           melange
-Version:        0.22.0
+Version:        0.11.1
 Release:        0
 Summary:        Build APKs from source code
 License:        Apache-2.0
 URL:            https://github.com/chainguard-dev/melange
 Source:         melange-%{version}.tar.gz
 Source1:        vendor.tar.gz
-BuildRequires:  bash-completion
+BuildRequires:  go >= 1.22
-BuildRequires:  fish
-BuildRequires:  go >= 1.23
-BuildRequires:  zsh
 
 %description
 Build apk packages using declarative pipelines.
 
-Commonly used to provide custom packages for container images built with apko.
+Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems.
-The majority of apks are built for use with either the Wolfi or Alpine Linux
-ecosystems.
 
 Key features:
 
-* Pipeline-oriented builds. Every step of the build pipeline is defined and
+* Pipeline-oriented builds. Every step of the build pipeline is defined and controlled by you, unlike traditional package managers which have distinct phases.
-  controlled by you, unlike traditional package managers which have distinct
+* Multi-architecture by default. QEMU is used to emulate various architectures, avoiding the need for cross-compilation steps.
-  phases.
-* Multi-architecture by default. QEMU is used to emulate various architectures,
-  avoiding the need for cross-compilation steps.
 
 %package -n %{name}-bash-completion
 Summary:        Bash Completion for %{name}
@@ -102,8 +96,8 @@ mkdir -p %{buildroot}%{_datarootdir}/fish/vendor_completions.d/
 %{buildroot}/%{_bindir}/%{name} completion fish > %{buildroot}%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
 
 # create the zsh completion file
-mkdir -p %{buildroot}%{_datarootdir}/zsh/site-functions/
+mkdir -p %{buildroot}%{_datarootdir}/zsh_completion.d/
-%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh/site-functions/_%{name}
+%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh_completion.d/_%{name}
 
 %files
 %doc README.md
@@ -111,12 +105,17 @@ mkdir -p %{buildroot}%{_datarootdir}/zsh/site-functions/
 %{_bindir}/%{name}
 
 %files -n %{name}-bash-completion
+%dir %{_datarootdir}/bash-completion/completions/
 %{_datarootdir}/bash-completion/completions/%{name}
 
 %files -n %{name}-fish-completion
+%dir %{_datarootdir}/fish
+%dir %{_datarootdir}/fish/vendor_completions.d
 %{_datarootdir}/fish/vendor_completions.d/%{name}.fish
 
 %files -n %{name}-zsh-completion
-%{_datarootdir}/zsh/site-functions/_%{name}
+%defattr(-,root,root)
+%dir %{_datarootdir}/zsh_completion.d/
+%{_datarootdir}/zsh_completion.d/_%{name}
 
 %changelog

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:cec0186e0994495ed0e58eaacd107eaf32bb401e4024bd1b4ad36753360f8b00
+oid sha256:9db0b2132c06068d0b29926546808cd21efd7c31e697faff46a482e937ff38aa
-size 12932528
+size 9950544