pool/minisign
SHA256
16
0
Fork 1
Code Issues Pull Requests 1 Activity

add minisign to openSUSE Leap boo#1256939 #1

Manually merged
anag_factory merged 4 commits from AndreasStieger/minisign:factory into leap-16.0 2026-01-23 10:51:58 +01:00
Conversation 9 Commits 4 Files Changed 7 +202 -9
AndreasStieger commented 2026-01-19 20:31:33 +01:00
Contributor
Copy Link

See boo#1256939, add to PackageHub please.

Rationale for adding after the release:

  • OBS development tools used across openSUSE Leap and SLE users, should be compatible
  • dependency of a planned obs-source_validator change
  • supply chain security improvements (some projects moving to minisign)
See [boo#1256939](https://bugzilla.opensuse.org/show_bug.cgi?id=1256939), add to PackageHub please. Rationale for adding after the release: * OBS development tools used across openSUSE Leap and SLE users, should be compatible * dependency of a planned `obs-source_validator` change * supply chain security improvements (some projects moving to minisign)
AndreasStieger added 4 commits 2026-01-19 20:31:34 +01:00
Accepting request 1242098 from home:smolsheep:upgrades f9317d7e38 
- Update to version 0.12
  * Libsodium is now an optional dependency. When using the Zig
    toolchain to compile Minisign, you can specify the
    -Dwithout-libsodium flag to build and run without libsodium.
  * Key identifiers are now zero-padded when printed.

OBS-URL: https://build.opensuse.org/request/show/1242098
OBS-URL: https://build.opensuse.org/package/show/security/minisign?expand=0&rev=6
Accepting request 1242099 from security 1dcd8aa2c8 
OBS-URL: https://build.opensuse.org/request/show/1242099
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/minisign?expand=0&rev=2
- Bugfix: 11aa379e35 
* bugfix: duplicate command-line arguments [7dfdb3c]
  * Add minisign-dup-command-line-args.patch

- Security fix: [gpg.fail/trustcomment]
  * Trusted comment injection (minisign) [6c59875]
  * trim(): only trim trailing \r\n, reject straight \r characters
  * Add minisign-gpg.fail-trustcomment.patch

- Security fix: [gpg.fail/minisign]
  * Trusted comment injection (minisign) [a10dc92]
  * Bail out if the signature file contains unprintable characters
  * Add minisign-gpg.fail-minisign.patch

OBS-URL: https://build.opensuse.org/package/show/security/minisign?expand=0&rev=8
Accepting request 1326768 from security e3f15b140a 
OBS-URL: https://build.opensuse.org/request/show/1326768
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/minisign?expand=0&rev=3
autogits_workflow_pr_bot requested review from legaldb 2026-01-19 20:32:00 +01:00
autogits_workflow_pr_bot requested review from maintenance-release-review 2026-01-19 20:32:00 +01:00
autogits_workflow_pr_bot requested review from opensuse-review 2026-01-19 20:32:00 +01:00
maintenance-release-review commented 2026-01-19 20:32:05 +01:00
First-time contributor
Copy Link

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @maintenance-release-review: approve.
To request changes on behalf of the group, create the following comment: @maintenance-release-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@maintenance-release-review: approve`. To request changes on behalf of the group, create the following comment: `@maintenance-release-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
opensuse-review commented 2026-01-19 20:34:28 +01:00
Member
Copy Link

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @opensuse-review: approve.
To request changes on behalf of the group, create the following comment: @opensuse-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@opensuse-review: approve`. To request changes on behalf of the group, create the following comment: `@opensuse-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
legaldb commented 2026-01-19 20:45:14 +01:00
Member
Copy Link

Legal review in progress.

Legal review [in progress](https://legaldb.suse.de/reviews/details/498623).
report.md
468 B
msmeissn commented 2026-01-21 10:05:09 +01:00
First-time contributor
Copy Link

@maintenance-release-review: approve

@maintenance-release-review: approve
maintenance-release-review approved these changes 2026-01-21 10:09:33 +01:00
maintenance-release-review left a comment
First-time contributor
Copy Link

msmeissn approved a review on behalf of maintenance-release-review

msmeissn approved a review on behalf of maintenance-release-review
oertel commented 2026-01-21 13:56:00 +01:00
First-time contributor
Copy Link

@opensuse-review : approve

LGTM

@opensuse-review : approve LGTM
oertel commented 2026-01-21 13:56:00 +01:00
First-time contributor
Copy Link

merge ok

merge ok
opensuse-review approved these changes 2026-01-21 14:06:06 +01:00
opensuse-review left a comment
Member
Copy Link

oertel approved a review on behalf of opensuse-review

oertel approved a review on behalf of opensuse-review
legaldb commented 2026-01-23 10:24:12 +01:00
Member
Copy Link

Legal reviewed by dec16180 as acceptable_by_lawyer:

Reviewed ok
Legal reviewed by *dec16180* as [acceptable_by_lawyer](https://legaldb.suse.de/reviews/details/498623): ``` Reviewed ok ```
report.md
468 B
legaldb approved these changes 2026-01-23 10:24:13 +01:00
anag_factory manually merged commit e3f15b140a into leap-16.0 2026-01-23 10:51:58 +01:00
Sign in to join this conversation.
Reviewers
No Reviewers
maintenance-release-review
opensuse-review
legaldb
Labels
Clear labels
legaldb
Critical Priority
Critical legaldb priority
Archived
legaldb
High Priority
2
High legaldb priority
legaldb
Normal Priority
1
Normal legaldb priority
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
adamm_super adrianSuSE autobuild-owner autobuild-review autogits_workflow_pr_bot bigironman dirkmueller eroca factory_bot gitea_test legaldb lkocman-factory maxlin_factory opensuse-review packagehub-review smithfarm
No Assignees
6 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: pool/minisign#1
Delete Branch "AndreasStieger/minisign:factory"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?