Accepting request 1142969 from home:aplanas:branches:security

- Update to version 0.2.4+git.1706692574.a744517:
  * Bump version to 0.2.4
  * build(deps): bump uuid from 1.4.1 to 1.7.0
  * keylime-agent.conf: Allow setting event logs paths
  * Mutable log paths: allow IMA and MBA log paths to be overridden by keylime configuration.
  * workflows: Update checkout action to version 4
  * build(deps): bump serde from 1.0.188 to 1.0.195
  * build(deps): bump pest_derive from 2.7.0 to 2.7.6
  * build(deps): bump openssl from 0.10.62 to 0.10.63
  * build(deps): bump config from 0.13.3 to 0.13.4
  * build(deps): bump base64 from 0.21.4 to 0.21.7
  * build(deps): bump tempfile from 3.8.0 to 3.9.0
  * build(deps): bump pest from 2.7.0 to 2.7.6
  * build(deps): bump actix-web from 4.4.0 to 4.4.1
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump h2 from 0.3.17 to 0.3.24
  * build(deps): bump shlex from 1.1.0 to 1.3.0
  * cargo: Bump tss-esapi to version 7.4.0
  * workflows: Fix keylime-bot token usage
  * tpm: Add error context for every possible error
  * tpm: Add AlgorithmError to TpmError
  * detect idevid template from certificates
  * build(deps): bump wiremock from 0.5.18 to 0.5.22
  * build(deps): bump thiserror from 1.0.48 to 1.0.56
  * Make use of workspace dependencies
  * build(deps): bump openssl from 0.10.57 to 0.10.62
  * packit: Bump Fedora version used for code coverage

OBS-URL: https://build.opensuse.org/request/show/1142969
OBS-URL: https://build.opensuse.org/package/show/security/rust-keylime?expand=0&rev=65

_service

@@ -1,21 +1,27 @@
 <services>
-  <service name="tar_scm" mode="disabled">
+  <service mode="disabled" name="obs_scm">
-    <param name="versionformat">0.2.3+git.%ct.%h</param>
-    <param name="revision">master</param>
     <param name="url">https://github.com/keylime/rust-keylime.git</param>
+    <param name="versionformat">@PARENT_TAG@~@TAG_OFFSET@</param>
     <param name="scm">git</param>
+    <param name="revision">v0.2.4</param>
+    <param name="match-tag">*</param>
+    <param name="versionrewrite-pattern">v(\d+\.\d+\.\d+)</param>
+    <param name="versionrewrite-replacement">\1</param>
     <param name="changesgenerate">enable</param>
+    <param name="changesauthor">aplanas@suse.com</param>
   </service>
-  <service name="recompress" mode="disabled">
+  <service mode="disabled" name="tar" />
-    <param name="compression">xz</param>
+  <service mode="disabled" name="recompress">
     <param name="file">*.tar</param>
+    <param name="compression">zst</param>
   </service>
+  <service mode="disabled" name="set_version"/>
   <!-- <service name="cargo_vendor" mode="disabled"> -->
-  <!--    <param name="srcdir">rust-keylime</param> -->
+  <!--    <param name="src">rust-keylime</param> -->
-  <!--    <param name="compression">xz</param> -->
+  <!--    <param name="compression">zst</param> -->
+  <!--    <param name="update">true</param> -->
   <!-- </service> -->
   <service name="cargo_audit" mode="disabled">
     <param name="srcdir">rust-keylime</param>
   </service>
-  <service name="set_version" mode="disabled"/>
 </services>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/keylime/rust-keylime.git</param>
-              <param name="changesrevision">a5dc985399bf535b29f12ed9b4c6130357769a95</param></service></servicedata>
+              <param name="changesrevision">a744517f8cf77241e907e0e644bf26400fa2c255</param></service></servicedata>

keylime-agent.conf.diff

@@ -2,7 +2,7 @@ Index: rust-keylime-0.2.0+git.1677002906.cf6c4f0/keylime-agent.conf
 ===================================================================
 --- rust-keylime-0.2.0+git.1677002906.cf6c4f0.orig/keylime-agent.conf
 +++ rust-keylime-0.2.0+git.1677002906.cf6c4f0/keylime-agent.conf
-@@ -19,13 +19,15 @@ version = "2.0"
+@@ -19,13 +19,15 @@ version = "2.2"
  # of 'SHA256(public EK in PEM format)'.
  #
  # To override, set KEYLIME_AGENT_UUID environment variable.

rust-keylime-0.2.3+git.1701075380.a5dc985.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:eb4f07e99eba43dad856bb3bc46f43e17a17637b380735ecf9b01e55935b6ffc
-size 28029360

rust-keylime-0.2.4~0.tar.zst

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4a089bbe1afb460c0b12f556fd95d4892ffd98ac2a962783e0f7c7faf7e8eaff
+size 169754

rust-keylime.changes

@@ -1,3 +1,34 @@
+-------------------------------------------------------------------
+Wed Jan 31 09:22:00 UTC 2024 - aplanas@suse.com
+
+- Update to version 0.2.4+git.1706692574.a744517:
+  * Bump version to 0.2.4
+  * build(deps): bump uuid from 1.4.1 to 1.7.0
+  * keylime-agent.conf: Allow setting event logs paths
+  * Mutable log paths: allow IMA and MBA log paths to be overridden by keylime configuration.
+  * workflows: Update checkout action to version 4
+  * build(deps): bump serde from 1.0.188 to 1.0.195
+  * build(deps): bump pest_derive from 2.7.0 to 2.7.6
+  * build(deps): bump openssl from 0.10.62 to 0.10.63
+  * build(deps): bump config from 0.13.3 to 0.13.4
+  * build(deps): bump base64 from 0.21.4 to 0.21.7
+  * build(deps): bump tempfile from 3.8.0 to 3.9.0
+  * build(deps): bump pest from 2.7.0 to 2.7.6
+  * build(deps): bump actix-web from 4.4.0 to 4.4.1
+  * build(deps): bump reqwest from 0.11.22 to 0.11.23
+  * build(deps): bump h2 from 0.3.17 to 0.3.24
+  * build(deps): bump shlex from 1.1.0 to 1.3.0
+  * cargo: Bump tss-esapi to version 7.4.0
+  * workflows: Fix keylime-bot token usage
+  * tpm: Add error context for every possible error
+  * tpm: Add AlgorithmError to TpmError
+  * detect idevid template from certificates
+  * build(deps): bump wiremock from 0.5.18 to 0.5.22
+  * build(deps): bump thiserror from 1.0.48 to 1.0.56
+  * Make use of workspace dependencies
+  * build(deps): bump openssl from 0.10.57 to 0.10.62
+  * packit: Bump Fedora version used for code coverage
+
 -------------------------------------------------------------------
 Fri Dec 01 10:04:40 UTC 2023 - aplanas@suse.com
 

rust-keylime.obsinfo

@@ -0,0 +1,4 @@
+name: rust-keylime
+version: 0.2.4~0
+mtime: 1706692574
+commit: a744517f8cf77241e907e0e644bf26400fa2c255

rust-keylime.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package rust-keylime
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -25,12 +25,12 @@
   %define _config_norepl %config(noreplace)
 %endif
 Name:           rust-keylime
-Version:        0.2.3+git.1701075380.a5dc985
+Version:        0.2.4~0
 Release:        0
 Summary:        Rust implementation of the keylime agent
-License:        Apache-2.0 AND MIT
+License:        (Apache-2.0 OR MIT) AND BSD-3-Clause AND (Apache-2.0 OR MIT) AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR MIT) AND (Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT) AND (Apache-2.0 OR MIT OR Zlib) AND (MIT OR Unlicense) AND (Apache-2.0 OR Zlib OR MIT) AND Apache-2.0 AND Apache-2.0 WITH LLVM-exception AND BSD-3-Clause AND ISC AND MIT
 URL:            https://github.com/keylime/rust-keylime
-Source:         rust-keylime-%{version}.tar.xz
+Source:         rust-keylime-%{version}.tar.zst
 Source1:        vendor.tar.xz
 Source2:        cargo_config
 Source3:        keylime.xml
@@ -72,7 +72,7 @@ Subpackage of %{name} to provide an suggested IMA policy for Keylime agent
 %prep
 %autosetup -a1 -p1
 mkdir .cargo
-cp %{SOURCE2} .cargo/config
+install -D -m 644 %{SOURCE2} .cargo/config
 
 %build
 %{cargo_build} --no-default-features

vendor.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:dd1828fd069ee5249ee7ee815bf9140d688615adb392ea6b92e9831093c177c9
+oid sha256:6e2c709feed1c51af142ad0601cce4bfd587f2cbbcf0092ee8ad47cc7b193d2e
-size 29556368
+size 34712428