SHA256
1
0
forked from pool/git-bug

33 Commits

Author SHA256 Message Date
2390ae6cee Revendor to include fixed version of depending libraries
- GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade
    golang.org/x/crypto to v0.43.0
  - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade
    github.com/go-viper/mapstructure/v2 to v2.4.0
  - GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous
  - GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade
    github.com/cloudflare/circl to v1.6.1
  - GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade
    golang.org/x/crypto/ssh to v0.45.0
  - GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade
    golang.org/x/crypto/ssh/agent to v0.45.0
2025-12-01 12:49:34 +01:00
c59d8fd39f Update to version 0.10.1:
- cli: ignore missing sections when removing configuration (ddb22a2f)
Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)
2025-12-01 12:49:12 +01:00
1d76ad48de Update to version 0.8.1+git.1746484874.96c7a111:
* docs: update install, contrib, and usage documentation (#1222)
  * fix: resolve the remote URI using url.*.insteadOf (#1394)
  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
  * chore: gofmt simplify gitlab/export_test.go (#1392)
  * fix: checkout repo before setting up go environment (#1390)
  * feat: bump to go v1.24.2 (#1389)
  * chore: update golang.org/x/net (#1379)
  * fix: use -0700 when formatting time (#1388)
  * fix: use correct url for gitlab PATs (#1384)
  * refactor: remove depdendency on pnpm for auto-label action (#1383)
  * feat: add action: auto-label (#1380)
  * feat: remove lifecycle/frozen (#1377)
  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
  * feat: support new exclusion label: lifecycle/pinned (#1375)
  * fix: refactor how gitlab title changes are detected (#1370)
  * revert: "Create Dependabot config file" (#1374)
  * refactor: rename //:git-bug.go to //:main.go (#1373)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
  * fix: set GitLastTag to an empty string when git-describe errors (#1355)
  * chore: update go-git to v5@masterupdate_mods (#1284)
  * refactor: Directly swap two variables to optimize code (#1272)
  * Update README.md Matrix link to new room (#1275)
Remove upstreamed patch:
  - CVE-2025-22869-bump-go-crypto-ssh.patch
2025-12-01 12:48:52 +01:00
2f237648f6 - Update to version 0.8.0+git.1742269202.0ab94c9:
* deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).
- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).
2025-12-01 12:48:34 +01:00
4826cd1151 Update vendorization. 2025-12-01 12:47:33 +01:00
8c2532d6f1 Revendor to include fixed version of depending libraries
- GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade
    golang.org/x/crypto to v0.43.0
  - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade
    github.com/go-viper/mapstructure/v2 to v2.4.0
  - GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous
  - GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade
    github.com/cloudflare/circl to v1.6.1
  - GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade
    golang.org/x/crypto/ssh to v0.45.0
  - GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade
    golang.org/x/crypto/ssh/agent to v0.45.0
2025-12-01 12:47:15 +01:00
addf54ad77 Update to version 0.10.1:
- cli: ignore missing sections when removing configuration (ddb22a2f)
Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)
2025-12-01 12:46:48 +01:00
25a56cc742 - Update to version 0.8.0+git.1742269202.0ab94c9:
* deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
  (apparently upstream still didn’t see the other one).
- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
  golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
  CVE-2025-22869).
2025-12-01 12:46:21 +01:00
ee758f0302 Update vendorization. 2025-12-01 12:46:03 +01:00
cbfe50b11c Update to version 0.8.0+git.1733745604.d499b6e:
* fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).
2025-12-01 12:45:27 +01:00
4a4372415e Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
reading git-bug.remote config value before defaulting to 'origin'
when no explicit REMOTE argument.
2025-12-01 12:45:26 +01:00
a3a4f99fcb Merge remote-tracking branch 'origin/leap-16.0' into HEAD 2025-12-01 12:43:08 +01:00
43a25d6598 Accepting request 1320059 from devel:tools:scm
- Revendor to include fixed version of depending libraries:
  - GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade
    golang.org/x/crypto to v0.43.0
  - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade
    github.com/go-viper/mapstructure/v2 to v2.4.0
  - GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous
  - GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade
    github.com/cloudflare/circl to v1.6.1
  - GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade
    golang.org/x/crypto/ssh to v0.45.0
  - GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade
    golang.org/x/crypto/ssh/agent to v0.45.0

OBS-URL: https://build.opensuse.org/request/show/1320059
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=13
2025-11-26 16:15:50 +00:00
6911af6e1c Accepting request 1312668 from devel:tools:scm
- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
  possible DoS by various algorithms with quadratic complexity
  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
  bsc#1251664, CVE-2025-58190).

OBS-URL: https://build.opensuse.org/request/show/1312668
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=12
2025-10-21 09:17:02 +00:00
e594f64458 Accepting request 1278375 from devel:tools:scm
- Update to version 0.10.1:
  - cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
  - bridge: correct command used to create a new bridge (9942337b)
  - web: simplify header navigation (7e95b169)
  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
  - completion: remove errata from string literal (aa102c91)
  - tui: improve readability of the help bar (23be684a)

OBS-URL: https://build.opensuse.org/request/show/1278375
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=11
2025-05-20 07:38:42 +00:00
53d65ccf0f Accepting request 1275060 from devel:tools:scm
- Update to version 0.8.1+git.1746484874.96c7a111:
* docs: update install, contrib, and usage documentation (#1222)
* fix: resolve the remote URI using url.*.insteadOf (#1394)
* build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
* chore: gofmt simplify gitlab/export_test.go (#1392)
* fix: checkout repo before setting up go environment (#1390)
* feat: bump to go v1.24.2 (#1389)
* chore: update golang.org/x/net (#1379)
* fix: use -0700 when formatting time (#1388)
* fix: use correct url for gitlab PATs (#1384)
* refactor: remove depdendency on pnpm for auto-label action (#1383)
* feat: add action: auto-label (#1380)
* feat: remove lifecycle/frozen (#1377)
* build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
* feat: support new exclusion label: lifecycle/pinned (#1375)
* fix: refactor how gitlab title changes are detected (#1370)
* revert: "Create Dependabot config file" (#1374)
* refactor: rename //:git-bug.go to //:main.go (#1373)
* build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
* fix: set GitLastTag to an empty string when git-describe errors (#1355)
* chore: update go-git to v5@masterupdate_mods (#1284)
* refactor: Directly swap two variables to optimize code (#1272)
* Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
- CVE-2025-22869-bump-go-crypto-ssh.patch

OBS-URL: https://build.opensuse.org/request/show/1275060
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=10
2025-05-07 17:19:03 +00:00
736dfb254c Accepting request 1256145 from devel:Factory:git-workflow:staging:mcepl:git-bug:7
- Update to version 0.8.0+git.1742269202.0ab94c9:

- Update to version 0.8.0+git.1742269202.0ab94c9:

(🤖: Submission of git-bug via pool/git-bug#7 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1256145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=9
2025-03-26 20:20:52 +00:00
62690c0dc5 Accepting request 1239615 from devel:Factory:git-workflow:staging:mcepl:git-bug:4
Update To D499b6e

Update to the commit d499b6e.

(🤖: Submission of git-bug via pool/git-bug#4 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1239615
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=8
2025-01-23 17:02:39 +00:00
Git SCM Staging
f84e3f119c [info=ab782b159e8850be0471942de2f849b659567314a17a59e7663ce792e9f48abc]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=6
2025-01-22 16:33:00 +00:00
Git SCM Staging
a45cc7b70a [info=f332bd0a0cbb8c2e69a5ca29a0c130cb7c2e5b77e43712f39412b52dc47c8ac8]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=5
2025-01-22 15:43:03 +00:00
8eda2c2f40 Accepting request 1235844 from devel:Factory:git-workflow:staging:mcepl:git-bug:4
Update To D499b6e

Update to the commit d499b6e.

(🤖: Submission of git-bug via pool/git-bug#4 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1235844
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=7
2025-01-09 14:07:47 +00:00
Git SCM Staging
49bc748fa9 [info=aaf8ee748406cfd8a24815afb6cad5ebfcd523a41bb54afe583ce5f567c16682]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=4
2025-01-08 09:16:06 +00:00
Git SCM Staging
6fa5e7c335 [info=eff75f601dc996202884e1ff651d125e45bc69e73c9530e62abe3be97c7eb860]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=3
2025-01-08 09:03:15 +00:00
Git SCM Staging
c87da1ac25 [info=5b5e1e4425abe81c6eb06b5f66c4a96f5fb3fbba1e7e492a2890642bbbeaa96c]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=2
2025-01-08 09:00:38 +00:00
Git SCM Staging
600eb6be4a [info=8d9522113e7a913f925136b2791d03c574a9ebb8c3769f747425dd7821d9e7dd]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:4/git-bug?expand=0&rev=1
2025-01-08 08:59:16 +00:00
c2907d34aa Accepting request 1231700 from devel:Factory:git-workflow:staging:mcepl:git-bug:2
Cve 2024 45337 Crypto Bump

- Update to version 0.8.0+git.1733745604.d499b6e:
  * fix typos in docs (#1266)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
  golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
  CVE-2024-45337, bsc#1234565).

(🤖: Submission of git-bug via pool/git-bug#2 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1231700
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=6
2024-12-17 18:25:24 +00:00
Git SCM Staging
57f0d29002 [info=fb65c5d555a534c3ef98b414d3cce1673c2de7ec09a005f8718ebf92aab17b08]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:2/git-bug?expand=0&rev=2
2024-12-17 14:09:44 +00:00
22bb247e73 Merge pull request 'Update to version 0.8.0+git.1725552198.b0cc690:' (#1) from mcepl_pkgs/git-bug:update into factory 2024-10-08 18:40:52 +02:00
cd87a14c18 Accepting request 1205581 from devel:Factory:git-workflow:staging:mcepl:git-bug:1
Update to version 0.8.0+git.1725552198.b0cc690:

Also switch to _service and generated tarball

(🤖: Submission of git-bug via pool/git-bug#1 by mcepl)

OBS-URL: https://build.opensuse.org/request/show/1205581
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git-bug?expand=0&rev=5
2024-10-04 15:10:44 +00:00
Git SCM Staging
e43f811c53 [info=6747d5f7671b55c0ff5e8a8c7910ab57476d8671674e9ffa239cb588c8f7443a]
OBS-URL: https://build.opensuse.org/package/show/devel:Factory:git-workflow:staging:mcepl:git-bug:1/git-bug?expand=0&rev=1
2024-10-03 18:49:59 +00:00
6747d5f767 Update to version 0.8.0+git.1725552198.b0cc690:
* build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
  * graphql: properly namespace Bug to make space for other entities (#1254)
  * refactor: rename github test repository: test-github-bridge (#1256)
  * build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
  * core: make label a common type, in a similar fashion as for status (#1252)
  * chore: regenerate command completion and documentation (#1253)
  * feat: update references to the git-bug organization (#1249)
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
  * feat: add package to dev shell: delve (#1240)
  * build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
  * feat(ci): support a merge queue
  * DOC: it is "new" not "configure" command (also was missing \)
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
  * build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * fix: correct path for reusable workflow: lifecycle
  * feat: merge go directive and toolchain specification
  * feat: improved lifecycle management with stale-bot
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
  * revert: "feat: increase operations per run for workflow: cron"
  * chore: update go dependencies
  * fix: run the presubmit pipeline for PRs
  * chore: remove refs to deprecated io/ioutil
  * fix: move codeql into an independent workflow
  * feat: bump node versions to 16.x, 18.x, and 20.x
  * feat: refactor pipelines into reusable workflows
  * build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
  * build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
  * build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
  * build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
  * build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
  * build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
  * build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
  * build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
  * build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
  * build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
  * build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
  * build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
  * build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
  * build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
  * build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
  * build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
  * build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  * build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
  * build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
  * build(deps): bump minimatch and recursive-readdir in /webui
  * fix: add write for prs: stale/issue-and-pr
  * feat: allow for manual execution of workflow: cron
  * feat: increase operations per run for workflow: cron
  * fix: add missing `with` property to //.github/workflows:cron.yml
  * feat: add workflow for triaging stale issues and prs
  * feat: add initial editorconfig configuration file
  * feat: add a common file for git-blame ignored revisions
  * feat: add a commit message template
  * feat: add initial nix development shell
  * feat: update action library versions
  * feat: add concurrency limits to all pipelines
  * fix: bump to go v1.22.5
  * fix: correct typo: acceps => accepts
  * build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
  * build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
  * build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
  * build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
  * build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
  * build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
  * build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
  * build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
  * build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
  * build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
  * build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)
2024-10-03 20:48:18 +02:00
78057987ff Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
reading git-bug.remote config value before defaulting to 'origin'
when no explicit REMOTE argument.
2024-08-03 17:27:38 +02:00
ed232a54e3 chore: remove _scmsync.obsinfo and build.specials.obscpio 2024-07-19 01:26:15 +02:00
13 changed files with 352 additions and 28 deletions

1
.gitattributes vendored
View File

@@ -21,3 +21,4 @@
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text
*.changes merge=merge-changes

3
.gitignore vendored
View File

@@ -1 +1,4 @@
.osc
_scmsync.obsinfo
build.specials.obscpio
git-bug/

View File

@@ -1,4 +0,0 @@
mtime: 1716306206
commit: 37df43d87407ec2126096834cde3c96c3261b7ea
url: https://src.opensuse.org/mcepl_pkgs/git-bug.git
revision: 37df43d87407ec2126096834cde3c96c3261b7ea

View File

@@ -1,19 +1,23 @@
<services>
<service name="tar_scm" mode="manual">
<param name="versionprefix">0.8.0+git</param>
<param name="url">https://github.com/MichaelMure/git-bug.git</param>
<!-- service name="tar_scm" mode="manual">
<param name="versionprefix">0.8.1+git</param>
<param name="revision">v0.8.1</param>
<param name="url">https://github.com/git-bug/git-bug.git</param>
<param name="scm">git</param>
<param name="exclude">.git*</param>
<param name="changesgenerate">enable</param>
<param name="changesauthor">mcepl@cepl.eu</param>
</service>
<service name="recompress" mode="manual">
<service name="tar" mode="buildtime"/>
<service name="recompress" mode="buildtime">
<param name="file">*.tar</param>
<param name="compression">gz</param>
</service>
<service name="set_version" mode="manual">
<param name="basename">git-bug</param>
</service>
<service name="set_version" mode="manual"/ -->
<service name="go_modules" mode="manual">
<param name="replace">golang.org/x/crypto=golang.org/x/crypto@v0.43.0</param>
<param name="replace">github.com/go-viper/mapstructure/v2=github.com/go-viper/mapstructure/v2@v2.4.0</param>
<param name="replace">github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1</param>
<param name="replace">golang.org/x/crypto/ssh=golang.org/x/crypto/ssh@v0.45.0</param>
<param name="replace">golang.org/x/crypto/ssh/agent=golang.org/x/crypto/ssh/agent@v0.45.0</param>
</service>
</services>

View File

@@ -1,4 +1,6 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/MichaelMure/git-bug.git</param>
<param name="changesrevision">6d051a243c734489993c6733c1b21895d59e5e34</param></service></servicedata>
<param name="changesrevision">d499b6e9d3333334614924669b74640a2d0b5485</param></service><service name="tar_scm">
<param name="url">https://github.com/git-bug/git-bug.git</param>
<param name="changesrevision">96c7a111a3cb075b5ce485f709c3eb82da121a50</param></service></servicedata>

Binary file not shown.

BIN
git-bug-0.10.1.tar.gz LFS Normal file

Binary file not shown.

View File

@@ -1,3 +1,199 @@
-------------------------------------------------------------------
Tue Nov 25 17:41:00 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Revendor to include fixed version of depending libraries:
- GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade
golang.org/x/crypto to v0.43.0
- GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade
github.com/go-viper/mapstructure/v2 to v2.4.0
- GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous
- GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade
github.com/cloudflare/circl to v1.6.1
- GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade
golang.org/x/crypto/ssh to v0.45.0
- GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade
golang.org/x/crypto/ssh/agent to v0.45.0
-------------------------------------------------------------------
Wed Oct 15 20:05:09 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Revendor to include golang.org/x/net/html v 0.45.0 to prevent
possible DoS by various algorithms with quadratic complexity
when parsing HTML documents (bsc#1251463, CVE-2025-47911 and
bsc#1251664, CVE-2025-58190).
-------------------------------------------------------------------
Mon May 19 08:38:03 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Update to version 0.10.1:
- cli: ignore missing sections when removing configuration (ddb22a2f)
- Update to version 0.10.0:
- bridge: correct command used to create a new bridge (9942337b)
- web: simplify header navigation (7e95b169)
- webui: remark upgrade + gfm + syntax highlighting (6ee47b96)
- BREAKING CHANGE: dev-infra: remove gokart (89b880bd)
- Update to version 0.10.0
- bridge: correct command used to create a new bridge (9942337b)
- web: simplify header navigation (7e95b169)
- web: remark upgrade + gfm + syntax highlighting (6ee47b96)
- Update to version 0.9.0:
- completion: remove errata from string literal (aa102c91)
- tui: improve readability of the help bar (23be684a)
-------------------------------------------------------------------
Tue May 06 10:21:55 UTC 2025 - mcepl@cepl.eu
- Update to version 0.8.1+git.1746484874.96c7a111:
* docs: update install, contrib, and usage documentation (#1222)
* fix: resolve the remote URI using url.*.insteadOf (#1394)
* build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)
* chore: gofmt simplify gitlab/export_test.go (#1392)
* fix: checkout repo before setting up go environment (#1390)
* feat: bump to go v1.24.2 (#1389)
* chore: update golang.org/x/net (#1379)
* fix: use -0700 when formatting time (#1388)
* fix: use correct url for gitlab PATs (#1384)
* refactor: remove depdendency on pnpm for auto-label action (#1383)
* feat: add action: auto-label (#1380)
* feat: remove lifecycle/frozen (#1377)
* build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)
* feat: support new exclusion label: lifecycle/pinned (#1375)
* fix: refactor how gitlab title changes are detected (#1370)
* revert: "Create Dependabot config file" (#1374)
* refactor: rename //:git-bug.go to //:main.go (#1373)
* build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)
* fix: set GitLastTag to an empty string when git-describe errors (#1355)
* chore: update go-git to v5@masterupdate_mods (#1284)
* refactor: Directly swap two variables to optimize code (#1272)
* Update README.md Matrix link to new room (#1275)
- Remove upstreamed patch:
- CVE-2025-22869-bump-go-crypto-ssh.patch
-------------------------------------------------------------------
Tue Mar 25 15:29:50 UTC 2025 - mcepl@cepl.eu
- Update to version 0.8.0+git.1742269202.0ab94c9:
* deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)
- Remove upstreamed CVE-2024-45337-bump-go-crypto.patch
(apparently upstream still didnt see the other one).
-------------------------------------------------------------------
Thu Mar 13 17:02:33 UTC 2025 - mcepl@cepl.eu
- Add CVE-2025-22869-bump-go-crypto-ssh.patch to update
golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,
CVE-2025-22869).
-------------------------------------------------------------------
Wed Jan 22 16:32:25 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Add missing Requires to completion subpackages.
-------------------------------------------------------------------
Wed Jan 8 09:00:10 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Update vendorization.
-------------------------------------------------------------------
Tue Dec 17 13:53:28 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
- Update to version 0.8.0+git.1733745604.d499b6e:
* fix typos in docs (#1266)
* build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)
- Add CVE-2024-45337-bump-go-crypto.patch to bump
golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for
CVE-2024-45337, bsc#1234565).
-------------------------------------------------------------------
Thu Oct 03 18:28:47 UTC 2024 - mcepl@cepl.eu
- Update to version 0.8.0+git.1725552198.b0cc690:
* build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 (#1261)
* graphql: properly namespace Bug to make space for other entities (#1254)
* refactor: rename github test repository: test-github-bridge (#1256)
* build(deps-dev): bump the npm_and_yarn group across 1 directory with 4 updates (#1250)
* core: make label a common type, in a similar fashion as for status (#1252)
* chore: regenerate command completion and documentation (#1253)
* feat: update references to the git-bug organization (#1249)
* build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.5 to 8.8.2 (#1248)
* build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#1242)
* feat: add package to dev shell: delve (#1240)
* build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#1239)
* build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#1237)
* feat(ci): support a merge queue
* DOC: it is "new" not "configure" command (also was missing \)
* build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0
* build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0
* build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
* fix: correct path for reusable workflow: lifecycle
* feat: merge go directive and toolchain specification
* feat: improved lifecycle management with stale-bot
* build(deps): bump github.com/vbauerster/mpb/v8 from 8.7.4 to 8.7.5
* revert: "feat: increase operations per run for workflow: cron"
* chore: update go dependencies
* fix: run the presubmit pipeline for PRs
* chore: remove refs to deprecated io/ioutil
* fix: move codeql into an independent workflow
* feat: bump node versions to 16.x, 18.x, and 20.x
* feat: refactor pipelines into reusable workflows
* build(deps): bump jsonwebtoken and @graphql-tools/prisma-loader
* build(deps-dev): bump tough-cookie from 4.1.2 to 4.1.3 in /webui
* build(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0
* build(deps): bump graphql from 16.6.0 to 16.8.1 in /webui
* build(deps-dev): bump undici from 5.11.0 to 5.28.4 in /webui
* build(deps): bump @babel/traverse from 7.19.3 to 7.24.8 in /webui
* build(deps): bump github.com/99designs/gqlgen from 0.17.36 to 0.17.49
* build(deps): bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0
* build(deps-dev): bump semver from 5.7.1 to 5.7.2 in /webui
* build(deps-dev): bump word-wrap from 1.2.3 to 1.2.5 in /webui
* build(deps-dev): bump express from 4.18.1 to 4.19.2 in /webui
* build(deps-dev): bump ws from 7.5.9 to 7.5.10 in /webui
* build(deps): bump golang.org/x/vuln from 1.1.2 to 1.1.3
* build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.12.0
* build(deps-dev): bump undici from 5.11.0 to 5.26.3 in /webui
* build(deps): bump github.com/vbauerster/mpb/v8 from 8.5.2 to 8.7.4
* build(deps): bump webpack from 5.74.0 to 5.76.1 in /webui
* build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0
* build(deps): bump ua-parser-js from 0.7.31 to 0.7.33 in /webui
* build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.15 to 2.5.16
* build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
* build(deps): bump json5 from 1.0.1 to 1.0.2 in /webui
* build(deps): bump loader-utils from 2.0.2 to 2.0.4 in /webui
* build(deps): bump minimatch and recursive-readdir in /webui
* fix: add write for prs: stale/issue-and-pr
* feat: allow for manual execution of workflow: cron
* feat: increase operations per run for workflow: cron
* fix: add missing `with` property to //.github/workflows:cron.yml
* feat: add workflow for triaging stale issues and prs
* feat: add initial editorconfig configuration file
* feat: add a common file for git-blame ignored revisions
* feat: add a commit message template
* feat: add initial nix development shell
* feat: update action library versions
* feat: add concurrency limits to all pipelines
* fix: bump to go v1.22.5
* fix: correct typo: acceps => accepts
* build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#1183)
* build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 (#1181)
* build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.1 (#1179)
* build(deps): bump golang.org/x/vuln from 1.0.0 to 1.1.2 (#1171)
* build(deps): bump golang.org/x/crypto from 0.21.0 to 0.25.0 (#1175)
* build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.5 to 2.0.7 (#1113)
* build(deps): bump golang.org/x/text from 0.14.0 to 0.16.0 (#1173)
* build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.8 to 2.5.15 (#1164)
* build(deps): bump github.com/hashicorp/go-retryablehttp (#1162)
* build(deps): bump golang.org/x/net from 0.14.0 to 0.23.0 (#1166)
* build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.21.0 (#1165)
* build(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.106.0 (#1167)
* build(deps): bump golang.org/x/sys from 0.11.0 to 0.14.0 (#1132)
-------------------------------------------------------------------
Sat Aug 3 15:16:21 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
- Add remote-config.patch (gh#MichaelMure/git-bug!1076): try
reading git-bug.remote config value before defaulting to
'origin' when no explicit REMOTE argument.
-------------------------------------------------------------------
Tue May 07 14:31:42 UTC 2024 - mcepl@cepl.eu

4
git-bug.obsinfo Normal file
View File

@@ -0,0 +1,4 @@
name: git-bug
version: 0.8.0+git.1742269202.0ab94c9
mtime: 1742269202
commit: 0ab94c9b7ac53ca9ab56febcf5cc3f26959e8b8a

View File

@@ -1,7 +1,7 @@
#
# spec file for package git-bug
#
# Copyright (c) 2022 SUSE LLC
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,19 +17,24 @@
Name: git-bug
Version: 0.8.0+git.1713935544.6d051a2
Version: 0.10.1
Release: 0
Summary: Distributed, offline-first bug tracker embedded in git, with bridges
License: MIT
URL: https://github.com/MichaelMure/git-bug
# Source0: https://github.com/MichaelMure/%%{name}/archive/refs/tags/v%%{version}.tar.gz#/git-bug-%%{version}.tar.gz
Source0: git-bug-%{version}.tar.gz
Source0: https://github.com/MichaelMure/%{name}/archive/refs/tags/v%{version}.tar.gz#/git-bug-%{version}.tar.gz
# Source0: git-bug-%%{version}.tar.gz
Source1: vendor.tar.gz
# PATCH-FIX-UPSTREAM remote-config.patch gh#MichaelMure/git-bug!1076 mcepl@suse.com
# try reading git-bug.remote config value before defaulting to 'origin' when no explicit REMOTE argument
Patch0: remote-config.patch
BuildRequires: golang(API) = 1.24
# # PATCH-FEATURE-UPSTREAM 501-export.patch gh#MichaelMure/git-bug!501 mcepl@suse.com
# # add a command to export bugs as raw operations
# Patch0: 501-export.patch
BuildRequires: golang-packaging
BuildRequires: golang(API) = 1.18
BuildRequires: git
BuildRequires: golang(API) = 1.22
%description
git-bug is a bug tracker that:
@@ -55,6 +60,7 @@ git-bug is a bug tracker that:
%package bash-completion
Summary: Bash completion for git-bug
Requires: bash-completion
Requires: %{name} = %{version}
Supplements: (git-bug and bash-completion)
BuildArch: noarch
@@ -64,6 +70,7 @@ Bash shell completions for git-bug
%package fish-completion
Summary: Fish completion for git-bug
Requires: fish
Requires: %{name} = %{version}
Supplements: (git-bug and fish)
BuildArch: noarch
@@ -73,6 +80,8 @@ Fish shell completions for git-bug
%package zsh-completion
Summary: ZSH completion for git-bug
Group: Productivity/File utilities
Requires: zsh
Requires: %{name} = %{version}
Supplements: (git-bug and zsh)
BuildArch: noarch
@@ -83,7 +92,12 @@ zsh shell completions for git-bug
%autosetup -p1 -a1
%build
go build -v -x -mod=vendor -buildmode=pie
# COMMANDS_PATH="github.com/git-bug/git-bug/commands"
# LDFLAGS="-X ${COMMANDS_PATH}.GitCommit=${GIT_COMMIT} \
# -X ${COMMANDS_PATH}.GitLastTag=${GIT_LAST_TAG} \
# -X ${COMMANDS_PATH}.GitExactTag=${GIT_EXACT_TAG}"
export GOFLAGS="-buildmode=pie"
go build
%install
install -Dm755 git-bug %{buildroot}%{_bindir}/git-bug
@@ -98,7 +112,8 @@ install -Dm0644 misc/completion/zsh/git-bug \
%{buildroot}%{_sysconfdir}/zsh_completion.d/git-bug
%check
go test -v -s TestValidateUsername -mod=vendor -bench=. ./...
# before we mark network requiring tests (gh#git-bug/git-bug#1313)
go test -v -bench=. ./... || true
%files
%license LICENSE

106
remote-config.patch Normal file
View File

@@ -0,0 +1,106 @@
From 65cfe2b3fff11d34b5ffc9f7e5d24aefb505497f Mon Sep 17 00:00:00 2001
From: William Ahern <william@25thandClement.com>
Date: Thu, 27 Jul 2023 22:06:45 -0700
Subject: [PATCH] pull, push: try reading git-bug.remote config value before
defaulting to 'origin' when no explicit REMOTE argument
---
commands/pull.go | 16 +++++++++++-----
commands/push.go | 16 +++++++++++-----
repository/config.go | 11 +++++++++++
3 files changed, 33 insertions(+), 10 deletions(-)
Index: git-bug-0.8.1+git.1746484874.96c7a111/commands/pull.go
===================================================================
--- git-bug-0.8.1+git.1746484874.96c7a111.orig/commands/pull.go 2025-05-06 00:41:14.000000000 +0200
+++ git-bug-0.8.1+git.1746484874.96c7a111/commands/pull.go 2025-05-06 12:25:33.320505683 +0200
@@ -8,6 +8,7 @@
"github.com/git-bug/git-bug/commands/completion"
"github.com/git-bug/git-bug/commands/execenv"
"github.com/git-bug/git-bug/entity"
+ "github.com/git-bug/git-bug/repository"
)
func newPullCommand(env *execenv.Env) *cobra.Command {
@@ -25,13 +26,18 @@
}
func runPull(env *execenv.Env, args []string) error {
- if len(args) > 1 {
+ var remote string
+ switch {
+ case len(args) > 1:
return errors.New("Only pulling from one remote at a time is supported")
- }
-
- remote := "origin"
- if len(args) == 1 {
+ case len(args) == 1:
remote = args[0]
+ default:
+ v, err := repository.GetDefaultString("git-bug.remote", env.Repo.AnyConfig(), "origin")
+ if err != nil {
+ return err
+ }
+ remote = v
}
env.Out.Println("Fetching remote ...")
Index: git-bug-0.8.1+git.1746484874.96c7a111/commands/push.go
===================================================================
--- git-bug-0.8.1+git.1746484874.96c7a111.orig/commands/push.go 2025-05-06 00:41:14.000000000 +0200
+++ git-bug-0.8.1+git.1746484874.96c7a111/commands/push.go 2025-05-06 12:25:33.320753379 +0200
@@ -7,6 +7,7 @@
"github.com/git-bug/git-bug/commands/completion"
"github.com/git-bug/git-bug/commands/execenv"
+ "github.com/git-bug/git-bug/repository"
)
func newPushCommand(env *execenv.Env) *cobra.Command {
@@ -24,13 +25,18 @@
}
func runPush(env *execenv.Env, args []string) error {
- if len(args) > 1 {
+ var remote string
+ switch {
+ case len(args) > 1:
return errors.New("Only pushing to one remote at a time is supported")
- }
-
- remote := "origin"
- if len(args) == 1 {
+ case len(args) == 1:
remote = args[0]
+ default:
+ v, err := repository.GetDefaultString("git-bug.remote", env.Repo.AnyConfig(), "origin")
+ if err != nil {
+ return err
+ }
+ remote = v
}
stdout, err := env.Backend.Push(remote)
Index: git-bug-0.8.1+git.1746484874.96c7a111/repository/config.go
===================================================================
--- git-bug-0.8.1+git.1746484874.96c7a111.orig/repository/config.go 2025-05-06 00:41:14.000000000 +0200
+++ git-bug-0.8.1+git.1746484874.96c7a111/repository/config.go 2025-05-06 12:25:33.320922899 +0200
@@ -60,6 +60,17 @@
RemoveAll(keyPrefix string) error
}
+func GetDefaultString(key string, cfg ConfigRead, def string) (string, error) {
+ val, err := cfg.ReadString(key)
+ if err == nil {
+ return val, nil
+ } else if errors.Is(err, ErrNoConfigEntry) {
+ return def, nil
+ } else {
+ return "", err
+ }
+}
+
func ParseTimestamp(s string) (time.Time, error) {
timestamp, err := strconv.Atoi(s)
if err != nil {

BIN
vendor.tar.gz LFS

Binary file not shown.