diff --git a/_service b/_service index 84ab037..9fe43ab 100644 --- a/_service +++ b/_service @@ -3,7 +3,7 @@ https://github.com/chainguard-dev/melange git .git - v0.2.0 + v0.3.2 @PARENT_TAG@ enable v(.*) @@ -17,6 +17,5 @@ gz - melange-0.2.0.obscpio diff --git a/_servicedata b/_servicedata index 14865aa..24fba4e 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/chainguard-dev/melange - 160cd0d490644f71d59920fc65b827516959bb33 \ No newline at end of file + 4ed1d07ef6955379e936cf237f8dfec382454f47 \ No newline at end of file diff --git a/melange-0.2.0.obscpio b/melange-0.2.0.obscpio deleted file mode 100644 index f18ca7f..0000000 --- a/melange-0.2.0.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:4bef40f6a139cd77d9a525476b6ebdefd213575edfa60bdd4636f4e98d494c83 -size 344587 diff --git a/melange-0.3.2.obscpio b/melange-0.3.2.obscpio new file mode 100644 index 0000000..2210c73 --- /dev/null +++ b/melange-0.3.2.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b4326653ccfc8d995b1e72b0ba6d88183f54c558f1c7284602bc66e16f3c8adb +size 2993676 diff --git a/melange.changes b/melange.changes index 49e2a80..1da1f4a 100644 --- a/melange.changes +++ b/melange.changes @@ -1,3 +1,230 @@ +------------------------------------------------------------------- +Mon Apr 03 12:43:01 UTC 2023 - kastl@b1-systems.de + +- Update to version 0.3.2: + * Fix goreleaser cosign flags, add NEWS for melange 0.3.2 + * add NEWS for melange 0.3.1 + * package: allow any library which has a SONAME to be a provider + * Add darwin goreleaser target (macOS) + * update NEWS for melange 0.3.0. + * update to apko 0.7.3 release + * pipelines: fetch: use wget quiet mode + * build: check for signing key existence before using it + * build: package: do not add interpreter dependency when + no-depends option is enabled + * docs: fix baseurl for melange reference in generated docs + * directly parse configuration for query + * add query and package-version commands + * build: use realpath to determine cache dir bindmount source + * refresh docs for --cache-source + * cli: add --cache-source option + * build: use CacheSource to define the bucket to pull cached + sources from + * build: change default cache directory to ./melange-cache + * build: add CacheSource option to context + * Hookup user and accounts in the environment. + * build(deps): bump cloud.google.com/go/storage from 1.30.0 to + 1.30.1 + * build(deps): bump google.golang.org/api from 0.113.0 to 0.114.0 + * build(deps): bump actions/checkout from 3.3.0 to 3.5.0 + * refresh docs + * cli: build: add --debug flag + * build: pipeline: if Context.Debug is enabled, add set -x to all + pipelines + * build: add Debug option to Context + * build: use cond.Subst instead of replacers + * cond: subst: variable names can have dashes + * cond: subst: add goparsify-based variable substitution + implementation + * cond: parser: test: add variable lookup with whitespace test + * parser: use newer fork of goparsify + * add codeowners + * add Update struct for identifying how a melange package can be + updated + * add `var-transforms` for manipulation of variables using + regular expressions + * pipelines: git-checkout: use tempdir for doing the initial + clone + * pipelines: git-checkout: mark clone directory as a safe + directory for git + * update ruby pipelines with usability features + * add an optional flag to generate a packages.log containing list + of packages + subpackages that were actuall built by `melange + build` + * Try to fix a strange index generation bug. + * build(deps): bump actions/setup-go from 3.5.0 to 4.0.0 + * container: fixes to handle /sbin/ldconfig not being present, + e.g. on musl + * container: run ldconfig when bringing up a build environment + * update to latest apko git + * build(deps): bump google.golang.org/api from 0.111.0 to 0.113.0 + * build(deps): bump cloud.google.com/go/storage from 1.29.0 to + 1.30.0 + * update apko to latest git + * pipeline: only run mkdir -p if absolutely needed + * build(deps): bump github.com/go-git/go-git/v5 from 5.6.0 to + 5.6.1 + * update docs + * run go mod tidy + * pkg: convert: fix tests to use upstream ImageContents type + * build: package: use internal readlinkFS, old apko fs package + was deprecated + * build: add minimal internal readlinkfs implementation + * convert: use upstream ImageContents type, added in apko 0.7.0 + * build: use normal os.DirFS for filesystem walking + * upgrade to apko 0.7.2 git + * build: remove --use-proot option + * lint + * move convert related packages under convert as subpackages + * container: bubblewrap runner: use --new-session to mitigate + CVE-2017-5226 + * autoconf: always define the GNU host and build triplets in + configure step + * update docs + * add more context for the experimental commands + * add shell completion and move common flags to top level + * move wolfios to its own package + * add same convert options to higher leve + * fix lint and tests + * fix tests + * add convert subcommand + * docs: ensure docs are up to date in CI + * add melange docs + * change --out-dir to not depend on cwd + * accept dependabot's GPG key for commit signing CI check + * package: only use base soname when generating runtime + dependencies across symlinks + * build(deps): bump github.com/stretchr/testify from 1.8.1 to + 1.8.2 + * add omitempty to some fields + * build(deps): bump google.golang.org/api from 0.110.0 to 0.111.0 + * build(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to + 5.6.0 + * build(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 + * remove self-provided dependencies from the runtime dependency + set + * build(deps): bump github.com/openvex/go-vex + * build: package: dereference symlinks across packages and read + the real DT_SONAME instead of guessing + * build: configuration: add support for variable substitution in + more places + * apply refactoring suggestions from go linter + * build: also apply if-conditionals when generating the package + index + * build: also apply subpkg if-conditionals when emitting packages + and SBOMs + * examples: add example outlining the new option-related features + * build: implement if-conditionals for subpackages + * build: pipeline: add option enabled variables + * build: build option: patch the variables and environment + configuration + * build: use BuildOption.Apply to apply configuration patches + from build options + * build: build_option: add Apply stub + * cli: build: add --build-option to configure the enabled build + options + * build: add WithEnabledBuildOptions context option + * build: add BuildOptions map to Configuration + * build: add BuildOption types + * package: ensure we are operating only on a basename when + generating symlink deps + * package: detect shared library dependencies for .so symlinks + * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 + * build(deps): bump google.golang.org/api from 0.109.0 to 0.110.0 + * Add ruby pipelines for gem install, build and clean + * build: package: add support for defining "replaces" + relationships + * package: findInterpreter: chop trailing nul from interpBuf + * package: deal with musl interpreter being a symlink back to + itself + * package: ensure PT_INTERP is always added as an explicit + dependency + * build(deps): bump github.com/docker/docker + * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1 + * build(deps): bump google.golang.org/api from 0.108.0 to 0.109.0 + * build(deps): bump github.com/docker/docker + * git-checkout: fix tags + * use merge option to speed up apkindex generation when build + * just warn if no branch or tag specified + * build(deps): bump goreleaser/goreleaser-action from 4.1.0 to + 4.2.0 + * build(deps): bump github.com/google/go-containerregistry + * Revert "Generate build environment SBOM" + * add expected-commit to git-checkout + * Update README to mention wolfi. + * cli: add --vars-file option to support loading build variables + from an external source + * build: add WithVarsFile and WithVarsFileForParsing options + * examples: add variable substitution example + * pipeline: handle ${{vars}} block as expected + * build: add variables block to build configuration struct + * build(deps): bump cloud.google.com/go/storage from 1.28.1 to + 1.29.0 + * examples: add working-directory example + * pipeline: ensure the working-directory is created before using + it + * pipeline: propagate WorkDir to subpipelines + * pipeline: set working directory when evaluating pipeline "runs" + entries + * build: add Pipeline.WorkDir definition + * build(deps): bump google.golang.org/api from 0.107.0 to 0.108.0 + * build(deps): bump github.com/docker/docker + * build(deps): bump golangci/golangci-lint-action from 3.3.1 to + 3.4.0 + * go mod tidy to drop chainguard/vex + * Switch VEX dependency to openvex + * allow provider priority to be configured + * build(deps): bump google.golang.org/api from 0.106.0 to 0.107.0 + * Wire logger from SBOM generator to impl + * Escape invalid identifier chars + * Fix build sbom name in subpackages + * Fix bug where package verification was wrong + * build sbom: Add relationships to produced SBOMs + * Update protobom to support dl location + * Build SBOM: Generate package with apks + * Trigger build SBOM generation, reuse write + * Passs guest directory to sbom spec + * Refactor SBOM spec for reuse + * Add ReadPackageIndex to gen implementation + * Add GenerateBuildEnvSBOM fn to SBOM generator + * Update Lima link + * update apko dependency to latest + * bump apko dependency + * pipelines: autoconf/configure: fix sysconfdir + * upgrade apko dependency to latest git + * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to + 5.5.2 + * build(deps): bump google.golang.org/api from 0.105.0 to 0.106.0 + * build(deps): bump actions/checkout from 3.2.0 to 3.3.0 + * bump apko to latest git again for keyring fix + * fix typo + * index gen: Add loop throttle, mutex + * close lingering file descriptor + * sbom: handle spdxPkg.VerificationCode being a pointer in apko + git + * chase PublishImageFromLayer API change in apko + * update apko dependency to latest git for armv6/armv7 triplet + fixes + * go/install: also require git (#239) + * use lima to use melange on mac + * Advisories: Require pkg version for fixed status (#237) + * Parallel processing of packages. + * Make packageurl-go import direct + * add --namespace option to build subcommand + * SBOM: Generate purls for built packages + * Add namespace and arch fields to SBOM spec + * Drop distro qualifier from purls + * Add Go pipelines documentation + * Revamp go examples to use both pipleines + * New go/install pipeline + * go/build: Support changing module root + * Bump vex (#231) + * Remove extra field + * Add advisories and purls + * Export functionality for config parsing (#229) + * Apko devenv README + * Melange development environment + ------------------------------------------------------------------- Sun Mar 19 14:09:23 UTC 2023 - Johannes Kastl diff --git a/melange.obsinfo b/melange.obsinfo index 3ace13e..ef02132 100644 --- a/melange.obsinfo +++ b/melange.obsinfo @@ -1,4 +1,4 @@ name: melange -version: 0.2.0 -mtime: 1671681712 -commit: 160cd0d490644f71d59920fc65b827516959bb33 +version: 0.3.2 +mtime: 1680282202 +commit: 4ed1d07ef6955379e936cf237f8dfec382454f47 diff --git a/melange.spec b/melange.spec index 3e249a7..74b0c7b 100644 --- a/melange.spec +++ b/melange.spec @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: melange -Version: 0.2.0 +Version: 0.3.2 Release: 0 Summary: Build APKs from source code License: Apache-2.0 diff --git a/vendor.tar.gz b/vendor.tar.gz index a948407..1953704 100644 --- a/vendor.tar.gz +++ b/vendor.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:c6fb7ab96f6e2d4ee71bc4a6df604172d3744158cd92b1ce4b1946bef401fad1 -size 7506979 +oid sha256:48c070fb74298a20cde0fc435795d78f8da9226fe1806eff01dd7f16ac1b5308 +size 7938263