diff --git a/_service b/_service
index 84ab037..9fe43ab 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
https://github.com/chainguard-dev/melange
git
.git
- v0.2.0
+ v0.3.2
@PARENT_TAG@
enable
v(.*)
@@ -17,6 +17,5 @@
gz
- melange-0.2.0.obscpio
diff --git a/_servicedata b/_servicedata
index 14865aa..24fba4e 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
https://github.com/chainguard-dev/melange
- 160cd0d490644f71d59920fc65b827516959bb33
\ No newline at end of file
+ 4ed1d07ef6955379e936cf237f8dfec382454f47
\ No newline at end of file
diff --git a/melange-0.2.0.obscpio b/melange-0.2.0.obscpio
deleted file mode 100644
index f18ca7f..0000000
--- a/melange-0.2.0.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4bef40f6a139cd77d9a525476b6ebdefd213575edfa60bdd4636f4e98d494c83
-size 344587
diff --git a/melange-0.3.2.obscpio b/melange-0.3.2.obscpio
new file mode 100644
index 0000000..2210c73
--- /dev/null
+++ b/melange-0.3.2.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b4326653ccfc8d995b1e72b0ba6d88183f54c558f1c7284602bc66e16f3c8adb
+size 2993676
diff --git a/melange.changes b/melange.changes
index 49e2a80..1da1f4a 100644
--- a/melange.changes
+++ b/melange.changes
@@ -1,3 +1,230 @@
+-------------------------------------------------------------------
+Mon Apr 03 12:43:01 UTC 2023 - kastl@b1-systems.de
+
+- Update to version 0.3.2:
+ * Fix goreleaser cosign flags, add NEWS for melange 0.3.2
+ * add NEWS for melange 0.3.1
+ * package: allow any library which has a SONAME to be a provider
+ * Add darwin goreleaser target (macOS)
+ * update NEWS for melange 0.3.0.
+ * update to apko 0.7.3 release
+ * pipelines: fetch: use wget quiet mode
+ * build: check for signing key existence before using it
+ * build: package: do not add interpreter dependency when
+ no-depends option is enabled
+ * docs: fix baseurl for melange reference in generated docs
+ * directly parse configuration for query
+ * add query and package-version commands
+ * build: use realpath to determine cache dir bindmount source
+ * refresh docs for --cache-source
+ * cli: add --cache-source option
+ * build: use CacheSource to define the bucket to pull cached
+ sources from
+ * build: change default cache directory to ./melange-cache
+ * build: add CacheSource option to context
+ * Hookup user and accounts in the environment.
+ * build(deps): bump cloud.google.com/go/storage from 1.30.0 to
+ 1.30.1
+ * build(deps): bump google.golang.org/api from 0.113.0 to 0.114.0
+ * build(deps): bump actions/checkout from 3.3.0 to 3.5.0
+ * refresh docs
+ * cli: build: add --debug flag
+ * build: pipeline: if Context.Debug is enabled, add set -x to all
+ pipelines
+ * build: add Debug option to Context
+ * build: use cond.Subst instead of replacers
+ * cond: subst: variable names can have dashes
+ * cond: subst: add goparsify-based variable substitution
+ implementation
+ * cond: parser: test: add variable lookup with whitespace test
+ * parser: use newer fork of goparsify
+ * add codeowners
+ * add Update struct for identifying how a melange package can be
+ updated
+ * add `var-transforms` for manipulation of variables using
+ regular expressions
+ * pipelines: git-checkout: use tempdir for doing the initial
+ clone
+ * pipelines: git-checkout: mark clone directory as a safe
+ directory for git
+ * update ruby pipelines with usability features
+ * add an optional flag to generate a packages.log containing list
+ of packages + subpackages that were actuall built by `melange
+ build`
+ * Try to fix a strange index generation bug.
+ * build(deps): bump actions/setup-go from 3.5.0 to 4.0.0
+ * container: fixes to handle /sbin/ldconfig not being present,
+ e.g. on musl
+ * container: run ldconfig when bringing up a build environment
+ * update to latest apko git
+ * build(deps): bump google.golang.org/api from 0.111.0 to 0.113.0
+ * build(deps): bump cloud.google.com/go/storage from 1.29.0 to
+ 1.30.0
+ * update apko to latest git
+ * pipeline: only run mkdir -p if absolutely needed
+ * build(deps): bump github.com/go-git/go-git/v5 from 5.6.0 to
+ 5.6.1
+ * update docs
+ * run go mod tidy
+ * pkg: convert: fix tests to use upstream ImageContents type
+ * build: package: use internal readlinkFS, old apko fs package
+ was deprecated
+ * build: add minimal internal readlinkfs implementation
+ * convert: use upstream ImageContents type, added in apko 0.7.0
+ * build: use normal os.DirFS for filesystem walking
+ * upgrade to apko 0.7.2 git
+ * build: remove --use-proot option
+ * lint
+ * move convert related packages under convert as subpackages
+ * container: bubblewrap runner: use --new-session to mitigate
+ CVE-2017-5226
+ * autoconf: always define the GNU host and build triplets in
+ configure step
+ * update docs
+ * add more context for the experimental commands
+ * add shell completion and move common flags to top level
+ * move wolfios to its own package
+ * add same convert options to higher leve
+ * fix lint and tests
+ * fix tests
+ * add convert subcommand
+ * docs: ensure docs are up to date in CI
+ * add melange docs
+ * change --out-dir to not depend on cwd
+ * accept dependabot's GPG key for commit signing CI check
+ * package: only use base soname when generating runtime
+ dependencies across symlinks
+ * build(deps): bump github.com/stretchr/testify from 1.8.1 to
+ 1.8.2
+ * add omitempty to some fields
+ * build(deps): bump google.golang.org/api from 0.110.0 to 0.111.0
+ * build(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to
+ 5.6.0
+ * build(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1
+ * remove self-provided dependencies from the runtime dependency
+ set
+ * build(deps): bump github.com/openvex/go-vex
+ * build: package: dereference symlinks across packages and read
+ the real DT_SONAME instead of guessing
+ * build: configuration: add support for variable substitution in
+ more places
+ * apply refactoring suggestions from go linter
+ * build: also apply if-conditionals when generating the package
+ index
+ * build: also apply subpkg if-conditionals when emitting packages
+ and SBOMs
+ * examples: add example outlining the new option-related features
+ * build: implement if-conditionals for subpackages
+ * build: pipeline: add option enabled variables
+ * build: build option: patch the variables and environment
+ configuration
+ * build: use BuildOption.Apply to apply configuration patches
+ from build options
+ * build: build_option: add Apply stub
+ * cli: build: add --build-option to configure the enabled build
+ options
+ * build: add WithEnabledBuildOptions context option
+ * build: add BuildOptions map to Configuration
+ * build: add BuildOption types
+ * package: ensure we are operating only on a basename when
+ generating symlink deps
+ * package: detect shared library dependencies for .so symlinks
+ * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
+ * build(deps): bump google.golang.org/api from 0.109.0 to 0.110.0
+ * Add ruby pipelines for gem install, build and clean
+ * build: package: add support for defining "replaces"
+ relationships
+ * package: findInterpreter: chop trailing nul from interpBuf
+ * package: deal with musl interpreter being a symlink back to
+ itself
+ * package: ensure PT_INTERP is always added as an explicit
+ dependency
+ * build(deps): bump github.com/docker/docker
+ * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1
+ * build(deps): bump google.golang.org/api from 0.108.0 to 0.109.0
+ * build(deps): bump github.com/docker/docker
+ * git-checkout: fix tags
+ * use merge option to speed up apkindex generation when build
+ * just warn if no branch or tag specified
+ * build(deps): bump goreleaser/goreleaser-action from 4.1.0 to
+ 4.2.0
+ * build(deps): bump github.com/google/go-containerregistry
+ * Revert "Generate build environment SBOM"
+ * add expected-commit to git-checkout
+ * Update README to mention wolfi.
+ * cli: add --vars-file option to support loading build variables
+ from an external source
+ * build: add WithVarsFile and WithVarsFileForParsing options
+ * examples: add variable substitution example
+ * pipeline: handle ${{vars}} block as expected
+ * build: add variables block to build configuration struct
+ * build(deps): bump cloud.google.com/go/storage from 1.28.1 to
+ 1.29.0
+ * examples: add working-directory example
+ * pipeline: ensure the working-directory is created before using
+ it
+ * pipeline: propagate WorkDir to subpipelines
+ * pipeline: set working directory when evaluating pipeline "runs"
+ entries
+ * build: add Pipeline.WorkDir definition
+ * build(deps): bump google.golang.org/api from 0.107.0 to 0.108.0
+ * build(deps): bump github.com/docker/docker
+ * build(deps): bump golangci/golangci-lint-action from 3.3.1 to
+ 3.4.0
+ * go mod tidy to drop chainguard/vex
+ * Switch VEX dependency to openvex
+ * allow provider priority to be configured
+ * build(deps): bump google.golang.org/api from 0.106.0 to 0.107.0
+ * Wire logger from SBOM generator to impl
+ * Escape invalid identifier chars
+ * Fix build sbom name in subpackages
+ * Fix bug where package verification was wrong
+ * build sbom: Add relationships to produced SBOMs
+ * Update protobom to support dl location
+ * Build SBOM: Generate package with apks
+ * Trigger build SBOM generation, reuse write
+ * Passs guest directory to sbom spec
+ * Refactor SBOM spec for reuse
+ * Add ReadPackageIndex to gen implementation
+ * Add GenerateBuildEnvSBOM fn to SBOM generator
+ * Update Lima link
+ * update apko dependency to latest
+ * bump apko dependency
+ * pipelines: autoconf/configure: fix sysconfdir
+ * upgrade apko dependency to latest git
+ * build(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to
+ 5.5.2
+ * build(deps): bump google.golang.org/api from 0.105.0 to 0.106.0
+ * build(deps): bump actions/checkout from 3.2.0 to 3.3.0
+ * bump apko to latest git again for keyring fix
+ * fix typo
+ * index gen: Add loop throttle, mutex
+ * close lingering file descriptor
+ * sbom: handle spdxPkg.VerificationCode being a pointer in apko
+ git
+ * chase PublishImageFromLayer API change in apko
+ * update apko dependency to latest git for armv6/armv7 triplet
+ fixes
+ * go/install: also require git (#239)
+ * use lima to use melange on mac
+ * Advisories: Require pkg version for fixed status (#237)
+ * Parallel processing of packages.
+ * Make packageurl-go import direct
+ * add --namespace option to build subcommand
+ * SBOM: Generate purls for built packages
+ * Add namespace and arch fields to SBOM spec
+ * Drop distro qualifier from purls
+ * Add Go pipelines documentation
+ * Revamp go examples to use both pipleines
+ * New go/install pipeline
+ * go/build: Support changing module root
+ * Bump vex (#231)
+ * Remove extra field
+ * Add advisories and purls
+ * Export functionality for config parsing (#229)
+ * Apko devenv README
+ * Melange development environment
+
-------------------------------------------------------------------
Sun Mar 19 14:09:23 UTC 2023 - Johannes Kastl
diff --git a/melange.obsinfo b/melange.obsinfo
index 3ace13e..ef02132 100644
--- a/melange.obsinfo
+++ b/melange.obsinfo
@@ -1,4 +1,4 @@
name: melange
-version: 0.2.0
-mtime: 1671681712
-commit: 160cd0d490644f71d59920fc65b827516959bb33
+version: 0.3.2
+mtime: 1680282202
+commit: 4ed1d07ef6955379e936cf237f8dfec382454f47
diff --git a/melange.spec b/melange.spec
index 3e249a7..74b0c7b 100644
--- a/melange.spec
+++ b/melange.spec
@@ -19,7 +19,7 @@
%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
Name: melange
-Version: 0.2.0
+Version: 0.3.2
Release: 0
Summary: Build APKs from source code
License: Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index a948407..1953704 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
-oid sha256:c6fb7ab96f6e2d4ee71bc4a6df604172d3744158cd92b1ce4b1946bef401fad1
-size 7506979
+oid sha256:48c070fb74298a20cde0fc435795d78f8da9226fe1806eff01dd7f16ac1b5308
+size 7938263