Accepting request 1230279 from devel:tools:building

OBS-URL: https://build.opensuse.org/request/show/1230279
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/melange?expand=0&rev=53

_service

@@ -3,19 +3,20 @@
     <param name="url">https://github.com/chainguard-dev/melange</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.11.1</param>
+    <param name="revision">v0.17.7</param>
     <param name="versionformat">@PARENT_TAG@</param>
-    <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
+    <param name="changesgenerate">enable</param>
   </service>
   <service name="set_version" mode="manual">
-    <param name="basename">melange</param>
   </service>
-  <service name="tar" mode="buildtime"/>
+  <service name="go_modules" mode="manual">
+  </service>
+  <!-- services below are running at buildtime -->
+  <service name="tar" mode="buildtime">
+  </service>
   <service name="recompress" mode="buildtime">
     <param name="file">*.tar</param>
     <param name="compression">gz</param>
   </service>
-  <service name="go_modules" mode="manual">
-  </service>
 </services>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/chainguard-dev/melange</param>
-              <param name="changesrevision">a52edcc075ebf1dc89aea87893e3821944171ee3</param></service></servicedata>
+              <param name="changesrevision">fa53d5238c6594fdf7efc39beb1cead386ae3411</param></service></servicedata>

melange-0.11.0.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:db3ba13986bbbc13f3725d12303710848fab74cb0149c50585470fa5072e3ef8
-size 4486668

melange-0.11.1.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:aadf06a4fb142a2a9f89966a94404c5cd7996967cf9a4ee0a2a9bb8956647340
-size 4489228

melange-0.17.7.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fd1910ea3b95df008a219be0db3e9d79e286c56cbebe92fad9f9fb4985084467
+size 5411853

melange.changes

@@ -1,3 +1,607 @@
+-------------------------------------------------------------------
+Thu Dec 12 05:56:35 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.7:
+  * Bump apko and fix the thing I broke
+  * Handle WalkDir errors
+  * build(deps): bump dagger.io/dagger from 0.14.0 to 0.15.0
+
+-------------------------------------------------------------------
+Thu Dec 12 05:55:01 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.6:
+  * Bump apko to v0.20.2
+
+-------------------------------------------------------------------
+Thu Dec 12 05:53:56 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.5:
+  * drop spammy slog attributes
+  * build(deps): bump cloud.google.com/go/storage from 1.47.0 to
+    1.48.0
+
+-------------------------------------------------------------------
+Tue Dec 10 08:48:22 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.4:
+  * build(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0
+  * build(deps): bump github.com/chainguard-dev/clog
+  * build(deps): bump github.com/chainguard-dev/yam in the gomod
+    group
+  * melange/update block: provide config option to indicate that
+    automated pull requests should be merged in order rather than
+    superseding and closing previous unmerged PRs
+
+-------------------------------------------------------------------
+Sun Dec 08 09:04:12 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.3:
+  * fix(sca): Revert recent SCA changes for Ruby
+
+-------------------------------------------------------------------
+Sun Dec 08 08:48:12 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.2:
+  * fix(qemu): fix MacOS crosscompile path (#1678)
+  * fix(sca): Don't generate ruby dep when found in shebang
+  * fix(sca_test): Check for ruby-base
+  * fix(sca): Generate dependency for ruby-*-base instead of ruby-*
+  * Improve comment stripping errors
+  * Add package.srcdir substitution to README
+
+-------------------------------------------------------------------
+Mon Dec 02 10:02:15 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.1:
+  * test(compile): basic tests for stripComments
+  * fix(compile): label when compile error is for test pipeline
+
+-------------------------------------------------------------------
+Fri Nov 29 12:16:20 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.0:
+  * feat: add project.srcdir variable (#1666)
+
+-------------------------------------------------------------------
+Wed Nov 27 09:43:18 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.16.0:
+  * Include locked melange config in control section
+  * build(deps): bump github.com/stretchr/testify from 1.9.0 to
+    1.10.0
+  * build(deps): bump the gomod group with 2 updates
+  * build(deps): bump step-security/harden-runner in the actions
+    group
+
+-------------------------------------------------------------------
+Tue Nov 26 13:50:47 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.14:
+  * fix(pipeline): validate expected commit before passing to
+    git-checkout pipeline (#1667)
+  * Add git version to Summarize output
+  * RELEASE.md update, add statement that tags and releases will
+    update
+
+-------------------------------------------------------------------
+Fri Nov 22 19:27:01 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.13:
+  * Consider symlinks as potential provides for so:
+  * drop ntia e2e test
+
+-------------------------------------------------------------------
+Wed Nov 20 09:22:47 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.12:
+  * pipelines/cargo: ability to override output-dir
+  * fix(pipeline): check also checksum length
+  * fix(pipeline): do preliminary checks for checksum invalid chars
+  * docs: re-add release documentation markdown file
+  * hack: remove release.md
+  * docs: update automatic release interval
+  * add a dependency on texinfo or man-db as appropriate
+
+-------------------------------------------------------------------
+Tue Nov 19 08:38:41 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.11:
+  * build(deps): bump cloud.google.com/go/storage from 1.46.0 to
+    1.47.0
+
+-------------------------------------------------------------------
+Tue Nov 19 08:35:58 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.10:
+  * release: check for both tag and release
+
+-------------------------------------------------------------------
+Tue Nov 19 08:31:33 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.9:
+  * change release frequency to weekly
+  * review feedback
+  * docs(release): update release.md based on new workflow design
+  * fix(releases): more reliable releases
+  * Bump apko to v0.20.0
+  * Clean up workspace dir from inside runner to avoid permission
+    errors. (#1648)
+
+-------------------------------------------------------------------
+Fri Nov 15 07:06:41 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.8:
+  * Create sub-package directories in WorkDir before building
+    subpackage
+
+-------------------------------------------------------------------
+Thu Nov 14 10:13:58 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.7:
+  * build(deps): bump golang.org/x/text from 0.19.0 to 0.20.0
+
+-------------------------------------------------------------------
+Wed Nov 13 10:02:12 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.6:
+  * build(deps): bump golang.org/x/time from 0.7.0 to 0.8.0
+  * build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0
+  * Give a pointer to solution if bubblewrap runner cannot use user
+    namespace.
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
+  * build(deps): bump dagger.io/dagger from 0.13.7 to 0.14.0
+
+-------------------------------------------------------------------
+Tue Nov 12 10:04:04 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.5:
+  * anotha one
+  * qemu: reduce logspam for qemu runner
+  * build(deps): bump google.golang.org/api from 0.204.0 to 0.205.0
+  * build(deps): bump go.opentelemetry.io/otel from 1.31.0 to
+    1.32.0
+  * build(deps): bump chainguard.dev/apko in the gomod group
+  * build(deps): bump goreleaser/goreleaser-action in the actions
+    group
+  * cleanup: remove unnecessary utils
+  * chore(pipelines/fetch): Print expected and found checksums
+
+-------------------------------------------------------------------
+Tue Nov 12 09:51:27 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.4:
+  * fix(qemu): use proper machine type and cpu model based on host
+    arch (#1627)
+  * Switch the copy to pick up hidden files. (#1624)
+
+-------------------------------------------------------------------
+Tue Nov 12 09:45:23 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.3:
+  * Add man-db for doc packages
+
+-------------------------------------------------------------------
+Tue Nov 12 09:42:56 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.2:
+  * check ReplacesPriority if it is an integer
+
+-------------------------------------------------------------------
+Tue Nov 12 09:39:32 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.1:
+  * build(deps): bump the gomod group with 2 updates
+  * build(deps): bump google.golang.org/api from 0.203.0 to 0.204.0
+  * build(deps): bump cloud.google.com/go/storage from 1.45.0 to
+    1.46.0
+
+-------------------------------------------------------------------
+Sat Nov 02 08:22:10 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.0:
+  * feat(qemu): fix qemu command on cross-compilation cases
+  * update docs
+  * feat(qemu): add flag to specify cpu model to use, useful for
+    cases where /dev/kvm is not available
+  * fix(qemu): remove ssh ignoreHostKey, set an host-key retrieval
+    step, then use host key verification for all successive
+    commands
+  * fix linting
+  * fix(qemu): improve error when not finding a suitable kernel
+    image
+  * fix(qemu): use net.Listen to find open port, simplify random
+    port logic
+  * fix(qemu): use package go-shellquote and simplify cmd handling
+  * fix(qemu): use package go-shellquote and simplify cmd handling
+  * fix(qemu): specify KVM accelleration on linux, use only if
+    /dev/kvm is present
+  * fix(qemu): fix typos
+
+-------------------------------------------------------------------
+Tue Oct 29 15:08:52 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.11:
+  * build(deps): bump github.com/chainguard-dev/yam in the gomod
+    group
+  * build(deps): bump the actions group with 2 updates
+
+-------------------------------------------------------------------
+Sat Oct 26 08:39:55 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.10:
+  * build(deps): bump the gomod group across 1 directory with 2
+    updates
+
+-------------------------------------------------------------------
+Fri Oct 25 12:22:11 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.9:
+  * chore: unexport build pkg methods
+  * bump apko to get http key support
+  * go mod tidy
+  * bump apko to pick up chainguard key fix
+
+-------------------------------------------------------------------
+Thu Oct 24 08:27:07 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.8:
+  * fix(bubblewrap_runner): run as build 1000 by default (#1572)
+  * use --target-dir to target with cargo build
+  * pass --release as default opts
+  * allow passing more than one opts to cargo build
+
+-------------------------------------------------------------------
+Wed Oct 23 16:42:33 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.7:
+  * fix breakage
+  * go mod tidy
+  * bump apko dep to fix modtime issue
+
+-------------------------------------------------------------------
+Wed Oct 23 16:28:25 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.6:
+  * fix(build): require build config repo URL
+  * add build base to cargo-build pipeline
+
+-------------------------------------------------------------------
+Wed Oct 23 09:27:57 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.5 (0.14.4 was not properly released):
+  * fix(sbom): unique package IDs for upstream source
+  * test: (tdd) add failing test for dup spdx IDs
+
+-------------------------------------------------------------------
+Wed Oct 23 09:17:45 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.3:
+  * fix(build): use fallback values at entrypoint for git info
+  * fix(build): use the config file dir path for git detection
+
+-------------------------------------------------------------------
+Wed Oct 23 09:13:43 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.2:
+  * ci: add workflow to tag releases daily
+
+-------------------------------------------------------------------
+Wed Oct 23 09:08:38 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.1:
+  * Do not specify versions during 'melange test' (Revert #1579 and
+    #1518)
+
+-------------------------------------------------------------------
+Wed Oct 23 08:56:22 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.0:
+  * fix(build): make git autodetection best effort
+  * test: use x86_64 for build int tests
+  * move sbom test inside build test
+  * test(build): favor bwrap, fallback to docker
+  * chore: dedup test targets in makefile
+  * docs: run make docs-repo
+  * try qemu runner
+  * test: remove e2e tests for SBOM external refs
+  * unique SPDX IDs for multiple git repo checkouts
+  * chore: add make target for integration tests
+  * test: add integration test for build and SBOMs
+  * chore: bump Go version
+  * feat(sbom): overhaul SBOM generation logic
+
+-------------------------------------------------------------------
+Wed Oct 23 08:47:47 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.7:
+  * Pin the package version with ~ rather than =.
+  * build(deps): bump google.golang.org/api from 0.200.0 to 0.201.0
+  * build(deps): bump cloud.google.com/go/storage from 1.44.0 to
+    1.45.0
+  * bublewrap_runner: add /sys mount
+  * fix lint finding
+  * pipe it through cli
+  * cleanup glow up
+  * fix(qemu): fix missing pty allocation for debug shell in qemu
+    runners
+  * Do not add a cmd:awk dependency as nothing will ever provide
+    cmd:awk
+  * fix formatting lint
+  * fix(test): update tests to reflect new struct
+  * fix(qemu): fix failing test pipeline when using qemu runner
+  * fix test
+  * Pin the package version used during tests
+
+-------------------------------------------------------------------
+Wed Oct 16 07:52:03 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.6:
+  * run `make generate`
+  * rename exported GetTagFilterPrefix and GetTagFilterContains
+    functions to be normalized GetFilterPrefix and GetFilterPrefix
+  * update config: add version filter prefix and contains to
+    release monitor config block so implementations can perform the
+    same behaviour as git and github configs
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
+  * build(deps): bump google.golang.org/api from 0.199.0 to 0.200.0
+  * build(deps): bump the actions group with 2 updates
+  * build(deps): bump go.opentelemetry.io/otel/sdk from 1.30.0 to
+    1.31.0
+  * build(deps): bump the gomod group with 4 updates
+  * pipelines: fix split/debug
+
+-------------------------------------------------------------------
+Sun Oct 13 18:08:10 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.5:
+  * Enable pc file dependencies
+  * generateRuntimePkgConfigDeps: only do so for public .pc, not
+    vendored
+  * Improve some config parsing errors
+
+-------------------------------------------------------------------
+Fri Oct 11 09:25:44 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.4:
+  * Revert "sca: Properly detect .so files as deps"
+  * Revert "sca: check if runtime dependencies are vendored"
+
+-------------------------------------------------------------------
+Fri Oct 11 09:19:23 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.3:
+  * cmake: switch from MinSizeRel to Release
+
+-------------------------------------------------------------------
+Fri Oct 11 09:13:44 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.2:
+  * fix: pc provides
+  * build(deps): bump golang.org/x/time from 0.6.0 to 0.7.0
+
+-------------------------------------------------------------------
+Fri Oct 11 09:11:28 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.1:
+  * tidy
+  * build(deps): bump cloud.google.com/go/storage from 1.43.0 to
+    1.44.0
+  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
+  * build(deps): bump github.com/chainguard-dev/yam in the gomod
+    group
+  * build(deps): bump the actions group with 2 updates
+  * sca: check if runtime dependencies are vendored
+
+-------------------------------------------------------------------
+Sun Oct 06 08:01:56 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.0:
+  * Fix typo in README
+  * test: Fix typo
+  * Added additional documentation for package version selection
+  * sca: Properly detect .so files as deps
+  * Adjust an e2e-test that made a bad assumption.
+  * update the docs
+  * add --cleanup flag (default true)
+  * build(deps): bump github.com/chainguard-dev/yam from 0.1.1 to
+    0.2.0
+  * build(deps): bump google.golang.org/api from 0.198.0 to 0.199.0
+  * build(deps): bump actions/checkout in the actions group
+  * Support string replacement in ImageContents
+  * build(deps): bump the gomod group with 5 updates
+  * git-checkout: support scheduled updates
+  * sca: never emit libcuda.so.1 runtime dep
+  * Add table of contents
+  * Add pipeline markdown reference markdown generator.
+  * feat(melange): Add sub for output directory
+
+-------------------------------------------------------------------
+Sat Sep 21 16:30:34 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.12.1:
+  * build(deps): bump github.com/docker/cli
+  * build(deps): bump github.com/docker/docker
+  * build(deps): bump the gomod group with 2 updates
+  * build(deps): bump chainguard.dev/apko from 0.18.1 to 0.19.1
+  * sca: remove set but never used variable
+  * update_config: expose function to get valid schedule messages
+  * Add uses and name to slog values
+  * Include subpackage name in slog values
+  * Only read the first line for shbang.
+  * pombump: add flag to display the dependency tree
+  * build(deps): bump dagger.io/dagger from 0.12.7 to 0.13.0
+  * build(deps): bump step-security/harden-runner in the actions
+    group
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
+  * build(deps): bump the gomod group with 2 updates
+  * keygen: reject bit size < 4096
+  * cleanup: remove some direct imports of charm log
+
+-------------------------------------------------------------------
+Sat Sep 14 15:42:45 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.12.0:
+  * Upgrade to new hash-agnostic APIs for sign and verify
+  * Upgrade to apko v0.18.0
+  * index: stop writing APKINDEX.json
+  * update to go1.23.1
+  * build(deps): bump google.golang.org/api from 0.195.0 to 0.196.0
+  * build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
+  * build(deps): bump the gomod group with 2 updates
+  * pipelines/ruby: remove signing_key by default
+  * config: Whack more moles for string replacement
+  * install go
+  * lint
+  * upgrade to golang 1.23
+
+-------------------------------------------------------------------
+Sat Sep 14 15:36:42 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.11.6:
+  * adds git checkout fetch,update,test and yams the melange
+    apkbuild yamls
+
+-------------------------------------------------------------------
+Sat Sep 14 15:33:26 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.11.5:
+  * fix(split pipelines): Don't split lib64 libraries
+
+-------------------------------------------------------------------
+Sat Sep 14 15:27:45 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.11.4:
+  * fix(split pipelines): Check package was defined, not package
+    directory
+  * fix(split/dev): Support for /usr/local
+  * fix(split pipelines): Add support for lib64
+  * fix(split pipelines): Use package name instead of package dir,
+    use exact paths
+  * Update dev.yaml
+  * feat(pipelines/split): Support overriding source package
+    directory
+  * build(deps): bump dagger.io/dagger in the gomod group
+  * build(deps): bump actions/upload-artifact in the actions group
+
+-------------------------------------------------------------------
+Sat Sep 14 15:18:12 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.11.3:
+  (0.11.2 is the same commit hash as 0.11.1):
+  * fix(sca): Correctly check for existing Ruby runtime dependency
+    by @EyeCantCU in #1387
+  * build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 in the
+    actions group by @dependabot in #1378
+  * build(deps): bump google.golang.org/api from 0.187.0 to 0.188.0
+    by @dependabot in #1382
+  * build(deps): bump github.com/google/go-containerregistry from
+    0.19.2 to 0.20.1 by @dependabot in #1392
+  * build(deps): bump step-security/harden-runner from 2.8.1 to
+    2.9.0 in the actions group by @dependabot in #1391
+  * build(deps): bump the gomod group across 1 directory with 2
+    updates by @dependabot in #1390
+  * build(deps): bump dagger.io/dagger from 0.11.9 to 0.12.1 by
+    @dependabot in #1389
+  * build(deps): bump github.com/docker/cli from
+    27.0.3+incompatible to 27.1.0+incompatible by @dependabot in
+    #1397
+  * Expose ignoreSignatures functionality by @Kevin-Molina in #1375
+  * build(deps): bump github.com/docker/docker from
+    27.0.3+incompatible to 27.1.0+incompatible by @dependabot in
+    #1396
+  * build(deps): bump docker/login-action from 3.2.0 to 3.3.0 in
+    the actions group by @dependabot in #1398
+  * build(deps): bump google.golang.org/api from 0.188.0 to 0.189.0
+    by @dependabot in #1401
+  * fix: ignore resource requests for the docker runner by
+    @imjasonh in #1403
+  * build(deps): bump dagger.io/dagger from 0.12.1 to 0.12.2 in the
+    gomod group by @dependabot in #1400
+  * Bump apko dependency by @mattmoor in #1404
+  * fix ruby sca by @xnox in #1410
+  * Add HOME=/root to default test environment. by @smoser in #1408
+  * build(deps): bump the gomod group with 4 updates by @dependabot
+    in #1405
+  * update config: provide configuration to describe polling and
+    schedules by @rawlingsj in #1412
+  * build(deps): bump the gomod group with 2 updates by @dependabot
+    in #1416
+  * build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0
+    by @dependabot in #1419
+  * build(deps): bump the actions group with 2 updates by
+    @dependabot in #1415
+  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 by
+    @dependabot in #1418
+  * build(deps): bump golang.org/x/time from 0.5.0 to 0.6.0 by
+    @dependabot in #1417
+  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0 by
+    @dependabot in #1420
+  * update config: replace recently added polling with git struct
+    by @rawlingsj in #1421
+  * build(deps): bump github.com/google/go-containerregistry from
+    0.20.1 to 0.20.2 in the gomod group by @dependabot in #1423
+  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 by
+    @dependabot in #1424
+  * build(deps): bump google.golang.org/api from 0.190.0 to 0.191.0
+    by @dependabot in #1426
+  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 by
+    @dependabot in #1428
+  * move 'adding package %q for pipeline %q' to debug logging by
+    @imjasonh in #1429
+  * don't depend on apko's custom log package by @imjasonh in #1430
+  * build(deps): bump github.com/chainguard-dev/yam from 0.0.13 to
+    0.1.0 by @dependabot in #1431
+  * Feat/qemu runners by @89luca89 in #1386
+  * Attempt to fix qemu ci by @jonjohnsonjr in #1434
+  * build(deps): bump the actions group with 3 updates by
+    @dependabot in #1432
+  * Centralize sca options handling by @jonjohnsonjr in #1433
+  * Add test to catch duplicate package names by @jonjohnsonjr in
+    #1439
+  * build(deps): bump the gomod group with 4 updates by @dependabot
+    in #1437
+  * build(deps): bump google.golang.org/api from 0.191.0 to 0.192.0
+    by @dependabot in #1438
+  * move 'found pipeline' log message to debug by @imjasonh in
+    #1440
+  * melange convert python: use normalized names by @pnasrat in
+    #1441
+  * Bump apko to get chainctl auth error log by @jonjohnsonjr in
+    #1442
+  * Replace "needs" in range pipelines by @jonjohnsonjr in #1445
+  * docs: Add information on the repository used with the git
+    update configuration option by @philroche in #1447
+  * Refactor parts of the ParseConfiguration by @jonjohnsonjr in
+    #1446
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace from
+    1.28.0 to 1.29.0 by @dependabot in #1455
+  * build(deps): bump google.golang.org/api from 0.192.0 to 0.194.0
+    by @dependabot in #1452
+  * config: Replace pipelines at top level by @jonjohnsonjr in
+    #1456
+  * refactor(sbom): cleanup, simplify, and document code by
+    @luhring in #1458
+  * More SBOM logic improvements by @luhring in #1459
+  * build(deps): bump github.com/docker/cli from
+    27.1.2+incompatible to 27.2.0+incompatible by @dependabot in
+    #1461
+  * build(deps): bump google.golang.org/api from 0.194.0 to 0.195.0
+    by @dependabot in #1463
+  * build(deps): bump github.com/docker/docker from
+    27.1.2+incompatible to 27.2.0+incompatible by @dependabot in
+    #1462
+  * build(deps): bump dagger.io/dagger from 0.12.5 to 0.12.6 in the
+    gomod group by @dependabot in #1465
+  * chore(cargo/build): Allow changing install dir, add busybox by
+    @EyeCantCU in #1466
+  * sca: add support for more go fips toolchains by @xnox in #1471
+  * sca: make pc: provides/vendored use full package version by
+    @xnox in #1467
+
 -------------------------------------------------------------------
 Fri Jul 19 05:38:35 UTC 2024 - opensuse_buildservice@ojkastl.de
 

melange.obsinfo

@@ -1,4 +1,4 @@
 name: melange
-version: 0.11.1
+version: 0.17.7
-mtime: 1721353354
+mtime: 1733978926
-commit: a52edcc075ebf1dc89aea87893e3821944171ee3
+commit: fa53d5238c6594fdf7efc39beb1cead386ae3411

melange.spec

@@ -16,27 +16,33 @@
 #
 
 
-%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
-
 Name:           melange
-Version:        0.11.1
+Version:        0.17.7
 Release:        0
 Summary:        Build APKs from source code
 License:        Apache-2.0
 URL:            https://github.com/chainguard-dev/melange
 Source:         melange-%{version}.tar.gz
 Source1:        vendor.tar.gz
-BuildRequires:  go >= 1.22
+BuildRequires:  bash-completion
+BuildRequires:  fish
+BuildRequires:  go >= 1.23
+BuildRequires:  zsh
 
 %description
 Build apk packages using declarative pipelines.
 
-Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems.
+Commonly used to provide custom packages for container images built with apko.
+The majority of apks are built for use with either the Wolfi or Alpine Linux
+ecosystems.
 
 Key features:
 
-* Pipeline-oriented builds. Every step of the build pipeline is defined and controlled by you, unlike traditional package managers which have distinct phases.
+* Pipeline-oriented builds. Every step of the build pipeline is defined and
-* Multi-architecture by default. QEMU is used to emulate various architectures, avoiding the need for cross-compilation steps.
+  controlled by you, unlike traditional package managers which have distinct
+  phases.
+* Multi-architecture by default. QEMU is used to emulate various architectures,
+  avoiding the need for cross-compilation steps.
 
 %package -n %{name}-bash-completion
 Summary:        Bash Completion for %{name}
@@ -96,8 +102,8 @@ mkdir -p %{buildroot}%{_datarootdir}/fish/vendor_completions.d/
 %{buildroot}/%{_bindir}/%{name} completion fish > %{buildroot}%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
 
 # create the zsh completion file
-mkdir -p %{buildroot}%{_datarootdir}/zsh_completion.d/
+mkdir -p %{buildroot}%{_datarootdir}/zsh/site-functions/
-%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh_completion.d/_%{name}
+%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh/site-functions/_%{name}
 
 %files
 %doc README.md
@@ -105,17 +111,12 @@ mkdir -p %{buildroot}%{_datarootdir}/zsh_completion.d/
 %{_bindir}/%{name}
 
 %files -n %{name}-bash-completion
-%dir %{_datarootdir}/bash-completion/completions/
 %{_datarootdir}/bash-completion/completions/%{name}
 
 %files -n %{name}-fish-completion
-%dir %{_datarootdir}/fish
-%dir %{_datarootdir}/fish/vendor_completions.d
 %{_datarootdir}/fish/vendor_completions.d/%{name}.fish
 
 %files -n %{name}-zsh-completion
-%defattr(-,root,root)
+%{_datarootdir}/zsh/site-functions/_%{name}
-%dir %{_datarootdir}/zsh_completion.d/
-%{_datarootdir}/zsh_completion.d/_%{name}
 
 %changelog

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:9db0b2132c06068d0b29926546808cd21efd7c31e697faff46a482e937ff38aa
+oid sha256:55951fa739047b2dfb5190d7f5525d173ef1d1bfc9c4beb309567133140dd837
-size 9950544
+size 12812480