Accepting request 1128621 from home:msmeissn:branches:security

- updated to rekor 1.3.3 (jsc#SLE-23476):
  - Update signer flag description
  - update trillian to 1.5.3
  - adds redis_auth
  - Add method to get artifact hash for an entry
  - make e2e tests more usable with docker-compose
  - install go at correct version for codeql
- updated to rekor 1.3.2 (jsc#SLE-23476):
- updated to rekor 1.3.1 (jsc#SLE-23476):
  New Features:
  - enable GCP cloud profiling on rekor-server (#1746)
  - move index storage into interface (#1741)
  - add info to readme to denote additional documentation sources (#1722)
  - Add type of ed25519 key for TUF (#1677)
  - Allow parsing base64-encoded TUF metadata and root content (#1671)
  Quality Enhancements:
  - disable quota in trillian in test harness (#1680)
  Bug Fixes:
  - Update contact for code of conduct (#1720)
  - Fix panic when parsing SSH SK pubkeys (#1712)
  - Correct index creation (#1708)
  - docs: fixzes a small typo on the readme (#1686)
  - chore: fix backfill-redis Makefile target (#1685)

OBS-URL: https://build.opensuse.org/request/show/1128621
OBS-URL: https://build.opensuse.org/package/show/security/rekor?expand=0&rev=37

rekor-1.3.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:97c0a76686b061d8d99cd126c4364185590b49adff6bf78ebde10299d58b62b6
-size 883084

rekor-1.3.3.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2e4e75fcae81ef85e6e3c20e00a9b590bfa86c0706a6c902024222cd61b64c47
+size 890347

rekor.changes

@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Fri Nov 24 16:03:38 UTC 2023 - Marcus Meissner <meissner@suse.com>
+
+- updated to rekor 1.3.3 (jsc#SLE-23476):
+  - Update signer flag description
+  - update trillian to 1.5.3
+  - adds redis_auth
+  - Add method to get artifact hash for an entry
+  - make e2e tests more usable with docker-compose
+  - install go at correct version for codeql
+- updated to rekor 1.3.2 (jsc#SLE-23476):
+- updated to rekor 1.3.1 (jsc#SLE-23476):
+  New Features:
+  - enable GCP cloud profiling on rekor-server (#1746)
+  - move index storage into interface (#1741)
+  - add info to readme to denote additional documentation sources (#1722)
+  - Add type of ed25519 key for TUF (#1677)
+  - Allow parsing base64-encoded TUF metadata and root content (#1671)
+  Quality Enhancements:
+  - disable quota in trillian in test harness (#1680)
+  Bug Fixes:
+  - Update contact for code of conduct (#1720)
+  - Fix panic when parsing SSH SK pubkeys (#1712)
+  - Correct index creation (#1708)
+  - docs: fixzes a small typo on the readme (#1686)
+  - chore: fix backfill-redis Makefile target (#1685)
+
 -------------------------------------------------------------------
 Fri Sep  1 08:54:06 UTC 2023 - Marcus Meissner <meissner@suse.com>
 

rekor.spec

@@ -19,9 +19,9 @@
 %define apps cli server
 
 Name:           rekor
-Version:        1.3.0
+Version:        1.3.3
 Release:        0
-%define revision ed3d0b15a97e6497e3ab758e3102a6ef540fff50
+%define revision 2ea1ef00f03b493ace47b1f26a8bfd4ab3b17fe9
 Summary:        Supply Chain Transparency Log
 License:        Apache-2.0
 URL:            https://github.com/sigstore/rekor

vendor.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:93b6926a452ce1c46a2c72573969b47cb8f7837074bb5ef3575f5cc590ac72eb
+oid sha256:891b340a8b408986cc2700606aa511015c62b5f56da828365a022f7e6067d3a2
-size 6117716
+size 6234840