Merge branch 'slfo-main' into devel

relaxing CPE-id check on empty media

.gitmodules

@@ -1,5 +0,0 @@
-[submodule "product-composer"]
-	path = product-composer
-	url = https://github.com/openSUSE/product-composer
-	branch = main
-

_service

@@ -0,0 +1,14 @@
+<services>
+  <service name="obs_scm" mode="manual">
+    <param name="url">https://github.com/openSUSE/product-composer</param>
+    <param name="scm">git</param>
+    <param name="revision">0.8.1</param>
+    <param name="version">0.8.1</param>
+  </service>
+  <service name="tar" mode="manual" />
+  <service name="recompress" mode="manual">
+    <param name="file">*.tar</param>
+    <param name="compression">xz</param>
+  </service>
+  <service name="set_version" mode="manual" />
+</services>

product-composer.changes

@@ -1,10 +1,177 @@
+-------------------------------------------------------------------
+Wed Jan 14 10:37:03 UTC 2026 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.8.1
+  - handle CPE id checks case sensitive, but also write it always
+    lower case.
+
+-------------------------------------------------------------------
+Tue Jan 13 08:04:23 UTC 2026 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.8.0
+
+  *** INCOMPATIBLE CHANGE ***
+
+  Always enforce /o in cpe-ids, dropping /a support.
+  This was decided in architecture forum for SLFO.
+
+-------------------------------------------------------------------
+Wed Dec 10 13:14:29 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.7.3
+  - new no_product_provides build_option
+
+-------------------------------------------------------------------
+Wed Dec 10 10:54:50 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.7.2:
+  - relax CPE id check case insensitive
+  - give a warning on empty media
+
+-------------------------------------------------------------------
+Wed Dec 10 09:33:55 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.7.1:
+  - relax CPE id check on empty medium. We assume online
+    installation here which needs to be checked when creating that
+    resource.
+
+-------------------------------------------------------------------
+Fri Nov 14 08:57:50 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.7.0:
+  - adds validating of CPE ids with release package.
+
+-------------------------------------------------------------------
+Thu Nov 13 15:26:44 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.18:
+  - Fix filtering of not used rpms in updateinfo
+
+-------------------------------------------------------------------
+Tue Nov 11 09:40:29 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.17:
+  - fix multiarch media handling of updateinfo id's
+
+-------------------------------------------------------------------
+Thu Oct 30 13:21:10 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.16:
+  - merge updateinfo's with same id into one
+  - error out on updateinfo with same id, but non-mergable content
+
+-------------------------------------------------------------------
+Wed Oct 29 07:27:35 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.15:
+  * Support updateinfo handling in arch specific meta data
+
+-------------------------------------------------------------------
+Tue Aug 26 10:56:21 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.14:
+  * option to disable joliet extensions on media
+  * no joliet extensions on source and debug media anymore
+
+-------------------------------------------------------------------
+Wed Aug 20 08:25:30 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.13:
+  * switching back to SHA-256 for CHECKSUMS file (boo#1247507)
+
+-------------------------------------------------------------------
+Wed Aug  6 11:46:15 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.12:
+  * Compress appstream meta data only with gz (boo#1247510)
+  * Add appstream screenshots.tar uncompressed if available.
+
+-------------------------------------------------------------------
+Mon Aug  4 08:03:58 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.11:
+  * Exclude vendor name in media.1/products file (backward compatibility)
+  * Add appstream data to repomd.xml (boo#1243078)
+
+-------------------------------------------------------------------
+Tue Jul 22 14:01:36 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.10:
+  * fixing missing debuginfo package in case dwz compression
+    mechanic is used.
+
+-------------------------------------------------------------------
+Fri Jul 11 06:37:35 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.9:
+  * Create the .license directory independend of iso generation
+  * Support set_updateinfo_id_prefix to be set per flavor
+
+-------------------------------------------------------------------
+Mon Jul  7 13:13:36 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.8:
+  * One more attempt for crashes in iso handling
+  * Accept product_name_prefix key in scc block
+
+-------------------------------------------------------------------
+Fri Jul  4 11:46:29 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.7:
+  * Make the diskusage estimation compatible to the old implementation.
+    Doing the kb conversation by file to cover fs block size
+  * Implement option to follow package version for product
+
+-------------------------------------------------------------------
+Fri Jul  4 10:29:58 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.6
+  * verify command works now also for setups which only builds
+    via a flavor
+  * Export directory content sizes in kb (boo#1245709)
+
+-------------------------------------------------------------------
+Thu Jul  3 14:54:15 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.5
+  * Fixing further regressions of refactoring for iso building
+
+-------------------------------------------------------------------
+Thu Jul  3 09:30:47 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.4
+  * Fixing the iso parsing crash for real
+
+-------------------------------------------------------------------
+Mon Jun 30 08:01:00 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to version 0.6.3
+  * include last two patches, obsoleting 
+    - change-fitering-error-to-warning.patch
+    - parse-supportstatus.patch
+  * fixing a crash when iso's are only enabled in flavors
+- fix build/version handling after the change to setuptools_scm
+
+-------------------------------------------------------------------
+Wed Jun 25 09:47:33 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- add change-fitering-error-to-warning.patch:
+  * Change updateinfo filtering error to a warning
+
+-------------------------------------------------------------------
+Tue Jun 24 13:24:31 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- add parse-supportstatus.patch:
+  * fixes crash on parsing supportstatus information
+
 -------------------------------------------------------------------
 Wed Jun  4 14:34:39 UTC 2025 - Adrian Schröter <adrian@suse.de>
 
 - update to version 0.6.2
   * crash fix for agama builds
   * Rework package set calculation
-    
+
     The new code allows to reference package sets that are defined
     later in the recipe. It also allows to specify a flavor or
     architecture in the reference, so that a flavor can reuse the
@@ -71,7 +238,7 @@ Wed Apr 30 12:36:01 UTC 2025 - Adrian Schröter <adrian@suse.de>
 Mon Mar 31 10:05:44 UTC 2025 - Adrian Schröter <adrian@suse.de>
 
 - update to version 0.5.12:
-  * Fix handling of internal updateinfo.xml attributes 
+  * Fix handling of internal updateinfo.xml attributes
     supportstatus, superseded_by and embargo_date .
 
 -------------------------------------------------------------------
@@ -102,7 +269,7 @@ Mon Feb 24 10:35:48 UTC 2025 - Adrian Schröter <adrian@suse.de>
 
 - update to version 0.5.8
 
-  Added missing bits for splitted source medium 
+  Added missing bits for splitted source medium
 
 -------------------------------------------------------------------
 Fri Feb 21 13:25:46 UTC 2025 - Adrian Schröter <adrian@suse.de>
@@ -149,11 +316,11 @@ Thu Jan 30 09:14:14 UTC 2025 - Adrian Schröter <adrian@suse.de>
 - update to version 0.5.2
 
   Handle baseisos like meta packages
-  
+
   This means we don't expect them deployed in the build host system
   anymore. Instead we search for them in the given repositories for
   the product and unpack the containment rpm.
-  
+
   The wanted side effect of this is that products will get rebuild,
   when the baseiso has changed now.
 
@@ -320,11 +487,11 @@ Wed Mar  6 15:11:10 UTC 2024 - Adrian Schröter <adrian@suse.de>
 
 - update to version 0.4.0
   Replacement of susedata tool, first part
-  
+
   - Add supportstatus
   - Add gpg trusted keys
   - switch to SHA512 checksum
-  
+
   Missing:
   - diskusage data
   - package translations

product-composer.obsinfo

@@ -0,0 +1,4 @@
+name: product-composer
+version: 0.8.1
+mtime: 1768305065
+commit: 893d9bd96dc22df8fda76c81e99ab0f5b9d79100

product-composer.spec

@@ -23,19 +23,19 @@
 %endif
 
 Name:           product-composer
-Version:        0.6.2
+Version:        0.8.1
 Release:        0
 Summary:        Product Composer
 License:        GPL-2.0-or-later
 Group:          Development/Tools/Building
 URL:            https://github.com/openSUSE/product-composer
-#!CreateArchive: product-composer
 Source:         %name-%{version}.tar.xz
 # Should become a build option
-Patch1:         sle-15-defaults.patch
+Patch10:        sle-15-defaults.patch
 BuildRequires:  %{used_python}-pip
 BuildRequires:  %{used_python}-poetry-core
 BuildRequires:  %{used_python}-setuptools
+BuildRequires:  %{used_python}-setuptools_scm
 BuildRequires:  %{used_python}-wheel
 Requires:       %{used_python}-PyYAML
 Requires:       %{used_python}-pydantic
@@ -59,10 +59,11 @@ WARNING: please be aware that the code is still on the move and is
 %prep
 %setup -q -n %name-%version
 %if "%{?sle_version}" == "150600"
-%patch -P 1 -p1
+%patch -P 10 -p1
 %endif
 
 %build
+export SETUPTOOLS_SCM_PRETEND_VERSION=%version
 %if "%{?sle_version}" == "150600"
 %python311_pyproject_wheel
 %else