Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package kubectl-retina for openSUSE:Factory
checked in at 2026-10-27 17:01:24
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/kubectl-retina (Old)
and /work/SRC/openSUSE:Factory/.kubectl-retina.new.2252680 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubectl-retina"
Tue Oct 27 17:01:24 2026 rev:2 rq:1392980 version:1.3.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/kubectl-retina/kubectl-retina.changes
2024-09-23 15:19:40.979124205 +0200
+++
/work/SRC/openSUSE:Factory/.kubectl-retina.new.2252680/kubectl-retina.changes
2026-10-27 17:03:13.004297794 +0100
@@ -1,0 +2,40 @@
+Sat Oct 24 18:06:06 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to version 1.3.1:
+ * First 1.x release (previous package was 0.0.16); upstream
+ tags confirm v1.3.1 is the latest release.
+ * CLI: the version string moved from cli/cmd.Version to
+ internal/buildinfo.Version, stamp the binary via ldflags
+ accordingly. Adds bpftrace and shell subcommands.
+ * Raise BuildRequires to go >= 1.26 following upstream go.mod.
+ * Correct License tag to MIT matching upstream LICENSE
+ (was wrongly Apache-2.0 since the initial package).
+ * Vendored modules refreshed via obs-service-go_modules.
+ * Run the upstream CLI unit tests in %check.
+- Security fixes pulled in with the re-vendor:
+ * CVE-2026-72815, CVE-2026-72816, CVE-2026-72817: go-chi
+ chi RealIP middleware IP spoofing (boo#1276157, vendored
+ chi v5.1.0 -> v5.5.0, fixed in 5.3.0).
+ * CVE-2026-95838: containerd layer unpack DoS (boo#1285139,
+ module no longer in the vendor tree).
+ * CVE-2025-27144: go-jose parsing denial of service
+ (boo#1237666, go-jose/v3 3.0.3 removed, v4 at 4.1.4).
+ * CVE-2026-34986: go-jose JWE empty encrypted key panic
+ (boo#1262908, vendored go-jose/v4 at fixed 4.1.4).
+ * CVE-2025-54410: moby firewalld bridge isolation loss
+ (boo#1247396, module no longer in the vendor tree).
+ * CVE-2026-53941: inspektor-gadget ld.so.cache CPU burn
+ (boo#1275858, module no longer in the vendor tree).
+ * CVE-2025-22872, CVE-2024-45338, CVE-2025-47911,
+ CVE-2025-58190: golang.org/x/net html parser flaws
+ (boo#1241780, boo#1235312, boo#1251432, boo#1251622,
+ vendored x/net 0.28.0 -> 0.61.0).
+ * CVE-2026-33186: grpc-go HTTP/2 :path authorization bypass
+ (boo#1260240, vendored grpc 1.66.0 -> 1.84.0).
+ * CVE-2025-30204: golang-jwt ParseUnverified memory
+ exhaustion (boo#1240488, vendored jwt/v4 4.5.0 -> 4.5.2
+ and jwt/v5 5.2.1 -> 5.3.1, both at fixed releases).
+ * CVE-2024-51744: golang-jwt ParseWithClaims error handling
+ (boo#1232967, fixed via the same jwt refresh).
+
+-------------------------------------------------------------------
Old:
----
kubectl-retina-0.0.16.obscpio
New:
----
kubectl-retina-1.3.1.obscpio
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ kubectl-retina.spec ++++++
--- /var/tmp/diff_new_pack.BRxBhO/_old 2026-10-27 17:03:42.795545376 +0100
+++ /var/tmp/diff_new_pack.BRxBhO/_new 2026-10-27 17:03:42.797545460 +0100
@@ -17,16 +17,15 @@
%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
-
Name: kubectl-retina
-Version: 0.0.16
+Version: 1.3.1
Release: 0
Summary: CLI for the Retina Kubernetes network observability platform
-License: Apache-2.0
+License: MIT
URL: https://github.com/microsoft/retina
Source: %{name}-%{version}.tar.gz
Source1: vendor.tar.gz
-BuildRequires: go >= 1.21
+BuildRequires: go >= 1.26
%description
Retina is a cloud-agnostic, open-source Kubernetes network observability
@@ -44,7 +43,6 @@
%package -n %{name}-bash-completion
Summary: Bash Completion for %{name}
-Group: System/Shells
Requires: %{name} = %{version}
Requires: bash-completion
Supplements: (%{name} and bash-completion)
@@ -55,7 +53,6 @@
%package -n %{name}-fish-completion
Summary: Fish Completion for %{name}
-Group: System/Shells
Requires: %{name} = %{version}
Supplements: (%{name} and fish)
BuildArch: noarch
@@ -65,7 +62,6 @@
%package -n %{name}-zsh-completion
Summary: Zsh Completion for %{name}
-Group: System/Shells
Requires: %{name} = %{version}
Supplements: (%{name} and zsh)
BuildArch: noarch
@@ -82,9 +78,12 @@
-buildmode=pie \
-tags=tools \
-ldflags=" \
- -X github.com/microsoft/retina/cli/cmd.Version=v%{version}" \
+ -X github.com/microsoft/retina/internal/buildinfo.Version=v%{version}" \
-o bin/%{name} ./cli/main.go
+%check
+go test -mod=vendor ./cli/...
+
%install
# Install the binary.
install -D -m 0755 bin/%{name} %{buildroot}/%{_bindir}/%{name}
@@ -116,7 +115,6 @@
%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
%files -n %{name}-zsh-completion
-%defattr(-,root,root)
%dir %{_datarootdir}/zsh_completion.d/
%{_datarootdir}/zsh_completion.d/_%{name}
++++++ _service ++++++
--- /var/tmp/diff_new_pack.BRxBhO/_old 2026-10-27 17:03:42.833546967 +0100
+++ /var/tmp/diff_new_pack.BRxBhO/_new 2026-10-27 17:03:42.837547135 +0100
@@ -3,7 +3,7 @@
<param name="url">https://github.com/microsoft/retina</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
- <param name="revision">v0.0.16</param>
+ <param name="revision">v1.3.1</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="changesgenerate">enable</param>
<param name="versionrewrite-pattern">v(.*)</param>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.BRxBhO/_old 2026-10-27 17:03:42.869548475 +0100
+++ /var/tmp/diff_new_pack.BRxBhO/_new 2026-10-27 17:03:42.873548643 +0100
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/microsoft/retina</param>
- <param
name="changesrevision">15c0da53b5adbdaa3366456f6827499374adc5d5</param></service></servicedata>
+ <param
name="changesrevision">a536bee1707c72aaf74aef954346a558bb0047ad</param></service></servicedata>
(No newline at EOF)
++++++ kubectl-retina-0.0.16.obscpio -> kubectl-retina-1.3.1.obscpio ++++++
++++ 183700 lines of diff (skipped)
++++++ kubectl-retina.obsinfo ++++++
--- /var/tmp/diff_new_pack.BRxBhO/_old 2026-10-27 17:03:45.782670469 +0100
+++ /var/tmp/diff_new_pack.BRxBhO/_new 2026-10-27 17:03:45.794670972 +0100
@@ -1,5 +1,5 @@
name: kubectl-retina
-version: 0.0.16
-mtime: 1725656956
-commit: 15c0da53b5adbdaa3366456f6827499374adc5d5
+version: 1.3.1
+mtime: 1792758272
+commit: a536bee1707c72aaf74aef954346a558bb0047ad
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/kubectl-retina/vendor.tar.gz
/work/SRC/openSUSE:Factory/.kubectl-retina.new.2252680/vendor.tar.gz differ:
char 5, line 1
