Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package steampipe for openSUSE:Factory checked in at 2026-11-04 19:43:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/steampipe (Old) and /work/SRC/openSUSE:Factory/.steampipe.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "steampipe" Wed Nov 4 19:43:47 2026 rev:24 rq:1394732 version:2.4.9 Changes: -------- --- /work/SRC/openSUSE:Factory/steampipe/steampipe.changes 2026-09-17 15:22:30.223740926 +0200 +++ /work/SRC/openSUSE:Factory/.steampipe.new.3759290/steampipe.changes 2026-11-04 19:43:56.503598416 +0100 @@ -1,0 +2,9 @@ +Tue Nov 03 12:40:51 UTC 2026 - Felix Niederwanger <[email protected]> + +- Update to version 2.4.9: + * v2.4.9 (#5083) + * Backport security-flagged dependency bumps (klauspost/compress, go-jose) (#5079) + * v2.4.8 (#5075) + * Backport: Bump Go version from 1.26.7 to 1.26.10 (#5074) + +------------------------------------------------------------------- Old: ---- steampipe-2.4.7.obscpio New: ---- steampipe-2.4.9.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ steampipe.spec ++++++ --- /var/tmp/diff_new_pack.zdZNPf/_old 2026-11-04 19:43:59.449721737 +0100 +++ /var/tmp/diff_new_pack.zdZNPf/_new 2026-11-04 19:43:59.456722030 +0100 @@ -17,7 +17,7 @@ Name: steampipe -Version: 2.4.7 +Version: 2.4.9 Release: 0 Summary: Query various APIs and services via SQL language License: AGPL-3.0-only ++++++ _service ++++++ --- /var/tmp/diff_new_pack.zdZNPf/_old 2026-11-04 19:43:59.534725295 +0100 +++ /var/tmp/diff_new_pack.zdZNPf/_new 2026-11-04 19:43:59.540725546 +0100 @@ -2,7 +2,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/turbot/steampipe.git</param> <param name="scm">git</param> - <param name="revision">v2.4.7</param> + <param name="revision">v2.4.9</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.zdZNPf/_old 2026-11-04 19:43:59.601728100 +0100 +++ /var/tmp/diff_new_pack.zdZNPf/_new 2026-11-04 19:43:59.610728476 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/turbot/steampipe.git</param> - <param name="changesrevision">5c62651887b3e1d127049722e7216b915d4b075d</param></service></servicedata> + <param name="changesrevision">4269e1dc4865647605da6af8f1828e77278106a0</param></service></servicedata> (No newline at EOF) ++++++ steampipe-2.4.7.obscpio -> steampipe-2.4.9.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/steampipe-2.4.7/.github/workflows/01-steampipe-release.yaml new/steampipe-2.4.9/.github/workflows/01-steampipe-release.yaml --- old/steampipe-2.4.7/.github/workflows/01-steampipe-release.yaml 2026-09-16 12:34:45.000000000 +0200 +++ new/steampipe-2.4.9/.github/workflows/01-steampipe-release.yaml 2026-11-01 13:40:27.000000000 +0100 @@ -114,7 +114,7 @@ - name: Set up Go uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: 1.26.7 + go-version: 1.26.10 - name: Install GoReleaser uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/steampipe-2.4.7/.github/workflows/10-test-lint.yaml new/steampipe-2.4.9/.github/workflows/10-test-lint.yaml --- old/steampipe-2.4.7/.github/workflows/10-test-lint.yaml 2026-09-16 12:34:45.000000000 +0200 +++ new/steampipe-2.4.9/.github/workflows/10-test-lint.yaml 2026-11-01 13:40:27.000000000 +0100 @@ -32,7 +32,7 @@ # this is required, check golangci-lint-action docs - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0 with: - go-version: '1.26.7' + go-version: '1.26.10' cache: false # setup-go v4 caches by default, do not change this parameter, check golangci-lint-action doc: https://github.com/golangci/golangci-lint-action/pull/704 - name: golangci-lint diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/steampipe-2.4.7/.github/workflows/11-test-acceptance.yaml new/steampipe-2.4.9/.github/workflows/11-test-acceptance.yaml --- old/steampipe-2.4.7/.github/workflows/11-test-acceptance.yaml 2026-09-16 12:34:45.000000000 +0200 +++ new/steampipe-2.4.9/.github/workflows/11-test-acceptance.yaml 2026-11-01 13:40:27.000000000 +0100 @@ -32,7 +32,7 @@ - name: Set up Go uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: 1.26.7 + go-version: 1.26.10 - name: Fetching Go Cache Paths id: go-cache-paths @@ -130,7 +130,7 @@ - name: Set up Go uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: 1.26.7 + go-version: 1.26.10 - name: Prepare for downloads id: prepare-for-downloads diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/steampipe-2.4.7/CHANGELOG.md new/steampipe-2.4.9/CHANGELOG.md --- old/steampipe-2.4.7/CHANGELOG.md 2026-09-16 12:34:45.000000000 +0200 +++ new/steampipe-2.4.9/CHANGELOG.md 2026-11-01 13:40:27.000000000 +0100 @@ -1,3 +1,14 @@ +## v2.4.9 [2026-10-29] +_Dependencies_ +- Bump `github.com/klauspost/compress` from v1.18.5 to v1.18.7 to remediate CVE-2026-63209. +- Bump `github.com/go-jose/go-jose/v4` from v4.1.4 to v4.1.6 to remediate CVE-2026-116587. +- Update embedded `steampipe-postgres-fdw` to `v2.2.9`. + +## v2.4.8 [2026-10-22] +_Dependencies_ +- Compiled with Go 1.26.10, which rejects certificate chains through the compromised eMudhra intermediate CAs ([golang/go#82345](https://github.com/golang/go/issues/82345)). +- Update embedded `steampipe-postgres-fdw` to `v2.2.8` (compiled with Go 1.26.10). + ## v2.4.7 [2026-09-16] _Dependencies_ - Bump `golang.org/x/crypto` from v0.52.0 to v0.55.0 to remediate CVE-2026-56854. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/steampipe-2.4.7/go.mod new/steampipe-2.4.9/go.mod --- old/steampipe-2.4.7/go.mod 2026-09-16 12:34:45.000000000 +0200 +++ new/steampipe-2.4.9/go.mod 2026-11-01 13:40:27.000000000 +0100 @@ -1,6 +1,6 @@ module github.com/turbot/steampipe/v2 -go 1.26.7 +go 1.26.10 replace ( github.com/c-bata/go-prompt => github.com/turbot/go-prompt v0.2.6-steampipe.0.0.20221028122246-eb118ec58d50 @@ -127,7 +127,7 @@ github.com/jackc/puddle/v2 v2.2.2 // indirect github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect github.com/jmespath/go-jmespath v0.4.0 // indirect - github.com/klauspost/compress v1.18.5 // indirect + github.com/klauspost/compress v1.18.7 // indirect github.com/leodido/go-urn v1.4.0 // indirect github.com/mattn/go-colorable v0.1.14 // indirect github.com/mattn/go-runewidth v0.0.16 // indirect @@ -209,7 +209,7 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/envoyproxy/go-control-plane/envoy v1.37.0 // indirect github.com/envoyproxy/protoc-gen-validate v1.3.3 // indirect - github.com/go-jose/go-jose/v4 v4.1.4 // indirect + github.com/go-jose/go-jose/v4 v4.1.6 // indirect github.com/go-viper/mapstructure/v2 v2.4.0 // indirect github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.72 // indirect github.com/klauspost/cpuid/v2 v2.3.0 // indirect diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/steampipe-2.4.7/go.sum new/steampipe-2.4.9/go.sum --- old/steampipe-2.4.7/go.sum 2026-09-16 12:34:45.000000000 +0200 +++ new/steampipe-2.4.9/go.sum 2026-11-01 13:40:27.000000000 +0100 @@ -179,8 +179,8 @@ github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399/go.mod h1:1OCfN199q1Jm3HZlxleg+Dw/mwps2Wbk9frAWm+4FII= github.com/go-git/go-git/v5 v5.19.2 h1:wkfn7vOlUBu8ivAWKBWisTiwJK4jYHzTF8Ndv1LyGqY= github.com/go-git/go-git/v5 v5.19.2/go.mod h1:QqCBE1EFN5ddFmrliLQ3/ntRCUjZU3EJuwuB/jWEHjk= -github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA= -github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08= +github.com/go-jose/go-jose/v4 v4.1.6 h1:sNRkftxFJxwsILiQukqp5z83QBSmntVwmgRY7AqBDO4= +github.com/go-jose/go-jose/v4 v4.1.6/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08= github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI= github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= @@ -288,8 +288,8 @@ github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= github.com/karrick/gows v0.3.0 h1:/FGSuBiJMUqNOJPsAdLvHFg7RnkFoWBS8USpdco5ONQ= github.com/karrick/gows v0.3.0/go.mod h1:kdZ/jfdo8yqKYn+BMjBkhP+/oRKUABR1abaomzRi/n8= -github.com/klauspost/compress v1.18.5 h1:/h1gH5Ce+VWNLSWqPzOVn6XBO+vJbCNGvjoaGBFW2IE= -github.com/klauspost/compress v1.18.5/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ= +github.com/klauspost/compress v1.18.7 h1:aUyZsS4kH3QTKurYhAOwAHxllVPnOthb3vPfnF1Ehjw= +github.com/klauspost/compress v1.18.7/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ= github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y= github.com/klauspost/cpuid/v2 v2.3.0/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0= github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/steampipe-2.4.7/pkg/constants/db.go new/steampipe-2.4.9/pkg/constants/db.go --- old/steampipe-2.4.7/pkg/constants/db.go 2026-09-16 12:34:45.000000000 +0200 +++ new/steampipe-2.4.9/pkg/constants/db.go 2026-11-01 13:40:27.000000000 +0100 @@ -28,7 +28,7 @@ // constants for installing db and fdw images const ( DatabaseVersion = "14.19.0" - FdwVersion = "2.2.7" + FdwVersion = "2.2.9" // PostgresImageRef is the OCI Image ref for the database binaries PostgresImageRef = "ghcr.io/turbot/steampipe/db:14.19.0" ++++++ steampipe.obsinfo ++++++ --- /var/tmp/diff_new_pack.zdZNPf/_old 2026-11-04 19:44:00.498765648 +0100 +++ /var/tmp/diff_new_pack.zdZNPf/_new 2026-11-04 19:44:00.501765774 +0100 @@ -1,5 +1,5 @@ name: steampipe -version: 2.4.7 -mtime: 1789554885 -commit: 5c62651887b3e1d127049722e7216b915d4b075d +version: 2.4.9 +mtime: 1793536827 +commit: 4269e1dc4865647605da6af8f1828e77278106a0 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/steampipe/vendor.tar.gz /work/SRC/openSUSE:Factory/.steampipe.new.3759290/vendor.tar.gz differ: char 30, line 1
