From a322af2a6b0a2fc7ba3b8ca467a613a8bf359f37 Mon Sep 17 00:00:00 2001 From: jfkw <> Date: Apr 29 2025 16:17:10 +0000 Subject: Update amber-cli to version 1.13.1+git20250329.c2e3bb8 / rev 3 via SR 1273417 https://build.opensuse.org/request/show/1273417 by user jfkw + dimstar_suse - Update to version 1.13.1+git20250329.c2e3bb8 (bsc#1240511, CVE-2025-30204): * jwt version upgrade (#174) * Update policy size limit to 20k (#173) * Update tenant user model with latest changes (#172) * Fix/workflow (#171) * Upgrade GO version to 1.23.6 (#170) * Update golang jwt dependency (#169) * Update TMS roles struct (#167) * Update jwt dependency version (#165) * Add changes to support JWT (#163) * Update roles struct to be in sync with TMS (#164) * go upgrade to 1.22.7 (#162) * CASSINI-22266: Added permissions in ci workflow files (#153) * Add check for missing Security.md file (#150) * Go version upgrade to 1.22.5 (#148) * CLI changes (#140) * Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 (#147) * Update product model to include m --- diff --git a/.files b/.files index 293de2a..800249b 100644 Binary files a/.files and b/.files differ diff --git a/.rev b/.rev index 84168c9..73be86b 100644 --- a/.rev +++ b/.rev @@ -15,4 +15,68 @@ Override build date with SOURCE_DATE_EPOCH (boo#1047218) (forwarded request 1125191 from bmwiedemann) 1125194 + + 043c220ec5512f49f7f5d637b8b469db + 1.13.1+git20250329.c2e3bb8 + + dimstar_suse + - Update to version 1.13.1+git20250329.c2e3bb8 (bsc#1240511, CVE-2025-30204): + * jwt version upgrade (#174) + * Update policy size limit to 20k (#173) + * Update tenant user model with latest changes (#172) + * Fix/workflow (#171) + * Upgrade GO version to 1.23.6 (#170) + * Update golang jwt dependency (#169) + * Update TMS roles struct (#167) + * Update jwt dependency version (#165) + * Add changes to support JWT (#163) + * Update roles struct to be in sync with TMS (#164) + * go upgrade to 1.22.7 (#162) + * CASSINI-22266: Added permissions in ci workflow files (#153) + * Add check for missing Security.md file (#150) + * Go version upgrade to 1.22.5 (#148) + * CLI changes (#140) + * Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 (#147) + * Update product model to include multiple plan IDs (#146) + * Updated the help section (#145) + * Mark policy type field as not required (#144) + * Upgrade/goversion 1.22.3 (#143) + * Remove policy type and attestation type check for policy creation (#142) + * Go version upgrade 1.22.2 (#141) + * Fix error message to include the correct set of characters (#138) + * UT coverage 80.9% (#137) + * Fix push installer workflow (#136) + * 3rd party versions upgrade (#133) + * GO version upgrade to 1.22.0 (#132) + * Fix/go version 1.21.6 (#127) + * Update API key validation regex as per latest changes (#125) + * Update API key validation regex as per latest changes (#124) + * dependency version upgrade (#123) + * Update tag create model (#121) + * CASSINI-10113: Add scans in CI (#99) + * corrected minor check condition (#120) + * Add check to validate env variable before setting (#119) + * Add version-check script (#118) + * Add file path check for invalid characters (#116) + * Update compoenent version (#117) + * Update README as per suggestions (#113) (#115) + * Added HTTP scheme validation to avoid API Key leakage (#108) + * CASSINI-10987 Golang version upgrade to 1.21.4 (#114) + * Update policy model as per the latest changes (#109) + * Remove branch info from on schedule (#106) + * Add BDBA scan to CI (#104) + * Update CLI URL (#105) + * updated licenses (#102) + * Updated version of all components to v1.0.0 for GA (#100) + * Validate the email id input before requesting list of users (#98) + * Remove redundant print statements (#97) + * Request ID and trace ID should be visible on the console for errors as well (#96) + * Update sample policy as per token profile update changes (#95) + * Update CLI name from tenantclt to inteltrustauthority (#93) + * Update the headers for request and trace id (#94) + * cassini-9466-Go version update to 1.20.6 (#91) + * Add retry logic to client in tenant CLI (#92) + * Add request-id optional parameter for each command (#90) (forwarded request 1273373 from aplanas) + 1273417 + diff --git a/_service b/_service index 5ac96a7..bded284 100644 --- a/_service +++ b/_service @@ -4,7 +4,7 @@ git .git main - 0.3.0+git%cd.%h + 1.13.1+git%cd.%h enable v(.*) diff --git a/_servicedata b/_servicedata index df0edae..fba10b6 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/intel/amber-cli.git - 955f78d47362994616e95140ce65f8013a3cda9c \ No newline at end of file + c2e3bb83a829ce65ade1db7925567f497ae837e9 \ No newline at end of file diff --git a/amber-cli-0.3.0+git20230728.955f78d.tar.xz b/amber-cli-0.3.0+git20230728.955f78d.tar.xz deleted file mode 120000 index e113c7e..0000000 --- a/amber-cli-0.3.0+git20230728.955f78d.tar.xz +++ /dev/null @@ -1 +0,0 @@ -/ipfs/bafkreianjqs23eyqhn37p2sxpnzjh3jye7c2bqqdhge2lzsehlwqcpcvve \ No newline at end of file diff --git a/amber-cli-1.13.1+git20250329.c2e3bb8.tar.xz b/amber-cli-1.13.1+git20250329.c2e3bb8.tar.xz new file mode 120000 index 0000000..a5d2a09 --- /dev/null +++ b/amber-cli-1.13.1+git20250329.c2e3bb8.tar.xz @@ -0,0 +1 @@ +/ipfs/bafkreihbckhmo2ope4bcxkvkmwxk3bb2zyvkqkjvko3c6aqlgtwcrxe2e4 \ No newline at end of file diff --git a/amber-cli.changes b/amber-cli.changes index 068446c..82cc3c0 100644 --- a/amber-cli.changes +++ b/amber-cli.changes @@ -1,4 +1,65 @@ ------------------------------------------------------------------- +Tue Apr 29 07:59:21 UTC 2025 - Alberto Planas Dominguez + +- Update to version 1.13.1+git20250329.c2e3bb8 (bsc#1240511, CVE-2025-30204): + * jwt version upgrade (#174) + * Update policy size limit to 20k (#173) + * Update tenant user model with latest changes (#172) + * Fix/workflow (#171) + * Upgrade GO version to 1.23.6 (#170) + * Update golang jwt dependency (#169) + * Update TMS roles struct (#167) + * Update jwt dependency version (#165) + * Add changes to support JWT (#163) + * Update roles struct to be in sync with TMS (#164) + * go upgrade to 1.22.7 (#162) + * CASSINI-22266: Added permissions in ci workflow files (#153) + * Add check for missing Security.md file (#150) + * Go version upgrade to 1.22.5 (#148) + * CLI changes (#140) + * Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 (#147) + * Update product model to include multiple plan IDs (#146) + * Updated the help section (#145) + * Mark policy type field as not required (#144) + * Upgrade/goversion 1.22.3 (#143) + * Remove policy type and attestation type check for policy creation (#142) + * Go version upgrade 1.22.2 (#141) + * Fix error message to include the correct set of characters (#138) + * UT coverage 80.9% (#137) + * Fix push installer workflow (#136) + * 3rd party versions upgrade (#133) + * GO version upgrade to 1.22.0 (#132) + * Fix/go version 1.21.6 (#127) + * Update API key validation regex as per latest changes (#125) + * Update API key validation regex as per latest changes (#124) + * dependency version upgrade (#123) + * Update tag create model (#121) + * CASSINI-10113: Add scans in CI (#99) + * corrected minor check condition (#120) + * Add check to validate env variable before setting (#119) + * Add version-check script (#118) + * Add file path check for invalid characters (#116) + * Update compoenent version (#117) + * Update README as per suggestions (#113) (#115) + * Added HTTP scheme validation to avoid API Key leakage (#108) + * CASSINI-10987 Golang version upgrade to 1.21.4 (#114) + * Update policy model as per the latest changes (#109) + * Remove branch info from on schedule (#106) + * Add BDBA scan to CI (#104) + * Update CLI URL (#105) + * updated licenses (#102) + * Updated version of all components to v1.0.0 for GA (#100) + * Validate the email id input before requesting list of users (#98) + * Remove redundant print statements (#97) + * Request ID and trace ID should be visible on the console for errors as well (#96) + * Update sample policy as per token profile update changes (#95) + * Update CLI name from tenantclt to inteltrustauthority (#93) + * Update the headers for request and trace id (#94) + * cassini-9466-Go version update to 1.20.6 (#91) + * Add retry logic to client in tenant CLI (#92) + * Add request-id optional parameter for each command (#90) + +------------------------------------------------------------------- Sat Nov 11 19:14:26 UTC 2023 - Bernhard Wiedemann - Override build date with SOURCE_DATE_EPOCH (boo#1047218) diff --git a/amber-cli.spec b/amber-cli.spec index 599c9ad..b37c8b6 100644 --- a/amber-cli.spec +++ b/amber-cli.spec @@ -1,7 +1,7 @@ # -# spec file for +# spec file for package amber-cli # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,15 +17,15 @@ Name: amber-cli -Version: 0.3.0+git20230728.955f78d +Version: 1.13.1+git20250329.c2e3bb8 Release: 0 Summary: CLI tool for tenants to use and access Amber services License: BSD-3-Clause URL: https://github.com/intel/amber-cli Source: %{name}-%{version}.tar.xz Source1: vendor.tar.zstd -BuildRequires: golang(API) >= 1.20 BuildRequires: zstd +BuildRequires: golang(API) >= 1.20 %description CLI tool for tenants to use and access Amber services. diff --git a/vendor.tar.zstd b/vendor.tar.zstd index 0c24b64..4ba20eb 120000 --- a/vendor.tar.zstd +++ b/vendor.tar.zstd @@ -1 +1 @@ -/ipfs/bafybeibi26lshgg4biodipfjd7wcmu7phhkz5w643pymeginsgegdxwvhy \ No newline at end of file +/ipfs/bafybeibhqjlo5n4pvkxviw5cxs35uoe5ysrc5yuta42rhlr2k7xmrcws3q \ No newline at end of file