public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/gum] f45: Update to version 2.0.0
@ 2026-08-22  1:37 Carl George
  0 siblings, 0 replies; only message in thread
From: Carl George @ 2026-08-22  1:37 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/gum
            Branch : f45
            Commit : fd12fd8896521474d7a7c2d8797a4fcbc4bfdf22
            Author : Carl George <carlwgeorge@fedoraproject.org>
            Date   : 2026-08-21T17:48:08-05:00
            Stats  : +6/-8 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/gum/c/fd12fd8896521474d7a7c2d8797a4fcbc4bfdf22?branch=f45

            Log:
            Update to version 2.0.0

... (rhbz#2495240)
- Override bundled golang.org/x/net to v0.55.0 (CVE-2026-25680 CVE-2026-25681 CVE-2026-42506)

---
diff --git a/go-vendor-tools.toml b/go-vendor-tools.toml
index 9c14cf9..d2d781e 100644
--- a/go-vendor-tools.toml
+++ b/go-vendor-tools.toml
@@ -1,12 +1,10 @@
 [archive]
 
 [archive.dependency_overrides]
-# https://github.com/mattn/go-localereader/pull/1
-"github.com/mattn/go-localereader" = "2491eb6c1c75720122ef321ed7acc3a8d9de95b1"
 # https://github.com/alecthomas/chroma/pull/1233
-"github.com/alecthomas/chroma/v2" = "fc18a483e6c89d611edccd82090faa05abbd49eb"
-# CVE-2026-5160
-"github.com/yuin/goldmark" = "v1.7.17"
+"github.com/alecthomas/chroma/v2" = "v2.24.0"
+# CVE-2026-25680, CVE-2026-25681, CVE-2026-42506
+"golang.org/x/net" = "v0.55.0"
 
 [licensing]
 detector = "askalono"

diff --git a/gum.spec b/gum.spec
index 6e7b70c..d04278f 100644
--- a/gum.spec
+++ b/gum.spec
@@ -3,7 +3,7 @@
 %global gomodulesmode GO111MODULE=on
 
 Name:           gum
-Version:        0.17.0
+Version:        2.0.0
 Release:        %autorelease
 ExclusiveArch:  %{golang_arches_future}
 Summary:        Tool for glamorous shell scripts

diff --git a/sources b/sources
index 0b00190..05918c9 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (gum-0.17.0.tar.gz) = 6c0697d42a6335f18ec0a6305d6d544b5b99f2b2239dfb8daff1eb18589d55a48d68dfe085642112349187d4464eb9d33f5517179c2cfb4469343272bc4874a7
-SHA512 (gum-0.17.0-vendor.tar.bz2) = 22042275800b5351994450b1fe58cba873e4ada699a348253b20a7a07a79b2cb83e07675ef9dd6dad0f0175c66d8f4c7c4064098d0fb223e27488e2e0d9529cb
+SHA512 (gum-2.0.0.tar.gz) = 776070f8a8bb2d2da992308ac7de468253d1ecb87d5b0d60a9b583fc0664117b9a539cdc631f10fad83da3e2b22b68d660d0deb966912054a210837ce1bc7a39
+SHA512 (gum-2.0.0-vendor.tar.bz2) = 775b95c192d5917faaf7a7a9c9f2ac0bcaa68dd7bafcb2795edd279ee8ec8d69e876b57fbe712f9f97e5332ddd9a6ffdb37cc2a0e4f1eeddf3eceb4d78ee36f1

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-22  1:37 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-22  1:37 [rpms/gum] f45: Update to version 2.0.0 Carl George

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox