Overview

Request 662679 accepted

- Update to 1.7.3 (bugfix release)
* Simplify filename matching in redact_pass.vim
* Do not put passwords in herestrings
* Do not set foreground color for generated password
* Add custom bash completion for extensions
* show: do not store binary data in bash vars
- Use noun phrase in summary. Fix double meaning of "pass".
- Update to 1.7.2
* Large number of bug fixes
* Fixed the signature verification routine that parses the output of GnuPG.
Previously, it was prone to spoofing of file signatures and allowed
attackers to inject additional encryption keys (bsc#1097774
CVE-2018-12356).
- Applied spec-cleaner
- Version bump 1.7.1
* Bug Fixes
* Add compatibility with GnuPG 2.2.19
* Uniformly use the $GPG variable
* Do the correct thing with subkeys when reencrypting
* Fix test suite on OS X
- Drop password-store-gpg-2.1.patch
* merged in 6f867674272a03273212259b9039c9356a6ed90
- clean spec file with spec-cleaner
- use %make_install macro
- Update password-store-gpg-2.1.patch to upstream version done
by Andreas Stieger
- Version bump 1.7
* Features
* Extensions: pass can now load user-defined extensions from a system
directory or a user directory. There's already a nice ecosystem of
extensions being built, even at this early stage. See the pass man page for
more information.
* Signatures: there is now an option to enforce signatures of the .gpg-id file
and extensions using an environment variable.
* QRCodes: generate and show have now learned the --qrcode/-q switch. Note to
package maintainers: this adds a dependency on the popular qrencode package.
* Password generation: rather than use pwgen, we now use /dev/urandom more
directly, which results in more assured password security, as well as
customizable character sets, via an environment variable. See the pass man
page for more information on this customization. Package maintainers: you
may now drop the dependency on pwgen.
* Importers: there now are several more importers. More and more folks are
moving to pass!
* Selectable clipping: you can now specify which line you wish to copy to the
clipboard or display with a qrcode when using -c or -q.
* Git discovery: The PASSWORD_STORE_GIT environment variable has been removed,
and instead pass will automatically choose the git repository closest to the
file being modified (but not out of the actual password store itself). This
should help people who like to nest git repos for different organizations.
* Bug fixes: too many to count.
- New dependency qrencode
- Make pwgen a recommended tool
- Add patch password-store-gpg-2.1.patch to be able to handle new gpg behaviour
boo#1028867
- Add conditionals on dependencies that don't exist on older distros
- Disable tests in older distros where the dependencies don't satisfy them
- Version bump 1.6.5:
* 1.6.4 Changelog:
* Features:
* "add" is an alias of "insert"
* `pass edit` will no longer make a commit if the password does not change
* Symbolic links are now followed
* Remove gpg agent check, due to the auto-starting gpg-agent in GnuPG 2.1
* Bug Fixes:
* Avoid trailing slash in `pass grep`
* Account for $CLIP_TIME in messages
* revelation2pass, keepassx2pass, and other script improvements
* Fix .gpg extension in tree listings, and preserve colors
* Improved support for getopt on OSX
* Updates for zsh and fish completion autoloading
* Always preserve TTY for pinentry
* Only use encryption subkeys
* Better clip error messages
* No longer use hidden recipients
* 1.6.5 Changelog:
* Features:
* Support Gpg4win alongside Cygwin
* Bug Fixes:
* Work around unit tests bug with GnuPG 2.1.0 and 2.1.1
* Manually migrate unit tests keys to GnuPG 2.1 series
* Restore support for GnuPG 2.0 series
- Add a few builddeps so that we don't own the dirs of the completion files
- Version bump 1.6.3 (no upstream changelog)
- Upstream added tests, enable them in the package (added according Build deps)
- New subpackage password-store-dmenu, that adds passmenu binary
It is a dmenu interface to pass
- Installation of completion files is fully and properly handled by the Makefile
- Depend on tree 1.7.0
- Version bump 1.5.0 (no upstream changelog)
- (not updating to 1.6.3 yet because it requires tree 1.7.0)
- fix installation of completion files (based on 1.6.3 Makefile)
- spec-cleaner
- Fix formatting
- Fix previous commit: Properly rename zsh completion file to _pass
- Rename zsh completion file to _zsh in order to make it detectable by zsh
- Add dependencies
- Initial commit of password-store package, version 1.4.2


Leap Reviewbot's avatar

openSUSE:Factory/password-store@9 -> openSUSE:Leap:15.1/password-store

expected origin is 'openSUSE:Factory' (unchanged)

perfect. the submitted sources are in or accepted for Factory

Request History
Markos Chandras's avatar

markoschandras created request

- Update to 1.7.3 (bugfix release)
* Simplify filename matching in redact_pass.vim
* Do not put passwords in herestrings
* Do not set foreground color for generated password
* Add custom bash completion for extensions
* show: do not store binary data in bash vars
- Use noun phrase in summary. Fix double meaning of "pass".
- Update to 1.7.2
* Large number of bug fixes
* Fixed the signature verification routine that parses the output of GnuPG.
Previously, it was prone to spoofing of file signatures and allowed
attackers to inject additional encryption keys (bsc#1097774
CVE-2018-12356).
- Applied spec-cleaner
- Version bump 1.7.1
* Bug Fixes
* Add compatibility with GnuPG 2.2.19
* Uniformly use the $GPG variable
* Do the correct thing with subkeys when reencrypting
* Fix test suite on OS X
- Drop password-store-gpg-2.1.patch
* merged in 6f867674272a03273212259b9039c9356a6ed90
- clean spec file with spec-cleaner
- use %make_install macro
- Update password-store-gpg-2.1.patch to upstream version done
by Andreas Stieger
- Version bump 1.7
* Features
* Extensions: pass can now load user-defined extensions from a system
directory or a user directory. There's already a nice ecosystem of
extensions being built, even at this early stage. See the pass man page for
more information.
* Signatures: there is now an option to enforce signatures of the .gpg-id file
and extensions using an environment variable.
* QRCodes: generate and show have now learned the --qrcode/-q switch. Note to
package maintainers: this adds a dependency on the popular qrencode package.
* Password generation: rather than use pwgen, we now use /dev/urandom more
directly, which results in more assured password security, as well as
customizable character sets, via an environment variable. See the pass man
page for more information on this customization. Package maintainers: you
may now drop the dependency on pwgen.
* Importers: there now are several more importers. More and more folks are
moving to pass!
* Selectable clipping: you can now specify which line you wish to copy to the
clipboard or display with a qrcode when using -c or -q.
* Git discovery: The PASSWORD_STORE_GIT environment variable has been removed,
and instead pass will automatically choose the git repository closest to the
file being modified (but not out of the actual password store itself). This
should help people who like to nest git repos for different organizations.
* Bug fixes: too many to count.
- New dependency qrencode
- Make pwgen a recommended tool
- Add patch password-store-gpg-2.1.patch to be able to handle new gpg behaviour
boo#1028867
- Add conditionals on dependencies that don't exist on older distros
- Disable tests in older distros where the dependencies don't satisfy them
- Version bump 1.6.5:
* 1.6.4 Changelog:
* Features:
* "add" is an alias of "insert"
* `pass edit` will no longer make a commit if the password does not change
* Symbolic links are now followed
* Remove gpg agent check, due to the auto-starting gpg-agent in GnuPG 2.1
* Bug Fixes:
* Avoid trailing slash in `pass grep`
* Account for $CLIP_TIME in messages
* revelation2pass, keepassx2pass, and other script improvements
* Fix .gpg extension in tree listings, and preserve colors
* Improved support for getopt on OSX
* Updates for zsh and fish completion autoloading
* Always preserve TTY for pinentry
* Only use encryption subkeys
* Better clip error messages
* No longer use hidden recipients
* 1.6.5 Changelog:
* Features:
* Support Gpg4win alongside Cygwin
* Bug Fixes:
* Work around unit tests bug with GnuPG 2.1.0 and 2.1.1
* Manually migrate unit tests keys to GnuPG 2.1 series
* Restore support for GnuPG 2.0 series
- Add a few builddeps so that we don't own the dirs of the completion files
- Version bump 1.6.3 (no upstream changelog)
- Upstream added tests, enable them in the package (added according Build deps)
- New subpackage password-store-dmenu, that adds passmenu binary
It is a dmenu interface to pass
- Installation of completion files is fully and properly handled by the Makefile
- Depend on tree 1.7.0
- Version bump 1.5.0 (no upstream changelog)
- (not updating to 1.6.3 yet because it requires tree 1.7.0)
- fix installation of completion files (based on 1.6.3 Makefile)
- spec-cleaner
- Fix formatting
- Fix previous commit: Properly rename zsh completion file to _pass
- Rename zsh completion file to _zsh in order to make it detectable by zsh
- Add dependencies
- Initial commit of password-store package, version 1.4.2


Factory Auto's avatar

factory-auto added repo-checker as a reviewer

Please review build success


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Leap Reviewbot's avatar

leaper added leap-reviewers as a reviewer


Leap Reviewbot's avatar

leaper accepted review

ok


Staging Bot's avatar

staging-bot added as a reviewer

Being evaluated by staging project "openSUSE:Leap:15.1:Staging:adi:21"


Staging Bot's avatar

staging-bot accepted review

Picked openSUSE:Leap:15.1:Staging:adi:21


Repo Checker's avatar

repo-checker accepted review

cycle and install check passed


Max Lin's avatar

mlin7442 accepted review

ok


Staging Bot's avatar

staging-bot accepted review

ready to accept


Staging Bot's avatar

staging-bot approved review

ready to accept


Yuchen Lin's avatar

maxlin_factory accepted request

Accept to openSUSE:Leap:15.1

openSUSE Build Service is sponsored by