Skip to content

Conversation

@octo-sts
Copy link
Contributor

@octo-sts octo-sts bot commented Aug 27, 2024

@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels Aug 27, 2024
@github-actions
Copy link
Contributor

Package nghttp2: Click to expand/collapse

Package nghttp2:
Modified: /usr/bin/h2load
Modified: /usr/bin/nghttp
Modified: /usr/bin/nghttpd
Modified: /usr/bin/nghttpx
Modified: /usr/share/doc/nghttp2/README.rst

Package nghttp2-dev: Click to expand/collapse

Package nghttp2-dev:
Modified: /usr/include/nghttp2/nghttp2.h
Modified: /usr/include/nghttp2/nghttp2ver.h
Modified: /usr/lib/libnghttp2.a
Modified: /usr/lib/pkgconfig/libnghttp2.pc

Package nghttp2-doc: Click to expand/collapse

Package nghttp2-doc:
Modified: /usr/share/man/man1/h2load.1
Modified: /usr/share/man/man1/nghttp.1
Modified: /usr/share/man/man1/nghttpd.1
Modified: /usr/share/man/man1/nghttpx.1

Package libnghttp2-14: Click to expand/collapse

Package libnghttp2-14:
Added: /usr/lib/libnghttp2.so.14.28.2
Deleted: /usr/lib/libnghttp2.so.14.28.1

bincapz found differences: Click to expand/collapse

Deleted: nghttp2-doc/var/lib/db/sbom/nghttp2-doc-1.62.1-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/d07dd91a540c7ec5c5c6302f5baa

Deleted: libnghttp2-14/var/lib/db/sbom/libnghttp2-14-1.62.1-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/20ae724ae7545cda354383d99bf3

Deleted: nghttp2-dev/var/lib/db/sbom/nghttp2-dev-1.62.1-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/970efa3ca3dc390b757bd2ad064e

Deleted: nghttp2/var/lib/db/sbom/nghttp2-1.62.1-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/728870a74ad01e6d7b7804674eee

Deleted: libnghttp2-14/usr/lib/libnghttp2.so.14.28.1 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/http/post submit content to websites HTTP
POST
http
-LOW compression/gzip works with gzip files gzip
-LOW encoding/base64 Supports base64 encoded strings base64
-LOW fs/file/delete deletes files unlink
-LOW net/http/auth makes HTTP requests with basic authentication www-authenticate
-LOW net/http2 Uses the HTTP/2 protocol HTTP/2

Added: nghttp2-dev/var/lib/db/sbom/nghttp2-dev-1.63.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/08bcf7f4ce3e277d04effae101f8

Added: nghttp2-doc/var/lib/db/sbom/nghttp2-doc-1.63.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/72367e939629ddc0e64ef9a2d521

Added: libnghttp2-14/usr/lib/libnghttp2.so.14.28.2 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/http/post submit content to websites HTTP
POST
http
+LOW compression/gzip works with gzip files gzip
+LOW encoding/base64 Supports base64 encoded strings base64
+LOW fs/file/delete deletes files unlink
+LOW net/http/auth makes HTTP requests with basic authentication www-authenticate
+LOW net/http2 Uses the HTTP/2 protocol HTTP/2

Added: libnghttp2-14/var/lib/db/sbom/libnghttp2-14-1.63.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/780cacbe033af6f3860566378d26

Added: nghttp2/var/lib/db/sbom/nghttp2-1.63.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/1457adc9dd3a2a0252c4a7dde2b4

@philroche
Copy link
Member

Changes summay:
Total files changed: 78

Total changes: 1915
Total additions: 1525
Total deletions: 390

Total commits: 67

GitHub compare URL: nghttp2/nghttp2@d13a575...8f44147

Copy link
Member

@philroche philroche left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a patch version bump.

All checks pass.

@philroche philroche merged commit 2e74111 into main Aug 27, 2024
@philroche philroche deleted the wolfictl-1a7760cc-08c2-424f-9d20-dfb628e56c96 branch August 27, 2024 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants