From fa10700ff66d81926ca346db01640dde407fdc5b Mon Sep 17 00:00:00 2001 From: "Ankur Sinha (Ankur Sinha Gmail)" Date: Wed, 4 Mar 2026 11:32:58 +0000 Subject: [PATCH] fix: regenerate with updated vendored crates (fixes rh#2438090, rh#2438156 rh#2444169, rh#2444179, rh#2444189) Updated versions fix a number of CVEs as noted --- create-vendored-tarball.sh | 1 + sources | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/create-vendored-tarball.sh b/create-vendored-tarball.sh index d981ad5..2f5d464 100755 --- a/create-vendored-tarball.sh +++ b/create-vendored-tarball.sh @@ -18,6 +18,7 @@ echo "Creating vendored tarball for ${PACKAGE} version ${VERSION}" tar -xvf "${PACKAGE}-${VERSION}.tar.gz" pushd "${PACKAGE}-${VERSION}" + rm Cargo.lock -f cargo vendor --versioned-dirs tar -Jcvf ../"${PACKAGE}-${VERSION}-vendored.tar.xz" vendor/ popd diff --git a/sources b/sources index 92e999f..5bd2475 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ SHA512 (task-3.4.2.tar.gz) = e784d057e30d85de3a1d920a7272cc94739c34d1901664a45d60eb065b51f4e6b0c1478f3c442b7a88d7c9b194c37c9cc9cbee97cd73bfd294a415deb6d8aac6 -SHA512 (task-3.4.2-vendored.tar.xz) = 437b209f8198fc78fa1376598c263e1cc2b6f8c8fd5e3f7fcbff27721fe19d2a7e61079c67fa77d3049502760df4c86bdccbbaed6ceee69cb90a22582d73b35d +SHA512 (task-3.4.2-vendored.tar.xz) = d9ed9739de8afae723aa7c7601f9e08b93696bdf8b3f77268ff24dd8cc4dd46d1c2bcaf3a0f18dcc545ec6ae0804af3c03286502b955cbf783dcb956e01f94d3