CVS commit: pkgsrc/security/keychain

["Paolo Vincenzo Olivo" <vins%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   vins
Date:           Sun Oct 12 05:25:16 UTC 2025

Modified Files:
        pkgsrc/security/keychain: Makefile distinfo

Log Message:
security/keychain: update to 2.9.6

Documentation/branding release (no functional code changes):

        * Updated references in wiki to reflect the new official home of
          Keychain at https://github.com/danielrobbins/keychain.
        * Consolidate historical references; retain only intentional archival
          note(s).

Additional release engineering improvements:

        * Add release automation helpers: Makefile release (create) and
          release-refresh (asset replace), plus scripts under scripts/ and
        * GitHub Actions workflow to build artifacts on tag push (staging
          only).
        * Add docs/release-steps.md to formalize release process (numeric tags
          only, assets: tarball, wrapper script, man page).
        * Orchestrated release flow (make release / make release-refresh) now
          enforces:

                - Mandatory CI (Debian container) artifact fetch for the tag.
                - Normalized comparisons:
                        > keychain – raw sha256.
                        > keychain.1 – raw sha256; on mismatch, re-compare with
                          Pod::Man first line stripped.
                        > Tarball – internal file list + per-file sha256 (man page
                          internally normalized) ignoring tar/gzip metadata.
                - If (and only if) all artifacts match (raw or normalized) CI
                  artifacts are used DIRECTLY for publication; local artifacts are
                  never overwritten (kept for audit).
                - Any real content mismatch aborts unless KEYCHAIN_FORCE_LOCAL=1
                  is explicitly set (single override; KEYCHAIN_ADOPT_CI removed).
                - Copy/paste diff command hints emitted on mismatch for rapid
                  investigation.
                - Asset path indirection via exported variables prevents local
                  file mutation, improving auditability.

        * Release notes body automatically extended with a Build Provenance
          table (sha256 for keychain and keychain.1) plus the tag commit SHA1.
        * Workflow continues to only stage artifacts; publication requires
          explicit maintainer action (no auto-release on tag push).


To generate a diff of this commit:
cvs rdiff -u -r1.44 -r1.45 pkgsrc/security/keychain/Makefile
cvs rdiff -u -r1.29 -r1.30 pkgsrc/security/keychain/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/keychain/Makefile
diff -u pkgsrc/security/keychain/Makefile:1.44 pkgsrc/security/keychain/Makefile:1.45
--- pkgsrc/security/keychain/Makefile:1.44      Sun Jun  1 18:41:25 2025
+++ pkgsrc/security/keychain/Makefile   Sun Oct 12 05:25:16 2025
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.44 2025/06/01 18:41:25 vins Exp $
+# $NetBSD: Makefile,v 1.45 2025/10/12 05:25:16 vins Exp $
 
-DISTNAME=      keychain-2.9.5
-PKGREVISION=   1
+DISTNAME=      keychain-2.9.6
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=funtoo/}
 

Index: pkgsrc/security/keychain/distinfo
diff -u pkgsrc/security/keychain/distinfo:1.29 pkgsrc/security/keychain/distinfo:1.30
--- pkgsrc/security/keychain/distinfo:1.29      Sun Jun  1 09:50:26 2025
+++ pkgsrc/security/keychain/distinfo   Sun Oct 12 05:25:16 2025
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.29 2025/06/01 09:50:26 vins Exp $
+$NetBSD: distinfo,v 1.30 2025/10/12 05:25:16 vins Exp $
 
-BLAKE2s (keychain-2.9.5.tar.gz) = 2137b9315bcda59d83fdf6f4870164de42cf39b850d82354f0444399a6050029
-SHA512 (keychain-2.9.5.tar.gz) = 4241a16449062b3365e1119788ab1e56eaadd7c239b5a5af03f644fb44494cc415774c1ba4d2a9ad1e6341892ddcbe4573cda6f986ecc8e5857cfbb2066ac5ac
-Size (keychain-2.9.5.tar.gz) = 42685 bytes
+BLAKE2s (keychain-2.9.6.tar.gz) = ca81882467df1dd5b19c3d6ead58394cbef264fbf8fc407487d7416d16b44294
+SHA512 (keychain-2.9.6.tar.gz) = c94d876bfabb2a660ee36bb47712b2ac8bf14e49841fbae94269aec224eed812510bed1cd795763f26b1192d9409380f18f41193a6baac5fa39ddb6331c91e87
+Size (keychain-2.9.6.tar.gz) = 51990 bytes
 SHA1 (patch-Makefile) = 3d41a10a50c360c1fb63dba4265ba369f6b4a772
 SHA1 (patch-keychain.sh) = 792bb3cd82e36a4b9d4ee48440333917c5ccfe4f