{"old": "/home/jenkins/agent/workspace/multiarch/src-openeuler/aarch64/python-dulwich/old_rpms/", "new": "/home/jenkins/agent/workspace/multiarch/src-openeuler/aarch64/python-dulwich/new_rpms/", "compare_result": "not pass", "compare_details": {"same": {"same_details": {"old": [], "new": []}, "same_num": 0}, "diff": {"diff_details": {"python3-dulwich": {"name": {"old": "python3-dulwich-1.2.10-1.oe1.aarch64.rpm", "new": "python3-dulwich-1.2.12-1.oe1.aarch64.rpm"}, "RPM Level": "level4", "rpm requires": {}, "rpm provides": {}, "rpm files": {}, "rpm cmd": {}}}, "diff_num": 1}, "less": {"less_details": {}, "less_num": 0}, "more": {"more_details": {}, "more_num": 0}}, "pr_link": "https://gitcode.com/src-openeuler/python-dulwich/pull/55", "pr_changelog": "* Mon Jul 20 2026 jinshuaiyu <jinshuaiyu@kylinos.cn> - 1.2.12-1\n- update version to 1.2.12\n- SECURITY: Refuse to write a checkout entry whose leading path resolves\nthrough a symlink. `build_index_from_tree` (used by `reset_index` and\nthus by `clone`/`checkout`) materialized a tree in sorted order without\nchecking leading components, so a tree pairing a symlink `link` with a\ndescendant `link/foo` wrote `foo` through the link to an arbitrary\nabsolute path. The same `verify_leading_dirs` guard already used by\nporcelain and stash is now applied here.\n- Fix `Bundle.store_objects()` silently dropping every OFS_DELTA/REF_DELTA\nobject in the bundle's pack instead of resolving it, leaving the target\nobject store missing most objects with no error raised. Delta resolution\nnow goes through `PackInflater`, matching how packs are ingested\nelsewhere in the object store code.\n"}