Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package syft for openSUSE:Factory checked in
at 2025-04-02 17:17:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/syft (Old)
and /work/SRC/openSUSE:Factory/.syft.new.1907 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "syft"
Wed Apr 2 17:17:32 2025 rev:95 rq:1266396 version:1.22.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/syft/syft.changes 2025-03-18
17:44:07.176619931 +0100
+++ /work/SRC/openSUSE:Factory/.syft.new.1907/syft.changes 2025-04-02
17:18:20.489880726 +0200
@@ -1,0 +2,50 @@
+Tue Apr 01 17:31:08 UTC 2025 - Johannes Kastl
<opensuse_buildserv...@ojkastl.de>
+
+- Update to version 1.22.0:
+ * Added Features
+ - Improve .NET package CPE generation [#3764 @wagoodman]
+ - Catalog deb archives directly [#3315 #3704 @popey]
+ * Bug Fixes
+ - Dotnet-Portable-Executable-Cataloger uses wrong component
+ version for dotnet runtime libraries [#3282 #3768 @wagoodman]
+ - Dotnet deps cataloger returns "wrong" dotnet-framework
+ dependencies and misses out on the runtime (for applications)
+ [#2347 #3768 @wagoodman]
+ - .NET deps.json should be considered as installation evidence
+ [#3570 #3563 @wagoodman]
+ - Dotnet PE binary cataloger is detecting false positives
+ [#3469 #3563 @wagoodman]
+ - Long Processing Time in dpkg-db-cataloger with all-layers
+ Option (Syft 1.20.0) [#3683 #3636 @kzantow]
+ * Dependencies
+ - chore(deps): update anchore dependencies (#3772)
+ - chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0
+ (#3766)
+ - chore(deps): bump 8398a7/action-slack from 3.16.2 to 3.18.0
+ (#3767)
+ - chore(deps): bump modernc.org/sqlite from 1.36.1 to 1.37.0
+ (#3771)
+ - chore(deps): update CPE dictionary index (#3769)
+ - chore(deps): bump github/codeql-action from 3.28.12 to
+ 3.28.13 (#3758)
+ - chore(deps): update CPE dictionary index (#3756)
+ - chore(deps): update tools to latest versions (#3747)
+ - chore(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2
+ (#3750)
+ - chore(deps): bump github.com/docker/docker (#3749)
+ - chore(deps): bump actions/cache from 4.2.2 to 4.2.3 (#3751)
+ - chore(deps): bump actions/cache in /.github/actions/bootstrap
+ (#3752)
+ - chore(deps): bump actions/setup-go in
+ /.github/actions/bootstrap (#3742)
+ - chore(deps): bump actions/setup-go from 5.3.0 to 5.4.0
+ (#3743)
+ - chore(deps): bump github/codeql-action from 3.28.11 to
+ 3.28.12 (#3744)
+ - chore(deps): bump github.com/BurntSushi/toml from 1.4.0 to
+ 1.5.0 (#3740)
+ - chore(deps): bump github.com/containerd/containerd from
+ 1.7.26 to 1.7.27 (#3738)
+ - chore(deps): update tools to latest versions (#3739)
+
+-------------------------------------------------------------------
Old:
----
syft-1.21.0.obscpio
New:
----
syft-1.22.0.obscpio
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ syft.spec ++++++
--- /var/tmp/diff_new_pack.XCmzNe/_old 2025-04-02 17:18:21.893939639 +0200
+++ /var/tmp/diff_new_pack.XCmzNe/_new 2025-04-02 17:18:21.893939639 +0200
@@ -17,7 +17,7 @@
Name: syft
-Version: 1.21.0
+Version: 1.22.0
Release: 0
Summary: CLI tool and library for generating a Software Bill of
Materials
License: Apache-2.0
++++++ _service ++++++
--- /var/tmp/diff_new_pack.XCmzNe/_old 2025-04-02 17:18:21.929941149 +0200
+++ /var/tmp/diff_new_pack.XCmzNe/_new 2025-04-02 17:18:21.929941149 +0200
@@ -3,7 +3,7 @@
<param name="url">https://github.com/anchore/syft</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
- <param name="revision">v1.21.0</param>
+ <param name="revision">v1.22.0</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="versionrewrite-pattern">v(.*)</param>
<param name="changesgenerate">enable</param>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.XCmzNe/_old 2025-04-02 17:18:21.953942157 +0200
+++ /var/tmp/diff_new_pack.XCmzNe/_new 2025-04-02 17:18:21.957942324 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/anchore/syft</param>
- <param
name="changesrevision">7bdbfc04781a18827c30a505d64a8671c9827bd7</param></service></servicedata>
+ <param
name="changesrevision">9ab83874ed21c07479d8eeddd88a6894e1ff8537</param></service></servicedata>
(No newline at EOF)
++++++ syft-1.21.0.obscpio -> syft-1.22.0.obscpio ++++++
++++ 22092 lines of diff (skipped)
++++++ syft.obsinfo ++++++
--- /var/tmp/diff_new_pack.XCmzNe/_old 2025-04-02 17:18:23.686014833 +0200
+++ /var/tmp/diff_new_pack.XCmzNe/_new 2025-04-02 17:18:23.690015001 +0200
@@ -1,5 +1,5 @@
name: syft
-version: 1.21.0
-mtime: 1742227153
-commit: 7bdbfc04781a18827c30a505d64a8671c9827bd7
+version: 1.22.0
+mtime: 1743516574
+commit: 9ab83874ed21c07479d8eeddd88a6894e1ff8537
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/syft/vendor.tar.gz
/work/SRC/openSUSE:Factory/.syft.new.1907/vendor.tar.gz differ: char 5, line 1
