Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package syft for openSUSE:Factory checked in at 2026-03-10 17:57:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/syft (Old) and /work/SRC/openSUSE:Factory/.syft.new.8177 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "syft" Tue Mar 10 17:57:29 2026 rev:120 rq:1337906 version:1.42.2 Changes: -------- --- /work/SRC/openSUSE:Factory/syft/syft.changes 2026-02-19 14:23:52.291946596 +0100 +++ /work/SRC/openSUSE:Factory/.syft.new.8177/syft.changes 2026-03-10 19:00:10.533520992 +0100 @@ -1,0 +2,36 @@ +Tue Mar 10 06:16:30 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.42.2: + * Bug Fixes + - [BUG] Incorrect Maven PURL generation: Automatic-Module-Name + should not be used as Maven groupId [#4611 #4642 @xnox] + - Checksum is 0 for spdx files [#2307 #4620 @ppalucha] + - Support grafana binary various versions [#4559 #4635 + @witchcraze] + * Additional Changes + - migrate fixtures to testdata [#4651 @wagoodman] + * Dependencies + - chore(deps): update anchore dependencies (#4631) + - chore(deps): update tools to latest versions (#4630) + - chore(deps): update SPDX license list (#4637) + - chore(deps): bump actions/download-artifact from 7.0.0 to + 8.0.0 (#4658) + - chore(deps): bump github.com/cloudflare/circl from 1.6.1 to + 1.6.3 (#4638) + - chore(deps): bump the actions-minor-patch group across 2 + directories with 2 updates (#4657) + - chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 + (#4659) + - chore(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to + 1.40.0 (#4646) + - chore(deps): update CPE dictionary index (#4647) + - chore(deps): bump the go-minor-patch group across 1 directory + with 5 updates (#4661) + - chore(deps): update CPE dictionary index (#4636) + - chore(deps): bump github/codeql-action (#4634) + - chore(deps): bump github.com/charmbracelet/bubbles from + 0.21.1 to 1.0.0 (#4633) + - chore(deps): bump the go-minor-patch group with 5 updates + (#4632) + +------------------------------------------------------------------- Old: ---- syft-1.42.1.obscpio New: ---- syft-1.42.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ syft.spec ++++++ --- /var/tmp/diff_new_pack.Dw8c5M/_old 2026-03-10 19:00:16.745775214 +0100 +++ /var/tmp/diff_new_pack.Dw8c5M/_new 2026-03-10 19:00:16.749775378 +0100 @@ -17,7 +17,7 @@ Name: syft -Version: 1.42.1 +Version: 1.42.2 Release: 0 Summary: CLI tool and library for generating a Software Bill of Materials License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Dw8c5M/_old 2026-03-10 19:00:16.801777506 +0100 +++ /var/tmp/diff_new_pack.Dw8c5M/_new 2026-03-10 19:00:16.813777997 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/syft</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v1.42.1</param> + <param name="revision">v1.42.2</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Dw8c5M/_old 2026-03-10 19:00:16.845779307 +0100 +++ /var/tmp/diff_new_pack.Dw8c5M/_new 2026-03-10 19:00:16.849779471 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/anchore/syft</param> - <param name="changesrevision">0a3f7bb06ee168495ee54b8b66fccb22a056fe99</param></service></servicedata> + <param name="changesrevision">75455f050ab028977a6b625165e2ad3644fcc845</param></service></servicedata> (No newline at EOF) ++++++ syft-1.42.1.obscpio -> syft-1.42.2.obscpio ++++++ ++++ 997429 lines of diff (skipped) ++++++ syft.obsinfo ++++++ --- /var/tmp/diff_new_pack.Dw8c5M/_old 2026-03-10 19:00:28.598260250 +0100 +++ /var/tmp/diff_new_pack.Dw8c5M/_new 2026-03-10 19:00:28.602260414 +0100 @@ -1,5 +1,5 @@ name: syft -version: 1.42.1 -mtime: 1771367555 -commit: 0a3f7bb06ee168495ee54b8b66fccb22a056fe99 +version: 1.42.2 +mtime: 1773079853 +commit: 75455f050ab028977a6b625165e2ad3644fcc845 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/syft/vendor.tar.gz /work/SRC/openSUSE:Factory/.syft.new.8177/vendor.tar.gz differ: char 15, line 1
