Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package grype for openSUSE:Factory checked in at 2026-04-23 17:07:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/grype (Old) and /work/SRC/openSUSE:Factory/.grype.new.11940 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grype" Thu Apr 23 17:07:45 2026 rev:120 rq:1348858 version:0.111.1 Changes: -------- --- /work/SRC/openSUSE:Factory/grype/grype.changes 2026-04-11 22:30:36.454779252 +0200 +++ /work/SRC/openSUSE:Factory/.grype.new.11940/grype.changes 2026-04-23 17:11:59.778916665 +0200 @@ -1,0 +2,41 @@ +Thu Apr 23 05:24:37 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.111.1: + * Bug Fixes + - apply overlap by ownership removal to dynamically created + relationships [#3363 @kzantow] + - compare mismatched package / db versions [#3372 @kzantow] + - Grype doesn't recognize debian component when "group" : + "debian" is specified [#2967] + - HelpURI missing information in SARIF output [#2874 #3351 + @will-bates11] + * Dependencies + - chore(deps): update anchore dependencies (#3387) + - chore(deps): update anchore dependencies (#3383) + - chore(deps): update quality gate database (#3338) + - chore(deps): update anchore dependencies (#3381) + - chore(deps): update Go version (#3382) + - chore(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to + 5.18.0 (#3378) + - chore(deps): bump actions/upload-artifact (#3375) + - chore(deps): bump the go-minor-patch group with 3 updates + (#3374) + - chore(deps): update Go version (#3367) + - chore(deps): bump actions/download-artifact from 4.1.9 to + 8.0.1 (#3342) + - chore(deps): bump github.com/go-git/go-git/v5 from 5.17.0 to + 5.17.1 (#3325) + - chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to + 4.1.4 (#3347) + - chore(deps): bump github.com/openvex/go-vex (#3365) + - chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 + (#3357) + - chore(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to + 1.43.0 (#3358) + - chore(deps): bump the actions-minor-patch group across 1 + directory with 3 updates (#3361) + - chore(deps): bump github.com/hashicorp/go-getter from 1.8.5 + to 1.8.6 (#3362) + - chore(deps): update anchore dependencies (#3364) + +------------------------------------------------------------------- Old: ---- grype-0.111.0.obscpio New: ---- grype-0.111.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ grype.spec ++++++ --- /var/tmp/diff_new_pack.kYe8T9/_old 2026-04-23 17:12:05.303140167 +0200 +++ /var/tmp/diff_new_pack.kYe8T9/_new 2026-04-23 17:12:05.315140652 +0200 @@ -17,7 +17,7 @@ Name: grype -Version: 0.111.0 +Version: 0.111.1 Release: 0 Summary: A vulnerability scanner for container images and filesystems License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.kYe8T9/_old 2026-04-23 17:12:05.415144698 +0200 +++ /var/tmp/diff_new_pack.kYe8T9/_new 2026-04-23 17:12:05.435145507 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/grype</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.111.0</param> + <param name="revision">v0.111.1</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.kYe8T9/_old 2026-04-23 17:12:05.483147450 +0200 +++ /var/tmp/diff_new_pack.kYe8T9/_new 2026-04-23 17:12:05.487147611 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/anchore/grype</param> - <param name="changesrevision">1f19355a7ee2d7e2bd58da6255bdeb618eb0c0d1</param></service></servicedata> + <param name="changesrevision">89819276e8ebf63b4f607ca3a1b0faa3fc75f28d</param></service></servicedata> (No newline at EOF) ++++++ grype-0.111.0.obscpio -> grype-0.111.1.obscpio ++++++ ++++ 3459 lines of diff (skipped) ++++++ grype.obsinfo ++++++ --- /var/tmp/diff_new_pack.kYe8T9/_old 2026-04-23 17:12:27.636051758 +0200 +++ /var/tmp/diff_new_pack.kYe8T9/_new 2026-04-23 17:12:27.644052087 +0200 @@ -1,5 +1,5 @@ name: grype -version: 0.111.0 -mtime: 1775682860 -commit: 1f19355a7ee2d7e2bd58da6255bdeb618eb0c0d1 +version: 0.111.1 +mtime: 1776876661 +commit: 89819276e8ebf63b4f607ca3a1b0faa3fc75f28d ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/grype/vendor.tar.gz /work/SRC/openSUSE:Factory/.grype.new.11940/vendor.tar.gz differ: char 13, line 1
