Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package trivy for openSUSE:Factory checked in at 2026-05-20 15:24:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/trivy (Old) and /work/SRC/openSUSE:Factory/.trivy.new.1966 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "trivy" Wed May 20 15:24:19 2026 rev:88 rq:1354091 version:0.70.0 Changes: -------- --- /work/SRC/openSUSE:Factory/trivy/trivy.changes 2026-04-28 12:01:36.902583722 +0200 +++ /work/SRC/openSUSE:Factory/.trivy.new.1966/trivy.changes 2026-05-20 15:25:08.515673867 +0200 @@ -1,0 +2,5 @@ +Tue May 12 09:06:28 UTC 2026 - Dirk Müller <[email protected]> + +- update go-git to 5.18.0 (bsc#1264873, CVE-2026-41506) + +------------------------------------------------------------------- @@ -8,0 +14 @@ + bsc#1265648, CVE-2026-33814, @@ -196,0 +203,8 @@ +Mon Dec 29 09:58:28 UTC 2025 - Dirk Müller <[email protected]> + +- Update to version 0.68.2: + * release: v0.68.2 [release/v0.68] (#9950) + * fix(deps): bump alpine from `3.22.1` to `3.23.0` [backport: release/v0.68] (#9949) + * ci: enable `check-latest` for `setup-go` [backport: release/v0.68] (#9946) + +------------------------------------------------------------------- @@ -199 +213,4 @@ -- Update to version 0.68.1: +- Update to version 0.68.1 (bsc#1251363, CVE-2025-47911, + bsc#1251547, CVE-2025-58190, bsc#1253512, CVE-2025-47913, + bsc#1253512, CVE-2025-47913, bsc#1253786, CVE-2025-58181, + bsc#1253977, CVE-2025-47914): ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.rHrBoc/_old 2026-05-20 15:25:10.163741777 +0200 +++ /var/tmp/diff_new_pack.rHrBoc/_new 2026-05-20 15:25:10.167741941 +0200 @@ -1,5 +1,5 @@ -mtime: 1777280877 -commit: 3195ae06ff16ec640a44ede4654dacc57f7c059c133c3558c50982900b9f3372 +mtime: 1779221750 +commit: 36dc14c1fdc0678c515b2c0a6587260727c866499021d343eb5399f64551c609 url: https://src.opensuse.org/dirkmueller/trivy.git revision: factory ++++++ _service ++++++ --- /var/tmp/diff_new_pack.rHrBoc/_old 2026-05-20 15:25:10.231744578 +0200 +++ /var/tmp/diff_new_pack.rHrBoc/_new 2026-05-20 15:25:10.255745567 +0200 @@ -16,6 +16,7 @@ </service> <service name="go_modules" mode="manual"> <param name="compression">zst</param> + <param name="replace">github.com/go-git/go-git/v5=github.com/go-git/go-git/[email protected]</param> </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-05-19 22:15:50.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/trivy/vendor.tar.zst /work/SRC/openSUSE:Factory/.trivy.new.1966/vendor.tar.zst differ: char 7, line 1
