Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package trivy for openSUSE:Factory checked in at 2026-08-22 21:35:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/trivy (Old) and /work/SRC/openSUSE:Factory/.trivy.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "trivy" Sat Aug 22 21:35:07 2026 rev:100 rq:1372939 version:0.74.0 Changes: -------- --- /work/SRC/openSUSE:Factory/trivy/trivy.changes 2026-08-06 16:27:47.956155969 +0200 +++ /work/SRC/openSUSE:Factory/.trivy.new.1258/trivy.changes 2026-08-22 21:37:16.481646014 +0200 @@ -1,0 +2,31 @@ +Fri Aug 21 20:33:00 UTC 2026 - Dirk Müller <[email protected]> + +- Update to version 0.74.0: + * release: v0.74.0 [main] (#11037) + * chore(deps): update golang.org/x modules (#11094) + * chore(deps): bump the docker group with 2 updates (#11090) + * docs: update release branch ruleset instructions (#11093) + * chore(deps): bump the common group across 1 directory with 7 updates (#11086) + * fix(misconf): unmark cty values outside the evaluation context (#11078) + * chore(deps): bump the aws group across 1 directory with 6 updates (#11053) + * fix(misconf): parse Azure flexible server parameters under their own names (#11072) + * chore(deps): bump the docker group with 2 updates (#11054) + * feat: add RapidFort curated image scanner (#10452) + * feat(java): resolve JAR license URLs to SPDX IDs (Bundle-License, pom <url>) (#10948) + * refactor(misconf): remove unused Azure expression-related code (#10637) + * fix(server): preserve check aliases and query in uploaded blobs (#11080) + * fix(java): read artifact properties only from the MANIFEST.MF main section (#11066) + * fix(terraform): support OpenTofu language block (#10923) + * chore(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 (#11063) + * ci: trigger Auto Ready for Review after Test docs (#11045) + * docs: remove trivy-checks from AWS ECR locations (#11044) + * refactor(ubuntu): move EOL version resolution out of loop (#11047) + * fix(python): normalize dependency names in PEP 621 pyproject.toml (#11050) + * chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#11042) + * chore(deps): bump github.com/nikolalohinski/gonja/v2 to v2.9.0 (#11038) + * fix(terraform): avoid panic when for_each local has unknown object values (#11019) + * chore(deps): bump the github-actions group across 2 directories with 15 updates (#11028) + * ci(spdx): migrate to Slack notifications (#11032) + * ci(helm): bump Trivy version to 0.73.0 for Trivy Helm Chart 0.25.0 (#11034) + +------------------------------------------------------------------- @@ -4 +35,2 @@ -- Update to version 0.73.0: +- Update to version 0.73.0 (bsc#1276128, + CVE-2026-72817,CVE-2026-72815,CVE-2026-72816): Old: ---- trivy-0.73.0.tar.zst New: ---- trivy-0.74.0.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ trivy.spec ++++++ --- /var/tmp/diff_new_pack.gGYWSW/_old 2026-08-22 21:37:17.851694988 +0200 +++ /var/tmp/diff_new_pack.gGYWSW/_new 2026-08-22 21:37:17.853695059 +0200 @@ -17,7 +17,7 @@ Name: trivy -Version: 0.73.0 +Version: 0.74.0 Release: 0 Summary: A Simple and Comprehensive Vulnerability Scanner for Containers License: Apache-2.0 ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.gGYWSW/_old 2026-08-22 21:37:17.892696453 +0200 +++ /var/tmp/diff_new_pack.gGYWSW/_new 2026-08-22 21:37:17.895696561 +0200 @@ -1,5 +1,5 @@ -mtime: 1785938100 -commit: ea75264404375586909936211adb85e5d65dff9cf154511f914fd8eb831974fa +mtime: 1787345015 +commit: 05528bb27a2dfb5e599462508ae2c388190eb299b0ae8b4488bf97d628b6fb92 url: https://src.opensuse.org/dirkmueller/trivy.git revision: factory ++++++ _service ++++++ --- /var/tmp/diff_new_pack.gGYWSW/_old 2026-08-22 21:37:17.919697418 +0200 +++ /var/tmp/diff_new_pack.gGYWSW/_new 2026-08-22 21:37:17.921697490 +0200 @@ -2,7 +2,7 @@ <service name="tar_scm" mode="manual"> <param name="url">https://github.com/aquasecurity/trivy</param> <param name="scm">git</param> - <param name="revision">v0.73.0</param> + <param name="revision">v0.74.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.gGYWSW/_old 2026-08-22 21:37:17.942698241 +0200 +++ /var/tmp/diff_new_pack.gGYWSW/_new 2026-08-22 21:37:17.945698348 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/aquasecurity/trivy</param> - <param name="changesrevision">40c73e5d6166dcc0346a1ab4e94499d1572854e4</param></service></servicedata> + <param name="changesrevision">e1fd17a0ea4a8cf24bc4b4dd7e2cfbf4bb31b994</param></service></servicedata> (No newline at EOF) ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-08-21 22:43:35.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ trivy-0.73.0.tar.zst -> trivy-0.74.0.tar.zst ++++++ /work/SRC/openSUSE:Factory/trivy/trivy-0.73.0.tar.zst /work/SRC/openSUSE:Factory/.trivy.new.1258/trivy-0.74.0.tar.zst differ: char 7, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/trivy/vendor.tar.zst /work/SRC/openSUSE:Factory/.trivy.new.1258/vendor.tar.zst differ: char 7, line 1
