Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package syft for openSUSE:Factory checked in at 2026-10-08 11:56:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/syft (Old) and /work/SRC/openSUSE:Factory/.syft.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "syft" Thu Oct 8 11:56:00 2026 rev:135 rq:1383088 version:1.54.1 Changes: -------- --- /work/SRC/openSUSE:Factory/syft/syft.changes 2026-10-02 23:04:36.717477579 +0200 +++ /work/SRC/openSUSE:Factory/.syft.new.3698736/syft.changes 2026-10-08 11:58:44.490362277 +0200 @@ -1,0 +2,24 @@ +Wed Oct 07 05:01:42 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.54.1: + * Bug Fixes + - resolve packages.lock dependencies deterministically [PR + #5210 @spiffcs] + - Cannot produce attestation file from local podman image + [Issue #1664] [PR #5368 @Bru456] + * Dependencies + 9 dependency changes (9 updated). + - Updated (9 packages) + - github.com/anchore/go-rpmdb v0.2.0 → v0.2.2 + - github.com/anchore/stereoscope v0.3.3 → v0.3.4 + - github.com/docker/cli v29.8.1+incompatible → + v29.8.2+incompatible + - github.com/glebarez/go-sqlite v1.20.3 → v1.23.0 + - github.com/klauspost/compress v1.20.0 → v1.20.1 + - github.com/secure-systems-lab/go-securesystemslib v0.11.0 → + v0.11.1 + - github.com/sigstore/protobuf-specs v0.5.1 → v0.5.2 + - github.com/sigstore/sigstore v1.10.8 → v1.10.11 + - github.com/sylabs/sif/v2 v2.24.1 → v2.24.2 + +------------------------------------------------------------------- Old: ---- syft-1.54.0.obscpio New: ---- syft-1.54.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ syft.spec ++++++ --- /var/tmp/diff_new_pack.usn8ZC/_old 2026-10-08 11:58:46.137431145 +0200 +++ /var/tmp/diff_new_pack.usn8ZC/_new 2026-10-08 11:58:46.140431270 +0200 @@ -17,7 +17,7 @@ Name: syft -Version: 1.54.0 +Version: 1.54.1 Release: 0 Summary: CLI tool and library for generating a Software Bill of Materials License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.usn8ZC/_old 2026-10-08 11:58:46.195433570 +0200 +++ /var/tmp/diff_new_pack.usn8ZC/_new 2026-10-08 11:58:46.198433695 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/syft.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v1.54.0</param> + <param name="revision">refs/tags/v1.54.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.usn8ZC/_old 2026-10-08 11:58:46.223434741 +0200 +++ /var/tmp/diff_new_pack.usn8ZC/_new 2026-10-08 11:58:46.226434866 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/anchore/syft</param> <param name="changesrevision">b15c5dbfe2bb21c9d73002c1056a829c8c411c75</param></service><service name="tar_scm"> <param name="url">https://github.com/anchore/syft.git</param> - <param name="changesrevision">cc326e45a6213360266dda4b30cc68095946d676</param></service></servicedata> + <param name="changesrevision">b254e6d92f28c3868a755f62fb3ca8f26e9fee76</param></service></servicedata> (No newline at EOF) ++++++ syft-1.54.0.obscpio -> syft-1.54.1.obscpio ++++++ ++++ 3738 lines of diff (skipped) ++++++ syft.obsinfo ++++++ --- /var/tmp/diff_new_pack.usn8ZC/_old 2026-10-08 11:58:49.901588531 +0200 +++ /var/tmp/diff_new_pack.usn8ZC/_new 2026-10-08 11:58:49.907588782 +0200 @@ -1,5 +1,5 @@ name: syft -version: 1.54.0 -mtime: 1790881250 -commit: cc326e45a6213360266dda4b30cc68095946d676 +version: 1.54.1 +mtime: 1791297393 +commit: b254e6d92f28c3868a755f62fb3ca8f26e9fee76 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/syft/vendor.tar.gz /work/SRC/openSUSE:Factory/.syft.new.3698736/vendor.tar.gz differ: char 13, line 1
