Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package grype for openSUSE:Factory checked in at 2026-10-20 12:43:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/grype (Old) and /work/SRC/openSUSE:Factory/.grype.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grype" Tue Oct 20 12:43:25 2026 rev:132 rq:1386423 version:0.121.0 Changes: -------- --- /work/SRC/openSUSE:Factory/grype/grype.changes 2026-10-07 19:33:57.247020498 +0200 +++ /work/SRC/openSUSE:Factory/.grype.new.3698736/grype.changes 2026-10-20 12:43:33.038617523 +0200 @@ -1,0 +2,97 @@ +Tue Oct 20 07:04:17 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.121.0: + * Added Features + - OS End of life warnings should account for SupportEnd date + from the distro release information [Issue #3230] [PR #3787] + - Licensing: copyright owner missing, needed for Debian + packaging [Issue #3501] [PR #3791] + * Bug Fixes + - fix(db-build) allow configuring sqlite cache size at db build + time [PR #3814] + - Carry AlmaLinux fix dates onto replaced RHEL matches [PR + #3773] + - carry fix availability through extended support fix merging + [PR #3809] + - upgrade to golang.org/x/net v0.61.0 [PR #3802] + - Swift Package Manager packages miss GitHub Swift advisories + (searched by identity, not repository path) [Issue #3795] [PR + #3713] + * Additional Changes + - bump go-make module and action together [PR #3793] + * Dependencies + 50 dependency changes (47 updated, 1 added, 2 removed). 5 + vulnerabilities remediated. + * 🟢 Remediated (5) + - GO-2026-6603 (High) — golang.org/x/net + - GO-2026-6610 (High) — golang.org/x/net + - GO-2026-6611 (High) — golang.org/x/net + - GO-2026-6612 (Critical) — golang.org/x/net + - GO-2026-6617 (High) — golang.org/x/net + * Updated (47 packages) + - cloud.google.com/go/auth v0.23.2 → v0.23.3 + - cloud.google.com/go/compute/metadata v0.9.0 → v0.9.1 + - cloud.google.com/go/storage v1.65.1 → v1.68.0 + - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp + v1.33.0 → v1.34.0 + - github.com/anchore/syft v1.54.1 → v1.55.0 + - github.com/aws/aws-sdk-go-v2 v1.44.0 → v1.47.1 + - github.com/aws/aws-sdk-go-v2/config v1.32.40 → v1.33.6 + - github.com/aws/aws-sdk-go-v2/credentials v1.19.39 → v1.20.6 + - github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.40 → + v1.20.1 + - github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.40 → + v1.5.4 + - github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.40 → + v2.8.4 + - github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.41 → v1.5.4 + - github.com/aws/aws-sdk-go-v2/service/internal/checksum + v1.10.0 → v1.11.5 + - github.com/aws/aws-sdk-go-v2/service/internal/presigned-url + v1.13.40 → v1.14.4 + - github.com/aws/aws-sdk-go-v2/service/internal/s3shared + v1.19.41 → v1.20.4 + - github.com/aws/aws-sdk-go-v2/service/s3 v1.108.0 → v1.114.0 + - github.com/aws/aws-sdk-go-v2/service/signin v1.6.0 → v1.10.1 + - github.com/aws/aws-sdk-go-v2/service/sso v1.34.0 → v1.38.1 + - github.com/aws/aws-sdk-go-v2/service/ssooidc v1.39.0 → + v1.43.1 + - github.com/aws/aws-sdk-go-v2/service/sts v1.46.0 → v1.51.1 + - github.com/github/go-spdx/v2 v2.7.0 → v2.7.1 + - github.com/go-git/go-billy/v5 v5.9.1 → v5.9.2 + - github.com/go-git/go-git/v5 v5.19.2 → v5.19.3 + - github.com/google/s2a-go v0.1.9 → v0.1.10 + - github.com/googleapis/enterprise-certificate-proxy v0.3.20 → + v0.3.22 + - github.com/googleapis/gax-go/v2 v2.24.0 → v2.24.1 + - github.com/gookit/color v1.6.1 → v1.6.2 + - github.com/gpustack/gguf-parser-go v0.26.3 → v0.26.4 + - github.com/hashicorp/go-getter v1.8.9 → v1.8.10 + - github.com/pb33f/ordered-map/v2 v2.3.1 → v2.3.2 + - github.com/pjbgf/sha1cd v0.6.0 → v0.7.0 + - github.com/spiffe/go-spiffe/v2 v2.7.0 → v2.8.1 + - golang.org/x/crypto v0.57.0 → v0.58.0 + - golang.org/x/net v0.59.0 → v0.61.0 (remediated + GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, + GO-2026-6617) + - golang.org/x/oauth2 v0.36.0 → v0.37.0 + - golang.org/x/sync v0.23.0 → v0.24.0 + - golang.org/x/sys v0.48.0 → v0.49.0 + - golang.org/x/term v0.46.0 → v0.47.0 + - golang.org/x/text v0.42.0 → v0.43.0 + - golang.org/x/tools v0.50.0 → v0.51.0 + - google.golang.org/api v0.294.0 → v0.299.0 + - google.golang.org/genproto/googleapis/rpc v0.0.0-da73d73 → + v0.0.0-b142276 + - google.golang.org/grpc v1.83.2 → v1.84.0 + - modernc.org/cc/v4 v4.29.2 → v4.29.7 + - modernc.org/ccgo/v4 v4.35.0 → v4.36.1 + - modernc.org/libc v1.75.7 → v1.77.1 + - modernc.org/sqlite v1.59.0 → v1.60.1 + * Added (1 package) + - github.com/pb33f/go-yaml v0.1.0 + * Removed (2 packages) + - github.com/klauspost/cpuid/v2 v2.3.0 + - go.yaml.in/yaml/v4 v4.0.0-rc.2 + +------------------------------------------------------------------- Old: ---- grype-0.120.1.obscpio New: ---- grype-0.121.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ grype.spec ++++++ --- /var/tmp/diff_new_pack.lsi9Ou/_old 2026-10-20 12:43:40.517930413 +0200 +++ /var/tmp/diff_new_pack.lsi9Ou/_new 2026-10-20 12:43:40.519930497 +0200 @@ -17,7 +17,7 @@ Name: grype -Version: 0.120.1 +Version: 0.121.0 Release: 0 Summary: A vulnerability scanner for container images and filesystems License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.lsi9Ou/_old 2026-10-20 12:43:40.560932212 +0200 +++ /var/tmp/diff_new_pack.lsi9Ou/_new 2026-10-20 12:43:40.565932421 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/grype.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v0.120.1</param> + <param name="revision">refs/tags/v0.121.0</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.lsi9Ou/_old 2026-10-20 12:43:40.593933592 +0200 +++ /var/tmp/diff_new_pack.lsi9Ou/_new 2026-10-20 12:43:40.596933718 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/anchore/grype</param> <param name="changesrevision">fa8b7e2a528cf1f8b098123f256c61db9e5df69c</param></service><service name="tar_scm"> <param name="url">https://github.com/anchore/grype.git</param> - <param name="changesrevision">6f8d854af29d3a3086b11a84afa51554a2a245fe</param></service></servicedata> + <param name="changesrevision">afe2742527d98d822da06c9f32eed86fe3d193e0</param></service></servicedata> (No newline at EOF) ++++++ grype-0.120.1.obscpio -> grype-0.121.0.obscpio ++++++ ++++ 3400 lines of diff (skipped) ++++++ grype.obsinfo ++++++ --- /var/tmp/diff_new_pack.lsi9Ou/_old 2026-10-20 12:43:46.908197743 +0200 +++ /var/tmp/diff_new_pack.lsi9Ou/_new 2026-10-20 12:43:46.911197869 +0200 @@ -1,5 +1,5 @@ name: grype -version: 0.120.1 -mtime: 1791304928 -commit: 6f8d854af29d3a3086b11a84afa51554a2a245fe +version: 0.121.0 +mtime: 1792438632 +commit: afe2742527d98d822da06c9f32eed86fe3d193e0 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/grype/vendor.tar.gz /work/SRC/openSUSE:Factory/.grype.new.3698736/vendor.tar.gz differ: char 135, line 2
