Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package trivy for openSUSE:Factory checked in at 2026-10-20 12:36:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/trivy (Old) and /work/SRC/openSUSE:Factory/.trivy.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "trivy" Tue Oct 20 12:36:49 2026 rev:105 rq:1386087 version:0.76.0 Changes: -------- --- /work/SRC/openSUSE:Factory/trivy/trivy.changes 2026-10-02 23:07:57.165889418 +0200 +++ /work/SRC/openSUSE:Factory/.trivy.new.3698736/trivy.changes 2026-10-20 12:37:25.065251864 +0200 @@ -1,0 +2,28 @@ +Sun Oct 18 21:10:47 UTC 2026 - Dirk Müller <[email protected]> + +- Update to version 0.76.0 + (bsc#1285541, CVE-2026-78669, bsc#1284829, CVE-2026-19585): + * release: v0.76.0 [main] (#11379) + * chore(deps): pin zlib >= 1.3.2-r1 in container images to fix CVE-2026-85091 (#11407) + * fix(php): keep dependency edges to packages named like PHP extensions (#11051) + * ci: add scan/crypto label (#11405) + * ci: add component/vex label (#11397) + * fix(vex): avoid panic on CSAF advisory without a CVE (#10990) + * chore(deps): bump the common group across 1 directory with 12 updates (#11386) + * chore(deps): bump the github-actions group across 1 directory with 6 updates (#11338) + * chore(deps): bump the aws group across 1 directory with 6 updates (#11375) + * chore(deps): bump the docker group across 1 directory with 2 updates (#11373) + * chore(deps): bump golang.org/x/net from 0.59.0 to 0.60.0 (#11387) + * feat(vuln): extend RapidFort scanner to Debian, Oracle, Rocky, Alma, and Amazon (#11285) + * feat(crypto): report nominal security levels of algorithms (#11369) + * feat(crypto): distinguish DSA algorithms by L and N (#11366) + * chore(deps): bump trivy-checks (#11381) + * fix(echo): match +echo.N local segment anywhere in pip versions (#11367) + * feat(echo): support Echo Maven and npm package scanning (#10883) + * ci: bump golangci-lint to v2.14.0 (#11377) + * chore: add a custom vulnerability reporting form (#11356) + * test(spdx): pin schema validation to release tags (#11359) + * docs(kubernetes): fix --exclude-namespace flag name in scan example (#10935) + * ci(helm): bump Trivy version to 0.75.0 for Trivy Helm Chart 0.27.0 (#11334) + +------------------------------------------------------------------- Old: ---- trivy-0.75.0.tar.zst New: ---- trivy-0.76.0.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ trivy.spec ++++++ --- /var/tmp/diff_new_pack.SkmRdY/_old 2026-10-20 12:37:27.359348031 +0200 +++ /var/tmp/diff_new_pack.SkmRdY/_new 2026-10-20 12:37:27.364348241 +0200 @@ -17,7 +17,7 @@ Name: trivy -Version: 0.75.0 +Version: 0.76.0 Release: 0 Summary: A Simple and Comprehensive Vulnerability Scanner for Containers License: Apache-2.0 ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.SkmRdY/_old 2026-10-20 12:37:27.468352601 +0200 +++ /var/tmp/diff_new_pack.SkmRdY/_new 2026-10-20 12:37:27.481353146 +0200 @@ -1,5 +1,5 @@ -mtime: 1790948135 -commit: e02b89ef2fbc03e481239ed9ce53c5920230ad36c6538e7cb49da9a28c4447fb +mtime: 1792358657 +commit: 86aff1465bd1d37f97ff008f56cc12bcf342541aeba5d2c332ded58e68a6adac url: https://src.opensuse.org/dirkmueller/trivy.git revision: factory ++++++ _service ++++++ --- /var/tmp/diff_new_pack.SkmRdY/_old 2026-10-20 12:37:27.538355535 +0200 +++ /var/tmp/diff_new_pack.SkmRdY/_new 2026-10-20 12:37:27.548355954 +0200 @@ -2,7 +2,7 @@ <service name="tar_scm" mode="manual"> <param name="url">https://github.com/aquasecurity/trivy</param> <param name="scm">git</param> - <param name="revision">v0.75.0</param> + <param name="revision">v0.76.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> @@ -15,6 +15,7 @@ <param name="basename">trivy</param> </service> <service name="go_modules" mode="manual"> + <param name="replace">github.com/hashicorp/go-getter=github.com/hashicorp/[email protected]</param> <param name="compression">zst</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.SkmRdY/_old 2026-10-20 12:37:27.604358302 +0200 +++ /var/tmp/diff_new_pack.SkmRdY/_new 2026-10-20 12:37:27.610358553 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/aquasecurity/trivy</param> - <param name="changesrevision">591e9799316a602e703f0b484f6c6d7b234ec8f3</param></service></servicedata> + <param name="changesrevision">531360e5d2a88e732373f1614ba99a38738538b8</param></service></servicedata> (No newline at EOF) ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-18 23:24:17.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ trivy-0.75.0.tar.zst -> trivy-0.76.0.tar.zst ++++++ /work/SRC/openSUSE:Factory/trivy/trivy-0.75.0.tar.zst /work/SRC/openSUSE:Factory/.trivy.new.3698736/trivy-0.76.0.tar.zst differ: char 7, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/trivy/vendor.tar.zst /work/SRC/openSUSE:Factory/.trivy.new.3698736/vendor.tar.zst differ: char 7, line 1
