Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package grype for openSUSE:Factory checked in at 2022-11-19 18:09:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/grype (Old) and /work/SRC/openSUSE:Factory/.grype.new.1597 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grype" Sat Nov 19 18:09:45 2022 rev:12 rq:1036801 version:0.53.0 Changes: -------- --- /work/SRC/openSUSE:Factory/grype/grype.changes 2022-10-18 12:45:58.473856879 +0200 +++ /work/SRC/openSUSE:Factory/.grype.new.1597/grype.changes 2022-11-19 18:09:57.134652630 +0100 @@ -1,0 +2,27 @@ +Sat Nov 19 12:05:00 UTC 2022 - ka...@b1-systems.de + +- Update to version 0.53.0: + * chore: bump syft version v0.62.0 (#1000) + * feat: vulnerability namespacing support for rolling distros (#997) + * chore: bump quality gate images and label data (#995) + * feat: add strong distro type for wolfi (#996) + * chore: pin dependencies (#994) + * chore: code-ql top level read check (#993) + * Add SECURITY.md (#989) + * chore: update codeql to pinned v2 with correct write permissions + * Update token permissions to be read-only (#988) + * Enable the Scorecard Github Action and badge (#929) + +------------------------------------------------------------------- +Tue Nov 15 15:42:37 UTC 2022 - ka...@b1-systems.de + +- Update to version 0.52.0: + * chore: update syft to v0.60.3 (#978) + * feat: consider well-known false-positive generating CPE target SW components in match filtering logic (#961) + * chore: grype quality pipeline latest label updates and images (#976) + * Implemented new CLI flag: --show-suppressed (#966) + * fix: update case for alpine:edge correct vuln feed (#965) + * PURL input results in incorrect artifact in JSON output (#968) + * Update grype bootstrap tools to latest versions. (#956) + +------------------------------------------------------------------- Old: ---- grype-0.51.0.tar.gz New: ---- grype-0.53.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ grype.spec ++++++ --- /var/tmp/diff_new_pack.q64iOE/_old 2022-11-19 18:09:58.666661289 +0100 +++ /var/tmp/diff_new_pack.q64iOE/_new 2022-11-19 18:09:58.670661312 +0100 @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: grype -Version: 0.51.0 +Version: 0.53.0 Release: 0 Summary: A vulnerability scanner for container images and filesystems License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.q64iOE/_old 2022-11-19 18:09:58.706661516 +0100 +++ /var/tmp/diff_new_pack.q64iOE/_new 2022-11-19 18:09:58.710661538 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/grype</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.51.0</param> + <param name="revision">v0.53.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> @@ -17,7 +17,7 @@ <param name="compression">gz</param> </service> <service name="go_modules" mode="disabled"> - <param name="archive">grype-0.51.0.tar.gz</param> + <param name="archive">grype-0.53.0.tar.gz</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.q64iOE/_old 2022-11-19 18:09:58.730661651 +0100 +++ /var/tmp/diff_new_pack.q64iOE/_new 2022-11-19 18:09:58.734661674 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/anchore/grype</param> - <param name="changesrevision">4cda526992d5003dcbab68c9a7479a653dfde008</param></service></servicedata> + <param name="changesrevision">a4a62aab4bbd8aacdd639a59b9ceb1684398c6b6</param></service></servicedata> (No newline at EOF) ++++++ grype-0.51.0.tar.gz -> grype-0.53.0.tar.gz ++++++ ++++ 17231 lines of diff (skipped) ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/grype/vendor.tar.gz /work/SRC/openSUSE:Factory/.grype.new.1597/vendor.tar.gz differ: char 5, line 1