Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package grype for openSUSE:Factory checked
in at 2022-11-19 18:09:45
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/grype (Old)
and /work/SRC/openSUSE:Factory/.grype.new.1597 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grype"
Sat Nov 19 18:09:45 2022 rev:12 rq:1036801 version:0.53.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/grype/grype.changes 2022-10-18
12:45:58.473856879 +0200
+++ /work/SRC/openSUSE:Factory/.grype.new.1597/grype.changes 2022-11-19
18:09:57.134652630 +0100
@@ -1,0 +2,27 @@
+Sat Nov 19 12:05:00 UTC 2022 - ka...@b1-systems.de
+
+- Update to version 0.53.0:
+ * chore: bump syft version v0.62.0 (#1000)
+ * feat: vulnerability namespacing support for rolling distros (#997)
+ * chore: bump quality gate images and label data (#995)
+ * feat: add strong distro type for wolfi (#996)
+ * chore: pin dependencies (#994)
+ * chore: code-ql top level read check (#993)
+ * Add SECURITY.md (#989)
+ * chore: update codeql to pinned v2 with correct write permissions
+ * Update token permissions to be read-only (#988)
+ * Enable the Scorecard Github Action and badge (#929)
+
+-------------------------------------------------------------------
+Tue Nov 15 15:42:37 UTC 2022 - ka...@b1-systems.de
+
+- Update to version 0.52.0:
+ * chore: update syft to v0.60.3 (#978)
+ * feat: consider well-known false-positive generating CPE target SW
components in match filtering logic (#961)
+ * chore: grype quality pipeline latest label updates and images (#976)
+ * Implemented new CLI flag: --show-suppressed (#966)
+ * fix: update case for alpine:edge correct vuln feed (#965)
+ * PURL input results in incorrect artifact in JSON output (#968)
+ * Update grype bootstrap tools to latest versions. (#956)
+
+-------------------------------------------------------------------
Old:
----
grype-0.51.0.tar.gz
New:
----
grype-0.53.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ grype.spec ++++++
--- /var/tmp/diff_new_pack.q64iOE/_old 2022-11-19 18:09:58.666661289 +0100
+++ /var/tmp/diff_new_pack.q64iOE/_new 2022-11-19 18:09:58.670661312 +0100
@@ -19,7 +19,7 @@
%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
Name: grype
-Version: 0.51.0
+Version: 0.53.0
Release: 0
Summary: A vulnerability scanner for container images and filesystems
License: Apache-2.0
++++++ _service ++++++
--- /var/tmp/diff_new_pack.q64iOE/_old 2022-11-19 18:09:58.706661516 +0100
+++ /var/tmp/diff_new_pack.q64iOE/_new 2022-11-19 18:09:58.710661538 +0100
@@ -3,7 +3,7 @@
<param name="url">https://github.com/anchore/grype</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
- <param name="revision">v0.51.0</param>
+ <param name="revision">v0.53.0</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="changesgenerate">enable</param>
<param name="versionrewrite-pattern">v(.*)</param>
@@ -17,7 +17,7 @@
<param name="compression">gz</param>
</service>
<service name="go_modules" mode="disabled">
- <param name="archive">grype-0.51.0.tar.gz</param>
+ <param name="archive">grype-0.53.0.tar.gz</param>
</service>
</services>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.q64iOE/_old 2022-11-19 18:09:58.730661651 +0100
+++ /var/tmp/diff_new_pack.q64iOE/_new 2022-11-19 18:09:58.734661674 +0100
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/anchore/grype</param>
- <param
name="changesrevision">4cda526992d5003dcbab68c9a7479a653dfde008</param></service></servicedata>
+ <param
name="changesrevision">a4a62aab4bbd8aacdd639a59b9ceb1684398c6b6</param></service></servicedata>
(No newline at EOF)
++++++ grype-0.51.0.tar.gz -> grype-0.53.0.tar.gz ++++++
++++ 17231 lines of diff (skipped)
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/grype/vendor.tar.gz
/work/SRC/openSUSE:Factory/.grype.new.1597/vendor.tar.gz differ: char 5, line 1
