Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package grype for openSUSE:Factory checked in at 2023-10-08 12:18:34 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/grype (Old) and /work/SRC/openSUSE:Factory/.grype.new.28202 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grype" Sun Oct 8 12:18:34 2023 rev:36 rq:1116168 version:0.69.1 Changes: -------- --- /work/SRC/openSUSE:Factory/grype/grype.changes 2023-09-06 19:01:26.274498573 +0200 +++ /work/SRC/openSUSE:Factory/.grype.new.28202/grype.changes 2023-10-08 12:21:58.486045013 +0200 @@ -1,0 +2,77 @@ +Sat Oct 07 05:34:32 UTC 2023 - ka...@b1-systems.de + +- Update to version 0.69.1: + * chore(deps): update Syft to v0.92.0 (#1527) + * chore(deps): update bootstrap tools to latest versions (#1524) + * chore: add OpenSSF Best Practices badge (#1523) + * bump labels to latest (#1525) + * chore(deps): bump actions/checkout from 4.0.0 to 4.1.0 (#1519) + * chore(deps): update bootstrap tools to latest versions (#1520) + * chore: explicitly test go pseudoversion (#1522) + * chore: remove outdated comment about fuzzy matching python + versions (#1521) + * chore: bump stereoscope to fix data race in UI (#1517) + * fix: correctly guess tool comparison (#1516) + * chore(deps): update bootstrap tools to latest versions (#1515) + * chore(deps): bump github.com/spf13/afero from 1.9.5 to 1.10.0 + (#1514) + * fix: use PEP440 for Python package version comparison (#1510) + +------------------------------------------------------------------- +Sat Oct 07 05:30:38 UTC 2023 - ka...@b1-systems.de + +- Update to version 0.69.0: + * chore(deps): bump tibdex/github-app-token from 2.0.0 to 2.1.0 + (#1506) + * Upgrade syft to v0.91.0 (#1508) + * Update chronicle to v0.8.0 (#1507) + * fix: terminal clobbering when commands return errors (#1505) + * Fix typo in flag (#1501) + * chore(deps): bump actions/cache from 3.2.6 to 3.3.2 (#1499) + * chore(deps): remove dependency on sqlite fork; bump + gorm.io/gorm from 1.23.10 to 1.25.4 (#1448) + * chore: pin cache versions (#1495) + * chore(deps): bump actions/checkout from 3 to 4 (#1475) + +------------------------------------------------------------------- +Sat Oct 07 05:27:54 UTC 2023 - ka...@b1-systems.de + +- Update to version 0.68.1: + * fix: version output including supported db schema (#1494) + * chore: pin actions; pin images; add top level action + permissions (#1493) + +------------------------------------------------------------------- +Sat Oct 07 05:23:52 UTC 2023 - ka...@b1-systems.de + +- Update to version 0.68.0: + * feat: introduce exit code failure option for db update check + (#1463) + * Ignore/add match results based on OpenVEX documents (#1397) + * chore(deps): bump docker/login-action from 2 to 3 (#1488) + * chore: Fix race conditions around stager, enable detector + (#1489) + * chore(deps): update Syft to v0.90.0 (#1486) + * chore(deps): bump tibdex/github-app-token from 1.8.2 to 2.0.0 + (#1485) + * chore: update CLI to CLIO (#1437) + +------------------------------------------------------------------- +Sat Oct 07 05:16:26 UTC 2023 - ka...@b1-systems.de + +- Update to version 0.67.0: + * feat: grype explain prototype (#1367) + * chore: Update go declaration to have point version (#1484) + * chore: update grype to use Go v1.21 (#1480) + * chore(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 + (#1481) + * chore(deps): bump tibdex/github-app-token from 1.8.0 to 1.8.2 + (#1474) + * chore(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 + (#1476) + * chore(deps): bump github.com/docker/docker (#1478) + * chore(deps): bump github.com/gkampitakis/go-snaps from 0.4.8 to + 0.4.10 (#1477) + * chore: bump quality gate to use syft v0.89.0 (#1479) + +------------------------------------------------------------------- Old: ---- grype-0.66.0.obscpio New: ---- grype-0.69.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ grype.spec ++++++ --- /var/tmp/diff_new_pack.np1Jbe/_old 2023-10-08 12:22:02.342183656 +0200 +++ /var/tmp/diff_new_pack.np1Jbe/_new 2023-10-08 12:22:02.346183800 +0200 @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: grype -Version: 0.66.0 +Version: 0.69.1 Release: 0 Summary: A vulnerability scanner for container images and filesystems License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.np1Jbe/_old 2023-10-08 12:22:02.374184806 +0200 +++ /var/tmp/diff_new_pack.np1Jbe/_new 2023-10-08 12:22:02.378184951 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/grype</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.66.0</param> + <param name="revision">v0.69.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.np1Jbe/_old 2023-10-08 12:22:02.398185669 +0200 +++ /var/tmp/diff_new_pack.np1Jbe/_new 2023-10-08 12:22:02.402185814 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/anchore/grype</param> - <param name="changesrevision">35ffa2ac421130af2b8578464a6657aae98295ed</param></service></servicedata> + <param name="changesrevision">dec563669d683ab4d11e95a28635099673363d80</param></service></servicedata> (No newline at EOF) ++++++ grype-0.66.0.obscpio -> grype-0.69.1.obscpio ++++++ /work/SRC/openSUSE:Factory/grype/grype-0.66.0.obscpio /work/SRC/openSUSE:Factory/.grype.new.28202/grype-0.69.1.obscpio differ: char 48, line 1 ++++++ grype.obsinfo ++++++ --- /var/tmp/diff_new_pack.np1Jbe/_old 2023-10-08 12:22:02.438187108 +0200 +++ /var/tmp/diff_new_pack.np1Jbe/_new 2023-10-08 12:22:02.442187252 +0200 @@ -1,5 +1,5 @@ name: grype -version: 0.66.0 -mtime: 1693497731 -commit: 35ffa2ac421130af2b8578464a6657aae98295ed +version: 0.69.1 +mtime: 1695832052 +commit: dec563669d683ab4d11e95a28635099673363d80 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/grype/vendor.tar.gz /work/SRC/openSUSE:Factory/.grype.new.28202/vendor.tar.gz differ: char 5, line 1