Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package trivy for openSUSE:Factory checked 
in at 2024-06-07 15:03:25
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/trivy (Old)
 and      /work/SRC/openSUSE:Factory/.trivy.new.24587 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "trivy"

Fri Jun  7 15:03:25 2024 rev:63 rq:1179019 version:0.52.0

Changes:
--------
--- /work/SRC/openSUSE:Factory/trivy/trivy.changes      2024-05-20 
18:12:36.980504326 +0200
+++ /work/SRC/openSUSE:Factory/.trivy.new.24587/trivy.changes   2024-06-07 
15:03:52.544885276 +0200
@@ -2 +2,91 @@
-Fri May 17 19:43:20 UTC 2024 - dmuel...@suse.com
+Thu Jun 06 13:09:56 UTC 2024 - dmuel...@suse.com
+
+- Update to version 0.52.0 (bsc#1224781, CVE-2024-35192):
+  * release: v0.52.0 [main] (#6809)
+  * fix(plugin): initialize logger (#6836)
+  * chore(deps): bump alpine from 3.19.1 to 3.20.0 in the docker group (#6835)
+  * fix(cli): always output fatal errors to stderr (#6827)
+  * fix: close testfile (#6830)
+  * docs(julia): add scanner table (#6826)
+  * feat(python): add license support for `requirement.txt` files (#6782)
+  * docs: add more workarounds for out-of-disk (#6821)
+  * chore: improve error message for image not found (#6822)
+  * fix(sbom): fix panic for `convert` mode when scanning json file derived 
from sbom file (#6808)
+  * ci(deps): use modules instead of incompatible version (#6805)
+  * ci: set initial version to v0.51.1 (#6810)
+  * ci: replace PAT with ORG_REPO_TOKEN (#6806)
+  * chore(deps): bump the common group with 3 updates (#6789)
+  * fix: clean up golangci lint configuration (#6797)
+  * ci: introduce Release Please for automated release management (#6795)
+  * fix(python): add package name and version validation for 
`requirements.txt` files. (#6804)
+  * feat(vex): improve relationship support in CSAF VEX (#6735)
+  * chore(alpine): add eol date for Alpine 3.20 (#6800)
+  * docs(plugin): add missed `plugin` section (#6799)
+  * fix: include packages unless it is not needed (#6765)
+  * ci(deps): fix ineffassign and bodyclose in ".*_test.go$" (#6777)
+  * chore(deps): Bump trivy-aws and trivy-checks (#6796)
+  * feat(misconf): support for VPC resources for inbound/outbound rules (#6779)
+  * ci(deps): fix govet in ".*_test.go$" (#6736)
+  * ci(deps): simplify gosec rules exclusion (#6778)
+  * chore: replace interface{} with any (#6751)
+  * fix: close settings.xml (#6768)
+  * refactor(go): add priority for gobinary module versions from `ldflags` 
(#6745)
+  * ci(deps): fix gocritic in ".*_test.go$" (#6763)
+  * build: use main package instead of main.go (#6766)
+  * feat(misconf): resolve tf module from OpenTofu compatible registry (#6743)
+  * chore(deps): bump the common group across 1 directory with 29 updates 
(#6756)
+  * ci(deps): fix tenv in ".*_test.go$" (#6748)
+  * chore(deps): bump the aws group with 8 updates (#6738)
+  * chore(deps): bump the docker group with 2 updates (#6739)
+  * chore(deps): bump the github-actions group with 4 updates (#6737)
+  * chore(deps): bump the testcontainers group with 2 updates (#6740)
+  * docs: add info on adding compliance checks (#6275)
+  * docs: Add documentation for contributing additional checks to the trivy 
policies repo (#6234)
+  * ci: add groups for `dependabot` (#6734)
+  * ci(deps): fix gci and gofmt in ".*_test.go$" (#6721)
+  * feat(nodejs): add v9 pnpm lock file support (#6617)
+  * feat(vex): support non-root components for products in OpenVEX (#6728)
+  * feat(python): add line number support for `requirement.txt` files (#6729)
+  * chore: respect timeout value in .golangci.yaml (#6724)
+  * ci(deps): enable `require-error` rule from `testifylint` linter (#6718)
+  * chore(deps): bump golangci-lint to v1.58.2 (#6719)
+  * fix: node-collector high and critical cves (#6707)
+  * Merge pull request from GHSA-xcq4-m2r3-cmrj
+  * chore: auto-bump golang patch versions (#6711)
+  * fix(misconf): don't shift ignore rule related to code (#6708)
+  * feat(plugin): specify plugin version (#6683)
+  * chore: enforce golangci-lint version (#6700)
+  * ci(deps): update golangci-lint-action and enable testifylint linter on 
"integration/*" (#6706)
+  * fix(go): include only `.version`|`.ver` (no prefixes) ldflags for 
`gobinaries` (#6705)
+  * fix(go): add only non-empty root modules for `gobinaries` (#6710)
+  * refactor: unify package addition and vulnerability scanning (#6579)
+  * fix: Golang version parsing from binaries w/GOEXPERIMENT (#6696)
+  * ci(deps): enable testifylint linter on .*_test.go$ (#6688)
+  * feat(misconf): Add support for deprecating a check (#6664)
+  * chore(deps): use `google.golang.org/protobuf/types/known` instead of 
`github.com/golang/protobuf/ptypes` (#6681)
+  * feat: Add Julia language analyzer support (#5635)
+  * feat(misconf): register builtin Rego funcs from trivy-checks (#6616)
+  * fix(report): hide empty tables if all vulns has been filtered (#6352)
+  * feat(report): Include licenses and secrets filtered by rego to 
ModifiedFindings (#6483)
+  * feat: add support for plugin index (#6674)
+  * fix(conda): add support `pip` deps for `environment.yml` files (#6675)
+  * docs: add support table for client server mode (#6498)
+  * fix: close APKINDEX archive file (#6672)
+  * fix(misconf): skip Rego errors with a nil location (#6666)
+  * refactor: move artifact types under artifact package to avoid import 
cycles (#6652)
+  * refactor(misconf): remove extrafs (#6656)
+  * refactor: re-define module structs for serialization (#6655)
+  * chore(misconf): Clean up iac logger (#6642)
+  * feat(misconf): support symlinks inside of Helm archives (#6621)
+  * feat(misconf): add Terraform 'removed' block to schema (#6640)
+  * refactor: unify Library and Package structs (#6633)
+  * fix: use of specified context to obtain cluster name (#6645)
+  * perf(misconf): parse rego input once (#6615)
+  * fix(misconf): skip Rego errors with a nil location (#6638)
+  * ci: add `generic` dir to deb deploy script (#6636)
+  * docs: link warning to both timeout config options (#6620)
+  * docs: fix usage of image-config-scanners (#6635)
+  * chore(deps): bump `knqyf263/trivy-issue-action` to v0.0.6 (#6632)
+
+-------------------------------------------------------------------
+Thu May 09 13:21:53 UTC 2024 - dmuel...@suse.com

Old:
----
  trivy-0.51.1.tar.zst

New:
----
  trivy-0.52.0.tar.zst

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ trivy.spec ++++++
--- /var/tmp/diff_new_pack.QnVh68/_old  2024-06-07 15:03:54.496956390 +0200
+++ /var/tmp/diff_new_pack.QnVh68/_new  2024-06-07 15:03:54.500956536 +0200
@@ -17,7 +17,7 @@
 
 
 Name:           trivy
-Version:        0.51.1
+Version:        0.52.0
 Release:        0
 Summary:        A Simple and Comprehensive Vulnerability Scanner for Containers
 License:        Apache-2.0

++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.QnVh68/_old  2024-06-07 15:03:54.544958138 +0200
+++ /var/tmp/diff_new_pack.QnVh68/_new  2024-06-07 15:03:54.548958284 +0200
@@ -1,5 +1,5 @@
-mtime: 1715975286
-commit: 9db9048f8fcda9228fdaecd994a195b439617cc7
+mtime: 1717679875
+commit: 579ede4865fcf5783c98eab0446e1c095dd85e84
 url: https://src.opensuse.org/dirkmueller/trivy.git
-revision: 9db9048f8fcda9228fdaecd994a195b439617cc7
+revision: 579ede4865fcf5783c98eab0446e1c095dd85e84
 

++++++ _service ++++++
--- /var/tmp/diff_new_pack.QnVh68/_old  2024-06-07 15:03:54.572959159 +0200
+++ /var/tmp/diff_new_pack.QnVh68/_new  2024-06-07 15:03:54.576959304 +0200
@@ -2,7 +2,7 @@
   <service name="tar_scm" mode="manual">
     <param name="url">https://github.com/aquasecurity/trivy</param>
     <param name="scm">git</param>
-    <param name="revision">v0.51.1</param>
+    <param name="revision">v0.52.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.QnVh68/_old  2024-06-07 15:03:54.604960324 +0200
+++ /var/tmp/diff_new_pack.QnVh68/_new  2024-06-07 15:03:54.612960616 +0200
@@ -1,6 +1,6 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/aquasecurity/trivy</param>
-              <param 
name="changesrevision">8016b821a260840ccb81ef520f2804b9482f3820</param></service></servicedata>
+              <param 
name="changesrevision">c24dfbab68056a42aff9589b024c6f2d067f9f52</param></service></servicedata>
 (No newline at EOF)
 

++++++ trivy-0.51.1.tar.zst -> trivy-0.52.0.tar.zst ++++++
/work/SRC/openSUSE:Factory/trivy/trivy-0.51.1.tar.zst 
/work/SRC/openSUSE:Factory/.trivy.new.24587/trivy-0.52.0.tar.zst differ: char 
7, line 1

++++++ vendor.tar.zst ++++++
/work/SRC/openSUSE:Factory/trivy/vendor.tar.zst 
/work/SRC/openSUSE:Factory/.trivy.new.24587/vendor.tar.zst differ: char 7, line 
1

Reply via email to