Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package osv-scanner for openSUSE:Factory checked in at 2025-12-11 18:40:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/osv-scanner (Old) and /work/SRC/openSUSE:Factory/.osv-scanner.new.1939 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "osv-scanner" Thu Dec 11 18:40:33 2025 rev:40 rq:1322146 version:2.3.1 Changes: -------- --- /work/SRC/openSUSE:Factory/osv-scanner/osv-scanner.changes 2025-11-19 15:05:53.878471671 +0100 +++ /work/SRC/openSUSE:Factory/.osv-scanner.new.1939/osv-scanner.changes 2025-12-11 18:43:20.474514671 +0100 @@ -1,0 +2,28 @@ +Thu Dec 11 07:55:36 UTC 2025 - Johannes Kastl <[email protected]> + +- Update to version 2.3.1: + * Features: + - Feature #2370 Add support for the packagedeprecation plugin + via the new --experimental-flag-deprecated-packages flag. The + result is available in all output formats except SPDX. + * Fixes: + - Bug #2395 Fix license scanning to correctly match new + deps.dev package names. + - Bug #2333 Deduplicate SARIF outputs for GitHub. + - Bug #2259 Fix lookup of Go packages with major versions by + including the subpath of Go PURLs, preventing false + positives. + * Misc: + - Updated Go version to v1.25.5 to support Go reachability + analysis for the latest version. + * Dependencies + - chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 + in the go_modules group across 1 directory (#2357) + - chore(deps): update actions/checkout action to v6 (#2379) + - chore(deps): update dependency webrick to v1.9.2 (#2378) + - chore(deps): update workflows (#2364) + - chore(deps): update workflows (#2402) + - fix(deps): update osv-scanner minor (#2365) + - fix(deps): update osv-scanner minor (#2400) + +------------------------------------------------------------------- Old: ---- osv-scanner-2.3.0.obscpio New: ---- osv-scanner-2.3.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ osv-scanner.spec ++++++ --- /var/tmp/diff_new_pack.XndHN4/_old 2025-12-11 18:43:24.078666100 +0100 +++ /var/tmp/diff_new_pack.XndHN4/_new 2025-12-11 18:43:24.102667108 +0100 @@ -17,7 +17,7 @@ Name: osv-scanner -Version: 2.3.0 +Version: 2.3.1 Release: 0 Summary: Vulnerability scanner written in Go License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.XndHN4/_old 2025-12-11 18:43:24.346677361 +0100 +++ /var/tmp/diff_new_pack.XndHN4/_new 2025-12-11 18:43:24.366678201 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/google/osv-scanner</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v2.3.0</param> + <param name="revision">v2.3.1</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.XndHN4/_old 2025-12-11 18:43:24.470682570 +0100 +++ /var/tmp/diff_new_pack.XndHN4/_new 2025-12-11 18:43:24.514684419 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/google/osv-scanner</param> - <param name="changesrevision">b0b6027aa7b2b50fd3fe5fe185d609f481f02a44</param></service></servicedata> + <param name="changesrevision">d03774202cbaf17a260c2f4a073585baee524b45</param></service></servicedata> (No newline at EOF) ++++++ osv-scanner-2.3.0.obscpio -> osv-scanner-2.3.1.obscpio ++++++ ++++ 50923 lines of diff (skipped) ++++++ osv-scanner.obsinfo ++++++ --- /var/tmp/diff_new_pack.XndHN4/_old 2025-12-11 18:43:26.826781563 +0100 +++ /var/tmp/diff_new_pack.XndHN4/_new 2025-12-11 18:43:26.834781899 +0100 @@ -1,5 +1,5 @@ name: osv-scanner -version: 2.3.0 -mtime: 1763525521 -commit: b0b6027aa7b2b50fd3fe5fe185d609f481f02a44 +version: 2.3.1 +mtime: 1765431293 +commit: d03774202cbaf17a260c2f4a073585baee524b45 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/osv-scanner/vendor.tar.gz /work/SRC/openSUSE:Factory/.osv-scanner.new.1939/vendor.tar.gz differ: char 15, line 1
