Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package osv-scanner for openSUSE:Factory checked in at 2026-05-08 16:47:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/osv-scanner (Old) and /work/SRC/openSUSE:Factory/.osv-scanner.new.1966 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "osv-scanner" Fri May 8 16:47:41 2026 rev:45 rq:1351806 version:2.3.8 Changes: -------- --- /work/SRC/openSUSE:Factory/osv-scanner/osv-scanner.changes 2026-05-04 12:53:30.077440484 +0200 +++ /work/SRC/openSUSE:Factory/.osv-scanner.new.1966/osv-scanner.changes 2026-05-08 16:48:05.111937648 +0200 @@ -1,0 +2,15 @@ +Fri May 08 06:41:18 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 2.3.8 (.7 was not released): + * Fixes: + - Fix installation issues with go install due to dependency + conflicts (downgrade containerd/cgroups/v3, moby/buildkit and + opencontainers/runtime-spec). (#2782) + - Bug #2762 Skip packages with short commit hashes instead of + aborting scan. + - Bug #2781 Secure file path handling with os.OpenRoot. + - Bug #2766 Correct typos across docs, configs, and Go source. + * Misc: + - Update osv-scalibr to v0.4.6-0.20260504042738-9293bfa4f86f. + +------------------------------------------------------------------- Old: ---- osv-scanner-2.3.6.obscpio New: ---- osv-scanner-2.3.8.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ osv-scanner.spec ++++++ --- /var/tmp/diff_new_pack.tkTRcw/_old 2026-05-08 16:48:08.104061604 +0200 +++ /var/tmp/diff_new_pack.tkTRcw/_new 2026-05-08 16:48:08.108061770 +0200 @@ -17,7 +17,7 @@ Name: osv-scanner -Version: 2.3.6 +Version: 2.3.8 Release: 0 Summary: Vulnerability scanner written in Go License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.tkTRcw/_old 2026-05-08 16:48:08.156063758 +0200 +++ /var/tmp/diff_new_pack.tkTRcw/_new 2026-05-08 16:48:08.160063924 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/google/osv-scanner</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v2.3.6</param> + <param name="revision">v2.3.8</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.tkTRcw/_old 2026-05-08 16:48:08.192065250 +0200 +++ /var/tmp/diff_new_pack.tkTRcw/_new 2026-05-08 16:48:08.196065416 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/google/osv-scanner</param> - <param name="changesrevision">c48ab012a628e14d14375e72b0397e555d7120d5</param></service></servicedata> + <param name="changesrevision">408fcd6f8707999a29e7ba45e15809764cf24f67</param></service></servicedata> (No newline at EOF) ++++++ osv-scanner-2.3.6.obscpio -> osv-scanner-2.3.8.obscpio ++++++ ++++ 6276 lines of diff (skipped) ++++++ osv-scanner.obsinfo ++++++ --- /var/tmp/diff_new_pack.tkTRcw/_old 2026-05-08 16:48:09.572122422 +0200 +++ /var/tmp/diff_new_pack.tkTRcw/_new 2026-05-08 16:48:09.576122588 +0200 @@ -1,5 +1,5 @@ name: osv-scanner -version: 2.3.6 -mtime: 1777593061 -commit: c48ab012a628e14d14375e72b0397e555d7120d5 +version: 2.3.8 +mtime: 1778216075 +commit: 408fcd6f8707999a29e7ba45e15809764cf24f67 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/osv-scanner/vendor.tar.gz /work/SRC/openSUSE:Factory/.osv-scanner.new.1966/vendor.tar.gz differ: char 13, line 1
