Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package grype for openSUSE:Factory checked in at 2026-07-17 18:48:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/grype (Old) and /work/SRC/openSUSE:Factory/.grype.new.24530 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grype" Fri Jul 17 18:48:27 2026 rev:125 rq:1366295 version:0.116.0 Changes: -------- --- /work/SRC/openSUSE:Factory/grype/grype.changes 2026-06-28 21:09:20.363749810 +0200 +++ /work/SRC/openSUSE:Factory/.grype.new.24530/grype.changes 2026-07-17 18:49:32.697386265 +0200 @@ -1,0 +2,46 @@ +Fri Jul 17 05:16:10 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.116.0: + * Added Features + - duplicate RHSAs to all applicable RHEL minor versions [PR + #3542 @willmurphyscode] + - add chainguard osv transformer [PR #3474 @crosleyzack] + - populate package architecture for matching [PR #3504 + @willmurphyscode] + - lightweight reachability analysis to reduce Golang false + positives [Issue #2960] [PR #3509 @spiffcs] + - Deduplicate Go matches that are aliases of each other (same + CVE reported under both a govulndb GO-* ID and its GHSA) + [Issue #3511] [PR #3509 @spiffcs] + - Support Ubuntu ESM [Issue #3544] [PR #3546 @wagoodman] + * Bug Fixes + - regenerate v6.1.8 blob and sql schemas [PR #3574 @spiffcs] + - rhel version streams [PR #3572 @kzantow] + - Grype doesn't match u-boot in SBOM if type is set to firmware + [Issue #2537] + - Ignore Go compiler affecting CVE when Docker image only + contains a binary compiled with Go [Issue #1782] + - Zarf scans emit warnings for consistently unreadable files + (i.e., included non-SBOMs) [Issue #3516] [PR #3545 + @brandtkeller] + - Fail parsing github actions [Issue #3220] + - Go vulnerability returned when installed version is greater + than fixed version [Issue #3520] + * Dependencies updated (11 packages) + - github.com/anchore/go-rpmdb v0.1.0 → v0.2.0 + - github.com/anchore/syft v1.46.0 → v1.48.0 + - github.com/klauspost/compress v1.18.6 → v1.19.0 + - golang.org/x/text v0.38.0 → v0.39.0 + - golang.org/x/tools v0.46.0 → v0.47.0 + - gorm.io/gorm v1.31.1 → v1.31.2 + - modernc.org/cc/v4 v4.28.2 → v4.28.4 + - modernc.org/ccgo/v4 v4.34.0 → v4.34.4 + - modernc.org/gc/v3 v3.1.2 → v3.1.3 + - modernc.org/libc v1.72.3 → v1.73.4 + - modernc.org/sqlite v1.51.0 → v1.53.0 + * Dependencies added (3 packages) + - github.com/mattn/go-sqlite3 v1.14.23 + - gorm.io/driver/sqlite v1.6.0 + - howett.net/plist v1.0.1 + +------------------------------------------------------------------- Old: ---- grype-0.115.0.obscpio New: ---- grype-0.116.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ grype.spec ++++++ --- /var/tmp/diff_new_pack.ixykOK/_old 2026-07-17 18:49:35.493480701 +0200 +++ /var/tmp/diff_new_pack.ixykOK/_new 2026-07-17 18:49:35.497480837 +0200 @@ -17,7 +17,7 @@ Name: grype -Version: 0.115.0 +Version: 0.116.0 Release: 0 Summary: A vulnerability scanner for container images and filesystems License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.ixykOK/_old 2026-07-17 18:49:35.573483404 +0200 +++ /var/tmp/diff_new_pack.ixykOK/_new 2026-07-17 18:49:35.577483539 +0200 @@ -1,9 +1,9 @@ <services> <service name="obs_scm" mode="manual"> - <param name="url">https://github.com/anchore/grype</param> + <param name="url">https://github.com/anchore/grype.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.115.0</param> + <param name="revision">refs/tags/v0.116.0</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.ixykOK/_old 2026-07-17 18:49:35.605484484 +0200 +++ /var/tmp/diff_new_pack.ixykOK/_new 2026-07-17 18:49:35.613484755 +0200 @@ -1,6 +1,8 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/anchore/grype</param> - <param name="changesrevision">fa8b7e2a528cf1f8b098123f256c61db9e5df69c</param></service></servicedata> + <param name="changesrevision">fa8b7e2a528cf1f8b098123f256c61db9e5df69c</param></service><service name="tar_scm"> + <param name="url">https://github.com/anchore/grype.git</param> + <param name="changesrevision">3b014b00097d43933e5cce485e744db8289a406f</param></service></servicedata> (No newline at EOF) ++++++ grype-0.115.0.obscpio -> grype-0.116.0.obscpio ++++++ ++++ 18976 lines of diff (skipped) ++++++ grype.obsinfo ++++++ --- /var/tmp/diff_new_pack.ixykOK/_old 2026-07-17 18:49:52.142043400 +0200 +++ /var/tmp/diff_new_pack.ixykOK/_new 2026-07-17 18:49:52.146043535 +0200 @@ -1,5 +1,5 @@ name: grype -version: 0.115.0 -mtime: 1782468987 -commit: fa8b7e2a528cf1f8b098123f256c61db9e5df69c +version: 0.116.0 +mtime: 1784217735 +commit: 3b014b00097d43933e5cce485e744db8289a406f ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/grype/vendor.tar.gz /work/SRC/openSUSE:Factory/.grype.new.24530/vendor.tar.gz differ: char 13, line 1
