Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package trivy for openSUSE:Factory checked in at 2026-07-17 18:50:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/trivy (Old) and /work/SRC/openSUSE:Factory/.trivy.new.24530 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "trivy" Fri Jul 17 18:50:15 2026 rev:97 rq:1366418 version:0.72.0 Changes: -------- --- /work/SRC/openSUSE:Factory/trivy/trivy.changes 2026-07-06 12:30:40.343932658 +0200 +++ /work/SRC/openSUSE:Factory/.trivy.new.24530/trivy.changes 2026-07-17 18:51:40.537709542 +0200 @@ -1,0 +2,7 @@ +Fri Jul 17 13:57:04 UTC 2026 - Dirk Müller <[email protected]> + +- update x/net to 0.57.0 (bsc#1266495, CVE-2026-39821) +- update x/text to 0.40.0 (bsc#1271661, CVE-2026-56852) +- update oras-go to 2.6.1 (bsc#1271658, CVE-2026-50151) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.1TsSUY/_old 2026-07-17 18:51:46.317904942 +0200 +++ /var/tmp/diff_new_pack.1TsSUY/_new 2026-07-17 18:51:46.337905618 +0200 @@ -1,5 +1,5 @@ -mtime: 1783092272 -commit: 5a953208a3ef381606b133be161da5eef075018a696318cf37ece0cacf3c0217 +mtime: 1784297103 +commit: c8fec762c56932724577f72c7853b9d4a6f570ecda1486435309de8cbad35b13 url: https://src.opensuse.org/dirkmueller/trivy.git revision: factory ++++++ _service ++++++ --- /var/tmp/diff_new_pack.1TsSUY/_old 2026-07-17 18:51:46.473910216 +0200 +++ /var/tmp/diff_new_pack.1TsSUY/_new 2026-07-17 18:51:46.485910622 +0200 @@ -16,6 +16,9 @@ </service> <service name="go_modules" mode="manual"> <param name="compression">zst</param> + <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> + <param name="replace">golang.org/x/text=golang.org/x/[email protected]</param> + <param name="replace">oras.land/oras-go/v2=oras.land/oras-go/[email protected]</param> </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-17 16:05:03.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/trivy/vendor.tar.zst /work/SRC/openSUSE:Factory/.trivy.new.24530/vendor.tar.zst differ: char 7, line 1
