Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package grype for openSUSE:Factory checked in at 2026-07-29 18:59:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/grype (Old) and /work/SRC/openSUSE:Factory/.grype.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "grype" Wed Jul 29 18:59:08 2026 rev:126 rq:1368290 version:0.116.1 Changes: -------- --- /work/SRC/openSUSE:Factory/grype/grype.changes 2026-07-17 18:49:32.697386265 +0200 +++ /work/SRC/openSUSE:Factory/.grype.new.2004/grype.changes 2026-07-29 19:00:35.856435182 +0200 @@ -1,0 +2,59 @@ +Wed Jul 29 05:07:15 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 0.116.1: + * Bug Fixes + - Ensure channel parsing is consistent [PR #3603 @wagoodman] + - Scope Go GHSA twins by shared CVE [PR #3592 @wagoodman] + - do not cache a comparator that failed to build [PR #3567 + @arpitjain099] + - Add fix date to rhel minor records created from rhsa [PR + #3585 @wagoodman] + - grype reporting CVE-64091 as critical - redhat says it is not + affected [Issue #3591] + - panic: index out of range in distro.parseVersion for + VERSION_ID=v [Issue #3588] [PR #3589 @matiasinsaurralde] + - False Positive: GO-2026-5932 [Issue #3573] + * Dependencies + 30 dependency changes (30 updated). 1 vulnerability remediated. + - Remediated (1) + - GHSA-hrxh-6v49-42gf (High) — google.golang.org/grpc + - Updated (30 packages) + - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp + v1.31.0 → v1.32.0 + - github.com/anchore/stereoscope v0.2.2 → v0.3.0 + - github.com/anchore/syft v1.48.0 → v1.50.0 + - github.com/cncf/xds/go v0.0.0-ee656c7 → v0.0.0-dba9d58 + - github.com/containerd/containerd/v2 v2.3.2 → v2.3.3 + - github.com/docker/cli v29.5.3+incompatible → + v29.6.1+incompatible + - github.com/envoyproxy/go-control-plane/envoy v1.36.0 → + v1.37.0 + - github.com/envoyproxy/protoc-gen-validate v1.3.0 → v1.3.3 + - github.com/gkampitakis/go-snaps v0.5.22 → v0.5.23 + - github.com/gpustack/gguf-parser-go v0.24.1 → v0.25.0 + - github.com/moby/moby/api v1.54.2 → v1.55.0 + - github.com/moby/moby/client v0.4.1 → v0.5.0 + - github.com/pelletier/go-toml/v2 v2.3.1 → v2.4.3 + - go.opentelemetry.io/contrib/detectors/gcp v1.39.0 → + v1.43.0 + - golang.org/x/crypto v0.53.0 → v0.54.0 + - golang.org/x/mod v0.37.0 → v0.38.0 + - golang.org/x/net v0.56.0 → v0.57.0 + - golang.org/x/sync v0.21.0 → v0.22.0 + - golang.org/x/sys v0.46.0 → v0.47.0 + - golang.org/x/term v0.44.0 → v0.45.0 + - golang.org/x/text v0.39.0 → v0.40.0 + - golang.org/x/tools v0.47.0 → v0.48.0 + - google.golang.org/genproto/googleapis/api v0.0.0-9d38bb4 → + v0.0.0-afd174a + - google.golang.org/genproto/googleapis/rpc v0.0.0-6f92a3b → + v0.0.0-afd174a + - google.golang.org/grpc v1.80.0 → v1.82.1 (🟢 remediated + GHSA-hrxh-6v49-42gf) + - modernc.org/cc/v4 v4.28.4 → v4.29.0 + - modernc.org/ccgo/v4 v4.34.4 → v4.34.6 + - modernc.org/gc/v3 v3.1.3 → v3.1.4 + - modernc.org/libc v1.73.4 → v1.74.1 + - modernc.org/sqlite v1.53.0 → v1.54.0 + +------------------------------------------------------------------- Old: ---- grype-0.116.0.obscpio New: ---- grype-0.116.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ grype.spec ++++++ --- /var/tmp/diff_new_pack.YHSpL1/_old 2026-07-29 19:00:39.384556867 +0200 +++ /var/tmp/diff_new_pack.YHSpL1/_new 2026-07-29 19:00:39.388557006 +0200 @@ -17,7 +17,7 @@ Name: grype -Version: 0.116.0 +Version: 0.116.1 Release: 0 Summary: A vulnerability scanner for container images and filesystems License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.YHSpL1/_old 2026-07-29 19:00:39.436558662 +0200 +++ /var/tmp/diff_new_pack.YHSpL1/_new 2026-07-29 19:00:39.444558937 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/grype.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v0.116.0</param> + <param name="revision">refs/tags/v0.116.1</param> <param name="match-tag">v*</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.YHSpL1/_old 2026-07-29 19:00:39.512561283 +0200 +++ /var/tmp/diff_new_pack.YHSpL1/_new 2026-07-29 19:00:39.516561420 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/anchore/grype</param> <param name="changesrevision">fa8b7e2a528cf1f8b098123f256c61db9e5df69c</param></service><service name="tar_scm"> <param name="url">https://github.com/anchore/grype.git</param> - <param name="changesrevision">3b014b00097d43933e5cce485e744db8289a406f</param></service></servicedata> + <param name="changesrevision">30394f177175da63ae36b35cdd809c248eb4de7f</param></service></servicedata> (No newline at EOF) ++++++ grype-0.116.0.obscpio -> grype-0.116.1.obscpio ++++++ ++++ 2413 lines of diff (skipped) ++++++ grype.obsinfo ++++++ --- /var/tmp/diff_new_pack.YHSpL1/_old 2026-07-29 19:00:57.101167920 +0200 +++ /var/tmp/diff_new_pack.YHSpL1/_new 2026-07-29 19:00:57.137169161 +0200 @@ -1,5 +1,5 @@ name: grype -version: 0.116.0 -mtime: 1784217735 -commit: 3b014b00097d43933e5cce485e744db8289a406f +version: 0.116.1 +mtime: 1785264572 +commit: 30394f177175da63ae36b35cdd809c248eb4de7f ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/grype/vendor.tar.gz /work/SRC/openSUSE:Factory/.grype.new.2004/vendor.tar.gz differ: char 19, line 1
