Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package trivy for openSUSE:Factory checked in at 2026-08-06 16:25:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/trivy (Old) and /work/SRC/openSUSE:Factory/.trivy.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "trivy" Thu Aug 6 16:25:39 2026 rev:99 rq:1369774 version:0.73.0 Changes: -------- --- /work/SRC/openSUSE:Factory/trivy/trivy.changes 2026-07-21 22:58:33.025929245 +0200 +++ /work/SRC/openSUSE:Factory/.trivy.new.16738/trivy.changes 2026-08-06 16:27:47.956155969 +0200 @@ -1,0 +2,36 @@ +Wed Aug 05 08:21:21 UTC 2026 - Dirk Müller <[email protected]> + +- Update to version 0.73.0: + * release: v0.73.0 [main] (#11012) + * docs: clarify debug logs when version check or telemetry is disabled (#10984) + * feat(java): support user-defined Maven mirrors in trivy.yaml (#11006) + * chore(deps): bump the common group across 1 directory with 17 updates (#11025) + * chore(deps): bump the docker group across 1 directory with 2 updates (#10991) + * chore(deps): bump the aws group across 1 directory with 6 updates (#10947) + * refactor(alpine): remove type assertion when reading the APKINDEX archive (#11013) + * chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 (#10995) + * feat(vex): discover OpenVEX in generic in-toto OCI referrers (#10986) + * refactor(vuln): add OS.Supplier field and unify supplier terminology (#11007) + * chore(deps): bump github.com/google/cel-go from 0.28.1 to 0.30.0 (#11009) + * fix(vex): reject non-local VEX repository names (#10987) + * fix(vex): handle 304 status code (#10307) + * fix(vuln): don't skip packages covered by a driver's own advisory feed (#10980) + * fix(conda): avoid panic on an all-operator dependency line (#10955) + * chore: add schema id (#10969) + * feat(vex): native discovery of VEX documents stored as OCI artifacts (#10932) + * feat: add bounded read helpers (#10974) + * fix(dotnet): identify deps.json root project from dependency graph (#10954) + * feat(java): read Jenkins plugin manifest licenses (#10939) + * docs: ask contributors to coordinate before starting on an issue (#10940) + * fix(nodejs): support pnpm workspaces with overlapping packages (#10894) + * ci: create release branch with the App token to bypass the merge queue rule (#10931) + * chore(deps): bump the common group across 1 directory with 15 updates (#10892) + * feat(seal): detect no-prefix packages by version suffix (#10911) + * chore(deps): bump the testcontainers group with 2 updates (#10918) + * chore(deps): bump the docker group across 1 directory with 4 updates (#10919) + * fix(java): set per-file digest for nested JARs (#10855) + * fix(misconf): guard nil Healthcheck when building Dockerfile from history (#10899) + * ci(helm): bump Trivy version to 0.72.0 for Trivy Helm Chart 0.24.0 (#10908) + * ci(helm): allow trivy team to approve Chart.yaml bumps (#10912) + +------------------------------------------------------------------- Old: ---- trivy-0.72.0.tar.zst New: ---- trivy-0.73.0.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ trivy.spec ++++++ --- /var/tmp/diff_new_pack.Py0MAl/_old 2026-08-06 16:27:49.688215744 +0200 +++ /var/tmp/diff_new_pack.Py0MAl/_new 2026-08-06 16:27:49.696216020 +0200 @@ -17,7 +17,7 @@ Name: trivy -Version: 0.72.0 +Version: 0.73.0 Release: 0 Summary: A Simple and Comprehensive Vulnerability Scanner for Containers License: Apache-2.0 ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.Py0MAl/_old 2026-08-06 16:27:49.736217401 +0200 +++ /var/tmp/diff_new_pack.Py0MAl/_new 2026-08-06 16:27:49.740217538 +0200 @@ -1,5 +1,5 @@ -mtime: 1784532964 -commit: 60a50467beb87944f35072b8ccf1bbc8822dca3a6072241a8e554a5e67ed91e6 +mtime: 1785938100 +commit: ea75264404375586909936211adb85e5d65dff9cf154511f914fd8eb831974fa url: https://src.opensuse.org/dirkmueller/trivy.git revision: factory ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Py0MAl/_old 2026-08-06 16:27:49.760218229 +0200 +++ /var/tmp/diff_new_pack.Py0MAl/_new 2026-08-06 16:27:49.760218229 +0200 @@ -2,7 +2,7 @@ <service name="tar_scm" mode="manual"> <param name="url">https://github.com/aquasecurity/trivy</param> <param name="scm">git</param> - <param name="revision">v0.72.0</param> + <param name="revision">v0.73.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> @@ -16,9 +16,6 @@ </service> <service name="go_modules" mode="manual"> <param name="compression">zst</param> - <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> - <param name="replace">golang.org/x/text=golang.org/x/[email protected]</param> - <param name="replace">oras.land/oras-go/v2=oras.land/oras-go/[email protected]</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Py0MAl/_old 2026-08-06 16:27:49.792219334 +0200 +++ /var/tmp/diff_new_pack.Py0MAl/_new 2026-08-06 16:27:49.796219471 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/aquasecurity/trivy</param> - <param name="changesrevision">8a32853686209a428179bb3a1688802b25691564</param></service></servicedata> + <param name="changesrevision">40c73e5d6166dcc0346a1ab4e94499d1572854e4</param></service></servicedata> (No newline at EOF) ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-08-05 15:55:00.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ trivy-0.72.0.tar.zst -> trivy-0.73.0.tar.zst ++++++ /work/SRC/openSUSE:Factory/trivy/trivy-0.72.0.tar.zst /work/SRC/openSUSE:Factory/.trivy.new.16738/trivy-0.73.0.tar.zst differ: char 7, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/trivy/vendor.tar.zst /work/SRC/openSUSE:Factory/.trivy.new.16738/vendor.tar.zst differ: char 7, line 1
