Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package syft for openSUSE:Factory checked in at 2026-08-11 17:17:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/syft (Old) and /work/SRC/openSUSE:Factory/.syft.new.17972 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "syft" Tue Aug 11 17:17:33 2026 rev:131 rq:1370647 version:1.51.0 Changes: -------- --- /work/SRC/openSUSE:Factory/syft/syft.changes 2026-07-29 19:01:07.153514628 +0200 +++ /work/SRC/openSUSE:Factory/.syft.new.17972/syft.changes 2026-08-11 17:18:59.314756992 +0200 @@ -1,0 +2,42 @@ +Tue Aug 11 06:31:43 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.51.0: + * Added Features + - detect native Go FIPS 140 mode in binaries [PR #5155 + @gunnypatel] + - add extended-stdlib scope and module patterns for symbol + capture [PR #5154 @wagoodman] + * Bug Fixes + - Cleanup snap temporary directories [PR #5117 @spiffcs] + - add correct CPE vendor/product candidates for Git for Windows + PE binary [PR #5156 @westonsteimel] + - javascript-package-cataloger creates phantom <name>@unknown + packages for subpath or export-map stub package.json files + [Issue #5118] + - Syft generates incorrect PURLs for legacy JARs missing Maven + metadata, causing Grype false negatives [Issue #4598] [PR + #5146 @ankit090701] + - When scanning an image, syft only reports one file per set of + hardlinks, leading to wrong SPDX packageVerificationCode + [Issue #5019] [PR #5029 @wagoodman] + - Support deno binary latest and some old versions [Issue + #5057] [PR #5084 @ychampion] + - Update install methods in README.md [Issue #3198] + * Dependencies + 9 dependency changes (9 updated). 2 vulnerabilities remediated. + - Remediated (2) + - GHSA-hc8v-wwc9-vgxm (High) — github.com/go-git/go-git/v5 + - GHSA-qgq7-7hm3-q39j (Medium) — github.com/go-git/go-git/v5 + - Updated (9 packages) + - github.com/diskfs/go-diskfs v1.9.3 → v1.9.4 + - github.com/go-git/go-billy/v5 v5.9.0 → v5.9.1 + - github.com/go-git/go-git/v5 v5.19.1 → v5.19.2 + (remediated GHSA-hc8v-wwc9-vgxm, GHSA-qgq7-7hm3-q39j) + - github.com/jedib0t/go-pretty/v6 v6.8.1 → v6.8.3 + - github.com/klauspost/compress v1.19.0 → v1.19.1 + - github.com/magiconair/properties v1.8.10 → v1.18.11 + - github.com/ulikunitz/xz v0.5.15 → v0.5.16 + - go.yaml.in/yaml/v3 v3.0.4 → v3.0.5 + - modernc.org/sqlite v1.54.0 → v1.55.0 + +------------------------------------------------------------------- Old: ---- syft-1.50.0.obscpio New: ---- syft-1.51.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ syft.spec ++++++ --- /var/tmp/diff_new_pack.6inn59/_old 2026-08-11 17:19:02.422888547 +0200 +++ /var/tmp/diff_new_pack.6inn59/_new 2026-08-11 17:19:02.426888715 +0200 @@ -17,7 +17,7 @@ Name: syft -Version: 1.50.0 +Version: 1.51.0 Release: 0 Summary: CLI tool and library for generating a Software Bill of Materials License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.6inn59/_old 2026-08-11 17:19:02.466890405 +0200 +++ /var/tmp/diff_new_pack.6inn59/_new 2026-08-11 17:19:02.470890574 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/syft.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v1.50.0</param> + <param name="revision">refs/tags/v1.51.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.6inn59/_old 2026-08-11 17:19:02.502891925 +0200 +++ /var/tmp/diff_new_pack.6inn59/_new 2026-08-11 17:19:02.506892094 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/anchore/syft</param> <param name="changesrevision">b15c5dbfe2bb21c9d73002c1056a829c8c411c75</param></service><service name="tar_scm"> <param name="url">https://github.com/anchore/syft.git</param> - <param name="changesrevision">16223e6dd7893fe578787658ceb876257483d404</param></service></servicedata> + <param name="changesrevision">2293641e3bd628a01bb37639318d62c0ebe89b39</param></service></servicedata> (No newline at EOF) ++++++ syft-1.50.0.obscpio -> syft-1.51.0.obscpio ++++++ ++++ 3132 lines of diff (skipped) ++++++ syft.obsinfo ++++++ --- /var/tmp/diff_new_pack.6inn59/_old 2026-08-11 17:19:09.543189211 +0200 +++ /var/tmp/diff_new_pack.6inn59/_new 2026-08-11 17:19:09.583190899 +0200 @@ -1,5 +1,5 @@ name: syft -version: 1.50.0 -mtime: 1785180049 -commit: 16223e6dd7893fe578787658ceb876257483d404 +version: 1.51.0 +mtime: 1786371989 +commit: 2293641e3bd628a01bb37639318d62c0ebe89b39 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/syft/vendor.tar.gz /work/SRC/openSUSE:Factory/.syft.new.17972/vendor.tar.gz differ: char 15, line 1
