Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package syft for openSUSE:Factory checked in at 2026-10-23 20:30:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/syft (Old) and /work/SRC/openSUSE:Factory/.syft.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "syft" Fri Oct 23 20:30:53 2026 rev:136 rq:1392055 version:1.55.0 Changes: -------- --- /work/SRC/openSUSE:Factory/syft/syft.changes 2026-10-08 11:58:44.490362277 +0200 +++ /work/SRC/openSUSE:Factory/.syft.new.2252680/syft.changes 2026-10-23 20:33:02.371495480 +0200 @@ -1,0 +2,89 @@ +Tue Oct 20 07:04:06 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.55.0: + * Added Features + - Add support for scanning IPK packages using the + deb-archive-cataloger [PR #5111] + * Bug Fixes + - Pin Gguff lib to prevent dropping packages [PR #5447] + - Licensing: copyright holder missing, needed for Debian + packaging [Issue #5394] [PR #5414] + - Syft cli.Command() panics when invoked multiple times [Issue + #2285] [PR #5386] + * Additional Changes + - bump go-make module and action together [PR #5415] + * Dependencies + 49 dependency changes (46 updated, 1 added, 2 removed). 5 + vulnerabilities remediated. + * Remediated (5) + - GO-2026-6603 (High) — golang.org/x/net + - GO-2026-6610 (High) — golang.org/x/net + - GO-2026-6611 (High) — golang.org/x/net + - GO-2026-6612 (Critical) — golang.org/x/net + - GO-2026-6617 (High) — golang.org/x/net + * Updated (46 packages) + - cloud.google.com/go/auth v0.23.2 → v0.23.3 + - cloud.google.com/go/compute/metadata v0.9.0 → v0.9.1 + - cloud.google.com/go/storage v1.65.1 → v1.68.0 + - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp + v1.33.0 → v1.34.0 + - github.com/aws/aws-sdk-go-v2 v1.44.0 → v1.47.1 + - github.com/aws/aws-sdk-go-v2/config v1.32.40 → v1.33.6 + - github.com/aws/aws-sdk-go-v2/credentials v1.19.39 → v1.20.6 + - github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.40 → + v1.20.1 + - github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.40 → + v1.5.4 + - github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.40 → + v2.8.4 + - github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.41 → v1.5.4 + - github.com/aws/aws-sdk-go-v2/service/internal/checksum + v1.10.0 → v1.11.5 + - github.com/aws/aws-sdk-go-v2/service/internal/presigned-url + v1.13.40 → v1.14.4 + - github.com/aws/aws-sdk-go-v2/service/internal/s3shared + v1.19.41 → v1.20.4 + - github.com/aws/aws-sdk-go-v2/service/s3 v1.108.0 → v1.114.0 + - github.com/aws/aws-sdk-go-v2/service/signin v1.6.0 → v1.10.1 + - github.com/aws/aws-sdk-go-v2/service/sso v1.34.0 → v1.38.1 + - github.com/aws/aws-sdk-go-v2/service/ssooidc v1.39.0 → + v1.43.1 + - github.com/aws/aws-sdk-go-v2/service/sts v1.46.0 → v1.51.1 + - github.com/github/go-spdx/v2 v2.7.0 → v2.7.1 + - github.com/go-git/go-billy/v5 v5.9.1 → v5.9.2 + - github.com/go-git/go-git/v5 v5.19.2 → v5.19.3 + - github.com/google/s2a-go v0.1.9 → v0.1.10 + - github.com/googleapis/enterprise-certificate-proxy v0.3.20 → + v0.3.22 + - github.com/googleapis/gax-go/v2 v2.24.0 → v2.24.1 + - github.com/gookit/color v1.6.1 → v1.6.2 + - github.com/gpustack/gguf-parser-go v0.26.3 → v0.26.4 + - github.com/hashicorp/go-getter v1.8.9 → v1.8.10 + - github.com/pb33f/ordered-map/v2 v2.3.1 → v2.3.2 + - github.com/pjbgf/sha1cd v0.6.0 → v0.7.0 + - github.com/spiffe/go-spiffe/v2 v2.7.0 → v2.8.1 + - golang.org/x/crypto v0.57.0 → v0.58.0 + - golang.org/x/net v0.59.0 → v0.61.0 (remediated + GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, + GO-2026-6617) + - golang.org/x/oauth2 v0.36.0 → v0.37.0 + - golang.org/x/sync v0.23.0 → v0.24.0 + - golang.org/x/sys v0.48.0 → v0.49.0 + - golang.org/x/term v0.46.0 → v0.47.0 + - golang.org/x/text v0.42.0 → v0.43.0 + - golang.org/x/tools v0.50.0 → v0.51.0 + - google.golang.org/api v0.294.0 → v0.299.0 + - google.golang.org/genproto/googleapis/rpc v0.0.0-da73d73 → + v0.0.0-b142276 + - google.golang.org/grpc v1.83.2 → v1.84.0 + - modernc.org/cc/v4 v4.29.2 → v4.29.7 + - modernc.org/ccgo/v4 v4.35.0 → v4.36.1 + - modernc.org/libc v1.75.7 → v1.77.1 + - modernc.org/sqlite v1.59.0 → v1.60.1 + * Added (1 package) + - github.com/pb33f/go-yaml v0.1.0 + * Removed (2 packages) + - github.com/klauspost/cpuid/v2 v2.3.0 + - go.yaml.in/yaml/v4 v4.0.0-rc.2 + +------------------------------------------------------------------- Old: ---- syft-1.54.1.obscpio New: ---- syft-1.55.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ syft.spec ++++++ --- /var/tmp/diff_new_pack.ovfid2/_old 2026-10-23 20:33:04.220572851 +0200 +++ /var/tmp/diff_new_pack.ovfid2/_new 2026-10-23 20:33:04.222572934 +0200 @@ -17,7 +17,7 @@ Name: syft -Version: 1.54.1 +Version: 1.55.0 Release: 0 Summary: CLI tool and library for generating a Software Bill of Materials License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.ovfid2/_old 2026-10-23 20:33:04.264574692 +0200 +++ /var/tmp/diff_new_pack.ovfid2/_new 2026-10-23 20:33:04.269574901 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/syft.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v1.54.1</param> + <param name="revision">refs/tags/v1.55.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.ovfid2/_old 2026-10-23 20:33:04.292575864 +0200 +++ /var/tmp/diff_new_pack.ovfid2/_new 2026-10-23 20:33:04.295575989 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/anchore/syft</param> <param name="changesrevision">b15c5dbfe2bb21c9d73002c1056a829c8c411c75</param></service><service name="tar_scm"> <param name="url">https://github.com/anchore/syft.git</param> - <param name="changesrevision">b254e6d92f28c3868a755f62fb3ca8f26e9fee76</param></service></servicedata> + <param name="changesrevision">f15c3343e29dfb20cf6d82c820e7090b49808c96</param></service></servicedata> (No newline at EOF) ++++++ syft-1.54.1.obscpio -> syft-1.55.0.obscpio ++++++ ++++ 2261 lines of diff (skipped) ++++++ syft.obsinfo ++++++ --- /var/tmp/diff_new_pack.ovfid2/_old 2026-10-23 20:33:07.165696084 +0200 +++ /var/tmp/diff_new_pack.ovfid2/_new 2026-10-23 20:33:07.170696293 +0200 @@ -1,5 +1,5 @@ name: syft -version: 1.54.1 -mtime: 1791297393 -commit: b254e6d92f28c3868a755f62fb3ca8f26e9fee76 +version: 1.55.0 +mtime: 1792435243 +commit: f15c3343e29dfb20cf6d82c820e7090b49808c96 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/syft/vendor.tar.gz /work/SRC/openSUSE:Factory/.syft.new.2252680/vendor.tar.gz differ: char 134, line 1
