Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package syft for openSUSE:Factory checked in at 2026-11-07 23:32:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/syft (Old) and /work/SRC/openSUSE:Factory/.syft.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "syft" Sat Nov 7 23:32:41 2026 rev:138 rq:1395964 version:1.57.0 Changes: -------- --- /work/SRC/openSUSE:Factory/syft/syft.changes 2026-11-06 20:02:15.248003766 +0100 +++ /work/SRC/openSUSE:Factory/.syft.new.3759290/syft.changes 2026-11-07 23:33:11.259971694 +0100 @@ -1,0 +2,21 @@ +Fri Nov 06 09:06:23 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.57.0: + * Added Features + - capture GNU ELF build IDs [PR #5426] + - build lower layer squashes only when a scan reads them [PR + #5492] + * Bug Fixes + - do not generate CPEs for msrc-kb packages [PR #5510] + - Fix truncated pre-release versions in Go binaries' ldflags + [PR #5422] + - generate NVD-style terraform_provider CPEs for terraform lock + packages [PR #5261] + - OpenSSL-only SHA-256 fallback aborts installation [Issue + #5520] [PR #5521] + * Dependencies + 1 dependency change (1 updated). + - Updated (1 package) + - github.com/anchore/stereoscope v0.4.0 → v0.4.1 + +------------------------------------------------------------------- Old: ---- syft-1.56.0.obscpio New: ---- syft-1.57.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ syft.spec ++++++ --- /var/tmp/diff_new_pack.AWqmnh/_old 2026-11-07 23:33:14.421102308 +0100 +++ /var/tmp/diff_new_pack.AWqmnh/_new 2026-11-07 23:33:14.422102349 +0100 @@ -17,7 +17,7 @@ Name: syft -Version: 1.56.0 +Version: 1.57.0 Release: 0 Summary: CLI tool and library for generating a Software Bill of Materials License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.AWqmnh/_old 2026-11-07 23:33:14.457103795 +0100 +++ /var/tmp/diff_new_pack.AWqmnh/_new 2026-11-07 23:33:14.461103961 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/syft.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v1.56.0</param> + <param name="revision">refs/tags/v1.57.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.AWqmnh/_old 2026-11-07 23:33:14.490105159 +0100 +++ /var/tmp/diff_new_pack.AWqmnh/_new 2026-11-07 23:33:14.493105283 +0100 @@ -3,6 +3,6 @@ <param name="url">https://github.com/anchore/syft</param> <param name="changesrevision">b15c5dbfe2bb21c9d73002c1056a829c8c411c75</param></service><service name="tar_scm"> <param name="url">https://github.com/anchore/syft.git</param> - <param name="changesrevision">173055c39e9752f7b450ea404cd1801695277426</param></service></servicedata> + <param name="changesrevision">30f4bce762f31136e055f2965185f12eb95fbe47</param></service></servicedata> (No newline at EOF) ++++++ syft-1.56.0.obscpio -> syft-1.57.0.obscpio ++++++ ++++ 5871 lines of diff (skipped) ++++++ syft.obsinfo ++++++ --- /var/tmp/diff_new_pack.AWqmnh/_old 2026-11-07 23:33:16.312180445 +0100 +++ /var/tmp/diff_new_pack.AWqmnh/_new 2026-11-07 23:33:16.315180569 +0100 @@ -1,5 +1,5 @@ name: syft -version: 1.56.0 -mtime: 1793637025 -commit: 173055c39e9752f7b450ea404cd1801695277426 +version: 1.57.0 +mtime: 1793910470 +commit: 30f4bce762f31136e055f2965185f12eb95fbe47 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/syft/vendor.tar.gz /work/SRC/openSUSE:Factory/.syft.new.3759290/vendor.tar.gz differ: char 135, line 1
