-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 17 Mar 2026 15:12:56 +0100 Source: debsbom Architecture: source Version: 0.7.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <[email protected]> Changed-By: Felix Moessbauer <[email protected]> Changes: debsbom (0.7.0-1) unstable; urgency=medium . * New upstream version 0.7.0 * Add delta command to show difference between two SBOMs * Track Pre-Depends dependencies * Track which components are essential * Add trace-path command to analyze dependency chains * Mark files and directories for tab completion * Improve performance for copyright file parsing * Add --omit-roots option to merge command * Add filter command to allow exclusion of source or binary packages * Correctly split distro supplier into components for CDX SBOMs * Properly handle SBOMs with same root node for the merge command * Use correct category for distribution external package references Checksums-Sha1: e3d2d28fcc76ef990ba448d9ee9f1634714d9fa2 2732 debsbom_0.7.0-1.dsc ad016b0b1723acd7935d0f8a83f842126bb1478c 150752 debsbom_0.7.0.orig.tar.xz 89a662d8d73a2237a5a35dadcd6a59b92af976bb 8168 debsbom_0.7.0-1.debian.tar.xz f557c9fb1895c14639402613b1875b3c5e0a2231 9510 debsbom_0.7.0-1_amd64.buildinfo Checksums-Sha256: 52d7b3655e0397d6a230458c8009adbad74f8948b888b39d18780d2325ee79e6 2732 debsbom_0.7.0-1.dsc ad6428e29614501ade4e97baac07b1453110358ece33eb8f2535abee4d539c1c 150752 debsbom_0.7.0.orig.tar.xz ac45245e0f85e6b045e98fa2d73bf7076bfdfb1290f06302f9c57e864ecdb9b4 8168 debsbom_0.7.0-1.debian.tar.xz 9e297c31d29b331e1798b57cb34c816579cbd2c20e1308776ede70fa6f61b991 9510 debsbom_0.7.0-1_amd64.buildinfo Files: 594d5455a1a6849ec51110ed80246d2a 2732 python optional debsbom_0.7.0-1.dsc 8a34c6c3bb0f504a28db9b8491461094 150752 python optional debsbom_0.7.0.orig.tar.xz 4a344ced9965d30353f48d2cc03d905d 8168 python optional debsbom_0.7.0-1.debian.tar.xz 6634f74564a9baecc2c86bee345b6738 9510 python optional debsbom_0.7.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQJRBAEBCgA7FiEEr3P271pTz+MEVp9Q5kijEfZ6UPwFAmm5YtkdHGZlbGl4Lm1v ZXNzYmF1ZXJAc2llbWVucy5jb20ACgkQ5kijEfZ6UPwZgQ//S689PfRWDtn9CMRh GRGzjXCp0cT5ZebXHVjEntXGS6+oy7AbepiFSLZwdW/vKFWCZqnX2CX83ecBNkDi Qg7CMusN35Jswwc7tO/sFh2tKr8GYgM+erp254+ypLHidwiI2uURGBW7XIdIrNBD rKfOgpEzS4V/GMq1gxbJAxbiHxaxEa57PhxOBs45jsRnSASs9ZJCDnWRGbR5r/z9 R+2aNGsp5z/0RY0IbpgDVMjMfhEI5SV8kY2Z52RGPRzL6OjXTqvEs2NZZ6fNGN+4 hxvmWCDp5SS2zXHHjm1xWe8ILSYXDdFHn/SJWNKJSWBMyRWwvs9vsDVMD4Fx/U0e bwea8umJPe5nPxd4+VKW23zcGlyzMhYZf3x5ISDe8Qfu1za4hkEMmvpBe2As+hFZ +wQuGvq++Ihmecn+KRDXCqLSL4RgQVnt8EDLvULqo17Zky+UZg9+LRv0h8etdboc Q6+7SsTMt36/XWvUaLRsg/uX/Wz3x5rvUr0495FR5ZebKksug4J/qHPdwoyb8R6r Ls9CcVzEZeQxA0GEwRtxQ+2NWCjp5BKIuv/ivK3V9JYWbSzzBICp8xcL01yL3i9R K2/aD9pTV+jJ4BzF585twap/hRfpgOPcce+CLwb18xvAtm9H0php4l68TOYsqLp+ I7Pw4d/lHdiIzfvz5LeV+FqvCP8= =FvYB -----END PGP SIGNATURE-----
pgpsYuJOVrvyO.pgp
Description: PGP signature

