- Update to version 0.39.1:

* fix(rust): fix panic when 'dependencies' field is not used in cargo.toml (#3997)
  * fix(sbom): fix infinite loop for cyclonedx (#3998)
  * chore(deps): bump helm/chart-testing-action from 2.3.1 to 2.4.0 (#3954)
  * fix: use warning for errors from enrichment files for post-analyzers (#3972)
  * chore(deps): bump github.com/docker/docker (#3963)
  * fix(helm): added annotation to psp configurable from values (#3893)
  * chore(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.1 (#3962)
  * fix(secret): update built-in rule `tests`  (#3855)
  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.23.0 to 2.30.1 (#3957)
  * test: rewrite scripts in Go (#3968)
  * docs(cli): Improve glob documentation (#3945)
  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts (#3959)
  * ci: check CLI references (#3967)
  * chore(deps): bump alpine from 3.17.2 to 3.17.3 (#3951)
  * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.212 to 1.44.234 (#3956)
  * chore(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#3958)
  * chore(deps): bump actions/setup-go from 3 to 4 (#3953)
  * chore(deps): bump actions/cache from 3.2.6 to 3.3.1 (#3950)
  * chore(deps): bump github.com/containerd/containerd from 1.6.19 to 1.7.0 (#3965)
  * chore(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.0 (#3964)

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/trivy?expand=0&rev=55

_service

@@ -2,7 +2,7 @@
   <service name="tar_scm" mode="disabled">
     <param name="url">https://github.com/aquasecurity/trivy</param>
     <param name="scm">git</param>
-    <param name="revision">v0.39.0</param>
+    <param name="revision">v0.39.1</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/aquasecurity/trivy</param>
-              <param name="changesrevision">ed590966a3efdaf6cbb48e34bfb36ea0884e45d8</param></service></servicedata>
+              <param name="changesrevision">a119ef86ea28b0cbd6ad7708ac1ff64a89bd8034</param></service></servicedata>

trivy.changes

@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Thu Apr 13 08:10:58 UTC 2023 - dmueller@suse.com
+
+- Update to version 0.39.1:
+  * fix(rust): fix panic when 'dependencies' field is not used in cargo.toml (#3997)
+  * fix(sbom): fix infinite loop for cyclonedx (#3998)
+  * chore(deps): bump helm/chart-testing-action from 2.3.1 to 2.4.0 (#3954)
+  * fix: use warning for errors from enrichment files for post-analyzers (#3972)
+  * chore(deps): bump github.com/docker/docker (#3963)
+  * fix(helm): added annotation to psp configurable from values (#3893)
+  * chore(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.1 (#3962)
+  * fix(secret): update built-in rule `tests`  (#3855)
+  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.23.0 to 2.30.1 (#3957)
+  * test: rewrite scripts in Go (#3968)
+  * docs(cli): Improve glob documentation (#3945)
+  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts (#3959)
+  * ci: check CLI references (#3967)
+  * chore(deps): bump alpine from 3.17.2 to 3.17.3 (#3951)
+  * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.212 to 1.44.234 (#3956)
+  * chore(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#3958)
+  * chore(deps): bump actions/setup-go from 3 to 4 (#3953)
+  * chore(deps): bump actions/cache from 3.2.6 to 3.3.1 (#3950)
+  * chore(deps): bump github.com/containerd/containerd from 1.6.19 to 1.7.0 (#3965)
+  * chore(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.0 (#3964)
+
 -------------------------------------------------------------------
 Mon Apr 03 08:36:44 UTC 2023 - dmueller@suse.com
 

trivy.spec

@@ -19,7 +19,7 @@
 
 %global goipath github.com/aquasecurity/trivy
 Name:           trivy
-Version:        0.39.0
+Version:        0.39.1
 Release:        0
 Summary:        A Simple and Comprehensive Vulnerability Scanner for Containers
 License:        Apache-2.0