Accepting request 1229874 from devel:kubic

OBS-URL: https://build.opensuse.org/request/show/1229874
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/syft?expand=0&rev=90

_service

@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v1.17.0</param>
+    <param name="revision">v1.18.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">a8d4202d77b6b31e75ce5af09a8b03ad14e533d3</param></service></servicedata>
+              <param name="changesrevision">d38efb0b7fb7106909bc532a4efc68b78a917a34</param></service></servicedata>

syft-1.17.0.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e543165eaba2a78c734171db49997ea72a44b49a8fea3c5ef52f18c835dc4051
-size 26627597

syft-1.18.0.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ac48562da6f22d9368e164dea3323d3b09d3d6f4d5e251806e368eab9ea3f32b
+size 26701325

syft.changes

@@ -1,3 +1,53 @@
+-------------------------------------------------------------------
+Tue Dec 10 08:48:44 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 1.18.0:
+  * chore(deps): update anchore dependencies (#3510)
+  * fix: convert file paths for spdx formats from absolute to
+    relative (#3509)
+  * chore(deps): update CPE dictionary index (#3507)
+  * chore(deps): update tools to latest versions (#3506)
+  * chore(deps): bump github.com/magiconair/properties from 1.8.7
+    to 1.8.9 (#3508)
+  * chore(deps): bump actions/cache from 4.1.2 to 4.2.0 (#3503)
+  * Add relationships for rust audit binary packages (#3500)
+  * fix order of rust dependencies and support git sources in
+    Cargo.lock dependencies (#3502)
+  * chore(deps): update tools to latest versions (#3501)
+  * chore(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
+    (#3499)
+  * chore: add and document target for updating unit snapshots
+    (#3498)
+  * fix: emit NOASSERTION for copyright text to fix SPDX 2.2
+    validation failure (#3495)
+  * chore(deps): update tools to latest versions (#3496)
+  * chore(deps): update tools to latest versions (#3487)
+  * chore(deps): bump github/codeql-action from 3.27.5 to 3.27.6
+    (#3494)
+  * chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.2 to
+    6.6.3 (#3489)
+  * feat: set max layer size (#3464)
+  * chore(deps): update CPE dictionary index (#3491)
+  * chore(deps): bump modernc.org/sqlite from 1.34.1 to 1.34.2
+    (#3492)
+  * chore(deps): bump github.com/saferwall/pe from 1.5.5 to 1.5.6
+    (#3493)
+  * chore(deps): update tools to latest versions (#3478)
+  * chore(deps): update CPE dictionary index (#3479)
+  * chore(deps): bump github.com/stretchr/testify from 1.9.0 to
+    1.10.0 (#3480)
+  * chore(deps): bump github.com/charmbracelet/bubbletea from 1.2.3
+    to 1.2.4 (#3482)
+  * chore(deps): update stereoscope to
+    be5deed44b7c03fcbfa6f1f42fb67202d31636a9 (#3483)
+  * fix: dart classifier for 2.x and ARM (#3475)
+  * Use file indexer directly when scanning with file source
+    (#3333)
+  * chore(deps): bump anchore/sbom-action from 0.17.7 to 0.17.8
+    (#3476)
+  * chore(deps): bump github/codeql-action from 3.27.4 to 3.27.5
+    (#3473)
+
 -------------------------------------------------------------------
 Thu Nov 21 14:50:55 UTC 2024 - opensuse_buildservice@ojkastl.de
 

syft.obsinfo

@@ -1,4 +1,4 @@
 name: syft
-version: 1.17.0
+version: 1.18.0
-mtime: 1732199331
+mtime: 1733777476
-commit: a8d4202d77b6b31e75ce5af09a8b03ad14e533d3
+commit: d38efb0b7fb7106909bc532a4efc68b78a917a34

syft.spec

@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        1.17.0
+Version:        1.18.0
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:b828da659e4819887c5e62078edee7a73073e26ca30d5291262e52d4903cc235
+oid sha256:4a25e0e8997001ef8041141b3aa5fd358fa87707e36b8b30d4914ebe79d3964d
-size 51807829
+size 51816506