Accepting request 1247832 from devel:kubic

OBS-URL: https://build.opensuse.org/request/show/1247832
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/syft?expand=0&rev=93

_service

@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v1.19.0</param>
+    <param name="revision">v1.20.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">222e6548a96f8c80015c1d24f01dea3052a04893</param></service></servicedata>
+              <param name="changesrevision">46522bcc5dff8b65b61a7cda1393abe515802306</param></service></servicedata>

syft-1.19.0.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2ea244940ba860c8a669e985731bf4f467fa7bfc502b4349a9334a2af1aa24cd
-size 26899981

syft-1.20.0.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:114f11497274e8b0f7adfe8b5de33673d5afe77dc2f58da780b91b98c321b508
+size 27167245

syft.changes

@@ -1,3 +1,41 @@
+-------------------------------------------------------------------
+Sat Feb 22 09:40:22 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 1.20.0:
+  * Added Features
+    - Add file catalogers to selection configuration [#3505
+      @wagoodman]
+    - Configuration for including license contents in SBOM [#3626
+      #3631 @spiffcs]
+    - Support Bitnami embedded SBOMs [#3065 #3341 @juan131]
+  * Bug Fixes
+    - Version parse caused by line breaks on different platforms
+      [#3672 @idhyt]
+    - find bitnami files even when no relationships [#3676
+      @willmurphyscode]
+    - License files which do not match an SPDX expression are
+      erroneously handled as 'unlicensed' [#3412 #3366
+      @HeyeOpenSource]
+    - Incorrect URL encoding of package url (purl) [#3533 #3678
+      @kzantow]
+    - syft should not warn on known bad package.json [#3470 #3645
+      @kzantow]
+    - Scanning a project with many DLLs is slow [#3455 #3677
+      @rogueai]
+    - cyclone-dx presenter drops files, includes only packages
+      [#3435 #3539 @spiffcs]
+    - "syft config" output swaps comments for
+      search-indexed-archives / search-unindexed-archives [#3624
+      #3630 @spiffcs]
+    - dpkg license improvement for non SPDX licenses [#3090 #3366
+      @HeyeOpenSource]
+    - RPM-based PURLs sometimes have incorrect namespace
+      (specifically OpenSUSE) [#3534 #3615 @mprpic]
+  * Additional Changes
+    - update to go 1.24.x [#3660 @westonsteimel]
+    - replace all shorthand tags of mapstruct -> mapstructure
+      [#3633 @spiffcs]
+
 -------------------------------------------------------------------
 Thu Jan 23 05:36:08 UTC 2025 - opensuse_buildservice@ojkastl.de
 

syft.obsinfo

@@ -1,4 +1,4 @@
 name: syft
-version: 1.19.0
-mtime: 1737575094
-commit: 222e6548a96f8c80015c1d24f01dea3052a04893
+version: 1.20.0
+mtime: 1740169876
+commit: 46522bcc5dff8b65b61a7cda1393abe515802306

syft.spec

@@ -16,10 +16,8 @@
 #
 
 
-%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
-
 Name:           syft
-Version:        1.19.0
+Version:        1.20.0
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0
@@ -28,7 +26,7 @@ Source:         syft-%{version}.tar.gz
 Source1:        vendor.tar.gz
 BuildRequires:  bash-completion
 BuildRequires:  fish
-BuildRequires:  go >= 1.22
+BuildRequires:  go >= 1.24
 BuildRequires:  zsh
 
 %description

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:4812511617b333efab615a1cc65edc54ff0e97810265beb81fee4a9237e5e402
-size 52856195
+oid sha256:e8a1b776221df654a76d87f53b346314428474011db73ba2dfe3a2e2d5a076a7
+size 56552882