Accepting request 1201250 from devel:kubic

OBS-URL: https://build.opensuse.org/request/show/1201250
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/syft?expand=0&rev=82

_service

@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v1.11.1</param>
+    <param name="revision">v1.12.2</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">95b4a88256bddebb91831250f28f602f8c36552a</param></service></servicedata>
+              <param name="changesrevision">fcd5ec951de6b3fc1f1aa2a36968356d2eb22170</param></service></servicedata>

syft-1.11.1.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4eb07b043a0d04b537b0101c43896e6581fb851f67e77a125e22befc5ab43da5
-size 26157581

syft-1.12.2.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3d55f10d26bf4db63d0a32fd737ac5d83c00809b822f44f64ce4ff68ec631b3e
+size 26290189

syft.changes

@@ -1,3 +1,76 @@
+-------------------------------------------------------------------
+Thu Sep 12 04:56:01 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 1.12.2 (no releases between 1.11.1 and this
+  one):
+  * chore: make ci-check.sh an executable file (#3220)
+  * chore(deps): bump github.com/opencontainers/runc from 1.1.12 to
+    1.1.14 (#3219)
+  * chore: restore ci-check.sh script (#3218)
+  * Add haskell binaries cataloger (#3078)
+  * chore(deps): update CPE dictionary index (#3206)
+  * chore(deps): bump golang.org/x/net from 0.28.0 to 0.29.0
+    (#3203)
+  * Add the Ocaml ecosystem (#3112)
+  * chore(deps): bump github.com/charmbracelet/bubbles from 0.19.0
+    to 0.20.0 (#3209)
+  * chore(deps): bump modernc.org/sqlite from 1.32.0 to 1.33.0
+    (#3210)
+  * chore(deps): bump github.com/docker/docker (#3211)
+  * chore(deps): bump github.com/dave/jennifer from 1.7.0 to 1.7.1
+    (#3212)
+  * dont cleanup cache in forks (#3214)
+  * less verbose java logging when non-fatal issues arise (#3208)
+  * Slim down docker cache size (#3190)
+  * chore(deps): bump peter-evans/create-pull-request from 7.0.0 to
+    7.0.1 (#3196)
+  * chore(deps): bump golang.org/x/mod from 0.20.0 to 0.21.0
+    (#3197)
+  * fix: haproxy classifier for versions with -dev suffix (#3180)
+  * chore(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to
+    3.3.0 (#3177)
+  * chore(deps): update CPE dictionary index (#3183)
+  * chore(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0
+    (#3184)
+  * chore(deps): bump peter-evans/create-pull-request from 6.1.0 to
+    7.0.0 (#3187)
+  * fix: properly decode SPDX license expressions in CycloneDX
+    format (#3175)
+  * chore(deps): bump github.com/docker/docker (#3168)
+  * chore(deps): bump github.com/charmbracelet/bubbletea (#3171)
+  * chore(deps): bump github/codeql-action from 3.26.5 to 3.26.6
+    (#3173)
+  * fix: cycles resolving relative path parent poms with
+    parent-defined variables (#3170)
+  * fix: improve generated cpes for binaries with existing
+    classifiers (#3169)
+  * fix: add log time of task (#3105)
+  * fix: improve known CPEs and set NVD as source for all current
+    binary classifiers (#3167)
+  * respond to authoratative CPEs from catalogers (#3166)
+  * set cataloger names within package cataloger task (#3165)
+  * fix: use official CPE for curl binary cataloger (#3164)
+  * chore(deps): update tools to latest versions (#3160)
+  * chore(deps): update CPE dictionary index (#3161)
+  * chore(deps): bump github/codeql-action from 3.26.4 to 3.26.5
+    (#3162)
+  * fix ELF package correlations (#3151)
+  * chore(deps): update tools to latest versions (#3144)
+  * feat: detect curl binaries (#3146)
+  * chore(deps): bump anchore/sbom-action from 0.17.1 to 0.17.2
+    (#3155)
+  * chore(deps): bump github/codeql-action from 3.26.3 to 3.26.4
+    (#3154)
+  * chore(deps): update stereoscope to
+    e6d086e8bef5fab4fcfbd60c9a759c4cb229decf (#3152)
+  * chore(deps): bump github.com/charmbracelet/bubbles from 0.18.0
+    to 0.19.0 (#3148)
+  * chore(deps): bump github.com/charmbracelet/lipgloss (#3147)
+  * chore(deps): bump github.com/anchore/stereoscope (#3153)
+  * fix: mysql 8.0.3x binary detection (#3142)
+  * chore(deps): bump github/codeql-action from 3.26.2 to 3.26.3
+    (#3139)
+
 -------------------------------------------------------------------
 Tue Aug 20 16:41:18 UTC 2024 - opensuse_buildservice@ojkastl.de
 

syft.obsinfo

@@ -1,4 +1,4 @@
 name: syft
-version: 1.11.1
-mtime: 1724168733
-commit: 95b4a88256bddebb91831250f28f602f8c36552a
+version: 1.12.2
+mtime: 1726063357
+commit: fcd5ec951de6b3fc1f1aa2a36968356d2eb22170

syft.spec

@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        1.11.1
+Version:        1.12.2
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:9fb668e4364a3833d8aa1803f013447ce8c94532d03b511a65fbc966bbf65144
-size 52648488
+oid sha256:6652b4a346267c66cd10dea15c592cee9e0b567b9ec919fa58f4e11853b21c28
+size 34054181