From 9716dca024eb341e435a5462e70bdc6626d729fe7b1aeb5fd72e4b9fdf224c27 Mon Sep 17 00:00:00 2001 From: Johannes Kastl Date: Wed, 7 Sep 2022 06:11:09 +0000 Subject: [PATCH] Accepting request 1001568 from home:ojkastl_buildservice:Branch_devel_kubic update to 0.55.0 OBS-URL: https://build.opensuse.org/request/show/1001568 OBS-URL: https://build.opensuse.org/package/show/devel:kubic/syft?expand=0&rev=13 --- _service | 4 +-- _servicedata | 2 +- syft-0.52.0.tar.gz | 3 -- syft-0.55.0.tar.gz | 3 ++ syft.changes | 82 ++++++++++++++++++++++++++++++++++++++++++++++ syft.spec | 2 +- vendor.tar.gz | 4 +-- 7 files changed, 91 insertions(+), 9 deletions(-) delete mode 100644 syft-0.52.0.tar.gz create mode 100644 syft-0.55.0.tar.gz diff --git a/_service b/_service index d39fc6b..c04d60a 100644 --- a/_service +++ b/_service @@ -3,7 +3,7 @@ https://github.com/anchore/syft git .git - v0.52.0 + v0.55.0 @PARENT_TAG@ enable v(.*) @@ -16,6 +16,6 @@ gz - syft-0.52.0.tar.gz + syft-0.55.0.tar.gz diff --git a/_servicedata b/_servicedata index 868b82f..017596a 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/anchore/syft - ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e \ No newline at end of file + a7966a4d9d8155be788af33fe5e5af2e40043f82 \ No newline at end of file diff --git a/syft-0.52.0.tar.gz b/syft-0.52.0.tar.gz deleted file mode 100644 index 1283fc4..0000000 --- a/syft-0.52.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:8f6c64535144f3ef1071b15dfa83647685ac55af0e91371c3df4fa9c62a3107f -size 3775722 diff --git a/syft-0.55.0.tar.gz b/syft-0.55.0.tar.gz new file mode 100644 index 0000000..e229b09 --- /dev/null +++ b/syft-0.55.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:838c0ea04a4536c91362fbbbbb965aa11f5df931133cfb4370952eccadd15b8d +size 3821921 diff --git a/syft.changes b/syft.changes index ce51352..bf07f5a 100644 --- a/syft.changes +++ b/syft.changes @@ -1,3 +1,85 @@ +------------------------------------------------------------------- +Wed Sep 07 05:42:57 UTC 2022 - kastl@b1-systems.de + +- Update to version 0.55.0: + * update stereoscope to latest (#1181) + * Update syft bootstrap tools to latest versions. (#1180) + * Bug fix for 1095 - syft conversion option error (#1177) + * Update syft bootstrap tools to latest versions. (#1176) + * enhance development support on macOS ARM (#1163) + * Capture if a node module is private (#1161) + * Find version numbers from jars with different naming conventions (#1174) + * Update syft bootstrap tools to latest versions. (#1171) + * Fix update-bootstrap-tools workflow (#1170) + * workflow to create automated PRs to update bootstrap tools (#1167) + * feat: add support for licenses in package-lock json v2 (#1164) + * External sources configuration (#1158) + * feat: add support for pnpm (#1166) + * Prevent symlinks causing duplicate package-file relationships (#1168) + +------------------------------------------------------------------- +Wed Sep 07 05:38:56 UTC 2022 - kastl@b1-systems.de + +- Update to version 0.54.0: + * Associate node package licenses from node_modules (#1152) + * Give the contributing guide a substantial rework (#1155) + * fix: extract file ids correctly for spdx-json (#1156) + * metadata decoding should be optional (#1154) + * Update Stereoscope to 84004345484edb881f1cc1d841115da8abda06c3 (#1151) + * Add modularitylabel metadata to RPM type records generated by syft (#1148) + * Update Stereoscope to 1c79d5c84abcc54466417fcc17c844a4875888a1 (#1149) + * retraction for mispublished versions (#1147) + * cataloger configuration is respected regardless of source (#1142) + * Update README.md (#1146) + * bump cosign to v1.10.1 (#1144) + +------------------------------------------------------------------- +Wed Sep 07 05:35:58 UTC 2022 - kastl@b1-systems.de + +- Update to version 0.53.4: + * Update stereoscope to get rid of the replace directive (#1140) + +------------------------------------------------------------------- +Wed Sep 07 05:33:24 UTC 2022 - kastl@b1-systems.de + +- Update to version 0.53.3: + * Correct squashfs import and fix incorrect bouncer configuration (#1138) + +------------------------------------------------------------------- +Wed Sep 07 05:31:12 UTC 2022 - kastl@b1-systems.de + +- Update to version 0.53.2: + * Overwrite deprecated SPDX licenses automatically (#1009) + * disable release for docker assets (#1137) + +------------------------------------------------------------------- +Wed Sep 07 05:29:04 UTC 2022 - kastl@b1-systems.de + +- Update to version 0.53.1: + * improve docker release bootstrap (#1136) + * Singularity Image Support (#974) + +------------------------------------------------------------------- +Wed Sep 07 05:25:20 UTC 2022 - kastl@b1-systems.de + +- Update to version 0.53.0: + * remove docker login from keychain (#1135) + * remove ENV checks from siging script (#1134) + * remove docker assets from main goreleaser configuration to reduce mac-os runner friction (#1133) + * remove prefixed v from tag to match release (#1131) + * rollback actions-setup-docker to earlier version (#1130) + * Bump go-rustaudit to support rustaudit 0.2.0 (#1127) + * bump bouncer to v0.4.0 (#1125) + * Added ppc64le supported to the syft:debug image (#1124) + * add a cataloger for binaries built with rust-audit (#1116) + * bump goreleaser to v1.10.3 (#1123) + * bump golangci-lint to v1.47.2 (#1122) + * bump cosign in bootstrap-tools to v1.10.0 (#1121) + * Added s390x support (#1117) + * Delete pr_action.yaml (#1120) + * fix: use generic instead of not generating purl (#1119) + * bump cosign to v1.10.0 (#1114) + ------------------------------------------------------------------- Thu Jul 21 15:12:29 UTC 2022 - kastl@b1-systems.de diff --git a/syft.spec b/syft.spec index 58dde80..30d8daa 100644 --- a/syft.spec +++ b/syft.spec @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: syft -Version: 0.52.0 +Version: 0.55.0 Release: 0 Summary: CLI tool and library for generating a Software Bill of Materials License: Apache-2.0 diff --git a/vendor.tar.gz b/vendor.tar.gz index 48bb775..ed3ea31 100644 --- a/vendor.tar.gz +++ b/vendor.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:26d3f10dd7b05f3f64bd80a759e19e90f3915dad0b6254e5ca076baea7e6ffdc -size 51390212 +oid sha256:3dc1a3778173daf76631204b3211cae5e4519d0e11a76e19a5e7dff07eb9f8b7 +size 50868446