Accepting request 1001568 from home:ojkastl_buildservice:Branch_devel_kubic

update to 0.55.0

OBS-URL: https://build.opensuse.org/request/show/1001568
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/syft?expand=0&rev=13

_service

@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.52.0</param>
+    <param name="revision">v0.55.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
@@ -16,6 +16,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="disabled">
-    <param name="archive">syft-0.52.0.tar.gz</param>
+    <param name="archive">syft-0.55.0.tar.gz</param>
   </service>
 </services>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e</param></service></servicedata>
+              <param name="changesrevision">a7966a4d9d8155be788af33fe5e5af2e40043f82</param></service></servicedata>

syft-0.52.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8f6c64535144f3ef1071b15dfa83647685ac55af0e91371c3df4fa9c62a3107f
-size 3775722

syft-0.55.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:838c0ea04a4536c91362fbbbbb965aa11f5df931133cfb4370952eccadd15b8d
+size 3821921

syft.changes

@@ -1,3 +1,85 @@
+-------------------------------------------------------------------
+Wed Sep 07 05:42:57 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.55.0:
+  * update stereoscope to latest (#1181)
+  * Update syft bootstrap tools to latest versions. (#1180)
+  * Bug fix for 1095 - syft conversion option error (#1177)
+  * Update syft bootstrap tools to latest versions. (#1176)
+  * enhance development support on macOS ARM (#1163)
+  * Capture if a node module is private (#1161)
+  * Find version numbers from jars with different naming conventions (#1174)
+  * Update syft bootstrap tools to latest versions. (#1171)
+  * Fix update-bootstrap-tools workflow (#1170)
+  * workflow to create automated PRs to update bootstrap tools (#1167)
+  * feat: add support for licenses in package-lock json v2 (#1164)
+  * External sources configuration (#1158)
+  * feat: add support for pnpm (#1166)
+  * Prevent symlinks causing duplicate package-file relationships (#1168)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:38:56 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.54.0:
+  * Associate node package licenses from node_modules (#1152)
+  * Give the contributing guide a substantial rework (#1155)
+  * fix: extract file ids correctly for spdx-json (#1156)
+  * metadata decoding should be optional (#1154)
+  * Update Stereoscope to 84004345484edb881f1cc1d841115da8abda06c3 (#1151)
+  * Add modularitylabel metadata to RPM type records generated by syft (#1148)
+  * Update Stereoscope to 1c79d5c84abcc54466417fcc17c844a4875888a1 (#1149)
+  * retraction for mispublished versions (#1147)
+  * cataloger configuration is respected regardless of source (#1142)
+  * Update README.md (#1146)
+  * bump cosign to v1.10.1 (#1144)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:35:58 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.53.4:
+  * Update stereoscope to get rid of the replace directive (#1140)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:33:24 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.53.3:
+  * Correct squashfs import and fix incorrect bouncer configuration (#1138)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:31:12 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.53.2:
+  * Overwrite deprecated SPDX licenses automatically (#1009)
+  * disable release for docker assets (#1137)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:29:04 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.53.1:
+  * improve docker release bootstrap (#1136)
+  * Singularity Image Support (#974)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:25:20 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.53.0:
+  * remove docker login from keychain (#1135)
+  * remove ENV checks from siging script (#1134)
+  * remove docker assets from main goreleaser configuration to reduce mac-os runner friction (#1133)
+  * remove prefixed v from tag to match release (#1131)
+  * rollback actions-setup-docker to earlier version (#1130)
+  * Bump go-rustaudit to support rustaudit 0.2.0 (#1127)
+  * bump bouncer to v0.4.0 (#1125)
+  * Added ppc64le supported to the syft:debug image (#1124)
+  * add a cataloger for binaries built with rust-audit (#1116)
+  * bump goreleaser to v1.10.3 (#1123)
+  * bump golangci-lint to v1.47.2 (#1122)
+  * bump cosign in bootstrap-tools to v1.10.0 (#1121)
+  * Added s390x support (#1117)
+  * Delete pr_action.yaml (#1120)
+  * fix: use generic instead of not generating purl (#1119)
+  * bump cosign to v1.10.0 (#1114)
+
 -------------------------------------------------------------------
 Thu Jul 21 15:12:29 UTC 2022 - kastl@b1-systems.de
 

syft.spec

@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        0.52.0
+Version:        0.55.0
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:26d3f10dd7b05f3f64bd80a759e19e90f3915dad0b6254e5ca076baea7e6ffdc
+oid sha256:3dc1a3778173daf76631204b3211cae5e4519d0e11a76e19a5e7dff07eb9f8b7
-size 51390212
+size 50868446