Accepting request 1036800 from devel:kubic

OBS-URL: https://build.opensuse.org/request/show/1036800
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/syft?expand=0&rev=13

_service

@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.60.3</param>
+    <param name="revision">v0.62.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
@@ -16,6 +16,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="disabled">
-    <param name="archive">syft-0.60.3.tar.gz</param>
+    <param name="archive">syft-0.62.0.tar.gz</param>
   </service>
 </services>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">bc9740d50a38e9660f2f98ed91d84c6d8799cf70</param></service></servicedata>
+              <param name="changesrevision">da4b2df57640e03f273a2e7e9b04eca40555e139</param></service></servicedata>

syft-0.60.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:98b6098157222130a3bb304ad6ea869058d97586daf1e91bafe0b1f1a98e4f3e
-size 3846500

syft-0.62.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a0a8f2ba87df796226fd8488b84b51fd484785240feca0f22d9542d0bff33162
+size 3871816

syft.changes

@@ -1,3 +1,36 @@
+-------------------------------------------------------------------
+Sat Nov 19 12:04:28 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.62.0:
+  * fix: spdx java checksum correctness (#1348)
+  * feat: Add support for npm lockfile version 3 (#1206)
+
+-------------------------------------------------------------------
+Fri Nov 18 15:38:51 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.61.0:
+  * 1111 clean name bug (#1347)
+  * Add spdx relationship encoding for dependencies (#1342)
+  * feat: SPDX 2.3 support (#1311)
+  * SBOM cataloger (#1029)
+  * chore: clean up linting configuration (#1343)
+  * fix: Unmarshal Syft JSON with missing metadata (#1338)
+  * fix apk decode for older data shapes (#1341)
+  * chore: add unit test for wolfi os release identification (#1340)
+  * fix: Output only valid CPEs for CycloneDX OS components (#1339)
+  * feat: Add `--name` option to override name in output (#1269)
+  * Add support for dependency relationships for alpine (apk) (#1063)
+  * normalize alpm md5 refs (#1333)
+  * Update java generic cataloger (#1329)
+  * Support encoding map types to CycloneDX properties (#1332)
+  * Update swift cataloger to generic cataloger (#1324)
+  * port rust cataloger to new generic cataloger pattern (#1323)
+  * port ruby cataloger to new generic cataloger pattern (#1322)
+  * port rpm cataloger to new generic cataloger pattern (#1321)
+  * port python cataloger to new generic cataloger pattern (#1319)
+  * Update portage cataloger to new generic cataloger (#1316)
+  * port php cataloger to new generic cataloger pattern (#1315)
+
 -------------------------------------------------------------------
 Tue Nov 15 09:52:45 UTC 2022 - kastl@b1-systems.de
 

syft.spec

@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        0.60.3
+Version:        0.62.0
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:db7fd23c3a78c2062661751bdeedbb51e495cacc614111743c0e21952864ecd4
+oid sha256:68d2302e565805612ece5354606be8fe9b6526465348154a0f1a3110339b6c03
-size 51460921
+size 51476686