diff --git a/_service b/_service index 79c41f6..2291d52 100644 --- a/_service +++ b/_service @@ -3,7 +3,7 @@ https://github.com/anchore/syft git .git - v0.99.0 + v0.100.0 @PARENT_TAG@ enable v(.*) diff --git a/_servicedata b/_servicedata index 82dfab4..981d1ab 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/anchore/syft - 3cffa0b7fd276a35123c48e45407c4f402f2c58f \ No newline at end of file + a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff \ No newline at end of file diff --git a/syft-0.100.0.obscpio b/syft-0.100.0.obscpio new file mode 100644 index 0000000..e17922e --- /dev/null +++ b/syft-0.100.0.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:3d504fdbb3c34b9f30f047c40bebe980fbb8c81b6d48d2a2187149f9f46ed319 +size 23084045 diff --git a/syft-0.99.0.obscpio b/syft-0.99.0.obscpio deleted file mode 100644 index b2c4eee..0000000 --- a/syft-0.99.0.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ba9e17826f3a5e818c3466f8d168ee7b82fd8c5f7321694f01556b840aec1504 -size 23071245 diff --git a/syft.changes b/syft.changes index c0b8d11..1adc3d8 100644 --- a/syft.changes +++ b/syft.changes @@ -1,62 +1,119 @@ +------------------------------------------------------------------- +Sat Jan 06 15:26:12 UTC 2024 - andrea.manzini@suse.com + +- Update to version 0.100.0: + * Add ability to extend the binaries cataloguers (#2469) + * chore(deps): bump anchore/sbom-action from 0.15.1 to 0.15.2 + (#2464) + * fix: add missing purl for busybox (#2457) + * Fix diff error obfuscating binary test failures message (#2468) + * Replace `packages` command with `scan` (#2446) + * fix: PURLs with "nuget" type are dotnet packages (#2466) + * chore(deps): update tools to latest versions (#2459) + * chore(deps): update CPE dictionary index (#2458) + * chore: update binary to -x (#2456) + * Add more functionality to the ErLang parser (#2390) + * Added OpenSSL binary matcher (#2416) + * chore(deps): update stereoscope to + 590920dabc5479216e755983d41367b6be3544f3 (#2452) + * chore(deps): update tools to latest versions (#2451) + * chore(deps): bump github/codeql-action from 3.22.11 to 3.22.12 + (#2455) + ------------------------------------------------------------------- Thu Dec 21 16:26:53 UTC 2023 - opensuse_buildservice@ojkastl.de - Update to version 0.99.0: * chore: remove execute from test fixtures (#2450) * chore(deps): update tools to latest versions (#2447) - * fix: don't panic when hackage missing in haskell stack yaml lock (#2448) + * fix: don't panic when hackage missing in haskell stack yaml + lock (#2448) * Add binary classifier for the ERLang interpretter (#2417) * Add binary classifier for Julia lang (#2427) * Add binary detection for PHP composer (#2432) - * chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (#2433) + * chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 + (#2433) * chore(deps): update CPE dictionary index (#2442) - * chore(deps): update stereoscope to 4b999b76ca8901d15bb97aef445dc94c38d11d5c (#2440) - * fix syft-json test to use pretty json for snapshot testing (#2441) + * chore(deps): update stereoscope to + 4b999b76ca8901d15bb97aef445dc94c38d11d5c (#2440) + * fix syft-json test to use pretty json for snapshot testing + (#2441) * refactor pkg.Collection (#2439) - * refactor javascript cataloger to use configuration options when creating packages (#2438) + * refactor javascript cataloger to use configuration options when + creating packages (#2438) * use single source of truth for archive options (#2437) * fix file digest cataloger when passed coordinates (#2436) - * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.8.0 (#2413) - * Look for a maven version in a pom from a parent dependency management section (#2423) - * Parse Python licenses from LicenseExpression entry in the Wheel Metadata (#2431) - * chore(deps): bump github/codeql-action from 2.22.10 to 3.22.11 (#2430) - * chore(deps): bump modernc.org/sqlite from 1.27.0 to 1.28.0 (#2429) + * chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2 + to 0.8.0 (#2413) + * Look for a maven version in a pom from a parent dependency + management section (#2423) + * Parse Python licenses from LicenseExpression entry in the Wheel + Metadata (#2431) + * chore(deps): bump github/codeql-action from 2.22.10 to 3.22.11 + (#2430) + * chore(deps): bump modernc.org/sqlite from 1.27.0 to 1.28.0 + (#2429) * chore(deps): update tools to latest versions (#2428) - * Parse Python licenses from LicenseFile entry in the Wheel Metadata (#2331) - * fix: use filepath instead of path for file source exclusions (#2411) + * Parse Python licenses from LicenseFile entry in the Wheel + Metadata (#2331) + * fix: use filepath instead of path for file source exclusions + (#2411) * chore(deps): bump github.com/charmbracelet/bubbletea (#2424) - * chore(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 (#2425) - * chore(deps): bump github/codeql-action from 2.22.9 to 2.22.10 (#2426) + * chore(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 + (#2425) + * chore(deps): bump github/codeql-action from 2.22.9 to 2.22.10 + (#2426) * chore(deps): bump dawidd6/action-homebrew-bump-formula (#2420) - * feat: add the option to retrieve remote licenses for projects defined in a maven pom (#2409) - * chore(deps): bump github/codeql-action from 2.22.8 to 2.22.9 (#2400) - * chore(deps): bump github.com/saferwall/pe from 1.4.7 to 1.4.8 (#2415) - * chore(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 (#2414) + * feat: add the option to retrieve remote licenses for projects + defined in a maven pom (#2409) + * chore(deps): bump github/codeql-action from 2.22.8 to 2.22.9 + (#2400) + * chore(deps): bump github.com/saferwall/pe from 1.4.7 to 1.4.8 + (#2415) + * chore(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to + 5.11.0 (#2414) * chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 (#2401) * chore(deps): update tools to latest versions (#2408) * chore(deps): update CPE dictionary index (#2412) - * fix(java): improve identification for org.codehaus.groovy artifacts (#2404) - * fix(java): improve identification for commons-jelly artifacts (#2399) - * fix(java): improve identification for io.minio artifacts (#2398) - * fix(java): improve identification for com.graphql-java artifacts (#2397) + * fix(java): improve identification for org.codehaus.groovy + artifacts (#2404) + * fix(java): improve identification for commons-jelly artifacts + (#2399) + * fix(java): improve identification for io.minio artifacts + (#2398) + * fix(java): improve identification for com.graphql-java + artifacts (#2397) * chore(deps): update tools to latest versions (#2395) * chore: enhance java purl generation integration test (#2393) - * feat: add ability to retrieve remote licenses for yarn.lock (#2338) - * chore(deps): bump anchore/sbom-action from 0.15.0 to 0.15.1 (#2392) - * Retrieve remote licenses using pom.properties when there is no pom.xml (#2315) - * fix(java): improve identification for org.apache.tapestry artifacts (#2384) - * fix(java): improve identification for io.ratpack artifacts (#2379) - * fix(java): improve identification for org.apache.cassandra artifacts (#2386) - * fix(java): improve identification for org.neo4j.procedure artifacts (#2388) + * feat: add ability to retrieve remote licenses for yarn.lock + (#2338) + * chore(deps): bump anchore/sbom-action from 0.15.0 to 0.15.1 + (#2392) + * Retrieve remote licenses using pom.properties when there is no + pom.xml (#2315) + * fix(java): improve identification for org.apache.tapestry + artifacts (#2384) + * fix(java): improve identification for io.ratpack artifacts + (#2379) + * fix(java): improve identification for org.apache.cassandra + artifacts (#2386) + * fix(java): improve identification for org.neo4j.procedure + artifacts (#2388) * fix: bump fangs for ptr summarize fix (#2387) - * fix(java): improve identification for org.elasticsearch artifacts (#2383) - * fix(java): improve identification for org.apache.geode artifacts (#2382) - * fix(java): improve identification for org.apache.tomcat.embed artifacts (#2381) - * fix(java): improve identification for io.projectreactor.netty artifacts (#2378) - * fix(java): improve identification for org.eclipse.platform artifacts (#2349) + * fix(java): improve identification for org.elasticsearch + artifacts (#2383) + * fix(java): improve identification for org.apache.geode + artifacts (#2382) + * fix(java): improve identification for org.apache.tomcat.embed + artifacts (#2381) + * fix(java): improve identification for io.projectreactor.netty + artifacts (#2378) + * fix(java): improve identification for org.eclipse.platform + artifacts (#2349) * Generalize UI events for cataloging tasks (#2369) * chore(deps): update tools to latest versions (#2376) - * chore(deps): bump github.com/google/go-containerregistry (#2377) + * chore(deps): bump github.com/google/go-containerregistry + (#2377) * chore: fix tests failing due to Mac Rosetta cache (#2374) * fix: improve dotnet portable executable identification (#2133) diff --git a/syft.obsinfo b/syft.obsinfo index f502f07..86b8e18 100644 --- a/syft.obsinfo +++ b/syft.obsinfo @@ -1,4 +1,4 @@ name: syft -version: 0.99.0 -mtime: 1703111669 -commit: 3cffa0b7fd276a35123c48e45407c4f402f2c58f +version: 0.100.0 +mtime: 1704486727 +commit: a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff diff --git a/syft.spec b/syft.spec index addf784..cf7d738 100644 --- a/syft.spec +++ b/syft.spec @@ -1,7 +1,7 @@ # # spec file for package syft # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: syft -Version: 0.99.0 +Version: 0.100.0 Release: 0 Summary: CLI tool and library for generating a Software Bill of Materials License: Apache-2.0 diff --git a/vendor.tar.gz b/vendor.tar.gz index 07fd760..760e54b 100644 --- a/vendor.tar.gz +++ b/vendor.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:1f6370d23bdbdac748fbcd5cd4bdc116e5dfe7ed079437e65343b1604149975d -size 36001357 +oid sha256:2c0f3b2c191c29953b4c2b74d5ee419c19661d9c22e80d29033473934845bd44 +size 36085834