Accepting request 1180067 from devel:kubic

OBS-URL: https://build.opensuse.org/request/show/1180067
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/syft?expand=0&rev=75

_service

@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v1.5.0</param>
+    <param name="revision">v1.6.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">ac34808b9c55bb274b1205f9b5d9cf495239577d</param></service></servicedata>
+              <param name="changesrevision">c43f4fb416c34c1c4b3997373689d8d4c0fb9b36</param></service></servicedata>

syft-1.5.0.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:829b3fe726e8322bb6c4f916eab239a8297f2f27d0776dbd4e52f7d59d1dcffc
-size 24702477

syft-1.5.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b474419ca29e6413ad02414b7bd0849ef2d1faa51657073c42b8f19748a60651
-size 5737109

syft-1.6.0.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2aa1526877c6afabcb23bbc74d0a6fda46f59c30c66066a3ffd3263e9bf66339
+size 25097741

syft.changes

@@ -1,3 +1,31 @@
+-------------------------------------------------------------------
+Mon Jun 10 19:52:37 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 1.6.0:
+  * Added Features
+    - Add relationships for go binary packages [#2912 @wagoodman]
+    - Add classifier for util-linux [#2933 @LaurentGoderre]
+    - Lua: Add support for more advanced syntax [#2908
+      @LaurentGoderre]
+    - add license field to ELF binary package metadata [#2890
+      @brian-ebarb]
+    - install.sh: check checksums file's signature [#2884 #2941
+      @wagoodman]
+    - Detect ELF package notes from fedora binaries [#2713 #2939
+      @wagoodman]
+  * Bug Fixes
+    - Use redhat as namespace for redhat rpms [#2914 @ralphbean]
+    - Close sqlite driver after testing sqlite availability [#2922
+      @ttc0419]
+    - syft does not find anything in archives if /tmp is a tmpfs
+      [#2894 #2918 @willmurphyscode]
+    - Scanning a git repository folder present in /tmp produce an
+      empty sbom [#2847 #2918 @willmurphyscode]
+  * Additional Changes
+    - update unit tests to use pinned patch version [#2932
+      @spiffcs]
+    - fix comments and spelling [#2920 @dufucun]
+
 -------------------------------------------------------------------
 Fri May 31 14:28:58 UTC 2024 - andrea.manzini@suse.com
 

syft.obsinfo

@@ -1,4 +1,4 @@
 name: syft
-version: 1.5.0
-mtime: 1716905586
-commit: ac34808b9c55bb274b1205f9b5d9cf495239577d
+version: 1.6.0
+mtime: 1718033393
+commit: c43f4fb416c34c1c4b3997373689d8d4c0fb9b36

syft.spec

@@ -19,14 +19,14 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        1.5.0
+Version:        1.6.0
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0
 URL:            https://github.com/anchore/syft
 Source:         syft-%{version}.tar.gz
 Source1:        vendor.tar.gz
-BuildRequires:  go >= 1.21
+BuildRequires:  go >= 1.22
 
 %description
 A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. Exceptional for vulnerability detection when used with a scanner like Grype.

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:a8ab4ef414c9e0df5fd8d7c4aed69ead0b9e7df01da58d4d64b2e1461f00a5db
-size 49413210
+oid sha256:72af108ecd4c0d5e1f4a472ba032f9445fe1b19ebff209f4e92cbc6f5e14291a
+size 49716730