-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 14 Apr 2026 16:46:50 +0200
Source: debsbom
Architecture: source
Version: 0.7.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Felix Moessbauer <felix.moessbauer@siemens.com>
Changes:
debsbom (0.7.2-1) unstable; urgency=medium
.
* New upstream version 0.7.2
* Correctly handle paths starting at a source package trace-path
* Duplicate root nodes are not an error when the --omit-roots option is set
in merge command
* Correctly handle extendes states information for arch=all packages
* Raise an error if there is no root node in CDX SBOMs for the trace-path
Checksums-Sha1:
34e11a6caaf57cf48ad9dbc4c54133eae2a990fb 2732 debsbom_0.7.2-1.dsc
2ad8c880141305d8d01919504c1f6adf9ea8c423 154720 debsbom_0.7.2.orig.tar.xz
86114cb3fa6ac964982ea1fcb36ccf12c04568fe 8436 debsbom_0.7.2-1.debian.tar.xz
6412bc638f00bf16fdf3df5032c45228b7dfe080 9498 debsbom_0.7.2-1_amd64.buildinfo
Checksums-Sha256:
50d4e03be46285def36002f3618cea8e60ac1d964e2a1045678a03975acdb23a 2732 debsbom_0.7.2-1.dsc
0338b3c39e9f3671d09cbcaeb91583da953ddaa77ec6759cab83211fded88d0d 154720 debsbom_0.7.2.orig.tar.xz
597e6239e3c02d97cf869799669432821d4678373e1326720a9a54602e3da0b2 8436 debsbom_0.7.2-1.debian.tar.xz
8b87fa8ab212791b270ba77776ae860bb5d94016f4afac39ab8a7777d64bdc1e 9498 debsbom_0.7.2-1_amd64.buildinfo
Files:
73ea11d0ff94b1679031b847407051dd 2732 python optional debsbom_0.7.2-1.dsc
d7f8dd6fd583100ad56c5ba33c30bf7c 154720 python optional debsbom_0.7.2.orig.tar.xz
7611c17233cece671188ccacb9e655b7 8436 python optional debsbom_0.7.2-1.debian.tar.xz
ee60e34baac1e03859318955a67ae424 9498 python optional debsbom_0.7.2-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJRBAEBCgA7FiEEr3P271pTz+MEVp9Q5kijEfZ6UPwFAmneWJEdHGZlbGl4Lm1v
ZXNzYmF1ZXJAc2llbWVucy5jb20ACgkQ5kijEfZ6UPzWuhAAoSe6hfwJR2AdcWIE
oCCbVtxC0HvGAB0Y/ZLsiLBEz60zV4VqX9Lkub/gdDXOKyJ+2MEOw36ZnzE0P7MK
pahq69BS6TXsSX5VVGShc3d1mJor2qLENpLB1fvU/CWWGLt/se0LXtOD8unTyQZe
9jE57TNqldCzBlK6SDNigjY6RUPtnrIG7o9+/0K9I9DJSgZ+JUuTOPgGLiCQdBmz
qqPz5bKuefYssntOZyEKsff2cfiGPE1uatRELSDMhUelU/hCces8OdEJDNZ7CPsd
vyp2hnbdEjTE+0pJHXK4HsKsEOHyE0joCwvPMECWHlmI9/4qtZdXg++EaAJ1iAQp
fTNd/+Ezo1NiHy0JwVyLq4hSJhvcZilCwbPxPUVGkH/e3ZpFpR9yftl+5D1zVtW+
o9Df8R93KB6KJER4CwMPisrNcGZOFTrZ0Mi+StiOUWPrHlXep4sEi+lXuZtJtX5S
rLU1BHghENdvtwp69qLPks3SDaoCzy5PI1SWafH9sHbV6MkFLYrml4zQiNeYd2SI
ugFdvMYU85eGZd62SJzJ6367PeUtIX2PrRveOGs8DXyZaFaNqvCLXbq/Z9tTw04t
+xQEjNjrBvaRJrx5bUlBy58zDJ/UK9LrkuKLVc/NApF44fPgZkKfLnF9Lt+/OYtA
6bp3Ytbtj3gaCKNKGvN2fovcyy4=
=Fh/T
-----END PGP SIGNATURE-----
