-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2026 18:05:03 +0200 Source: debsbom Architecture: source Version: 0.10.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Felix Moessbauer <felix.moessbauer@siemens.com> Changes: debsbom (0.10.1-1) unstable; urgency=medium . * New upstream version 0.10.1 * CycloneDX SBOMs now uses the latest available schema version by default * Accept tar root filesystems during SBOM generation * Add the distro qualifier to PURLs * Map well-known Debian license exceptions to SPDX license expressions * Improve detection of distro architecture if no arch-native file * Fix partial license expressions being emitted on malformed paragraphs * Decode various Debian files as UTF-8 * Use correct timezone for SPDX timestamps Checksums-Sha1: cf8bc0dd2a93c9942baefbd0eb4cbe2a94f7e3dd 2705 debsbom_0.10.1-1.dsc dea9c67b0b1a764e55422dd96738867b68a13c5c 181820 debsbom_0.10.1.orig.tar.xz 22eaf738dc083f7bb15b8b2544d3ad7dcb9e6f57 9160 debsbom_0.10.1-1.debian.tar.xz 423c3006678cfdb0e515c8ce1726d9992f524ad2 9269 debsbom_0.10.1-1_amd64.buildinfo Checksums-Sha256: 7e0210d7df32a1f5d104f2bdc0592badca8db115390310c3dff69dc22d2e95ab 2705 debsbom_0.10.1-1.dsc dc271f8e41ae1221c54e17b51020fae3f197f3f4b07185ab3f37cf9e97c8de1e 181820 debsbom_0.10.1.orig.tar.xz 4cfa4e21e073326510982ccce84c8fe238812517b766c451345823e5db8f7ee5 9160 debsbom_0.10.1-1.debian.tar.xz c56a038359815caaacbacb1c0cbf05255cf11217974172103dfaf42edf1c28d5 9269 debsbom_0.10.1-1_amd64.buildinfo Files: 92d597f0d05afa0b7716ab3c0df25587 2705 python optional debsbom_0.10.1-1.dsc c57a14e555b0b7db5c42adba34cde1d3 181820 python optional debsbom_0.10.1.orig.tar.xz 723651a191269c69761ef2628237ad9d 9160 python optional debsbom_0.10.1-1.debian.tar.xz fc59d2d48c073bb08ea330de536f9a0d 9269 python optional debsbom_0.10.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJRBAEBCgA7FiEEr3P271pTz+MEVp9Q5kijEfZ6UPwFAmqZnUkdHGZlbGl4Lm1v ZXNzYmF1ZXJAc2llbWVucy5jb20ACgkQ5kijEfZ6UPyj7Q//SkwN5bd5wvQNTz3j m1pkFIrAyO1zMg5kFLtreYUCrz7uiYdcyoENW6H9MKk7M5IlpGw5IYy+G9+XlRXB hBy/F/jRsMcHwHSYly0JIwLfXN1zOxjJONFhggnvPRrB4vxf9sPTDEDtxTqft7yb dH1ciLWM0ARuee0I4g3Q7cHFqSBUlZf9InJuAqlpDSi3J6S/wtHFccFHUVBPIju0 3MZTzhtdAd/jIkm3o9iA/tiIcr379guedPx9URC5twxX4kanPFsJZPIj8UsMSJ73 j5aHImcR7MVkI7CNoY558iS6eHyuXhS/ZONFcHfBlvACzhxD5F8WZUSGBKkUyQhk qf6hTKZOK+9TfKT8lVsmOuujTxMP/wiKYJg0SEcPOxzgOj2WHZm3mRAKBS6yFYV2 a7azqQGj5gcaFyD8T6KW9LzUu6EIERbP2ZCyyqgTceFwPKWlwKRDCocyVhLnHi7W u47mzRf0a74mxWMCKy1YNzBJyUr8xmHWPKG/NX5wsrwrkpZLeQ0cLThNDMhDrrPA cBi+axtL21uCpXp8iy0CTTaEBPY+ogSHA/RwvEVwyA7JD7W9Q6AXFqZMO/AKiwcH gRbIqqTIWvBIe3O4P5kyGXJQ/6glAFb7eyBuyDjOrq8pUQTdkdhMFuzwm18v9d8j S+3/cVm+9teF9f0UXa7jxfYXgZ0= =nuX3 -----END PGP SIGNATURE-----