-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2026 18:05:03 +0200 Source: debsbom Architecture: source Version: 0.10.1-1~bpo13+1 Distribution: trixie-backports Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Felix Moessbauer <felix.moessbauer@siemens.com> Changes: debsbom (0.10.1-1~bpo13+1) trixie-backports; urgency=medium . * New upstream version 0.10.1 * CycloneDX SBOMs now uses the latest available schema version by default * Accept tar root filesystems during SBOM generation * Add the distro qualifier to PURLs * Map well-known Debian license exceptions to SPDX license expressions * Improve detection of distro architecture if no arch-native file * Fix partial license expressions being emitted on malformed paragraphs * Decode various Debian files as UTF-8 * Use correct timezone for SPDX timestamps Checksums-Sha1: ce4824c356e157da770f9b20ba57676052ce92ce 2737 debsbom_0.10.1-1~bpo13+1.dsc dea9c67b0b1a764e55422dd96738867b68a13c5c 181820 debsbom_0.10.1.orig.tar.xz 51f17950d23664bb19f7be213a4c4fbd9d672717 9192 debsbom_0.10.1-1~bpo13+1.debian.tar.xz 912679802753f90a816aba25ae3381703f202d90 9673 debsbom_0.10.1-1~bpo13+1_amd64.buildinfo Checksums-Sha256: 87dc5112890e6e67f8fbd6ce1ad2d21a93eaba926d72fa1cffdc021525c2c700 2737 debsbom_0.10.1-1~bpo13+1.dsc dc271f8e41ae1221c54e17b51020fae3f197f3f4b07185ab3f37cf9e97c8de1e 181820 debsbom_0.10.1.orig.tar.xz 0a67821fabe542e9fb4d092194a64ad38535c0d80749af569e291a68f0c3b75e 9192 debsbom_0.10.1-1~bpo13+1.debian.tar.xz daecdb277eaad8dd7294808c23278840062bc98ecccde04cef01dbf6ddfa46e8 9673 debsbom_0.10.1-1~bpo13+1_amd64.buildinfo Files: ace89157e952cbfb0a2b3838182a77b8 2737 python optional debsbom_0.10.1-1~bpo13+1.dsc c57a14e555b0b7db5c42adba34cde1d3 181820 python optional debsbom_0.10.1.orig.tar.xz 388c8b10d311503a61b4dcd7ad852bda 9192 python optional debsbom_0.10.1-1~bpo13+1.debian.tar.xz bdb9f440602fba71b55cbff96a7cd6ee 9673 python optional debsbom_0.10.1-1~bpo13+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJRBAEBCgA7FiEEr3P271pTz+MEVp9Q5kijEfZ6UPwFAmqZpEMdHGZlbGl4Lm1v ZXNzYmF1ZXJAc2llbWVucy5jb20ACgkQ5kijEfZ6UPz8RA//SpjnrfiOYvhxdOyj 7JrAkJQi2Iuu8Qag3gTDcN9bkLqZuyRGjaI6iu51FpP8ebMf9sHd0yLIx6qWeqRE 68AkJ3TNhf2lprCGqP/p9n7z9/T4SpdtWuKj96uIRv4PyeqsxuMctYWVlsO97vhl 5IBs+Urbvn6Ka9tQU9SOKyw4YzhVEzyG7ya6FHV36eGq6HeoindGJBuuSoqLmMoO j5sz99Di33wnOoRQIzX1Zcnn/gUN4mSvhbcUym7daxI6QDBk/OFuryct0ZmACXnb 4eI0VIUx+gojMmmbf0t2u7WXdYgf57cW2KV4X995TnJ2OTIj+vosJRcyZKVnwaig M/hg0s4YZKsfJUP8M9B8bSLejhT+sU4gnHflDkzJsmp/XOmN/7qhmswET4QMX6y6 TjPEVgdpyQ2T8yQxHx3xZeY5QsEDjN8EwL9DVooq7fjX1ykC/zK/+673YFL5KTj2 bY97HHazZeAfIuwBVFDw2vmdeXF2XfLGMcyJKlyhrrFP17AnrChrFJuL16YrbbGc ziJgTJ8nVRZqqOv0ucOihZRk+qJvXTSCDLlgdzZ3g9HWJgSfyHcBtReZVw4uAiKX XnGzuAsZI1mT9DzpsqwvcIRGHjg2tW76cxbMGwbrTKWDOBewhVvmjaXVQJmLXiOv C1PrfRUg1ACkv/AR8UMJ85veiiY= =zBlX -----END PGP SIGNATURE-----