8000 Comparing v0.21.0...v0.21.1 · anchore/grype-db · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: anchore/grype-db
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.21.0
Choose a base ref
...
head repository: anchore/grype-db
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.21.1
Choose a head ref
  • 20 commits
  • 24 files changed
  • 5 contributors

Commits on Mar 28, 2024

  1. chore(deps): pdate grype-db bootstrap tools to latest versions. (#270)

    @anchore-actions-token-generator
    anchore-actions-token-generator[bot] authored Mar 28, 2024
    Configuration menu
    Copy the full SHA
    c4678a8 View commit details
    Browse the repository at this point in the history

Commits on Mar 29, 2024

  1. chore(deps): update grype-db bootstrap tools to latest versions. (#272)

    @anchore-actions-token-generator
    anchore-actions-token-generator[bot] authored Mar 29, 2024
    Configuration menu
    Copy the full SHA
    dd501a4 View commit details
    Browse the repository at this point in the history

  2. chore(deps): Bump gorm.io/gorm from 1.25.8 to 1.25.9 (#271)

    @dependabot
    dependabot[bot] authored Mar 29, 2024
    Configuration menu
    Copy the full SHA
    49e34df View commit details
    Browse the repository at this point in the history

Commits on Mar 31, 2024

  1. chore(deps): Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#248)

    @dependabot
    dependabot[bot] authored Mar 31, 2024
    Configuration menu
    Copy the full SHA
    e5d67e9 View commit details
    Browse the repository at this point in the history

Commits on Apr 2, 2024

  1. chore(deps-dev): Bump cryptography from 42.0.0 to 42.0.4 (#276) 

    Bumps [cryptography](https://github.com/pyca/cryptography) from 42.0.0 to 42.0.4.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@42.0.0...42.0.4)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 2, 2024
    Configuration menu
    Copy the full SHA
    a6af078 View commit details
    Browse the repository at this point in the history

  2. chore(deps-dev): Bump orjson from 3.9.4 to 3.9.15 (#275) 

    Bumps [orjson](https://github.com/ijl/orjson) from 3.9.4 to 3.9.15.
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.9.4...3.9.15)

---
updated-dependencies:
- dependency-name: orjson
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 2, 2024
    Configuration menu
    Copy the full SHA
    86d3f8b View commit details
    Browse the repository at this point in the history

  3. chore(deps): Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (#274 

    )

Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 2, 2024
    Configuration menu
    Copy the full SHA
    894d612 View commit details
    Browse the repository at this point in the history

  4. chore(deps): Bump github.com/docker/docker (#273) 

    Bumps [github.com/docker/docker](https://github.com/docker/docker) from 25.0.3+incompatible to 25.0.5+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v25.0.3...v25.0.5)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 2, 2024
    Configuration menu
    Copy the full SHA
    89635fc View commit details
    Browse the repository at this point in the history

  5. chore: add workflow to run periodically which downloads the db listin… 

    …g and latest db with timing info (#278)

Signed-off-by: Keith Zantow <kzantow@gmail.com>
    @kzantow
    kzantow authored Apr 2, 2024
    Configuration menu
    Copy the full SHA
    d19d208 View commit details
    Browse the repository at this point in the history

  6. chore: add checkout step (#279) 

    Signed-off-by: Keith Zantow <kzantow@gmail.com>
    @kzantow
    kzantow authored Apr 2, 2024
    Configuration menu
    Copy the full SHA
    ecb8cc9 View commit details
    Browse the repository at this point in the history

Commits on Apr 4, 2024

  1. chore: pass max time to download canary (#281) 

    This should help by highlighting slow downloads as failures in the
github UI.

Signed-off-by: Will Murphy <will.murphy@anchore.com>
    @willmurphyscode
    willmurphyscode authored Apr 4, 2024
    Configuration menu
    Copy the full SHA
    185e3f8 View commit details
    Browse the repository at this point in the history

Commits on Apr 5, 2024

  1. chore(deps): Bump github.com/anchore/grype from 0.74.7 to 0.75.0 (#282) 

    Bumps [github.com/anchore/grype](https://github.com/anchore/grype) from 0.74.7 to 0.75.0.
- [Release notes](https://github.com/anchore/grype/releases)
- [Changelog](https://github.com/anchore/grype/blob/main/.goreleaser.yaml)
- [Commits](anchore/grype@v0.74.7...v0.75.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/grype
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 5, 2024
    Configuration menu
    Copy the full SHA
    9bde72f View commit details
    Browse the repository at this point in the history

Commits on Apr 8, 2024

  1. chore(deps): Bump golang.org/x/sync from 0.6.0 to 0.7.0 (#283) 

    Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.6.0 to 0.7.0.
- [Commits](golang/sync@v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 8, 2024
    Configuration menu
    Copy the full SHA
    b1a3a8e View commit details
    Browse the repository at this point in the history

  2. chore(deps-dev): Bump black from 23.7.0 to 24.3.0 (#277) 

    Bumps [black](https://github.com/psf/black) from 23.7.0 to 24.3.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@23.7.0...24.3.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 8, 2024
    Configuration menu
    Copy the full SHA
    409b885 View commit details
    Browse the repository at this point in the history

Commits on Apr 9, 2024

  1. Update grype-db bootstrap tools to latest versions. (#280) 

    Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: wagoodman <590471+wagoodman@users.noreply.github.com>
    @anchore-actions-token-generator @wagoodman
    anchore-actions-token-generator[bot] and wagoodman authored Apr 9, 2024
    Configuration menu
    Copy the full SHA
    4c6d9ee View commit details
    Browse the repository at this point in the history

Commits on Apr 16, 2024

  1. chore(deps): Bump github.com/anchore/grype from 0.75.0 to 0.76.0 (#287) 

    Bumps [github.com/anchore/grype](https://github.com/anchore/grype) from 0.75.0 to 0.76.0.
- [Release notes](https://github.com/anchore/grype/releases)
- [Changelog](https://github.com/anchore/grype/blob/main/.goreleaser.yaml)
- [Commits](anchore/grype@v0.75.0...v0.76.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/grype
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 16, 2024
    Configuration menu
    Copy the full SHA
    afd611c View commit details
    Browse the repository at this point in the history

  2. chore(deps): Bump mxschmitt/action-tmate from 3.17 to 3.18 (#289) 

    Bumps [mxschmitt/action-tmate](https://github.com/mxschmitt/action-tmate) from 3.17 to 3.18.
- [Release notes](https://github.com/mxschmitt/action-tmate/releases)
- [Changelog](https://github.com/mxschmitt/action-tmate/blob/master/RELEASE.md)
- [Commits](mxschmitt/action-tmate@a283f94...b3db6e1)

---
updated-dependencies:
- dependency-name: mxschmitt/action-tmate
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 16, 2024
    Configuration menu
    Copy the full SHA
    b731f93 View commit details
    Browse the repository at this point in the history

  3. chore(deps): Bump idna from 3.4 to 3.7 (#290) 

    Bumps [idna](https://github.com/kjd/idna) from 3.4 to 3.7.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.4...v3.7)

---
updated-dependencies:
- dependency-name: idna
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 16, 2024
    Configuration menu
    Copy the full SHA
    2b1d432 View commit details
    Browse the repository at this point in the history

  4. chore(deps): Bump github.com/klauspost/compress from 1.17.7 to 1.17.8 (… 

    …#284)

Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.17.7 to 1.17.8.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.7...v1.17.8)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 16, 2024
    Configuration menu
    Copy the full SHA
    8b3072d View commit details
    Browse the repository at this point in the history

  5. chore(deps): Bump peter-evans/create-pull-request from 6.0.2 to 6.0.3 (… 

    …#286)

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@70a41ab...c55203c)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 16, 2024
    Configuration menu
    Copy the full SHA
    472e458 View commit details
    Browse the repository at this point in the history
Loading
0