8000 Comparing v1.23.1...main · anchore/syft · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: anchore/syft
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.23.1
Choose a base ref
...
head repository: anchore/syft
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
  • 13 commits
  • 70 files changed
  • 9 contributors

Commits on Apr 25, 2025

  1. chore(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 (#3832) 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.18.0 to 0.19.0.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@f325610...9f73021)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 25, 2025
    Configuration menu
    Copy the full SHA
    22d8b30 View commit details
    Browse the repository at this point in the history

  2. fix the fluent-bit regex detection pattern (#3817) 

    Signed-off-by: Yuntao Hu <victorhu493@gmail.com>
    @VictorHuu
    VictorHuu authored Apr 25, 2025
    Configuration menu
    Copy the full SHA
    fa59954 View commit details
    Browse the repository at this point in the history

Commits on Apr 30, 2025

  1. chore(deps): bump github.com/charmbracelet/bubbletea from 1.3.4 to 1.… 

    …3.5 (#3838)

Bumps [github.com/charmbracelet/bubbletea](https://github.com/charmbracelet/bubbletea) from 1.3.4 to 1.3.5.
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Changelog](https://github.com/charmbracelet/bubbletea/blob/main/.goreleaser.yml)
- [Commits](charmbracelet/bubbletea@v1.3.4...v1.3.5)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/bubbletea
  dependency-version: 1.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 30, 2025
    Configuration menu
    Copy the full SHA
    20ca60d View commit details
    Browse the repository at this point in the history

  2. chore(deps): update tools to latest versions (#3835) 

    Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com>
    @anchore-actions-token-generator @spiffcs
    anchore-actions-token-generator[bot] and spiffcs authored Apr 30, 2025
    Configuration menu
    Copy the full SHA
    1ecf1ce View commit details
    Browse the repository at this point in the history

  3. chore(deps): update CPE dictionary index (#3834) 

    Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: wagoodman <590471+wagoodman@users.noreply.github.com>
    @anchore-actions-token-generator @wagoodman
    anchore-actions-token-generator[bot] and wagoodman authored Apr 30, 2025
    Configuration menu
    Copy the full SHA
    6dca10f View commit details
    Browse the repository at this point in the history

  4. fix:Resolve ancestral symlinks correctly (#3783) 

    * Resolve upstream symlinks correctly

Signed-off-by: Yuntao Hu <victorhu493@gmail.com>

* in case of the root directory

Signed-off-by: Yuntao Hu <victorhu493@gmail.com>

* for static analysis check pass

Signed-off-by: Yuntao Hu <victorhu493@gmail.com>

* add unit test cases for the symlink scenarios

Signed-off-by: Yuntao Hu <victorhu493@gmail.com>

---------

Signed-off-by: Yuntao Hu <victorhu493@gmail.com>
    @VictorHuu
    VictorHuu authored Apr 30, 2025
    Configuration menu
    Copy the full SHA
    09c3b7c View commit details
    Browse the repository at this point in the history

  5. fix: Improve detection of erlang binary in alpine Linux (#3839) 

    Signed-off-by: Oleksandr Vodotiiets <alex.vodotiiets@gmail.com>
Signed-off-by: Oleksandr Vodotiiets <61548316+avodotiiets@users.noreply.github.com>
    @avodotiiets
    avodotiiets authored Apr 30, 2025
    Configuration menu
    Copy the full SHA
    78ef2cf View commit details
    Browse the repository at this point in the history

  6. Add support for PHP Pear (#2775) 

    * Add support for PHP Pear and unify PECL with it

Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

* fix tests

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

* remove log statements

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

* fix struct comment

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

---------

Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
    @LaurentGoderre @wagoodman
    LaurentGoderre and wagoodman authored Apr 30, 2025
    Configuration menu
    Copy the full SHA
    529840b View commit details
    Browse the repository at this point in the history

  7. Update github.com/Masterminds/semver to v3 (#3836) 

    * Update semver to v3. Fixes #3829

Signed-off-by: Alan Pope <alan.pope@anchore.com>

* use single instance of regex obj

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

---------

Signed-off-by: Alan Pope <alan.pope@anchore.com>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
    @popey @wagoodman
    popey and wagoodman authored Apr 30, 2025
    Configuration menu
    Copy the full SHA
    baa1080 View commit details
    Browse the repository at this point in the history

Commits on May 1, 2025

  1. chore(deps): update tools to latest versions (#3841) 

    Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com>
    @anchore-actions-token-generator @spiffcs
    anchore-actions-token-generator[bot] and spiffcs authored May 1, 2025
    Configuration menu
    Copy the full SHA
    9ecfe9a View commit details
    Browse the repository at this point in the history

  2. chore(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 ( 

    #3843)

Bumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](Masterminds/semver@v3.3.0...v3.3.1)

---
updated-dependencies:
- dependency-name: github.com/Masterminds/semver/v3
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored May 1, 2025
    Configuration menu
    Copy the full SHA
    4999de4 View commit details
    Browse the repository at this point in the history

  3. feat: detect when full license text has been provided and preserve as… 

    … separate field (#3450)

* feat: add full text field to syft license struct
---------
Signed-off-by: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
    @spiffcs
    spiffcs authored May 1, 2025
    Configuration menu
    Copy the full SHA
    94e63eb View commit details
    Browse the repository at this point in the history

Commits on May 2, 2025

  1. fix: Do not use hashes for SPDX license names/expressions (#3844) 

    ---------
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>
    @spiffcs
    spiffcs authored May 2, 2025
    Configuration menu
    Copy the full SHA
    6ba087c View commit details
    Browse the repository at this point in the history
Loading
0