v1.42.4-alauda-1

Changelog

• e923db2 Add PDM parser (anchore#4234)
• b3c70da Add experimental cataloger capabilities command (anchore#4317)
• e1483e0 Add support for identifying ffmpeg/libav libraries (anchore#4227)
• 3e4e82f Canonicalize Ghostscript CPE/PURL for ghostscript packages from PE Binaries (anchore#4308)
• 5987f46 Chore new slack action (anchore#4553)
• 0ea920b Decompress UPX packed binaries to extract golang build info (ELF formatted binaries with lzma method only) (anchore#4480)
• c79a57b Detect embedded deps.json in .NET binaries (anchore#4375)
• 66c78d4 Document additional json schema fields (anchore#4356)
• 065ac13 Extract zip archive with multiple entries (anchore#4283)
• 2f3a504 Feat/catalog mongodb bin (anchore#4541)
• ada74a8 Feature: Add ffmpeg binary cataloger (anchore#3994)
• 153f232 Fix test-fixture publish (anchore#4369)
• 29a0b19 Group dependabot updates (anchore#4522)
• 6be0a9a Improve PR template (anchore#4472)
• a77d24e Improve struct and field comments and incorporate into json schema (anchore#4252)
• 11fed90 Migrate CI to runs-on (anchore#4351)
• 7bc15e3 Native Image SBOM: Add Support for Locations Data (anchore#4186)
• f5c7651 Refactor fileresolver to not require base path (anchore#4298)
• fc74b07 Remove duplicate image source providers (anchore#4289)
• 0d9ea69 Respect "rpmmod" PURL qualifier (anchore#4314)
• 7bf7bcc Support extras statements in Python PDM cataloger (anchore#4352)
• ae1a247 Unpin fixture dependencies that will always float (anchore#4495)
• e5711e9 Update CPE processing to use NVD API (anchore#4332)
• 89b901b Use redhat as namespace for hummingbird rpms (anchore#4615)
• 7fdb08c Validating download_url for github repositories, and updating if necessary (anchore#4390)
• 48948dd add container support for graalvm fixture (anchore#4528)
• d22914b add docs to configs (anchore#4281)
• 81dd955 add envoy binary classifier (anchore#4530)
• c8184bd add grafana classifier (anchore#4516)
• 6509b70 add istio classifier (anchore#4521)
• 15af992 add valkey classifier (anchore#4509)
• 5db3a9b add workflow to create PR for spdx license list updates (anchore#4319)
• 90c733d chore(deps): bump 8398a7/action-slack from 3.18.0 to 3.19.0 (anchore#4217)
• 118f564 chore(deps): bump actions/cache from 4.2.3 to 4.2.4 (anchore#4119)
• 261ab7c chore(deps): bump actions/cache from 4.2.4 to 4.3.0 (anchore#4240)
• 41e133e chore(deps): bump actions/cache from 4.3.0 to 5.0.0 (anchore#4469)
• 2c97ff1 chore(deps): bump actions/cache from 5.0.0 to 5.0.1 (anchore#4476)
• b59c902 chore(deps): bump actions/cache in /.github/actions/bootstrap (anchore#4120)
• 8232f5b chore(deps): bump actions/cache in /.github/actions/bootstrap (anchore#4241)
• d538001 chore(deps): bump actions/cache in /.github/actions/bootstrap (anchore#4471)
• e760a7c chore(deps): bump actions/cache in /.github/actions/bootstrap (anchore#4477)
• 6452a19 chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 (anchore#4130)
• 023a14f chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (anchore#4396)
• a80679b chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 (anchore#4431)
• ae1fa09 chore(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.1 (anchore#4445)
• 92e523c chore(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (anchore#4526)
• 01f0e33 chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 (anchore#4658)
• 98c97e2 chore(deps): bump actions/github-script from 7 to 8 (anchore#4192)
• 8e78fd5 chore(deps): bump actions/setup-go from 5.5.0 to 6.0.0 (anchore#4188)
• af167ba chore(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (anchore#4392)
• b503690 chore(deps): bump actions/setup-go in /.github/actions/bootstrap (anchore#4189)
• 00e1329 chore(deps): bump actions/setup-go in /.github/actions/bootstrap (anchore#4393)
• 9b33b8a chore(deps): bump actions/upload-artifact from 4.4.3 to 6.0.0 (anchore#4527)
• dcba765 chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (anchore#4659)
• 6d20691 chore(deps): bump anchore/sbom-action (anchore#4544)
• 07ad8a5 chore(deps): bump anchore/sbom-action from 0.20.10 to 0.20.11 (anchore#4458)
• 1e15428 chore(deps): bump anchore/sbom-action from 0.20.11 to 0.21.0 (anchore#4501)
• d5a562c chore(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 (anchore#4073)
• 0e669fa chore(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 (anchore#4141)
• 3abbd94 chore(deps): bump anchore/sbom-action from 0.20.5 to 0.20.6 (anchore#4222)
• 6627c52 chore(deps): bump anchore/sbom-action from 0.20.6 to 0.20.7 (anchore#4293)
• f4de1e8 chore(deps): bump anchore/sbom-action from 0.20.7 to 0.20.8 (anchore#4297)
• 88bbcbe chore(deps): bump anchore/sbom-action from 0.20.8 to 0.20.9 (anchore#4305)
• 6c66638 chore(deps): bump anchore/sbom-action from 0.20.9 to 0.20.10 (anchore#4381)
• d4d3111 chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 (anchore#4115)
• 7a6b157 chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (anchore#4671)
• b9604cb chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.2 to 0.9.3 (anchore#4251)
• 28ba092 chore(deps): bump github.com/anchore/stereoscope (anchore#4091)
• bc18e3a chore(deps): bump github.com/anchore/stereoscope (anchore#4174)
• a85e034 chore(deps): bump github.com/anchore/stereoscope from 0.1.14 to 0.1.16 (anchore#4470)
• 443de21 chore(deps): bump github.com/bmatcuk/doublestar/v4 (anchore#4606)
• d0d9c6a chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.9.0 to 4.9.1 (anchore#4087)
• 36639f1 chore(deps): bump github.com/buger/jsonsparser to v1.1.2 (anchore#4680)
• f5110f1 chore(deps): bump github.com/charmbracelet/bubbles from 0.21.1 to 1.0.0 (anchore#4633)
• d820c34 chore(deps): bump github.com/charmbracelet/bubbletea (anchore#4228)
• 04e989d chore(deps): bump github.com/charmbracelet/bubbletea from 1.3.6 to 1.3.8 (anchore#4203)
• e1762a2 chore(deps): bump github.com/charmbracelet/bubbletea from 1.3.8 to 1.3.9 (anchore#4214)
• c88051d chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (anchore#4638)
• bfcbf26 chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 (anchore#4340)
• 7dc7c01 chore(deps): bump github.com/diskfs/go-diskfs (anchore#4159)
• fa68af4 chore(deps): bump github.com/docker/docker (anchore#4092)
• 44b7b09 chore(deps): bump github.com/github/go-spdx/v2 from 2.3.3 to 2.3.4 (anchore#4301)
• 155738a chore(deps): bump github.com/github/go-spdx/v2 from 2.3.4 to 2.3.5 (anchore#4434)
• 71aa59a chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.13 to 0.5.14 (anchore#4089)
• 6005fb3 chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.14 to 0.5.15 (anchore#4225)
• e556ceb chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.15 to 0.5.17 (anchore#4413)
• b0c74d4 chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.17 to 0.5.18 (anchore#4432)
• e0708e7 chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.18 to 0.5.19 (anchore#4520)
• 6b0f924 chore(deps): bump github.com/go-git/go-billy/v5 from 5.6.2 to 5.7.0 (anchore#4448)
• ea7dc8f chore(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.3 (anchore#4259)
• 31c5031 chore(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 (anchore#4612)
• e1e3d00 chore(deps): bump github.com/goccy/go-yaml from 1.18.0 to 1.19.0 (anchore#4426)
• a2020fe chore(deps): bump github.com/goccy/go-yaml from 1.19.0 to 1.19.1 (anchore#4482)
• 18e789c chore(deps): bump github.com/gohugoio/hashstructure from 0.5.0 to 0.6.0 (anchore#4267)
• 479cf5a chore(deps): bump github.com/google/go-containerregistry (anchore#4409)
• c4eb071 chore(deps): bump github.com/gookit/color from 1.5.4 to 1.6.0 (anchore#4176)
• 169220b chore(deps): bump github.com/hashicorp/go-getter from 1.7.10 to 1.8.0 (anchore#4197)
• c4292ad chore(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 (anchore#4144)
• cc07df0 chore(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.7.10 (anchore#4190)
• 409642c chore(deps): bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1 (anchore#4229)
• 5461a92 chore(deps): bump github.com/hashicorp/go-getter from 1.8.1 to 1.8.2 (anchore#4254)
• a0dac51 chore(deps): bump github.com/hashicorp/go-getter from 1.8.2 to 1.8.3 (anchore#4326)
• e44ef53 chore(deps): bump github.com/hashicorp/go-getter from 1.8.3 to 1.8.4 (anchore#4518)
• 8f1d458 chore(deps): bump github.com/iancoleman/orderedmap (anchore#4258)
• 4a69c00 chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.7 to 6.6.8 (anchore#4085)
• 45fb52d chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.8 to 6.6.9 (anchore#4315)
• fe1ea44 chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.9 to 6.7.0 (anchore#4337)
• 25ca33d chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.0 to 6.7.1 (anchore#4355)
• 75ad5c6 chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.1 to 6.7.2 (anchore#4372)
• 6770936 chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.2 to 6.7.3 (anchore#4387)
• 439a063 chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.3 to 6.7.5 (anchore#4397)
• a0c5b8a chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.5 to 6.7.7 (anchore#4460)
• d1adfdc chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.7 to 6.7.8 (anchore#4502)
• 1d5bcc5 chore(deps): bump github.com/mholt/archives from 0.1.3 to 0.1.5 (anchore#4280)
• 702b435 chore(deps): bump github.com/olekukonko/tablewriter from 1.0.8 to 1.0.9 (anchore#4086)
• 78a4ab8 chore(deps): bump github.com/olekukonko/tablewriter from 1.0.9 to 1.1.1 (anchore#4354)
• cd19ac9 chore(deps): bump github.com/olekukonko/tablewriter from 1.1.1 to 1.1.2 (anchore#4427)
• 0f475c8 chore(deps): bump github.com/opencontainers/selinux (anchore#4349)
• 64b71ec chore(deps): bump github.com/quasilyte/go-ruleguard/dsl (anchore#4245)
• 7954324 chore(deps): bump github.com/spdx/tools-golang (anchore#4557)
• 0028165 chore(deps): bump github.com/spdx/tools-golang from 0.5.5 to 0.5.6 (anchore#4503)
• c6cd663 chore(deps): bump github.com/spf13/afero from 1.14.0 to 1.15.0 (anchore#4202)
• 2b72158 chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (anchore#4435)
• 507987c chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.0 (anchore#4180)
• 3a7f1f2 chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (anchore#4182)
• 9f07fa4 chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (anchore#4160)
• 6f4da8c chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (anchore#4173)
• 39441f1 chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (anchore#4178)
• b6f7532 chore(deps): bump github.com/vbatts/go-mtree from 0.5.4 to 0.6.0 (anchore#4204)
• f4fc2d6 chore(deps): bump github/codeql-action (anchore#4634)
• 59f7725 chore(deps): bump github/codeql-action (anchore#4670)
• 26792fc chore(deps): bump github/codeql-action from 3.29.10 to 3.29.11 (anchore#4149)
• 7e4bf7f chore(deps): bump github/codeql-action from 3.29.11 to 3.30.0 (anchore#4181)
• a192787 chore(deps): bump github/codeql-action from 3.29.2 to 3.29.3 (anchore#4074)
• 8b2c4a1 chore(deps): bump github/codeql-action from 3.29.3 to 3.29.4 (anchore#4080)
• 801b21b chore(deps): bump github/codeql-action from 3.29.4 to 3.29.5 (anchore#4096)
• 7b92913 chore(deps): bump github/codeql-action from 3.29.7 to 3.29.8 (anchore#4124)
• 104df88 chore(deps): bump github/codeql-action from 3.29.8 to 3.29.9 (anchore#4134)
• 8e51e8d chore(deps): bump github/codeql-action from 3.29.9 to 3.29.10 (anchore#4145)
• 2b8f4bc chore(deps): bump github/codeql-action from 3.30.0 to 3.30.1 (anchore#4191)
• 1fcdb67 chore(deps): bump github/codeql-action from 3.30.1 to 3.30.3 (anchore#4210)
• f0998de chore(deps): bump github/codeql-action from 3.30.3 to 3.30.4 (anchore#4239)
• 605a275 chore(deps): bump github/codeql-action from 3.30.4 to 3.30.5 (anchore#4246)
• b96d3d2 chore(deps): bump github/codeql-action from 3.30.5 to 3.30.6 (anchore#4253)
• 3b82a37 chore(deps): bump github/codeql-action from 3.30.6 to 4.30.7 (anchore#4262)
• 5056c7f chore(deps): bump github/codeql-action from 4.30.7 to 4.30.8 (anchore#4277)
• 675075e chore(deps): bump github/codeql-action from 4.30.8 to 4.30.9 (anchore#4299)
• bee78c0 chore(deps): bump github/codeql-action from 4.30.9 to 4.31.0 (anchore#4310)
• 774b1e9 chore(deps): bump github/codeql-action from 4.31.0 to 4.31.1 (anchore#4321)
• 793b0a3 chore(deps): bump github/codeql-action from 4.31.1 to 4.31.2 (anchore#4325)
• 6480c8a chore(deps): bump github/codeql-action from 4.31.2 to 4.31.3 (anchore#4366)
• f12788d chore(deps): bump github/codeql-action from 4.31.3 to 4.31.4 (anchore#4386)
• d1a523f chore(deps): bump github/codeql-action from 4.31.4 to 4.31.6 (anchore#4424)
• 6d56087 chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (anchore#4446)
• 052e4ca chore(deps): bump github/codeql-action from 4.31.7 to 4.31.8 (anchore#4468)
• a39c600 chore(deps): bump github/codeql-action from 4.31.8 to 4.31.9 (anchore#4481)
• 2c20146 chore(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 (anchore#4646)
• 55526db chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (anchore#4391)
• 7a9e1e0 chore(deps): bump golang.org/x/mod from 0.26.0 to 0.27.0 (anchore#4123)
• 1df4779 chore(deps): bump golang.org/x/mod from 0.27.0 to 0.28.0 (anchore#4198)
• 89948df chore(deps): bump golang.org/x/mod from 0.28.0 to 0.29.0 (anchore#4266)
• b444f0c chore(deps): bump golang.org/x/mod from 0.29.0 to 0.30.0 (anchore#4359)
• 49736e7 chore(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 (anchore#4122)
• 337a275 chore(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 (anchore#4263)
• 7d4680b chore(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 (anchore#4268)
• 8a22d39 chore(deps): bump golang.org/x/time from 0.12.0 to 0.14.0 (anchore#4348)
• cbcf8bd chore(deps): bump golang.org/x/tools from 0.35.0 to 0.36.0 (anchore#4172)
• f986327 chore(deps): bump golang.org/x/tools from 0.36.0 to 0.37.0 (anchore#4211)
• 8ffe15c chore(deps): bump golang.org/x/tools from 0.37.0 to 0.38.0 (anchore#4265)
• d2641df chore(deps): bump golang.org/x/tools from 0.38.0 to 0.39.0 (anchore#4364)
• 1d718f3 chore(deps): bump golang.org/x/tools from 0.39.0 to 0.40.0 (anchore#4453)
• 0c8eef6 chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 (anchore#4675)
• 998742f chore(deps): bump modernc.org/sqlite from 1.38.0 to 1.38.1 (anchore#4084)
• 700a777 chore(deps): bump modernc.org/sqlite from 1.38.1 to 1.38.2 (anchore#4088)
• 06b01aa chore(deps): bump modernc.org/sqlite from 1.38.2 to 1.39.0 (anchore#4219)
• 450cd72 chore(deps): bump modernc.org/sqlite from 1.39.0 to 1.39.1 (anchore#4276)
• 34f5e52 chore(deps): bump modernc.org/sqlite from 1.39.1 to 1.40.0 (anchore#4329)
• b9710a1 chore(deps): bump modernc.org/sqlite from 1.40.0 to 1.40.1 (anchore#4382)
• 8334fb0 chore(deps): bump modernc.org/sqlite from 1.40.1 to 1.41.0 (anchore#4489)
• 488511f chore(deps): bump modernc.org/sqlite from 1.41.0 to 1.42.2 (anchore#4513)
• ab5fa0a chore(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (anchore#4459)
• 09b24bd chore(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.11 (anchore#4447)
• 07029ea chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (anchore#4296)
• dacc2f6 chore(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 (anchore#4218)
• 63273b1 chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates (anchore#4525)
• e136ebc chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates (anchore#4584)
• 0bb3741 chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates (anchore#4622)
• 1af8b1a chore(deps): bump the actions-minor-patch group across 2 directories with 2 updates (anchore#4607)
• 7d3d1c6 chore(deps): bump the actions-minor-patch group across 2 directories with 2 updates (anchore#4657)
• 27b1219 chore(deps): bump the actions-minor-patch group across 2 directories with 3 updates (anchore#4568)
• 22014b6 chore(deps): bump the go-minor-patch group across 1 directory with 5 updates (anchore#4661)
• 69d0898 chore(deps): bump the go-minor-patch group with 2 updates (anchore#4583)
• 458ebbb chore(deps): bump the go-minor-patch group with 2 updates (anchore#4621)
• 4d42f8a chore(deps): bump the go-minor-patch group with 2 updates (anchore#4674)
• f32238c chore(deps): bump the go-minor-patch group with 2 updates (anchore#4678)
• 3ea6a03 chore(deps): bump the go-minor-patch group with 3 updates (anchore#4524)
• cccc9bf chore(deps): bump the go-minor-patch group with 3 updates (anchore#4669)
• 695bbcc chore(deps): bump the go-minor-patch group with 4 updates (anchore#4543)
• 612eadb chore(deps): bump the go-minor-patch group with 5 updates (anchore#4632)
• c0e0058 chore(deps): bump the go-minor-patch group with 6 updates (anchore#4567)
• ab9db00 chore(deps): bump zizmorcore/zizmor-action from 0.1.1 to 0.1.2 (anchore#4135)
• 333b951 chore(deps): bump zizmorcore/zizmor-action from 0.1.2 to 0.2.0 (anchore#4216)
• 3f28480 chore(deps): update CPE dictionary index (anchore#4083)
• 3820cba chore(deps): update CPE dictionary index (anchore#4112)
• 3e5befc chore(deps): update CPE dictionary index (anchore#4126)
• ba2eb57 chore(deps): update CPE dictionary index (anchore#4143)
• 0b05f0e chore(deps): update CPE dictionary index (anchore#4601)
• 3a23cff chore(deps): update CPE dictionary index (anchore#4610)
• fb3f560 chore(deps): update CPE dictionary index (anchore#4623)
• eb072de chore(deps): update CPE dictionary index (anchore#4636)
• c583da1 chore(deps): update CPE dictionary index (anchore#4647)
• 92a6b36 chore(deps): update CPE dictionary index (anchore#4673)
• d2461a9 chore(deps): update SPDX license list (anchore#4637)
• bd79463 chore(deps): update anchore dependencies (anchore#4098)
• 386ef84 chore(deps): update anchore dependencies (anchore#4104)
• 2d8e337 chore(deps): update anchore dependencies (anchore#4169)
• b87b919 chore(deps): update anchore dependencies (anchore#4220)
• 6d790ec chore(deps): update anchore dependencies (anchore#4282)
• 4c93394 chore(deps): update anchore dependencies (anchore#4330)
• a033ae5 chore(deps): update anchore dependencies (anchore#4374)
• bfe63f8 chore(deps): update anchore dependencies (anchore#4440)
• 11e8715 chore(deps): update anchore dependencies (anchore#4535)
• 63927ab chore(deps): update anchore dependencies (anchore#4552)
• e8b4527 chore(deps): update anchore dependencies (anchore#4575)
• 9872ff3 chore(deps): update anchore dependencies (anchore#4613)
• 75455f0 chore(deps): update anchore dependencies (anchore#4631)
• 860126c chore(deps): update anchore dependencies (anchore#4681)
• 78c7cd2 chore(deps): update tools to latest versions (anchore#4072)
• d704609 chore(deps): update tools to latest versions (anchore#4076)
• 5465bf4 chore(deps): update tools to latest versions (anchore#4079)
• bb8ea02 chore(deps): update tools to latest versions (anchore#4082)
• 5af72b6 chore(deps): update tools to latest versions (anchore#4108)
• fad9340 chore(deps): update tools to latest versions (anchore#4111)
• 10ea022 chore(deps): update tools to latest versions (anchore#4139)
• 37b2c03 chore(deps): update tools to latest versions (anchore#4154)
• 6471960 chore(deps): update tools to latest versions (anchore#4185)
• 67e0f7e chore(deps): update tools to latest versions (anchore#4194)
• 2531bfd chore(deps): update tools to latest versions (anchore#4200)
• a51994d chore(deps): update tools to latest versions (anchore#4215)
• 22f6f8f chore(deps): update tools to latest versions (anchore#4221)
• af4d19f chore(deps): update tools to latest versions (anchore#4230)
• c28b907 chore(deps): update tools to latest versions (anchore#4236)
• 8629080 chore(deps): update tools to latest versions (anchore#4238)
• ff6a8b1 chore(deps): update tools to latest versions (anchore#4248)
• 190f306 chore(deps): update tools to latest versions (anchore#4261)
• 1a58f27 chore(deps): update tools to latest versions (anchore#4274)
• 0c98a36 chore(deps): update tools to latest versions (anchore#4291)
• 8be4639 chore(deps): update tools to latest versions (anchore#4302)
• e0680eb chore(deps): update tools to latest versions (anchore#4307)
• 60ca241 chore(deps): update tools to latest versions (anchore#4347)
• 2e100f3 chore(deps): update tools to latest versions (anchore#4358)
• 6a21b5e chore(deps): update tools to latest versions (anchore#4365)
• 3653253 chore(deps): update tools to latest versions (anchore#4370)
• 7e02bdf chore(deps): update tools to latest versions (anchore#4398)
• d8538e7 chore(deps): update tools to latest versions (anchore#4420)
• f01056d chore(deps): update tools to latest versions (anchore#4442)
• 47e1cee chore(deps): update tools to latest versions (anchore#4456)
• 5ea3387 chore(deps): update tools to latest versions (anchore#4462)
• 6ad4873 chore(deps): update tools to latest versions (anchore#4466)
• e1ae4e1 chore(deps): update tools to latest versions (anchore#4473)
• 7ef4703 chore(deps): update tools to latest versions (anchore#4491)
• 997a767 chore(deps): update tools to latest versions (anchore#4504)
• d24e843 chore(deps): update tools to latest versions (anchore#4537)
• 55a190a chore(deps): update tools to latest versions (anchore#4542)
• 6d8a03b chore(deps): update tools to latest versions (anchore#4545)
• 308b803 chore(deps): update tools to latest versions (anchore#4551)
• a9fabb6 chore(deps): update tools to latest versions (anchore#4565)
• d0bb042 chore(deps): update tools to latest versions (anchore#4570)
• 8d836fb chore(deps): update tools to latest versions (anchore#4577)
• d22139e chore(deps): update tools to latest versions (anchore#4589)
• 540c08a chore(deps): update tools to latest versions (anchore#4594)
• f70631a chore(deps): update tools to latest versions (anchore#4614)
• 22e78c7 chore(deps): update tools to latest versions (anchore#4630)
• a3dacf5 chore(deps): update tools to latest versions (anchore#4663)
• 7158535 chore(tests): fix test fixture build on modern ARM Mac (anchore#4666)
• 4cfd7c6 chore: add alauda release automation and docs
• f0a990b chore: add source completion tester (anchore#4077)
• 0a3f7bb chore: call cleanup on tmpfile and replace some io.ReadAlls with streams (anchore#4629)
• e388511 chore: centralize temp files and prefer streaming IO (anchore#4668)
• 9aca816 chore: drop cpe from gguf (anchore#4383)
• cc1a7df chore: fix some comments to improve readability (anchore#4533)
• a0f7148 chore: ignore .DS_Store in test fixtures (anchore#4422)
• b5e85c3 chore: migrate fixtures to testdata (anchore#4651)
• 89842bd chore: migrate syft to use mholt/archives instead of anchore fork (anchore#4029)
• 7014cb0 chore: options to run release-install-script without release (anchore#4377)
• ca21ccf chore: redhat cataloger error when sqlite not regsitered (anchore#4150)
• 5b96d1d chore: rename test func for CPE decoder (anchore#4379)
• 83a4528 chore: sync generated file immediately (anchore#4538)
• 21496e7 chore: update GoReleaser configurations (anchore#4128)
• 9217f20 chore: update ffmpeg tests (anchore#4249)
• e9a8bc5 chore: update to use old configuration on new cosign (anchore#4287)
• d37ed56 chore: use git ls-files instead of find to list files (anchore#4425)
• c8982b8 chore:cancel in-progress workflows for new commits on same PR (anchore#4465)
• 48ee12b ci(generate-capabilities): serialize writing and reading yaml (anchore#4602)
• 3e563d9 ci: enable zizmor to fail PRs (anchore#4556)
• 1c22325 ci: output oras path (anchore#4373)
• 728feea ci: use apple creds before pushing tags (anchore#4313)
• 538b4a2 convert posix path back to windows (anchore#4285)
• 538430d describe cataloger capabilities via test observations (anchore#4318)
• 0a36dab feat(cataloger): add snap package cataloger for metadata extraction (anchore#4151)
• c732052 feat(cpegenerate): add support for binary package digit-suffix variations in CPE generation (anchore#4093)
• c5c1454 feat(java): Add support for .far (Feature Archive) files (anchore#4193)
• 4e06a7a feat(javascript): Add dependency parsing (anchore#4304)
• 4a60c41 feat: 4184 gguf parser (ai artifact cataloger) part 1 (anchore#4279)
• bbef262 feat: Add license enrichment from pypi to python packages (anchore#4295)
• 2c5e193 feat: Add support for scanning GGUF models from OCI registries (anchore#4335)
• 102d362 feat: CPEs format decoder (anchore#4207)
• 231f04a feat: Parse pnpm v9 lockfiles (anchore#4256)
• 760bd9a feat: Pom xml only archive parser (anchore#4272)
• 21d50d7 feat: add ARM64 Windows build target (anchore#4237)
• 94c8088 feat: add Qt6 binary detection (anchore#4550)
• 594b309 feat: add binary classifier for hashicorp vault (anchore#4121)
• c0f32e1 feat: add option to fetch remote licenses for pnpm-lock.yaml files (anchore#4286)
• 6b48bd4 feat: add package supplier flag (anchore#4131)
• ea1f4cb feat: add support for Gemfile.next.lock (anchore#4457)
• 87e1d8c feat: add support for authors, maintainers, and contributors in package.json. (anchore#4003)
• c185657 feat: add yarn lock dev dep detection; fixed anchore#4548
• a433045 feat: basic Conda ecosystem support (anchore#4002)
• 13ffeeb feat: combine go module file and go source discovery into single cataloger (anchore#4127)
• c65d023 feat: detect Debian version from /etc/debian_version (anchore#4569)
• f69b1db feat: detect elixir bin (anchore#4334)
• 7f1d57d feat: detect older bitnami img packages (anchore#4532)
• 16f851c feat: include .rar files as Java archives for Java resource adapters (anchore#4137)
• a400c67 feat: license file search (anchore#4327)
• c9760d2 feat: snap can be queried by revision and track/risk/branch (anchore#4439)
• 89470ec feat: update syft license construction to be able to look up by URL (anchore#4132)
• 138cb1b fix(cpe-generation): set start and end date (anchore#4600)
• 35278f3 fix(java): improve lz4 detection (anchore#4642)
• 568b760 fix(javascript): remove debug print statement in dependency parser (anchore#4412)
• 74c9380 fix: 4423 dotnet-deps cataloger skips project type by def
• 6755377 fix: CPE detection for APK libavif to use aomedia vendor (anchore#4597)
• 48bf81c fix: align binary java detection with jvm cataloger + support IBM (anchore#4046)
• 2fe5f9c fix: bumps go mod version to 1.25; ci takes latest patch (anchore#4628)
• 9f956dc fix: closed reader during java binary detection (anchore#4129)
• 836f358 fix: correctly report supporting evidence for binary packages (anchore#4558)
• ea43506 fix: corrects handling of UNC root paths in windows.
• 759909f fix: emit lua rockspec dependencies in metadata (anchore#4376)
• 2d1ada1 fix: enhance setup.py parser to handle unquoted dependencies (anchore#4255)
• ed339e4 fix: ensure java image build failures stop the build (anchore#4531)
• add2629 fix: further improve go binary classifier, including windows (anchore#4593)
• efc2f00 fix: go binary replace handling in path (anchore#4156)
• e0b61a3 fix: golang PURL should include full module (anchore#4395)
• e9e7e20 fix: grafana classifier (anchore#4635)
• d5ca1ad fix: ignore dpkg entries with "deinstall" status (anchore#4231)
• c5cbc89 fix: include RpmDBEntry modularityLabel in CycloneDX (anchore#4212)
• 9e3150b fix: java archives excluded due to incorrect license glob results (anchore#4449)
• c94d1cc fix: lookup alternate scheme on url->licenseID (anchore#4588)
• 8c6a2bc fix: nondeterministic Java archive cataloging and improve groupID (anchore#4118)
• c958932 fix: normalize python package names from dependency lists (anchore#4408)
• 45bf8b1 fix: omit records with empty PURL in GitHub format (anchore#4312)
• 4343d04 fix: panic during java archive maven resolution (anchore#4290)
• 0bca34f fix: snap cataloger incorrectly identifies snap container as deb package (anchore#4500)
• 80e6117 fix: support multiple letters in openssl patch version (anchore#4106)
• 2c96279 fix: traefik binary classifier (anchore#4499)
• 9a250a4 fix: update mixed case dependencies in python to be normalized (anchore#4573)
• db76d85 fix: use correct hashes for empty files (anchore#4620)
• d950ac1 fix: use vercel for vendor in nextjs CPE (anchore#4450)
• baca32f fix:after compliance applied,the relationship concerning the original one should be omitted (anchore#4419)
• 4c38ee1 fix:best effort to get the os info of an ELF binary (anchore#4438)
• afe28a2 fix:handle compound aliases like .tgz when cataloging archives (anchore#4421)
• 3a3a86e fixed anchore#4430 exclude dev pnpm pkg (anchore#4487)
• 4ae8f73 migrate json schema generation (anchore#4270)
• 8a7302c migrate to get.anchore.io (anchore#4095)
• 1993949 preserve --from order (anchore#4350)
• e9e3494 remove debug output (anchore#4496)
• 7ed733c signpost to docs site (anchore#4483)
• 31b2c4c support universal (fat) mach-o binary files (anchore#4278)
• beb7089 unapply base path for resolver inbound requests (anchore#4478)
• 170c4c4 use go.yaml.in/yaml (anchore#4157)
• 7c154e7 use official action for token generation (anchore#4331)

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.