Java 5/6 CVEs are reported against Java 11/17 images #1792
Assignees
Labels
Comments
|
Same issue for me with image apache/nifi:1.25.0, using version 0.75.0 java 11.0.22+7-J-ms8m binary CVE-2009-3883 High there is also a null character in the version, so grype piped to cat -v shows 11.0.22+7^@-J-ms8m |
1 task
|
Part of the cause for this is anchore/syft#2750, which results in a null byte in some OpenJDK version strings, which results in some short-circuiting of grype version comparison, so this should be fixed by merging anchore/syft#2766, releasing syft, and then bumping syft in grype. |
|
This seems resolved in the latest version of grype $ grype --version
grype 0.76.0
$ grype -q --platform=linux/amd64 eclipse-temurin:11-jdk | grep 2009
# prints nothing
$ grype -q --platform=linux/amd64 apache/nifi:1.25.0 | grep 2009
# prints nothing.Thanks for the detailed bug report! Please let us know if we've missed something. |
willmurphyscode
added
the
changelog-ignore
renovate bot
added a commit
to DelineaXPM/dsv-cli
that referenced
this issue
May 23, 2024
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [anchore/grype](https://togithub.com/anchore/grype) | minor | `v0.74.7` -> `v0.77.4` | | [aquaproj/aqua-registry](https://togithub.com/aquaproj/aqua-registry) | minor | `v4.145.0` -> `v4.184.0` | | [charmbracelet/gum](https://togithub.com/charmbracelet/gum) | minor | `v0.13.0` -> `v0.14.0` | | [charmbracelet/vhs](https://togithub.com/charmbracelet/vhs) | patch | `v0.7.1` -> `v0.7.2` | | [direnv/direnv](https://togithub.com/direnv/direnv) | minor | `v2.33.0` -> `v2.34.0` | | [golang/go](https://togithub.com/golang/go) | patch | `1.22.0` -> `1.22.3` | | [goreleaser/goreleaser](https://togithub.com/goreleaser/goreleaser) | minor | `v1.24.0` -> `v1.26.1` | | [mikefarah/yq](https://togithub.com/mikefarah/yq) | minor | `v4.42.1` -> `v4.44.1` | | [miniscruff/changie](https://togithub.com/miniscruff/changie) | minor | `v1.18.0` -> `v1.19.0` | --- ### Release Notes <details> <summary>anchore/grype (anchore/grype)</summary> ### [`v0.77.4`](https://togithub.com/anchore/grype/releases/tag/v0.77.4) [Compare Source](https://togithub.com/anchore/grype/compare/v0.77.3...v0.77.4) ##### Additional Changes - update Syft to v1.4.1 \[[#​1855](https://togithub.com/anchore/grype/pull/1855) [@​anchore-actions-token-generator](https://togithub.com/anchore-actions-token-generator)] **[(Full Changelog)](https://togithub.com/anchore/grype/compare/v0.77.3...v0.77.4)** ### [`v0.77.3`](https://togithub.com/anchore/grype/releases/tag/v0.77.3) [Compare Source](https://togithub.com/anchore/grype/compare/v0.77.2...v0.77.3) ##### Additional Changes - Remove providers' pull information from DB metadata file \[[#​1846](https://togithub.com/anchore/grype/pull/1846) [@​asomya](https://togithub.com/asomya)] **[(Full Changelog)](https://togithub.com/anchore/grype/compare/v0.77.2...v0.77.3)** ### [`v0.77.2`](https://togithub.com/anchore/grype/releases/tag/v0.77.2) [Compare Source](https://togithub.com/anchore/grype/compare/v0.77.1...v0.77.2) ##### Bug Fixes - update ignored vulnerability count in tui \[[#​1837](https://togithub.com/anchore/grype/pull/1837) [@​kzantow](https://togithub.com/kzantow)] - SARIF output not compatible with GitHub \[[#​1518](https://togithub.com/anchore/grype/issues/1518) [#​1838](https://togithub.com/anchore/grype/pull/1838) [@​kzantow](https://togithub.com/kzantow)] **[(Full Changelog)](https://togithub.com/anchore/grype/compare/v0.77.1...v0.77.2)** ### [`v0.77.1`](https://togithub.com/anchore/grype/releases/tag/v0.77.1) [Compare Source](https://togithub.com/anchore/grype/compare/v0.77.0...v0.77.1) ##### Additional Changes - update Syft to v1.3.0 \[[#​1832](https://togithub.com/anchore/grype/pull/1832) [@​anchore-actions-token-generator](https://togithub.com/anchore-actions-token-generator)] **[(Full Changelog)](https://togithub.com/anchore/grype/compare/v0.77.0...v0.77.1)** ### [`v0.77.0`](https://togithub.com/anchore/grype/releases/tag/v0.77.0) [Compare Source](https://togithub.com/anchore/grype/compare/v0.76.0...v0.77.0) ##### Added Features - add linux and libc-dev headers ignore rules for debian packages \[[#​1809](https://togithub.com/anchore/grype/pull/1809) [@​zhill](https://togithub.com/zhill)] - use Go main module version when possible \[[#​1797](https://togithub.com/anchore/grype/pull/1797) [@​luhring](https://togithub.com/luhring)] ##### Additional Changes - Add providers' pull date to DB metadata structure \[[#​1795](https://togithub.com/anchore/grype/pull/1795) [@​asomya](https://togithub.com/asomya)] - config: add config opt in golang pseudo version main module comparison \[[#​1816](https://togithub.com/anchore/grype/pull/1816) [@​spiffcs](https://togithub.com/spiffcs)] **[(Full Changelog)](https://togithub.com/anchore/grype/compare/v0.76.0...v0.77.0)** ### [`v0.76.0`](https://togithub.com/anchore/grype/releases/tag/v0.76.0) [Compare Source](https://togithub.com/anchore/grype/compare/v0.75.0...v0.76.0) ##### Added Features - Database download timeouts \[[#​1731](https://togithub.com/anchore/grype/issues/1731) [#​1777](https://togithub.com/anchore/grype/issues/1777) [@​willmurphyscode](https://togithub.com/willmurphyscode)] ##### Bug Fixes - Disable matching kernel vulnerabilities by default for indirect matches against the 'kernel-headers' packages \[[#​1762](https://togithub.com/anchore/grype/issues/1762) [#​1787](https://togithub.com/anchore/grype/pull/1787) [@​zhill](https://togithub.com/zhill)] ##### Additional Changes - Update Syft to v1.2.0 \[[#​1803](https://togithub.com/anchore/grype/pull/1803)], which fixes [https://github.com/anchore/grype/issues/1792](https://togithub.com/anchore/grype/issues/1792) **[(Full Changelog)](https://togithub.com/anchore/grype/compare/v0.75.0...v0.76.0)** ### [`v0.75.0`](https://togithub.com/anchore/grype/releases/tag/v0.75.0) [Compare Source](https://togithub.com/anchore/grype/compare/v0.74.7...v0.75.0) ##### Added Features - update syft source providers \[[#​1727](https://togithub.com/anchore/grype/pull/1727) [@​kzantow](https://togithub.com/kzantow)] - enable http timeout \[[#​1777](https://togithub.com/anchore/grype/pull/1777) [@​willmurphyscode](https://togithub.com/willmurphyscode)] ##### Bug Fixes - use "path/filepath" to build file path \[[#​1767](https://togithub.com/anchore/grype/pull/1767) [@​seiyab](https://togithub.com/seiyab)] - Suppress warnings when matching go packages with `devel` version \[[#​1752](https://togithub.com/anchore/grype/pull/1752) [@​wagoodman](https://togithub.com/wagoodman)] - not showing poco CVEs from syft generated sbom \[[#​1737](https://togithub.com/anchore/grype/issues/1737)] **[(Full Changelog)](https://togithub.com/anchore/grype/compare/v0.74.7...v0.75.0)** </details> <details> <summary>aquaproj/aqua-registry (aquaproj/aqua-registry)</summary> ### [`v4.184.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.184.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.183.0...v4.184.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.184.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.184.0) | https://github.com/aquaproj/aqua-registry/compare/v4.183.0...v4.184.0 #### 🎉 New Packages [#​23068](https://togithub.com/aquaproj/aqua-registry/issues/23068) [fujiwara/aws-sdk-client-go](https://togithub.com/fujiwara/aws-sdk-client-go): A simplified alternative to the AWS CLI for limited use cases [@​ponkio-o](https://togithub.com/ponkio-o) #### Fix [#​23111](https://togithub.com/aquaproj/aqua-registry/issues/23111) handlename/ssmwrap: Follow up changes of ssmwrap v2.1.0 [#​23112](https://togithub.com/aquaproj/aqua-registry/issues/23112) xremap/xremap/hypr: xremap client for hypr was dropped [#​23113](https://togithub.com/aquaproj/aqua-registry/issues/23113) xremap/xremap/sway: xremap client for sway was dropped [https://github.com/xremap/xremap/pull/479](https://togithub.com/xremap/xremap/pull/479) ### [`v4.183.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.183.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.182.0...v4.183.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.183.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.183.0) | https://github.com/aquaproj/aqua-registry/compare/v4.182.0...v4.183.0 ##### 🎉 New Packages [#​23041](https://togithub.com/aquaproj/aqua-registry/issues/23041) [rustsec/rustsec/cargo-audit](https://togithub.com/rustsec/rustsec): Audit your dependencies for crates [@​sapphi-red](https://togithub.com/sapphi-red) ##### Fix [#​23049](https://togithub.com/aquaproj/aqua-registry/issues/23049) sl1pm4t/k2tf: Follow up changes of k2tf v0.8.0 ### [`v4.182.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.182.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.181.0...v4.182.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.182.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.182.0) | https://github.com/aquaproj/aqua-registry/compare/v4.181.0...v4.182.0 ##### 🎉 New Packages [#​23033](https://togithub.com/aquaproj/aqua-registry/issues/23033) [Ph0enixKM/Amber](https://togithub.com/Ph0enixKM/Amber): Amber the programming language compiled to bash [#​23032](https://togithub.com/aquaproj/aqua-registry/issues/23032) [firebase/firebase-tools](https://togithub.com/firebase/firebase-tools): The Firebase Command Line Tools [@​ka2n](https://togithub.com/ka2n) ### [`v4.181.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.181.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.180.1...v4.181.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.181.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.181.0) | https://github.com/aquaproj/aqua-registry/compare/v4.180.1...v4.181.0 ##### 🎉 New Packages [#​23000](https://togithub.com/aquaproj/aqua-registry/issues/23000) [#​23005](https://togithub.com/aquaproj/aqua-registry/issues/23005) [jessfraz/dockfmt](https://togithub.com/jessfraz/dockfmt): Dockerfile format and parser. Like `gofmt` but for Dockerfiles [@​istone-you](https://togithub.com/istone-you) [#​23025](https://togithub.com/aquaproj/aqua-registry/issues/23025) [typst/typst](https://togithub.com/typst/typst): A new markup-based typesetting system that is powerful and easy to learn [@​ryota2357](https://togithub.com/ryota2357) ##### Fix [#​23022](https://togithub.com/aquaproj/aqua-registry/issues/23022) MHNightCat/superfile: Rename the package to `yorukot/superfile` The repository https://github.com/MHNightCat/superfile was transferred to https://github.com/yorukot/superfile . ### [`v4.180.1`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.180.1) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.180.0...v4.180.1) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.180.1) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.180.1) | https://github.com/aquaproj/aqua-registry/compare/v4.180.0...v4.180.1 ##### Fix [#​22910](https://togithub.com/aquaproj/aqua-registry/issues/22910) WebAssembly/wabt: Follow up changes of wabt v1.0.35 [#​22999](https://togithub.com/aquaproj/aqua-registry/issues/22999) neovim/neovim: Follow up changes of neovim v0.10.0 ### [`v4.180.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.180.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.179.0...v4.180.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.180.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.180.0) | https://github.com/aquaproj/aqua-registry/compare/v4.179.0...v4.180.0 ##### 🎉 New Packages [#​22867](https://togithub.com/aquaproj/aqua-registry/issues/22867) [DeNA/unity-meta-check/unity-meta-check](https://togithub.com/DeNA/unity-meta-check): Checker for missing/dangling meta files. The result print to stdout [@​ponkio-o](https://togithub.com/ponkio-o) [#​22866](https://togithub.com/aquaproj/aqua-registry/issues/22866) [DeNA/unity-meta-check/gh-action-yaml-gen](https://togithub.com/DeNA/unity-meta-check): A cli tool to automatically generate action.yaml for DeNA/unity-meta-check [@​ponkio-o](https://togithub.com/ponkio-o) [#​22865](https://togithub.com/aquaproj/aqua-registry/issues/22865) [DeNA/unity-meta-check/gh-action](https://togithub.com/DeNA/unity-meta-check): Binary for GitHub Actions of DeNA/unity-meta-check [@​ponkio-o](https://togithub.com/ponkio-o) [#​22864](https://togithub.com/aquaproj/aqua-registry/issues/22864) [DeNA/unity-meta-check/unity-meta-autofix](https://togithub.com/DeNA/unity-meta-check): Autofix for meta files problems. It need a result of unity-meta-check via stdin [@​ponkio-o](https://togithub.com/ponkio-o) [#​22863](https://togithub.com/aquaproj/aqua-registry/issues/22863) [DeNA/unity-meta-check/unity-meta-check-github-pr-comment](https://togithub.com/DeNA/unity-meta-check): Reporter for GitHub comments of GitHub issues or pull requests. It need a result of unity-meta-check from stdin [@​ponkio-o](https://togithub.com/ponkio-o) [#​22862](https://togithub.com/aquaproj/aqua-registry/issues/22862) [DeNA/unity-meta-check/unity-meta-check-junit](https://togithub.com/DeNA/unity-meta-check): Reporter for Jenkins compatible XML based JUnit reports. It need a result of unity-meta-check from stdin [@​ponkio-o](https://togithub.com/ponkio-o) [#​22875](https://togithub.com/aquaproj/aqua-registry/issues/22875) [interlynk-io/sbomqs](https://togithub.com/interlynk-io/sbomqs): SBOM quality score - Quality metrics for your sboms ##### Fix [#​22848](https://togithub.com/aquaproj/aqua-registry/issues/22848) sigi-cli/sigi: Follow up changes of sigi v3.6.4 ### [`v4.179.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.179.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.178.0...v4.179.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.179.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.179.0) | https://github.com/aquaproj/aqua-registry/compare/v4.178.0...v4.179.0 ##### 🎉 New Packages [#​22842](https://togithub.com/aquaproj/aqua-registry/issues/22842) [altsem/gitu](https://togithub.com/altsem/gitu): A TUI Git client inspired by Magit [#​22817](https://togithub.com/aquaproj/aqua-registry/issues/22817) [secretlint/secretlint](https://togithub.com/secretlint/secretlint): secretlint - Pluggable linting tool to prevent committing credential [@​ken5scal](https://togithub.com/ken5scal) ### [`v4.178.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.178.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.177.0...v4.178.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.178.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.178.0) | https://github.com/aquaproj/aqua-registry/compare/v4.177.0...v4.178.0 #### 🎉 New Packages [#​22775](https://togithub.com/aquaproj/aqua-registry/issues/22775) [StyraInc/regal](https://togithub.com/StyraInc/regal): Regal is a linter for Rego, with the goal of making your Rego magnificent #### Fix [#​22815](https://togithub.com/aquaproj/aqua-registry/issues/22815) ast-grep/ast-grep: Follow up changes of ast-grep v0.22.2 [#​22784](https://togithub.com/aquaproj/aqua-registry/issues/22784) jdx/mise: Remove version constraints for deleted old versions [#​22806](https://togithub.com/aquaproj/aqua-registry/issues/22806) tellerops/teller: Follow up changes of teller v2.0.3 ### [`v4.177.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.177.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.176.0...v4.177.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.177.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.177.0) | https://github.com/aquaproj/aqua-registry/compare/v4.176.0...v4.177.0 #### 🎉 New Packages [#​22757](https://togithub.com/aquaproj/aqua-registry/issues/22757) [MHNightCat/superfile](https://togithub.com/MHNightCat/superfile): Pretty fancy and modern terminal file manager [#​22735](https://togithub.com/aquaproj/aqua-registry/issues/22735) [dduan/tre](https://togithub.com/dduan/tre): Tree command, improved [@​ryoppippi](https://togithub.com/ryoppippi) #### Others [#​22760](https://togithub.com/aquaproj/aqua-registry/issues/22760) [#​22764](https://togithub.com/aquaproj/aqua-registry/issues/22764) Fix a bug of scripts that `cmdx t` doesn't test packages ### [`v4.176.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.176.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.175.0...v4.176.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.176.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.176.0) | https://github.com/aquaproj/aqua-registry/compare/v4.175.0...v4.176.0 #### 🎉 New Packages [#​22724](https://togithub.com/aquaproj/aqua-registry/issues/22724) [Crocmagnon/fatcontext](https://togithub.com/Crocmagnon/fatcontext): detects nested contexts in loops [@​ponkio-o](https://togithub.com/ponkio-o) [#​22717](https://togithub.com/aquaproj/aqua-registry/issues/22717) [EmbarkStudios/cargo-deny](https://togithub.com/EmbarkStudios/cargo-deny): Cargo plugin for linting your dependencies [@​sapphi-red](https://togithub.com/sapphi-red) #### Fix [#​22721](https://togithub.com/aquaproj/aqua-registry/issues/22721) ko-build/ko: Enable the verification of SLSA Provenance [@​sapphi-red](https://togithub.com/sapphi-red) [#​22719](https://togithub.com/aquaproj/aqua-registry/issues/22719) dagu-dev/dagu: Remove a duplicated alias [@​sapphi-red](https://togithub.com/sapphi-red) #### Others [#​22716](https://togithub.com/aquaproj/aqua-registry/issues/22716) [#​22718](https://togithub.com/aquaproj/aqua-registry/issues/22718) script: fix an issue that `cmdx s` generates files owned by root on Linux [@​sapphi-red](https://togithub.com/sapphi-red) ### [`v4.175.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.175.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.174.0...v4.175.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.175.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.175.0) | https://github.com/aquaproj/aqua-registry/compare/v4.174.0...v4.175.0 #### 🎉 New Packages [#​22696](https://togithub.com/aquaproj/aqua-registry/issues/22696) [cargo-bins/cargo-binstall](https://togithub.com/cargo-bins/cargo-binstall): Binary installation for rust projects [@​sapphi-red](https://togithub.com/sapphi-red) [#​22698](https://togithub.com/aquaproj/aqua-registry/issues/22698) [mitsuhiko/insta](https://togithub.com/mitsuhiko/insta): A snapshot testing library for rust [@​sapphi-red](https://togithub.com/sapphi-red) #### Fix [#​22658](https://togithub.com/aquaproj/aqua-registry/issues/22658) [fabpot/local-php-security-checker](https://togithub.com/fabpot/local-php-security-checker): Regenerate settings [#​22661](https://togithub.com/aquaproj/aqua-registry/issues/22661) [kaytu-io/kaytu](https://togithub.com/kaytu-io/kaytu): Fix checksum of windows [https://github.com/kaytu-io/kaytu/issues/77](https://togithub.com/kaytu-io/kaytu/issues/77) ### [`v4.174.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.174.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.173.0...v4.174.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.174.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.174.0) | https://github.com/aquaproj/aqua-registry/compare/v4.173.0...v4.174.0 ##### 🎉 New Packages [#​22626](https://togithub.com/aquaproj/aqua-registry/issues/22626) [containrrr/shoutrrr](https://togithub.com/containrrr/shoutrrr): Notification library for gophers and their furry friends [@​ponkio-o](https://togithub.com/ponkio-o) [#​22597](https://togithub.com/aquaproj/aqua-registry/issues/22597) [guumaster/hostctl](https://togithub.com/guumaster/hostctl): Your dev tool to manage /etc/hosts like a pro ##### Fix [#​22596](https://togithub.com/aquaproj/aqua-registry/issues/22596) mashiike/stefunny: Follow up changes of stefunny v0.9.0 ### [`v4.173.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.173.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.172.0...v4.173.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.173.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.173.0) | https://github.com/aquaproj/aqua-registry/compare/v4.172.0...v4.173.0 ##### 🎉 New Packages [#​22579](https://togithub.com/aquaproj/aqua-registry/issues/22579) [awslabs/dynein](https://togithub.com/awslabs/dynein): DynamoDB CLI written in Rust [@​istone-you](https://togithub.com/istone-you) [#​22578](https://togithub.com/aquaproj/aqua-registry/issues/22578) [kaytu-io/kaytu](https://togithub.com/kaytu-io/kaytu): The Kaytu CLI helps you save on cloud costs by finding the perfect server sizes. Kaytu analyzes historical usage and provides tailored recommendations, ensuring you only pay for the resources you need [@​istone-you](https://togithub.com/istone-you) [#​22584](https://togithub.com/aquaproj/aqua-registry/issues/22584) [lasiar/canonicalheader](https://togithub.com/lasiar/canonicalheader): Golang linter checking the canonicality of the http header [@​ponkio-o](https://togithub.com/ponkio-o) [#​22582](https://togithub.com/aquaproj/aqua-registry/issues/22582) [#​22586](https://togithub.com/aquaproj/aqua-registry/issues/22586) [playwright-community/playwright-go](https://togithub.com/playwright-community/playwright-go): Playwright for Go a browser automation library to control Chromium, Firefox and WebKit with a single API ### [`v4.172.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.172.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.171.0...v4.172.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.172.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.172.0) | https://github.com/aquaproj/aqua-registry/compare/v4.171.0...v4.172.0 ##### 🎉 New Packages [#​22529](https://togithub.com/aquaproj/aqua-registry/issues/22529) [bflad/tfproviderlint](https://togithub.com/bflad/tfproviderlint): Terraform Provider Lint Tool [@​ponkio-o](https://togithub.com/ponkio-o) ##### Fix [#​22527](https://togithub.com/aquaproj/aqua-registry/issues/22527) Mic-U/ecsher: Regenerate settings ### [`v4.171.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.171.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.170.0...v4.171.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.171.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.171.0) | https://github.com/aquaproj/aqua-registry/compare/v4.170.0...v4.171.0 ##### 🎉 New Packages [#​22488](https://togithub.com/aquaproj/aqua-registry/issues/22488) [crates.io/cargo-expand](https://togithub.com/dtolnay/cargo-expand): Subcommand to show result of macro expansion [@​ryoppippi](https://togithub.com/ryoppippi) [#​22487](https://togithub.com/aquaproj/aqua-registry/issues/22487) [crates.io/cargo-run-script](https://crates.io/crates/cargo-run-script): Bringing `npm run-script` to Rust [@​ryoppippi](https://togithub.com/ryoppippi) [#​22489](https://togithub.com/aquaproj/aqua-registry/issues/22489) [nishanths/license](https://togithub.com/nishanths/license): Command line license text generator [@​ryoppippi](https://togithub.com/ryoppippi) ##### Fix [#​22508](https://togithub.com/aquaproj/aqua-registry/issues/22508) GoogleContainerTools/container-structure-test: Follow up changes of container-structure-test v1.18.0 ### [`v4.170.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.170.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.169.0...v4.170.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.170.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.170.0) | https://github.com/aquaproj/aqua-registry/compare/v4.169.0...v4.170.0 ##### 🎉 New Packages [#​22464](https://togithub.com/aquaproj/aqua-registry/issues/22464) [8051Enthusiast/biodiff](https://togithub.com/8051Enthusiast/biodiff): Hex diff viewer using alignment algorithms from biology [@​mitsu-yuki](https://togithub.com/mitsu-yuki) [#​22470](https://togithub.com/aquaproj/aqua-registry/issues/22470) [vishnubob/wait-for-it](https://togithub.com/vishnubob/wait-for-it): Pure bash script to test and wait on the availability of a TCP host and port ### [`v4.169.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.169.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.168.0...v4.169.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.169.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.169.0) | https://github.com/aquaproj/aqua-registry/compare/v4.168.0...v4.169.0 #### 🎉 New Packages [#​22395](https://togithub.com/aquaproj/aqua-registry/issues/22395) [restechnica/semverbot](https://togithub.com/restechnica/semverbot): A CLI which automates semver versioning [@​ponkio-o](https://togithub.com/ponkio-o) #### Fixes [#​22367](https://togithub.com/aquaproj/aqua-registry/issues/22367) ddosify/ddosify: Rename the package to [getanteon/anteon](https://togithub.com/getanteon/anteon) [#​22396](https://togithub.com/aquaproj/aqua-registry/issues/22396) helmwave/helmwave: Follow up changes of helmwave v0.36.0 [#​22407](https://togithub.com/aquaproj/aqua-registry/issues/22407) charmbracelet/gum: Follow up changes of gum v0.14.0 ### [`v4.168.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.168.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.167.0...v4.168.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.168.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.168.0) | https://github.com/aquaproj/aqua-registry/compare/v4.167.0...v4.168.0 #### 🎉 New Packages [#​22316](https://togithub.com/aquaproj/aqua-registry/issues/22316) [toshimaru/nyan](https://togithub.com/toshimaru/nyan): Colored cat command which supports syntax highlighting [@​ishii1648](https://togithub.com/ishii1648) #### Fixes [#​22296](https://togithub.com/aquaproj/aqua-registry/issues/22296) hotaruswarm/dagu: Rename the package to dagu-dev/dagu #### 🎉 New Contributors Thank you for your contribution! [@​ishii1648](https://togithub.com/ishii1648) [#​22316](https://togithub.com/aquaproj/aqua-registry/issues/22316) ### [`v4.167.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.167.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.166.0...v4.167.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.167.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.167.0) | https://github.com/aquaproj/aqua-registry/compare/v4.166.0...v4.167.0 #### 🎉 New Packages [#​22271](https://togithub.com/aquaproj/aqua-registry/issues/22271) [undistro/marvin](https://togithub.com/undistro/marvin): Marvin is a CLI tool that scans a k8s cluster by performing CEL expressions to report potential issues, misconfigurations and vulnerabilities [#​22256](https://togithub.com/aquaproj/aqua-registry/issues/22256) [cert-manager/cmctl](https://togithub.com/cert-manager/cmctl): command line utility that makes cert-manager'ing easier The code of cmctl was moved from https://github.com/cert-manager/cert-manager to https://github.com/cert-manager/cmctl #### Fixes [#​22288](https://togithub.com/aquaproj/aqua-registry/issues/22288) cilium/cilium-cli: Follow up changes of cilium-cli v0.16.5 [#​22287](https://togithub.com/aquaproj/aqua-registry/issues/22287) zigtools/zls: Follow up changes of zls 0.12.0 ### [`v4.166.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.166.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.165.0...v4.166.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.166.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.166.0) | https://github.com/aquaproj/aqua-registry/compare/v4.165.0...v4.166.0 #### 🎉 New Packages [#​22190](https://togithub.com/aquaproj/aqua-registry/issues/22190) [gabeduke/kubectl-iexec](https://togithub.com/gabeduke/kubectl-iexec): Kubectl plugin to interactively exec into a pod [@​ponkio-o](https://togithub.com/ponkio-o) #### Fixes [#​22191](https://togithub.com/aquaproj/aqua-registry/issues/22191) dagu-dev/dagu: Rename the package to hotaruswarm/dagu [#​22223](https://togithub.com/aquaproj/aqua-registry/issues/22223) tstack/lnav: Follow up changes of lnav v0.12.1 [#​22225](https://togithub.com/aquaproj/aqua-registry/issues/22225) Orange-OpenSource/hurl: Regenerate the setting ### [`v4.165.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.165.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.164.0...v4.165.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.165.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.165.0) | https://github.com/aquaproj/aqua-registry/compare/v4.164.0...v4.165.0 #### 🎉 New Packages [#​22188](https://togithub.com/aquaproj/aqua-registry/issues/22188) [Checkmarx/kics](https://togithub.com/Checkmarx/kics): Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx #### Fixes [#​22183](https://togithub.com/aquaproj/aqua-registry/issues/22183) sarub0b0/kubetui: Follow up changes of kubetui v1.5.1 [#​22111](https://togithub.com/aquaproj/aqua-registry/issues/22111) gefyrahq/gefyra: Follow up changes of gefyra 2.1.0 ### [`v4.164.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.164.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.163.0...v4.164.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.164.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.164.0) | https://github.com/aquaproj/aqua-registry/compare/v4.163.0...v4.164.0 ##### 🎉 New Packages [#​21993](https://togithub.com/aquaproj/aqua-registry/issues/21993) [pnpm/pnpm](https://togithub.com/pnpm/pnpm): Fast, disk space efficient package manager [@​tomoyamachi](https://togithub.com/tomoyamachi) ##### Fixes [#​22023](https://togithub.com/aquaproj/aqua-registry/issues/22023) golangci/misspell: Follow up changes of misspell v0.5.0 [#​22024](https://togithub.com/aquaproj/aqua-registry/issues/22024) vmware/govmomi/govc: Remove a release v0.17.0 [#​22068](https://togithub.com/aquaproj/aqua-registry/issues/22068) pnpm/pnpm: Support old versions ##### 🎉 New Contributors Thank you for your contribution! [@​tomoyamachi](https://togithub.com/tomoyamachi) [#​21993](https://togithub.com/aquaproj/aqua-registry/issues/21993) ### [`v4.163.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.163.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.162.0...v4.163.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.163.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.163.0) | https://github.com/aquaproj/aqua-registry/compare/v4.162.0...v4.163.0 #### 🎉 New Packages [#​21951](https://togithub.com/aquaproj/aqua-registry/issues/21951) [gittuf/gittuf](https://togithub.com/gittuf/gittuf): A security layer for Git repositories [#​21955](https://togithub.com/aquaproj/aqua-registry/issues/21955) [pipe-cd/pipecd/pipectl](https://pipecd.dev/docs-v0.47.x/user-guide/command-line-tool/): The command line tool for PipeCD [@​ponkio-o](https://togithub.com/ponkio-o) [#​21955](https://togithub.com/aquaproj/aqua-registry/issues/21955) [pipe-cd/pipecd/piped](https://pipecd.dev/docs-v0.47.x/concepts/#piped): A component of PipeCD that runs inside target environment to execute deployment and report its state [@​ponkio-o](https://togithub.com/ponkio-o) [#​21957](https://togithub.com/aquaproj/aqua-registry/issues/21957) [mashiike/redshift-credentials](https://togithub.com/mashiike/redshift-credentials): a command line tool for Amazon Redshift temporary authorization with AWS IAM [@​mashiike](https://togithub.com/mashiike) #### 🎉 New Contributors Thank you for your contribution! [@​mashiike](https://togithub.com/mashiike) [#​21957](https://togithub.com/aquaproj/aqua-registry/issues/21957) ### [`v4.162.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.162.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.161.0...v4.162.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.162.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.162.0) | https://github.com/aquaproj/aqua-registry/compare/v4.161.0...v4.162.0 #### 🎉 New Packages [#​21900](https://togithub.com/aquaproj/aqua-registry/issues/21900) [kubecolor/kubecolor](https://togithub.com/kubecolor/kubecolor): Colorize your kubectl output #### Fixes [#​21903](https://togithub.com/aquaproj/aqua-registry/issues/21903) charmbracelet/vhs: Follow up changes of vhs v0.7.2 [#​21902](https://togithub.com/aquaproj/aqua-registry/issues/21902) extrawurst/gitui: Follow up changes of gitui v0.26.1 [#​21892](https://togithub.com/aquaproj/aqua-registry/issues/21892) mjibson/sqlfmt: Rename the package to maddyblue/sqlfmt [#​21846](https://togithub.com/aquaproj/aqua-registry/issues/21846) vmware/govmomi/govc: Regenerate the setting ### [`v4.161.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.161.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.160.0...v4.161.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.161.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.161.0) | https://github.com/aquaproj/aqua-registry/compare/v4.160.0...v4.161.0 #### 🎉 New Packages [#​21832](https://togithub.com/aquaproj/aqua-registry/issues/21832) [tgenv/tgenv](https://togithub.com/tgenv/tgenv): A tool to manage multiples Terragrunt versions [@​bhundven](https://togithub.com/bhundven) #### Fixes [#​21834](https://togithub.com/aquaproj/aqua-registry/issues/21834) mashiike/prepalert: Follow up changes of prepalert v1.0.2 A checksum file was renamed. https://github.com/mashiike/prepalert/commit/493b8aee55e11719cfffda35cdf55030441514c8 #### 🎉 New Contributors Thank you for your contribution! [@​bhundven](https://togithub.com/bhundven) [#​21832](https://togithub.com/aquaproj/aqua-registry/issues/21832) ### [`v4.160.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.160.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.159.0...v4.160.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.160.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.160.0) | https://github.com/aquaproj/aqua-registry/compare/v4.159.0...v4.160.0 #### 🎉 New Packages [#​21798](https://togithub.com/aquaproj/aqua-registry/issues/21798) [Songmu/make2help](https://togithub.com/Songmu/make2help): Utility for self-documented Makefile [@​lamanotrama](https://togithub.com/lamanotrama) #### Fixes [#​21747](https://togithub.com/aquaproj/aqua-registry/issues/21747) jetpack-io/devbox: Rename the package `jetpack-io/devbox` to jetify-com/devbox The GitHub Repository of the package `jetpack-io/devbox` was transferred from [jetpack-io/devbox](https://togithub.com/jetpack-io/devbox) to [jetify-com/devbox](https://togithub.com/jetify-com/devbox). #### 🎉 New Contributors Thank you for your contribution! [@​lamanotrama](https://togithub.com/lamanotrama) [#​21798](https://togithub.com/aquaproj/aqua-registry/issues/21798) ### [`v4.159.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.159.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.158.0...v4.159.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.159.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.159.0) | https://github.com/aquaproj/aqua-registry/compare/v4.158.0...v4.159.0 #### 🎉 New Packages [#​21629](https://togithub.com/aquaproj/aqua-registry/issues/21629) [Bearer/gon](https://togithub.com/Bearer/gon): Sign, notarize, and package macOS CLI tools and applications written in any language. Available as both a CLI and a Go library [#​21659](https://togithub.com/aquaproj/aqua-registry/issues/21659) [koyeb/koyeb-cli](https://togithub.com/koyeb/koyeb-cli): Koyeb cli #### Fixes [#​21718](https://togithub.com/aquaproj/aqua-registry/issues/21718) dwisiswant0/tlder: Follow up changes of tlder v0.1.0 https://github.com/dwisiswant0/tlder/commit/b61d4d11cc5d1be33253760cdd267576aa687766 [#​21719](https://togithub.com/aquaproj/aqua-registry/issues/21719) oligot/go-mod-upgrade: Follow up changes of go-mod-upgrade v0.10.0 https://github.com/oligot/go-mod-upgrade/commit/afcc5855bc682264523d30144faf072d64d20c54 ### [`v4.158.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.158.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.157.0...v4.158.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.158.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.158.0) | https://github.com/aquaproj/aqua-registry/compare/v4.157.0...v4.158.0 #### 🎉 New Packages [#​21584](https://togithub.com/aquaproj/aqua-registry/issues/21584) [getporter/porter/porter](https://togithub.com/getporter/porter): Porter enables you to package your application artifact, client tools, configuration and deployment logic together as an installer that you can distribute, and install with a single command [@​air-hand](https://togithub.com/air-hand) [#​21576](https://togithub.com/aquaproj/aqua-registry/issues/21576) [termkit/gama](https://togithub.com/termkit/gama): Manage your GitHub Actions from Terminal with great UI [@​ponkio-o](https://togithub.com/ponkio-o) [#​21531](https://togithub.com/aquaproj/aqua-registry/issues/21531) [watchexec/cargo-watch](https://togithub.com/watchexec/cargo-watch): Watches over your Cargo project's source [@​ryoppippi](https://togithub.com/ryoppippi) #### Fixes [#​21558](https://togithub.com/aquaproj/aqua-registry/issues/21558) exoscale/cli: Regenerate the setting [#​21620](https://togithub.com/aquaproj/aqua-registry/issues/21620) golang/tools/guru guru was deleted at v0.20.0 - https://github.com/golang/tools/commit/1f580da07881ed47f85cf39907a0b5c8e0d649b7 - [https://github.com/golang/go/issues/65880](https://togithub.com/golang/go/issues/65880) > RIP guru, Go's LSP server before LSP was invented. ### [`v4.157.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.157.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.156.0...v4.157.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.157.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.157.0) | https://github.com/aquaproj/aqua-registry/compare/v4.156.0...v4.157.0 #### 🎉 New Packages [#​21505](https://togithub.com/aquaproj/aqua-registry/issues/21505) [kyoshidajp/dep-doctor](https://togithub.com/kyoshidajp/dep-doctor): Diagnose whether your software dependency libraries are maintained [@​chaspy](https://togithub.com/chaspy) [#​21500](https://togithub.com/aquaproj/aqua-registry/issues/21500) [moby/buildkit](https://togithub.com/moby/buildkit): concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit [@​ponkio-o](https://togithub.com/ponkio-o) ### [`v4.156.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.156.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.155.1...v4.156.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.156.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.156.0) | https://github.com/aquaproj/aqua-registry/compare/v4.155.1...v4.156.0 #### 🎉 New Packages [#​21293](https://togithub.com/aquaproj/aqua-registry/issues/21293) [#​21301](https://togithub.com/aquaproj/aqua-registry/issues/21301) [charmbracelet/freeze](https://togithub.com/charmbracelet/freeze): Generate images of code and terminal output [#​21486](https://togithub.com/aquaproj/aqua-registry/issues/21486) [fe3dback/go-arch-lint](https://togithub.com/fe3dback/go-arch-lint): GoLang architecture linter (checker) tool. Will check all project import path and compare with arch rules defined in yml file. Useful for hexagonal / onion / ddd / mvc and other architectural patterns. Tool can by used in your CI #### Bug Fixes [#​21287](https://togithub.com/aquaproj/aqua-registry/issues/21287) lxc/incus: Fix the bug that the different binary (incus-migrate) is installed on linux #### Fixes [#​21410](https://togithub.com/aquaproj/aqua-registry/issues/21410) commercialhaskell/stack: Regenerate the setting ### [`v4.155.1`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.155.1) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.155.0...v4.155.1) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.155.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.155.0) | https://github.com/aquaproj/aqua-registry/compare/v4.155.0...v4.155.1 #### Others [#​21239](https://togithub.com/aquaproj/aqua-registry/issues/21239) Rename the package crates.io/shellharden to anordal/shellharden [@​hituzi-no-sippo](https://togithub.com/hituzi-no-sippo) shellharden started releasing pre-built binaries, so we changed the package type from `cargo` to `github_release` from shellharden v4.3.1. [https://github.com/anordal/shellharden/pull/57](https://togithub.com/anordal/shellharden/pull/57) https://github.com/anordal/shellharden/releases/tag/v4.3.1 > \[!WARNING] > Please rename the package `crates.io/shellharden` to `anordal/shellharden` > > ```yaml > packages: > - name: anordal/shellharden@v4.3.1 > ``` > > Note that Renovate will update crates.io/shellharden to crates.io/shellharden@4.3.1, but it wouldn't work. > You have to change the version to `v4.3.1`. ### [`v4.155.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.155.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.154.0...v4.155.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.154.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.154.0) | https://github.com/aquaproj/aqua-registry/compare/v4.154.0...v4.155.0 #### 🎉 New Packages [#​21127](https://togithub.com/aquaproj/aqua-registry/issues/21127) [ynqa/jnv](https://togithub.com/ynqa/jnv): interactive JSON filter using jq [@​ponkio-o](https://togithub.com/ponkio-o) [#​21079](https://togithub.com/aquaproj/aqua-registry/issues/21079) [zaghaghi/openapi-tui](https://togithub.com/zaghaghi/openapi-tui): Terminal UI to list, browse and run APIs defined with openapi spec [@​wancup](https://togithub.com/wancup) #### Fixes [#​21122](https://togithub.com/aquaproj/aqua-registry/issues/21122) Update some packages to support Cosign v2 ⚠️ To install the following packages, aqua v2.25.1 or later is required. - aquaproj/aqua-registry-updater - aquaproj/registry-tool - argoproj/argo-workflows - chainguard-dev/apko - chainguard-dev/melange - charmbracelet/gum - goreleaser/nfpm - kubernetes-sigs/zeitgeist - lintnet/lintnet - suzuki-shunsuke/ci-info - suzuki-shunsuke/circleci-config-merge - suzuki-shunsuke/cmdx - suzuki-shunsuke/ghalint - suzuki-shunsuke/ghcp - suzuki-shunsuke/github-comment - suzuki-shunsuke/mkghtag - suzuki-shunsuke/nllint - suzuki-shunsuke/pinact - suzuki-shunsuke/renovate-issue-action - suzuki-shunsuke/tfcmt - suzuki-shunsuke/tfprovidercheck - terraform-linters/tflint - tfmigrator/cli - updatecli/updatecli - yuyaban/gitlab-comment [#​21062](https://togithub.com/aquaproj/aqua-registry/issues/21062) [#​21063](https://togithub.com/aquaproj/aqua-registry/issues/21063) [#​21064](https://togithub.com/aquaproj/aqua-registry/issues/21064) [#​21065](https://togithub.com/aquaproj/aqua-registry/issues/21065) [#​21066](https://togithub.com/aquaproj/aqua-registry/issues/21066) Transfer [k0kubun/xremap/\*](https://togithub.com/k0kubun/xremap) to [xremap/xremap/\*](https://togithub.com/xremap/xremap) The GitHub Repository of the package "k0kubun/xremap/hypr" was transferred from [k0kubun/xremap](https://togithub.com/k0kubun/xremap) to [xremap/xremap](https://togithub.com/xremap/xremap) ### [`v4.154.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.154.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.153.0...v4.154.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.154.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.154.0) | https://github.com/aquaproj/aqua-registry/compare/v4.153.0...v4.154.0 #### 🎉 New Packages [#​20991](https://togithub.com/aquaproj/aqua-registry/issues/20991) [gruntwork-io/git-xargs](https://togithub.com/gruntwork-io/git-xargs): git-xargs is a command-line tool (CLI) for making updates across multiple Github repositories with a single command [@​ponkio-o](https://togithub.com/ponkio-o) ### [`v4.153.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.153.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.152.0...v4.153.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.153.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.153.0) | https://github.com/aquaproj/aqua-registry/compare/v4.152.0...v4.153.0 ##### 🎉 New Packages [#​20896](https://togithub.com/aquaproj/aqua-registry/issues/20896) [livesense-inc/go-simple-http-redirector](https://togithub.com/livesense-inc/go-simple-http-redirector): Redirect HTTP requests to specific URI [@​ponkio-o](https://togithub.com/ponkio-o) ##### Fixes [#​20903](https://togithub.com/aquaproj/aqua-registry/issues/20903) deviceinsight/kafkactl: Follow up changes of kafkactl v5.0.6 https://github.com/deviceinsight/kafkactl/commit/0881f4771df805d112b70f1db859f4b9f2902baa ### [`v4.152.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.152.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.151.0...v4.152.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.152.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.152.0) | https://github.com/aquaproj/aqua-registry/compare/v4.151.0...v4.152.0 #### 🎉 New Packages [#​20854](https://togithub.com/aquaproj/aqua-registry/issues/20854) [crates.io/gitu](https://togithub.com/altsem/gitu): A TUI Git client inspired by Magit [@​ryoppippi](https://togithub.com/ryoppippi) #### Fixes [#​20772](https://togithub.com/aquaproj/aqua-registry/issues/20772) casey/just: Follow up changes of just 1.25.1 [#​20876](https://togithub.com/aquaproj/aqua-registry/issues/20876) terraform-docs/terraform-docs: Support old versions ### [`v4.151.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.151.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.150.0...v4.151.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.151.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.151.0) | https://github.com/aquaproj/aqua-registry/compare/v4.150.0...v4.151.0 #### 🎉 New Packages [#​20762](https://togithub.com/aquaproj/aqua-registry/issues/20762) [leoafarias/fvm](https://togithub.com/leoafarias/fvm): Flutter Version Management: A simple CLI to manage Flutter SDK versions [@​wancup](https://togithub.com/wancup) #### Fixes [#​20753](https://togithub.com/aquaproj/aqua-registry/issues/20753) derailed/popeye: Follow up changes of popeye v0.21.0 Asset names were changed. https://github.com/derailed/popeye/commit/8832a9e6cf6fb232df9e994806349c2dfa4cc6df ### [`v4.150.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.150.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.149.0...v4.150.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.150.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.150.0) | https://github.com/aquaproj/aqua-registry/compare/v4.149.0...v4.150.0 #### 🎉 New Packages [#​20663](https://togithub.com/aquaproj/aqua-registry/issues/20663) [hellux/jotdown](https://togithub.com/hellux/jotdown): A Djot parser library [@​hituzi-no-sippo](https://togithub.com/hituzi-no-sippo) [#​20661](https://togithub.com/aquaproj/aqua-registry/issues/20661) [awslabs/soci-snapshotter](https://togithub.com/awslabs/soci-snapshotter) [@​ponkio-o](https://togithub.com/ponkio-o) #### Fixes [#​20706](https://togithub.com/aquaproj/aqua-registry/issues/20706) charmbracelet/mods: Follow up changes of mods v1.2.2 [https://github.com/charmbracelet/meta/pull/140](https://togithub.com/charmbracelet/meta/pull/140) ### [`v4.149.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.149.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.148.0...v4.149.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.149.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.149.0) | https://github.com/aquaproj/aqua-registry/compare/v4.148.0...v4.149.0 #### 🎉 New Packages [#​20629](https://togithub.com/aquaproj/aqua-registry/issues/20629) [AGWA/git-crypt](https://togithub.com/AGWA/git-crypt): Transparent file encryption in git [@​florianmutter](https://togithub.com/florianmutter) [#​20653](https://togithub.com/aquaproj/aqua-registry/issues/20653) [logdyhq/logdy-core](https://togithub.com/logdyhq/logdy-core): Web based real-time log viewer. Stream ANY content to a web UI with autogenerated filters. Parse any format with TypeScript #### Fixes [#​20651](https://togithub.com/aquaproj/aqua-registry/issues/20651) google/osv-scanner: Follow up changes of osv-scanner v1.7.0 [https://github.com/google/osv-scanner/pull/831](https://togithub.com/google/osv-scanner/pull/831) [#​20652](https://togithub.com/aquaproj/aqua-registry/issues/20652) GoogleContainerTools/container-structure-test: Follow up changes of container-structure-test v1.17.0 https://github.com/GoogleContainerTools/container-structure-test/releases/tag/v1.17.0 > Important > Releases are no longer published to GCS, use the github release asset to access the binary. ### [`v4.148.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.148.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.147.0...v4.148.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.148.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.148.0) | https://github.com/aquaproj/aqua-registry/compare/v4.147.0...v4.148.0 #### 🎉 New Packages [#​20520](https://togithub.com/aquaproj/aqua-registry/issues/20520) [freshautomations/stoml](https://togithub.com/freshautomations/stoml): Simple TOML parser for Bash [@​ponkio-o](https://togithub.com/ponkio-o) [#​20510](https://togithub.com/aquaproj/aqua-registry/issues/20510) [vmware/govmomi/govc](https://togithub.com/vmware/govmomi/tree/main/govc): a vSphere CLI built on top of govmomi [@​NikitaCOEUR](https://togithub.com/NikitaCOEUR) [#​20516](https://togithub.com/aquaproj/aqua-registry/issues/20516) [vmware/govmomi/vcsim](https://togithub.com/vmware/govmomi/blob/main/vcsim/README.md): A vCenter and ESXi API based simulator [@​NikitaCOEUR](https://togithub.com/NikitaCOEUR) ### [`v4.147.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.147.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.146.0...v4.147.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.147.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.147.0) | https://github.com/aquaproj/aqua-registry/compare/v4.146.0...v4.147.0 #### 🎉 New Packages [#​20479](https://togithub.com/aquaproj/aqua-registry/issues/20479) [antham/gommit](https://togithub.com/antham/gommit): Enforce git message commit consistency [@​NikitaCOEUR](https://togithub.com/NikitaCOEUR) [#​20468](https://togithub.com/aquaproj/aqua-registry/issues/20468) [apache/maven-mvnd](https://togithub.com/apache/maven-mvnd): Apache Maven Daemon [@​tadayosi](https://togithub.com/tadayosi) #### Fixes [#​20493](https://togithub.com/aquaproj/aqua-registry/issues/20493) kubescape/kubescape: Follow up changes of kubescape v3.0.4 ### [`v4.146.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.146.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.145.0...v4.146.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.146.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.146.0) | https://github.com/aquaproj/aqua-registry/compare/v4.145.0...v4.146.0 #### 🎉 New Packages [#​20465](https://togithub.com/aquaproj/aqua-registry/issues/20465) [aandrew-me/tgpt](https://togithub.com/aandrew-me/tgpt): AI Chatbots in terminal without needing API keys [@​tadayosi](https://togithub.com/tadayosi) </details> <details> <summary>charmbracelet/gum (charmbracelet/gum)</summary> ### [`v0.14.0`](https://togithub.com/charmbracelet/gum/releases/tag/v0.14.0) [Compare Source](https://togithub.com/charmbracelet/gum/compare/v0.13.0...v0.14.0) #### Gum + Huh? Gum `v0.14.0` is a major internal refactor which uses `huh?` internally for `choose`, `confirm`, `file`, `input`, `write` inputs! All functionality remains the same, but you will notice some minor visual changes / improvements. If you haven't already, check it out: <a href="https://togithub.com/charmbracelet/huh"> <img src="https://github.com/charmbracelet/gum/assets/42545625/39cc8110-ef0f-41f6-817b-5947304400cc" width="300"> </a> <br> <br> - https://github.com/charmbracelet/huh *** #### Changes - Use Huh for Gum Choose by [@​maaslalani](https://togithub.com/maaslalani) in [https://github.com/charmbracelet/gum/pull/521](https://togithub.com/charmbracelet/gum/pull/521) - Use Huh for Gum Confirm by [@​maaslalani](https://togithub.com/maaslalani) in [https://github.com/charmbracelet/gum/pull/522](https://togithub.com/charmbracelet/gum/pull/522) - Use Huh for Gum File by [@​maaslalani](https://togithub.com/maaslalani) in [https://github.com/charmbracelet/gum/pull/523](https://togithub.com/charmbracelet/gum/pull/523) - Use Huh for Gum Input by [@​maaslalani](https://togithub.com/maaslalani) in [https://github.com/charmbracelet/gum/pull/524](https://togithub.com/charmbracelet/gum/pull/524) - Use Huh for Gum Write by [@​maaslalani](https://togithub.com/maaslalani) in [https://github.com/charmbracelet/gum/pull/525](https://togithub.com/charmbracelet/gum/pull/525) - fix(spin): Output Pipes if Timeout Occurs by [@​hopefulTex](https://togithub.com/hopefulTex) in [https://github.com/charmbracelet/gum/pull/461](https://togithub.com/charmbracelet/gum/pull/461) - Document `gum log --time` by [@​ernstki](https://togithub.com/ernstki) in [https://github.com/charmbracelet/gum/pull/472](https://togithub.com/charmbracelet/gum/pull/472) - feat(spin): Add support for `--show-error` for the spinner. (rebase [#​440](https://togithub.com/charmbracelet/gum/issues/440)) by [@​pingiun](https://togithub.com/pingiun) in [https://github.com/charmbracelet/gum/pull/518](https://togithub.com/charmbracelet/gum/pull/518) #### New Contributors - [@​ernstki](https://togithub.com/ernstki) made their first contribution in [https://github.com/charmbracelet/gum/pull/472](https://togithub.com/charmbracelet/gum/pull/472) - [@​pingiun](https://togithub.com/pingiun) made their first contribution in [https://github.com/charmbracelet/gum/pull/518](https://togithub.com/charmbracelet/gum/pull/518) - [@​dungle-scrubs](https://togithub.com/dungle-scrubs) made their first contribution in [https://github.com/charmbracelet/gum/pull/513](https://togithub.com/charmbracelet/gum/pull/513) **Full Changelog**: https://github.com/charmbracelet/gum/compare/v0.13.0...v0.14.0 *** <a href="https:// </details> --- ### Configuration 📅 **Schedule**: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/DelineaXPM/dsv-cli). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
What happened:
Multiple Java 5/6 CVEs from ~2009 are being reported against Java 11 and 17 eclipse-temurin images:
java 11.0.22+7-J-ms8m binary CVE-2009-3883 High
java 11.0.22+7-J-ms8m binary CVE-2009-3882 High
java 11.0.22+7-J-ms8m binary CVE-2009-3881 High
java 11.0.22+7-J-ms8m binary CVE-2009-3879 High
java 11.0.22+7-J-ms8m binary CVE-2009-2689 High
java 11.0.22+7-J-ms8m binary CVE-2009-2476 High
java 11.0.22+7-J-ms8m binary CVE-2009-2475 High
java 11.0.22+7-J-ms8m binary CVE-2009-3884 Medium
java 11.0.22+7-J-ms8m binary CVE-2009-3880 Medium
java 11.0.22+7-J-ms8m binary CVE-2009-3728 Medium
java 11.0.22+7-J-ms8m binary CVE-2009-2690 Medium
This only seems to happen with Grype version 0.75.0+ (v0.74.7 does not show these CVEs).
What you expected to happen:
These CVE's should not be present
How to reproduce it (as minimally and precisely as possible):
Run
grype eclipse-temurin:11-jdkwith Grype 0.75.0Anything else we need to know?:
Environment:
using release tag='v0.75.0' version='0.75.0' os='linux' arch='amd64'
The text was updated successfully, but these errors were encountered: