v0.40.0-rc.1

Changelog

• 25d03d6 feat(detector/vuls2): adopt forward-compatible enum serde and surface evaluation warnings (#2609)
• 0050802 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2611)
• 7cc6c21 chore(deps): bump the trivy group across 1 directory with 2 updates (#2597)
• 0b04ace chore(deps): bump the others group across 1 directory with 8 updates (#2608)
• 8b2f7c4 feat(detector/vuls2): use JPCERT-AT reference_titles for JVN alert title (#2610)
• 45714b6 feat(detector/vuls2): flatten CPE AND conjunctions to OR in vuls0 (#2606)
• 76c616f feat(detector/vuls2): ignore rejected/withdrawn CPE vulnerabilities (#2603)
• c4611e3 chore(deps): bump vuls-data-update and vuls2 to latest (#2602)
• cf9e99e perf(detector): share one vuls2 db session across a server's detect and enrich (#2600)
• b03f24e feat(detector): detect Seal Security patched library packages (#2596)
• 77a2bfc perf(detector): derive verified-product suppression from the detection result (#2592)
• 0d41be0 chore(deps): bump github.com/aquasecurity/trivy (#2573)
• 698946a chore(deps): bump the others group across 1 directory with 10 updates (#2595)
• 33eb699 chore(deps): bump the all group across 1 directory with 11 updates (#2593)
• 89a602c chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.10.0 to 0.11.0 (#2594)
• 7ea4a1e chore(deps): bump the all group across 1 directory with 2 updates (#2565)
• f621477 feat!(detector): route VulnCheck and JVN to vuls2 (#2590)
• 1297680 feat(detector): route Fortinet to vuls2 (#2591)
• 2d80751 feat(detector): route Palo Alto to vuls2 (#2589)
• c6b9778 feat!(detector): route Cisco to vuls2 (#2581)
• 61f32a4 feat(detector): enrich MITRE CVE v5 via vuls2 (#2586)
• 92e1e56 chore(deps): bump github.com/containerd/containerd (#2583)
• 635222e feat!(detector): replace go-cti with vuls2 (#2530)
• 9d8465a feat(detector/vuls2): enrich ENISA EUVD List via vuls2 (#2585)
• 024b0e2 feat!(detector): route NVD to vuls2 (#2575)
• e6acd26 test(detector/vuls2): rename enrich fixture mitre-v5 to mitre-cve-v5 (#2576)