Closed mend-for-github-com[bot] closed 1 year ago
This PR contains the following updates:
v0.65.0
v0.68.0
v3.118.0
v3.123.0
1.19.4
1.19.5
📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR contains the following updates:
v0.65.0
->v0.68.0
v3.118.0
->v3.123.0
1.19.4
->1.19.5
Release Notes
anchore/syft
### [`v0.68.0`](https://togithub.com/anchore/syft/releases/tag/v0.68.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.66.2...v0.68.0) ### Changelog #### [v0.68.0](https://togithub.com/anchore/syft/tree/v0.68.0) (2023-01-20) [Full Changelog](https://togithub.com/anchore/syft/compare/v0.66.2...v0.68.0) ##### Added Features - Catalog memcached binary \[[Issue #1459](https://togithub.com/anchore/syft/issues/1459)] \[[@witchcraze](https://togithub.com/witchcraze)] ##### Bug Fixes - Relax error conditions for catalogers \[[PR #1492](https://togithub.com/anchore/syft/pull/1492)] \[[wagoodman](https://togithub.com/wagoodman)] - Always set the package ID for java packages \[[PR #1493](https://togithub.com/anchore/syft/pull/1493)] \[[wagoodman](https://togithub.com/wagoodman)] - Fix panic in APK version specifier handling \[[PR #1494](https://togithub.com/anchore/syft/pull/1494)] \[[luhring](https://togithub.com/luhring)] - ZERO npm dependencies discovered if any npm dependency has an array as a license \[[Issue #1479](https://togithub.com/anchore/syft/issues/1479)] - Syft panics on APK parsing when Dependencies or Provides holds an empty string \[[Issue #1483](https://togithub.com/anchore/syft/issues/1483)] ### [`v0.66.2`](https://togithub.com/anchore/syft/releases/tag/v0.66.2) [Compare Source](https://togithub.com/anchore/syft/compare/v0.66.1...v0.66.2) ### Changelog #### [v0.66.2](https://togithub.com/anchore/syft/tree/v0.66.2) (2023-01-17) [Full Changelog](https://togithub.com/anchore/syft/compare/v0.66.1...v0.66.2) ##### Bug Fixes - update dependency golang.org/x/text \[[Issue #1457](https://togithub.com/anchore/syft/issues/1457)] - syft is now throwing panic with version 0.66.1 \[[Issue #1462](https://togithub.com/anchore/syft/issues/1462)] ### [`v0.66.1`](https://togithub.com/anchore/syft/releases/tag/v0.66.1) [Compare Source](https://togithub.com/anchore/syft/compare/v0.66.0...v0.66.1) ### Changelog #### [v0.66.1](https://togithub.com/anchore/syft/tree/v0.66.1) (2023-01-12) [Full Changelog](https://togithub.com/anchore/syft/compare/v0.66.0...v0.66.1) ##### Bug Fixes - update graalvm cataloger to fix panic \[[PR #1454](https://togithub.com/anchore/syft/pull/1454)] \[[kzantow](https://togithub.com/kzantow)] ### [`v0.66.0`](https://togithub.com/anchore/syft/releases/tag/v0.66.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.65.0...v0.66.0) ### Changelog #### [v0.66.0](https://togithub.com/anchore/syft/tree/v0.66.0) (2023-01-12) [Full Changelog](https://togithub.com/anchore/syft/compare/v0.65.0...v0.66.0) ##### Added Features - Catalog Erlang/Elixir artifacts using "rebar" and "mix" package managers \[[Issue #1071](https://togithub.com/anchore/syft/issues/1071)] \[[@cpendery](https://togithub.com/cpendery)] - Catalog PHP binary runtimes \[[Issue #1429](https://togithub.com/anchore/syft/issues/1429)] \[[@witchcraze](https://togithub.com/witchcraze)] - Catalog Apache HTTP binary runtimes \[[Issue #1440](https://togithub.com/anchore/syft/issues/1440)] \[[@witchcraze](https://togithub.com/witchcraze)] - Catalog redis binary runtimes \[[Issue #1437](https://togithub.com/anchore/syft/issues/1437)] \[[@noqcks](https://togithub.com/noqcks)] - Increase the speed of cataloger stage \[[Issue #1353](https://togithub.com/anchore/syft/issues/1353)] \[[@Mikcl](https://togithub.com/Mikcl)] - Add the origin field to the output format of syftjson \[[PR #1327](https://togithub.com/anchore/syft/pull/1327)] \[[@asi-cider](https://togithub.com/asi-cider)] ##### Bug Fixes - A duplicate file in tar archive causes read to fail \[[Issue #1400](https://togithub.com/anchore/syft/issues/1400)] \[[@kzantow](https://togithub.com/kzantow)]aquaproj/aqua-registry
### [`v3.123.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v3.123.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v3.122.0...v3.123.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av3.123.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av3.123.0) | https://github.com/aquaproj/aqua-registry/compare/v3.122.0...v3.123.0 #### 🎉 New Packages [#9304](https://togithub.com/aquaproj/aqua-registry/issues/9304) [projectdiscovery/pdtm](https://togithub.com/projectdiscovery/pdtm): ProjectDiscovery's Open Source Tool Manager [#9302](https://togithub.com/aquaproj/aqua-registry/issues/9302) [suzuki-shunsuke/ghalint](https://togithub.com/suzuki-shunsuke/ghalint): GitHub Actions linter ### [`v3.122.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v3.122.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v3.121.0...v3.122.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av3.122.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av3.122.0) | https://github.com/aquaproj/aqua-registry/compare/v3.121.0...v3.122.0 #### 🎉 New Packages [#9232](https://togithub.com/aquaproj/aqua-registry/issues/9232) [comtrya/comtrya](https://togithub.com/comtrya/comtrya): Configuration Management for Localhost / dotfiles [#9233](https://togithub.com/aquaproj/aqua-registry/issues/9233) [topgrade-rs/topgrade](https://togithub.com/topgrade-rs/topgrade): Upgrade all the things #### Fixes [#9242](https://togithub.com/aquaproj/aqua-registry/issues/9242) [cloudquery/cloudquery](https://togithub.com/cloudquery/cloudquery): Fix invalid `version_constraint` [#9281](https://togithub.com/aquaproj/aqua-registry/issues/9281) [carvel-dev/imgpkg](https://togithub.com/carvel-dev/imgpkg): Fix the package name and follow up changes of checksum file #### Contributors Thank you for your contribution! [@CrystalMethod](https://togithub.com/CrystalMethod) [#9232](https://togithub.com/aquaproj/aqua-registry/issues/9232) [#9233](https://togithub.com/aquaproj/aqua-registry/issues/9233) ### [`v3.121.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v3.121.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v3.120.2...v3.121.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av3.121.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av3.121.0) | https://github.com/aquaproj/aqua-registry/compare/v3.120.2...v3.121.0 #### 🎉 New Packages [#9221](https://togithub.com/aquaproj/aqua-registry/issues/9221) [spotDL/spotify-downloader](https://togithub.com/spotDL/spotify-downloader): Download your Spotify playlists and songs along with album art and metadata (from YouTube if a match is found) #### Fixes [#9222](https://togithub.com/aquaproj/aqua-registry/issues/9222) [GoogleCloudPlatform/cloud-sql-proxy](https://togithub.com/GoogleCloudPlatform/cloud-sql-proxy): Follow up changes in [v2.0.0](https://togithub.com/GoogleCloudPlatform/cloud-sql-proxy/releases/tag/v2.0.0) #### Contributors Thank you for your contribution! [@CrystalMethod](https://togithub.com/CrystalMethod) [#9221](https://togithub.com/aquaproj/aqua-registry/issues/9221) ### [`v3.120.2`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v3.120.2) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v3.120.1...v3.120.2) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av3.120.2) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av3.120.2) | https://github.com/aquaproj/aqua-registry/compare/v3.120.1...v3.120.2 #### Fixes [#9190](https://togithub.com/aquaproj/aqua-registry/issues/9190) [arrow2nd/nekome](https://togithub.com/arrow2nd/nekome): follow up changes in nekome v2.2.0 [#9154](https://togithub.com/aquaproj/aqua-registry/issues/9154) [suzuki-shunsuke/circleci-config-merge](https://togithub.com/suzuki-shunsuke/circleci-config-merge): configure slsa_provenance and cosign [#9155](https://togithub.com/aquaproj/aqua-registry/issues/9155) [suzuki-shunsuke/renovate-issue-action](https://togithub.com/suzuki-shunsuke/renovate-issue-action): configure slsa_provenance and cosign ### [`v3.120.1`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v3.120.1) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v3.120.0...v3.120.1) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av3.120.1) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av3.120.1) | https://github.com/aquaproj/aqua-registry/compare/v3.120.0...v3.120.1 #### Fixes [#9064](https://togithub.com/aquaproj/aqua-registry/issues/9064) [geofffranks/spruce](https://togithub.com/geofffranks/spruce): follow up changes of spruce [#9093](https://togithub.com/aquaproj/aqua-registry/issues/9093) [charmbracelet/gum](https://togithub.com/charmbracelet/gum): follow up changes in gum v0.9.0 [#9143](https://togithub.com/aquaproj/aqua-registry/issues/9143) [editorconfig-checker/editorconfig-checker](https://togithub.com/editorconfig-checker/editorconfig-checker): follow up changes in 2.7.0 [#9144](https://togithub.com/aquaproj/aqua-registry/issues/9144) [koki-develop/clive](https://togithub.com/koki-develop/clive): follow up changes in v0.10.2 [#9146](https://togithub.com/aquaproj/aqua-registry/issues/9146) [suzuki-shunsuke/ci-info](https://togithub.com/suzuki-shunsuke/ci-info): configure slsa_provenance and cosign [#9147](https://togithub.com/aquaproj/aqua-registry/issues/9147) [tfmigrator/cli](https://togithub.com/tfmigrator/cli): configure slsa_provenance and cosign ### [`v3.120.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v3.120.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v3.119.0...v3.120.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av3.120.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av3.120.0) | https://github.com/aquaproj/aqua-registry/compare/v3.119.0...v3.120.0 #### 🎉 New Packages [#9053](https://togithub.com/aquaproj/aqua-registry/issues/9053) [Kampfkarren/selene](https://togithub.com/Kampfkarren/selene): A blazing-fast modern Lua linter written in Rust [#9054](https://togithub.com/aquaproj/aqua-registry/issues/9054) [Kampfkarren/selene/light](https://togithub.com/Kampfkarren/selene): A blazing-fast modern Lua linter written in Rust #### Contributors Thank you for your contribution! [@hituzi-no-sippo](https://togithub.com/hituzi-no-sippo) [#9053](https://togithub.com/aquaproj/aqua-registry/issues/9053) [#9054](https://togithub.com/aquaproj/aqua-registry/issues/9054) ### [`v3.119.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v3.119.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v3.118.0...v3.119.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av3.119.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av3.119.0) | https://github.com/aquaproj/aqua-registry/compare/v3.118.0...v3.119.0 #### 🎉 New Packages [#9004](https://togithub.com/aquaproj/aqua-registry/issues/9004) [mgunyho/tere](https://togithub.com/mgunyho/tere): Terminal file explorer #### Fixes [#9029](https://togithub.com/aquaproj/aqua-registry/issues/9029) [geofffranks/spruce](https://togithub.com/geofffranks/spruce): Follow up changes in [spruce v1.30.0](https://togithub.com/geofffranks/spruce/releases/tag/v1.30.0) - Asset names were changed - Checksum files were released #### Contributors Thank you for your contribution! [@hituzi-no-sippo](https://togithub.com/hituzi-no-sippo) [#9004](https://togithub.com/aquaproj/aqua-registry/issues/9004)golang/go
### [`v1.19.5`](https://togithub.com/golang/go/compare/go1.19.4...go1.19.5) [Compare Source](https://togithub.com/golang/go/compare/go1.19.4...go1.19.5)Configuration
📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.