anchore/syft (anchore/syft)
### [`v0.102.0`](https://togithub.com/anchore/syft/releases/tag/v0.102.0)
[Compare Source](https://togithub.com/anchore/syft/compare/v0.101.1...v0.102.0)
##### Added Features
- Swap format uses of io.ReadSeeker for io.Reader \[[#2515](https://togithub.com/anchore/syft/pull/2515) [@wagoodman](https://togithub.com/wagoodman)]
- Cataloger interface should accept context.Context \[[#2521](https://togithub.com/anchore/syft/issues/2521) [#2528](https://togithub.com/anchore/syft/pull/2528) [@wagoodman](https://togithub.com/wagoodman)]
##### Bug Fixes
- Implement golang Purl subpath \[[#2547](https://togithub.com/anchore/syft/pull/2547) [@LaurentGoderre](https://togithub.com/LaurentGoderre)]
- CPE definition on `pkg.Package` is coupled to an external package as a type alias \[[#2529](https://togithub.com/anchore/syft/issues/2529) [#2534](https://togithub.com/anchore/syft/pull/2534) [@willmurphyscode](https://togithub.com/willmurphyscode)]
- Turn off SBOM cataloger by default \[[#1555](https://togithub.com/anchore/syft/issues/1555) [#2527](https://togithub.com/anchore/syft/pull/2527) [@wagoodman](https://togithub.com/wagoodman)]
- Syft missing linux kernel archives from SBOM results \[[#2524](https://togithub.com/anchore/syft/issues/2524) [#2526](https://togithub.com/anchore/syft/pull/2526) [@wagoodman](https://togithub.com/wagoodman)]
- LocationResolver can leak goroutines \[[#2487](https://togithub.com/anchore/syft/issues/2487) [#2518](https://togithub.com/anchore/syft/pull/2518) [@willmurphyscode](https://togithub.com/willmurphyscode)]
- Duplicates in Syft JSON "artifactRelationships" \[[#2251](https://togithub.com/anchore/syft/issues/2251)]
##### Breaking Changes
- Use the json schema as input for templating \[[#2542](https://togithub.com/anchore/syft/pull/2542) [@wagoodman](https://togithub.com/wagoodman)]
- Unexport types and functions cataloger packages \[[#2530](https://togithub.com/anchore/syft/pull/2530) [@wagoodman](https://togithub.com/wagoodman)]
- Internalize majority of cmd package \[[#2533](https://togithub.com/anchore/syft/pull/2533) [@wagoodman](https://togithub.com/wagoodman)]
- Allow for RPM modularity to be optional \[[#2540](https://togithub.com/anchore/syft/pull/2540) [@wagoodman](https://togithub.com/wagoodman)]
- CPE definition on `pkg.Package` is coupled to an external package as a type alias \[[#2529](https://togithub.com/anchore/syft/issues/2529) [#2534](https://togithub.com/anchore/syft/pull/2534) [@willmurphyscode](https://togithub.com/willmurphyscode)]
- Cataloger interface should accept context.Context \[[#2521](https://togithub.com/anchore/syft/issues/2521) [#2528](https://togithub.com/anchore/syft/pull/2528) [@wagoodman](https://togithub.com/wagoodman)]
- Remove deprecated API features \[[#2257](https://togithub.com/anchore/syft/issues/2257) [#2508](https://togithub.com/anchore/syft/pull/2508) [@wagoodman](https://togithub.com/wagoodman)]
- Remove deprecated configuration \[[#1864](https://togithub.com/anchore/syft/issues/1864) [#2508](https://togithub.com/anchore/syft/pull/2508) [@wagoodman](https://togithub.com/wagoodman)]
- Turn off SBOM cataloger by default \[[#1555](https://togithub.com/anchore/syft/issues/1555) [#2527](https://togithub.com/anchore/syft/pull/2527) [@wagoodman](https://togithub.com/wagoodman)]
##### Additional Changes
- Fix migration of integration test \[[#2546](https://togithub.com/anchore/syft/pull/2546) [@wagoodman](https://togithub.com/wagoodman)]
- minor cataloger and docs nits \[[#2519](https://togithub.com/anchore/syft/pull/2519) [@luhring](https://togithub.com/luhring)]
**[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.101.1...v0.102.0)**
aquaproj/aqua-registry (aquaproj/aqua-registry)
### [`v4.126.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.126.0)
[Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.125.1...v4.126.0)
[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.126.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.126.0) | https://github.com/aquaproj/aqua-registry/compare/v4.125.1...v4.126.0
#### 🎉 New Packages
[#13513](https://togithub.com/aquaproj/aqua-registry/issues/13513) [#19465](https://togithub.com/aquaproj/aqua-registry/issues/19465) [loft-sh/devpod](https://togithub.com/loft-sh/devpod): Codespaces but open-source, client-only and unopinionated: Works with any IDE and lets you use any cloud, kubernetes or just localhost docker [@CrystalMethod](https://togithub.com/CrystalMethod)
### [`v4.125.1`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.125.1)
[Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.125.0...v4.125.1)
[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.125.1) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.125.1) | https://github.com/aquaproj/aqua-registry/compare/v4.125.0...v4.125.1
#### Fixes
[#19450](https://togithub.com/aquaproj/aqua-registry/issues/19450) lxc/incus: Follow up changes of incus v0.5.1
[#19447](https://togithub.com/aquaproj/aqua-registry/issues/19447) kool-dev/kool: Follow up changes of kool 3.0.0
[#19442](https://togithub.com/aquaproj/aqua-registry/issues/19442) mattn/zig-update: Follow up changes of zig-update
[#19439](https://togithub.com/aquaproj/aqua-registry/issues/19439) cli/cli: Disable rosetta2 and use files for darwin/arm64
### [`v4.125.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.125.0)
[Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.124.0...v4.125.0)
[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.125.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.125.0) | https://github.com/aquaproj/aqua-registry/compare/v4.124.0...v4.125.0
#### 🎉 New Packages
[#19388](https://togithub.com/aquaproj/aqua-registry/issues/19388) [erebe/wstunnel](https://togithub.com/erebe/wstunnel): Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI [@CrystalMethod](https://togithub.com/CrystalMethod)
### [`v4.124.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.124.0)
[Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.123.0...v4.124.0)
[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.124.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.124.0) | https://github.com/aquaproj/aqua-registry/compare/v4.123.0...v4.124.0
#### 🎉 New Packages
[#19332](https://togithub.com/aquaproj/aqua-registry/issues/19332) [tofuutils/tenv](https://togithub.com/tofuutils/tenv): OpenTofu / Terraform version manager
#### Fixes
[#19330](https://togithub.com/aquaproj/aqua-registry/issues/19330) chmouel/snazy: Follow up changes of snazy
[#19379](https://togithub.com/aquaproj/aqua-registry/issues/19379) tektoncd/cli: Follow up changes of tektoncd/cli v0.34.0
- [https://github.com/tektoncd/cli/issues/2211](https://togithub.com/tektoncd/cli/issues/2211)
mvdan/gofumpt (mvdan/gofumpt)
### [`v0.6.0`](https://togithub.com/mvdan/gofumpt/blob/HEAD/CHANGELOG.md#v060---2024-01-28)
[Compare Source](https://togithub.com/mvdan/gofumpt/compare/v0.5.0...v0.6.0)
This release is based on Go 1.21's gofmt, and requires Go 1.20 or later.
The following changes are included:
- Support `go` version strings from newer go.mod files - \[[#280](https://togithub.com/mvdan/gofumpt/issues/280)]
- Consider simple error checks even if they use the `=` operator - \[[#271](https://togithub.com/mvdan/gofumpt/issues/271)]
- Ignore `//line` directives to avoid panics - \[[#288](https://togithub.com/mvdan/gofumpt/issues/288)]
Configuration
📅 Schedule: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
v0.101.1
->v0.102.0
v4.123.0
->v4.126.0
v0.5.0
->v0.6.0
Release Notes
anchore/syft (anchore/syft)
### [`v0.102.0`](https://togithub.com/anchore/syft/releases/tag/v0.102.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.101.1...v0.102.0) ##### Added Features - Swap format uses of io.ReadSeeker for io.Reader \[[#2515](https://togithub.com/anchore/syft/pull/2515) [@wagoodman](https://togithub.com/wagoodman)] - Cataloger interface should accept context.Context \[[#2521](https://togithub.com/anchore/syft/issues/2521) [#2528](https://togithub.com/anchore/syft/pull/2528) [@wagoodman](https://togithub.com/wagoodman)] ##### Bug Fixes - Implement golang Purl subpath \[[#2547](https://togithub.com/anchore/syft/pull/2547) [@LaurentGoderre](https://togithub.com/LaurentGoderre)] - CPE definition on `pkg.Package` is coupled to an external package as a type alias \[[#2529](https://togithub.com/anchore/syft/issues/2529) [#2534](https://togithub.com/anchore/syft/pull/2534) [@willmurphyscode](https://togithub.com/willmurphyscode)] - Turn off SBOM cataloger by default \[[#1555](https://togithub.com/anchore/syft/issues/1555) [#2527](https://togithub.com/anchore/syft/pull/2527) [@wagoodman](https://togithub.com/wagoodman)] - Syft missing linux kernel archives from SBOM results \[[#2524](https://togithub.com/anchore/syft/issues/2524) [#2526](https://togithub.com/anchore/syft/pull/2526) [@wagoodman](https://togithub.com/wagoodman)] - LocationResolver can leak goroutines \[[#2487](https://togithub.com/anchore/syft/issues/2487) [#2518](https://togithub.com/anchore/syft/pull/2518) [@willmurphyscode](https://togithub.com/willmurphyscode)] - Duplicates in Syft JSON "artifactRelationships" \[[#2251](https://togithub.com/anchore/syft/issues/2251)] ##### Breaking Changes - Use the json schema as input for templating \[[#2542](https://togithub.com/anchore/syft/pull/2542) [@wagoodman](https://togithub.com/wagoodman)] - Unexport types and functions cataloger packages \[[#2530](https://togithub.com/anchore/syft/pull/2530) [@wagoodman](https://togithub.com/wagoodman)] - Internalize majority of cmd package \[[#2533](https://togithub.com/anchore/syft/pull/2533) [@wagoodman](https://togithub.com/wagoodman)] - Allow for RPM modularity to be optional \[[#2540](https://togithub.com/anchore/syft/pull/2540) [@wagoodman](https://togithub.com/wagoodman)] - CPE definition on `pkg.Package` is coupled to an external package as a type alias \[[#2529](https://togithub.com/anchore/syft/issues/2529) [#2534](https://togithub.com/anchore/syft/pull/2534) [@willmurphyscode](https://togithub.com/willmurphyscode)] - Cataloger interface should accept context.Context \[[#2521](https://togithub.com/anchore/syft/issues/2521) [#2528](https://togithub.com/anchore/syft/pull/2528) [@wagoodman](https://togithub.com/wagoodman)] - Remove deprecated API features \[[#2257](https://togithub.com/anchore/syft/issues/2257) [#2508](https://togithub.com/anchore/syft/pull/2508) [@wagoodman](https://togithub.com/wagoodman)] - Remove deprecated configuration \[[#1864](https://togithub.com/anchore/syft/issues/1864) [#2508](https://togithub.com/anchore/syft/pull/2508) [@wagoodman](https://togithub.com/wagoodman)] - Turn off SBOM cataloger by default \[[#1555](https://togithub.com/anchore/syft/issues/1555) [#2527](https://togithub.com/anchore/syft/pull/2527) [@wagoodman](https://togithub.com/wagoodman)] ##### Additional Changes - Fix migration of integration test \[[#2546](https://togithub.com/anchore/syft/pull/2546) [@wagoodman](https://togithub.com/wagoodman)] - minor cataloger and docs nits \[[#2519](https://togithub.com/anchore/syft/pull/2519) [@luhring](https://togithub.com/luhring)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.101.1...v0.102.0)**aquaproj/aqua-registry (aquaproj/aqua-registry)
### [`v4.126.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.126.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.125.1...v4.126.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.126.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.126.0) | https://github.com/aquaproj/aqua-registry/compare/v4.125.1...v4.126.0 #### 🎉 New Packages [#13513](https://togithub.com/aquaproj/aqua-registry/issues/13513) [#19465](https://togithub.com/aquaproj/aqua-registry/issues/19465) [loft-sh/devpod](https://togithub.com/loft-sh/devpod): Codespaces but open-source, client-only and unopinionated: Works with any IDE and lets you use any cloud, kubernetes or just localhost docker [@CrystalMethod](https://togithub.com/CrystalMethod) ### [`v4.125.1`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.125.1) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.125.0...v4.125.1) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.125.1) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.125.1) | https://github.com/aquaproj/aqua-registry/compare/v4.125.0...v4.125.1 #### Fixes [#19450](https://togithub.com/aquaproj/aqua-registry/issues/19450) lxc/incus: Follow up changes of incus v0.5.1 [#19447](https://togithub.com/aquaproj/aqua-registry/issues/19447) kool-dev/kool: Follow up changes of kool 3.0.0 [#19442](https://togithub.com/aquaproj/aqua-registry/issues/19442) mattn/zig-update: Follow up changes of zig-update [#19439](https://togithub.com/aquaproj/aqua-registry/issues/19439) cli/cli: Disable rosetta2 and use files for darwin/arm64 ### [`v4.125.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.125.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.124.0...v4.125.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.125.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.125.0) | https://github.com/aquaproj/aqua-registry/compare/v4.124.0...v4.125.0 #### 🎉 New Packages [#19388](https://togithub.com/aquaproj/aqua-registry/issues/19388) [erebe/wstunnel](https://togithub.com/erebe/wstunnel): Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI [@CrystalMethod](https://togithub.com/CrystalMethod) ### [`v4.124.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.124.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.123.0...v4.124.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.124.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.124.0) | https://github.com/aquaproj/aqua-registry/compare/v4.123.0...v4.124.0 #### 🎉 New Packages [#19332](https://togithub.com/aquaproj/aqua-registry/issues/19332) [tofuutils/tenv](https://togithub.com/tofuutils/tenv): OpenTofu / Terraform version manager #### Fixes [#19330](https://togithub.com/aquaproj/aqua-registry/issues/19330) chmouel/snazy: Follow up changes of snazy [#19379](https://togithub.com/aquaproj/aqua-registry/issues/19379) tektoncd/cli: Follow up changes of tektoncd/cli v0.34.0 - [https://github.com/tektoncd/cli/issues/2211](https://togithub.com/tektoncd/cli/issues/2211)mvdan/gofumpt (mvdan/gofumpt)
### [`v0.6.0`](https://togithub.com/mvdan/gofumpt/blob/HEAD/CHANGELOG.md#v060---2024-01-28) [Compare Source](https://togithub.com/mvdan/gofumpt/compare/v0.5.0...v0.6.0) This release is based on Go 1.21's gofmt, and requires Go 1.20 or later. The following changes are included: - Support `go` version strings from newer go.mod files - \[[#280](https://togithub.com/mvdan/gofumpt/issues/280)] - Consider simple error checks even if they use the `=` operator - \[[#271](https://togithub.com/mvdan/gofumpt/issues/271)] - Ignore `//line` directives to avoid panics - \[[#288](https://togithub.com/mvdan/gofumpt/issues/288)]Configuration
📅 Schedule: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.