Skip to content

Commit

Permalink
chore(deps): update ⬆️ aqua-packages (#54)
Browse files Browse the repository at this point in the history
This PR contains the following updates:

| Package | Update | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|---|
| [Schniz/fnm](https://togithub.com/Schniz/fnm) | patch | `v1.35.0` ->
`v1.35.1` |
[![age](https://developer.mend.io/api/mc/badges/age/github-releases/Schniz%2ffnm/v1.35.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/Schniz%2ffnm/v1.35.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/Schniz%2ffnm/v1.35.0/v1.35.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/Schniz%2ffnm/v1.35.0/v1.35.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [anchore/syft](https://togithub.com/anchore/syft) | minor | `v0.86.1`
-> `v0.100.0` |
[![age](https://developer.mend.io/api/mc/badges/age/github-releases/anchore%2fsyft/v0.100.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/anchore%2fsyft/v0.100.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/anchore%2fsyft/v0.86.1/v0.100.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/anchore%2fsyft/v0.86.1/v0.100.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [aquaproj/aqua-registry](https://togithub.com/aquaproj/aqua-registry)
| minor | `v4.35.0` -> `v4.119.0` |
[![age](https://developer.mend.io/api/mc/badges/age/github-releases/aquaproj%2faqua-registry/v4.119.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/aquaproj%2faqua-registry/v4.119.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/aquaproj%2faqua-registry/v4.35.0/v4.119.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/aquaproj%2faqua-registry/v4.35.0/v4.119.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [direnv/direnv](https://togithub.com/direnv/direnv) | minor |
`v2.32.3` -> `v2.33.0` |
[![age](https://developer.mend.io/api/mc/badges/age/github-releases/direnv%2fdirenv/v2.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/direnv%2fdirenv/v2.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/direnv%2fdirenv/v2.32.3/v2.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/direnv%2fdirenv/v2.32.3/v2.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| golang.org/x/tools/gopls | minor | `v0.13.1` -> `v0.14.2` |
[![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftools%2fgopls/v0.14.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2ftools%2fgopls/v0.14.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2ftools%2fgopls/v0.13.1/v0.14.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftools%2fgopls/v0.13.1/v0.14.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [golang/go](https://togithub.com/golang/go) | minor | `1.20.6` ->
`1.21.6` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/golang%2fgo/1.21.6?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/golang%2fgo/1.21.6?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/golang%2fgo/1.20.6/1.21.6?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/golang%2fgo/1.20.6/1.21.6?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [golang/tools](https://togithub.com/golang/tools) | minor | `v0.12.0`
-> `v0.17.0` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/golang%2ftools/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/golang%2ftools/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/golang%2ftools/v0.12.0/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/golang%2ftools/v0.12.0/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [miniscruff/changie](https://togithub.com/miniscruff/changie) | minor
| `v1.12.0` -> `v1.18.0` |
[![age](https://developer.mend.io/api/mc/badges/age/github-releases/miniscruff%2fchangie/v1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/miniscruff%2fchangie/v1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/miniscruff%2fchangie/v1.12.0/v1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/miniscruff%2fchangie/v1.12.0/v1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>Schniz/fnm (Schniz/fnm)</summary>

### [`v1.35.1`](https://togithub.com/Schniz/fnm/releases/tag/v1.35.1)

[Compare
Source](https://togithub.com/Schniz/fnm/compare/v1.35.0...v1.35.1)

##### Patch Changes

- [#&#8203;1010](https://togithub.com/Schniz/fnm/pull/1010)
[`b185446`](https://togithub.com/Schniz/fnm/commit/b185446cfa08d4d6e2552db53937762a3c38d4db)
Thanks [@&#8203;quixoten](https://togithub.com/quixoten)! - fix: panic
on `fnm completions`

</details>

<details>
<summary>anchore/syft (anchore/syft)</summary>

###
[`v0.100.0`](https://togithub.com/anchore/syft/releases/tag/v0.100.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.99.0...v0.100.0)

##### Added Features

- Add more functionality to the ErLang parser
\[[#&#8203;2390](https://togithub.com/anchore/syft/pull/2390)
[@&#8203;LaurentGoderre](https://togithub.com/LaurentGoderre)]
- Added OpenSSL binary matcher
\[[#&#8203;2416](https://togithub.com/anchore/syft/pull/2416)
[@&#8203;LaurentGoderre](https://togithub.com/LaurentGoderre)]
- Add ability to extend the binaries cataloguers
\[[#&#8203;2469](https://togithub.com/anchore/syft/pull/2469)
[@&#8203;LaurentGoderre](https://togithub.com/LaurentGoderre)]

##### Bug Fixes

- Added missing Purl for busybox
\[[#&#8203;2457](https://togithub.com/anchore/syft/pull/2457)
[@&#8203;LaurentGoderre](https://togithub.com/LaurentGoderre)]
- Fix diff error obfuscating binary test failures message
\[[#&#8203;2468](https://togithub.com/anchore/syft/pull/2468)
[@&#8203;LaurentGoderre](https://togithub.com/LaurentGoderre)]
- v0.99.0: CycloneDX json output breaks osv-scanner
\[[#&#8203;2467](https://togithub.com/anchore/syft/issues/2467)]

##### Additional Changes

- update openssl binary to -x
\[[#&#8203;2456](https://togithub.com/anchore/syft/pull/2456)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.99.0...v0.100.0)**

### [`v0.99.0`](https://togithub.com/anchore/syft/releases/tag/v0.99.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.98.0...v0.99.0)

##### Added Features

- Look for a maven version in a pom from a parent dependency management…
\[[#&#8203;2423](https://togithub.com/anchore/syft/pull/2423)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Adding the ability to retrieve remote licenses for yarn.lock
\[[#&#8203;2338](https://togithub.com/anchore/syft/pull/2338)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Retrieve remote licenses using pom.properties when there is no pom.xml
\[[#&#8203;2315](https://togithub.com/anchore/syft/pull/2315)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Add the option to retrieve remote licenses for projects defined in a …
\[[#&#8203;2409](https://togithub.com/anchore/syft/pull/2409)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Parse Python licenses from LicenseFile entry in the Wheel Metadata
\[[#&#8203;2331](https://togithub.com/anchore/syft/pull/2331)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Add binary classifier for the ERLang interpreter
\[[#&#8203;2417](https://togithub.com/anchore/syft/pull/2417)
[@&#8203;LaurentGoderre](https://togithub.com/LaurentGoderre)]
- Parse Python licenses from LicenseExpression entry in the Wheel
Metadata \[[#&#8203;2431](https://togithub.com/anchore/syft/pull/2431)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Add binary classifier for Julia lang
\[[#&#8203;2427](https://togithub.com/anchore/syft/pull/2427)
[@&#8203;LaurentGoderre](https://togithub.com/LaurentGoderre)]
- Add binary detection for PHP composer
\[[#&#8203;2432](https://togithub.com/anchore/syft/pull/2432)
[@&#8203;LaurentGoderre](https://togithub.com/LaurentGoderre)]

##### Bug Fixes

- bump fangs for ptr summarize fix
\[[#&#8203;2387](https://togithub.com/anchore/syft/pull/2387)
[@&#8203;willmurphyscode](https://togithub.com/willmurphyscode)]
- improve identification for org.codehaus.groovy artifacts
\[[#&#8203;2404](https://togithub.com/anchore/syft/pull/2404)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for commons-jelly artifacts
\[[#&#8203;2399](https://togithub.com/anchore/syft/pull/2399)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for io.minio artifacts
\[[#&#8203;2398](https://togithub.com/anchore/syft/pull/2398)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for com.graphql-java artifacts
\[[#&#8203;2397](https://togithub.com/anchore/syft/pull/2397)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for org.apache.tapestry artifacts
\[[#&#8203;2384](https://togithub.com/anchore/syft/pull/2384)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for io.ratpack artifacts
\[[#&#8203;2379](https://togithub.com/anchore/syft/pull/2379)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for org.apache.cassandra artifacts
\[[#&#8203;2386](https://togithub.com/anchore/syft/pull/2386)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for org.neo4j.procedure artifacts
\[[#&#8203;2388](https://togithub.com/anchore/syft/pull/2388)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for org.elasticsearch artifacts
\[[#&#8203;2383](https://togithub.com/anchore/syft/pull/2383)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for org.apache.geode artifacts
\[[#&#8203;2382](https://togithub.com/anchore/syft/pull/2382)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for org.apache.tomcat artifacts
\[[#&#8203;2381](https://togithub.com/anchore/syft/pull/2381)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- improve identification for io.projectreactor.netty artifacts
\[[#&#8203;2378](https://togithub.com/anchore/syft/pull/2378)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- stop panic when parsing Haskell stack.yaml.lock with missing `hackage`
field \[[#&#8203;2421](https://togithub.com/anchore/syft/issues/2421)
[#&#8203;2419](https://togithub.com/anchore/syft/pull/2419)
[@&#8203;houdini91](https://togithub.com/houdini91)]
- fix detecting the name of the eclipse OSGi artifact
\[[#&#8203;2314](https://togithub.com/anchore/syft/issues/2314)
[#&#8203;2349](https://togithub.com/anchore/syft/pull/2349)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- File Sources incorrectly exclude files on Windows
\[[#&#8203;2410](https://togithub.com/anchore/syft/issues/2410)
[#&#8203;2411](https://togithub.com/anchore/syft/pull/2411)
[@&#8203;Racer159](https://togithub.com/Racer159)]
- Parser for dotnet_portable_executable using wrong attribute name
\[[#&#8203;2029](https://togithub.com/anchore/syft/issues/2029)
[#&#8203;2133](https://togithub.com/anchore/syft/pull/2133)
[@&#8203;kzantow](https://togithub.com/kzantow)]

##### Breaking Changes

- Generalize UI events for cataloging tasks
\[[#&#8203;2369](https://togithub.com/anchore/syft/pull/2369)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

##### Additional Changes

- refactor pkg.Collection to remove "catalog" references
\[[#&#8203;2439](https://togithub.com/anchore/syft/pull/2439)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Expose javascript fields in cataloger configuration
\[[#&#8203;2438](https://togithub.com/anchore/syft/pull/2438)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Use common archive catalog configuration
\[[#&#8203;2437](https://togithub.com/anchore/syft/pull/2437)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Fix file digest cataloger when passed explicit coordinates
\[[#&#8203;2436](https://togithub.com/anchore/syft/pull/2436)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.98.0...v0.99.0)**

### [`v0.98.0`](https://togithub.com/anchore/syft/releases/tag/v0.98.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.97.1...v0.98.0)

##### Added Features

- Add binary classifiers for MySQL and MariaDB
\[[#&#8203;2316](https://togithub.com/anchore/syft/pull/2316)
[@&#8203;duanemay](https://togithub.com/duanemay)]
- Enhance redis binary classifier to support additional versions
\[[#&#8203;2329](https://togithub.com/anchore/syft/pull/2329)
[@&#8203;whalelines](https://togithub.com/whalelines)]
- Expose compact JSON and XML format configuration
\[[#&#8203;561](https://togithub.com/anchore/syft/issues/561)
[#&#8203;2275](https://togithub.com/anchore/syft/pull/2275)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

##### Bug Fixes

- Fix file metadata cataloger when passed explicit coordinates
\[[#&#8203;2370](https://togithub.com/anchore/syft/pull/2370)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- hardcode xalan group ID
\[[#&#8203;2368](https://togithub.com/anchore/syft/pull/2368)
[@&#8203;willmurphyscode](https://togithub.com/willmurphyscode)]
- logging level for parsing potential PE files
\[[#&#8203;2367](https://togithub.com/anchore/syft/pull/2367)
[@&#8203;kzantow](https://togithub.com/kzantow)]
- Use read lock in `pkg.Collection`
\[[#&#8203;2341](https://togithub.com/anchore/syft/pull/2341)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- add manual namespace mapping for org.springframework jars
\[[#&#8203;2345](https://togithub.com/anchore/syft/pull/2345)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- add manual namespace mapping for org.springframework.security jars
\[[#&#8203;2343](https://togithub.com/anchore/syft/pull/2343)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- errors are printed into the stdout in syft 0.97.1
\[[#&#8203;2356](https://togithub.com/anchore/syft/issues/2356)
[#&#8203;2364](https://togithub.com/anchore/syft/pull/2364)
[@&#8203;kzantow](https://togithub.com/kzantow)]
- `syft some-jar.jar` fails to find packages if PWD is a symlink
\[[#&#8203;2355](https://togithub.com/anchore/syft/issues/2355)
[#&#8203;2359](https://togithub.com/anchore/syft/pull/2359)
[@&#8203;willmurphyscode](https://togithub.com/willmurphyscode)]
- Default for recently added base path, `""`, disables detection of
symlinked `*.jar` files
\[[#&#8203;1962](https://togithub.com/anchore/syft/issues/1962)
[#&#8203;2359](https://togithub.com/anchore/syft/pull/2359)
[@&#8203;willmurphyscode](https://togithub.com/willmurphyscode)]
- `syft attest` broken since 0.85.0
\[[#&#8203;2333](https://togithub.com/anchore/syft/issues/2333)
[#&#8203;2337](https://togithub.com/anchore/syft/pull/2337)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Incorrect Java PURL for org.bouncycastle jars
\[[#&#8203;2339](https://togithub.com/anchore/syft/issues/2339)
[#&#8203;2342](https://togithub.com/anchore/syft/pull/2342)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]

##### Breaking Changes

- Remove power-user command and related catalogers
\[[#&#8203;1419](https://togithub.com/anchore/syft/issues/1419)
[#&#8203;2306](https://togithub.com/anchore/syft/pull/2306)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

##### Additional Changes

- Normalize cataloger configuration patterns
\[[#&#8203;2365](https://togithub.com/anchore/syft/pull/2365)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Normalize enums to lowercase with hyphens
\[[#&#8203;2363](https://togithub.com/anchore/syft/pull/2363)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.97.1...v0.98.0)**

##### Special Thanks

Thanks [@&#8203;duanemay](https://togithub.com/duanemay) and
[@&#8203;whalelines](https://togithub.com/whalelines) for the enhanced
binary classifier support 👍

### [`v0.97.1`](https://togithub.com/anchore/syft/releases/tag/v0.97.1)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.97.0...v0.97.1)

##### Bug Fixes

- Syft does not use HTTP proxy when downloading the Docker image itself
\[[#&#8203;2203](https://togithub.com/anchore/syft/issues/2203)
[#&#8203;2336](https://togithub.com/anchore/syft/pull/2336)
[@&#8203;anchore-actions-token-generator](https://togithub.com/anchore-actions-token-generator)]

##### Additional Changes

- `syft version` report is broken with 0.97.0 release
\[[#&#8203;2334](https://togithub.com/anchore/syft/issues/2334)
[#&#8203;2335](https://togithub.com/anchore/syft/pull/2335)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.97.0...v0.97.1)**

### [`v0.97.0`](https://togithub.com/anchore/syft/releases/tag/v0.97.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.96.0...v0.97.0)

##### Added Features

- Add license for golang stdlib package
\[[#&#8203;2317](https://togithub.com/anchore/syft/pull/2317)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Fall back to searching maven central using groupIDFromJavaMetadata
\[[#&#8203;2295](https://togithub.com/anchore/syft/pull/2295)
[@&#8203;coheigea](https://togithub.com/coheigea)]

##### Bug Fixes

- Refine license search from groupIDFromJavaMetadata to account for
artfactId in the groupId
\[[#&#8203;2313](https://togithub.com/anchore/syft/pull/2313)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- capture content written to stdout outside of report
\[[#&#8203;2324](https://togithub.com/anchore/syft/pull/2324)
[@&#8203;kzantow](https://togithub.com/kzantow)]
- add manual groupid mappings for org.apache.velocity jars
\[[#&#8203;2327](https://togithub.com/anchore/syft/pull/2327)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- skip maven bundle plugin logic if vendor id and symbolic name match
\[[#&#8203;2326](https://togithub.com/anchore/syft/pull/2326)
[@&#8203;westonsteimel](https://togithub.com/westonsteimel)]
- cataloger `dpkg-db-cataloger` not working
\[[#&#8203;2323](https://togithub.com/anchore/syft/issues/2323)]

##### Breaking Changes

- Rename Location virtualPath to accessPath
\[[#&#8203;1835](https://togithub.com/anchore/syft/issues/1835)
[#&#8203;2288](https://togithub.com/anchore/syft/pull/2288)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

##### Additional Changes

- Export syft-json format package metadata type helper
\[[#&#8203;2328](https://togithub.com/anchore/syft/pull/2328)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Add dotnet-portable-executable-cataloger to README
\[[#&#8203;2322](https://togithub.com/anchore/syft/pull/2322)
[@&#8203;noqcks](https://togithub.com/noqcks)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.96.0...v0.97.0)**

### [`v0.96.0`](https://togithub.com/anchore/syft/releases/tag/v0.96.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.95.0...v0.96.0)

##### Added Features

- Check maven central as well for licenses in parents poms for nested
jars \[[#&#8203;2302](https://togithub.com/anchore/syft/pull/2302)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- store image annotations inside the SBOM
\[[#&#8203;2267](https://togithub.com/anchore/syft/issues/2267)
[#&#8203;2294](https://togithub.com/anchore/syft/pull/2294)
[@&#8203;noqcks](https://togithub.com/noqcks)]
- Support parsing license information in Maven projects via parent poms
\[[#&#8203;2103](https://togithub.com/anchore/syft/issues/2103)]

##### Bug Fixes

- SPDX file has duplicate sha256 tag in versionInfo
\[[#&#8203;2300](https://togithub.com/anchore/syft/pull/2300)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Report virtual path consistently between file.Resolvers
\[[#&#8203;1836](https://togithub.com/anchore/syft/issues/1836)
[#&#8203;2287](https://togithub.com/anchore/syft/pull/2287)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Unable to identify CycloneDX JSON documents without $schema property
\[[#&#8203;2299](https://togithub.com/anchore/syft/issues/2299)
[#&#8203;2303](https://togithub.com/anchore/syft/pull/2303)
[@&#8203;kzantow](https://togithub.com/kzantow)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.95.0...v0.96.0)**

### [`v0.95.0`](https://togithub.com/anchore/syft/releases/tag/v0.95.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.94.0...v0.95.0)

##### Added Features

- Use case-insensitive matching for Go license files
\[[#&#8203;2286](https://togithub.com/anchore/syft/pull/2286)
[@&#8203;miquella](https://togithub.com/miquella)]
- Add conaninfo.txt parser to detect conan packages in docker images
\[[#&#8203;2234](https://togithub.com/anchore/syft/pull/2234)
[@&#8203;Pro](https://togithub.com/Pro)]
- Perform case insensitive matching on Java License files
\[[#&#8203;2235](https://togithub.com/anchore/syft/pull/2235)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Read a license from a parent pom stored in Maven Central
\[[#&#8203;2228](https://togithub.com/anchore/syft/pull/2228)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Add PURLs when scanning Gradle lock files
\[[#&#8203;2278](https://togithub.com/anchore/syft/pull/2278)
[@&#8203;robbiev](https://togithub.com/robbiev)]

##### Bug Fixes

- Fix CPE index workflow
\[[#&#8203;2252](https://togithub.com/anchore/syft/pull/2252)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Fix cpe generation task
\[[#&#8203;2270](https://togithub.com/anchore/syft/pull/2270)
[@&#8203;willmurphyscode](https://togithub.com/willmurphyscode)]
- Introduce cataloger naming conventions
\[[#&#8203;1578](https://togithub.com/anchore/syft/issues/1578)
[#&#8203;2277](https://togithub.com/anchore/syft/pull/2277)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- .NET / nuget - invalid SBOM generated after parsing
\[[#&#8203;2255](https://togithub.com/anchore/syft/issues/2255)
[#&#8203;2273](https://togithub.com/anchore/syft/pull/2273)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- Wrong parsing after v0.85.0 syft for some components
\[[#&#8203;2241](https://togithub.com/anchore/syft/issues/2241)
[#&#8203;2273](https://togithub.com/anchore/syft/pull/2273)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- SPDX-2.3 is misidentified as SPDX-2.2
\[[#&#8203;2112](https://togithub.com/anchore/syft/issues/2112)
[#&#8203;2186](https://togithub.com/anchore/syft/pull/2186)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Jar parser chokes on empty lines
\[[#&#8203;2179](https://togithub.com/anchore/syft/issues/2179)
[#&#8203;2254](https://togithub.com/anchore/syft/pull/2254)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- Add a new Java configuration option to recursively search parent poms…
\[[#&#8203;2274](https://togithub.com/anchore/syft/pull/2274)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Fix directory resolver to always return virtual path
\[[#&#8203;2259](https://togithub.com/anchore/syft/pull/2259)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Syft can now handle the case of parsing a jar with multiple poms
\[[#&#8203;2231](https://togithub.com/anchore/syft/pull/2231)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Add ruby.NewGemSpecCataloger to DirectoryCatalogers
\[[#&#8203;1971](https://togithub.com/anchore/syft/pull/1971)
[@&#8203;evanchaoli](https://togithub.com/evanchaoli)]

##### Breaking Changes

- Introduce cataloger naming conventions
\[[#&#8203;1578](https://togithub.com/anchore/syft/issues/1578)
[#&#8203;2277](https://togithub.com/anchore/syft/pull/2277)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Remove MetadataType from the core package struct
\[[#&#8203;1735](https://togithub.com/anchore/syft/issues/1735)
[#&#8203;1983](https://togithub.com/anchore/syft/pull/1983)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Add convention for JSON metadata type names and port existing values
to the new convention
\[[#&#8203;1844](https://togithub.com/anchore/syft/issues/1844)
[#&#8203;1983](https://togithub.com/anchore/syft/pull/1983)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Remove deprecated syft.Format functions
\[[#&#8203;1344](https://togithub.com/anchore/syft/issues/1344)
[#&#8203;2186](https://togithub.com/anchore/syft/pull/2186)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

##### Additional Changes

- Upgrade tool management
\[[#&#8203;2188](https://togithub.com/anchore/syft/pull/2188)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Fix homebrew post-release workflow
\[[#&#8203;2242](https://togithub.com/anchore/syft/pull/2242)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.94.0...v0.95.0)**

### [`v0.94.0`](https://togithub.com/anchore/syft/releases/tag/v0.94.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.93.0...v0.94.0)

##### Added Features

- Add additional license filenames
\[[#&#8203;2227](https://togithub.com/anchore/syft/pull/2227)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Parse donet dependency trees
\[[#&#8203;2143](https://togithub.com/anchore/syft/pull/2143)
[@&#8203;noqcks](https://togithub.com/noqcks)]
- Find license by embedded license text
\[[#&#8203;2147](https://togithub.com/anchore/syft/issues/2147)
[#&#8203;2213](https://togithub.com/anchore/syft/pull/2213)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Add support for dpkg dependency relationships
\[[#&#8203;2040](https://togithub.com/anchore/syft/issues/2040)
[#&#8203;2212](https://togithub.com/anchore/syft/pull/2212)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

##### Bug Fixes

- Report errors to stderr not stdout
\[[#&#8203;2232](https://togithub.com/anchore/syft/pull/2232)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Python egg packages are not parsed for SBOM
\[[#&#8203;1761](https://togithub.com/anchore/syft/issues/1761)
[#&#8203;2239](https://togithub.com/anchore/syft/pull/2239)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- Java archive is listed twice
\[[#&#8203;2130](https://togithub.com/anchore/syft/issues/2130)
[#&#8203;2220](https://togithub.com/anchore/syft/pull/2220)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Java archives not from Maven
\[[#&#8203;2217](https://togithub.com/anchore/syft/issues/2217)
[#&#8203;2220](https://togithub.com/anchore/syft/pull/2220)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Remove internal.StringSet
\[[#&#8203;2209](https://togithub.com/anchore/syft/issues/2209)
[#&#8203;2219](https://togithub.com/anchore/syft/pull/2219)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Invalid interface conversion in Swift cataloger
\[[#&#8203;2225](https://togithub.com/anchore/syft/issues/2225)
[#&#8203;2226](https://togithub.com/anchore/syft/pull/2226)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.93.0...v0.94.0)**

### [`v0.93.0`](https://togithub.com/anchore/syft/releases/tag/v0.93.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.92.0...v0.93.0)

##### Added Features

- Parse license from the pom.xml if not contained in the manifest
\[[#&#8203;2115](https://togithub.com/anchore/syft/pull/2115)
[@&#8203;coheigea](https://togithub.com/coheigea)]
- Add Golang STD library package given a Golang binary has been
discovered compiled with that go binary
\[[#&#8203;1853](https://togithub.com/anchore/syft/issues/1853)
[#&#8203;2195](https://togithub.com/anchore/syft/pull/2195)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- Improve --output CLI help and deprecate --file
\[[#&#8203;2165](https://togithub.com/anchore/syft/issues/2165)
[#&#8203;2187](https://togithub.com/anchore/syft/pull/2187)
[@&#8203;sharief007](https://togithub.com/sharief007)]

##### Bug Fixes

- Converting a SBOM looses the algorithm type for added checksums
\[[#&#8203;2183](https://togithub.com/anchore/syft/issues/2183)
[#&#8203;2207](https://togithub.com/anchore/syft/pull/2207)
[@&#8203;sharief007](https://togithub.com/sharief007)]

##### Additional Changes

- Refine the docs for building a cataloger
\[[#&#8203;2175](https://togithub.com/anchore/syft/pull/2175)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- update license list to 3.22
\[[#&#8203;2201](https://togithub.com/anchore/syft/pull/2201)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- Add exact syntax of the conversion formats
\[[#&#8203;2196](https://togithub.com/anchore/syft/pull/2196)
[@&#8203;vargenau](https://togithub.com/vargenau)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.92.0...v0.93.0)**

### [`v0.92.0`](https://togithub.com/anchore/syft/releases/tag/v0.92.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.91.0...v0.92.0)

##### Added Features

- Support for multiple image refs of same sha in OCI layout
\[[#&#8203;1544](https://togithub.com/anchore/syft/issues/1544)]

##### Bug Fixes

- Generated purls are different between runs of syft against the same
image and artifact
\[[#&#8203;2169](https://togithub.com/anchore/syft/issues/2169)
[#&#8203;2170](https://togithub.com/anchore/syft/pull/2170)
[@&#8203;willmurphyscode](https://togithub.com/willmurphyscode)]

##### Additional Changes

- bump stereoscope to fix data race in UI code
\[[#&#8203;2173](https://togithub.com/anchore/syft/pull/2173)
[@&#8203;willmurphyscode](https://togithub.com/willmurphyscode)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.91.0...v0.92.0)**

### [`v0.91.0`](https://togithub.com/anchore/syft/releases/tag/v0.91.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.90.0...v0.91.0)

##### Added Features

- Add support for CycloneDX 1.5
\[[#&#8203;2120](https://togithub.com/anchore/syft/issues/2120)
[#&#8203;2123](https://togithub.com/anchore/syft/pull/2123)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- Add support for containerd as an image source
\[[#&#8203;201](https://togithub.com/anchore/syft/issues/201)
[#&#8203;1793](https://togithub.com/anchore/syft/pull/1793)
[@&#8203;shanedell](https://togithub.com/shanedell)]
- Support cataloging github workflow & github action usages
\[[#&#8203;1896](https://togithub.com/anchore/syft/issues/1896)
[#&#8203;2140](https://togithub.com/anchore/syft/pull/2140)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]

##### Bug Fixes

- Allow CycloneDX json input with no components
\[[#&#8203;2127](https://togithub.com/anchore/syft/pull/2127)
[@&#8203;ahoz](https://togithub.com/ahoz)]
- Prevent errors from clobbering terminal
\[[#&#8203;2161](https://togithub.com/anchore/syft/pull/2161)
[@&#8203;kzantow](https://togithub.com/kzantow)]
- Using syft as a go library to decode a syft json has incomplete data
\[[#&#8203;2069](https://togithub.com/anchore/syft/issues/2069)
[#&#8203;2083](https://togithub.com/anchore/syft/pull/2083)
[@&#8203;kzantow](https://togithub.com/kzantow)]
- SBOMs are not the same on multiple runs of syft
\[[#&#8203;1944](https://togithub.com/anchore/syft/issues/1944)]

##### Additional Changes

- Switch to stdlib's slices pkg
\[[#&#8203;2148](https://togithub.com/anchore/syft/pull/2148)
[@&#8203;hainenber](https://togithub.com/hainenber)]
- Remove unneeded arch switch in unit test
\[[#&#8203;2156](https://togithub.com/anchore/syft/pull/2156)
[@&#8203;willmurphyscode](https://togithub.com/willmurphyscode)]
- Update chronicle to v0.8.0
\[[#&#8203;2154](https://togithub.com/anchore/syft/pull/2154)
[@&#8203;wagoodman](https://togithub.com/wagoodman)]
- Update to latest stereoscope
\[[#&#8203;2151](https://togithub.com/anchore/syft/pull/2151)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- Pin workflow checkout for cpe update-cpe-dictionary-index
\[[#&#8203;2141](https://togithub.com/anchore/syft/pull/2141)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- Add dependency information to conan lockfile parser
\[[#&#8203;2131](https://togithub.com/anchore/syft/pull/2131)
[@&#8203;Pro](https://togithub.com/Pro)]
- Pin and update all workflow dependencies; add permission scopes
\[[#&#8203;2138](https://togithub.com/anchore/syft/pull/2138)
[@&#8203;spiffcs](https://togithub.com/spiffcs)]
- Enforce race detector
\[[#&#8203;2122](https://togithub.com/anchore/syft/pull/2122)
[@&#8203;willmurphyscode](https://togithub.com/willmurphyscode)]

**[(Full
Changelog)](https://togithub.com/anchore/syft/compare/v0.90.0...v0.91.0)**

### [`v0.90.0`](https://togithub.com/anchore/syft/releases/tag/v0.90.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.89.0...v0.90.0)

###

#### [v0.90.0](https://togithub.com/anchore/syft/tree/v0.90.0)
(2023-09-11)

[Full
Changelog](https://togithub.com/anchore/syft/compare/v0.89.0...v0.90.0)

##### Added Features

- Expose cobra command in cli package \[[PR
#&#8203;2097](https://togithub.com/anchore/syft/pull/2097)]
\[[wagoodman](https://togithub.com/wagoodman)]
- Explicitly test PURL generation against key packages \[[Issue
#&#8203;2071](https://togithub.com/anchore/syft/issues/2071)]
- Add User-Agent with Syft version during update check \[[Issue
#&#8203;2072](https://togithub.com/anchore/syft/issues/2072)] \[[PR
#&#8203;2100](https://togithub.com/anchore/syft/pull/2100)]
\[[hainenber](https://togithub.com/hainenber)]

##### Bug Fixes

- fix: correct group IDs for commons-codec, okhttp, okio, and add
integration tests for Java PURL generation \[[PR
#&#8203;2075](https://togithub.com/anchore/syft/pull/2075)]
\[[willmurphyscode](https://togithub.com/willmurphyscode)]
- Cyclonedx external reference URLs are not validated when encoding
\[[Issue #&#8203;2079](https://togithub.com/anchore/syft/issues/2079)]
\[[PR #&#8203;2091](https://togithub.com/anchore/syft/pull/2091)]
\[[hainenber](https://togithub.com/hainenber)]

##### Additional Changes

- Bump the golang.org/x/exp dependency and fix a build breakage. \[[PR
#&#8203;2088](https://togithub.com/anchore/syft/pull/2088)]
\[[dlorenc](https://togithub.com/dlorenc)]
- fix: update codeql-analysis for go 1.21 \[[PR
#&#8203;2108](https://togithub.com/anchore/syft/pull/2108)]
\[[spiffcs](https://togithub.com/spiffcs)]

### [`v0.89.0`](https://togithub.com/anchore/syft/releases/tag/v0.89.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.88.0...v0.89.0)

###

#### [v0.89.0](https://togithub.com/anchore/syft/tree/v0.89.0)
(2023-08-31)

[Full
Changelog](https://togithub.com/anchore/syft/compare/v0.88.0...v0.89.0)

##### Added Features

- Add registry certificate verification support \[[PR
#&#8203;1734](https://togithub.com/anchore/syft/pull/1734)]
\[[5p2O5pe25ouT](https://togithub.com/5p2O5pe25ouT)]
- Add SYFT_CONFIG environment variable for configuration file path
\[[Issue #&#8203;1986](https://togithub.com/anchore/syft/issues/1986)]
\[[PR #&#8203;2001](https://togithub.com/anchore/syft/pull/2001)]
\[[kzantow](https://togithub.com/kzantow)]

##### Bug Fixes

- Fix quiet flag \[[PR
#&#8203;2081](https://togithub.com/anchore/syft/pull/2081)]
\[[wagoodman](https://togithub.com/wagoodman)]
- Command line flags not overriding configuration file values \[[Issue
#&#8203;1143](https://togithub.com/anchore/syft/issues/1143)] \[[PR
#&#8203;2001](https://togithub.com/anchore/syft/pull/2001)]
\[[kzantow](https://togithub.com/kzantow)]
- Django package CPE is not correct \[[Issue
#&#8203;1298](https://togithub.com/anchore/syft/issues/1298)] \[[PR
#&#8203;2068](https://togithub.com/anchore/syft/pull/2068)]
\[[witchcraze](https://togithub.com/witchcraze)]
- Config parsing includes `config.yaml` in working dir \[[Issue
#&#8203;1634](https://togithub.com/anchore/syft/issues/1634)] \[[PR
#&#8203;2001](https://togithub.com/anchore/syft/pull/2001)]
\[[kzantow](https://togithub.com/kzantow)]
- Fix a possible panic on universal go binaries \[[Issue
#&#8203;2073](https://togithub.com/anchore/syft/issues/2073)] \[[PR
#&#8203;2078](https://togithub.com/anchore/syft/pull/2078)]
\[[willmurphyscode](https://togithub.com/willmurphyscode)]
- Disabling catalogers is not working in power user command \[[Issue
#&#8203;2074](https://togithub.com/anchore/syft/issues/2074)] \[[PR
#&#8203;2001](https://togithub.com/anchore/syft/pull/2001)]
\[[kzantow](https://togithub.com/kzantow)]
- Virtual path changes to java cataloger causing creation of extra
incorrect packages when jars are renamed \[[Issue
#&#8203;2077](https://togithub.com/anchore/syft/issues/2077)] \[[PR
#&#8203;2080](https://togithub.com/anchore/syft/pull/2080)]
\[[willmurphyscode](https://togithub.com/willmurphyscode)]

### [`v0.88.0`](https://togithub.com/anchore/syft/releases/tag/v0.88.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.87.1...v0.88.0)

###

#### [v0.88.0](https://togithub.com/anchore/syft/tree/v0.88.0)
(2023-08-25)

[Full
Changelog](https://togithub.com/anchore/syft/compare/v0.87.1...v0.88.0)

##### Added Features

- Detect golang boring crypto and fipsonly modules \[[PR
#&#8203;2021](https://togithub.com/anchore/syft/pull/2021)]
\[[bathina2](https://togithub.com/bathina2)]
- feat: 1944 - update purl generation to use a consistent groupID \[[PR
#&#8203;2033](https://togithub.com/anchore/syft/pull/2033)]
\[[spiffcs](https://togithub.com/spiffcs)]
- Add support to detect bash binaries \[[Issue
#&#8203;1963](https://togithub.com/anchore/syft/issues/1963)] \[[PR
#&#8203;2055](https://togithub.com/anchore/syft/pull/2055)]
\[[witchcraze](https://togithub.com/witchcraze)]

##### Bug Fixes

- fix: properly parse conan ref and include user and channel \[[PR
#&#8203;2034](https://togithub.com/anchore/syft/pull/2034)]
\[[Pro](https://togithub.com/Pro)]
- New version notice only showing the version and no text \[[PR
#&#8203;2042](https://togithub.com/anchore/syft/pull/2042)]
\[[wagoodman](https://togithub.com/wagoodman)]
- Fix: don't validate pom declared group \[[PR
#&#8203;2054](https://togithub.com/anchore/syft/pull/2054)]
\[[willmurphyscode](https://togithub.com/willmurphyscode)]
- Errors when handling symlinks on Windows with syft v0.85.0 \[[Issue
#&#8203;1950](https://togithub.com/anchore/syft/issues/1950)] \[[PR
#&#8203;2051](https://togithub.com/anchore/syft/pull/2051)]
\[[selzoc](https://togithub.com/selzoc)]
- Syft seems unable to parse non UTF-8 pom.xml files \[[Issue
#&#8203;2044](https://togithub.com/anchore/syft/issues/2044)] \[[PR
#&#8203;2047](https://togithub.com/anchore/syft/pull/2047)]
\[[wagoodman](https://togithub.com/wagoodman)]
- Error parsing pom.xml with v0.87.1 \[[Issue
#&#8203;2060](https://togithub.com/anchore/syft/issues/2060)] \[[PR
#&#8203;2064](https://togithub.com/anchore/syft/pull/2064)]
\[[willmurphyscode](https://togithub.com/willmurphyscode)]
- Invalid CycloneDX: duplicates in relationships section \[[Issue
#&#8203;2062](https://togithub.com/anchore/syft/issues/2062)] \[[PR
#&#8203;2063](https://togithub.com/anchore/syft/pull/2063)]
\[[kzantow](https://togithub.com/kzantow)]

### [`v0.87.1`](https://togithub.com/anchore/syft/releases/tag/v0.87.1)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.87.0...v0.87.1)

###

#### [v0.87.1](https://togithub.com/anchore/syft/tree/v0.87.1)
(2023-08-17)

[Full
Changelog](https://togithub.com/anchore/syft/compare/v0.87.0...v0.87.1)

##### Bug Fixes

- Use Java package names to determine known groupIDs \[[PR
#&#8203;2032](https://togithub.com/anchore/syft/pull/2032)]
\[[kzantow](https://togithub.com/kzantow)]
- Relationships section of CycloneDX is not outputting even when the
data is present \[[Issue
#&#8203;1972](https://togithub.com/anchore/syft/issues/1972)] \[[PR
#&#8203;1974](https://togithub.com/anchore/syft/pull/1974)]
\[[markgalpin](https://togithub.com/markgalpin)]
\[[kzantow](https://togithub.com/kzantow)]
- SPDX Tag-Value conversion not handling files directly set on packages
\[[Issue #&#8203;2013](https://togithub.com/anchore/syft/issues/2013)]
\[[PR #&#8203;2014](https://togithub.com/anchore/syft/pull/2014)]
\[[kzantow](https://togithub.com/kzantow)]
- Intermittent binary listings, different results every time \[[Issue
#&#8203;2035](https://togithub.com/anchore/syft/issues/2035)] \[[PR
#&#8203;2036](https://togithub.com/anchore/syft/pull/2036)]
\[[kzantow](https://togithub.com/kzantow)]

### [`v0.87.0`](https://togithub.com/anchore/syft/releases/tag/v0.87.0)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.86.1...v0.87.0)

###

#### [v0.87.0](https://togithub.com/anchore/syft/tree/v0.87.0)
(2023-08-14)

[Full
Changelog](https://togithub.com/anchore/syft/compare/v0.86.1...v0.87.0)

##### Added Features

- feat: use originator logic to fill supplier \[[PR
#&#8203;1980](https://togithub.com/anchore/syft/pull/1980)]
\[[spiffcs](https://togithub.com/spiffcs)]
- Expand deb cataloger to include opkg \[[PR
#&#8203;1985](https://togithub.com/anchore/syft/pull/1985)]
\[[johnDeSilencio](https://togithub.com/johnDeSilencio)]
- Package duplicated by different cataloger \[[Issue
#&#8203;931](https://togithub.com/anchore/syft/issues/931)] \[[PR
#&#8203;1948](https://togithub.com/anchore/syft/pull/1948)]
\[[spiffcs](https://togithub.com/spiffcs)]
- Add binary cataloger for Nginx built from source \[[Issue
#&#8203;1945](https://togithub.com/anchore/syft/issues/1945)] \[[PR
#&#8203;1988](https://togithub.com/anchore/syft/pull/1988)]
\[[SemProvoost](https://togithub.com/SemProvoost)]

##### Bug Fixes

- chore: update bubbly to fix hanging \[[PR
#&#8203;1990](https://togithub.com/anchore/syft/pull/1990)]
\[[kzantow](https://togithub.com/kzantow)]
- fix: update glob to use newer usr/lib/sysimage path \[[PR
#&#8203;1997](https://togithub.com/anchore/syft/pull/1997)]
\[[spiffcs](https://togithub.com/spiffcs)]
- fix: SPDX license values and download location \[[PR
#&#8203;2007](https://togithub.com/anchore/syft/pull/2007)]
\[[kzantow](https://togithub.com/kzantow)]
- Different CPEs between java-cataloger and
java-gradle-lockfile-cataloger \[[Issue
#&#8203;1957](https://togithub.com/anchore/syft/issues/1957)] \[[PR
#&#8203;1995](https://togithub.com/anchore/syft/pull/1995)]
\[[kzantow](https://togithub.com/kzantow)]

</details>

<details>
<summary>aquaproj/aqua-registry (aquaproj/aqua-registry)</summary>

###
[`v4.119.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.119.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.118.0...v4.119.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.119.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.119.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.118.0...v4.119.0

#### 🎉 New Packages


[#&#8203;19027](https://togithub.com/aquaproj/aqua-registry/issues/19027)
[microsoft/kiota](https://togithub.com/microsoft/kiota): OpenAPI based
HTTP Client code generator
[@&#8203;frozenbonito](https://togithub.com/frozenbonito)

#### Fixes


[#&#8203;19033](https://togithub.com/aquaproj/aqua-registry/issues/19033)
sxyazi/yazi: Regenerate config

###
[`v4.118.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.118.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.117.0...v4.118.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.118.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.118.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.117.0...v4.118.0

#### 🎉 New Packages


[#&#8203;19011](https://togithub.com/aquaproj/aqua-registry/issues/19011)
[abhinav/doc2go](https://togithub.com/abhinav/doc2go): Your Go project's
documentation, to-go

[#&#8203;19003](https://togithub.com/aquaproj/aqua-registry/issues/19003)
[docker/buildx](https://togithub.com/docker/buildx): Docker CLI plugin
for extended build capabilities with BuildKit
[@&#8203;tmeijn](https://togithub.com/tmeijn)

> \[!WARNING]
> buildx is a Docker CLI plugin so you need to install plugins on
directories such as `$HOME/.docker/cli-plugins`,
> but aqua can't install tools on those directories.
> So you need to create a script on those directories.
>
> e.g. `$HOME/.docker/cli-plugins/docker-buildx`
>
> ```sh
> #!/bin/sh
> exec aqua exec -- docker-cli-plugin-docker-buildx "$@&#8203;"
> ```

#### Fixes


[#&#8203;19003](https://togithub.com/aquaproj/aqua-registry/issues/19003)
docker/compose: Fix old versions and Windows
[@&#8203;tmeijn](https://togithub.com/tmeijn)

###
[`v4.117.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.117.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.116.0...v4.117.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.117.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.117.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.116.0...v4.117.0

#### 🎉 New Packages


[#&#8203;18994](https://togithub.com/aquaproj/aqua-registry/issues/18994)
[brumhard/krewfile](https://togithub.com/brumhard/krewfile): Declarative
krew plugin management [@&#8203;tmeijn](https://togithub.com/tmeijn)

[#&#8203;18993](https://togithub.com/aquaproj/aqua-registry/issues/18993)
[doy/rbw](https://togithub.com/doy/rbw): unofficial bitwarden cli
[@&#8203;tmeijn](https://togithub.com/tmeijn)

###
[`v4.116.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.116.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.115.0...v4.116.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.116.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.116.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.115.0...v4.116.0

#### 🎉 New Packages


[#&#8203;18973](https://togithub.com/aquaproj/aqua-registry/issues/18973)
[#&#8203;18977](https://togithub.com/aquaproj/aqua-registry/issues/18977)
[turbot/flowpipe](https://togithub.com/turbot/flowpipe): Flowpipe is a
cloud scripting engine. Automation and workflow to connect your clouds
to the people, systems and data that matters

#### Fixes


[#&#8203;18898](https://togithub.com/aquaproj/aqua-registry/issues/18898)
ankitpokhrel/jira-cli: Follow up changes of jira-cli v1.5.0

###
[`v4.115.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.115.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.114.0...v4.115.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.115.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.115.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.114.0...v4.115.0

#### 🎉 New Packages


[#&#8203;18818](https://togithub.com/aquaproj/aqua-registry/issues/18818)
[rustic-rs/rustic](https://togithub.com/rustic-rs/rustic): rustic -
fast, encrypted, and deduplicated backups powered by Rust
[@&#8203;CrystalMethod](https://togithub.com/CrystalMethod)

#### Fixes


[#&#8203;18864](https://togithub.com/aquaproj/aqua-registry/issues/18864)
cloudposse/atmos: Support old versions

[#&#8203;18838](https://togithub.com/aquaproj/aqua-registry/issues/18838)
bensadeh/tailspin: Follow up changes of tailspin 2.3.0

###
[`v4.114.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.114.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.113.0...v4.114.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.114.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.114.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.113.0...v4.114.0

#### 🎉 New Packages


[#&#8203;18778](https://togithub.com/aquaproj/aqua-registry/issues/18778)
[sigoden/aichat](https://togithub.com/sigoden/aichat): Use GPT-4(V),
Gemini, LocalAI, Ollama and other LLMs in the terminal
[@&#8203;CrystalMethod](https://togithub.com/CrystalMethod)

#### Fixes


[#&#8203;18781](https://togithub.com/aquaproj/aqua-registry/issues/18781)
[#&#8203;18782](https://togithub.com/aquaproj/aqua-registry/issues/18782)
oxc-project/oxc/oxlint: Follow up changes for oxc-project/oxc/oxlint
v0.1.1 [@&#8203;CrystalMethod](https://togithub.com/CrystalMethod)

[#&#8203;18793](https://togithub.com/aquaproj/aqua-registry/issues/18793)
yitsushi/totp-cli: Follow up changes of totp-cli v1.8.7

###
[`v4.113.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.113.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.112.1...v4.113.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.113.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.113.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.112.1...v4.113.0

#### 🎉 New Packages


[#&#8203;18741](https://togithub.com/aquaproj/aqua-registry/issues/18741)
[tofuutils/tofuenv](https://togithub.com/tofuutils/tofuenv): OpenTofu
version manager

#### Fixes


[#&#8203;18323](https://togithub.com/aquaproj/aqua-registry/issues/18323)
Transfer suzuki-shunsuke/lintnet to lintnet/lintnet

###
[`v4.112.1`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.112.1)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.112.0...v4.112.1)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.112.1)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.112.1)
| https://github.com/aquaproj/aqua-registry/compare/v4.112.0...v4.112.1

#### Fixes


[#&#8203;18724](https://togithub.com/aquaproj/aqua-registry/issues/18724)
nametake/golangci-lint-langserver: Follow up changes of
golangci-lint-langserver v0.0.9

[#&#8203;18723](https://togithub.com/aquaproj/aqua-registry/issues/18723)
becheran/roumon: Follow up changes of roumon v1.2.0

[#&#8203;18703](https://togithub.com/aquaproj/aqua-registry/issues/18703)
arduino/arduino-cli: Follow up changes of arduino-cli

[#&#8203;18654](https://togithub.com/aquaproj/aqua-registry/issues/18654)
jdx/rtx: Transfer the repository to jdx/mise

###
[`v4.112.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.112.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.111.0...v4.112.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.112.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.112.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.111.0...v4.112.0

#### 🎉 New Packages


[#&#8203;18594](https://togithub.com/aquaproj/aqua-registry/issues/18594)
[sqls-server/sqls](https://togithub.com/sqls-server/sqls): SQL language
server written in Go [@&#8203;ponkio-o](https://togithub.com/ponkio-o)

###
[`v4.111.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.111.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.110.0...v4.111.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.111.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.111.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.110.0...v4.111.0

#### 🎉 New Packages


[#&#8203;18518](https://togithub.com/aquaproj/aqua-registry/issues/18518)
[rajatjindal/krew-release-bot](https://togithub.com/rajatjindal/krew-release-bot):
bot to bump version of plugin in krew-index on new releases
[@&#8203;ponkio-o](https://togithub.com/ponkio-o)

[#&#8203;18470](https://togithub.com/aquaproj/aqua-registry/issues/18470)
[fujiwara/cfft](https://togithub.com/fujiwara/cfft): cfft is a testing
tool for CloudFront Functions

#### Fixes


[#&#8203;18523](https://togithub.com/aquaproj/aqua-registry/issues/18523)
fix(atuinsh/atuin): Use musl builds instead of gnu when available
[@&#8203;ethanjli](https://togithub.com/ethanjli)

#### 🎉 New Contributors

Thank you for your contribution!

[@&#8203;ethanjli](https://togithub.com/ethanjli)
[#&#8203;18523](https://togithub.com/aquaproj/aqua-registry/issues/18523)

###
[`v4.110.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.110.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.109.0...v4.110.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.110.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.110.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.109.0...v4.110.0

#### 🎉 New Packages


[#&#8203;18460](https://togithub.com/aquaproj/aqua-registry/issues/18460)
[graelo/pumas](https://togithub.com/graelo/pumas): Power Usage Monitor
for Apple Silicon
[@&#8203;CrystalMethod](https://togithub.com/CrystalMethod)

[#&#8203;18454](https://togithub.com/aquaproj/aqua-registry/issues/18454)
[keidarcy/e1s](https://togithub.com/keidarcy/e1s): E1S - Easily Manage
AWS ECS Resources in Terminal
[@&#8203;tmeijn](https://togithub.com/tmeijn)

###
[`v4.109.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.109.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.108.0...v4.109.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.109.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.109.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.108.0...v4.109.0

#### 🎉 New Packages


[#&#8203;18407](https://togithub.com/aquaproj/aqua-registry/issues/18407)
[rajatjindal/kubectl-whoami](https://togithub.com/rajatjindal/kubectl-whoami):
This plugin gets the subject name using the effective kubeconfig
[@&#8203;ponkio-o](https://togithub.com/ponkio-o)

[#&#8203;18451](https://togithub.com/aquaproj/aqua-registry/issues/18451)
[takaishi/awscost](https://togithub.com/takaishi/awscost): Print AWS
costs to text or graph image

###
[`v4.108.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.108.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.107.0...v4.108.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.108.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.108.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.107.0...v4.108.0

#### 🎉 New Packages


[#&#8203;18349](https://togithub.com/aquaproj/aqua-registry/issues/18349)
[afnanenayet/diffsitter](https://togithub.com/afnanenayet/diffsitter): A
tree-sitter based AST difftool to get meaningful semantic diffs
[@&#8203;CrystalMethod](https://togithub.com/CrystalMethod)

[#&#8203;18379](https://togithub.com/aquaproj/aqua-registry/issues/18379)
[#&#8203;18405](https://togithub.com/aquaproj/aqua-registry/issues/18405)
[aws-cloudformation/rain](https://togithub.com/aws-cloudformation/rain):
A development workflow tool for working with AWS CloudFormation

#### Fixes


[#&#8203;18402](https://togithub.com/aquaproj/aqua-registry/issues/18402)
derailed/popeye: Follow up changes of popeye v0.11.2

###
[`v4.107.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.107.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.106.0...v4.107.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.107.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.107.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.106.0...v4.107.0

#### 🎉 New Packages


[#&#8203;18326](https://togithub.com/aquaproj/aqua-registry/issues/18326)
[kubevirt/kubevirt/virtctl](https://togithub.com/kubevirt/kubevirt):
Kubernetes Virtualization API and runtime in order to define and manage
virtual machines [@&#8203;honahuku](https://togithub.com/honahuku)

###
[`v4.106.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.106.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.105.0...v4.106.0)


[Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.106.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.106.0)
| https://github.com/aquaproj/aqua-registry/compare/v4.105.0...v4.106.0

#### 🎉 New Packages


[#&#8203;18287](https://togithub.com/aquaproj/aqua-registry/issues/18287)
[oxc-project/oxc/oxlint](https://togithub.com/oxc-project/oxc): The
linter for oxc
[@&#8203;CrystalMethod](https://togithub.com/CrystalMethod)

[#&#8203;18297](https://togithub.com/aquaproj/aqua-registry/issues/18297)
[pluveto/upgit](https://togithub.com/pluveto/upgit): Another upload hub
that supports clipboard. It works well with Typora, Snipaste, VSCode
[@&#8203;sheldonhull](https://togithub.com/sheldonhull)

###
[`v4.105.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.105.0)

[Compare Source](https://togithub.com/aquap

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekday" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMDguMCIsInVwZGF0ZWRJblZlciI6IjM3LjEwOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: mend-for-github-com[bot] <50673670+mend-for-github-com[bot]@users.noreply.github.com>
  • Loading branch information
mend-for-github-com[bot] authored Jan 16, 2024
1 parent 6da856b commit 400b337
Showing 1 changed file with 12 additions and 12 deletions.
24 changes: 12 additions & 12 deletions aqua.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,20 +3,20 @@
# https://aquaproj.github.io/
registries:
- type: standard
ref: v4.35.0 # renovate: depName=aquaproj/aqua-registry
ref: v4.119.0 # renovate: depName=aquaproj/aqua-registry
packages:
- name: miniscruff/changie@v1.12.0
- name: golang/go@go1.20.6
- name: direnv/direnv@v2.32.3
- name: miniscruff/changie@v1.18.0
- name: golang/go@go1.21.6
- name: direnv/direnv@v2.33.0
- name: magefile/[email protected]
- name: charmbracelet/[email protected]
- name: mvdan/[email protected]
- name: golang.org/x/tools/gopls@v0.13.1
- name: golang/tools/gorename@v0.12.0
- name: golang/tools/stringer@v0.12.0
- name: golang/tools/gomvpkg@v0.12.0
- name: golang/tools/godoc@v0.12.0
- name: golang/tools/guru@v0.12.0
- name: anchore/syft@v0.86.1
- name: golang.org/x/tools/gopls@v0.14.2
- name: golang/tools/gorename@v0.17.0
- name: golang/tools/stringer@v0.17.0
- name: golang/tools/gomvpkg@v0.17.0
- name: golang/tools/godoc@v0.17.0
- name: golang/tools/guru@v0.17.0
- name: anchore/syft@v0.100.0
- name: thycotic/[email protected]
- name: Schniz/[email protected].0
- name: Schniz/[email protected].1

0 comments on commit 400b337

Please sign in to comment.