Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): update ⬆️ aqua-packages (#54)
This PR contains the following updates: | Package | Update | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---|---| | [Schniz/fnm](https://togithub.com/Schniz/fnm) | patch | `v1.35.0` -> `v1.35.1` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/Schniz%2ffnm/v1.35.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/Schniz%2ffnm/v1.35.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/Schniz%2ffnm/v1.35.0/v1.35.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/Schniz%2ffnm/v1.35.0/v1.35.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [anchore/syft](https://togithub.com/anchore/syft) | minor | `v0.86.1` -> `v0.100.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/anchore%2fsyft/v0.100.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/anchore%2fsyft/v0.100.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/anchore%2fsyft/v0.86.1/v0.100.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/anchore%2fsyft/v0.86.1/v0.100.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [aquaproj/aqua-registry](https://togithub.com/aquaproj/aqua-registry) | minor | `v4.35.0` -> `v4.119.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/aquaproj%2faqua-registry/v4.119.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/aquaproj%2faqua-registry/v4.119.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/aquaproj%2faqua-registry/v4.35.0/v4.119.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/aquaproj%2faqua-registry/v4.35.0/v4.119.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [direnv/direnv](https://togithub.com/direnv/direnv) | minor | `v2.32.3` -> `v2.33.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/direnv%2fdirenv/v2.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/direnv%2fdirenv/v2.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/direnv%2fdirenv/v2.32.3/v2.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/direnv%2fdirenv/v2.32.3/v2.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | golang.org/x/tools/gopls | minor | `v0.13.1` -> `v0.14.2` | [![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftools%2fgopls/v0.14.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2ftools%2fgopls/v0.14.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2ftools%2fgopls/v0.13.1/v0.14.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftools%2fgopls/v0.13.1/v0.14.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [golang/go](https://togithub.com/golang/go) | minor | `1.20.6` -> `1.21.6` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/golang%2fgo/1.21.6?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/golang%2fgo/1.21.6?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/golang%2fgo/1.20.6/1.21.6?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/golang%2fgo/1.20.6/1.21.6?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [golang/tools](https://togithub.com/golang/tools) | minor | `v0.12.0` -> `v0.17.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/golang%2ftools/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/golang%2ftools/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/golang%2ftools/v0.12.0/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/golang%2ftools/v0.12.0/v0.17.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [miniscruff/changie](https://togithub.com/miniscruff/changie) | minor | `v1.12.0` -> `v1.18.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/miniscruff%2fchangie/v1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/miniscruff%2fchangie/v1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/miniscruff%2fchangie/v1.12.0/v1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/miniscruff%2fchangie/v1.12.0/v1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>Schniz/fnm (Schniz/fnm)</summary> ### [`v1.35.1`](https://togithub.com/Schniz/fnm/releases/tag/v1.35.1) [Compare Source](https://togithub.com/Schniz/fnm/compare/v1.35.0...v1.35.1) ##### Patch Changes - [#​1010](https://togithub.com/Schniz/fnm/pull/1010) [`b185446`](https://togithub.com/Schniz/fnm/commit/b185446cfa08d4d6e2552db53937762a3c38d4db) Thanks [@​quixoten](https://togithub.com/quixoten)! - fix: panic on `fnm completions` </details> <details> <summary>anchore/syft (anchore/syft)</summary> ### [`v0.100.0`](https://togithub.com/anchore/syft/releases/tag/v0.100.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.99.0...v0.100.0) ##### Added Features - Add more functionality to the ErLang parser \[[#​2390](https://togithub.com/anchore/syft/pull/2390) [@​LaurentGoderre](https://togithub.com/LaurentGoderre)] - Added OpenSSL binary matcher \[[#​2416](https://togithub.com/anchore/syft/pull/2416) [@​LaurentGoderre](https://togithub.com/LaurentGoderre)] - Add ability to extend the binaries cataloguers \[[#​2469](https://togithub.com/anchore/syft/pull/2469) [@​LaurentGoderre](https://togithub.com/LaurentGoderre)] ##### Bug Fixes - Added missing Purl for busybox \[[#​2457](https://togithub.com/anchore/syft/pull/2457) [@​LaurentGoderre](https://togithub.com/LaurentGoderre)] - Fix diff error obfuscating binary test failures message \[[#​2468](https://togithub.com/anchore/syft/pull/2468) [@​LaurentGoderre](https://togithub.com/LaurentGoderre)] - v0.99.0: CycloneDX json output breaks osv-scanner \[[#​2467](https://togithub.com/anchore/syft/issues/2467)] ##### Additional Changes - update openssl binary to -x \[[#​2456](https://togithub.com/anchore/syft/pull/2456) [@​spiffcs](https://togithub.com/spiffcs)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.99.0...v0.100.0)** ### [`v0.99.0`](https://togithub.com/anchore/syft/releases/tag/v0.99.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.98.0...v0.99.0) ##### Added Features - Look for a maven version in a pom from a parent dependency management… \[[#​2423](https://togithub.com/anchore/syft/pull/2423) [@​coheigea](https://togithub.com/coheigea)] - Adding the ability to retrieve remote licenses for yarn.lock \[[#​2338](https://togithub.com/anchore/syft/pull/2338) [@​coheigea](https://togithub.com/coheigea)] - Retrieve remote licenses using pom.properties when there is no pom.xml \[[#​2315](https://togithub.com/anchore/syft/pull/2315) [@​coheigea](https://togithub.com/coheigea)] - Add the option to retrieve remote licenses for projects defined in a … \[[#​2409](https://togithub.com/anchore/syft/pull/2409) [@​coheigea](https://togithub.com/coheigea)] - Parse Python licenses from LicenseFile entry in the Wheel Metadata \[[#​2331](https://togithub.com/anchore/syft/pull/2331) [@​coheigea](https://togithub.com/coheigea)] - Add binary classifier for the ERLang interpreter \[[#​2417](https://togithub.com/anchore/syft/pull/2417) [@​LaurentGoderre](https://togithub.com/LaurentGoderre)] - Parse Python licenses from LicenseExpression entry in the Wheel Metadata \[[#​2431](https://togithub.com/anchore/syft/pull/2431) [@​coheigea](https://togithub.com/coheigea)] - Add binary classifier for Julia lang \[[#​2427](https://togithub.com/anchore/syft/pull/2427) [@​LaurentGoderre](https://togithub.com/LaurentGoderre)] - Add binary detection for PHP composer \[[#​2432](https://togithub.com/anchore/syft/pull/2432) [@​LaurentGoderre](https://togithub.com/LaurentGoderre)] ##### Bug Fixes - bump fangs for ptr summarize fix \[[#​2387](https://togithub.com/anchore/syft/pull/2387) [@​willmurphyscode](https://togithub.com/willmurphyscode)] - improve identification for org.codehaus.groovy artifacts \[[#​2404](https://togithub.com/anchore/syft/pull/2404) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for commons-jelly artifacts \[[#​2399](https://togithub.com/anchore/syft/pull/2399) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for io.minio artifacts \[[#​2398](https://togithub.com/anchore/syft/pull/2398) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for com.graphql-java artifacts \[[#​2397](https://togithub.com/anchore/syft/pull/2397) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for org.apache.tapestry artifacts \[[#​2384](https://togithub.com/anchore/syft/pull/2384) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for io.ratpack artifacts \[[#​2379](https://togithub.com/anchore/syft/pull/2379) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for org.apache.cassandra artifacts \[[#​2386](https://togithub.com/anchore/syft/pull/2386) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for org.neo4j.procedure artifacts \[[#​2388](https://togithub.com/anchore/syft/pull/2388) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for org.elasticsearch artifacts \[[#​2383](https://togithub.com/anchore/syft/pull/2383) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for org.apache.geode artifacts \[[#​2382](https://togithub.com/anchore/syft/pull/2382) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for org.apache.tomcat artifacts \[[#​2381](https://togithub.com/anchore/syft/pull/2381) [@​westonsteimel](https://togithub.com/westonsteimel)] - improve identification for io.projectreactor.netty artifacts \[[#​2378](https://togithub.com/anchore/syft/pull/2378) [@​westonsteimel](https://togithub.com/westonsteimel)] - stop panic when parsing Haskell stack.yaml.lock with missing `hackage` field \[[#​2421](https://togithub.com/anchore/syft/issues/2421) [#​2419](https://togithub.com/anchore/syft/pull/2419) [@​houdini91](https://togithub.com/houdini91)] - fix detecting the name of the eclipse OSGi artifact \[[#​2314](https://togithub.com/anchore/syft/issues/2314) [#​2349](https://togithub.com/anchore/syft/pull/2349) [@​westonsteimel](https://togithub.com/westonsteimel)] - File Sources incorrectly exclude files on Windows \[[#​2410](https://togithub.com/anchore/syft/issues/2410) [#​2411](https://togithub.com/anchore/syft/pull/2411) [@​Racer159](https://togithub.com/Racer159)] - Parser for dotnet_portable_executable using wrong attribute name \[[#​2029](https://togithub.com/anchore/syft/issues/2029) [#​2133](https://togithub.com/anchore/syft/pull/2133) [@​kzantow](https://togithub.com/kzantow)] ##### Breaking Changes - Generalize UI events for cataloging tasks \[[#​2369](https://togithub.com/anchore/syft/pull/2369) [@​wagoodman](https://togithub.com/wagoodman)] ##### Additional Changes - refactor pkg.Collection to remove "catalog" references \[[#​2439](https://togithub.com/anchore/syft/pull/2439) [@​wagoodman](https://togithub.com/wagoodman)] - Expose javascript fields in cataloger configuration \[[#​2438](https://togithub.com/anchore/syft/pull/2438) [@​wagoodman](https://togithub.com/wagoodman)] - Use common archive catalog configuration \[[#​2437](https://togithub.com/anchore/syft/pull/2437) [@​wagoodman](https://togithub.com/wagoodman)] - Fix file digest cataloger when passed explicit coordinates \[[#​2436](https://togithub.com/anchore/syft/pull/2436) [@​wagoodman](https://togithub.com/wagoodman)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.98.0...v0.99.0)** ### [`v0.98.0`](https://togithub.com/anchore/syft/releases/tag/v0.98.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.97.1...v0.98.0) ##### Added Features - Add binary classifiers for MySQL and MariaDB \[[#​2316](https://togithub.com/anchore/syft/pull/2316) [@​duanemay](https://togithub.com/duanemay)] - Enhance redis binary classifier to support additional versions \[[#​2329](https://togithub.com/anchore/syft/pull/2329) [@​whalelines](https://togithub.com/whalelines)] - Expose compact JSON and XML format configuration \[[#​561](https://togithub.com/anchore/syft/issues/561) [#​2275](https://togithub.com/anchore/syft/pull/2275) [@​wagoodman](https://togithub.com/wagoodman)] ##### Bug Fixes - Fix file metadata cataloger when passed explicit coordinates \[[#​2370](https://togithub.com/anchore/syft/pull/2370) [@​wagoodman](https://togithub.com/wagoodman)] - hardcode xalan group ID \[[#​2368](https://togithub.com/anchore/syft/pull/2368) [@​willmurphyscode](https://togithub.com/willmurphyscode)] - logging level for parsing potential PE files \[[#​2367](https://togithub.com/anchore/syft/pull/2367) [@​kzantow](https://togithub.com/kzantow)] - Use read lock in `pkg.Collection` \[[#​2341](https://togithub.com/anchore/syft/pull/2341) [@​wagoodman](https://togithub.com/wagoodman)] - add manual namespace mapping for org.springframework jars \[[#​2345](https://togithub.com/anchore/syft/pull/2345) [@​westonsteimel](https://togithub.com/westonsteimel)] - add manual namespace mapping for org.springframework.security jars \[[#​2343](https://togithub.com/anchore/syft/pull/2343) [@​westonsteimel](https://togithub.com/westonsteimel)] - errors are printed into the stdout in syft 0.97.1 \[[#​2356](https://togithub.com/anchore/syft/issues/2356) [#​2364](https://togithub.com/anchore/syft/pull/2364) [@​kzantow](https://togithub.com/kzantow)] - `syft some-jar.jar` fails to find packages if PWD is a symlink \[[#​2355](https://togithub.com/anchore/syft/issues/2355) [#​2359](https://togithub.com/anchore/syft/pull/2359) [@​willmurphyscode](https://togithub.com/willmurphyscode)] - Default for recently added base path, `""`, disables detection of symlinked `*.jar` files \[[#​1962](https://togithub.com/anchore/syft/issues/1962) [#​2359](https://togithub.com/anchore/syft/pull/2359) [@​willmurphyscode](https://togithub.com/willmurphyscode)] - `syft attest` broken since 0.85.0 \[[#​2333](https://togithub.com/anchore/syft/issues/2333) [#​2337](https://togithub.com/anchore/syft/pull/2337) [@​wagoodman](https://togithub.com/wagoodman)] - Incorrect Java PURL for org.bouncycastle jars \[[#​2339](https://togithub.com/anchore/syft/issues/2339) [#​2342](https://togithub.com/anchore/syft/pull/2342) [@​westonsteimel](https://togithub.com/westonsteimel)] ##### Breaking Changes - Remove power-user command and related catalogers \[[#​1419](https://togithub.com/anchore/syft/issues/1419) [#​2306](https://togithub.com/anchore/syft/pull/2306) [@​wagoodman](https://togithub.com/wagoodman)] ##### Additional Changes - Normalize cataloger configuration patterns \[[#​2365](https://togithub.com/anchore/syft/pull/2365) [@​wagoodman](https://togithub.com/wagoodman)] - Normalize enums to lowercase with hyphens \[[#​2363](https://togithub.com/anchore/syft/pull/2363) [@​wagoodman](https://togithub.com/wagoodman)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.97.1...v0.98.0)** ##### Special Thanks Thanks [@​duanemay](https://togithub.com/duanemay) and [@​whalelines](https://togithub.com/whalelines) for the enhanced binary classifier support 👍 ### [`v0.97.1`](https://togithub.com/anchore/syft/releases/tag/v0.97.1) [Compare Source](https://togithub.com/anchore/syft/compare/v0.97.0...v0.97.1) ##### Bug Fixes - Syft does not use HTTP proxy when downloading the Docker image itself \[[#​2203](https://togithub.com/anchore/syft/issues/2203) [#​2336](https://togithub.com/anchore/syft/pull/2336) [@​anchore-actions-token-generator](https://togithub.com/anchore-actions-token-generator)] ##### Additional Changes - `syft version` report is broken with 0.97.0 release \[[#​2334](https://togithub.com/anchore/syft/issues/2334) [#​2335](https://togithub.com/anchore/syft/pull/2335) [@​spiffcs](https://togithub.com/spiffcs)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.97.0...v0.97.1)** ### [`v0.97.0`](https://togithub.com/anchore/syft/releases/tag/v0.97.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.96.0...v0.97.0) ##### Added Features - Add license for golang stdlib package \[[#​2317](https://togithub.com/anchore/syft/pull/2317) [@​coheigea](https://togithub.com/coheigea)] - Fall back to searching maven central using groupIDFromJavaMetadata \[[#​2295](https://togithub.com/anchore/syft/pull/2295) [@​coheigea](https://togithub.com/coheigea)] ##### Bug Fixes - Refine license search from groupIDFromJavaMetadata to account for artfactId in the groupId \[[#​2313](https://togithub.com/anchore/syft/pull/2313) [@​coheigea](https://togithub.com/coheigea)] - capture content written to stdout outside of report \[[#​2324](https://togithub.com/anchore/syft/pull/2324) [@​kzantow](https://togithub.com/kzantow)] - add manual groupid mappings for org.apache.velocity jars \[[#​2327](https://togithub.com/anchore/syft/pull/2327) [@​westonsteimel](https://togithub.com/westonsteimel)] - skip maven bundle plugin logic if vendor id and symbolic name match \[[#​2326](https://togithub.com/anchore/syft/pull/2326) [@​westonsteimel](https://togithub.com/westonsteimel)] - cataloger `dpkg-db-cataloger` not working \[[#​2323](https://togithub.com/anchore/syft/issues/2323)] ##### Breaking Changes - Rename Location virtualPath to accessPath \[[#​1835](https://togithub.com/anchore/syft/issues/1835) [#​2288](https://togithub.com/anchore/syft/pull/2288) [@​wagoodman](https://togithub.com/wagoodman)] ##### Additional Changes - Export syft-json format package metadata type helper \[[#​2328](https://togithub.com/anchore/syft/pull/2328) [@​wagoodman](https://togithub.com/wagoodman)] - Add dotnet-portable-executable-cataloger to README \[[#​2322](https://togithub.com/anchore/syft/pull/2322) [@​noqcks](https://togithub.com/noqcks)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.96.0...v0.97.0)** ### [`v0.96.0`](https://togithub.com/anchore/syft/releases/tag/v0.96.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.95.0...v0.96.0) ##### Added Features - Check maven central as well for licenses in parents poms for nested jars \[[#​2302](https://togithub.com/anchore/syft/pull/2302) [@​coheigea](https://togithub.com/coheigea)] - store image annotations inside the SBOM \[[#​2267](https://togithub.com/anchore/syft/issues/2267) [#​2294](https://togithub.com/anchore/syft/pull/2294) [@​noqcks](https://togithub.com/noqcks)] - Support parsing license information in Maven projects via parent poms \[[#​2103](https://togithub.com/anchore/syft/issues/2103)] ##### Bug Fixes - SPDX file has duplicate sha256 tag in versionInfo \[[#​2300](https://togithub.com/anchore/syft/pull/2300) [@​coheigea](https://togithub.com/coheigea)] - Report virtual path consistently between file.Resolvers \[[#​1836](https://togithub.com/anchore/syft/issues/1836) [#​2287](https://togithub.com/anchore/syft/pull/2287) [@​wagoodman](https://togithub.com/wagoodman)] - Unable to identify CycloneDX JSON documents without $schema property \[[#​2299](https://togithub.com/anchore/syft/issues/2299) [#​2303](https://togithub.com/anchore/syft/pull/2303) [@​kzantow](https://togithub.com/kzantow)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.95.0...v0.96.0)** ### [`v0.95.0`](https://togithub.com/anchore/syft/releases/tag/v0.95.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.94.0...v0.95.0) ##### Added Features - Use case-insensitive matching for Go license files \[[#​2286](https://togithub.com/anchore/syft/pull/2286) [@​miquella](https://togithub.com/miquella)] - Add conaninfo.txt parser to detect conan packages in docker images \[[#​2234](https://togithub.com/anchore/syft/pull/2234) [@​Pro](https://togithub.com/Pro)] - Perform case insensitive matching on Java License files \[[#​2235](https://togithub.com/anchore/syft/pull/2235) [@​coheigea](https://togithub.com/coheigea)] - Read a license from a parent pom stored in Maven Central \[[#​2228](https://togithub.com/anchore/syft/pull/2228) [@​coheigea](https://togithub.com/coheigea)] - Add PURLs when scanning Gradle lock files \[[#​2278](https://togithub.com/anchore/syft/pull/2278) [@​robbiev](https://togithub.com/robbiev)] ##### Bug Fixes - Fix CPE index workflow \[[#​2252](https://togithub.com/anchore/syft/pull/2252) [@​wagoodman](https://togithub.com/wagoodman)] - Fix cpe generation task \[[#​2270](https://togithub.com/anchore/syft/pull/2270) [@​willmurphyscode](https://togithub.com/willmurphyscode)] - Introduce cataloger naming conventions \[[#​1578](https://togithub.com/anchore/syft/issues/1578) [#​2277](https://togithub.com/anchore/syft/pull/2277) [@​wagoodman](https://togithub.com/wagoodman)] - .NET / nuget - invalid SBOM generated after parsing \[[#​2255](https://togithub.com/anchore/syft/issues/2255) [#​2273](https://togithub.com/anchore/syft/pull/2273) [@​spiffcs](https://togithub.com/spiffcs)] - Wrong parsing after v0.85.0 syft for some components \[[#​2241](https://togithub.com/anchore/syft/issues/2241) [#​2273](https://togithub.com/anchore/syft/pull/2273) [@​spiffcs](https://togithub.com/spiffcs)] - SPDX-2.3 is misidentified as SPDX-2.2 \[[#​2112](https://togithub.com/anchore/syft/issues/2112) [#​2186](https://togithub.com/anchore/syft/pull/2186) [@​wagoodman](https://togithub.com/wagoodman)] - Jar parser chokes on empty lines \[[#​2179](https://togithub.com/anchore/syft/issues/2179) [#​2254](https://togithub.com/anchore/syft/pull/2254) [@​spiffcs](https://togithub.com/spiffcs)] - Add a new Java configuration option to recursively search parent poms… \[[#​2274](https://togithub.com/anchore/syft/pull/2274) [@​coheigea](https://togithub.com/coheigea)] - Fix directory resolver to always return virtual path \[[#​2259](https://togithub.com/anchore/syft/pull/2259) [@​wagoodman](https://togithub.com/wagoodman)] - Syft can now handle the case of parsing a jar with multiple poms \[[#​2231](https://togithub.com/anchore/syft/pull/2231) [@​coheigea](https://togithub.com/coheigea)] - Add ruby.NewGemSpecCataloger to DirectoryCatalogers \[[#​1971](https://togithub.com/anchore/syft/pull/1971) [@​evanchaoli](https://togithub.com/evanchaoli)] ##### Breaking Changes - Introduce cataloger naming conventions \[[#​1578](https://togithub.com/anchore/syft/issues/1578) [#​2277](https://togithub.com/anchore/syft/pull/2277) [@​wagoodman](https://togithub.com/wagoodman)] - Remove MetadataType from the core package struct \[[#​1735](https://togithub.com/anchore/syft/issues/1735) [#​1983](https://togithub.com/anchore/syft/pull/1983) [@​wagoodman](https://togithub.com/wagoodman)] - Add convention for JSON metadata type names and port existing values to the new convention \[[#​1844](https://togithub.com/anchore/syft/issues/1844) [#​1983](https://togithub.com/anchore/syft/pull/1983) [@​wagoodman](https://togithub.com/wagoodman)] - Remove deprecated syft.Format functions \[[#​1344](https://togithub.com/anchore/syft/issues/1344) [#​2186](https://togithub.com/anchore/syft/pull/2186) [@​wagoodman](https://togithub.com/wagoodman)] ##### Additional Changes - Upgrade tool management \[[#​2188](https://togithub.com/anchore/syft/pull/2188) [@​wagoodman](https://togithub.com/wagoodman)] - Fix homebrew post-release workflow \[[#​2242](https://togithub.com/anchore/syft/pull/2242) [@​wagoodman](https://togithub.com/wagoodman)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.94.0...v0.95.0)** ### [`v0.94.0`](https://togithub.com/anchore/syft/releases/tag/v0.94.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.93.0...v0.94.0) ##### Added Features - Add additional license filenames \[[#​2227](https://togithub.com/anchore/syft/pull/2227) [@​coheigea](https://togithub.com/coheigea)] - Parse donet dependency trees \[[#​2143](https://togithub.com/anchore/syft/pull/2143) [@​noqcks](https://togithub.com/noqcks)] - Find license by embedded license text \[[#​2147](https://togithub.com/anchore/syft/issues/2147) [#​2213](https://togithub.com/anchore/syft/pull/2213) [@​coheigea](https://togithub.com/coheigea)] - Add support for dpkg dependency relationships \[[#​2040](https://togithub.com/anchore/syft/issues/2040) [#​2212](https://togithub.com/anchore/syft/pull/2212) [@​wagoodman](https://togithub.com/wagoodman)] ##### Bug Fixes - Report errors to stderr not stdout \[[#​2232](https://togithub.com/anchore/syft/pull/2232) [@​wagoodman](https://togithub.com/wagoodman)] - Python egg packages are not parsed for SBOM \[[#​1761](https://togithub.com/anchore/syft/issues/1761) [#​2239](https://togithub.com/anchore/syft/pull/2239) [@​spiffcs](https://togithub.com/spiffcs)] - Java archive is listed twice \[[#​2130](https://togithub.com/anchore/syft/issues/2130) [#​2220](https://togithub.com/anchore/syft/pull/2220) [@​wagoodman](https://togithub.com/wagoodman)] - Java archives not from Maven \[[#​2217](https://togithub.com/anchore/syft/issues/2217) [#​2220](https://togithub.com/anchore/syft/pull/2220) [@​wagoodman](https://togithub.com/wagoodman)] - Remove internal.StringSet \[[#​2209](https://togithub.com/anchore/syft/issues/2209) [#​2219](https://togithub.com/anchore/syft/pull/2219) [@​wagoodman](https://togithub.com/wagoodman)] - Invalid interface conversion in Swift cataloger \[[#​2225](https://togithub.com/anchore/syft/issues/2225) [#​2226](https://togithub.com/anchore/syft/pull/2226) [@​wagoodman](https://togithub.com/wagoodman)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.93.0...v0.94.0)** ### [`v0.93.0`](https://togithub.com/anchore/syft/releases/tag/v0.93.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.92.0...v0.93.0) ##### Added Features - Parse license from the pom.xml if not contained in the manifest \[[#​2115](https://togithub.com/anchore/syft/pull/2115) [@​coheigea](https://togithub.com/coheigea)] - Add Golang STD library package given a Golang binary has been discovered compiled with that go binary \[[#​1853](https://togithub.com/anchore/syft/issues/1853) [#​2195](https://togithub.com/anchore/syft/pull/2195) [@​spiffcs](https://togithub.com/spiffcs)] - Improve --output CLI help and deprecate --file \[[#​2165](https://togithub.com/anchore/syft/issues/2165) [#​2187](https://togithub.com/anchore/syft/pull/2187) [@​sharief007](https://togithub.com/sharief007)] ##### Bug Fixes - Converting a SBOM looses the algorithm type for added checksums \[[#​2183](https://togithub.com/anchore/syft/issues/2183) [#​2207](https://togithub.com/anchore/syft/pull/2207) [@​sharief007](https://togithub.com/sharief007)] ##### Additional Changes - Refine the docs for building a cataloger \[[#​2175](https://togithub.com/anchore/syft/pull/2175) [@​wagoodman](https://togithub.com/wagoodman)] - update license list to 3.22 \[[#​2201](https://togithub.com/anchore/syft/pull/2201) [@​spiffcs](https://togithub.com/spiffcs)] - Add exact syntax of the conversion formats \[[#​2196](https://togithub.com/anchore/syft/pull/2196) [@​vargenau](https://togithub.com/vargenau)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.92.0...v0.93.0)** ### [`v0.92.0`](https://togithub.com/anchore/syft/releases/tag/v0.92.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.91.0...v0.92.0) ##### Added Features - Support for multiple image refs of same sha in OCI layout \[[#​1544](https://togithub.com/anchore/syft/issues/1544)] ##### Bug Fixes - Generated purls are different between runs of syft against the same image and artifact \[[#​2169](https://togithub.com/anchore/syft/issues/2169) [#​2170](https://togithub.com/anchore/syft/pull/2170) [@​willmurphyscode](https://togithub.com/willmurphyscode)] ##### Additional Changes - bump stereoscope to fix data race in UI code \[[#​2173](https://togithub.com/anchore/syft/pull/2173) [@​willmurphyscode](https://togithub.com/willmurphyscode)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.91.0...v0.92.0)** ### [`v0.91.0`](https://togithub.com/anchore/syft/releases/tag/v0.91.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.90.0...v0.91.0) ##### Added Features - Add support for CycloneDX 1.5 \[[#​2120](https://togithub.com/anchore/syft/issues/2120) [#​2123](https://togithub.com/anchore/syft/pull/2123) [@​spiffcs](https://togithub.com/spiffcs)] - Add support for containerd as an image source \[[#​201](https://togithub.com/anchore/syft/issues/201) [#​1793](https://togithub.com/anchore/syft/pull/1793) [@​shanedell](https://togithub.com/shanedell)] - Support cataloging github workflow & github action usages \[[#​1896](https://togithub.com/anchore/syft/issues/1896) [#​2140](https://togithub.com/anchore/syft/pull/2140) [@​wagoodman](https://togithub.com/wagoodman)] ##### Bug Fixes - Allow CycloneDX json input with no components \[[#​2127](https://togithub.com/anchore/syft/pull/2127) [@​ahoz](https://togithub.com/ahoz)] - Prevent errors from clobbering terminal \[[#​2161](https://togithub.com/anchore/syft/pull/2161) [@​kzantow](https://togithub.com/kzantow)] - Using syft as a go library to decode a syft json has incomplete data \[[#​2069](https://togithub.com/anchore/syft/issues/2069) [#​2083](https://togithub.com/anchore/syft/pull/2083) [@​kzantow](https://togithub.com/kzantow)] - SBOMs are not the same on multiple runs of syft \[[#​1944](https://togithub.com/anchore/syft/issues/1944)] ##### Additional Changes - Switch to stdlib's slices pkg \[[#​2148](https://togithub.com/anchore/syft/pull/2148) [@​hainenber](https://togithub.com/hainenber)] - Remove unneeded arch switch in unit test \[[#​2156](https://togithub.com/anchore/syft/pull/2156) [@​willmurphyscode](https://togithub.com/willmurphyscode)] - Update chronicle to v0.8.0 \[[#​2154](https://togithub.com/anchore/syft/pull/2154) [@​wagoodman](https://togithub.com/wagoodman)] - Update to latest stereoscope \[[#​2151](https://togithub.com/anchore/syft/pull/2151) [@​spiffcs](https://togithub.com/spiffcs)] - Pin workflow checkout for cpe update-cpe-dictionary-index \[[#​2141](https://togithub.com/anchore/syft/pull/2141) [@​spiffcs](https://togithub.com/spiffcs)] - Add dependency information to conan lockfile parser \[[#​2131](https://togithub.com/anchore/syft/pull/2131) [@​Pro](https://togithub.com/Pro)] - Pin and update all workflow dependencies; add permission scopes \[[#​2138](https://togithub.com/anchore/syft/pull/2138) [@​spiffcs](https://togithub.com/spiffcs)] - Enforce race detector \[[#​2122](https://togithub.com/anchore/syft/pull/2122) [@​willmurphyscode](https://togithub.com/willmurphyscode)] **[(Full Changelog)](https://togithub.com/anchore/syft/compare/v0.90.0...v0.91.0)** ### [`v0.90.0`](https://togithub.com/anchore/syft/releases/tag/v0.90.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.89.0...v0.90.0) ### #### [v0.90.0](https://togithub.com/anchore/syft/tree/v0.90.0) (2023-09-11) [Full Changelog](https://togithub.com/anchore/syft/compare/v0.89.0...v0.90.0) ##### Added Features - Expose cobra command in cli package \[[PR #​2097](https://togithub.com/anchore/syft/pull/2097)] \[[wagoodman](https://togithub.com/wagoodman)] - Explicitly test PURL generation against key packages \[[Issue #​2071](https://togithub.com/anchore/syft/issues/2071)] - Add User-Agent with Syft version during update check \[[Issue #​2072](https://togithub.com/anchore/syft/issues/2072)] \[[PR #​2100](https://togithub.com/anchore/syft/pull/2100)] \[[hainenber](https://togithub.com/hainenber)] ##### Bug Fixes - fix: correct group IDs for commons-codec, okhttp, okio, and add integration tests for Java PURL generation \[[PR #​2075](https://togithub.com/anchore/syft/pull/2075)] \[[willmurphyscode](https://togithub.com/willmurphyscode)] - Cyclonedx external reference URLs are not validated when encoding \[[Issue #​2079](https://togithub.com/anchore/syft/issues/2079)] \[[PR #​2091](https://togithub.com/anchore/syft/pull/2091)] \[[hainenber](https://togithub.com/hainenber)] ##### Additional Changes - Bump the golang.org/x/exp dependency and fix a build breakage. \[[PR #​2088](https://togithub.com/anchore/syft/pull/2088)] \[[dlorenc](https://togithub.com/dlorenc)] - fix: update codeql-analysis for go 1.21 \[[PR #​2108](https://togithub.com/anchore/syft/pull/2108)] \[[spiffcs](https://togithub.com/spiffcs)] ### [`v0.89.0`](https://togithub.com/anchore/syft/releases/tag/v0.89.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.88.0...v0.89.0) ### #### [v0.89.0](https://togithub.com/anchore/syft/tree/v0.89.0) (2023-08-31) [Full Changelog](https://togithub.com/anchore/syft/compare/v0.88.0...v0.89.0) ##### Added Features - Add registry certificate verification support \[[PR #​1734](https://togithub.com/anchore/syft/pull/1734)] \[[5p2O5pe25ouT](https://togithub.com/5p2O5pe25ouT)] - Add SYFT_CONFIG environment variable for configuration file path \[[Issue #​1986](https://togithub.com/anchore/syft/issues/1986)] \[[PR #​2001](https://togithub.com/anchore/syft/pull/2001)] \[[kzantow](https://togithub.com/kzantow)] ##### Bug Fixes - Fix quiet flag \[[PR #​2081](https://togithub.com/anchore/syft/pull/2081)] \[[wagoodman](https://togithub.com/wagoodman)] - Command line flags not overriding configuration file values \[[Issue #​1143](https://togithub.com/anchore/syft/issues/1143)] \[[PR #​2001](https://togithub.com/anchore/syft/pull/2001)] \[[kzantow](https://togithub.com/kzantow)] - Django package CPE is not correct \[[Issue #​1298](https://togithub.com/anchore/syft/issues/1298)] \[[PR #​2068](https://togithub.com/anchore/syft/pull/2068)] \[[witchcraze](https://togithub.com/witchcraze)] - Config parsing includes `config.yaml` in working dir \[[Issue #​1634](https://togithub.com/anchore/syft/issues/1634)] \[[PR #​2001](https://togithub.com/anchore/syft/pull/2001)] \[[kzantow](https://togithub.com/kzantow)] - Fix a possible panic on universal go binaries \[[Issue #​2073](https://togithub.com/anchore/syft/issues/2073)] \[[PR #​2078](https://togithub.com/anchore/syft/pull/2078)] \[[willmurphyscode](https://togithub.com/willmurphyscode)] - Disabling catalogers is not working in power user command \[[Issue #​2074](https://togithub.com/anchore/syft/issues/2074)] \[[PR #​2001](https://togithub.com/anchore/syft/pull/2001)] \[[kzantow](https://togithub.com/kzantow)] - Virtual path changes to java cataloger causing creation of extra incorrect packages when jars are renamed \[[Issue #​2077](https://togithub.com/anchore/syft/issues/2077)] \[[PR #​2080](https://togithub.com/anchore/syft/pull/2080)] \[[willmurphyscode](https://togithub.com/willmurphyscode)] ### [`v0.88.0`](https://togithub.com/anchore/syft/releases/tag/v0.88.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.87.1...v0.88.0) ### #### [v0.88.0](https://togithub.com/anchore/syft/tree/v0.88.0) (2023-08-25) [Full Changelog](https://togithub.com/anchore/syft/compare/v0.87.1...v0.88.0) ##### Added Features - Detect golang boring crypto and fipsonly modules \[[PR #​2021](https://togithub.com/anchore/syft/pull/2021)] \[[bathina2](https://togithub.com/bathina2)] - feat: 1944 - update purl generation to use a consistent groupID \[[PR #​2033](https://togithub.com/anchore/syft/pull/2033)] \[[spiffcs](https://togithub.com/spiffcs)] - Add support to detect bash binaries \[[Issue #​1963](https://togithub.com/anchore/syft/issues/1963)] \[[PR #​2055](https://togithub.com/anchore/syft/pull/2055)] \[[witchcraze](https://togithub.com/witchcraze)] ##### Bug Fixes - fix: properly parse conan ref and include user and channel \[[PR #​2034](https://togithub.com/anchore/syft/pull/2034)] \[[Pro](https://togithub.com/Pro)] - New version notice only showing the version and no text \[[PR #​2042](https://togithub.com/anchore/syft/pull/2042)] \[[wagoodman](https://togithub.com/wagoodman)] - Fix: don't validate pom declared group \[[PR #​2054](https://togithub.com/anchore/syft/pull/2054)] \[[willmurphyscode](https://togithub.com/willmurphyscode)] - Errors when handling symlinks on Windows with syft v0.85.0 \[[Issue #​1950](https://togithub.com/anchore/syft/issues/1950)] \[[PR #​2051](https://togithub.com/anchore/syft/pull/2051)] \[[selzoc](https://togithub.com/selzoc)] - Syft seems unable to parse non UTF-8 pom.xml files \[[Issue #​2044](https://togithub.com/anchore/syft/issues/2044)] \[[PR #​2047](https://togithub.com/anchore/syft/pull/2047)] \[[wagoodman](https://togithub.com/wagoodman)] - Error parsing pom.xml with v0.87.1 \[[Issue #​2060](https://togithub.com/anchore/syft/issues/2060)] \[[PR #​2064](https://togithub.com/anchore/syft/pull/2064)] \[[willmurphyscode](https://togithub.com/willmurphyscode)] - Invalid CycloneDX: duplicates in relationships section \[[Issue #​2062](https://togithub.com/anchore/syft/issues/2062)] \[[PR #​2063](https://togithub.com/anchore/syft/pull/2063)] \[[kzantow](https://togithub.com/kzantow)] ### [`v0.87.1`](https://togithub.com/anchore/syft/releases/tag/v0.87.1) [Compare Source](https://togithub.com/anchore/syft/compare/v0.87.0...v0.87.1) ### #### [v0.87.1](https://togithub.com/anchore/syft/tree/v0.87.1) (2023-08-17) [Full Changelog](https://togithub.com/anchore/syft/compare/v0.87.0...v0.87.1) ##### Bug Fixes - Use Java package names to determine known groupIDs \[[PR #​2032](https://togithub.com/anchore/syft/pull/2032)] \[[kzantow](https://togithub.com/kzantow)] - Relationships section of CycloneDX is not outputting even when the data is present \[[Issue #​1972](https://togithub.com/anchore/syft/issues/1972)] \[[PR #​1974](https://togithub.com/anchore/syft/pull/1974)] \[[markgalpin](https://togithub.com/markgalpin)] \[[kzantow](https://togithub.com/kzantow)] - SPDX Tag-Value conversion not handling files directly set on packages \[[Issue #​2013](https://togithub.com/anchore/syft/issues/2013)] \[[PR #​2014](https://togithub.com/anchore/syft/pull/2014)] \[[kzantow](https://togithub.com/kzantow)] - Intermittent binary listings, different results every time \[[Issue #​2035](https://togithub.com/anchore/syft/issues/2035)] \[[PR #​2036](https://togithub.com/anchore/syft/pull/2036)] \[[kzantow](https://togithub.com/kzantow)] ### [`v0.87.0`](https://togithub.com/anchore/syft/releases/tag/v0.87.0) [Compare Source](https://togithub.com/anchore/syft/compare/v0.86.1...v0.87.0) ### #### [v0.87.0](https://togithub.com/anchore/syft/tree/v0.87.0) (2023-08-14) [Full Changelog](https://togithub.com/anchore/syft/compare/v0.86.1...v0.87.0) ##### Added Features - feat: use originator logic to fill supplier \[[PR #​1980](https://togithub.com/anchore/syft/pull/1980)] \[[spiffcs](https://togithub.com/spiffcs)] - Expand deb cataloger to include opkg \[[PR #​1985](https://togithub.com/anchore/syft/pull/1985)] \[[johnDeSilencio](https://togithub.com/johnDeSilencio)] - Package duplicated by different cataloger \[[Issue #​931](https://togithub.com/anchore/syft/issues/931)] \[[PR #​1948](https://togithub.com/anchore/syft/pull/1948)] \[[spiffcs](https://togithub.com/spiffcs)] - Add binary cataloger for Nginx built from source \[[Issue #​1945](https://togithub.com/anchore/syft/issues/1945)] \[[PR #​1988](https://togithub.com/anchore/syft/pull/1988)] \[[SemProvoost](https://togithub.com/SemProvoost)] ##### Bug Fixes - chore: update bubbly to fix hanging \[[PR #​1990](https://togithub.com/anchore/syft/pull/1990)] \[[kzantow](https://togithub.com/kzantow)] - fix: update glob to use newer usr/lib/sysimage path \[[PR #​1997](https://togithub.com/anchore/syft/pull/1997)] \[[spiffcs](https://togithub.com/spiffcs)] - fix: SPDX license values and download location \[[PR #​2007](https://togithub.com/anchore/syft/pull/2007)] \[[kzantow](https://togithub.com/kzantow)] - Different CPEs between java-cataloger and java-gradle-lockfile-cataloger \[[Issue #​1957](https://togithub.com/anchore/syft/issues/1957)] \[[PR #​1995](https://togithub.com/anchore/syft/pull/1995)] \[[kzantow](https://togithub.com/kzantow)] </details> <details> <summary>aquaproj/aqua-registry (aquaproj/aqua-registry)</summary> ### [`v4.119.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.119.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.118.0...v4.119.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.119.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.119.0) | https://github.com/aquaproj/aqua-registry/compare/v4.118.0...v4.119.0 #### 🎉 New Packages [#​19027](https://togithub.com/aquaproj/aqua-registry/issues/19027) [microsoft/kiota](https://togithub.com/microsoft/kiota): OpenAPI based HTTP Client code generator [@​frozenbonito](https://togithub.com/frozenbonito) #### Fixes [#​19033](https://togithub.com/aquaproj/aqua-registry/issues/19033) sxyazi/yazi: Regenerate config ### [`v4.118.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.118.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.117.0...v4.118.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.118.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.118.0) | https://github.com/aquaproj/aqua-registry/compare/v4.117.0...v4.118.0 #### 🎉 New Packages [#​19011](https://togithub.com/aquaproj/aqua-registry/issues/19011) [abhinav/doc2go](https://togithub.com/abhinav/doc2go): Your Go project's documentation, to-go [#​19003](https://togithub.com/aquaproj/aqua-registry/issues/19003) [docker/buildx](https://togithub.com/docker/buildx): Docker CLI plugin for extended build capabilities with BuildKit [@​tmeijn](https://togithub.com/tmeijn) > \[!WARNING] > buildx is a Docker CLI plugin so you need to install plugins on directories such as `$HOME/.docker/cli-plugins`, > but aqua can't install tools on those directories. > So you need to create a script on those directories. > > e.g. `$HOME/.docker/cli-plugins/docker-buildx` > > ```sh > #!/bin/sh > exec aqua exec -- docker-cli-plugin-docker-buildx "$@​" > ``` #### Fixes [#​19003](https://togithub.com/aquaproj/aqua-registry/issues/19003) docker/compose: Fix old versions and Windows [@​tmeijn](https://togithub.com/tmeijn) ### [`v4.117.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.117.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.116.0...v4.117.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.117.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.117.0) | https://github.com/aquaproj/aqua-registry/compare/v4.116.0...v4.117.0 #### 🎉 New Packages [#​18994](https://togithub.com/aquaproj/aqua-registry/issues/18994) [brumhard/krewfile](https://togithub.com/brumhard/krewfile): Declarative krew plugin management [@​tmeijn](https://togithub.com/tmeijn) [#​18993](https://togithub.com/aquaproj/aqua-registry/issues/18993) [doy/rbw](https://togithub.com/doy/rbw): unofficial bitwarden cli [@​tmeijn](https://togithub.com/tmeijn) ### [`v4.116.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.116.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.115.0...v4.116.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.116.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.116.0) | https://github.com/aquaproj/aqua-registry/compare/v4.115.0...v4.116.0 #### 🎉 New Packages [#​18973](https://togithub.com/aquaproj/aqua-registry/issues/18973) [#​18977](https://togithub.com/aquaproj/aqua-registry/issues/18977) [turbot/flowpipe](https://togithub.com/turbot/flowpipe): Flowpipe is a cloud scripting engine. Automation and workflow to connect your clouds to the people, systems and data that matters #### Fixes [#​18898](https://togithub.com/aquaproj/aqua-registry/issues/18898) ankitpokhrel/jira-cli: Follow up changes of jira-cli v1.5.0 ### [`v4.115.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.115.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.114.0...v4.115.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.115.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.115.0) | https://github.com/aquaproj/aqua-registry/compare/v4.114.0...v4.115.0 #### 🎉 New Packages [#​18818](https://togithub.com/aquaproj/aqua-registry/issues/18818) [rustic-rs/rustic](https://togithub.com/rustic-rs/rustic): rustic - fast, encrypted, and deduplicated backups powered by Rust [@​CrystalMethod](https://togithub.com/CrystalMethod) #### Fixes [#​18864](https://togithub.com/aquaproj/aqua-registry/issues/18864) cloudposse/atmos: Support old versions [#​18838](https://togithub.com/aquaproj/aqua-registry/issues/18838) bensadeh/tailspin: Follow up changes of tailspin 2.3.0 ### [`v4.114.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.114.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.113.0...v4.114.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.114.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.114.0) | https://github.com/aquaproj/aqua-registry/compare/v4.113.0...v4.114.0 #### 🎉 New Packages [#​18778](https://togithub.com/aquaproj/aqua-registry/issues/18778) [sigoden/aichat](https://togithub.com/sigoden/aichat): Use GPT-4(V), Gemini, LocalAI, Ollama and other LLMs in the terminal [@​CrystalMethod](https://togithub.com/CrystalMethod) #### Fixes [#​18781](https://togithub.com/aquaproj/aqua-registry/issues/18781) [#​18782](https://togithub.com/aquaproj/aqua-registry/issues/18782) oxc-project/oxc/oxlint: Follow up changes for oxc-project/oxc/oxlint v0.1.1 [@​CrystalMethod](https://togithub.com/CrystalMethod) [#​18793](https://togithub.com/aquaproj/aqua-registry/issues/18793) yitsushi/totp-cli: Follow up changes of totp-cli v1.8.7 ### [`v4.113.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.113.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.112.1...v4.113.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.113.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.113.0) | https://github.com/aquaproj/aqua-registry/compare/v4.112.1...v4.113.0 #### 🎉 New Packages [#​18741](https://togithub.com/aquaproj/aqua-registry/issues/18741) [tofuutils/tofuenv](https://togithub.com/tofuutils/tofuenv): OpenTofu version manager #### Fixes [#​18323](https://togithub.com/aquaproj/aqua-registry/issues/18323) Transfer suzuki-shunsuke/lintnet to lintnet/lintnet ### [`v4.112.1`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.112.1) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.112.0...v4.112.1) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.112.1) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.112.1) | https://github.com/aquaproj/aqua-registry/compare/v4.112.0...v4.112.1 #### Fixes [#​18724](https://togithub.com/aquaproj/aqua-registry/issues/18724) nametake/golangci-lint-langserver: Follow up changes of golangci-lint-langserver v0.0.9 [#​18723](https://togithub.com/aquaproj/aqua-registry/issues/18723) becheran/roumon: Follow up changes of roumon v1.2.0 [#​18703](https://togithub.com/aquaproj/aqua-registry/issues/18703) arduino/arduino-cli: Follow up changes of arduino-cli [#​18654](https://togithub.com/aquaproj/aqua-registry/issues/18654) jdx/rtx: Transfer the repository to jdx/mise ### [`v4.112.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.112.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.111.0...v4.112.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.112.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.112.0) | https://github.com/aquaproj/aqua-registry/compare/v4.111.0...v4.112.0 #### 🎉 New Packages [#​18594](https://togithub.com/aquaproj/aqua-registry/issues/18594) [sqls-server/sqls](https://togithub.com/sqls-server/sqls): SQL language server written in Go [@​ponkio-o](https://togithub.com/ponkio-o) ### [`v4.111.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.111.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.110.0...v4.111.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.111.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.111.0) | https://github.com/aquaproj/aqua-registry/compare/v4.110.0...v4.111.0 #### 🎉 New Packages [#​18518](https://togithub.com/aquaproj/aqua-registry/issues/18518) [rajatjindal/krew-release-bot](https://togithub.com/rajatjindal/krew-release-bot): bot to bump version of plugin in krew-index on new releases [@​ponkio-o](https://togithub.com/ponkio-o) [#​18470](https://togithub.com/aquaproj/aqua-registry/issues/18470) [fujiwara/cfft](https://togithub.com/fujiwara/cfft): cfft is a testing tool for CloudFront Functions #### Fixes [#​18523](https://togithub.com/aquaproj/aqua-registry/issues/18523) fix(atuinsh/atuin): Use musl builds instead of gnu when available [@​ethanjli](https://togithub.com/ethanjli) #### 🎉 New Contributors Thank you for your contribution! [@​ethanjli](https://togithub.com/ethanjli) [#​18523](https://togithub.com/aquaproj/aqua-registry/issues/18523) ### [`v4.110.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.110.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.109.0...v4.110.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.110.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.110.0) | https://github.com/aquaproj/aqua-registry/compare/v4.109.0...v4.110.0 #### 🎉 New Packages [#​18460](https://togithub.com/aquaproj/aqua-registry/issues/18460) [graelo/pumas](https://togithub.com/graelo/pumas): Power Usage Monitor for Apple Silicon [@​CrystalMethod](https://togithub.com/CrystalMethod) [#​18454](https://togithub.com/aquaproj/aqua-registry/issues/18454) [keidarcy/e1s](https://togithub.com/keidarcy/e1s): E1S - Easily Manage AWS ECS Resources in Terminal [@​tmeijn](https://togithub.com/tmeijn) ### [`v4.109.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.109.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.108.0...v4.109.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.109.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.109.0) | https://github.com/aquaproj/aqua-registry/compare/v4.108.0...v4.109.0 #### 🎉 New Packages [#​18407](https://togithub.com/aquaproj/aqua-registry/issues/18407) [rajatjindal/kubectl-whoami](https://togithub.com/rajatjindal/kubectl-whoami): This plugin gets the subject name using the effective kubeconfig [@​ponkio-o](https://togithub.com/ponkio-o) [#​18451](https://togithub.com/aquaproj/aqua-registry/issues/18451) [takaishi/awscost](https://togithub.com/takaishi/awscost): Print AWS costs to text or graph image ### [`v4.108.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.108.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.107.0...v4.108.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.108.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.108.0) | https://github.com/aquaproj/aqua-registry/compare/v4.107.0...v4.108.0 #### 🎉 New Packages [#​18349](https://togithub.com/aquaproj/aqua-registry/issues/18349) [afnanenayet/diffsitter](https://togithub.com/afnanenayet/diffsitter): A tree-sitter based AST difftool to get meaningful semantic diffs [@​CrystalMethod](https://togithub.com/CrystalMethod) [#​18379](https://togithub.com/aquaproj/aqua-registry/issues/18379) [#​18405](https://togithub.com/aquaproj/aqua-registry/issues/18405) [aws-cloudformation/rain](https://togithub.com/aws-cloudformation/rain): A development workflow tool for working with AWS CloudFormation #### Fixes [#​18402](https://togithub.com/aquaproj/aqua-registry/issues/18402) derailed/popeye: Follow up changes of popeye v0.11.2 ### [`v4.107.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.107.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.106.0...v4.107.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.107.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.107.0) | https://github.com/aquaproj/aqua-registry/compare/v4.106.0...v4.107.0 #### 🎉 New Packages [#​18326](https://togithub.com/aquaproj/aqua-registry/issues/18326) [kubevirt/kubevirt/virtctl](https://togithub.com/kubevirt/kubevirt): Kubernetes Virtualization API and runtime in order to define and manage virtual machines [@​honahuku](https://togithub.com/honahuku) ### [`v4.106.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.106.0) [Compare Source](https://togithub.com/aquaproj/aqua-registry/compare/v4.105.0...v4.106.0) [Issues](https://togithub.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.106.0) | [Pull Requests](https://togithub.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.106.0) | https://github.com/aquaproj/aqua-registry/compare/v4.105.0...v4.106.0 #### 🎉 New Packages [#​18287](https://togithub.com/aquaproj/aqua-registry/issues/18287) [oxc-project/oxc/oxlint](https://togithub.com/oxc-project/oxc): The linter for oxc [@​CrystalMethod](https://togithub.com/CrystalMethod) [#​18297](https://togithub.com/aquaproj/aqua-registry/issues/18297) [pluveto/upgit](https://togithub.com/pluveto/upgit): Another upload hub that supports clipboard. It works well with Typora, Snipaste, VSCode [@​sheldonhull](https://togithub.com/sheldonhull) ### [`v4.105.0`](https://togithub.com/aquaproj/aqua-registry/releases/tag/v4.105.0) [Compare Source](https://togithub.com/aquap </details> --- ### Configuration 📅 **Schedule**: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMDguMCIsInVwZGF0ZWRJblZlciI6IjM3LjEwOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: mend-for-github-com[bot] <50673670+mend-for-github-com[bot]@users.noreply.github.com>
- Loading branch information