volker.raschek/db-wait
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 3 Wiki Activity

chore(deps): update dependency anchore/syft to v1.50.0 #261

Merged
CSRBot merged 1 commits from renovate/anchore-syft-1.x into master 2026-07-28 20:10:47 +02:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
CSRBot commented 2026-07-28 20:05:54 +02:00
Collaborator
Copy Link
Copy Source

This PR contains the following updates:

Package Update Change
anchore/syft minor 1.49.0 → 1.50.0

Release Notes

anchore/syft (anchore/syft)

v1.50.0

Compare Source

Added Features
Bug Fixes
Additional Changes
Dependencies

14 dependency changes (14 updated). 1 vulnerability remediated.

🟢 Remediated (1)

Updated (14 packages)
  • github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 → v1.32.0
  • github.com/cncf/xds/go v0.0.0-ee656c7 → v0.0.0-dba9d58
  • github.com/envoyproxy/go-control-plane/envoy v1.36.0 → v1.37.0
  • github.com/envoyproxy/protoc-gen-validate v1.3.0 → v1.3.3
  • github.com/gpustack/gguf-parser-go v0.24.1 → v0.25.0
  • go.opentelemetry.io/contrib/detectors/gcp v1.39.0 → v1.43.0
  • google.golang.org/genproto/googleapis/api v0.0.0-9d38bb4 → v0.0.0-afd174a
  • google.golang.org/genproto/googleapis/rpc v0.0.0-6f92a3b → v0.0.0-afd174a
  • google.golang.org/grpc v1.80.0 → v1.82.1 (🟢 remediated GHSA-hrxh-6v49-42gf)
  • modernc.org/cc/v4 v4.28.4 → v4.29.0
  • modernc.org/ccgo/v4 v4.34.4 → v4.34.6
  • modernc.org/gc/v3 v3.1.3 → v3.1.4
  • modernc.org/libc v1.73.4 → v1.74.1
  • modernc.org/sqlite v1.53.0 → v1.54.0

(Full Changelog)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [anchore/syft](https://github.com/anchore/syft) | minor | `1.49.0` → `1.50.0` | --- ### Release Notes <details> <summary>anchore/syft (anchore/syft)</summary> ### [`v1.50.0`](https://github.com/anchore/syft/releases/tag/v1.50.0) [Compare Source](https://github.com/anchore/syft/compare/v1.49.0...v1.50.0) ##### Added Features - Add bun binary classifier \[PR [#&#8203;5103](https://github.com/anchore/syft/pull/5103) [@&#8203;rezmoss](https://github.com/rezmoss)] ##### Bug Fixes - Fix Cargo PURLs for local workspace packages \[PR [#&#8203;5105](https://github.com/anchore/syft/pull/5105) [@&#8203;3nesdeniz](https://github.com/3nesdeniz)] - Decode golang symbols \[PR [#&#8203;5089](https://github.com/anchore/syft/pull/5089) [@&#8203;wagoodman](https://github.com/wagoodman)] - CPE vendor field incorrectly includes publisher URL for SUSE RPM packages \[Issue [#&#8203;5073](https://github.com/anchore/syft/issues/5073)] \[PR [#&#8203;5081](https://github.com/anchore/syft/pull/5081) [@&#8203;Eljees](https://github.com/Eljees)] - apk-db-cataloger silently drops the entire APK catalog when one installed-DB field exceeds 64 KB \[Issue [#&#8203;5094](https://github.com/anchore/syft/issues/5094)] \[PR [#&#8203;5100](https://github.com/anchore/syft/pull/5100) [@&#8203;cyphercodes](https://github.com/cyphercodes)] ##### Additional Changes - package-lock.json v1: nested dependencies entries are never cataloged (flat top-level iteration only) \[Issue [#&#8203;5101](https://github.com/anchore/syft/issues/5101)] \[PR [#&#8203;5108](https://github.com/anchore/syft/pull/5108) [@&#8203;Eljees](https://github.com/Eljees)] - consider vendored golang packages in module attribution \[PR [#&#8203;5093](https://github.com/anchore/syft/pull/5093) [@&#8203;kzantow](https://github.com/kzantow)] - Fix inverted bounds check dropping every Erlang string with a backslash \[PR [#&#8203;5110](https://github.com/anchore/syft/pull/5110) [@&#8203;arpitjain099](https://github.com/arpitjain099)] ##### Dependencies 14 dependency changes (14 updated). 1 vulnerability remediated. **🟢 Remediated (1)** - [GHSA-hrxh-6v49-42gf](https://github.com/advisories/GHSA-hrxh-6v49-42gf) (High) — google.golang.org/grpc <details> <summary>Updated (14 packages)</summary> - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp `v1.31.0` → `v1.32.0` - github.com/cncf/xds/go `v0.0.0-ee656c7` → `v0.0.0-dba9d58` - github.com/envoyproxy/go-control-plane/envoy `v1.36.0` → `v1.37.0` - github.com/envoyproxy/protoc-gen-validate `v1.3.0` → `v1.3.3` - github.com/gpustack/gguf-parser-go `v0.24.1` → `v0.25.0` - go.opentelemetry.io/contrib/detectors/gcp `v1.39.0` → `v1.43.0` - google.golang.org/genproto/googleapis/api `v0.0.0-9d38bb4` → `v0.0.0-afd174a` - google.golang.org/genproto/googleapis/rpc `v0.0.0-6f92a3b` → `v0.0.0-afd174a` - google.golang.org/grpc `v1.80.0` → `v1.82.1` **(🟢 remediated [GHSA-hrxh-6v49-42gf](https://github.com/advisories/GHSA-hrxh-6v49-42gf))** - modernc.org/cc/v4 `v4.28.4` → `v4.29.0` - modernc.org/ccgo/v4 `v4.34.4` → `v4.34.6` - modernc.org/gc/v3 `v3.1.3` → `v3.1.4` - modernc.org/libc `v1.73.4` → `v1.74.1` - modernc.org/sqlite `v1.53.0` → `v1.54.0` </details> **[(Full Changelog)](https://github.com/anchore/syft/compare/v1.49.0...v1.50.0)** </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODUuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4NS4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2F1dG9tZXJnZSIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iXX0=-->
CSRBot added 1 commit 2026-07-28 20:05:55 +02:00
chore(deps): update dependency anchore/syft to v1.50.0
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 18s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 17s
Details
Lint Markdown files / Run markdown linter (pull_request) Successful in 11s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 17s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 29s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 18s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 30s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 26s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 26s
Details
1981d6748e
CSRBot scheduled this pull request to auto merge when all checks succeed 2026-07-28 20:05:59 +02:00
CSRBot merged commit 8f847de78c into master 2026-07-28 20:10:47 +02:00
CSRBot deleted branch renovate/anchore-syft-1.x 2026-07-28 20:10:51 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 renovate/rebase
Rebase branch on base branch via renovate
 wontfix
This won't be fixed
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
CSRBot (CSRBot) volker.raschek (Markus Pesch)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: volker.raschek/db-wait#261