chore(deps): update dependency anchore/syft to v1.54.1 #283

Merged
CSRBot merged 1 commits from renovate/anchore-syft-1.x into master 2026-10-06 18:20:39 +02:00
Collaborator

This PR contains the following updates:

Package Update Change
anchore/syft patch 1.54.0 → 1.54.1

Release Notes

anchore/syft (anchore/syft)

v1.54.1

Compare Source

Bug Fixes
Dependencies

9 dependency changes (9 updated).

Updated (9 packages)
  • github.com/anchore/go-rpmdb v0.2.0 → v0.2.2
  • github.com/anchore/stereoscope v0.3.3 → v0.3.4
  • github.com/docker/cli v29.8.1+incompatible → v29.8.2+incompatible
  • github.com/glebarez/go-sqlite v1.20.3 → v1.23.0
  • github.com/klauspost/compress v1.20.0 → v1.20.1
  • github.com/secure-systems-lab/go-securesystemslib v0.11.0 → v0.11.1
  • github.com/sigstore/protobuf-specs v0.5.1 → v0.5.2
  • github.com/sigstore/sigstore v1.10.8 → v1.10.11
  • github.com/sylabs/sif/v2 v2.24.1 → v2.24.2

(Full Changelog)


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [anchore/syft](https://github.com/anchore/syft) | patch | `1.54.0` → `1.54.1` | --- ### Release Notes <details> <summary>anchore/syft (anchore/syft)</summary> ### [`v1.54.1`](https://github.com/anchore/syft/releases/tag/v1.54.1) [Compare Source](https://github.com/anchore/syft/compare/v1.54.0...v1.54.1) ##### Bug Fixes - resolve packages.lock dependencies deterministically \[PR [#&#8203;5210](https://github.com/anchore/syft/pull/5210) [@&#8203;spiffcs](https://github.com/spiffcs)] - Cannot produce attestation file from local podman image \[Issue [#&#8203;1664](https://github.com/anchore/syft/issues/1664)] \[PR [#&#8203;5368](https://github.com/anchore/syft/pull/5368) [@&#8203;Bru456](https://github.com/Bru456)] ##### Dependencies 9 dependency changes (9 updated). <details> <summary>Updated (9 packages)</summary> - github.com/anchore/go-rpmdb `v0.2.0` → `v0.2.2` - github.com/anchore/stereoscope `v0.3.3` → `v0.3.4` - github.com/docker/cli `v29.8.1+incompatible` → `v29.8.2+incompatible` - github.com/glebarez/go-sqlite `v1.20.3` → `v1.23.0` - github.com/klauspost/compress `v1.20.0` → `v1.20.1` - github.com/secure-systems-lab/go-securesystemslib `v0.11.0` → `v0.11.1` - github.com/sigstore/protobuf-specs `v0.5.1` → `v0.5.2` - github.com/sigstore/sigstore `v1.10.8` → `v1.10.11` - github.com/sylabs/sif/v2 `v2.24.1` → `v2.24.2` </details> **[(Full Changelog)](https://github.com/anchore/syft/compare/v1.54.0...v1.54.1)** </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTYuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjExNi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2F1dG9tZXJnZSIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iXX0=-->
CSRBot added 1 commit 2026-10-06 18:18:54 +02:00
chore(deps): update dependency anchore/syft to v1.54.1
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 30s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 34s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 17s
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 16s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 30s
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 16s
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 28s
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 28s
Lint Markdown files / Run markdown linter (pull_request) Successful in 7s
86b9b2f6e6
CSRBot scheduled this pull request to auto merge when all checks succeed 2026-10-06 18:19:01 +02:00
CSRBot merged commit 9c334dcb5b into master 2026-10-06 18:20:39 +02:00
CSRBot deleted branch renovate/anchore-syft-1.x 2026-10-06 18:20:40 +02:00
Sign in to join this conversation.