volker.raschek/db-wait
1
0
Fork 0
Code Issues 1 Pull Requests Actions 3 Packages Projects Releases 3 Wiki Activity

chore(deps): update dependency anchore/syft to v1.48.0 #251

Merged
CSRBot merged 1 commits from renovate/anchore-syft-1.x into master 2026-07-16 17:06:32 +02:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
CSRBot commented 2026-07-16 17:03:54 +02:00
Collaborator
Copy Link
Copy Source

This PR contains the following updates:

Package Update Change
anchore/syft minor 1.46.0 → 1.48.0

Release Notes

anchore/syft (anchore/syft)

v1.48.0

Compare Source

Added Features
Bug Fixes
Dependencies

9 dependency changes (8 updated, 1 added).

Updated (8 packages)
  • github.com/bmatcuk/doublestar v1.3.1 → v8.8.8
  • github.com/klauspost/compress v1.18.6 → v1.19.0
  • golang.org/x/tools v0.46.0 → v0.47.0
  • modernc.org/cc/v4 v4.28.2 → v4.28.4
  • modernc.org/ccgo/v4 v4.34.0 → v4.34.4
  • modernc.org/gc/v3 v3.1.2 → v3.1.3
  • modernc.org/libc v1.72.3 → v1.73.4
  • modernc.org/sqlite v1.51.0 → v1.53.0
Added (1 package)
  • howett.net/plist v1.0.1

(Full Changelog)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [anchore/syft](https://github.com/anchore/syft) | minor | `1.46.0` → `1.48.0` | --- ### Release Notes <details> <summary>anchore/syft (anchore/syft)</summary> ### [`v1.48.0`](https://github.com/anchore/syft/releases/tag/v1.48.0) [Compare Source](https://github.com/anchore/syft/compare/v1.46.0...v1.48.0) ##### Added Features - emit dependency relationships from mix.lock \[PR [#&#8203;4985](https://github.com/anchore/syft/pull/4985) [@&#8203;cgreeno](https://github.com/cgreeno)] - add safe tensor model type to SBOM output \[PR [#&#8203;4844](https://github.com/anchore/syft/pull/4844) [@&#8203;spiffcs](https://github.com/spiffcs)] - Capture golang binary symbols \[PR [#&#8203;4988](https://github.com/anchore/syft/pull/4988) [@&#8203;spiffcs](https://github.com/spiffcs)] - Detect Ubuntu Pro/ESM extended support \[PR [#&#8203;5028](https://github.com/anchore/syft/pull/5028) [@&#8203;wagoodman](https://github.com/wagoodman)] - Add scan duration timer to Syft \[Issue [#&#8203;4587](https://github.com/anchore/syft/issues/4587)] \[PR [#&#8203;4858](https://github.com/anchore/syft/pull/4858) [@&#8203;ChrisJr404](https://github.com/ChrisJr404)] - Support for `vcpkg` \[Issue [#&#8203;2110](https://github.com/anchore/syft/issues/2110)] \[PR [#&#8203;4081](https://github.com/anchore/syft/pull/4081) [@&#8203;gabetrau](https://github.com/gabetrau)] - Add macOS `.app` cataloger \[Issue [#&#8203;4010](https://github.com/anchore/syft/issues/4010)] \[PR [#&#8203;4490](https://github.com/anchore/syft/pull/4490) [@&#8203;rezmoss](https://github.com/rezmoss)] - Add support for Kerberos 5 library cataloging \[Issue [#&#8203;4780](https://github.com/anchore/syft/issues/4780)] \[PR [#&#8203;4781](https://github.com/anchore/syft/pull/4781) [@&#8203;nadimz](https://github.com/nadimz)] - Include date of scan in results \[Issue [#&#8203;3910](https://github.com/anchore/syft/issues/3910)] ##### Bug Fixes - use printf instead of echo to fix ANSI color output \[PR [#&#8203;4978](https://github.com/anchore/syft/pull/4978) [@&#8203;Jouini-Mohamed-Chaker](https://github.com/Jouini-Mohamed-Chaker)] - Strip peer-dep suffix from deno.lock npm keys \[PR [#&#8203;5055](https://github.com/anchore/syft/pull/5055) [@&#8203;Synvoya](https://github.com/Synvoya)] - Allow more PEP440-compliant characters in python versions \[PR [#&#8203;4964](https://github.com/anchore/syft/pull/4964) [@&#8203;kzantow](https://github.com/kzantow)] - PE case-insensitive extensions (Win32/ISO 9660 compatibility) \[PR [#&#8203;4996](https://github.com/anchore/syft/pull/4996) [@&#8203;activeobd](https://github.com/activeobd)] - Fix panic parsing a rockspec comment that ends at EOF \[PR [#&#8203;5053](https://github.com/anchore/syft/pull/5053) [@&#8203;arpitjain099](https://github.com/arpitjain099)] - Fix Debian point release detection \[PR [#&#8203;4997](https://github.com/anchore/syft/pull/4997) [@&#8203;OsamaSE](https://github.com/OsamaSE)] - Fix `mix.lock` git/path deps mislabeled as hex.pm packages with bogus PURLs \[PR [#&#8203;5041](https://github.com/anchore/syft/pull/5041) [@&#8203;Synvoya](https://github.com/Synvoya)] - npm redis client generates no CPE \[Issue [#&#8203;5011](https://github.com/anchore/syft/issues/5011)] \[PR [#&#8203;5012](https://github.com/anchore/syft/pull/5012) [@&#8203;rezmoss](https://github.com/rezmoss)] - Debug Docker images are running as nonroot user \[Issue [#&#8203;4113](https://github.com/anchore/syft/issues/4113)] \[PR [#&#8203;4608](https://github.com/anchore/syft/pull/4608) [@&#8203;spiffcs](https://github.com/spiffcs)] - libxml2 gets the wrong cpe vendor \[Issue [#&#8203;5015](https://github.com/anchore/syft/issues/5015)] \[PR [#&#8203;5016](https://github.com/anchore/syft/pull/5016) [@&#8203;rezmoss](https://github.com/rezmoss)] - wrong purl for spring-ldap-core dependency \[Issue [#&#8203;4030](https://github.com/anchore/syft/issues/4030)] \[PR [#&#8203;4908](https://github.com/anchore/syft/pull/4908) [@&#8203;jonasboos](https://github.com/jonasboos)] - Swift: CVEs missed by Grype when using Syft-generated SBOMs – missing group field breaks PURL matching \[Issue [#&#8203;3961](https://github.com/anchore/syft/issues/3961)] \[PR [#&#8203;4785](https://github.com/anchore/syft/pull/4785) [@&#8203;SAY-5](https://github.com/SAY-5)] - conanfile.txt: dependencies after a comment line in \[requires] are not detected \[Issue [#&#8203;5017](https://github.com/anchore/syft/issues/5017)] \[PR [#&#8203;5020](https://github.com/anchore/syft/pull/5020) [@&#8203;jfjrh2014](https://github.com/jfjrh2014)] - dotnet cataloger can't find packages from deps.json in linux elf single-file bundles \[Issue [#&#8203;4514](https://github.com/anchore/syft/issues/4514)] \[PR [#&#8203;4517](https://github.com/anchore/syft/pull/4517) [@&#8203;rezmoss](https://github.com/rezmoss)] - Go template sprig date functions not defined \[Issue [#&#8203;2372](https://github.com/anchore/syft/issues/2372)] \[PR [#&#8203;4644](https://github.com/anchore/syft/pull/4644) [@&#8203;sputnik-mac](https://github.com/sputnik-mac)] - CycloneDX BOM contains invalid externalReferences URL from unresolved Ruby gemspec interpolation (e.g. #{s.name}) \[Issue [#&#8203;4720](https://github.com/anchore/syft/issues/4720)] \[PR [#&#8203;4782](https://github.com/anchore/syft/pull/4782) [@&#8203;SAY-5](https://github.com/SAY-5)] ##### Dependencies 9 dependency changes (8 updated, 1 added). <details> <summary>Updated (8 packages)</summary> - github.com/bmatcuk/doublestar `v1.3.1` → `v8.8.8` - github.com/klauspost/compress `v1.18.6` → `v1.19.0` - golang.org/x/tools `v0.46.0` → `v0.47.0` - modernc.org/cc/v4 `v4.28.2` → `v4.28.4` - modernc.org/ccgo/v4 `v4.34.0` → `v4.34.4` - modernc.org/gc/v3 `v3.1.2` → `v3.1.3` - modernc.org/libc `v1.72.3` → `v1.73.4` - modernc.org/sqlite `v1.51.0` → `v1.53.0` </details> <details> <summary>Added (1 package)</summary> - howett.net/plist `v1.0.1` </details> **[(Full Changelog)](https://github.com/anchore/syft/compare/v1.46.0...v1.47.1)** </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzYuMyIsInVwZGF0ZWRJblZlciI6IjQzLjEzNi4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2F1dG9tZXJnZSIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iXX0=-->
CSRBot added 1 commit 2026-07-16 17:03:55 +02:00
chore(deps): update dependency anchore/syft to v1.48.0
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 36s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 11s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 15s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 12s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 1m11s
Details
Lint Markdown files / Run markdown linter (pull_request) Successful in 6s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 25s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 26s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 26s
Details
cf9afc220e
CSRBot scheduled this pull request to auto merge when all checks succeed 2026-07-16 17:03:57 +02:00
CSRBot merged commit ac0de007aa into master 2026-07-16 17:06:32 +02:00
CSRBot deleted branch renovate/anchore-syft-1.x 2026-07-16 17:06:33 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 renovate/rebase
Rebase branch on base branch via renovate
 wontfix
This won't be fixed
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
CSRBot (CSRBot) volker.raschek (Markus Pesch)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: volker.raschek/db-wait#251