chore(deps): update dependency anchore/syft to v1.49.0 #255

Merged
CSRBot merged 1 commits from renovate/anchore-syft-1.x into master 2026-07-21 17:08:06 +02:00
Collaborator

This PR contains the following updates:

Package Update Change
anchore/syft minor 1.48.01.49.0

Release Notes

anchore/syft (anchore/syft)

v1.49.0

Compare Source

Added Features
Bug Fixes
Dependencies

16 dependency changes (16 updated).

Updated (16 packages)
  • github.com/anchore/go-rpmdb v0.1.0v0.2.0
  • github.com/anchore/stereoscope v0.2.2v0.3.0
  • github.com/containerd/containerd/v2 v2.3.2v2.3.3
  • github.com/docker/cli v29.5.3+incompatiblev29.6.1+incompatible
  • github.com/gkampitakis/go-snaps v0.5.22v0.5.23
  • github.com/moby/moby/api v1.54.2v1.55.0
  • github.com/moby/moby/client v0.4.1v0.5.0
  • github.com/pelletier/go-toml/v2 v2.3.1v2.4.3
  • golang.org/x/crypto v0.53.0v0.54.0
  • golang.org/x/mod v0.37.0v0.38.0
  • golang.org/x/net v0.56.0v0.57.0
  • golang.org/x/sync v0.21.0v0.22.0
  • golang.org/x/sys v0.46.0v0.47.0
  • golang.org/x/term v0.44.0v0.45.0
  • golang.org/x/text v0.38.0v0.40.0
  • golang.org/x/tools v0.47.0v0.48.0

(Full Changelog)


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [anchore/syft](https://github.com/anchore/syft) | minor | `1.48.0` → `1.49.0` | --- ### Release Notes <details> <summary>anchore/syft (anchore/syft)</summary> ### [`v1.49.0`](https://github.com/anchore/syft/releases/tag/v1.49.0) [Compare Source](https://github.com/anchore/syft/compare/v1.48.0...v1.49.0) ##### Added Features - Support for `application/vnd.oci.image.index.v1+json` manifests in root OCI layout \[Issue [#&#8203;1545](https://github.com/anchore/syft/issues/1545)] \[PR [#&#8203;5074](https://github.com/anchore/syft/pull/5074) [@&#8203;jasonpaulos](https://github.com/jasonpaulos)] ##### Bug Fixes - Misinterpretation of Multiple replace Directives in Golang \[Issue [#&#8203;2721](https://github.com/anchore/syft/issues/2721)] \[PR [#&#8203;5069](https://github.com/anchore/syft/pull/5069) [@&#8203;ychampion](https://github.com/ychampion)] ##### Dependencies 16 dependency changes (16 updated). <details> <summary>Updated (16 packages)</summary> - github.com/anchore/go-rpmdb `v0.1.0` → `v0.2.0` - github.com/anchore/stereoscope `v0.2.2` → `v0.3.0` - github.com/containerd/containerd/v2 `v2.3.2` → `v2.3.3` - github.com/docker/cli `v29.5.3+incompatible` → `v29.6.1+incompatible` - github.com/gkampitakis/go-snaps `v0.5.22` → `v0.5.23` - github.com/moby/moby/api `v1.54.2` → `v1.55.0` - github.com/moby/moby/client `v0.4.1` → `v0.5.0` - github.com/pelletier/go-toml/v2 `v2.3.1` → `v2.4.3` - golang.org/x/crypto `v0.53.0` → `v0.54.0` - golang.org/x/mod `v0.37.0` → `v0.38.0` - golang.org/x/net `v0.56.0` → `v0.57.0` - golang.org/x/sync `v0.21.0` → `v0.22.0` - golang.org/x/sys `v0.46.0` → `v0.47.0` - golang.org/x/term `v0.44.0` → `v0.45.0` - golang.org/x/text `v0.38.0` → `v0.40.0` - golang.org/x/tools `v0.47.0` → `v0.48.0` </details> **[(Full Changelog)](https://github.com/anchore/syft/compare/v1.48.0...v1.49.0)** </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzIuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2F1dG9tZXJnZSIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iXX0=-->
CSRBot added 1 commit 2026-07-21 17:05:48 +02:00
chore(deps): update dependency anchore/syft to v1.49.0
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 20s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 32s
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 17s
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 36s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 35s
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 15s
Lint Markdown files / Run markdown linter (pull_request) Successful in 8s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 38s
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 27s
f44cf631a1
CSRBot scheduled this pull request to auto merge when all checks succeed 2026-07-21 17:05:50 +02:00
CSRBot merged commit de8678434a into master 2026-07-21 17:08:06 +02:00
CSRBot deleted branch renovate/anchore-syft-1.x 2026-07-21 17:08:07 +02:00
Sign in to join this conversation.