volker.raschek/dcmerge
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases 9 Wiki Activity

chore(deps): update dependency anchore/syft to v1.42.1 #146

Merged
CSRBot merged 1 commits from renovate/actions into master 2026-03-09 09:13:35 +01:00
Conversation 0 Commits 1 Files Changed 1 +1 -1
CSRBot commented 2026-03-09 08:40:28 +01:00
Collaborator
Copy Link

This PR contains the following updates:

Package Update Change
anchore/syft minor 1.41.1 -> 1.42.1

⚠️ Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

anchore/syft (anchore/syft)

v1.42.1

Compare Source

Bug Fixes
  • Use redhat as namespace for hummingbird rpms [#​4615 @​scoheb]
  • False Positive: Emacs snap package version CVE-2024-39331 [#​4485]
Additional Changes

(Full Changelog)

v1.42.0

Compare Source

Added Features
Additional Changes

(Full Changelog)

v1.41.2

Compare Source

Bug Fixes

(Full Changelog)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [anchore/syft](https://github.com/anchore/syft) | minor | `1.41.1` -> `1.42.1` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>anchore/syft (anchore/syft)</summary> ### [`v1.42.1`](https://github.com/anchore/syft/releases/tag/v1.42.1) [Compare Source](https://github.com/anchore/syft/compare/v1.42.0...v1.42.1) ##### Bug Fixes - Use redhat as namespace for hummingbird rpms \[[#&#8203;4615](https://github.com/anchore/syft/pull/4615) [@&#8203;scoheb](https://github.com/scoheb)] - False Positive: Emacs snap package version CVE-2024-39331 \[[#&#8203;4485](https://github.com/anchore/syft/issues/4485)] ##### Additional Changes - call cleanup on tmpfile and replace some io.ReadAlls with streams \[[#&#8203;4629](https://github.com/anchore/syft/pull/4629) [@&#8203;willmurphyscode](https://github.com/willmurphyscode)] - bumps go mod version to 1.25; ci takes latest patch \[[#&#8203;4628](https://github.com/anchore/syft/pull/4628) [@&#8203;spiffcs](https://github.com/spiffcs)] **[(Full Changelog)](https://github.com/anchore/syft/compare/v1.42.0...v1.42.1)** ### [`v1.42.0`](https://github.com/anchore/syft/releases/tag/v1.42.0) [Compare Source](https://github.com/anchore/syft/compare/v1.41.2...v1.42.0) ##### Added Features - Add support for scanning GGUF models from OCI registries \[[#&#8203;4335](https://github.com/anchore/syft/pull/4335) [@&#8203;spiffcs](https://github.com/spiffcs)] - yarn lockfile scan doesnt catch dev dependencies \[[#&#8203;4548](https://github.com/anchore/syft/issues/4548) [#&#8203;4549](https://github.com/anchore/syft/pull/4549) [@&#8203;rezmoss](https://github.com/rezmoss)] ##### Additional Changes - CPE detection for APK libavif to use aomedia vendor \[[#&#8203;4597](https://github.com/anchore/syft/pull/4597) [@&#8203;naag](https://github.com/naag)] **[(Full Changelog)](https://github.com/anchore/syft/compare/v1.41.2...v1.42.0)** ### [`v1.41.2`](https://github.com/anchore/syft/releases/tag/v1.41.2) [Compare Source](https://github.com/anchore/syft/compare/v1.41.1...v1.41.2) ##### Bug Fixes - further improve go binary classifier, including windows \[[#&#8203;4593](https://github.com/anchore/syft/pull/4593) [@&#8203;kzantow](https://github.com/kzantow)] - Wrong format in license \[[#&#8203;4233](https://github.com/anchore/syft/issues/4233) [#&#8203;4588](https://github.com/anchore/syft/pull/4588) [@&#8203;spiffcs](https://github.com/spiffcs)] - Cannot detect installation of Qt6 \[[#&#8203;4467](https://github.com/anchore/syft/issues/4467) [#&#8203;4550](https://github.com/anchore/syft/pull/4550) [@&#8203;rezmoss](https://github.com/rezmoss)] - bug: Syft mis-identifies binary as deb inside a snap \[[#&#8203;4486](https://github.com/anchore/syft/issues/4486) [#&#8203;4500](https://github.com/anchore/syft/pull/4500) [@&#8203;popey](https://github.com/popey)] **[(Full Changelog)](https://github.com/anchore/syft/compare/v1.41.1...v1.41.2)** </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDAuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE0MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2F1dG9tZXJnZSIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iXX0=-->
CSRBot added 1 commit 2026-03-09 08:40:28 +01:00
chore(deps): update dependency anchore/syft to v1.42.1
Some checks failed
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Has been cancelled
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Has been cancelled
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Has been cancelled
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Has been cancelled
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 44s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 25s
Details
Lint Markdown files / Run markdown linter (pull_request) Successful in 10s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 18s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 8s
Details
37c0777a24
CSRBot scheduled this pull request to auto merge when all checks succeed 2026-03-09 08:40:36 +01:00
CSRBot force-pushed renovate/actions from 37c0777a24 to 0ac7747729 2026-03-09 08:41:00 +01:00 Compare
CSRBot merged commit 17b608dfa0 into master 2026-03-09 09:13:35 +01:00
CSRBot deleted branch renovate/actions 2026-03-09 09:13:39 +01:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
CSRBot volker.raschek
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: volker.raschek/dcmerge#146
Delete Branch "renovate/actions"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?