Added Features
- detect native Go FIPS 140 mode in binaries [PR #5155 @gunnypatel]
- add extended-stdlib scope and module patterns for symbol capture [PR #5154 @wagoodman]
Bug Fixes
- Cleanup snap temporary directories [PR #5117 @spiffcs]
- add correct CPE vendor/product candidates for Git for Windows PE binary [PR #5156 @westonsteimel]
- javascript-package-cataloger creates phantom @unknown packages for subpath or export-map stub package.json files [Issue #5118]
- Syft generates incorrect PURLs for legacy JARs missing Maven metadata, causing Grype false negatives [Issue #4598] [PR #5146 @ankit090701]
- When scanning an image, syft only reports one file per set of hardlinks, leading to wrong SPDX packageVerificationCode [Issue #5019] [PR #5029 @wagoodman]
- Support deno binary latest and some old versions [Issue #5057] [PR #5084 @ychampion]
- Update install methods in README.md [Issue #3198]
Dependencies
9 dependency changes (9 updated). 2 vulnerabilities remediated.
🟢 Remediated (2)
- GHSA-hc8v-wwc9-vgxm (High) — github.com/go-git/go-git/v5
- GHSA-qgq7-7hm3-q39j (Medium) — github.com/go-git/go-git/v5
Updated (9 packages)
- github.com/diskfs/go-diskfs v1.9.3 → v1.9.4
- github.com/go-git/go-billy/v5 v5.9.0 → v5.9.1
- github.com/go-git/go-git/v5 v5.19.1 → v5.19.2 (🟢 remediated GHSA-hc8v-wwc9-vgxm, GHSA-qgq7-7hm3-q39j)
- github.com/jedib0t/go-pretty/v6 v6.8.1 → v6.8.3
- github.com/klauspost/compress v1.19.0 → v1.19.1
- github.com/magiconair/properties v1.8.10 → v1.18.11
- github.com/ulikunitz/xz v0.5.15 → v0.5.16
- go.yaml.in/yaml/v3 v3.0.4 → v3.0.5
- modernc.org/sqlite v1.54.0 → v1.55.0
(Full Changelog)
