chore: update dependencies by renovate[bot] · Pull Request #567 · siderolabs/extensions

renovate · 2024-12-25T18:54:47Z

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change
awslabs/soci-snapshotter		minor	`v0.13.0` → `v0.14.0`
github.com/anchore/grype	indirect	minor	`v0.111.0` → `v0.112.0`
github.com/anchore/syft	indirect	minor	`v1.42.4` → `v1.44.0`
github.com/dsseng/syft	replace	patch	`v1.42.4-0.20260415171054-31b9430f030f` → `v1.42.4`
zerotier/ZeroTierOne		patch	`1.16.0` → `1.16.2`

Release Notes

awslabs/soci-snapshotter (awslabs/soci-snapshotter)

`v0.14.0`

Compare Source

Changelog

Experimental: add experimental_parallel_pull_as_fallback config option for parallel pull mode (#1938)
Add support for concatenated gzip images (pigz, mpigz, stargz, etc.) (#1871)
Enforce monotonic checkpoints in zTOCs to avoid daemon panics (#1980)
Fix error creating zTOCs for multi-platform soci convert in standalone mode (#1947)
Fix bug where prefetched files using an absolute path would not be added on zTOC creation (#1973)

Full Changelog: awslabs/soci-snapshotter@v0.13.0...v0.14.0

These binaries were compiled using glibc 2.34.

anchore/grype (github.com/anchore/grype)

`v0.112.0`

Compare Source

Added Features

Expand ignore rules to owned sub packages of distro packages [#3368 #3326 @kzantow]

Additional Changes

update anchore dependencies [#3391 @anchore-oss-update-bot]

(Full Changelog)

`v0.111.1`

Compare Source

Bug Fixes

apply overlap by ownership removal to dynamically created relationships [#3363 @kzantow]
compare mismatched package / db versions [#3372 @kzantow]
Grype doesn't recognize debian component when "group" : "debian" is specified [#2967]
HelpURI missing information in SARIF output [#2874 #3351 @will-bates11]

(Full Changelog)

anchore/syft (github.com/anchore/syft)

`v1.44.0`

Compare Source

Added Features

Add support for linux-riscv64 [#4757 @luhenry]

Bug Fixes

Yarn lockfile cataloguing does not handle aliases [#4833 #4836 @cyphercodes]
Some snippet files are saved in the previous test directory [#4829 #4830 @witchcraze]
empty rockspec causes index out of range [#4824 #4827 @aki1770-del]
PE cataloger shows asp.net core ref assemblies using fileversion build stamp instead of productversion [#4813 #4814 @rezmoss]
Syft safeCopy silently swallows archive decompression errors [#4806 #4807 @SAY-5]

(Full Changelog)

`v1.43.0`

Compare Source

Added Features

added deno bin classifiers [#4677 @rezmoss]
Support haskell old versions [#3237 #4793 @witchcraze]
Add support for OpenLDAP binary detection [#4768 #4755 @nadimz]
Support erlang ols versions [#3235 #4766 @witchcraze]

Bug Fixes

improve redhat-release parsing fallback for RHEL clones [#4808 @westonsteimel]
fix format string in search results struct [#4775 @willmurphyscode]
prevent infinite recursion in Document.UnmarshalJSON with encoding/json/v2 [#4748 @benja-M-1]
Syft can not complete scanning golang image [#4686]
javascript-package-cataloger drops entire package.json when authors/contributors/maintainers is a single string [#4778 #4779 @yoav-orca]
pnpm lock file cataloger produces unstable output [#4648 #4765 @lawrence3699]
Linux Kernel bzImage and zImage not cataloged by linux-kernel-cataloger [#4769 #4751 @nadimz]
Support istio binary (pilot-discovery, pilot-agent) alpha,beta,rc,dev version [#4546 #4645 @witchcraze]
Scanning mounted ISO: duplicate entries [#4759]

Additional Changes

update CPE dictionary index [#4767 @anchore-oss-update-bot]

(Full Changelog)

dsseng/syft (github.com/dsseng/syft)

`v1.42.4`

Compare Source

zerotier/ZeroTierOne (zerotier/ZeroTierOne)

`v1.16.2`

Compare Source

Fixed line endings for the zttap300.inf for the Windows ARM x64 install.
- Internal updates to the central controller (CV1) including schema changes and a multi-architecture Docker build pipeline.
- Increased ZT_MAX_NETWORK_SPECIALISTS from 256 to 512 to accommodate users with large networks that exceeded the previous limit. The network config dictionary capacity was raised correspondingly.
- Resolved intermittent multi-minute delays when leaving one network and joining another under Windows.
- Compiler warning cleanup across the codebase, covering GCC 14, Clang 18, and Clang 21.

`v1.16.1`

Compare Source

Metrics collection is now disabled by default. It can be enabled via the enableMetrics setting in local.conf.
- Fix for an issue where metrics were not being recorded while running in daemon mode.
- Fix debug dumpfile being written to the root directory.
- Minor bug fixes in Mac and BSD tun/tap code.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-04-24T14:06:10Z

ℹ️ Artifact update notice

File name: internal/grype-scan/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

49 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go/auth`	`v0.18.1` -> `v0.18.2`
`cloud.google.com/go/storage`	`v1.60.0` -> `v1.61.3`
`github.com/anchore/stereoscope`	`v0.1.22` -> `v0.1.23`
`github.com/aws/aws-sdk-go-v2`	`v1.41.2` -> `v1.41.5`
`github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream`	`v1.7.4` -> `v1.7.8`
`github.com/aws/aws-sdk-go-v2/config`	`v1.32.10` -> `v1.32.12`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.19.10` -> `v1.19.12`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.18.18` -> `v1.18.20`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.4.18` -> `v1.4.21`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.18` -> `v2.7.21`
`github.com/aws/aws-sdk-go-v2/internal/ini`	`v1.8.4` -> `v1.8.6`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.4.17` -> `v1.4.22`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.13.5` -> `v1.13.7`
`github.com/aws/aws-sdk-go-v2/service/internal/checksum`	`v1.9.8` -> `v1.9.13`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.18` -> `v1.13.21`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.19.17` -> `v1.19.21`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.96.0` -> `v1.97.3`
`github.com/aws/aws-sdk-go-v2/service/signin`	`v1.0.6` -> `v1.0.8`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.30.11` -> `v1.30.13`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.35.15` -> `v1.35.17`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.41.7` -> `v1.41.9`
`github.com/aws/smithy-go`	`v1.24.1` -> `v1.24.2`
`github.com/containerd/containerd/v2`	`v2.2.1` -> `v2.2.2`
`github.com/containerd/platforms`	`v1.0.0-rc.2` -> `v1.0.0-rc.4`
`github.com/docker/cli`	`v29.3.0+incompatible` -> `v29.4.0+incompatible`
`github.com/go-git/go-git/v5`	`v5.17.0` -> `v5.18.0`
`github.com/go-jose/go-jose/v4`	`v4.1.3` -> `v4.1.4`
`github.com/google/go-containerregistry`	`v0.21.3` -> `v0.21.5`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.11` -> `v0.3.14`
`github.com/hashicorp/aws-sdk-go-base/v2`	`v2.0.0-beta.70` -> `v2.0.0-beta.72`
`github.com/hashicorp/go-getter`	`v1.8.5` -> `v1.8.6`
`github.com/moby/moby/api`	`v1.54.0` -> `v1.54.1`
`github.com/moby/moby/client`	`v0.3.0` -> `v0.4.0`
`github.com/openvex/go-vex`	`v0.2.7` -> `v0.2.8`
`github.com/package-url/packageurl-go`	`v0.1.3` -> `v0.1.5`
`go.opentelemetry.io/otel`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/metric`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/trace`	`v1.40.0` -> `v1.43.0`
`golang.org/x/crypto`	`v0.49.0` -> `v0.50.0`
`golang.org/x/mod`	`v0.34.0` -> `v0.35.0`
`golang.org/x/net`	`v0.52.0` -> `v0.53.0`
`golang.org/x/sys`	`v0.42.0` -> `v0.43.0`
`golang.org/x/term`	`v0.41.0` -> `v0.42.0`
`golang.org/x/text`	`v0.35.0` -> `v0.36.0`
`golang.org/x/tools`	`v0.43.0` -> `v0.44.0`
`google.golang.org/api`	`v0.267.0` -> `v0.271.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260203192932-546029d2fa20` -> `v0.0.0-20260226221140-a57be14db171`

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/dependencies branch 3 times, most recently from 5ba679a to 8b58a61 Compare December 31, 2024 20:44

renovate Bot force-pushed the renovate/dependencies branch 4 times, most recently from 490052d to 23754db Compare January 9, 2025 12:01

renovate Bot force-pushed the renovate/dependencies branch 6 times, most recently from c9a1639 to 5aabad4 Compare January 17, 2025 07:19

renovate Bot force-pushed the renovate/dependencies branch 5 times, most recently from 6e3a52e to 3c9057e Compare January 25, 2025 12:15

renovate Bot force-pushed the renovate/dependencies branch 5 times, most recently from 37862c0 to ade8620 Compare February 5, 2025 00:08

renovate Bot force-pushed the renovate/dependencies branch 7 times, most recently from 88a8ea0 to 849332e Compare February 12, 2025 12:33

renovate Bot force-pushed the renovate/dependencies branch 8 times, most recently from dee5df0 to 2ed628e Compare March 10, 2025 09:42

renovate Bot force-pushed the renovate/dependencies branch from 2ed628e to 8833055 Compare March 10, 2025 20:32

smira closed this Apr 2, 2025

smira deleted the renovate/dependencies branch April 2, 2025 13:51

smira restored the renovate/dependencies branch April 2, 2025 15:12

smira reopened this Apr 2, 2025

talos-bot added the status/ok-to-test label Apr 2, 2025

talos-bot added this to Planning Apr 2, 2025

github-project-automation Bot moved this to To Do in Planning Apr 2, 2025

talos-bot moved this from To Do to In Review in Planning Apr 2, 2025

smira force-pushed the renovate/dependencies branch from 8833055 to 9d222f7 Compare April 2, 2025 15:42

smira removed this from Planning Apr 2, 2025

renovate Bot force-pushed the renovate/dependencies branch 3 times, most recently from 95295d4 to 66ab4f9 Compare April 6, 2025 11:50

renovate Bot force-pushed the renovate/dependencies branch 5 times, most recently from 929d827 to 83bdebd Compare April 17, 2025 13:15

renovate Bot force-pushed the renovate/dependencies branch from 83bdebd to 1e5f791 Compare April 19, 2025 11:22

chore: update dependencies

96b0b5b

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update dependencies#567

chore: update dependencies#567
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dependencies

renovate Bot commented Dec 25, 2024 •

edited

Loading

Uh oh!

renovate Bot commented Apr 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate Bot commented Dec 25, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Added Features

Additional Changes

Bug Fixes

Added Features

Bug Fixes

Added Features

Bug Fixes

Additional Changes

Configuration

Uh oh!

renovate Bot commented Apr 24, 2026

ℹ️ Artifact update notice

File name: internal/grype-scan/go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Dec 25, 2024 •

edited

Loading