-
Notifications
You must be signed in to change notification settings - Fork 30
Comparing changes
Open a pull request
base repository: anchore/grype-db
base: v0.47.1
head repository: anchore/grype-db
compare: main
- 8 commits
- 10 files changed
- 4 contributors
Commits on Dec 10, 2025
-
ci: increase runner size and ubuntu concurrency (#762)
* ci: increase runner size and ubuntu concurrency The ubuntu provider is consistently timing out. It should be rewritten to use a more performant approach, but first today's Grype DB needs to be published. Temporarily raise the amount of compute available to the daily data sync jobs and increase the amount concurrency requested of the vunnel ubuntu provider. Signed-off-by: Will Murphy <[email protected]> * ci: run highly concurrent providers (ubuntu) on big runner The ubuntu provider does a ton of local file I/O and can be meaningfully sped up by using the a large multi core runner and a higher number of workers. However many providers are essentially single threaded and do not benefit from the multicore runner. Therfore, rearrange some yaml to put highly concurrent providers (today just Ubuntu) on a bit multi core runner without paying to put the rest of them on the big multi core runner. Signed-off-by: Will Murphy <[email protected]> * revert vunnel concurrency change Signed-off-by: Will Murphy <[email protected]> * ci: prevent runner stealing in matrix jobs Add job-index to runs-on labels for matrix strategy jobs to ensure deterministic job-to-runner assignment. Without unique labels, runners launched for one matrix job could pick up a different job with matching labels, causing unpredictable scheduling. Affected jobs: - daily-data-sync.yaml: update-provider-multicore, update-provider - daily-db-publisher-r2.yaml: generate-and-publish-dbs - validations.yaml: Acceptance-Test See: https://runs-on.com/guides/troubleshoot/#runner-stealing Signed-off-by: Will Murphy <[email protected]> --------- Signed-off-by: Will Murphy <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 1780d79 - Browse repository at this point
Copy the full SHA 1780d79View commit details
Commits on Dec 16, 2025
-
chore(deps): Bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (
#777) Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 7.0.11 to 8.0.0. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@22a9089...98357b1) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 01fffc3 - Browse repository at this point
Copy the full SHA 01fffc3View commit details -
chore(deps): Bump actions/checkout from 5.0.1 to 6.0.1 (#779)
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.1 to 6.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v5.0.1...8e8c483) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for ffc727e - Browse repository at this point
Copy the full SHA ffc727eView commit details -
chore(deps): Bump actions/cache from 4.3.0 to 5.0.1 (#783)
Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 5.0.1. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0057852...9255dc7) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 75ce0e4 - Browse repository at this point
Copy the full SHA 75ce0e4View commit details -
chore(deps): Bump actions/cache in /.github/actions/bootstrap (#784)
Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 5.0.1. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0057852...9255dc7) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 9493240 - Browse repository at this point
Copy the full SHA 9493240View commit details -
chore(deps): Bump astral-sh/setup-uv in /.github/actions/bootstrap (#785
) Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 7.1.5 to 7.1.6. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@ed21f2f...681c641) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 7.1.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for ab604fa - Browse repository at this point
Copy the full SHA ab604faView commit details
Commits on Dec 22, 2025
-
chore(deps): update tools to latest versions (#780)
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: wagoodman <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 2a3ac53 - Browse repository at this point
Copy the full SHA 2a3ac53View commit details
Commits on Dec 23, 2025
-
chore(deps): Bump github.com/anchore/grype from 0.104.2 to 0.104.3 (#787
) Bumps [github.com/anchore/grype](https://github.com/anchore/grype) from 0.104.2 to 0.104.3. - [Release notes](https://github.com/anchore/grype/releases) - [Changelog](https://github.com/anchore/grype/blob/main/RELEASE.md) - [Commits](anchore/grype@v0.104.2...v0.104.3) --- updated-dependencies: - dependency-name: github.com/anchore/grype dependency-version: 0.104.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 19ed1b8 - Browse repository at this point
Copy the full SHA 19ed1b8View commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v0.47.1...main