Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: anchore/grype-db
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.39.0
Choose a base ref
...
head repository: anchore/grype-db
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.40.0
Choose a head ref
  • 9 commits
  • 27 files changed
  • 5 contributors

Commits on Aug 25, 2025

  1. chore(deps): update tools to latest versions (#645) 

    Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: wagoodman <[email protected]>
    @anchore-actions-token-generator @wagoodman
    anchore-actions-token-generator[bot] and wagoodman authored Aug 25, 2025
    Configuration menu
    Copy the full SHA
    1fcc454 View commit details
    Browse the repository at this point in the history

Commits on Aug 27, 2025

  1. chore(deps): Bump github.com/anchore/grype (#652) 

    Bumps [github.com/anchore/grype](https://github.com/anchore/grype) from 0.98.1-0.20250820131436-16595a4140b9 to 0.99.0.
- [Release notes](https://github.com/anchore/grype/releases)
- [Changelog](https://github.com/anchore/grype/blob/main/.goreleaser.yaml)
- [Commits](https://github.com/anchore/grype/commits/v0.99.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/grype
  dependency-version: 0.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Aug 27, 2025
    Configuration menu
    Copy the full SHA
    a1ea6e4 View commit details
    Browse the repository at this point in the history

Commits on Aug 28, 2025

  1. chore: publish db 2 hours later (#655) 

    There have been several DB publishing failures apparently caused by the
publish job attempting to run before the sync job finished. Therefore,
make the publish job start later relative to the sync job.

Signed-off-by: Will Murphy <[email protected]>
    @willmurphyscode
    willmurphyscode authored Aug 28, 2025
    Configuration menu
    Copy the full SHA
    7a5698e View commit details
    Browse the repository at this point in the history

Commits on Aug 29, 2025

  1. add fix available date to ghsa + add os tests (#646) 

    Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Aug 29, 2025
    Configuration menu
    Copy the full SHA
    e08bf59 View commit details
    Browse the repository at this point in the history

  2. Add fix date processing for OSV transformers (#649) 

    * add fix date processing for osv transformers

Signed-off-by: Alex Goodman <[email protected]>

* fix linting

Signed-off-by: Alex Goodman <[email protected]>

---------

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Aug 29, 2025
    Configuration menu
    Copy the full SHA
    303adf1 View commit details
    Browse the repository at this point in the history

  3. chore(deps): Bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 (#656) 

    Bumps [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) from 0.5.13 to 0.5.14.
- [Commits](ulikunitz/xz@v0.5.13...v0.5.14)

---
updated-dependencies:
- dependency-name: github.com/ulikunitz/xz
  dependency-version: 0.5.14
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Aug 29, 2025
    Configuration menu
    Copy the full SHA
    0e9428f View commit details
    Browse the repository at this point in the history

  4. chore(deps): Bump astral-sh/setup-uv in /.github/actions/bootstrap (#643 

    )

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.5.0 to 6.6.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@d9e0f98...4959332)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Aug 29, 2025
    Configuration menu
    Copy the full SHA
    2bbf851 View commit details
    Browse the repository at this point in the history

  5. Add fix date processing to NVD transformer (#651) 

    * add fix date processing to NVD transformer

Signed-off-by: Alex Goodman <[email protected]>

* address PR feedback

Signed-off-by: Alex Goodman <[email protected]>

---------

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Aug 29, 2025
    Configuration menu
    Copy the full SHA
    283415b View commit details
    Browse the repository at this point in the history

  6. add advisory date to msrc (#659) 

    Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Aug 29, 2025
    Configuration menu
    Copy the full SHA
    0a5e456 View commit details
    Browse the repository at this point in the history
Loading