v0.47.1

Additional Changes

• allow more time for ubuntu runner [#767 @willmurphyscode]

(Full Changelog)

v0.47.0

Added Features

• Sort CVSS severities by version when there is a tie [#750 @wagoodman]

Bug Fixes

• increase max compression single file size to 25 GB [#758 @westonsteimel]

(Full Changelog)

v0.46.2

Bug Fixes

• do not require shell environment for subprocess [#727 @jamestexas]
• Duplicated vulnerability external refs in DB search [#742 #744 @willmurphyscode]

(Full Changelog)

v0.46.1

(Full Changelog)

v0.46.0

Added Features

• enable emitting unaffected packages for AlmaLinux RPMs from Alma OSV data [#686 @willmurphyscode]

Additional Changes

• remove io.ReadAll in tarutils [#718 @willmurphyscode]
• Switch to using runs-on [#720 @wagoodman]

(Full Changelog)

v0.45.0

Added Features

• write CWEs into database [#705 @willmurphyscode]
• Add GRYPE_DB_EXECUTABLE_PATH support to bypass Go build requirement [#699 @jamestexas]
• Add weaknesses information from NVD [#644]

Bug Fixes

• Test fixtures with colons in filenames break go get [#714 #265 @kzantow]

(Full Changelog)

v0.44.0

Added Features

• Enable the chainguard-libraries provider [#695 @wagoodman]

(Full Changelog)

v0.43.0

Added Features

• Fail DB build (optionally) on missing fix date [#694 @wagoodman]

(Full Changelog)

v0.42.1

(Full Changelog)

v0.42.0

Added Features

• Add support for annotated openvex [#685 @wagoodman]

(Full Changelog)