v0.45.0

Added Features

• write CWEs into database [#705 @willmurphyscode]
• Add GRYPE_DB_EXECUTABLE_PATH support to bypass Go build requirement [#699 @jamestexas]
• Add weaknesses information from NVD [#644]

Bug Fixes

• Test fixtures with colons in filenames break go get [#714 #265 @kzantow]

(Full Changelog)

v0.44.0

Added Features

• Enable the chainguard-libraries provider [#695 @wagoodman]

(Full Changelog)

v0.43.0

Added Features

• Fail DB build (optionally) on missing fix date [#694 @wagoodman]

(Full Changelog)

v0.42.1

(Full Changelog)

v0.42.0

Added Features

• Add support for annotated openvex [#685 @wagoodman]

(Full Changelog)

v0.41.0

Added Features

• Add unaffected package and CPE stores [#648 @wagoodman]
• add vex as valid vulnerability format [#634 @crosleyzack]

Bug Fixes

• Use results db explicitly in build [#683 @wagoodman]
• Validate only the results.db file [#682 @wagoodman]
• Some APK vulnerabilities are no longer reported by grype in the latest grype-db [#681]

(Full Changelog)

v0.40.0

Added Features

• Add fix date processing for OSV transformers [#649 @wagoodman]
• Add fix date processing to NVD transformer [#651 @wagoodman]
• Add fix available date to GHSA entries [#646 @wagoodman]

(Full Changelog)

v0.39.0

Added Features

• Add fix availability data for OS providers [#629 @wagoodman]

Bug Fixes

• recognize jvm versions at DB build time [#647 @willmurphyscode]

Additional Changes

• move to pyyaml-include 2.x, keep legacy CWD-relative !include [#642 @jamestexas]

(Full Changelog)

v0.38.0

Added Features

• Add custom compressor commands to the config [#635 @wagoodman]

(Full Changelog)

v0.37.0

Added Features

• Maximize compression for gzip [#632 @wagoodman]

(Full Changelog)