v0.27.0

Added Features

• Bump github.com/anchore/grype from 0.82.2 to 0.83.0 [#420 @dependabot]

(Full Changelog)

v0.26.0

Added Features

• Add symlink support for cache backup and restore [#415 @wagoodman]

(Full Changelog)

v0.25.1

(Full Changelog)

v0.25.0

Added Features

• Add config for inferring fixes from NVD [#411 @westonsteimel]
• Add config for CPE part filtering [#410 @wagoodman]

(Full Changelog)

v0.24.1

Additional Changes

• Use migrated grype DB distribution package [#397 @wagoodman]

(Full Changelog)

v0.24.0

Added Features

• Add JVM package version format to NVD records [#382 @wagoodman]
• azure linux 3 support [#307 @willmurphyscode]

(Full Changelog)

v0.23.4

Bug Fixes

• use new platform logic even for only one platform [#386 @willmurphyscode]

Additional Changes

• deterministically sort listing file [#369 @willmurphyscode]
• query for ID before close but compute checksum after [#368 @willmurphyscode]
• enable R2 publishing schedule [#363 @kzantow]
• Sync listing.json from R2 to S3 [#361 @wagoodman]
• Update python requirements [#360 @wagoodman]
• publish database to secondary CloudFlare R2 bucket [#359 @kzantow]
• doc: Updates for the Slack to Discourse migration [#352 @popey]

(Full Changelog)

v0.23.3

Additional Changes

• Bumps go module dependency github.com/docker/docker to suppress reporting of a false positive CVE. grype-db does not make use of the affected components from github.com/docker/docker/pkg/authorization per GO-2024-3005
• CODE_OF_CONDUCT.md [#343 @popey]

(Full Changelog)

v0.23.2

(Full Changelog)

v0.23.1

Bug Fixes

• All DB updates from Daily DB publisher uses the same built date since job #467 [#315]

Additional Changes

• enable os vulns to have version range [#317 @willmurphyscode]
• assert namespaces for ubuntu 24.04 [#312 @westonsteimel]

(Full Changelog)