v0.42.1

(Full Changelog)

v0.42.0

Added Features

• Add support for annotated openvex [#685 @wagoodman]

(Full Changelog)

v0.41.0

Added Features

• Add unaffected package and CPE stores [#648 @wagoodman]
• add vex as valid vulnerability format [#634 @crosleyzack]

Bug Fixes

• Use results db explicitly in build [#683 @wagoodman]
• Validate only the results.db file [#682 @wagoodman]
• Some APK vulnerabilities are no longer reported by grype in the latest grype-db [#681]

(Full Changelog)

v0.40.0

Added Features

• Add fix date processing for OSV transformers [#649 @wagoodman]
• Add fix date processing to NVD transformer [#651 @wagoodman]
• Add fix available date to GHSA entries [#646 @wagoodman]

(Full Changelog)

v0.39.0

Added Features

• Add fix availability data for OS providers [#629 @wagoodman]

Bug Fixes

• recognize jvm versions at DB build time [#647 @willmurphyscode]

Additional Changes

• move to pyyaml-include 2.x, keep legacy CWD-relative !include [#642 @jamestexas]

(Full Changelog)

v0.38.0

Added Features

• Add custom compressor commands to the config [#635 @wagoodman]

(Full Changelog)

v0.37.0

Added Features

• Maximize compression for gzip [#632 @wagoodman]

(Full Changelog)

v0.36.1

Bug Fixes

• update generated mapping code for trixie [#626 @anchore-actions-token-generator]

(Full Changelog)

v0.36.0

Added Features

• move debian 13 (trixie) to released and debian 14 (forky) to testing/sid/unstable [#628 @westonsteimel]

Additional Changes

• migrate golangci-lint to v2 [#614 @cpanato]
• skip main repo workflows in forks [#618 @kzantow]

(Full Changelog)

v0.35.0

Added Features

• Add support for RedHat EUS data [#540 @willmurphyscode]

Bug Fixes

• CVE-2004-0377 false positive [#611 #609 @westonsteimel]

(Full Changelog)