·
28 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
Bug Fixes
- drop cpe from gguf [#4383 @spiffcs]
- emit lua rockspec dependencies in metadata [#4376 @willmurphyscode]
- Invalid SBOMs are created when GO replace directive is used [#4415 #4419 @VictorHuu]
- Incorrect CPE for Vercel's Next js [#4443 #4450 @willmurphyscode]
- v1.38.0 generates empty sbom for tgz sources [#4416 #4421 @VictorHuu]
- Syft: The dependency graph does not include all Requires-Dist relationships defined in the package’s METADATA file [#4401 #4408 @willmurphyscode]
Contributors
willmurphyscode, spiffcs, and VictorHuu