v0.38.6

What's Changed

• chore(deps): update dependencies and integration by @shino in #2443
• fix(contrib/trivy): O(N²) library duplication in trivy-to-vuls ClassLangPkg handling by @Copilot in #2450
• feat(detector/vuls2): amazon linux by vuls2 by @shino in #2441

New Contributors

• @Copilot made their first contribution in #2450

Full Changelog: v0.38.5...v0.38.6

v0.38.5

Changelog

• b87a83a fix(scanner/windows): ignore unexpected lines (#2440)
• a1314fc feat(detector/vuls2): SUSE by vuls2 (#2284)

v0.38.4

Changelog

• 9efad2a chore(deps): downgrade github.com/package-url/packageurl-go v0.1.4 => v0.1.3 (#2438)

v0.38.3

Changelog

• 6d9ee53 chore(deps): bump the others group across 1 directory with 7 updates (#2434)
• c81fc7f chore(deps): update trivy (#2437)
• 43e2b65 chore(deps): bump go.opentelemetry.io/otel/sdk (#2436)
• 101d937 chore(deps): bump github.com/cloudflare/circl (#2433)
• 6f67f57 fix(config/os): update amazon linux 2023 EOL (#2432)
• 115ebfc refactor(scanner/windows): check invalid property, scanner err (#2431)

v0.38.2

Changelog

• b8762b3 fix(scanner/windows): revert "check invalid property, scanner err (#2419)" (#2428)

v0.38.1

Changelog

• e9134f3 chore(deps): bump the others group with 2 updates (#2417)
• 64ca0ce fix(scanner/debian): handle missing pkgs in checkrestart, improve parse (#2426)
• 1f3a651 fix(report): sort datetime dir in descending order (#2425)
• 5eff007 chore(deps): bump filippo.io/edwards25519 (#2420)
• 7ee28be fix(scanner/base): set abspath to LockfilePath (#2421)
• 44a04b7 refactor(scanner/windows): check invalid property, scanner err (#2419)
• 2881c79 feat(config/os): update eol (#2418)
• 94ae89b chore(deps): updates golang from 98e6cff to d4c4845 (#2416)
• 205cb6d build(deps): bump go 1.26 (#2415)

v0.38.0

Changelog

• c5cdf1c fix(trivy-to-vuls): get exact LockfilePath (#2414)
• 7111680 feat(scanner/windows): add vendor field for windows package (#2412)
• 4140e93 chore(deps): bump github.com/go-git/go-git/v5 (#2413)
• 1ac6f1d chore(deps): bump the all group across 2 directories with 2 updates (#2401)
• 74b2959 chore(deps): bump github.com/aquasecurity/trivy in the trivy group (#2410)
• c70333f chore(deps): bump golang.org/x/oauth2 in the others group (#2411)
• cf4e1fe feat(trivy-to-vuls): add Dev flag to library conversion (#2408)
• 59e3e22 fix(ci): use AdityaGarg8/remove-unwanted-software@v5 (#2409)
• a0bc223 feat(scanner) add dev flag in library (#2405)
• 23948a0 chore(ci/test): add go mod tidy check (#2406)
• 288ca54 chore(deps): update dictionaries (#2404)
• 80cb3e4 chore(deps): bump github.com/CycloneDX/cyclonedx-go in the others group (#2403)
• ac0d54f chore(deps): bump the trivy group with 2 updates (#2402)
• 28af642 chore(deps): bump the others group across 1 directory with 2 updates (#2399)
• 1063df5 chore(deps): bump the all group with 2 updates (#2400)
• 6fd00ee chore(deps/vuls2): update vuls2 and optimize kernel package name handling (#2396)
• e5999be feat(libarary) add include dev dependencies (#2394)
• ce2855c chore(deps): bump the others group across 1 directory with 12 updates (#2393)
• 266f9db chore(deps): bump the all group with 5 updates (#2383)
• ba46dd3 chore(deps): bump the all group across 2 directories with 1 update (#2384)
• 3a8006d chore(deps/vuls2): update vuls2 (#2389)
• d0f2d68 chore(deps): bump github.com/aquasecurity/trivy in the trivy group (#2380)
• bd43015 refactor(scanner/rpm): remove warn when output is only y/n prompt (#2390)
• 7ed7f8d chore!(ci/release): update cosign to v3 (#2388)
• 781977d chore(ci): update goreleaser to remove deprecated params (#2387)
• 2caede1 feat!(detector): lower the confidence of VulnCheck (#2385)
• fc5344c fix(model/CveContents): initialize CveContents to avoid nil map (#2379)
• c29a32f chore(deps): bump go-exploitdb (#2377)
• 3b796c8 feat(cwe): add 2023, 2024, 2025 top 25 (#2375)

v0.37.0

Changelog

• a27a339 chore(deps): update dictionaries (#2373)
• 064541c chore(deps): bump the others group with 2 updates (#2372)
• c440fd5 chore(deps): bump github.com/aquasecurity/trivy from 0.67.2 to 0.68.0 in the trivy group (#2370)
• 93df2a8 chore(deps): bump the all group with 2 updates (#2366)
• 3d0f941 chore(deps): bump the others group across 1 directory with 8 updates (#2371)
• d8bff91 feat(detector/cve): support euvd (#2364)
• 3f82b46 chore(deps): bump the all group across 2 directories with 2 updates (#2367)

v0.36.3

Changelog

• 47c6cec fix(scanner/redhatbase): update procPathToFQPN (#2363)
• 340fbb2 chore(deps): bump go-cve-dictionary version (#2362)
• 1c2a238 chore(deps): update vuls2 to json/v2 adaptation (#2359)
• 3b1e482 fix(detector/vuls2): compare CVSSv3 (#2360)
• 14d5c9a fix(ci/codeql): add json/v2 env var (#2358)
• 037514a chore(deps): bump the others group across 1 directory with 7 updates (#2357)
• f5a29e7 chore(deps): bump the go_modules group across 1 directory with 2 updates (#2356)
• 2c8a955 chore(deps): bump the all group with 2 updates (#2351)
• 03fbd9c feat(scanner/windows): add Windows 11 25H2 (#2354)
• e790ec5 fix(contrib/future-vuls): add O_TRUNC flag (#2352)
• 9714fdb chore(deps): bump the trivy group with 2 updates (#2334)
• 2e83bf4 chore(deps): revert the revert of docker cooldown (#2317) (#2350)

v0.36.2

Changelog

• 6efa3f0 fix(ci/goreleaser): pin cosign version to v2.6.1 (#2346)