Skip to content

chore(deps): updated module github.com/anchore/syft from v1.42.1 to v1.42.3 - autoclosed#518

Closed
paketo-bot wants to merge 1 commit intomainfrom
renovate/github.com-anchore-syft-1.x
Closed

chore(deps): updated module github.com/anchore/syft from v1.42.1 to v1.42.3 - autoclosed#518
paketo-bot wants to merge 1 commit intomainfrom
renovate/github.com-anchore-syft-1.x

Conversation

@paketo-bot
Copy link
Member

@paketo-bot paketo-bot commented Mar 10, 2026

This PR contains the following updates:

Package Type Update Change
github.com/anchore/syft require patch v1.42.1v1.42.3

Release Notes

anchore/syft (github.com/anchore/syft)

v1.42.3

Compare Source

Bug Fixes
  • Missing secondary evidence for .NET dependency in ghcr.io/open-telemetry/demo:2.0.0-accounting image [#​4652]
Additional Changes

(Full Changelog)

v1.42.2

Compare Source

Bug Fixes
Additional Changes

(Full Changelog)


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@paketo-bot paketo-bot requested a review from a team as a code owner March 10, 2026 04:58
@paketo-bot paketo-bot added go semver:patch A change requiring a patch version bump labels Mar 10, 2026
@paketo-bot paketo-bot requested a review from a team as a code owner March 10, 2026 04:58
@paketo-bot
Copy link
Member Author

paketo-bot commented Mar 10, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 47 additional dependencies were updated

Details:

Package Change
github.com/docker/cli v29.2.1+incompatible -> v29.3.0+incompatible
cloud.google.com/go/auth v0.17.0 -> v0.18.1
cloud.google.com/go/monitoring v1.24.2 -> v1.24.3
cloud.google.com/go/storage v1.58.0 -> v1.60.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0 -> v0.55.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.54.0 -> v0.55.0
github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.0
github.com/anchore/stereoscope v0.1.20 -> v0.1.22
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.16 -> v1.4.17
github.com/aws/aws-sdk-go-v2/service/ecr v1.51.2 -> v1.55.3
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.2 -> v1.38.10
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.7 -> v1.9.8
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.16 -> v1.19.17
github.com/aws/aws-sdk-go-v2/service/s3 v1.95.0 -> v1.96.0
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.11.0 -> v0.12.0
github.com/charmbracelet/x/ansi v0.11.5 -> v0.11.6
github.com/clipperhouse/displaywidth v0.9.0 -> v0.10.0
github.com/clipperhouse/uax29/v2 v2.5.0 -> v2.6.0
github.com/docker/docker-credential-helpers v0.9.4 -> v0.9.5
github.com/gabriel-vasile/mimetype v1.4.12 -> v1.4.13
github.com/github/go-spdx/v2 v2.3.6 -> v2.4.0
github.com/googleapis/enterprise-certificate-proxy v0.3.7 -> v0.3.11
github.com/googleapis/gax-go/v2 v2.15.0 -> v2.17.0
github.com/gpustack/gguf-parser-go v0.23.1 -> v0.24.0
github.com/hashicorp/go-getter v1.8.4 -> v1.8.5
github.com/moby/moby/api v1.53.0 -> v1.54.0
github.com/moby/moby/client v0.2.2 -> v0.3.0
github.com/olekukonko/errors v1.1.0 -> v1.2.0
github.com/olekukonko/ll v0.1.4-0.20260115111900-9e59c2286df0 -> v0.1.6
github.com/olekukonko/tablewriter v1.1.3 -> v1.1.4
github.com/sylabs/sif/v2 v2.22.0 -> v2.24.0
github.com/wagoodman/go-progress v0.0.0-20230925121702-07e42b3cdba0 -> v0.0.0-20260303201901-10176f79b2c0
golang.org/x/crypto v0.48.0 -> v0.49.0
golang.org/x/mod v0.33.0 -> v0.34.0
golang.org/x/net v0.51.0 -> v0.52.0
golang.org/x/oauth2 v0.35.0 -> v0.36.0
golang.org/x/sync v0.19.0 -> v0.20.0
golang.org/x/sys v0.41.0 -> v0.42.0
golang.org/x/term v0.40.0 -> v0.41.0
golang.org/x/text v0.34.0 -> v0.35.0
golang.org/x/time v0.14.0 -> v0.15.0
golang.org/x/tools v0.42.0 -> v0.43.0
google.golang.org/api v0.256.0 -> v0.267.0
google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 -> v0.0.0-20260128011058-8636f8732409
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260203192932-546029d2fa20
google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260203192932-546029d2fa20
modernc.org/sqlite v1.44.3 -> v1.46.1

@paketo-bot paketo-bot force-pushed the renovate/github.com-anchore-syft-1.x branch from b2498dd to 7785de2 Compare March 20, 2026 05:02
@paketo-bot paketo-bot changed the title chore(deps): updated module github.com/anchore/syft from v1.42.1 to v1.42.2 chore(deps): updated module github.com/anchore/syft from v1.42.1 to v1.42.3 Mar 20, 2026
@paketo-bot paketo-bot changed the title chore(deps): updated module github.com/anchore/syft from v1.42.1 to v1.42.3 chore(deps): updated module github.com/anchore/syft from v1.42.1 to v1.42.3 - autoclosed Mar 21, 2026
@paketo-bot paketo-bot closed this Mar 21, 2026
@paketo-bot paketo-bot deleted the renovate/github.com-anchore-syft-1.x branch March 21, 2026 04:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies go semver:patch A change requiring a patch version bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant