v0.24.0

What's Changed

• scan: Search for remote private packages too by @jonjohnsonjr in #1184
• fix(scan): panic on nil cleanup by @luhring in #1189
• wolfictl/lint: add linter to validate update.schedule.period by @rawlingsj in #1191
• Report cycles better when calling Targets by @jonjohnsonjr in #1195
• support apk.cgr.dev for enterprise and extras by @imjasonh in #1194
• update fetch apkindex to be able to fetch from apk.cgr.dev by @cpanato in #1197
• fix(adv): validate fixed versions only for new data by @luhring in #1185
• support scanning private apk.cgr.dev package repositories by @philroche in #1196

New Contributors

• @philroche made their first contribution in #1196

Full Changelog: v0.23.6...v0.24.0

v0.23.6

What's Changed

• build(deps): bump chainguard.dev/melange from 0.11.5 to 0.11.6 by @dependabot in #1168
• build(deps): bump github.com/charmbracelet/bubbles from 0.19.0 to 0.20.0 by @dependabot in #1167
• go 1.23.1 by @k4leung4 in #1169
• Consider subpackage runtime deps for graph by @jonjohnsonjr in #1150
• build(deps): bump step-security/harden-runner from 2.9.1 to 2.10.1 by @dependabot in #1170
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.29.0 to 1.30.0 by @dependabot in #1171
• build(deps): bump github.com/google/osv-scanner from 1.8.4 to 1.8.5 by @dependabot in #1174
• scan: Set auth for remote packages sometimes by @jonjohnsonjr in #1176
• Improve error message for duplicate package names by @jonjohnsonjr in #1177
• Bump apko, fix breaking change by @jonjohnsonjr in #1178
• build(deps): bump github.com/charmbracelet/bubbletea from 1.1.0 to 1.1.1 by @dependabot in #1180
• pin dep for grype by @k4leung4 in #1182
• Upgrade melange by @xnox in #1183
• build(deps): bump github.com/anchore/grype from 0.80.0 to 0.80.1 by @dependabot in #1179

Full Changelog: v0.23.5...v0.23.6

v0.23.4

What's Changed

• feat(adv): add basic logging to osv data generation by @luhring in #1154
• feat(adv): validate adv ID uniqueness within an index by @luhring in #1155
• feat(adv): command to generate a new CGA ID by @luhring in #1156
• update golang.org/x/vuln to 1.1.3 by @k4leung4 in #1157
• dont flag git updates as errors by @ajayk in #1158
• Removing fixed-version-present-and-first logic and test by @jamie-albert in #1159
• build(deps): bump golang.org/x/text from 0.17.0 to 0.18.0 by @dependabot in #1160
• build(deps): bump golang.org/x/oauth2 from 0.22.0 to 0.23.0 by @dependabot in #1162
• build(deps): bump golang.org/x/term from 0.23.0 to 0.24.0 by @dependabot in #1161
• build(deps): bump github.com/anchore/grype from 0.79.6 to 0.80.0 by @dependabot in #1138
• chore: Bump melange to v0.11.4 by @EyeCantCU in #1163

New Contributors

• @jamie-albert made their first contribution in #1159

Full Changelog: v0.23.3...v0.23.4