{"id":34753,"name":"github.com/nwaples/rardecode","ecosystem":"go","repository_url":"https://github.com/nwaples/rardecode","issues_count":2,"created_at":"2025-06-07T20:29:11.851Z","updated_at":"2025-06-07T20:29:11.851Z","purl":"pkg:golang/github.com/nwaples/rardecode","metadata":{"id":3494993,"name":"github.com/nwaples/rardecode","ecosystem":"go","description":"","homepage":"https://github.com/nwaples/rardecode","licenses":"BSD-2-Clause","normalized_licenses":["BSD-2-Clause"],"repository_url":"https://github.com/nwaples/rardecode","keywords_array":[],"namespace":"github.com/nwaples","versions_count":5,"first_release_published_at":"2018-10-21T06:39:08.000Z","latest_release_published_at":"2022-03-06T03:25:31.000Z","latest_release_number":"v1.1.3","last_synced_at":"2025-06-06T06:01:39.767Z","created_at":"2022-04-10T19:31:11.772Z","updated_at":"2025-06-06T06:01:39.767Z","registry_url":"https://pkg.go.dev/github.com/nwaples/rardecode","install_command":"go get github.com/nwaples/rardecode","documentation_url":"https://pkg.go.dev/github.com/nwaples/rardecode#section-documentation","metadata":{},"repo_metadata":{"uuid":"32723162","full_name":"nwaples/rardecode","owner":"nwaples","description":"A go package for reading RAR archives.","archived":false,"fork":false,"pushed_at":"2022-11-02T07:36:59.000Z","size":186,"stargazers_count":97,"open_issues_count":12,"forks_count":19,"subscribers_count":10,"default_branch":"master","last_synced_at":"2023-02-22T10:16:19.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-2-clause","status":null,"scm":"git","pull_requests_enabled":true,"logo_url":null,"metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2015-03-23T09:43:06.000Z","updated_at":"2023-02-22T10:16:19.458Z","dependencies_parsed_at":"2022-08-07T14:15:29.073Z","dependency_job_id":null,"html_url":"https://github.com/nwaples/rardecode","commit_stats":null,"repository_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nwaples%2Frardecode","tags_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nwaples%2Frardecode/tags","manifests_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nwaples%2Frardecode/manifests","owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nwaples","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":108921946,"host_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names"}},"repo_metadata_updated_at":"2023-03-21T18:38:30.121Z","dependent_packages_count":1966,"downloads":null,"downloads_period":null,"dependent_repos_count":5019,"rankings":{"downloads":null,"dependent_repos_count":0.11785406015536817,"dependent_packages_count":0.08195836929818737,"stargazers_count":4.56538376185548,"forks_count":4.981323665746504,"docker_downloads_count":0.09554893433370959,"average":1.9684137582778498},"purl":"pkg:golang/github.com/nwaples/rardecode","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/nwaples/rardecode","docker_dependents_count":1571,"docker_downloads_count":2082564072,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/nwaples/rardecode","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/nwaples/rardecode/dependencies","status":null,"funding_links":[],"critical":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnwaples%2Frardecode/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnwaples%2Frardecode/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnwaples%2Frardecode/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnwaples%2Frardecode/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1886302,"maintainers_count":0,"namespaces_count":723964,"keywords_count":98339,"github":"golang","metadata":{"funded_packages_count":39348},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-06-07T05:37:05.003Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},"unique_repositories_count":0,"unique_repositories_count_past_30_days":0,"recent_issues":[{"uuid":"2481858346","node_id":"PR_kwDOOfq5fc6T7icq","number":1,"state":"closed","title":"chore(deps): bump the go-modules group with 69 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-05-21T23:24:35.000Z","author_association":"NONE","state_reason":null,"created_at":"2025-04-25T15:17:44.000Z","updated_at":"2025-05-21T23:24:35.000Z","time_to_close":2275611,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-modules","update_count":69,"packages":[{"name":"github.com/paketo-buildpacks/packit/v2","old_version":"2.17.0","new_version":"2.18.0","repository_url":"https://github.com/paketo-buildpacks/packit"},{"name":"dario.cat/mergo","old_version":"1.0.0","new_version":"1.0.1","repository_url":"https://github.com/imdario/mergo"},{"name":"github.com/Azure/go-ansiterm","old_version":"0.0.0-20210617225240-d185dfc1b5a1","new_version":"0.0.0-20230124172434-306776ec8161","repository_url":"https://github.com/Azure/go-ansiterm"},{"name":"github.com/CycloneDX/cyclonedx-go","old_version":"0.7.1","new_version":"0.9.2","repository_url":"https://github.com/CycloneDX/cyclonedx-go"},{"name":"github.com/DataDog/zstd","old_version":"1.4.5","new_version":"1.5.5","repository_url":"https://github.com/DataDog/zstd"},{"name":"github.com/Masterminds/sprig/v3","old_version":"3.2.3","new_version":"3.3.0","repository_url":"https://github.com/Masterminds/sprig"},{"name":"github.com/Microsoft/hcsshim","old_version":"0.11.7","new_version":"0.12.9","repository_url":"https://github.com/Microsoft/hcsshim"},{"name":"github.com/ProtonMail/go-crypto","old_version":"1.1.3","new_version":"1.1.6","repository_url":"https://github.com/ProtonMail/go-crypto"},{"name":"github.com/anchore/go-logger","old_version":"0.0.0-20220728155337-03b66a5207d8","new_version":"0.0.0-20230725134548-c21dafa1ec5a","repository_url":"https://github.com/anchore/go-logger"},{"name":"github.com/anchore/packageurl-go","old_version":"0.1.1-0.20230104203445-02e0a6721501","new_version":"0.1.1-0.20250220190351-d62adb6e1115","repository_url":"https://github.com/anchore/packageurl-go"},{"name":"github.com/anchore/syft","old_version":"0.80.0","new_version":"1.19.0","repository_url":"https://github.com/anchore/syft"},{"name":"github.com/andybalholm/brotli","old_version":"1.0.4","new_version":"1.1.1","repository_url":"https://github.com/andybalholm/brotli"},{"name":"github.com/bmatcuk/doublestar/v4","old_version":"4.6.0","new_version":"4.8.1","repository_url":"https://github.com/bmatcuk/doublestar"},{"name":"github.com/cenkalti/backoff/v4","old_version":"4.2.1","new_version":"4.3.0","repository_url":"https://github.com/cenkalti/backoff"},{"name":"github.com/cloudflare/circl","old_version":"1.3.7","new_version":"1.6.0","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/containerd/stargz-snapshotter/estargz","old_version":"0.14.3","new_version":"0.16.3","repository_url":"https://github.com/containerd/stargz-snapshotter"},{"name":"github.com/cpuguy83/dockercfg","old_version":"0.3.1","new_version":"0.3.2","repository_url":"https://github.com/cpuguy83/dockercfg"},{"name":"github.com/cyphar/filepath-securejoin","old_version":"0.2.5","new_version":"0.4.1","repository_url":"https://github.com/cyphar/filepath-securejoin"},{"name":"github.com/docker/cli","old_version":"27.1.1+incompatible","new_version":"28.0.4+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/docker/distribution","old_version":"2.8.2+incompatible","new_version":"2.8.3+incompatible","repository_url":"https://github.com/docker/distribution"},{"name":"github.com/docker/docker-credential-helpers","old_version":"0.7.0","new_version":"0.8.2","repository_url":"https://github.com/docker/docker-credential-helpers"},{"name":"github.com/gabriel-vasile/mimetype","old_version":"1.4.8","new_version":"1.4.9","repository_url":"https://github.com/gabriel-vasile/mimetype"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.0","new_version":"5.6.2","repository_url":"https://github.com/go-git/go-billy"},{"name":"github.com/go-git/go-git/v5","old_version":"5.13.0","new_version":"5.14.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-ole/go-ole","old_version":"1.2.6","new_version":"1.3.0","repository_url":"https://github.com/go-ole/go-ole"},{"name":"github.com/golang/groupcache","old_version":"0.0.0-20210331224755-41bb18bfe9da","new_version":"0.0.0-20241129210726-2c02b8208cf8","repository_url":"https://github.com/golang/groupcache"},{"name":"github.com/google/go-containerregistry","old_version":"0.20.2","new_version":"0.20.3","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/huandu/xstrings","old_version":"1.3.3","new_version":"1.5.0","repository_url":"https://github.com/huandu/xstrings"},{"name":"github.com/jinzhu/copier","old_version":"0.3.5","new_version":"0.4.0","repository_url":"https://github.com/jinzhu/copier"},{"name":"github.com/klauspost/compress","old_version":"1.16.7","new_version":"1.18.0","repository_url":"https://github.com/klauspost/compress"},{"name":"github.com/klauspost/pgzip","old_version":"1.2.5","new_version":"1.2.6","repository_url":"https://github.com/klauspost/pgzip"},{"name":"github.com/knqyf263/go-rpmdb","old_version":"0.0.0-20230301153543-ba94b245509b","new_version":"0.1.1","repository_url":"https://github.com/knqyf263/go-rpmdb"},{"name":"github.com/magiconair/properties","old_version":"1.8.7","new_version":"1.8.9","repository_url":"https://github.com/magiconair/properties"},{"name":"github.com/mattn/go-runewidth","old_version":"0.0.13","new_version":"0.0.16","repository_url":"https://github.com/mattn/go-runewidth"},{"name":"github.com/moby/sys/sequential","old_version":"0.5.0","new_version":"0.6.0","repository_url":"https://github.com/moby/sys"},{"name":"github.com/moby/sys/user","old_version":"0.3.0","new_version":"0.4.0","repository_url":"https://github.com/moby/sys"},{"name":"github.com/moby/term","old_version":"0.5.0","new_version":"0.5.2","repository_url":"https://github.com/moby/term"},{"name":"github.com/nwaples/rardecode","old_version":"1.1.0","new_version":"1.1.3","repository_url":"https://github.com/nwaples/rardecode"},{"name":"github.com/opencontainers/image-spec","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/opencontainers/image-spec"},{"name":"github.com/pierrec/lz4/v4","old_version":"4.1.15","new_version":"4.1.22","repository_url":"https://github.com/pierrec/lz4"},{"name":"github.com/pjbgf/sha1cd","old_version":"0.3.0","new_version":"0.3.2","repository_url":"https://github.com/pjbgf/sha1cd"},{"name":"github.com/rivo/uniseg","old_version":"0.2.0","new_version":"0.4.7","repository_url":"https://github.com/rivo/uniseg"},{"name":"github.com/sassoftware/go-rpmutils","old_version":"0.2.0","new_version":"0.4.0","repository_url":"https://github.com/sassoftware/go-rpmutils"},{"name":"github.com/shirou/gopsutil/v3","old_version":"3.23.12","new_version":"3.24.5","repository_url":"https://github.com/shirou/gopsutil"},{"name":"github.com/shopspring/decimal","old_version":"1.2.0","new_version":"1.4.0","repository_url":"https://github.com/shopspring/decimal"},{"name":"github.com/skeema/knownhosts","old_version":"1.3.0","new_version":"1.3.1","repository_url":"https://github.com/skeema/knownhosts"},{"name":"github.com/spdx/tools-golang","old_version":"0.5.0","new_version":"0.5.5","repository_url":"https://github.com/spdx/tools-golang"},{"name":"github.com/spf13/afero","old_version":"1.9.5","new_version":"1.14.0","repository_url":"https://github.com/spf13/afero"},{"name":"github.com/spf13/cast","old_version":"1.5.0","new_version":"1.7.0","repository_url":"https://github.com/spf13/cast"},{"name":"github.com/sylabs/sif/v2","old_version":"2.8.1","new_version":"2.21.1","repository_url":"https://github.com/sylabs/sif"},{"name":"github.com/sylabs/squashfs","old_version":"0.6.1","new_version":"1.0.6","repository_url":"https://github.com/sylabs/squashfs"},{"name":"github.com/tklauser/go-sysconf","old_version":"0.3.12","new_version":"0.3.15","repository_url":"https://github.com/tklauser/go-sysconf"},{"name":"github.com/tklauser/numcpus","old_version":"0.6.1","new_version":"0.10.0","repository_url":"https://github.com/tklauser/numcpus"},{"name":"github.com/vbatts/go-mtree","old_version":"0.5.3","new_version":"0.5.4","repository_url":"https://github.com/vbatts/go-mtree"},{"name":"github.com/vbatts/tar-split","old_version":"0.11.3","new_version":"0.11.6","repository_url":"https://github.com/vbatts/tar-split"},{"name":"github.com/vifraa/gopom","old_version":"0.2.1","new_version":"1.0.0","repository_url":"https://github.com/vifraa/gopom"},{"name":"github.com/wagoodman/go-partybus","old_version":"0.0.0-20210627031916-db1f5573bbc5","new_version":"0.0.0-20230516145632-8ccac152c651","repository_url":"https://github.com/wagoodman/go-partybus"},{"name":"github.com/wagoodman/go-progress","old_version":"0.0.0-20230301185719-21920a456ad5","new_version":"0.0.0-20230925121702-07e42b3cdba0","repository_url":"https://github.com/wagoodman/go-progress"},{"name":"github.com/yusufpapurcu/wmi","old_version":"1.2.3","new_version":"1.2.4","repository_url":"https://github.com/yusufpapurcu/wmi"},{"name":"golang.org/x/crypto","old_version":"0.36.0","new_version":"0.37.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/mod","old_version":"0.19.0","new_version":"0.24.0","repository_url":"https://github.com/golang/mod"},{"name":"golang.org/x/net","old_version":"0.37.0","new_version":"0.39.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/sync","old_version":"0.12.0","new_version":"0.13.0","repository_url":"https://github.com/golang/sync"},{"name":"golang.org/x/sys","old_version":"0.31.0","new_version":"0.32.0","repository_url":"https://github.com/golang/sys"},{"name":"golang.org/x/text","old_version":"0.23.0","new_version":"0.24.0","repository_url":"https://github.com/golang/text"},{"name":"golang.org/x/xerrors","old_version":"0.0.0-20220907171357-04be3eba64a2","new_version":"0.0.0-20231012003039-104605ab7028","repository_url":"https://github.com/golang/xerrors"},{"name":"google.golang.org/genproto/googleapis/rpc","old_version":"0.0.0-20240401170217-c3f982113cda","new_version":"0.0.0-20241223144023-3abc09e42ca8","repository_url":"https://github.com/googleapis/go-genproto"},{"name":"google.golang.org/grpc","old_version":"1.59.0","new_version":"1.67.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"google.golang.org/protobuf","old_version":"1.36.5","new_version":"1.36.6"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-modules group with 69 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.17.0` | `2.18.0` |\n| [dario.cat/mergo](https://github.com/imdario/mergo) | `1.0.0` | `1.0.1` |\n| [github.com/Azure/go-ansiterm](https://github.com/Azure/go-ansiterm) | `0.0.0-20210617225240-d185dfc1b5a1` | `0.0.0-20230124172434-306776ec8161` |\n| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.7.1` | `0.9.2` |\n| [github.com/DataDog/zstd](https://github.com/DataDog/zstd) | `1.4.5` | `1.5.5` |\n| [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) | `3.2.3` | `3.3.0` |\n| [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.11.7` | `0.12.9` |\n| [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.3` | `1.1.6` |\n| [github.com/anchore/go-logger](https://github.com/anchore/go-logger) | `0.0.0-20220728155337-03b66a5207d8` | `0.0.0-20230725134548-c21dafa1ec5a` |\n| [github.com/anchore/packageurl-go](https://github.com/anchore/packageurl-go) | `0.1.1-0.20230104203445-02e0a6721501` | `0.1.1-0.20250220190351-d62adb6e1115` |\n| [github.com/anchore/syft](https://github.com/anchore/syft) | `0.80.0` | `1.19.0` |\n| [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.0.4` | `1.1.1` |\n| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.6.0` | `4.8.1` |\n| [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.1` | `4.3.0` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.7` | `1.6.0` |\n| [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) | `0.14.3` | `0.16.3` |\n| [github.com/cpuguy83/dockercfg](https://github.com/cpuguy83/dockercfg) | `0.3.1` | `0.3.2` |\n| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.2.5` | `0.4.1` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `27.1.1+incompatible` | `28.0.4+incompatible` |\n| [github.com/docker/distribution](https://github.com/docker/distribution) | `2.8.2+incompatible` | `2.8.3+incompatible` |\n| [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.7.0` | `0.8.2` |\n| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.8` | `1.4.9` |\n| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.0` | `5.6.2` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.0` | `5.14.0` |\n| [github.com/go-ole/go-ole](https://github.com/go-ole/go-ole) | `1.2.6` | `1.3.0` |\n| [github.com/golang/groupcache](https://github.com/golang/groupcache) | `0.0.0-20210331224755-41bb18bfe9da` | `0.0.0-20241129210726-2c02b8208cf8` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.2` | `0.20.3` |\n| [github.com/huandu/xstrings](https://github.com/huandu/xstrings) | `1.3.3` | `1.5.0` |\n| [github.com/jinzhu/copier](https://github.com/jinzhu/copier) | `0.3.5` | `0.4.0` |\n| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.16.7` | `1.18.0` |\n| [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) | `1.2.5` | `1.2.6` |\n| [github.com/knqyf263/go-rpmdb](https://github.com/knqyf263/go-rpmdb) | `0.0.0-20230301153543-ba94b245509b` | `0.1.1` |\n| [github.com/magiconair/properties](https://github.com/magiconair/properties) | `1.8.7` | `1.8.9` |\n| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.13` | `0.0.16` |\n| [github.com/moby/sys/sequential](https://github.com/moby/sys) | `0.5.0` | `0.6.0` |\n| [github.com/moby/sys/user](https://github.com/moby/sys) | `0.3.0` | `0.4.0` |\n| [github.com/moby/term](https://github.com/moby/term) | `0.5.0` | `0.5.2` |\n| [github.com/nwaples/rardecode](https://github.com/nwaples/rardecode) | `1.1.0` | `1.1.3` |\n| [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) | `1.1.0` | `1.1.1` |\n| [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.15` | `4.1.22` |\n| [github.com/pjbgf/sha1cd](https://github.com/pjbgf/sha1cd) | `0.3.0` | `0.3.2` |\n| [github.com/rivo/uniseg](https://github.com/rivo/uniseg) | `0.2.0` | `0.4.7` |\n| [github.com/sassoftware/go-rpmutils](https://github.com/sassoftware/go-rpmutils) | `0.2.0` | `0.4.0` |\n| [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.23.12` | `3.24.5` |\n| [github.com/shopspring/decimal](https://github.com/shopspring/decimal) | `1.2.0` | `1.4.0` |\n| [github.com/skeema/knownhosts](https://github.com/skeema/knownhosts) | `1.3.0` | `1.3.1` |\n| [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang) | `0.5.0` | `0.5.5` |\n| [github.com/spf13/afero](https://github.com/spf13/afero) | `1.9.5` | `1.14.0` |\n| [github.com/spf13/cast](https://github.com/spf13/cast) | `1.5.0` | `1.7.0` |\n| [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.8.1` | `2.21.1` |\n| [github.com/sylabs/squashfs](https://github.com/sylabs/squashfs) | `0.6.1` | `1.0.6` |\n| [github.com/tklauser/go-sysconf](https://github.com/tklauser/go-sysconf) | `0.3.12` | `0.3.15` |\n| [github.com/tklauser/numcpus](https://github.com/tklauser/numcpus) | `0.6.1` | `0.10.0` |\n| [github.com/vbatts/go-mtree](https://github.com/vbatts/go-mtree) | `0.5.3` | `0.5.4` |\n| [github.com/vbatts/tar-split](https://github.com/vbatts/tar-split) | `0.11.3` | `0.11.6` |\n| [github.com/vifraa/gopom](https://github.com/vifraa/gopom) | `0.2.1` | `1.0.0` |\n| [github.com/wagoodman/go-partybus](https://github.com/wagoodman/go-partybus) | `0.0.0-20210627031916-db1f5573bbc5` | `0.0.0-20230516145632-8ccac152c651` |\n| [github.com/wagoodman/go-progress](https://github.com/wagoodman/go-progress) | `0.0.0-20230301185719-21920a456ad5` | `0.0.0-20230925121702-07e42b3cdba0` |\n| [github.com/yusufpapurcu/wmi](https://github.com/yusufpapurcu/wmi) | `1.2.3` | `1.2.4` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.37.0` |\n| [golang.org/x/mod](https://github.com/golang/mod) | `0.19.0` | `0.24.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.37.0` | `0.39.0` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.12.0` | `0.13.0` |\n| [golang.org/x/sys](https://github.com/golang/sys) | `0.31.0` | `0.32.0` |\n| [golang.org/x/text](https://github.com/golang/text) | `0.23.0` | `0.24.0` |\n| [golang.org/x/xerrors](https://github.com/golang/xerrors) | `0.0.0-20220907171357-04be3eba64a2` | `0.0.0-20231012003039-104605ab7028` |\n| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20240401170217-c3f982113cda` | `0.0.0-20241223144023-3abc09e42ca8` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.59.0` | `1.67.3` |\n| google.golang.org/protobuf | `1.36.5` | `1.36.6` |\n\nUpdates `github.com/paketo-buildpacks/packit/v2` from 2.17.0 to 2.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/paketo-buildpacks/packit/releases\"\u003egithub.com/paketo-buildpacks/packit/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump golang.org/x/net from 0.37.0 to 0.38.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/pull/645\"\u003epaketo-buildpacks/packit#645\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/pull/646\"\u003epaketo-buildpacks/packit#646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse upstream syft by \u003ca href=\"https://github.com/modulo11\"\u003e\u003ccode\u003e@​modulo11\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/pull/639\"\u003epaketo-buildpacks/packit#639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/anchore/stereoscope from 0.0.0-20230412183729-8602f1afc574 to 0.1.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/pull/644\"\u003epaketo-buildpacks/packit#644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/paketo-buildpacks/packit/compare/v2.17.0...v2.18.0\"\u003ehttps://github.com/paketo-buildpacks/packit/compare/v2.17.0...v2.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/paketo-buildpacks/packit/commit/aa5bc77379adb566aeea14656ac349abb37ae016\"\u003e\u003ccode\u003eaa5bc77\u003c/code\u003e\u003c/a\u003e Bump github.com/anchore/stereoscope\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/paketo-buildpacks/packit/commit/f3fa74a471b093d6193c19039a332d24ded1328b\"\u003e\u003ccode\u003ef3fa74a\u003c/code\u003e\u003c/a\u003e Use upstream syft (\u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/issues/639\"\u003e#639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/paketo-buildpacks/packit/commit/7e884aad269765faa7656f53ed52a42605574081\"\u003e\u003ccode\u003e7e884aa\u003c/code\u003e\u003c/a\u003e Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/paketo-buildpacks/packit/commit/f3ac27acb68ef52e8eb8a6a7efaac53b4f739a13\"\u003e\u003ccode\u003ef3ac27a\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/net from 0.37.0 to 0.38.0\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/paketo-buildpacks/packit/compare/v2.17.0...v2.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dario.cat/mergo` from 1.0.0 to 1.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/imdario/mergo/releases\"\u003edario.cat/mergo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e by \u003ca href=\"https://github.com/vsemichev\"\u003e\u003ccode\u003e@​vsemichev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/darccio/mergo/pull/253\"\u003edarccio/mergo#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: \u003ccode\u003eWithoutDereference\u003c/code\u003e should respect non-nil struct pointers by \u003ca href=\"https://github.com/joshkaplinsky\"\u003e\u003ccode\u003e@​joshkaplinsky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/darccio/mergo/pull/251\"\u003edarccio/mergo#251\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vsemichev\"\u003e\u003ccode\u003e@​vsemichev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/darccio/mergo/pull/253\"\u003edarccio/mergo#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/joshkaplinsky\"\u003e\u003ccode\u003e@​joshkaplinsky\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/darccio/mergo/pull/251\"\u003edarccio/mergo#251\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/darccio/mergo/compare/v1.0.0...v1.0.1\"\u003ehttps://github.com/darccio/mergo/compare/v1.0.0...v1.0.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/59ea6a9cd9f9c60cb6b1c58476f76cd3172ccebf\"\u003e\u003ccode\u003e59ea6a9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/251\"\u003e#251\u003c/a\u003e from joshkaplinsky/joshkaplinsky/without-dereference-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/96f24afa924ff3b6f024de9f5aa72020078b06f9\"\u003e\u003ccode\u003e96f24af\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/253\"\u003e#253\u003c/a\u003e from vsemichev/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/2f1a6156ce0c8b8a6291926b75bc27b9b8fc2bfe\"\u003e\u003ccode\u003e2f1a615\u003c/code\u003e\u003c/a\u003e fixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e. adds test to verify the fix.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/4da170b81eef59e84cfa68070a73aea40f98ddbd\"\u003e\u003ccode\u003e4da170b\u003c/code\u003e\u003c/a\u003e fixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e. attempt \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/3\"\u003e#3\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/a13a1175be733af04b175c9fe616f594c5e8dfa9\"\u003e\u003ccode\u003ea13a117\u003c/code\u003e\u003c/a\u003e fixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e. attempt \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/2\"\u003e#2\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/6b830ffc3df09a6f22aafd7dfbf5f02d0da2ee22\"\u003e\u003ccode\u003e6b830ff\u003c/code\u003e\u003c/a\u003e fixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/f33862a52373a787536aff7428212ce0ecb0cac0\"\u003e\u003ccode\u003ef33862a\u003c/code\u003e\u003c/a\u003e WithoutDereference should respect structs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/cde9f0ea26cccb1168ee3900cf8ca457bb928c3c\"\u003e\u003ccode\u003ecde9f0e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/246\"\u003e#246\u003c/a\u003e from darccio/darccio/v1-frozen\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/f1e2fe566a09b85177236eea3f03fc5dab009edc\"\u003e\u003ccode\u003ef1e2fe5\u003c/code\u003e\u003c/a\u003e chore: frozen v1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/7f7b4afa33c905820aa75c473f3f13321dd499b5\"\u003e\u003ccode\u003e7f7b4af\u003c/code\u003e\u003c/a\u003e Update FUNDING.yml\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/imdario/mergo/compare/v1.0.0...v1.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Azure/go-ansiterm` from 0.0.0-20210617225240-d185dfc1b5a1 to 0.0.0-20230124172434-306776ec8161\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/Azure/go-ansiterm/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/CycloneDX/cyclonedx-go` from 0.7.1 to 0.9.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/releases\"\u003egithub.com/CycloneDX/cyclonedx-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e39ede217f126cfbc80eabf880f6643be3d392a4f: feat: add MarshalXML and UnmarshalXML (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee9191ed11a269fcb6b3fb54e000ed6d81b5bf9db: feat: add UnmarshalJSON (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e80fede1f13a956d35eb14696cd2ca9d2d943f809: fix: add json tag for \u003ccode\u003eIdentity\u003c/code\u003e (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e24e9503293f0837e6e7ea3ff670ef958e6075b87: fix: tests (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed68a199bc1747e5d6a7d4196c2f270535bbf6e3e: fix: use \u003ccode\u003eidentity\u003c/code\u003e as array in \u003ccode\u003evalid-evidence.json\u003c/code\u003e (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eff9cc28f9c9554328bd6c1ad56098be5a692d5e9: fix: use componentEvidence array for Evidence.Identity field (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuilding and Packaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e016ee293d464d6383be3a714f7fb0debebef8ad5: build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e77153ab5fe005f6484ac1e1225e7152df00db3f1: build(deps): bump actions/checkout from 4.2.0 to 4.2.1 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e4f50d02c1282ac1d0d7448502b231a0e84a1e529: build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003eb84451219e77e0fbbe7d5ba054bcf25dbc7aaea4: build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e238cbea3479fed9fdfcbfa5f1751828390a05211: build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ebbe8f3c2c7c4567514ae966c69bf93fc1b3dba2a: build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e05f8930fe918a31941ebf90eec627e5e6e908d1c: build(deps): bump github.com/terminalstatic/go-xsd-validate (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e082f87791a5e290c9d4c6e8126dc0cc987028a60: build(deps): bump gitpod/workspace-go from \u003ccode\u003e2a9e01c\u003c/code\u003e to \u003ccode\u003e9c95281\u003c/code\u003e (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e093b1c15164dad5d46768db0e3f6ee43eb60ca20: build(deps): bump gitpod/workspace-go from \u003ccode\u003e9c95281\u003c/code\u003e to \u003ccode\u003e6932342\u003c/code\u003e (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e47b7e01ce8f8209894065e9656217b8c00a3c8ea: build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ece6eb841cb1e21aa28efbccd9eb8fe5eea0555c9: build(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOthers\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e4d3aff9fab9ae78bd6fbbc9fd0912fab14c8fb64: UPDATE_SNAPSHOTS=true make test (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e31d954443e6563aeee69d82bdfb82aee83e07df1: refactor (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e0170729e313a681fc8659643601410ae10ffe803: refactor: update convert package (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e6f0e0cf025dd99ab903e33f8e043d92b28dab4f6: fix: \u003ccode\u003enil\u003c/code\u003e pointer dereference during evidence conversion (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ece43b6f4cb5707d3ef2db1af1d597f5b23bf0e15: fix: make linter happy (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5d799e634b9bed9c86621048544737b210e433e8: fix: remove deprecated goreleaser flag (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuilding and Packaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e6d5bcb0e277207551dbc728eb29959f1d3cbd685: build(deps): bump actions/checkout from 4.1.6 to 4.1.7 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ef34fc0c413da74d20d1cc240863aaf2eb6b274f7: build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e71cff221b8dbbc1d50f839fa76ecea4e42d83a2b: build(deps): bump gitpod/workspace-go from \u003ccode\u003e8d15123\u003c/code\u003e to \u003ccode\u003e2a9e01c\u003c/code\u003e (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003eea693550558d230b3fbba810b6e75ac2eb0b55c8: build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ed5cbdad49dfbf54f2dab4ad95bd1a47c710a526c: build(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e729c284798ebe341ced210b661362f77d68cd655: feat: Add CycloneDX 1.6 fields swhid and omniborId (\u003ca href=\"https://github.com/snyk-tim\"\u003e\u003ccode\u003e@​snyk-tim\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb5d35959767efce95f50e96bf752c47fbe374496: feat: add manufacturer and authors (\u003ca href=\"https://github.com/snyk-tim\"\u003e\u003ccode\u003e@​snyk-tim\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec52e698d2fe3fbd60df6ff397f44e7b0ea15a4bc: feat: raise baseline go version to 1.20 (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e9166e10fdecaadd8a97ceed9636261d351d90a65: fix: \u003ccode\u003eioutil\u003c/code\u003e -\u0026gt; \u003ccode\u003eio\u003c/code\u003e (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e349fc8cd072e90d81c0328f1d9dab16aa30fcf60: fix: add bom-ref to OrganizationalEntity/Contact (\u003ca href=\"https://github.com/snyk-tim\"\u003e\u003ccode\u003e@​snyk-tim\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec97da90e259e0051e02e07300c75ad5e37a0311b: fix: handle breaking changes in skywalking-eyes (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/cba06ffac571448d3fa689afdb1ad613fdb7dfd7\"\u003e\u003ccode\u003ecba06ff\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/205\"\u003e#205\u003c/a\u003e from CycloneDX/dependabot/go_modules/github.com/termi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/5c8174911b0b82a52f1aab6c59ce70e6b0b111a0\"\u003e\u003ccode\u003e5c81749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/211\"\u003e#211\u003c/a\u003e from CycloneDX/dependabot/github_actions/actions/setu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/753526c89e68e1961e89a750a9ebac09bc2620f1\"\u003e\u003ccode\u003e753526c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/204\"\u003e#204\u003c/a\u003e from DmitriyLewen/fix/componentEvidence-as-array\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/4d3aff9fab9ae78bd6fbbc9fd0912fab14c8fb64\"\u003e\u003ccode\u003e4d3aff9\u003c/code\u003e\u003c/a\u003e UPDATE_SNAPSHOTS=true make test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/d68a199bc1747e5d6a7d4196c2f270535bbf6e3e\"\u003e\u003ccode\u003ed68a199\u003c/code\u003e\u003c/a\u003e fix: use \u003ccode\u003eidentity\u003c/code\u003e as array in \u003ccode\u003evalid-evidence.json\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/24e9503293f0837e6e7ea3ff670ef958e6075b87\"\u003e\u003ccode\u003e24e9503\u003c/code\u003e\u003c/a\u003e fix: tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/238cbea3479fed9fdfcbfa5f1751828390a05211\"\u003e\u003ccode\u003e238cbea\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-go from 5.1.0 to 5.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/a7f74150fcd8f55f64527e333ad2d25739756082\"\u003e\u003ccode\u003ea7f7415\u003c/code\u003e\u003c/a\u003e Merge branch 'master' of github.com:DmitriyLewen/cyclonedx-go into fix/compon...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/05f8930fe918a31941ebf90eec627e5e6e908d1c\"\u003e\u003ccode\u003e05f8930\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/terminalstatic/go-xsd-validate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/464d4260e584e132c6c6bcf49792d8bc115043bb\"\u003e\u003ccode\u003e464d426\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/202\"\u003e#202\u003c/a\u003e from CycloneDX/dependabot/github_actions/actions/chec...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/compare/v0.7.1...v0.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/DataDog/zstd` from 1.4.5 to 1.5.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/DataDog/zstd/releases\"\u003egithub.com/DataDog/zstd's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ezstd 1.5.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate vendored zstd to 1.5.5 (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/125\"\u003e#125\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[circleci] Update to non-deprecated images (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/124\"\u003e#124\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/DataDog/zstd/compare/v1.5.2...v1.5.5\"\u003ehttps://github.com/DataDog/zstd/compare/v1.5.2...v1.5.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.5 - wrapper patches 1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd DecompressInto for decompression of payloads with known sizes by \u003ca href=\"https://github.com/jbowens\"\u003e\u003ccode\u003e@​jbowens\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/130\"\u003eDataDog/zstd#130\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[bulk] Fix being able to Decompress large payloads  by \u003ca href=\"https://github.com/Viq111\"\u003e\u003ccode\u003e@​Viq111\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/132\"\u003eDataDog/zstd#132\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jbowens\"\u003e\u003ccode\u003e@​jbowens\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/130\"\u003eDataDog/zstd#130\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/DataDog/zstd/compare/v1.5.5...v1.5.5+patch1\"\u003ehttps://github.com/DataDog/zstd/compare/v1.5.5...v1.5.5+patch1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the upstream zstd version to \u003ca href=\"https://github.com/facebook/zstd/releases/tag/v1.5.2\"\u003e1.5.2\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/116\"\u003eDataDog/zstd#116\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe update \u003ccode\u003e1.5.0\u003c/code\u003e -\u0026gt; \u003ccode\u003e1.5.2\u003c/code\u003e overall has a similar performance profile. Please note that depending on the workload, performance could vary by -10% / +10%\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.2 - wrapper patches 1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix unneededly allocated large decompression buffer by \u003ca href=\"https://github.com/XiaochenCui\"\u003e\u003ccode\u003e@​XiaochenCui\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/118\"\u003e#118\u003c/a\u003e) \u0026amp; \u003ca href=\"https://github.com/Viq111\"\u003e\u003ccode\u003e@​Viq111\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/120\"\u003eDataDog/zstd#120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd SetNbWorkers api to the writer code (see \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/108\"\u003e#108\u003c/a\u003e) by \u003ca href=\"https://github.com/bsergean\"\u003e\u003ccode\u003e@​bsergean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/117\"\u003eDataDog/zstd#117\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eFor large workloads, the performance can be improved by 3-6x (see \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/117#issuecomment-1147812767\"\u003eDataDog/zstd#117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWrite()\u003c/code\u003e becomes async with workers \u0026gt; 1, make sure you read the method documentation before using\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bsergean\"\u003e\u003ccode\u003e@​bsergean\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/117\"\u003eDataDog/zstd#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XiaochenCui\"\u003e\u003ccode\u003e@​XiaochenCui\u003c/code\u003e\u003c/a\u003e for his work on \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/118\"\u003eDataDog/zstd#118\u003c/a\u003e that led to \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/120\"\u003e#120\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/DataDog/zstd/compare/v1.5.2...v1.5.2+patch1\"\u003ehttps://github.com/DataDog/zstd/compare/v1.5.2...v1.5.2+patch1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.0\u003c/h2\u003e\n\u003cp\u003eThis release updates the upstream zstd version to \u003ca href=\"https://github.com/facebook/zstd/releases/tag/v1.5.0\"\u003e1.5.0\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/106\"\u003e#106\u003c/a\u003e) (thanks \u003ca href=\"https://github.com/SirSniper\"\u003e\u003ccode\u003e@​SirSniper\u003c/code\u003e\u003c/a\u003e!) which sports some major performance improvements!\u003c/p\u003e\n\u003cp\u003eIt comes with additional changes to the Go wrapper:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAllow building against zstd dynamic library instead of static by \u003ca href=\"https://github.com/dopuskh3\"\u003e\u003ccode\u003e@​dopuskh3\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/109\"\u003e#109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDon't block the stream reader when a block is available by \u003ca href=\"https://github.com/delthas\"\u003e\u003ccode\u003e@​delthas\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/96\"\u003e#96\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ezstd 1.5.0 - wrapper patches 1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ezstd.go: Set ZSTD_LEGACY_SUPPORT=4 to decompress legacy payloads by \u003ca href=\"https://github.com/evanj\"\u003e\u003ccode\u003e@​evanj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/105\"\u003eDataDog/zstd#105\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/DataDog/zstd/compare/v1.5.0...v1.5.0+patch1\"\u003ehttps://github.com/DataDog/zstd/compare/v1.5.0...v1.5.0+patch1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.0 - wrapper patches 2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/5f14d6af117fa84b37f99d4cde775e6039be6d3b\"\u003e\u003ccode\u003e5f14d6a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/125\"\u003e#125\u003c/a\u003e from DataDog/viq111/1.5.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/ca4d3c750b5c4ed578610d74b0517b6b8137acf1\"\u003e\u003ccode\u003eca4d3c7\u003c/code\u003e\u003c/a\u003e Update vendored zstd to 1.5.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/03725e7d3139ba9eeab41a8433e3e7b3f37d2019\"\u003e\u003ccode\u003e03725e7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/126\"\u003e#126\u003c/a\u003e from DataDog/viq111/circleci\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/1b4c894c78b713e358dd7365df7129a09d78ff04\"\u003e\u003ccode\u003e1b4c894\u003c/code\u003e\u003c/a\u003e [circle] Remove latest as cimg/go does not have the tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/ff5a3bbaf8631a73e4d4bc6b018c2bfb0abf6315\"\u003e\u003ccode\u003eff5a3bb\u003c/code\u003e\u003c/a\u003e [circleci] Update tested Go versions to 1.19 \u0026amp; 1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/6e5a54b6e513cac5bdcc61fe9a67d92b55986417\"\u003e\u003ccode\u003e6e5a54b\u003c/code\u003e\u003c/a\u003e [circleci] Switch to newer images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/fd035e54e312e5583300c0ef48fc522d13cffe97\"\u003e\u003ccode\u003efd035e5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/117\"\u003e#117\u003c/a\u003e from bsergean/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/c7982388d4a91c11123f28fbae05aa4e082d9228\"\u003e\u003ccode\u003ec798238\u003c/code\u003e\u003c/a\u003e Merge branch '1.x' into patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/13d5b107680f7fad45fe9ccc7763fc60224ceb8e\"\u003e\u003ccode\u003e13d5b10\u003c/code\u003e\u003c/a\u003e update documentation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/d64f463c15f9688a7233b4970827164f5190b133\"\u003e\u003ccode\u003ed64f463\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/120\"\u003e#120\u003c/a\u003e from DataDog/viq111/fix-min-size\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/DataDog/zstd/compare/v1.4.5...v1.5.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Masterminds/sprig/v3` from 3.2.3 to 3.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/sprig/releases\"\u003egithub.com/Masterminds/sprig/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdating the Go versions used in testing by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/405\"\u003eMasterminds/sprig#405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eChange intial to initial. by \u003ca href=\"https://github.com/chrishalbert\"\u003e\u003ccode\u003e@​chrishalbert\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/391\"\u003eMasterminds/sprig#391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating dependencies by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/404\"\u003eMasterminds/sprig#404\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecorrect value by \u003ca href=\"https://github.com/jheyduk\"\u003e\u003ccode\u003e@​jheyduk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/376\"\u003eMasterminds/sprig#376\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating location of mergo by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/406\"\u003eMasterminds/sprig#406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeature: added sha512sum function by \u003ca href=\"https://github.com/itzik-elayev\"\u003e\u003ccode\u003e@​itzik-elayev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/400\"\u003eMasterminds/sprig#400\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: Add missing link to url functions by \u003ca href=\"https://github.com/carlpett\"\u003e\u003ccode\u003e@​carlpett\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/375\"\u003eMasterminds/sprig#375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate doc.go by \u003ca href=\"https://github.com/chey\"\u003e\u003ccode\u003e@​chey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/369\"\u003eMasterminds/sprig#369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate mathf.md by \u003ca href=\"https://github.com/zzhu41\"\u003e\u003ccode\u003e@​zzhu41\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/290\"\u003eMasterminds/sprig#290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemoving duplicate documentation by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/407\"\u003eMasterminds/sprig#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating the changelog for the 3.3.0 release by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/408\"\u003eMasterminds/sprig#408\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chrishalbert\"\u003e\u003ccode\u003e@​chrishalbert\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/391\"\u003eMasterminds/sprig#391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jheyduk\"\u003e\u003ccode\u003e@​jheyduk\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/376\"\u003eMasterminds/sprig#376\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itzik-elayev\"\u003e\u003ccode\u003e@​itzik-elayev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/400\"\u003eMasterminds/sprig#400\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carlpett\"\u003e\u003ccode\u003e@​carlpett\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/375\"\u003eMasterminds/sprig#375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chey\"\u003e\u003ccode\u003e@​chey\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/369\"\u003eMasterminds/sprig#369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zzhu41\"\u003e\u003ccode\u003e@​zzhu41\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/290\"\u003eMasterminds/sprig#290\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0\"\u003ehttps://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md\"\u003egithub.com/Masterminds/sprig/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 3.3.0 (2024-08-29)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/400\"\u003e#400\u003c/a\u003e: added sha512sum function (thanks \u003ca href=\"https://github.com/itzik-elayev\"\u003e\u003ccode\u003e@​itzik-elayev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/407\"\u003e#407\u003c/a\u003e: Removed duplicate documentation (functions were documentated in 2 places)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/290\"\u003e#290\u003c/a\u003e: Corrected copy/paster oops in math documentation (thanks \u003ca href=\"https://github.com/zzhu41\"\u003e\u003ccode\u003e@​zzhu41\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/369\"\u003e#369\u003c/a\u003e: Corrected template reference in docs (thanks \u003ca href=\"https://github.com/chey\"\u003e\u003ccode\u003e@​chey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/375\"\u003e#375\u003c/a\u003e: Added link to URL documenation (thanks \u003ca href=\"https://github.com/carlpett\"\u003e\u003ccode\u003e@​carlpett\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/406\"\u003e#406\u003c/a\u003e: Updated the mergo dependency which had a breaking change (which was accounted for)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/376\"\u003e#376\u003c/a\u003e: Fixed documentation error (thanks \u003ca href=\"https://github.com/jheyduk\"\u003e\u003ccode\u003e@​jheyduk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/404\"\u003e#404\u003c/a\u003e: Updated dependency tree\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/391\"\u003e#391\u003c/a\u003e: Fixed misspelling (thanks \u003ca href=\"https://github.com/chrishalbert\"\u003e\u003ccode\u003e@​chrishalbert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/405\"\u003e#405\u003c/a\u003e: Updated Go versions used in testing\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/e708470d529a10ac1a3f02ab6fdd339b65958372\"\u003e\u003ccode\u003ee708470\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/408\"\u003e#408\u003c/a\u003e from mattfarina/update-changelog-3.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/8fc4354ab4cdcdb0e18fc6626812286476209e20\"\u003e\u003ccode\u003e8fc4354\u003c/code\u003e\u003c/a\u003e Updating the changelog for the 3.3.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/cb81a327e35eb6ff7f1856dacf4310efb5d7f2d7\"\u003e\u003ccode\u003ecb81a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/407\"\u003e#407\u003c/a\u003e from mattfarina/remove-dup-math-functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/26376936dd279f4e1389cd772ca9132d123c9ed5\"\u003e\u003ccode\u003e2637693\u003c/code\u003e\u003c/a\u003e Removing duplicate documentation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/06b9a87558bb8fc85b29a84603a9116f381283af\"\u003e\u003ccode\u003e06b9a87\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/290\"\u003e#290\u003c/a\u003e from zzhu41/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/e663ec6019887546abdc1b4505bc382ced00cc61\"\u003e\u003ccode\u003ee663ec6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/369\"\u003e#369\u003c/a\u003e from chey/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/bb2f73f85f05cc0306814d56c91941b2cc80491e\"\u003e\u003ccode\u003ebb2f73f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/375\"\u003e#375\u003c/a\u003e from carlpett/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/f07659ea6531546e2e3c1648b63b3e7d0085f195\"\u003e\u003ccode\u003ef07659e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/400\"\u003e#400\u003c/a\u003e from itzik-elayev/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/98b35c11f040f8247922ca5680d7c338d50fd8da\"\u003e\u003ccode\u003e98b35c1\u003c/code\u003e\u003c/a\u003e Add closing bracket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/7a88928df533ea5e7c0d3cdae521358e636a3bf8\"\u003e\u003ccode\u003e7a88928\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/406\"\u003e#406\u003c/a\u003e from mattfarina/update-mergo\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Microsoft/hcsshim` from 0.11.7 to 0.12.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Microsoft/hcsshim/releases\"\u003egithub.com/Microsoft/hcsshim's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release/0.12] Update go to 1.22 + switch to using containerd/errdefs/pkg/errgrpc for grpc translation by \u003ca href=\"https://github.com/kiashok\"\u003e\u003ccode\u003e@​kiashok\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2301\"\u003emicrosoft/hcsshim#2301\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.8...v0.12.9\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.8...v0.12.9\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.12.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixing typo by \u003ca href=\"https://github.com/ritikaguptams\"\u003e\u003ccode\u003e@​ritikaguptams\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2289\"\u003emicrosoft/hcsshim#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release/0.12] Update containerd to v1.7.23 by \u003ca href=\"https://github.com/dmcgowan\"\u003e\u003ccode\u003e@​dmcgowan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2295\"\u003emicrosoft/hcsshim#2295\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.7...v0.12.8\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.7...v0.12.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.12.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release/0.12] Update pkg versions in go.mod by \u003ca href=\"https://github.com/kiashok\"\u003e\u003ccode\u003e@​kiashok\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2275\"\u003emicrosoft/hcsshim#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release/0.12] Update runc version to 1.1.14 by \u003ca href=\"https://github.com/kiashok\"\u003e\u003ccode\u003e@​kiashok\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2271\"\u003emicrosoft/hcsshim#2271\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.6...v0.12.7\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.6...v0.12.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.12.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release/0.12] Backport commits from hcsshim/main to update module versions by \u003ca href=\"https://github.com/kiashok\"\u003e\u003ccode\u003e@​kiashok\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2237\"\u003emicrosoft/hcsshim#2237\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.5...v0.12.6\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.5...v0.12.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.12.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release/0.12] Adding state attribute to the HNSEndpoint struct to support hyperv co… by \u003ca href=\"https://github.com/ritikaguptams\"\u003e\u003ccode\u003e@​ritikaguptams\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2183\"\u003emicrosoft/hcsshim#2183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release/0.12] vendor: github.com/containerd/containerd v17.18 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2186\"\u003emicrosoft/hcsshim#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release/0.12] Backport networking commits for L1VH feature by \u003ca href=\"https://github.com/princepereira\"\u003e\u003ccode\u003e@​princepereira\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2205\"\u003emicrosoft/hcsshim#2205\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.4...v0.12.5\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.4...v0.12.5\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/7392335b540ccd5edc26ca1e0dce0da393c17eff\"\u003e\u003ccode\u003e7392335\u003c/code\u003e\u003c/a\u003e Switch to using containerd/errdefs/pkg/errgrpc for grpc translation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/79d3f32d6271879fab0bb3aa2c299e8a507fc9e3\"\u003e\u003ccode\u003e79d3f32\u003c/code\u003e\u003c/a\u003e Update go to 1.22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/05636b97d032b034a86e73b4eb3d8cef1a660177\"\u003e\u003ccode\u003e05636b9\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003eJOB_OBJECT_ALL_ACCESS\u003c/code\u003e and \u003ccode\u003eOpenJobObject\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/Microsoft/hcsshim/issues/2095\"\u003e#2095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/155062896f9b84ce1d0ce4136e387836dc3a4daa\"\u003e\u003ccode\u003e1550628\u003c/code\u003e\u003c/a\u003e mobve SILOOBJECT_BASIC_INFORMATION to winapi\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/bf52d5833a99990ab3209bef7d0af89c353b249c\"\u003e\u003ccode\u003ebf52d58\u003c/code\u003e\u003c/a\u003e fix SILOOBJECT_BASIC_INFORMATION alignment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/8d48d874f0d0f6b945c91d61afc1e1f9640d14ed\"\u003e\u003ccode\u003e8d48d87\u003c/code\u003e\u003c/a\u003e Update containerd to v1.7.23 (\u003ca href=\"https://redirect.github.com/Microsoft/hcsshim/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/4ad298fbcb71079c03cc18216a6f02b0134e4237\"\u003e\u003ccode\u003e4ad298f\u003c/code\u003e\u003c/a\u003e Fixing typo (\u003ca href=\"https://redirect.github.com/Microsoft/hcsshim/issues/2289\"\u003e#2289\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/86b533361faaabf92a8a91588bb641adc32a916e\"\u003e\u003ccode\u003e86b5333\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 4 to 6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/5ae96f3244bbf7169afe820c7f85481aca02df12\"\u003e\u003ccode\u003e5ae96f3\u003c/code\u003e\u003c/a\u003e Update runc to v1.1.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/8f3fccdb5ff70c3f2808b030503205eb161dbbc5\"\u003e\u003ccode\u003e8f3fccd\u003c/code\u003e\u003c/a\u003e Update pkg versions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Microsoft/hcsshim/compare/v0.11.7...v0.12.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ProtonMail/go-crypto` from 1.1.3 to 1.1.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ProtonMail/go-crypto/releases\"\u003egithub.com/ProtonMail/go-crypto's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.1.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003ePublicKey.KeyIdString\u003c/code\u003e to return a valid key id by \u003ca href=\"https://github.com/lubux\"\u003e\u003ccode\u003e@​lubux\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/269\"\u003eProtonMail/go-crypto#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow Key Flags override \u003ca href=\"https://github.com/davrux\"\u003e\u003ccode\u003e@​davrux\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/272\"\u003eProtonMail/go-crypto#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly check that message signatures are newer than the key by \u003ca href=\"https://github.com/twiss\"\u003e\u003ccode\u003e@​twiss\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/275\"\u003eProtonMail/go-crypto#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eopenpgp/clearsign: just use rand.Reader in tests by \u003ca href=\"https://github.com/mdosch\"\u003e\u003ccode\u003e@​mdosch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/276\"\u003eProtonMail/go-crypto#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake Issuer Key ID signature subpacket non-critical by \u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/266\"\u003eProtonMail/go-crypto#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev2 API: Improve error messages for encryption key selection by \u003ca href=\"https://github.com/lubux\"\u003e\u003ccode\u003e@​lubux\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/271\"\u003eProtonMail/go-crypto#271\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/ProtonMail/go-crypto/compare/v1.1.5...v1.1.6\"\u003ehttps://github.com/ProtonMail/go-crypto/compare/v1.1.5...v1.1.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v1.1.6-proton\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release is v1.1.6 with support for the following non-standardized features:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePresistent symmetric keys \u003ca href=\"https://www.ietf.org/archive/id/draft-ietf-openpgp-persistent-symmetric-keys-00.html\"\u003edraft-ietf-openpgp-persistent-symmetric-keys-00\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic forwarding \u003ca href=\"https://www.ietf.org/archive/id/draft-wussler-openpgp-forwarding-00.html\"\u003edraft-wussler-openpgp-forwarding-00\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePost-quantum algorithms \u003ca href=\"https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/\"\u003edraft-ietf-openpgp-pqc\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCheck binding signature details against primary key by \u003ca href=\"https://github.com/twiss\"\u003e\u003ccode\u003e@​twiss\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/264\"\u003eProtonMail/go-crypto#264\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/ProtonMail/go-crypto/compare/v1.1.4...v1.1.5\"\u003ehttps://github.com/ProtonMail/go-crypto/compare/v1.1.4...v1.1.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v1.1.5-proton\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release is v1.1.5 with support for the following non-standardized features:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePresistent symmetric keys \u003ca href=\"https://www.ietf.org/archive/id/draft-ietf-openpgp-persistent-symmetric-keys-00.html\"\u003edraft-ietf-openpgp-persistent-symmetric-keys-00\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic forwarding \u003ca href=\"https://www.ietf.org/archive/id/draft-wussler-openpgp-forwarding-00.html\"\u003edraft-wussler-openpgp-forwarding-00\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePost-quantum algorithms \u003ca href=\"https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/\"\u003edraft-ietf-openpgp-pqc\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEmit armor headers in sorted order by \u003ca href=\"https://github.com/andrewgdotcom\"\u003e\u003ccode\u003e@​andrewgdotcom\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/255\"\u003eProtonMail/go-crypto#255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce memory usage when AEAD en/decrypting large messages by \u003ca href=\"https://github.com/twiss\"\u003e\u003ccode\u003e@​twiss\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/259\"\u003eProtonMail/go-crypto#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate artifact actions to v4 by \u003ca href=\"https://github.com/twiss\"\u003e\u003ccode\u003e@​twiss\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/260\"\u003eProtonMail/go-crypto#260\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/ProtonMail/go-crypto/compare/v1.1.3...v1.1.4\"\u003ehttps://github.com/ProtonMail/go-crypto/compare/v1.1.3...v1.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v1.1.4-proton\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release is v1.1.4 with support for the following non-standardized features:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/e52eada5c60c4406d02e11195d91d46f0356beda\"\u003e\u003ccode\u003ee52eada\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/issues/271\"\u003e#271\u003c/a\u003e from ProtonMail/feat/improve-errors-key-selection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/4bf9d904d3586c894d7de3c53b01b05fe740a6da\"\u003e\u003ccode\u003e4bf9d90\u003c/code\u003e\u003c/a\u003e feat(v2): Improve error message for encryption key selection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/d47bb3817800ff5bfab2fb11f38534701bed32cb\"\u003e\u003ccode\u003ed47bb38\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/issues/266\"\u003e#266\u003c/a\u003e from caarlos0/issuer-key-id\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/756ebbd0d3eff84640b9cbbbd2c9a12a9ca6b279\"\u003e\u003ccode\u003e756ebbd\u003c/code\u003e\u003c/a\u003e Make Issuer Key ID signature subpacket non-critical\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/44ef98c5a687cc0d3b611be2061b32dabcc949dd\"\u003e\u003ccode\u003e44ef98c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/issues/276\"\u003e#276\u003c/a\u003e from mdosch/fix-random-source-is-broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/b105e24ae66f11e269a0efb8eb54ee0add82e90b\"\u003e\u003ccode\u003eb105e24\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into fix-random-source-is-broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/89b0776c10277d4c5f673f6d808ee4e1fa690b6a\"\u003e\u003ccode\u003e89b0776\u003c/code\u003e\u003c/a\u003e Only check that message signatures are newer than the key\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/2b2dbe9eca392b9fd7e193961df11320f5a5cb80\"\u003e\u003ccode\u003e2b2dbe9\u003c/code\u003e\u003c/a\u003e openpgp/clearsign: just use rand.Reader in tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/2732e09cbc206553bd7af8acf73077037bcddb9f\"\u003e\u003ccode\u003e2732e09\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/issues/275\"\u003e#275\u003c/a\u003e from ProtonMail/only-check-msg-sig-newer-than-key\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/8e272e796276ef5ff91e878d680be94faa76ee5b\"\u003e\u003ccode\u003e8e272e7\u003c/code\u003e\u003c/a\u003e Only check that message signatures are newer than the key\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ProtonMail/go-crypto/compare/v1.1.3...v1.1.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anchore/go-logger` from 0.0.0-20220728155337-03b66a5207d8 to 0.0.0-20230725134548-c21dafa1ec5a\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/anchore/go-logger/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anchore/packageurl-go` from 0.1.1-0.20230104203445-02e0a6721501 to 0.1.1-0.20250220190351-d62adb6e1115\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/anchore/packageurl-go/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anchore/syft` from 0.80.0 to 1.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anchore/syft/releases\"\u003egithub.com/anchore/syft's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.19.0\u003c/h2\u003e\n\u003ch3\u003eAdded Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd license parsing from vendor dirs [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3522\"\u003e#3522\u003c/a\u003e \u003ca href=\"https://github.com/dschmidt\"\u003e\u003ccode\u003e@​dschmidt\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSupport cataloging NuGet packages [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/373\"\u003e#373\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3484\"\u003e#3484\u003c/a\u003e \u003ca href=\"https://github.com/Kemosabert\"\u003e\u003ccode\u003e@​Kemosabert\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSyft generates invalid PURLs when name contains \u003ccode\u003e:\u003c/code\u003e [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3577\"\u003e#3577\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3596\"\u003e#3596\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/jkugler\"\u003e\u003ccode\u003e@​jkugler\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003ewarn instead of error if zero package catalogers are select - user might still run file metadata cataloger, for example [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3128\"\u003e#3128\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3468\"\u003e#3468\u003c/a\u003e \u003ca href=\"https://github.com/tomersein\"\u003e\u003ccode\u003e@​tomersein\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003esbom report: missing licenses [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3527\"\u003e#3527\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3549\"\u003e#3549\u003c/a\u003e \u003ca href=\"https://github.com/kzantow\"\u003e\u003ccode\u003e@​kzantow\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdditional Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebump stereoscope to v0.0.13 [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3601\"\u003e#3601\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/syft/compare/v1.18.1...v1.19.0\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Error with Syft on Singularity .sif file (panic: index out of range) [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3390\"\u003e#3390\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSPDX expressions are lost from CycloneDX if they contain extra parenthesis [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3441\"\u003e#3441\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3517\"\u003e#3517\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdditional Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate syft to use anchore fork of archiver without replace [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3516\"\u003e#3516\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/syft/compare/v1.18.0...v1.18.1\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.0\u003c/h2\u003e\n\u003ch3\u003eAdded Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003econvert spdx absolute to relative [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3509\"\u003e#3509\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd relationships for rust audit binary packages [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3500\"\u003e#3500\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003esupport configuration of layer size in Syft [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3428\"\u003e#3428\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3464\"\u003e#3464\u003c/a\u003e \u003ca href=\"https://github.com/tomersein\"\u003e\u003ccode\u003e@​tomersein\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSupport Dart arm/v7 in 3.x and 2.x [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3278\"\u003e#3278\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3475\"\u003e#3475\u003c/a\u003e \u003ca href=\"https://github.com/witchcraze\"\u003e\u003ccode\u003e@​witchcraze\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix order of rust dependencies and support git sources in Cargo.lock dependencies [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3502\"\u003e#3502\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUse file indexer directly when scanning with file source [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3333\"\u003e#3333\u003c/a\u003e \u003ca href=\"https://github.com/adammcclenaghan\"\u003e\u003ccode\u003e@​adammcclenaghan\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eRemove incorrect power-user help text that only image sources are supported [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/2046\"\u003e#2046\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eInvalid SPDX: missing copyright text [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3346\"\u003e#3346\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3495\"\u003e#3495\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eScanning a source tree with duplicate conanfile.txt dependencies generates multiple components [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3403\"\u003e#3403\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/syft/compare/v1.17.0...v1.18.0\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/222e6548a96f8c80015c1d24f01dea3052a04893\"\u003e\u003ccode\u003e222e654\u003c/code\u003e\u003c/a\u003e chore(deps): update tools to latest versions (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3602\"\u003e#3602\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/0969453dbe9af8d3e39a4a58756346dbb9bca80b\"\u003e\u003ccode\u003e0969453\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 3.28.1 to 3.28.2 (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3604\"\u003e#3604\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/a5ef8167a1c76623b84d4424cac54f43929582fe\"\u003e\u003ccode\u003ea5ef816\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/hashicorp/hcl/v2 from 2.22.0 to 2.23.0 (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3605\"\u003e#3605\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/07f065884346ded9874fe15c93835e8a6befc80f\"\u003e\u003ccode\u003e07f0658\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/aquasecurity/go-pep440-version (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3606\"\u003e#3606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/7f5dbf9872fd5a8d2e2d4cea1f1d67afeb4f9152\"\u003e\u003ccode\u003e7f5dbf9\u003c/code\u003e\u003c/a\u003e chore: bump stereoscope to v0.0.13 (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3601\"\u003e#3601\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/c10e904c283277fec052a571b30cc0026335982a\"\u003e\u003ccode\u003ec10e904\u003c/code\u003e\u003c/a\u003e feat(cataloger): add a terraform provider cataloger (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3378\"\u003e#3378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/1906c179d07c73c508372e66ba913a0ca2490233\"\u003e\u003ccode\u003e1906c17\u003c/code\u003e\u003c/a\u003e chore(deps): update tools to latest versions (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3597\"\u003e#3597\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/4edfa4d138f497b522fcdf76c5224347f710903f\"\u003e\u003ccode\u003e4edfa4d\u003c/code\u003e\u003c/a\u003e chore(deps): update CPE dictionary index (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3599\"\u003e#3599\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/a6557d7cecfe1438733d338b4cb65742fb509277\"\u003e\u003ccode\u003ea6557d7\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 5.2.0 to 5.3.0 (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3600\"\u003e#3600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/19a75fe504a8215f16a9fafc29ba3570d8200507\"\u003e\u003ccode\u003e19a75fe\u003c/code\u003e\u003c/a\u003e feat(golang): add license parsing from vendor dirs (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3522\"\u003e#3522\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anchore/syft/compare/v0.80.0...v1.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/andybalholm/brotli` from 1.0.4 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/57434b509141a6ee9681116b8d552069126e615f\"\u003e\u003ccode\u003e57434b5\u003c/code\u003e\u003c/a\u003e Encoder: check for empty block\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/97e8583d85e84e58bf9c4489874fd8bd624f1db5\"\u003e\u003ccode\u003e97e8583\u003c/code\u003e\u003c/a\u003e matchfinder.M4: some refinements to scoring\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/17e5901d050574f228e7d5a3f754a30a7cb55d55\"\u003e\u003ccode\u003e17e5901\u003c/code\u003e\u003c/a\u003e Make my matchfinder work more accessible.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/cf812c06f81910e3ae90490e622d9e35649e84eb\"\u003e\u003ccode\u003ecf812c0\u003c/code\u003e\u003c/a\u003e matchfinder: add M0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/1b6cf3696e719ad6494a1cfb3498b7cb9454350c\"\u003e\u003ccode\u003e1b6cf36\u003c/code\u003e\u003c/a\u003e matchfinder: remove MultiHash\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/265f3afc2a20805dd16a7adee7eed6fc30a2b548\"\u003e\u003ccode\u003e265f3af\u003c/code\u003e\u003c/a\u003e matchfinder: penalize score for overlapping matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/a8d524a96df6d1853526c1e953fc83fc5294f912\"\u003e\u003ccode\u003ea8d524a\u003c/code\u003e\u003c/a\u003e matchfinder: replace Score function with DistanceBitCost\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/578645e154bc2f876fc6cdf5c7c4c7bd5036b25c\"\u003e\u003ccode\u003e578645e\u003c/code\u003e\u003c/a\u003e matchfinder: add MultiHash\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/24b2bfad2d0c50a17d75dbb35e208adcbc1c4708\"\u003e\u003ccode\u003e24b2bfa\u003c/code\u003e\u003c/a\u003e matchfinder.M4: add Score function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/4a024e3eff5fe82fc6eb6dda0b8d0c4a3d5484ec\"\u003e\u003ccode\u003e4a024e3\u003c/code\u003e\u003c/a\u003e matchfinder.M4: add match chain\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/andybalholm/brotli/compare/v1.0.4...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/bmatcuk/doublestar/v4` from 4.6.0 to 4.8.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bmatcuk/doublestar/releases\"\u003egithub.com/bmatcuk/doublestar/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eSmall Performance Improvement for MatchUnvalidated\u003c/h2\u003e\n\u003cp\u003eSkip some additional validation checks in \u003ccode\u003eMatchUnvalidated\u003c/code\u003e. Thanks to \u003ca href=\"https://github.com/lukemassa\"\u003e\u003ccode\u003e@​lukemassa\u003c/code\u003e\u003c/a\u003e for the PR!\u003c/p\u003e\n\u003cp\u003eAdditional documentation improvements from \u003ca href=\"https://github.com/timo-reymann\"\u003e\u003ccode\u003e@​timo-reymann\u003c/code\u003e\u003c/a\u003e. Thanks!\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eExplicitly mention number support and add tests by \u003ca href=\"https://github.com/timo-reymann\"\u003e\u003ccode\u003e@​timo-reymann\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/100\"\u003ebmatcuk/doublestar#100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip more validation by \u003ca href=\"https://github.com/lukemassa\"\u003e\u003ccode\u003e@​lukemassa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/101\"\u003ebmatcuk/doublestar#101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timo-reymann\"\u003e\u003ccode\u003e@​timo-reymann\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/100\"\u003ebmatcuk/doublestar#100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukemassa\"\u003e\u003ccode\u003e@​lukemassa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/101\"\u003ebmatcuk/doublestar#101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.8.0...v4.8.1\"\u003ehttps://github.com/bmatcuk/doublestar/compare/v4.8.0...v4.8.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eFixed Escaped Meta in the \u0026quot;Base\u0026quot; of the Pattern\u003c/h2\u003e\n\u003cp\u003eIf the \u0026quot;base\u0026quot; of a pattern (ie, everything up to the first path slash before any meta characters) contains an escaped meta character, doublestar would fail to glob any files.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/tdurieux\"\u003e\u003ccode\u003e@​tdurieux\u003c/code\u003e\u003c/a\u003e for finding and fixing this bug!\u003c/p\u003e\n\u003ch2\u003eBreaking-ish Change\u003c/h2\u003e\n\u003cp\u003eI've updated \u003ccode\u003eSplitPattern\u003c/code\u003e to unescape meta characters in the first returned string. I suspect this shouldn't cause issues for anyone because, if anyone was using this function, they've probably either never passed a pattern with escaped meta characters, or hand-rolled an unescape method to fix the bug - which will now be a no-op for them.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(\u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/issues/96\"\u003e#96\u003c/a\u003e) unescapeMeta the pattern base  by \u003ca href=\"https://github.com/tdurieux\"\u003e\u003ccode\u003e@​tdurieux\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/97\"\u003ebmatcuk/doublestar#97\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tdurieux\"\u003e\u003ccode\u003e@​tdurieux\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/97\"\u003ebmatcuk/doublestar#97\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.7.1...v4.8.0\"\u003ehttps://github.com/bmatcuk/doublestar/compare/v4.7.1...v4.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eFixed FilepathGlob(\u0026quot;\u0026quot;)\u003c/h2\u003e\n\u003cp\u003eTo be consistent with \u003ccode\u003efilepath.Glob\u003c/code\u003e, \u003ccode\u003eFilepathGlob(\u0026quot;\u0026quot;)\u003c/code\u003e returns nil.\u003c/p\u003e\n\u003ch2\u003eAdded MatchUnvalidated, PathMatchUnvalidated\u003c/h2\u003e\n\u003cp\u003eThese functions provide a small performance improvement in cases where you don't care about whether or not the pattern is valid (maybe because you already ran \u003ccode\u003eValidatePattern\u003c/code\u003e).\u003c/p\u003e\n\u003ch2\u003eFixed Match bug with patterns like \u003ccode\u003ea/**/\u003c/code\u003e\u003c/h2\u003e\n\u003cp\u003eThanks \u003ca href=\"https://github.com/mmxmb\"\u003e\u003ccode\u003e@​mmxmb\u003c/code\u003e\u003c/a\u003e for submitting the bug and opening a PR in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/issues/89\"\u003e#89\u003c/a\u003e!\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/b707fe4305f7f29b0ce53be76ef7f98fc8204cd9\"\u003e\u003ccode\u003eb707fe4\u003c/code\u003e\u003c...\n\n_Description has been truncated_","html_url":"https://github.com/idiap/python-packagers/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/idiap%2Fpython-packagers/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}],"issue_packages":[{"old_version":"1.1.0","new_version":"1.1.3","update_type":"patch","path":null,"pr_created_at":"2025-04-25T15:17:44.000Z","version_change":"1.1.0 → 1.1.3","issue":{"uuid":"2481858346","node_id":"PR_kwDOOfq5fc6T7icq","number":1,"state":"closed","title":"chore(deps): bump the go-modules group with 69 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-05-21T23:24:35.000Z","author_association":"NONE","state_reason":null,"created_at":"2025-04-25T15:17:44.000Z","updated_at":"2025-05-21T23:24:35.000Z","time_to_close":2275611,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-modules","update_count":69,"packages":[{"name":"github.com/paketo-buildpacks/packit/v2","old_version":"2.17.0","new_version":"2.18.0","repository_url":"https://github.com/paketo-buildpacks/packit"},{"name":"dario.cat/mergo","old_version":"1.0.0","new_version":"1.0.1","repository_url":"https://github.com/imdario/mergo"},{"name":"github.com/Azure/go-ansiterm","old_version":"0.0.0-20210617225240-d185dfc1b5a1","new_version":"0.0.0-20230124172434-306776ec8161","repository_url":"https://github.com/Azure/go-ansiterm"},{"name":"github.com/CycloneDX/cyclonedx-go","old_version":"0.7.1","new_version":"0.9.2","repository_url":"https://github.com/CycloneDX/cyclonedx-go"},{"name":"github.com/DataDog/zstd","old_version":"1.4.5","new_version":"1.5.5","repository_url":"https://github.com/DataDog/zstd"},{"name":"github.com/Masterminds/sprig/v3","old_version":"3.2.3","new_version":"3.3.0","repository_url":"https://github.com/Masterminds/sprig"},{"name":"github.com/Microsoft/hcsshim","old_version":"0.11.7","new_version":"0.12.9","repository_url":"https://github.com/Microsoft/hcsshim"},{"name":"github.com/ProtonMail/go-crypto","old_version":"1.1.3","new_version":"1.1.6","repository_url":"https://github.com/ProtonMail/go-crypto"},{"name":"github.com/anchore/go-logger","old_version":"0.0.0-20220728155337-03b66a5207d8","new_version":"0.0.0-20230725134548-c21dafa1ec5a","repository_url":"https://github.com/anchore/go-logger"},{"name":"github.com/anchore/packageurl-go","old_version":"0.1.1-0.20230104203445-02e0a6721501","new_version":"0.1.1-0.20250220190351-d62adb6e1115","repository_url":"https://github.com/anchore/packageurl-go"},{"name":"github.com/anchore/syft","old_version":"0.80.0","new_version":"1.19.0","repository_url":"https://github.com/anchore/syft"},{"name":"github.com/andybalholm/brotli","old_version":"1.0.4","new_version":"1.1.1","repository_url":"https://github.com/andybalholm/brotli"},{"name":"github.com/bmatcuk/doublestar/v4","old_version":"4.6.0","new_version":"4.8.1","repository_url":"https://github.com/bmatcuk/doublestar"},{"name":"github.com/cenkalti/backoff/v4","old_version":"4.2.1","new_version":"4.3.0","repository_url":"https://github.com/cenkalti/backoff"},{"name":"github.com/cloudflare/circl","old_version":"1.3.7","new_version":"1.6.0","repository_url":"https://github.com/cloudflare/circl"},{"name":"github.com/containerd/stargz-snapshotter/estargz","old_version":"0.14.3","new_version":"0.16.3","repository_url":"https://github.com/containerd/stargz-snapshotter"},{"name":"github.com/cpuguy83/dockercfg","old_version":"0.3.1","new_version":"0.3.2","repository_url":"https://github.com/cpuguy83/dockercfg"},{"name":"github.com/cyphar/filepath-securejoin","old_version":"0.2.5","new_version":"0.4.1","repository_url":"https://github.com/cyphar/filepath-securejoin"},{"name":"github.com/docker/cli","old_version":"27.1.1+incompatible","new_version":"28.0.4+incompatible","repository_url":"https://github.com/docker/cli"},{"name":"github.com/docker/distribution","old_version":"2.8.2+incompatible","new_version":"2.8.3+incompatible","repository_url":"https://github.com/docker/distribution"},{"name":"github.com/docker/docker-credential-helpers","old_version":"0.7.0","new_version":"0.8.2","repository_url":"https://github.com/docker/docker-credential-helpers"},{"name":"github.com/gabriel-vasile/mimetype","old_version":"1.4.8","new_version":"1.4.9","repository_url":"https://github.com/gabriel-vasile/mimetype"},{"name":"github.com/go-git/go-billy/v5","old_version":"5.6.0","new_version":"5.6.2","repository_url":"https://github.com/go-git/go-billy"},{"name":"github.com/go-git/go-git/v5","old_version":"5.13.0","new_version":"5.14.0","repository_url":"https://github.com/go-git/go-git"},{"name":"github.com/go-ole/go-ole","old_version":"1.2.6","new_version":"1.3.0","repository_url":"https://github.com/go-ole/go-ole"},{"name":"github.com/golang/groupcache","old_version":"0.0.0-20210331224755-41bb18bfe9da","new_version":"0.0.0-20241129210726-2c02b8208cf8","repository_url":"https://github.com/golang/groupcache"},{"name":"github.com/google/go-containerregistry","old_version":"0.20.2","new_version":"0.20.3","repository_url":"https://github.com/google/go-containerregistry"},{"name":"github.com/huandu/xstrings","old_version":"1.3.3","new_version":"1.5.0","repository_url":"https://github.com/huandu/xstrings"},{"name":"github.com/jinzhu/copier","old_version":"0.3.5","new_version":"0.4.0","repository_url":"https://github.com/jinzhu/copier"},{"name":"github.com/klauspost/compress","old_version":"1.16.7","new_version":"1.18.0","repository_url":"https://github.com/klauspost/compress"},{"name":"github.com/klauspost/pgzip","old_version":"1.2.5","new_version":"1.2.6","repository_url":"https://github.com/klauspost/pgzip"},{"name":"github.com/knqyf263/go-rpmdb","old_version":"0.0.0-20230301153543-ba94b245509b","new_version":"0.1.1","repository_url":"https://github.com/knqyf263/go-rpmdb"},{"name":"github.com/magiconair/properties","old_version":"1.8.7","new_version":"1.8.9","repository_url":"https://github.com/magiconair/properties"},{"name":"github.com/mattn/go-runewidth","old_version":"0.0.13","new_version":"0.0.16","repository_url":"https://github.com/mattn/go-runewidth"},{"name":"github.com/moby/sys/sequential","old_version":"0.5.0","new_version":"0.6.0","repository_url":"https://github.com/moby/sys"},{"name":"github.com/moby/sys/user","old_version":"0.3.0","new_version":"0.4.0","repository_url":"https://github.com/moby/sys"},{"name":"github.com/moby/term","old_version":"0.5.0","new_version":"0.5.2","repository_url":"https://github.com/moby/term"},{"name":"github.com/nwaples/rardecode","old_version":"1.1.0","new_version":"1.1.3","repository_url":"https://github.com/nwaples/rardecode"},{"name":"github.com/opencontainers/image-spec","old_version":"1.1.0","new_version":"1.1.1","repository_url":"https://github.com/opencontainers/image-spec"},{"name":"github.com/pierrec/lz4/v4","old_version":"4.1.15","new_version":"4.1.22","repository_url":"https://github.com/pierrec/lz4"},{"name":"github.com/pjbgf/sha1cd","old_version":"0.3.0","new_version":"0.3.2","repository_url":"https://github.com/pjbgf/sha1cd"},{"name":"github.com/rivo/uniseg","old_version":"0.2.0","new_version":"0.4.7","repository_url":"https://github.com/rivo/uniseg"},{"name":"github.com/sassoftware/go-rpmutils","old_version":"0.2.0","new_version":"0.4.0","repository_url":"https://github.com/sassoftware/go-rpmutils"},{"name":"github.com/shirou/gopsutil/v3","old_version":"3.23.12","new_version":"3.24.5","repository_url":"https://github.com/shirou/gopsutil"},{"name":"github.com/shopspring/decimal","old_version":"1.2.0","new_version":"1.4.0","repository_url":"https://github.com/shopspring/decimal"},{"name":"github.com/skeema/knownhosts","old_version":"1.3.0","new_version":"1.3.1","repository_url":"https://github.com/skeema/knownhosts"},{"name":"github.com/spdx/tools-golang","old_version":"0.5.0","new_version":"0.5.5","repository_url":"https://github.com/spdx/tools-golang"},{"name":"github.com/spf13/afero","old_version":"1.9.5","new_version":"1.14.0","repository_url":"https://github.com/spf13/afero"},{"name":"github.com/spf13/cast","old_version":"1.5.0","new_version":"1.7.0","repository_url":"https://github.com/spf13/cast"},{"name":"github.com/sylabs/sif/v2","old_version":"2.8.1","new_version":"2.21.1","repository_url":"https://github.com/sylabs/sif"},{"name":"github.com/sylabs/squashfs","old_version":"0.6.1","new_version":"1.0.6","repository_url":"https://github.com/sylabs/squashfs"},{"name":"github.com/tklauser/go-sysconf","old_version":"0.3.12","new_version":"0.3.15","repository_url":"https://github.com/tklauser/go-sysconf"},{"name":"github.com/tklauser/numcpus","old_version":"0.6.1","new_version":"0.10.0","repository_url":"https://github.com/tklauser/numcpus"},{"name":"github.com/vbatts/go-mtree","old_version":"0.5.3","new_version":"0.5.4","repository_url":"https://github.com/vbatts/go-mtree"},{"name":"github.com/vbatts/tar-split","old_version":"0.11.3","new_version":"0.11.6","repository_url":"https://github.com/vbatts/tar-split"},{"name":"github.com/vifraa/gopom","old_version":"0.2.1","new_version":"1.0.0","repository_url":"https://github.com/vifraa/gopom"},{"name":"github.com/wagoodman/go-partybus","old_version":"0.0.0-20210627031916-db1f5573bbc5","new_version":"0.0.0-20230516145632-8ccac152c651","repository_url":"https://github.com/wagoodman/go-partybus"},{"name":"github.com/wagoodman/go-progress","old_version":"0.0.0-20230301185719-21920a456ad5","new_version":"0.0.0-20230925121702-07e42b3cdba0","repository_url":"https://github.com/wagoodman/go-progress"},{"name":"github.com/yusufpapurcu/wmi","old_version":"1.2.3","new_version":"1.2.4","repository_url":"https://github.com/yusufpapurcu/wmi"},{"name":"golang.org/x/crypto","old_version":"0.36.0","new_version":"0.37.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/mod","old_version":"0.19.0","new_version":"0.24.0","repository_url":"https://github.com/golang/mod"},{"name":"golang.org/x/net","old_version":"0.37.0","new_version":"0.39.0","repository_url":"https://github.com/golang/net"},{"name":"golang.org/x/sync","old_version":"0.12.0","new_version":"0.13.0","repository_url":"https://github.com/golang/sync"},{"name":"golang.org/x/sys","old_version":"0.31.0","new_version":"0.32.0","repository_url":"https://github.com/golang/sys"},{"name":"golang.org/x/text","old_version":"0.23.0","new_version":"0.24.0","repository_url":"https://github.com/golang/text"},{"name":"golang.org/x/xerrors","old_version":"0.0.0-20220907171357-04be3eba64a2","new_version":"0.0.0-20231012003039-104605ab7028","repository_url":"https://github.com/golang/xerrors"},{"name":"google.golang.org/genproto/googleapis/rpc","old_version":"0.0.0-20240401170217-c3f982113cda","new_version":"0.0.0-20241223144023-3abc09e42ca8","repository_url":"https://github.com/googleapis/go-genproto"},{"name":"google.golang.org/grpc","old_version":"1.59.0","new_version":"1.67.3","repository_url":"https://github.com/grpc/grpc-go"},{"name":"google.golang.org/protobuf","old_version":"1.36.5","new_version":"1.36.6"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-modules group with 69 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.17.0` | `2.18.0` |\n| [dario.cat/mergo](https://github.com/imdario/mergo) | `1.0.0` | `1.0.1` |\n| [github.com/Azure/go-ansiterm](https://github.com/Azure/go-ansiterm) | `0.0.0-20210617225240-d185dfc1b5a1` | `0.0.0-20230124172434-306776ec8161` |\n| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.7.1` | `0.9.2` |\n| [github.com/DataDog/zstd](https://github.com/DataDog/zstd) | `1.4.5` | `1.5.5` |\n| [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) | `3.2.3` | `3.3.0` |\n| [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.11.7` | `0.12.9` |\n| [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.3` | `1.1.6` |\n| [github.com/anchore/go-logger](https://github.com/anchore/go-logger) | `0.0.0-20220728155337-03b66a5207d8` | `0.0.0-20230725134548-c21dafa1ec5a` |\n| [github.com/anchore/packageurl-go](https://github.com/anchore/packageurl-go) | `0.1.1-0.20230104203445-02e0a6721501` | `0.1.1-0.20250220190351-d62adb6e1115` |\n| [github.com/anchore/syft](https://github.com/anchore/syft) | `0.80.0` | `1.19.0` |\n| [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.0.4` | `1.1.1` |\n| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.6.0` | `4.8.1` |\n| [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.1` | `4.3.0` |\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.7` | `1.6.0` |\n| [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) | `0.14.3` | `0.16.3` |\n| [github.com/cpuguy83/dockercfg](https://github.com/cpuguy83/dockercfg) | `0.3.1` | `0.3.2` |\n| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.2.5` | `0.4.1` |\n| [github.com/docker/cli](https://github.com/docker/cli) | `27.1.1+incompatible` | `28.0.4+incompatible` |\n| [github.com/docker/distribution](https://github.com/docker/distribution) | `2.8.2+incompatible` | `2.8.3+incompatible` |\n| [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.7.0` | `0.8.2` |\n| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.8` | `1.4.9` |\n| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.0` | `5.6.2` |\n| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.0` | `5.14.0` |\n| [github.com/go-ole/go-ole](https://github.com/go-ole/go-ole) | `1.2.6` | `1.3.0` |\n| [github.com/golang/groupcache](https://github.com/golang/groupcache) | `0.0.0-20210331224755-41bb18bfe9da` | `0.0.0-20241129210726-2c02b8208cf8` |\n| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.2` | `0.20.3` |\n| [github.com/huandu/xstrings](https://github.com/huandu/xstrings) | `1.3.3` | `1.5.0` |\n| [github.com/jinzhu/copier](https://github.com/jinzhu/copier) | `0.3.5` | `0.4.0` |\n| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.16.7` | `1.18.0` |\n| [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) | `1.2.5` | `1.2.6` |\n| [github.com/knqyf263/go-rpmdb](https://github.com/knqyf263/go-rpmdb) | `0.0.0-20230301153543-ba94b245509b` | `0.1.1` |\n| [github.com/magiconair/properties](https://github.com/magiconair/properties) | `1.8.7` | `1.8.9` |\n| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.13` | `0.0.16` |\n| [github.com/moby/sys/sequential](https://github.com/moby/sys) | `0.5.0` | `0.6.0` |\n| [github.com/moby/sys/user](https://github.com/moby/sys) | `0.3.0` | `0.4.0` |\n| [github.com/moby/term](https://github.com/moby/term) | `0.5.0` | `0.5.2` |\n| [github.com/nwaples/rardecode](https://github.com/nwaples/rardecode) | `1.1.0` | `1.1.3` |\n| [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) | `1.1.0` | `1.1.1` |\n| [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.15` | `4.1.22` |\n| [github.com/pjbgf/sha1cd](https://github.com/pjbgf/sha1cd) | `0.3.0` | `0.3.2` |\n| [github.com/rivo/uniseg](https://github.com/rivo/uniseg) | `0.2.0` | `0.4.7` |\n| [github.com/sassoftware/go-rpmutils](https://github.com/sassoftware/go-rpmutils) | `0.2.0` | `0.4.0` |\n| [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.23.12` | `3.24.5` |\n| [github.com/shopspring/decimal](https://github.com/shopspring/decimal) | `1.2.0` | `1.4.0` |\n| [github.com/skeema/knownhosts](https://github.com/skeema/knownhosts) | `1.3.0` | `1.3.1` |\n| [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang) | `0.5.0` | `0.5.5` |\n| [github.com/spf13/afero](https://github.com/spf13/afero) | `1.9.5` | `1.14.0` |\n| [github.com/spf13/cast](https://github.com/spf13/cast) | `1.5.0` | `1.7.0` |\n| [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.8.1` | `2.21.1` |\n| [github.com/sylabs/squashfs](https://github.com/sylabs/squashfs) | `0.6.1` | `1.0.6` |\n| [github.com/tklauser/go-sysconf](https://github.com/tklauser/go-sysconf) | `0.3.12` | `0.3.15` |\n| [github.com/tklauser/numcpus](https://github.com/tklauser/numcpus) | `0.6.1` | `0.10.0` |\n| [github.com/vbatts/go-mtree](https://github.com/vbatts/go-mtree) | `0.5.3` | `0.5.4` |\n| [github.com/vbatts/tar-split](https://github.com/vbatts/tar-split) | `0.11.3` | `0.11.6` |\n| [github.com/vifraa/gopom](https://github.com/vifraa/gopom) | `0.2.1` | `1.0.0` |\n| [github.com/wagoodman/go-partybus](https://github.com/wagoodman/go-partybus) | `0.0.0-20210627031916-db1f5573bbc5` | `0.0.0-20230516145632-8ccac152c651` |\n| [github.com/wagoodman/go-progress](https://github.com/wagoodman/go-progress) | `0.0.0-20230301185719-21920a456ad5` | `0.0.0-20230925121702-07e42b3cdba0` |\n| [github.com/yusufpapurcu/wmi](https://github.com/yusufpapurcu/wmi) | `1.2.3` | `1.2.4` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.37.0` |\n| [golang.org/x/mod](https://github.com/golang/mod) | `0.19.0` | `0.24.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.37.0` | `0.39.0` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.12.0` | `0.13.0` |\n| [golang.org/x/sys](https://github.com/golang/sys) | `0.31.0` | `0.32.0` |\n| [golang.org/x/text](https://github.com/golang/text) | `0.23.0` | `0.24.0` |\n| [golang.org/x/xerrors](https://github.com/golang/xerrors) | `0.0.0-20220907171357-04be3eba64a2` | `0.0.0-20231012003039-104605ab7028` |\n| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20240401170217-c3f982113cda` | `0.0.0-20241223144023-3abc09e42ca8` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.59.0` | `1.67.3` |\n| google.golang.org/protobuf | `1.36.5` | `1.36.6` |\n\nUpdates `github.com/paketo-buildpacks/packit/v2` from 2.17.0 to 2.18.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/paketo-buildpacks/packit/releases\"\u003egithub.com/paketo-buildpacks/packit/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.18.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump golang.org/x/net from 0.37.0 to 0.38.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/pull/645\"\u003epaketo-buildpacks/packit#645\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/pull/646\"\u003epaketo-buildpacks/packit#646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse upstream syft by \u003ca href=\"https://github.com/modulo11\"\u003e\u003ccode\u003e@​modulo11\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/pull/639\"\u003epaketo-buildpacks/packit#639\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github.com/anchore/stereoscope from 0.0.0-20230412183729-8602f1afc574 to 0.1.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/pull/644\"\u003epaketo-buildpacks/packit#644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/paketo-buildpacks/packit/compare/v2.17.0...v2.18.0\"\u003ehttps://github.com/paketo-buildpacks/packit/compare/v2.17.0...v2.18.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/paketo-buildpacks/packit/commit/aa5bc77379adb566aeea14656ac349abb37ae016\"\u003e\u003ccode\u003eaa5bc77\u003c/code\u003e\u003c/a\u003e Bump github.com/anchore/stereoscope\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/paketo-buildpacks/packit/commit/f3fa74a471b093d6193c19039a332d24ded1328b\"\u003e\u003ccode\u003ef3fa74a\u003c/code\u003e\u003c/a\u003e Use upstream syft (\u003ca href=\"https://redirect.github.com/paketo-buildpacks/packit/issues/639\"\u003e#639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/paketo-buildpacks/packit/commit/7e884aad269765faa7656f53ed52a42605574081\"\u003e\u003ccode\u003e7e884aa\u003c/code\u003e\u003c/a\u003e Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/paketo-buildpacks/packit/commit/f3ac27acb68ef52e8eb8a6a7efaac53b4f739a13\"\u003e\u003ccode\u003ef3ac27a\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/net from 0.37.0 to 0.38.0\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/paketo-buildpacks/packit/compare/v2.17.0...v2.18.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dario.cat/mergo` from 1.0.0 to 1.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/imdario/mergo/releases\"\u003edario.cat/mergo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e by \u003ca href=\"https://github.com/vsemichev\"\u003e\u003ccode\u003e@​vsemichev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/darccio/mergo/pull/253\"\u003edarccio/mergo#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: \u003ccode\u003eWithoutDereference\u003c/code\u003e should respect non-nil struct pointers by \u003ca href=\"https://github.com/joshkaplinsky\"\u003e\u003ccode\u003e@​joshkaplinsky\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/darccio/mergo/pull/251\"\u003edarccio/mergo#251\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vsemichev\"\u003e\u003ccode\u003e@​vsemichev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/darccio/mergo/pull/253\"\u003edarccio/mergo#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/joshkaplinsky\"\u003e\u003ccode\u003e@​joshkaplinsky\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/darccio/mergo/pull/251\"\u003edarccio/mergo#251\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/darccio/mergo/compare/v1.0.0...v1.0.1\"\u003ehttps://github.com/darccio/mergo/compare/v1.0.0...v1.0.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/59ea6a9cd9f9c60cb6b1c58476f76cd3172ccebf\"\u003e\u003ccode\u003e59ea6a9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/251\"\u003e#251\u003c/a\u003e from joshkaplinsky/joshkaplinsky/without-dereference-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/96f24afa924ff3b6f024de9f5aa72020078b06f9\"\u003e\u003ccode\u003e96f24af\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/253\"\u003e#253\u003c/a\u003e from vsemichev/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/2f1a6156ce0c8b8a6291926b75bc27b9b8fc2bfe\"\u003e\u003ccode\u003e2f1a615\u003c/code\u003e\u003c/a\u003e fixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e. adds test to verify the fix.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/4da170b81eef59e84cfa68070a73aea40f98ddbd\"\u003e\u003ccode\u003e4da170b\u003c/code\u003e\u003c/a\u003e fixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e. attempt \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/3\"\u003e#3\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/a13a1175be733af04b175c9fe616f594c5e8dfa9\"\u003e\u003ccode\u003ea13a117\u003c/code\u003e\u003c/a\u003e fixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e. attempt \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/2\"\u003e#2\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/6b830ffc3df09a6f22aafd7dfbf5f02d0da2ee22\"\u003e\u003ccode\u003e6b830ff\u003c/code\u003e\u003c/a\u003e fixes issue \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/187\"\u003e#187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/f33862a52373a787536aff7428212ce0ecb0cac0\"\u003e\u003ccode\u003ef33862a\u003c/code\u003e\u003c/a\u003e WithoutDereference should respect structs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/cde9f0ea26cccb1168ee3900cf8ca457bb928c3c\"\u003e\u003ccode\u003ecde9f0e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/imdario/mergo/issues/246\"\u003e#246\u003c/a\u003e from darccio/darccio/v1-frozen\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/f1e2fe566a09b85177236eea3f03fc5dab009edc\"\u003e\u003ccode\u003ef1e2fe5\u003c/code\u003e\u003c/a\u003e chore: frozen v1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/darccio/mergo/commit/7f7b4afa33c905820aa75c473f3f13321dd499b5\"\u003e\u003ccode\u003e7f7b4af\u003c/code\u003e\u003c/a\u003e Update FUNDING.yml\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/imdario/mergo/compare/v1.0.0...v1.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Azure/go-ansiterm` from 0.0.0-20210617225240-d185dfc1b5a1 to 0.0.0-20230124172434-306776ec8161\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/Azure/go-ansiterm/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/CycloneDX/cyclonedx-go` from 0.7.1 to 0.9.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/releases\"\u003egithub.com/CycloneDX/cyclonedx-go's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e39ede217f126cfbc80eabf880f6643be3d392a4f: feat: add MarshalXML and UnmarshalXML (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ee9191ed11a269fcb6b3fb54e000ed6d81b5bf9db: feat: add UnmarshalJSON (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e80fede1f13a956d35eb14696cd2ca9d2d943f809: fix: add json tag for \u003ccode\u003eIdentity\u003c/code\u003e (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e24e9503293f0837e6e7ea3ff670ef958e6075b87: fix: tests (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ed68a199bc1747e5d6a7d4196c2f270535bbf6e3e: fix: use \u003ccode\u003eidentity\u003c/code\u003e as array in \u003ccode\u003evalid-evidence.json\u003c/code\u003e (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eff9cc28f9c9554328bd6c1ad56098be5a692d5e9: fix: use componentEvidence array for Evidence.Identity field (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuilding and Packaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e016ee293d464d6383be3a714f7fb0debebef8ad5: build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e77153ab5fe005f6484ac1e1225e7152df00db3f1: build(deps): bump actions/checkout from 4.2.0 to 4.2.1 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e4f50d02c1282ac1d0d7448502b231a0e84a1e529: build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003eb84451219e77e0fbbe7d5ba054bcf25dbc7aaea4: build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e238cbea3479fed9fdfcbfa5f1751828390a05211: build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ebbe8f3c2c7c4567514ae966c69bf93fc1b3dba2a: build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e05f8930fe918a31941ebf90eec627e5e6e908d1c: build(deps): bump github.com/terminalstatic/go-xsd-validate (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e082f87791a5e290c9d4c6e8126dc0cc987028a60: build(deps): bump gitpod/workspace-go from \u003ccode\u003e2a9e01c\u003c/code\u003e to \u003ccode\u003e9c95281\u003c/code\u003e (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e093b1c15164dad5d46768db0e3f6ee43eb60ca20: build(deps): bump gitpod/workspace-go from \u003ccode\u003e9c95281\u003c/code\u003e to \u003ccode\u003e6932342\u003c/code\u003e (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e47b7e01ce8f8209894065e9656217b8c00a3c8ea: build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ece6eb841cb1e21aa28efbccd9eb8fe5eea0555c9: build(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOthers\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e4d3aff9fab9ae78bd6fbbc9fd0912fab14c8fb64: UPDATE_SNAPSHOTS=true make test (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e31d954443e6563aeee69d82bdfb82aee83e07df1: refactor (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e0170729e313a681fc8659643601410ae10ffe803: refactor: update convert package (\u003ca href=\"https://github.com/DmitriyLewen\"\u003e\u003ccode\u003e@​DmitriyLewen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.1\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e6f0e0cf025dd99ab903e33f8e043d92b28dab4f6: fix: \u003ccode\u003enil\u003c/code\u003e pointer dereference during evidence conversion (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ece43b6f4cb5707d3ef2db1af1d597f5b23bf0e15: fix: make linter happy (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e5d799e634b9bed9c86621048544737b210e433e8: fix: remove deprecated goreleaser flag (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBuilding and Packaging\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e6d5bcb0e277207551dbc728eb29959f1d3cbd685: build(deps): bump actions/checkout from 4.1.6 to 4.1.7 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ef34fc0c413da74d20d1cc240863aaf2eb6b274f7: build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003e71cff221b8dbbc1d50f839fa76ecea4e42d83a2b: build(deps): bump gitpod/workspace-go from \u003ccode\u003e8d15123\u003c/code\u003e to \u003ccode\u003e2a9e01c\u003c/code\u003e (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003eea693550558d230b3fbba810b6e75ac2eb0b55c8: build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003cli\u003ed5cbdad49dfbf54f2dab4ad95bd1a47c710a526c: build(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 (\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot])\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e729c284798ebe341ced210b661362f77d68cd655: feat: Add CycloneDX 1.6 fields swhid and omniborId (\u003ca href=\"https://github.com/snyk-tim\"\u003e\u003ccode\u003e@​snyk-tim\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb5d35959767efce95f50e96bf752c47fbe374496: feat: add manufacturer and authors (\u003ca href=\"https://github.com/snyk-tim\"\u003e\u003ccode\u003e@​snyk-tim\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec52e698d2fe3fbd60df6ff397f44e7b0ea15a4bc: feat: raise baseline go version to 1.20 (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e9166e10fdecaadd8a97ceed9636261d351d90a65: fix: \u003ccode\u003eioutil\u003c/code\u003e -\u0026gt; \u003ccode\u003eio\u003c/code\u003e (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e349fc8cd072e90d81c0328f1d9dab16aa30fcf60: fix: add bom-ref to OrganizationalEntity/Contact (\u003ca href=\"https://github.com/snyk-tim\"\u003e\u003ccode\u003e@​snyk-tim\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ec97da90e259e0051e02e07300c75ad5e37a0311b: fix: handle breaking changes in skywalking-eyes (\u003ca href=\"https://github.com/nscuro\"\u003e\u003ccode\u003e@​nscuro\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/cba06ffac571448d3fa689afdb1ad613fdb7dfd7\"\u003e\u003ccode\u003ecba06ff\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/205\"\u003e#205\u003c/a\u003e from CycloneDX/dependabot/go_modules/github.com/termi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/5c8174911b0b82a52f1aab6c59ce70e6b0b111a0\"\u003e\u003ccode\u003e5c81749\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/211\"\u003e#211\u003c/a\u003e from CycloneDX/dependabot/github_actions/actions/setu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/753526c89e68e1961e89a750a9ebac09bc2620f1\"\u003e\u003ccode\u003e753526c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/204\"\u003e#204\u003c/a\u003e from DmitriyLewen/fix/componentEvidence-as-array\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/4d3aff9fab9ae78bd6fbbc9fd0912fab14c8fb64\"\u003e\u003ccode\u003e4d3aff9\u003c/code\u003e\u003c/a\u003e UPDATE_SNAPSHOTS=true make test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/d68a199bc1747e5d6a7d4196c2f270535bbf6e3e\"\u003e\u003ccode\u003ed68a199\u003c/code\u003e\u003c/a\u003e fix: use \u003ccode\u003eidentity\u003c/code\u003e as array in \u003ccode\u003evalid-evidence.json\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/24e9503293f0837e6e7ea3ff670ef958e6075b87\"\u003e\u003ccode\u003e24e9503\u003c/code\u003e\u003c/a\u003e fix: tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/238cbea3479fed9fdfcbfa5f1751828390a05211\"\u003e\u003ccode\u003e238cbea\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-go from 5.1.0 to 5.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/a7f74150fcd8f55f64527e333ad2d25739756082\"\u003e\u003ccode\u003ea7f7415\u003c/code\u003e\u003c/a\u003e Merge branch 'master' of github.com:DmitriyLewen/cyclonedx-go into fix/compon...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/05f8930fe918a31941ebf90eec627e5e6e908d1c\"\u003e\u003ccode\u003e05f8930\u003c/code\u003e\u003c/a\u003e build(deps): bump github.com/terminalstatic/go-xsd-validate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/commit/464d4260e584e132c6c6bcf49792d8bc115043bb\"\u003e\u003ccode\u003e464d426\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/CycloneDX/cyclonedx-go/issues/202\"\u003e#202\u003c/a\u003e from CycloneDX/dependabot/github_actions/actions/chec...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/CycloneDX/cyclonedx-go/compare/v0.7.1...v0.9.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/DataDog/zstd` from 1.4.5 to 1.5.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/DataDog/zstd/releases\"\u003egithub.com/DataDog/zstd's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ezstd 1.5.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate vendored zstd to 1.5.5 (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/125\"\u003e#125\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[circleci] Update to non-deprecated images (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/124\"\u003e#124\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/DataDog/zstd/compare/v1.5.2...v1.5.5\"\u003ehttps://github.com/DataDog/zstd/compare/v1.5.2...v1.5.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.5 - wrapper patches 1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd DecompressInto for decompression of payloads with known sizes by \u003ca href=\"https://github.com/jbowens\"\u003e\u003ccode\u003e@​jbowens\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/130\"\u003eDataDog/zstd#130\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[bulk] Fix being able to Decompress large payloads  by \u003ca href=\"https://github.com/Viq111\"\u003e\u003ccode\u003e@​Viq111\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/132\"\u003eDataDog/zstd#132\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jbowens\"\u003e\u003ccode\u003e@​jbowens\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/130\"\u003eDataDog/zstd#130\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/DataDog/zstd/compare/v1.5.5...v1.5.5+patch1\"\u003ehttps://github.com/DataDog/zstd/compare/v1.5.5...v1.5.5+patch1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.2\u003c/h2\u003e\n\u003cp\u003eThis release updates the upstream zstd version to \u003ca href=\"https://github.com/facebook/zstd/releases/tag/v1.5.2\"\u003e1.5.2\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/116\"\u003eDataDog/zstd#116\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe update \u003ccode\u003e1.5.0\u003c/code\u003e -\u0026gt; \u003ccode\u003e1.5.2\u003c/code\u003e overall has a similar performance profile. Please note that depending on the workload, performance could vary by -10% / +10%\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.2 - wrapper patches 1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix unneededly allocated large decompression buffer by \u003ca href=\"https://github.com/XiaochenCui\"\u003e\u003ccode\u003e@​XiaochenCui\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/118\"\u003e#118\u003c/a\u003e) \u0026amp; \u003ca href=\"https://github.com/Viq111\"\u003e\u003ccode\u003e@​Viq111\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/120\"\u003eDataDog/zstd#120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd SetNbWorkers api to the writer code (see \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/108\"\u003e#108\u003c/a\u003e) by \u003ca href=\"https://github.com/bsergean\"\u003e\u003ccode\u003e@​bsergean\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/117\"\u003eDataDog/zstd#117\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eFor large workloads, the performance can be improved by 3-6x (see \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/117#issuecomment-1147812767\"\u003eDataDog/zstd#117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eWrite()\u003c/code\u003e becomes async with workers \u0026gt; 1, make sure you read the method documentation before using\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bsergean\"\u003e\u003ccode\u003e@​bsergean\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/117\"\u003eDataDog/zstd#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/XiaochenCui\"\u003e\u003ccode\u003e@​XiaochenCui\u003c/code\u003e\u003c/a\u003e for his work on \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/118\"\u003eDataDog/zstd#118\u003c/a\u003e that led to \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/120\"\u003e#120\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/DataDog/zstd/compare/v1.5.2...v1.5.2+patch1\"\u003ehttps://github.com/DataDog/zstd/compare/v1.5.2...v1.5.2+patch1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.0\u003c/h2\u003e\n\u003cp\u003eThis release updates the upstream zstd version to \u003ca href=\"https://github.com/facebook/zstd/releases/tag/v1.5.0\"\u003e1.5.0\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/106\"\u003e#106\u003c/a\u003e) (thanks \u003ca href=\"https://github.com/SirSniper\"\u003e\u003ccode\u003e@​SirSniper\u003c/code\u003e\u003c/a\u003e!) which sports some major performance improvements!\u003c/p\u003e\n\u003cp\u003eIt comes with additional changes to the Go wrapper:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAllow building against zstd dynamic library instead of static by \u003ca href=\"https://github.com/dopuskh3\"\u003e\u003ccode\u003e@​dopuskh3\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/109\"\u003e#109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDon't block the stream reader when a block is available by \u003ca href=\"https://github.com/delthas\"\u003e\u003ccode\u003e@​delthas\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/96\"\u003e#96\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ezstd 1.5.0 - wrapper patches 1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ezstd.go: Set ZSTD_LEGACY_SUPPORT=4 to decompress legacy payloads by \u003ca href=\"https://github.com/evanj\"\u003e\u003ccode\u003e@​evanj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/DataDog/zstd/pull/105\"\u003eDataDog/zstd#105\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/DataDog/zstd/compare/v1.5.0...v1.5.0+patch1\"\u003ehttps://github.com/DataDog/zstd/compare/v1.5.0...v1.5.0+patch1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ezstd 1.5.0 - wrapper patches 2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/5f14d6af117fa84b37f99d4cde775e6039be6d3b\"\u003e\u003ccode\u003e5f14d6a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/125\"\u003e#125\u003c/a\u003e from DataDog/viq111/1.5.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/ca4d3c750b5c4ed578610d74b0517b6b8137acf1\"\u003e\u003ccode\u003eca4d3c7\u003c/code\u003e\u003c/a\u003e Update vendored zstd to 1.5.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/03725e7d3139ba9eeab41a8433e3e7b3f37d2019\"\u003e\u003ccode\u003e03725e7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/126\"\u003e#126\u003c/a\u003e from DataDog/viq111/circleci\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/1b4c894c78b713e358dd7365df7129a09d78ff04\"\u003e\u003ccode\u003e1b4c894\u003c/code\u003e\u003c/a\u003e [circle] Remove latest as cimg/go does not have the tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/ff5a3bbaf8631a73e4d4bc6b018c2bfb0abf6315\"\u003e\u003ccode\u003eff5a3bb\u003c/code\u003e\u003c/a\u003e [circleci] Update tested Go versions to 1.19 \u0026amp; 1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/6e5a54b6e513cac5bdcc61fe9a67d92b55986417\"\u003e\u003ccode\u003e6e5a54b\u003c/code\u003e\u003c/a\u003e [circleci] Switch to newer images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/fd035e54e312e5583300c0ef48fc522d13cffe97\"\u003e\u003ccode\u003efd035e5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/117\"\u003e#117\u003c/a\u003e from bsergean/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/c7982388d4a91c11123f28fbae05aa4e082d9228\"\u003e\u003ccode\u003ec798238\u003c/code\u003e\u003c/a\u003e Merge branch '1.x' into patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/13d5b107680f7fad45fe9ccc7763fc60224ceb8e\"\u003e\u003ccode\u003e13d5b10\u003c/code\u003e\u003c/a\u003e update documentation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/DataDog/zstd/commit/d64f463c15f9688a7233b4970827164f5190b133\"\u003e\u003ccode\u003ed64f463\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/DataDog/zstd/issues/120\"\u003e#120\u003c/a\u003e from DataDog/viq111/fix-min-size\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/DataDog/zstd/compare/v1.4.5...v1.5.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Masterminds/sprig/v3` from 3.2.3 to 3.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/sprig/releases\"\u003egithub.com/Masterminds/sprig/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdating the Go versions used in testing by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/405\"\u003eMasterminds/sprig#405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eChange intial to initial. by \u003ca href=\"https://github.com/chrishalbert\"\u003e\u003ccode\u003e@​chrishalbert\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/391\"\u003eMasterminds/sprig#391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating dependencies by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/404\"\u003eMasterminds/sprig#404\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecorrect value by \u003ca href=\"https://github.com/jheyduk\"\u003e\u003ccode\u003e@​jheyduk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/376\"\u003eMasterminds/sprig#376\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating location of mergo by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/406\"\u003eMasterminds/sprig#406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeature: added sha512sum function by \u003ca href=\"https://github.com/itzik-elayev\"\u003e\u003ccode\u003e@​itzik-elayev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/400\"\u003eMasterminds/sprig#400\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: Add missing link to url functions by \u003ca href=\"https://github.com/carlpett\"\u003e\u003ccode\u003e@​carlpett\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/375\"\u003eMasterminds/sprig#375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate doc.go by \u003ca href=\"https://github.com/chey\"\u003e\u003ccode\u003e@​chey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/369\"\u003eMasterminds/sprig#369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate mathf.md by \u003ca href=\"https://github.com/zzhu41\"\u003e\u003ccode\u003e@​zzhu41\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/290\"\u003eMasterminds/sprig#290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemoving duplicate documentation by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/407\"\u003eMasterminds/sprig#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdating the changelog for the 3.3.0 release by \u003ca href=\"https://github.com/mattfarina\"\u003e\u003ccode\u003e@​mattfarina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/408\"\u003eMasterminds/sprig#408\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chrishalbert\"\u003e\u003ccode\u003e@​chrishalbert\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/391\"\u003eMasterminds/sprig#391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jheyduk\"\u003e\u003ccode\u003e@​jheyduk\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/376\"\u003eMasterminds/sprig#376\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itzik-elayev\"\u003e\u003ccode\u003e@​itzik-elayev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/400\"\u003eMasterminds/sprig#400\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carlpett\"\u003e\u003ccode\u003e@​carlpett\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/375\"\u003eMasterminds/sprig#375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chey\"\u003e\u003ccode\u003e@​chey\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/369\"\u003eMasterminds/sprig#369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/zzhu41\"\u003e\u003ccode\u003e@​zzhu41\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/Masterminds/sprig/pull/290\"\u003eMasterminds/sprig#290\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0\"\u003ehttps://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md\"\u003egithub.com/Masterminds/sprig/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 3.3.0 (2024-08-29)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/400\"\u003e#400\u003c/a\u003e: added sha512sum function (thanks \u003ca href=\"https://github.com/itzik-elayev\"\u003e\u003ccode\u003e@​itzik-elayev\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/407\"\u003e#407\u003c/a\u003e: Removed duplicate documentation (functions were documentated in 2 places)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/290\"\u003e#290\u003c/a\u003e: Corrected copy/paster oops in math documentation (thanks \u003ca href=\"https://github.com/zzhu41\"\u003e\u003ccode\u003e@​zzhu41\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/369\"\u003e#369\u003c/a\u003e: Corrected template reference in docs (thanks \u003ca href=\"https://github.com/chey\"\u003e\u003ccode\u003e@​chey\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/375\"\u003e#375\u003c/a\u003e: Added link to URL documenation (thanks \u003ca href=\"https://github.com/carlpett\"\u003e\u003ccode\u003e@​carlpett\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/406\"\u003e#406\u003c/a\u003e: Updated the mergo dependency which had a breaking change (which was accounted for)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/376\"\u003e#376\u003c/a\u003e: Fixed documentation error (thanks \u003ca href=\"https://github.com/jheyduk\"\u003e\u003ccode\u003e@​jheyduk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/404\"\u003e#404\u003c/a\u003e: Updated dependency tree\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/391\"\u003e#391\u003c/a\u003e: Fixed misspelling (thanks \u003ca href=\"https://github.com/chrishalbert\"\u003e\u003ccode\u003e@​chrishalbert\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/405\"\u003e#405\u003c/a\u003e: Updated Go versions used in testing\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/e708470d529a10ac1a3f02ab6fdd339b65958372\"\u003e\u003ccode\u003ee708470\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/408\"\u003e#408\u003c/a\u003e from mattfarina/update-changelog-3.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/8fc4354ab4cdcdb0e18fc6626812286476209e20\"\u003e\u003ccode\u003e8fc4354\u003c/code\u003e\u003c/a\u003e Updating the changelog for the 3.3.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/cb81a327e35eb6ff7f1856dacf4310efb5d7f2d7\"\u003e\u003ccode\u003ecb81a32\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/407\"\u003e#407\u003c/a\u003e from mattfarina/remove-dup-math-functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/26376936dd279f4e1389cd772ca9132d123c9ed5\"\u003e\u003ccode\u003e2637693\u003c/code\u003e\u003c/a\u003e Removing duplicate documentation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/06b9a87558bb8fc85b29a84603a9116f381283af\"\u003e\u003ccode\u003e06b9a87\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/290\"\u003e#290\u003c/a\u003e from zzhu41/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/e663ec6019887546abdc1b4505bc382ced00cc61\"\u003e\u003ccode\u003ee663ec6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/369\"\u003e#369\u003c/a\u003e from chey/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/bb2f73f85f05cc0306814d56c91941b2cc80491e\"\u003e\u003ccode\u003ebb2f73f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/375\"\u003e#375\u003c/a\u003e from carlpett/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/f07659ea6531546e2e3c1648b63b3e7d0085f195\"\u003e\u003ccode\u003ef07659e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/400\"\u003e#400\u003c/a\u003e from itzik-elayev/master\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/98b35c11f040f8247922ca5680d7c338d50fd8da\"\u003e\u003ccode\u003e98b35c1\u003c/code\u003e\u003c/a\u003e Add closing bracket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Masterminds/sprig/commit/7a88928df533ea5e7c0d3cdae521358e636a3bf8\"\u003e\u003ccode\u003e7a88928\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Masterminds/sprig/issues/406\"\u003e#406\u003c/a\u003e from mattfarina/update-mergo\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/Microsoft/hcsshim` from 0.11.7 to 0.12.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Microsoft/hcsshim/releases\"\u003egithub.com/Microsoft/hcsshim's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.9\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release/0.12] Update go to 1.22 + switch to using containerd/errdefs/pkg/errgrpc for grpc translation by \u003ca href=\"https://github.com/kiashok\"\u003e\u003ccode\u003e@​kiashok\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2301\"\u003emicrosoft/hcsshim#2301\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.8...v0.12.9\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.8...v0.12.9\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.12.8\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixing typo by \u003ca href=\"https://github.com/ritikaguptams\"\u003e\u003ccode\u003e@​ritikaguptams\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2289\"\u003emicrosoft/hcsshim#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release/0.12] Update containerd to v1.7.23 by \u003ca href=\"https://github.com/dmcgowan\"\u003e\u003ccode\u003e@​dmcgowan\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2295\"\u003emicrosoft/hcsshim#2295\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.7...v0.12.8\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.7...v0.12.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.12.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release/0.12] Update pkg versions in go.mod by \u003ca href=\"https://github.com/kiashok\"\u003e\u003ccode\u003e@​kiashok\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2275\"\u003emicrosoft/hcsshim#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release/0.12] Update runc version to 1.1.14 by \u003ca href=\"https://github.com/kiashok\"\u003e\u003ccode\u003e@​kiashok\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2271\"\u003emicrosoft/hcsshim#2271\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.6...v0.12.7\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.6...v0.12.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.12.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release/0.12] Backport commits from hcsshim/main to update module versions by \u003ca href=\"https://github.com/kiashok\"\u003e\u003ccode\u003e@​kiashok\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2237\"\u003emicrosoft/hcsshim#2237\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.5...v0.12.6\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.5...v0.12.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.12.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[release/0.12] Adding state attribute to the HNSEndpoint struct to support hyperv co… by \u003ca href=\"https://github.com/ritikaguptams\"\u003e\u003ccode\u003e@​ritikaguptams\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2183\"\u003emicrosoft/hcsshim#2183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release/0.12] vendor: github.com/containerd/containerd v17.18 by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2186\"\u003emicrosoft/hcsshim#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[release/0.12] Backport networking commits for L1VH feature by \u003ca href=\"https://github.com/princepereira\"\u003e\u003ccode\u003e@​princepereira\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/microsoft/hcsshim/pull/2205\"\u003emicrosoft/hcsshim#2205\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/microsoft/hcsshim/compare/v0.12.4...v0.12.5\"\u003ehttps://github.com/microsoft/hcsshim/compare/v0.12.4...v0.12.5\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/7392335b540ccd5edc26ca1e0dce0da393c17eff\"\u003e\u003ccode\u003e7392335\u003c/code\u003e\u003c/a\u003e Switch to using containerd/errdefs/pkg/errgrpc for grpc translation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/79d3f32d6271879fab0bb3aa2c299e8a507fc9e3\"\u003e\u003ccode\u003e79d3f32\u003c/code\u003e\u003c/a\u003e Update go to 1.22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/05636b97d032b034a86e73b4eb3d8cef1a660177\"\u003e\u003ccode\u003e05636b9\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003eJOB_OBJECT_ALL_ACCESS\u003c/code\u003e and \u003ccode\u003eOpenJobObject\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/Microsoft/hcsshim/issues/2095\"\u003e#2095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/155062896f9b84ce1d0ce4136e387836dc3a4daa\"\u003e\u003ccode\u003e1550628\u003c/code\u003e\u003c/a\u003e mobve SILOOBJECT_BASIC_INFORMATION to winapi\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/bf52d5833a99990ab3209bef7d0af89c353b249c\"\u003e\u003ccode\u003ebf52d58\u003c/code\u003e\u003c/a\u003e fix SILOOBJECT_BASIC_INFORMATION alignment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/8d48d874f0d0f6b945c91d61afc1e1f9640d14ed\"\u003e\u003ccode\u003e8d48d87\u003c/code\u003e\u003c/a\u003e Update containerd to v1.7.23 (\u003ca href=\"https://redirect.github.com/Microsoft/hcsshim/issues/2295\"\u003e#2295\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/4ad298fbcb71079c03cc18216a6f02b0134e4237\"\u003e\u003ccode\u003e4ad298f\u003c/code\u003e\u003c/a\u003e Fixing typo (\u003ca href=\"https://redirect.github.com/Microsoft/hcsshim/issues/2289\"\u003e#2289\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/86b533361faaabf92a8a91588bb641adc32a916e\"\u003e\u003ccode\u003e86b5333\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 4 to 6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/5ae96f3244bbf7169afe820c7f85481aca02df12\"\u003e\u003ccode\u003e5ae96f3\u003c/code\u003e\u003c/a\u003e Update runc to v1.1.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/hcsshim/commit/8f3fccdb5ff70c3f2808b030503205eb161dbbc5\"\u003e\u003ccode\u003e8f3fccd\u003c/code\u003e\u003c/a\u003e Update pkg versions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Microsoft/hcsshim/compare/v0.11.7...v0.12.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/ProtonMail/go-crypto` from 1.1.3 to 1.1.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ProtonMail/go-crypto/releases\"\u003egithub.com/ProtonMail/go-crypto's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.1.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003ePublicKey.KeyIdString\u003c/code\u003e to return a valid key id by \u003ca href=\"https://github.com/lubux\"\u003e\u003ccode\u003e@​lubux\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/269\"\u003eProtonMail/go-crypto#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow Key Flags override \u003ca href=\"https://github.com/davrux\"\u003e\u003ccode\u003e@​davrux\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/272\"\u003eProtonMail/go-crypto#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly check that message signatures are newer than the key by \u003ca href=\"https://github.com/twiss\"\u003e\u003ccode\u003e@​twiss\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/275\"\u003eProtonMail/go-crypto#275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eopenpgp/clearsign: just use rand.Reader in tests by \u003ca href=\"https://github.com/mdosch\"\u003e\u003ccode\u003e@​mdosch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/276\"\u003eProtonMail/go-crypto#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake Issuer Key ID signature subpacket non-critical by \u003ca href=\"https://github.com/caarlos0\"\u003e\u003ccode\u003e@​caarlos0\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/266\"\u003eProtonMail/go-crypto#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev2 API: Improve error messages for encryption key selection by \u003ca href=\"https://github.com/lubux\"\u003e\u003ccode\u003e@​lubux\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/271\"\u003eProtonMail/go-crypto#271\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/ProtonMail/go-crypto/compare/v1.1.5...v1.1.6\"\u003ehttps://github.com/ProtonMail/go-crypto/compare/v1.1.5...v1.1.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v1.1.6-proton\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release is v1.1.6 with support for the following non-standardized features:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePresistent symmetric keys \u003ca href=\"https://www.ietf.org/archive/id/draft-ietf-openpgp-persistent-symmetric-keys-00.html\"\u003edraft-ietf-openpgp-persistent-symmetric-keys-00\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic forwarding \u003ca href=\"https://www.ietf.org/archive/id/draft-wussler-openpgp-forwarding-00.html\"\u003edraft-wussler-openpgp-forwarding-00\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePost-quantum algorithms \u003ca href=\"https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/\"\u003edraft-ietf-openpgp-pqc\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCheck binding signature details against primary key by \u003ca href=\"https://github.com/twiss\"\u003e\u003ccode\u003e@​twiss\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/264\"\u003eProtonMail/go-crypto#264\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/ProtonMail/go-crypto/compare/v1.1.4...v1.1.5\"\u003ehttps://github.com/ProtonMail/go-crypto/compare/v1.1.4...v1.1.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v1.1.5-proton\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release is v1.1.5 with support for the following non-standardized features:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePresistent symmetric keys \u003ca href=\"https://www.ietf.org/archive/id/draft-ietf-openpgp-persistent-symmetric-keys-00.html\"\u003edraft-ietf-openpgp-persistent-symmetric-keys-00\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic forwarding \u003ca href=\"https://www.ietf.org/archive/id/draft-wussler-openpgp-forwarding-00.html\"\u003edraft-wussler-openpgp-forwarding-00\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePost-quantum algorithms \u003ca href=\"https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/\"\u003edraft-ietf-openpgp-pqc\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease v1.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEmit armor headers in sorted order by \u003ca href=\"https://github.com/andrewgdotcom\"\u003e\u003ccode\u003e@​andrewgdotcom\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/255\"\u003eProtonMail/go-crypto#255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReduce memory usage when AEAD en/decrypting large messages by \u003ca href=\"https://github.com/twiss\"\u003e\u003ccode\u003e@​twiss\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/259\"\u003eProtonMail/go-crypto#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate artifact actions to v4 by \u003ca href=\"https://github.com/twiss\"\u003e\u003ccode\u003e@​twiss\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/pull/260\"\u003eProtonMail/go-crypto#260\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/ProtonMail/go-crypto/compare/v1.1.3...v1.1.4\"\u003ehttps://github.com/ProtonMail/go-crypto/compare/v1.1.3...v1.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v1.1.4-proton\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThis release is v1.1.4 with support for the following non-standardized features:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/e52eada5c60c4406d02e11195d91d46f0356beda\"\u003e\u003ccode\u003ee52eada\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/issues/271\"\u003e#271\u003c/a\u003e from ProtonMail/feat/improve-errors-key-selection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/4bf9d904d3586c894d7de3c53b01b05fe740a6da\"\u003e\u003ccode\u003e4bf9d90\u003c/code\u003e\u003c/a\u003e feat(v2): Improve error message for encryption key selection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/d47bb3817800ff5bfab2fb11f38534701bed32cb\"\u003e\u003ccode\u003ed47bb38\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/issues/266\"\u003e#266\u003c/a\u003e from caarlos0/issuer-key-id\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/756ebbd0d3eff84640b9cbbbd2c9a12a9ca6b279\"\u003e\u003ccode\u003e756ebbd\u003c/code\u003e\u003c/a\u003e Make Issuer Key ID signature subpacket non-critical\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/44ef98c5a687cc0d3b611be2061b32dabcc949dd\"\u003e\u003ccode\u003e44ef98c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/issues/276\"\u003e#276\u003c/a\u003e from mdosch/fix-random-source-is-broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/b105e24ae66f11e269a0efb8eb54ee0add82e90b\"\u003e\u003ccode\u003eb105e24\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into fix-random-source-is-broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/89b0776c10277d4c5f673f6d808ee4e1fa690b6a\"\u003e\u003ccode\u003e89b0776\u003c/code\u003e\u003c/a\u003e Only check that message signatures are newer than the key\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/2b2dbe9eca392b9fd7e193961df11320f5a5cb80\"\u003e\u003ccode\u003e2b2dbe9\u003c/code\u003e\u003c/a\u003e openpgp/clearsign: just use rand.Reader in tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/2732e09cbc206553bd7af8acf73077037bcddb9f\"\u003e\u003ccode\u003e2732e09\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/ProtonMail/go-crypto/issues/275\"\u003e#275\u003c/a\u003e from ProtonMail/only-check-msg-sig-newer-than-key\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ProtonMail/go-crypto/commit/8e272e796276ef5ff91e878d680be94faa76ee5b\"\u003e\u003ccode\u003e8e272e7\u003c/code\u003e\u003c/a\u003e Only check that message signatures are newer than the key\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ProtonMail/go-crypto/compare/v1.1.3...v1.1.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anchore/go-logger` from 0.0.0-20220728155337-03b66a5207d8 to 0.0.0-20230725134548-c21dafa1ec5a\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/anchore/go-logger/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anchore/packageurl-go` from 0.1.1-0.20230104203445-02e0a6721501 to 0.1.1-0.20250220190351-d62adb6e1115\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/anchore/packageurl-go/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/anchore/syft` from 0.80.0 to 1.19.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/anchore/syft/releases\"\u003egithub.com/anchore/syft's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.19.0\u003c/h2\u003e\n\u003ch3\u003eAdded Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd license parsing from vendor dirs [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3522\"\u003e#3522\u003c/a\u003e \u003ca href=\"https://github.com/dschmidt\"\u003e\u003ccode\u003e@​dschmidt\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSupport cataloging NuGet packages [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/373\"\u003e#373\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3484\"\u003e#3484\u003c/a\u003e \u003ca href=\"https://github.com/Kemosabert\"\u003e\u003ccode\u003e@​Kemosabert\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSyft generates invalid PURLs when name contains \u003ccode\u003e:\u003c/code\u003e [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3577\"\u003e#3577\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3596\"\u003e#3596\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/jkugler\"\u003e\u003ccode\u003e@​jkugler\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003ewarn instead of error if zero package catalogers are select - user might still run file metadata cataloger, for example [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3128\"\u003e#3128\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3468\"\u003e#3468\u003c/a\u003e \u003ca href=\"https://github.com/tomersein\"\u003e\u003ccode\u003e@​tomersein\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003esbom report: missing licenses [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3527\"\u003e#3527\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3549\"\u003e#3549\u003c/a\u003e \u003ca href=\"https://github.com/kzantow\"\u003e\u003ccode\u003e@​kzantow\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdditional Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebump stereoscope to v0.0.13 [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3601\"\u003e#3601\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/syft/compare/v1.18.1...v1.19.0\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.1\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Error with Syft on Singularity .sif file (panic: index out of range) [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3390\"\u003e#3390\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSPDX expressions are lost from CycloneDX if they contain extra parenthesis [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3441\"\u003e#3441\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3517\"\u003e#3517\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdditional Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate syft to use anchore fork of archiver without replace [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3516\"\u003e#3516\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/syft/compare/v1.18.0...v1.18.1\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.0\u003c/h2\u003e\n\u003ch3\u003eAdded Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003econvert spdx absolute to relative [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3509\"\u003e#3509\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eAdd relationships for rust audit binary packages [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3500\"\u003e#3500\u003c/a\u003e \u003ca href=\"https://github.com/wagoodman\"\u003e\u003ccode\u003e@​wagoodman\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003esupport configuration of layer size in Syft [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3428\"\u003e#3428\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3464\"\u003e#3464\u003c/a\u003e \u003ca href=\"https://github.com/tomersein\"\u003e\u003ccode\u003e@​tomersein\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eSupport Dart arm/v7 in 3.x and 2.x [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3278\"\u003e#3278\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3475\"\u003e#3475\u003c/a\u003e \u003ca href=\"https://github.com/witchcraze\"\u003e\u003ccode\u003e@​witchcraze\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix order of rust dependencies and support git sources in Cargo.lock dependencies [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3502\"\u003e#3502\u003c/a\u003e \u003ca href=\"https://github.com/willmurphyscode\"\u003e\u003ccode\u003e@​willmurphyscode\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eUse file indexer directly when scanning with file source [\u003ca href=\"https://redirect.github.com/anchore/syft/pull/3333\"\u003e#3333\u003c/a\u003e \u003ca href=\"https://github.com/adammcclenaghan\"\u003e\u003ccode\u003e@​adammcclenaghan\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eRemove incorrect power-user help text that only image sources are supported [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/2046\"\u003e#2046\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eInvalid SPDX: missing copyright text [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3346\"\u003e#3346\u003c/a\u003e \u003ca href=\"https://redirect.github.com/anchore/syft/pull/3495\"\u003e#3495\u003c/a\u003e \u003ca href=\"https://github.com/spiffcs\"\u003e\u003ccode\u003e@​spiffcs\u003c/code\u003e\u003c/a\u003e]\u003c/li\u003e\n\u003cli\u003eScanning a source tree with duplicate conanfile.txt dependencies generates multiple components [\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3403\"\u003e#3403\u003c/a\u003e]\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/anchore/syft/compare/v1.17.0...v1.18.0\"\u003e(Full Changelog)\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/222e6548a96f8c80015c1d24f01dea3052a04893\"\u003e\u003ccode\u003e222e654\u003c/code\u003e\u003c/a\u003e chore(deps): update tools to latest versions (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3602\"\u003e#3602\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/0969453dbe9af8d3e39a4a58756346dbb9bca80b\"\u003e\u003ccode\u003e0969453\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 3.28.1 to 3.28.2 (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3604\"\u003e#3604\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/a5ef8167a1c76623b84d4424cac54f43929582fe\"\u003e\u003ccode\u003ea5ef816\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/hashicorp/hcl/v2 from 2.22.0 to 2.23.0 (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3605\"\u003e#3605\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/07f065884346ded9874fe15c93835e8a6befc80f\"\u003e\u003ccode\u003e07f0658\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/aquasecurity/go-pep440-version (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3606\"\u003e#3606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/7f5dbf9872fd5a8d2e2d4cea1f1d67afeb4f9152\"\u003e\u003ccode\u003e7f5dbf9\u003c/code\u003e\u003c/a\u003e chore: bump stereoscope to v0.0.13 (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3601\"\u003e#3601\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/c10e904c283277fec052a571b30cc0026335982a\"\u003e\u003ccode\u003ec10e904\u003c/code\u003e\u003c/a\u003e feat(cataloger): add a terraform provider cataloger (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3378\"\u003e#3378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/1906c179d07c73c508372e66ba913a0ca2490233\"\u003e\u003ccode\u003e1906c17\u003c/code\u003e\u003c/a\u003e chore(deps): update tools to latest versions (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3597\"\u003e#3597\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/4edfa4d138f497b522fcdf76c5224347f710903f\"\u003e\u003ccode\u003e4edfa4d\u003c/code\u003e\u003c/a\u003e chore(deps): update CPE dictionary index (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3599\"\u003e#3599\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/a6557d7cecfe1438733d338b4cb65742fb509277\"\u003e\u003ccode\u003ea6557d7\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 5.2.0 to 5.3.0 (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3600\"\u003e#3600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/anchore/syft/commit/19a75fe504a8215f16a9fafc29ba3570d8200507\"\u003e\u003ccode\u003e19a75fe\u003c/code\u003e\u003c/a\u003e feat(golang): add license parsing from vendor dirs (\u003ca href=\"https://redirect.github.com/anchore/syft/issues/3522\"\u003e#3522\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/anchore/syft/compare/v0.80.0...v1.19.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/andybalholm/brotli` from 1.0.4 to 1.1.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/57434b509141a6ee9681116b8d552069126e615f\"\u003e\u003ccode\u003e57434b5\u003c/code\u003e\u003c/a\u003e Encoder: check for empty block\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/97e8583d85e84e58bf9c4489874fd8bd624f1db5\"\u003e\u003ccode\u003e97e8583\u003c/code\u003e\u003c/a\u003e matchfinder.M4: some refinements to scoring\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/17e5901d050574f228e7d5a3f754a30a7cb55d55\"\u003e\u003ccode\u003e17e5901\u003c/code\u003e\u003c/a\u003e Make my matchfinder work more accessible.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/cf812c06f81910e3ae90490e622d9e35649e84eb\"\u003e\u003ccode\u003ecf812c0\u003c/code\u003e\u003c/a\u003e matchfinder: add M0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/1b6cf3696e719ad6494a1cfb3498b7cb9454350c\"\u003e\u003ccode\u003e1b6cf36\u003c/code\u003e\u003c/a\u003e matchfinder: remove MultiHash\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/265f3afc2a20805dd16a7adee7eed6fc30a2b548\"\u003e\u003ccode\u003e265f3af\u003c/code\u003e\u003c/a\u003e matchfinder: penalize score for overlapping matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/a8d524a96df6d1853526c1e953fc83fc5294f912\"\u003e\u003ccode\u003ea8d524a\u003c/code\u003e\u003c/a\u003e matchfinder: replace Score function with DistanceBitCost\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/578645e154bc2f876fc6cdf5c7c4c7bd5036b25c\"\u003e\u003ccode\u003e578645e\u003c/code\u003e\u003c/a\u003e matchfinder: add MultiHash\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/24b2bfad2d0c50a17d75dbb35e208adcbc1c4708\"\u003e\u003ccode\u003e24b2bfa\u003c/code\u003e\u003c/a\u003e matchfinder.M4: add Score function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/4a024e3eff5fe82fc6eb6dda0b8d0c4a3d5484ec\"\u003e\u003ccode\u003e4a024e3\u003c/code\u003e\u003c/a\u003e matchfinder.M4: add match chain\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/andybalholm/brotli/compare/v1.0.4...v1.1.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/bmatcuk/doublestar/v4` from 4.6.0 to 4.8.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bmatcuk/doublestar/releases\"\u003egithub.com/bmatcuk/doublestar/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eSmall Performance Improvement for MatchUnvalidated\u003c/h2\u003e\n\u003cp\u003eSkip some additional validation checks in \u003ccode\u003eMatchUnvalidated\u003c/code\u003e. Thanks to \u003ca href=\"https://github.com/lukemassa\"\u003e\u003ccode\u003e@​lukemassa\u003c/code\u003e\u003c/a\u003e for the PR!\u003c/p\u003e\n\u003cp\u003eAdditional documentation improvements from \u003ca href=\"https://github.com/timo-reymann\"\u003e\u003ccode\u003e@​timo-reymann\u003c/code\u003e\u003c/a\u003e. Thanks!\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eExplicitly mention number support and add tests by \u003ca href=\"https://github.com/timo-reymann\"\u003e\u003ccode\u003e@​timo-reymann\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/100\"\u003ebmatcuk/doublestar#100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip more validation by \u003ca href=\"https://github.com/lukemassa\"\u003e\u003ccode\u003e@​lukemassa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/101\"\u003ebmatcuk/doublestar#101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timo-reymann\"\u003e\u003ccode\u003e@​timo-reymann\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/100\"\u003ebmatcuk/doublestar#100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukemassa\"\u003e\u003ccode\u003e@​lukemassa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/101\"\u003ebmatcuk/doublestar#101\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.8.0...v4.8.1\"\u003ehttps://github.com/bmatcuk/doublestar/compare/v4.8.0...v4.8.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eFixed Escaped Meta in the \u0026quot;Base\u0026quot; of the Pattern\u003c/h2\u003e\n\u003cp\u003eIf the \u0026quot;base\u0026quot; of a pattern (ie, everything up to the first path slash before any meta characters) contains an escaped meta character, doublestar would fail to glob any files.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/tdurieux\"\u003e\u003ccode\u003e@​tdurieux\u003c/code\u003e\u003c/a\u003e for finding and fixing this bug!\u003c/p\u003e\n\u003ch2\u003eBreaking-ish Change\u003c/h2\u003e\n\u003cp\u003eI've updated \u003ccode\u003eSplitPattern\u003c/code\u003e to unescape meta characters in the first returned string. I suspect this shouldn't cause issues for anyone because, if anyone was using this function, they've probably either never passed a pattern with escaped meta characters, or hand-rolled an unescape method to fix the bug - which will now be a no-op for them.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(\u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/issues/96\"\u003e#96\u003c/a\u003e) unescapeMeta the pattern base  by \u003ca href=\"https://github.com/tdurieux\"\u003e\u003ccode\u003e@​tdurieux\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/97\"\u003ebmatcuk/doublestar#97\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tdurieux\"\u003e\u003ccode\u003e@​tdurieux\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/pull/97\"\u003ebmatcuk/doublestar#97\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/bmatcuk/doublestar/compare/v4.7.1...v4.8.0\"\u003ehttps://github.com/bmatcuk/doublestar/compare/v4.7.1...v4.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eFixed FilepathGlob(\u0026quot;\u0026quot;)\u003c/h2\u003e\n\u003cp\u003eTo be consistent with \u003ccode\u003efilepath.Glob\u003c/code\u003e, \u003ccode\u003eFilepathGlob(\u0026quot;\u0026quot;)\u003c/code\u003e returns nil.\u003c/p\u003e\n\u003ch2\u003eAdded MatchUnvalidated, PathMatchUnvalidated\u003c/h2\u003e\n\u003cp\u003eThese functions provide a small performance improvement in cases where you don't care about whether or not the pattern is valid (maybe because you already ran \u003ccode\u003eValidatePattern\u003c/code\u003e).\u003c/p\u003e\n\u003ch2\u003eFixed Match bug with patterns like \u003ccode\u003ea/**/\u003c/code\u003e\u003c/h2\u003e\n\u003cp\u003eThanks \u003ca href=\"https://github.com/mmxmb\"\u003e\u003ccode\u003e@​mmxmb\u003c/code\u003e\u003c/a\u003e for submitting the bug and opening a PR in \u003ca href=\"https://redirect.github.com/bmatcuk/doublestar/issues/89\"\u003e#89\u003c/a\u003e!\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bmatcuk/doublestar/commit/b707fe4305f7f29b0ce53be76ef7f98fc8204cd9\"\u003e\u003ccode\u003eb707fe4\u003c/code\u003e\u003c...\n\n_Description has been truncated_","html_url":"https://github.com/idiap/python-packagers/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/idiap%2Fpython-packagers/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}}]}