Skip to content

deps: update dependency anchore/syft to v1.45.1#126

Open
renovate[bot] wants to merge 1 commit into
mainfrom
midstream/renovate/anchore-syft-1.x
Open

deps: update dependency anchore/syft to v1.45.1#126
renovate[bot] wants to merge 1 commit into
mainfrom
midstream/renovate/anchore-syft-1.x

Conversation

@renovate

@renovate renovate Bot commented Jul 30, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
anchore/syft minor 1.29.01.45.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

anchore/syft (anchore/syft)

v1.45.1

Compare Source

Bug Fixes

(Full Changelog)

v1.45.0

Compare Source

Added Features
Bug Fixes
Additional Changes

(Full Changelog)

v1.44.0

Compare Source

Added Features
Bug Fixes

(Full Changelog)

v1.43.0

Compare Source

Added Features
Bug Fixes
Additional Changes

(Full Changelog)

v1.42.4

Compare Source

Bug Fixes
Additional Changes

(Full Changelog)

v1.42.3

Compare Source

Bug Fixes
  • Missing secondary evidence for .NET dependency in ghcr.io/open-telemetry/demo:2.0.0-accounting image [#​4652]
Additional Changes

(Full Changelog)

v1.42.2

Compare Source

Bug Fixes
Additional Changes

(Full Changelog)

v1.42.1

Compare Source

Bug Fixes
Additional Changes

(Full Changelog)

v1.42.0

Compare Source

Added Features
Additional Changes

(Full Changelog)

v1.41.2

Compare Source

Bug Fixes

(Full Changelog)

v1.41.1

Compare Source

Bug Fixes

(Full Changelog)

v1.41.0

Compare Source

Added Features
Bug Fixes

(Full Changelog)

v1.40.1

Compare Source

[!Important]
This release bumps github.com/containerd/containerd to v2, which will cause compiler errors if used alongside other dependencies that use v1 of containerd. See anchore/stereoscope#495 for a detailed discussion.

Bug Fixes

(Full Changelog)

v1.40.0

Compare Source

Added Features
Bug Fixes

(Full Changelog)

v1.39.0

Compare Source

Added Features
Bug Fixes

(Full Changelog)

v1.38.2

Compare Source

Bug Fixes

(Full Changelog)

v1.38.0

Compare Source

Added Features
Bug Fixes
  • Support extras statements in Python PDM cataloger [#​4352 @​wagoodman]
  • Preserve --from argument order [#​4350 @​wagoodman]
  • SBOM generated by Syft 1.28 contains license elements missing id or name (causing CycloneDX parser error) [#​4363]
  • empty PURL output in dependency snapshot format breaks sbom-action [#​4311]
  • Interface includes constraint elements, can only be used in type parameters [#​4346]
  • Upgrade github.com/nwaples/rardecode@​v1.1.3 to 2.2.1 [#​4338]
  • Upgrade to Golang 1.25.4 [#​4341]
Additional Changes

(Full Changelog)

v1.37.0

Compare Source

Added Features
Bug Fixes

(Full Changelog)

v1.36.0

Compare Source

Added Features
Bug Fixes

(Full Changelog)

v1.34.2

Compare Source

Bug Fixes

(Full Changelog)

v1.34.1

Compare Source

Added Features
Bug Fixes

(Full Changelog)

v1.33.0

Compare Source

Added Features

(Full Changelog)

v1.32.0

Compare Source

Added Features
Bug Fixes
Additional Changes

(Full Changelog)

v1.31.0

Compare Source

Added Features
Bug Fixes

(Full Changelog)

v1.30.0

Compare Source

Added Features
Bug Fixes

(Full Changelog)

v1.29.1

Compare Source

Bug Fixes

(Full Changelog)


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.29.1 deps: update dependency anchore/syft to v1.30.0 Aug 8, 2025
@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch 2 times, most recently from fc145da to 1ff175a Compare August 13, 2025 17:13
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.30.0 deps: update dependency anchore/syft to v1.31.0 Aug 13, 2025
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.31.0 (may need to address them accordingly).

Click here to see the diff
commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch 2 times, most recently from ce40edb to e5f5321 Compare August 27, 2025 01:08
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.31.0 deps: update dependency anchore/syft to v1.32.0 Aug 27, 2025
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.32.0 (may need to address them accordingly).

Click here to see the diff
commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from e5f5321 to e77f0d8 Compare September 16, 2025 06:08
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.32.0 deps: update dependency anchore/syft to v1.33.0 Sep 16, 2025
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.33.0 (may need to address them accordingly).

Click here to see the diff
commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from e77f0d8 to b67b00c Compare October 15, 2025 18:57
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.33.0 deps: update dependency anchore/syft to v1.34.1 Oct 15, 2025
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.34.1 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from b67b00c to 80120be Compare October 16, 2025 15:36
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.34.1 deps: update dependency anchore/syft to v1.34.2 Oct 16, 2025
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.34.2 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from 80120be to bfd011f Compare October 22, 2025 20:40
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.34.2 deps: update dependency anchore/syft to v1.36.0 Oct 22, 2025
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.36.0 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from bfd011f to eca0194 Compare November 3, 2025 20:29
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.36.0 deps: update dependency anchore/syft to v1.37.0 Nov 3, 2025
@github-actions

github-actions Bot commented Nov 3, 2025

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.37.0 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from eca0194 to 9152f44 Compare November 18, 2025 02:09
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.37.0 deps: update dependency anchore/syft to v1.38.0 Nov 18, 2025
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.38.0 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from 9152f44 to c2c7959 Compare December 10, 2025 03:02
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.38.0 deps: update dependency anchore/syft to v1.38.2 Dec 10, 2025
@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from 5374c65 to 7147f18 Compare January 27, 2026 15:00
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.41.0 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from 7147f18 to f011704 Compare January 30, 2026 01:36
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.41.0 deps: update dependency anchore/syft to v1.41.1 Jan 30, 2026
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.41.1 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from f011704 to d59e71c Compare February 3, 2026 21:55
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.41.1 deps: update dependency anchore/syft to v1.41.2 Feb 3, 2026
@github-actions

github-actions Bot commented Feb 3, 2026

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.41.2 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from d59e71c to 06c743a Compare February 10, 2026 18:23
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.41.2 deps: update dependency anchore/syft to v1.42.0 Feb 10, 2026
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.42.0 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from 06c743a to bfe5ce0 Compare February 18, 2026 18:34
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.42.0 deps: update dependency anchore/syft to v1.42.1 Feb 18, 2026
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.42.1 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from bfe5ce0 to e186f91 Compare March 9, 2026 21:19
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.42.1 deps: update dependency anchore/syft to v1.42.2 Mar 9, 2026
@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from e186f91 to f2e2c24 Compare March 19, 2026 17:15
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.42.2 deps: update dependency anchore/syft to v1.42.3 Mar 19, 2026
@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from f2e2c24 to d1e8872 Compare April 8, 2026 22:45
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.42.3 deps: update dependency anchore/syft to v1.42.4 Apr 8, 2026
@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from d1e8872 to c2f6a23 Compare April 22, 2026 16:58
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.42.4 deps: update dependency anchore/syft to v1.43.0 Apr 22, 2026
@github-actions

Copy link
Copy Markdown

Please check the build process changes in v1.29.0..v1.43.0 (may need to address them accordingly).

Click here to see the diff
commit e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232
Author: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Date:   Wed Oct 15 11:12:20 2025 -0400

    chore: update to use old configuration on new cosign (#4287)
    
    Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index bb278f1a..eaf89dfc 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -337,6 +337,7 @@ signs:
     certificate: "${artifact}.pem"
     args:
       - "sign-blob"
+      - "--use-signing-config=false"
       - "--oidc-issuer=https://token.actions.githubusercontent.com"
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"

commit 21d50d7c31fa3d5d8940c091ed0444748b5219e6
Author: Saleem Abdulrasool <compnerd@compnerd.org>
Date:   Wed Sep 24 12:29:03 2025 -0700

    feat: add ARM64 Windows build target (#4237)
    
    Signed-off-by: Saleem Abdulrasool <compnerd@compnerd.org>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 957aca6c..bb278f1a 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -42,7 +42,7 @@ builds:
     dir: ./cmd/syft
     binary: syft
     goos: [windows]
-    goarch: [amd64]
+    goarch: [amd64, arm64]
     mod_timestamp: *build-timestamp
     ldflags: *build-ldflags
 

commit 21496e7a816bdf8578c9c7656dc291d342775cca
Author: Emmanuel Ferdman <emmanuelferdman@gmail.com>
Date:   Mon Aug 11 16:38:33 2025 +0300

    chore: update GoReleaser configurations (#4128)
    
    Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index de69b0eb..957aca6c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,12 +48,13 @@ builds:
 
 archives:
   - id: linux-archives
-    builds: [linux-build]
+    ids: [linux-build]
   - id: darwin-archives
-    builds: [darwin-build]
+    ids: [darwin-build]
   - id: windows-archives
-    format: zip
-    builds: [windows-build]
+    formats:
+      - zip
+    ids: [windows-build]
 
 nfpms:
   - license: "Apache 2.0"

@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from c2f6a23 to e869c32 Compare May 1, 2026 18:36
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.43.0 deps: update dependency anchore/syft to v1.44.0 May 1, 2026
@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from e869c32 to 4b35777 Compare June 2, 2026 21:58
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.44.0 deps: update dependency anchore/syft to v1.45.0 Jun 2, 2026
@renovate renovate Bot force-pushed the midstream/renovate/anchore-syft-1.x branch from 4b35777 to a10453c Compare June 5, 2026 15:07
@renovate renovate Bot changed the title deps: update dependency anchore/syft to v1.45.0 deps: update dependency anchore/syft to v1.45.1 Jun 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants