Thanks to visit codestin.com
Credit goes to github.com

Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: anchore/syft
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.34.2
Choose a base ref
...
head repository: anchore/syft
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.35.0
Choose a head ref
  • 11 commits
  • 38 files changed
  • 8 contributors

Commits on Oct 16, 2025

  1. Add PDM parser (#4234) 

    Signed-off-by: Pavel Buchart <[email protected]>
Signed-off-by: Keith Zantow <[email protected]>
Co-authored-by: Keith Zantow <[email protected]>
    @paulslaby @kzantow
    paulslaby and kzantow authored Oct 16, 2025
    Configuration menu
    Copy the full SHA
    e923db2 View commit details
    Browse the repository at this point in the history

  2. feat: add option to fetch remote licenses for pnpm-lock.yaml files (#… 

    …4286)

Signed-off-by: Tim Olshansky <[email protected]>
    @timols
    timols authored Oct 16, 2025
    Configuration menu
    Copy the full SHA
    c0f32e1 View commit details
    Browse the repository at this point in the history

  3. chore(deps): bump anchore/sbom-action from 0.20.6 to 0.20.7 (#4293) 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.20.6 to 0.20.7.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@f8bdd1d...d8a2c01)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.20.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Oct 16, 2025
    Configuration menu
    Copy the full SHA
    6627c52 View commit details
    Browse the repository at this point in the history

  4. Remove duplicate image source providers (#4289) 

    Signed-off-by: Kudryavcev Nikolay <[email protected]>
    @Rupikz
    Rupikz authored Oct 16, 2025
    Configuration menu
    Copy the full SHA
    fc74b07 View commit details
    Browse the repository at this point in the history

Commits on Oct 17, 2025

  1. convert posix path back to windows (#4285) 

    Signed-off-by: Joseph Shapiro <[email protected]>
    @JoeyShapiro
    JoeyShapiro authored Oct 17, 2025
    Configuration menu
    Copy the full SHA
    538b4a2 View commit details
    Browse the repository at this point in the history

  2. chore(deps): bump anchore/sbom-action from 0.20.7 to 0.20.8 (#4297) 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.20.7 to 0.20.8.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@d8a2c01...aa0e114)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.20.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Oct 17, 2025
    Configuration menu
    Copy the full SHA
    f4de1e8 View commit details
    Browse the repository at this point in the history

  3. chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4296) 

    Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.10.0 to 4.0.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@d7543c9...faadad0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Oct 17, 2025
    Configuration menu
    Copy the full SHA
    07029ea View commit details
    Browse the repository at this point in the history

  4. support universal (fat) mach-o binary files (#4278) 

    Signed-off-by: Joseph Shapiro <[email protected]>
    @JoeyShapiro
    JoeyShapiro authored Oct 17, 2025
    Configuration menu
    Copy the full SHA
    31b2c4c View commit details
    Browse the repository at this point in the history

Commits on Oct 20, 2025

  1. chore(deps): bump github/codeql-action from 4.30.8 to 4.30.9 (#4299) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.8 to 4.30.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f443b60...16140ae)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Oct 20, 2025
    Configuration menu
    Copy the full SHA
    675075e View commit details
    Browse the repository at this point in the history

Commits on Oct 21, 2025

  1. chore(deps): bump github.com/github/go-spdx/v2 from 2.3.3 to 2.3.4 (#… 

    …4301)
    @dependabot
    dependabot[bot] authored Oct 21, 2025
    Configuration menu
    Copy the full SHA
    44b7b09 View commit details
    Browse the repository at this point in the history

Commits on Oct 22, 2025

  1. chore(deps): update tools to latest versions (#4302) 

    Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: spiffcs <[email protected]>
    @anchore-actions-token-generator @spiffcs
    anchore-actions-token-generator[bot] and spiffcs authored Oct 22, 2025
    Configuration menu
    Copy the full SHA
    8be4639 View commit details
    Browse the repository at this point in the history
Loading