v1.4.3 Release

Unreleased

v1.4.3 - 2022-06-29

Alpine

• 9db8b16: move to dynamic distributions
• c804ced: syntax simplifications in tests
• bf21d03: add documentation to Matcher type
• cef8829: remove disused method

Build(Deps)

• 7c33022: bump actions/cache from 3.0.3 to 3.0.4

Chore

• b3f95ab: v1.4.3 changelog bump

Defaults

• 8b93324: update alpine

Dpkg

• d475a7a: test with known-problematic status file
  • #297

Ovalutil

• e8478a4: sanity-check incoming dpkg version strings
  • #395

Periodic

• 3d40ef6: update alpine

Rhel

• 98b6183: recognize RHEL9 for updaters
• 2eba2c4: construct distributions dynamically
• c959ca5: test structure simplifications

Tarfs

• 4d1ba0d: resolve symlinks when adding new files

Ubuntu

• 7988203: update feed URLs
  • #588

Updates

• 0dad974: Record in a new table each time updaters check for vulns (#558)
  • #558

v1.4.2 Release

Unreleased

v1.4.2 - 2022-06-09

Chore

• e9aa844: v1.4.2 changelog bump

Crda

• dc939a0: clone url when creating a new matcher (#633)
  • #633

Rhcc

• 4059faf: don't fatally error on unexpected Dockerfiles
• de0aac8: Update vulnerability details to match rhel patched
  • #627

v1.4.1 Release

Unreleased

v1.4.1 - 2022-06-06

Build(Deps)

• 7200c3c: bump actions/cache from 3.0.2 to 3.0.3
• b0664a1: bump peter-evans/create-pull-request from 4.0.3 to 4.0.4

Chore

• f57b7a1: v1.4.1 changelog bump

Crda

• c854b78: check response status code

Ovalutil

• 547686f: remove pointless log

Postgres

• 1ea9fcf: run creates before creating transaction (#617)
  • #617

Tarfs

• d58afbd: always create a root directory

v1.4.0 Release

Unreleased

v1.4.0 - 2022-05-24

Alpine

• ece632e: ingest alpine vulnerabilities as type SOURCE (#615)
  • #615
• c52b6e3: use tarfs in scanners
• 79a61e2: move test fixtures to files

Build(Deps)

• dd3b32c: bump docker/build-push-action from 2 to 3
• 3af44fd: bump docker/setup-buildx-action from 1 to 2
• 3b83f2e: bump docker/login-action from 1 to 2
• 3a4c69b: bump peter-evans/create-pull-request from 4.0.2 to 4.0.3
• 8901d07: bump actions/cache from 3.0.1 to 3.0.2
• efa8e87: bump peter-evans/create-pull-request from 4.0.1 to 4.0.2
• 93d74a6: bump peter-evans/create-pull-request from 3.14.0 to 4.0.1
• 2df3f9f: bump actions/cache from 2 to 3.0.1

Chore

• 1d16410: v1.4.0 changelog bump

Claircore

• 635aab5: use tarfs and expand Reader return

Contrib

• 8072112: Add Release Alpine 3.16 Alpine 3.16 is not supported yet

Defaults

• 5f92e96: update defaults
• 44117e6: update defaults

Dockerfile

• 6d3940b: add quay dockerfile tests

Dpkg

• 604fd61: use tarfs in scanner

Go.Mod

• c28a174: update minimum go version

Indexer

• 5994349: fix indexer deduplication

Java

• 00e2239: use tarfs in scanners

Libindex

• 44aeb93: fix pool DSN parameter handling
• d12ada0: update defaults

Libvuln

• 6243056: fix pool DSN parameter handling

Matcher

• 4590fd6: fail vuln report on matcher error
  • Fixes #593

Osrelease

• 559487d: use tarfs in scanner
• d51f97d: export Parse function

Osv

• 6a1787e: removed trailing dot in file path
  • #619
• 3e15a4a: osv updater

Periodic

• 2f7d621: add package for periodic tests

Pkgconfig

• cf2a86a: use tarfs in scanner

Postgres

• 4655883: update metrics on GetEnrichment

Python

• 865069f: use tarfs in scanners

Rhcc

• 839adc6: add machinery for the Red Hat Container Catalog
  • #513

Rhctag

• aaa4de6: add package for Red Hat Container versions

Rhel

• c38558a: normalize serverity to all-lower strings
• 8f021ab: use tarfs in scanner

Rpm

• b2d722e: tarfs todo

Tarfs

• 361a2ca: package for implementing fs.FS over a tar

Ubuntu

• ec67a8f: update releaseToDist to correct cosmic error (#600)
  • #600

v1.3.2 Release

Unreleased

v1.3.2 - 2022-03-21

Alpine

• 051b3c7: Ignore any vulns that have 0 as the fixed_in_version (#581)
  • #581
• 99dec48: check validator on 200 response

Build(Deps)

• 171469d: bump peter-evans/create-pull-request from 3.12.1 to 3.14.0
• 907037e: bump actions/checkout from 2 to 3

Chore

• acf65f9: v1.3.2 changelog bump

Ci

• 12fa580: remember to log into quay.io
• 353e1f9: don't fail job when there's nothing to do
• f48ae57: fix version checker script
• 55db234: update main ci workflow
• cab09db: update base image builder machinery

Crda

• 108d9f5: Stop using the Client Clair instanciates (#583)
  • #583

Cvss

• 11fd04f: fix vet errors, lints

Debian

• 3a7988d: check validator on 200 response

Dockerfile

• 0dcf0c7: support invalid label syntax

Etc

• 02ca493: update Dockerfile and Makefile

Jar

• e5bb400: use textproto in place of mail

Ovalutil

• 00acbb5: check validator on 200 response

Pyupio

• cd8aa81: check validator on 200 response

Rhel

• 243f329: check validator on 200 response

Ubuntu

• c8ee8b9: check validator on 200 response

v1.3.1 Release

Unreleased

v1.3.1 - 2022-02-21

Chore

• 5d254d8: v1.3.1 changelog bump

Enrichment

• f91fd65: Optimize the way enrichments are queried (#570)
  • #570

v1.3.0 Release

Unreleased

v1.3.0 - 2022-02-16

All

• 8ca8736: update zlog and otel

Build(Deps)

• 8f79866: bump peter-evans/create-pull-request from 3.12.0 to 3.12.1

Chore

• 6ec7ec5: v1.3.0 changelog bump

Controller

• b6fd709: fix mocks

Crda

• 790cf86: remove default key
• c1bbfa2: fix invalid test name

Debian

• df34db7: split OVAL feed into binary packages (#550)
  • #550

Docs

• 33c7142: fix test in compiled docs
• 20c31c9: update README
• 8cfac96: add test for linked pages
• 4d8902a: update any code or documentation samples

Fastesturl

• 4e27f1f: remove unused package

Go.Mod

• 23537ab: update dependencies
• a10db52: update gomock

Integration

• b533b20: move code snippets to examples

Layerscanner

• 2b212f8: fix mocks

Libindex

• 168989d: fix integration test
• df1115a: add pgxpool metrics
• b2eca12: fix file access race
• 34a38fd: treat ConnString same as libvuln
• 2176bcc: add example from README
• ea826b7: remove requirement on Opts.ConnString

Libvuln

• edafd21: fix leaked lock manager
• 2f312f0: add pgxpool metrics
• 6b82f45: add example from README
• 2ec1818: remove requirement on Opts.ConnString

Mock/Driver

• a969bc1: move Matcher mock to dedicated package

Mock/Indexer

• 305da17: use dedicated mocks package
• d305501: move indexer mocks to dedicated package

Mock/Vulnstore

• 61c2335: move Store mock to dedicated package

Poolstats

• a1eaf2c: add package for collecting pgx pool stats

Rhel

• 03f3190: tolerate invalid CPEs

v1.2.0 Release

Unreleased

v1.2.0 - 2022-01-14

Build(Deps)

• 9fbff76: bump peter-evans/create-pull-request from 3.11.0 to 3.12.0

Chore

• 48444ec: v1.2.0 changelog bump

Dockerfile

• 397136f: add some fuzz testing
• 5d08565: handle comments correctly
• 467ad76: extend test harness

GC

• 1123788: Do query execution all in one rather than separate (#517)
  • #517

Go.Mod

• 2aac174: update minimum go version

Jar

• 3ce352a: fix text harness

Libindex

• f53a08f: set postgres application name
• d390f79: expose DeleteManifests method

Libvuln

• 58abf35: set postgres application name
• 5b95f97: print documentation links with matcher names

Migrations

• 08db7b9: add foreign key cascade constraints

Postgres

• 78448fa: add DeleteManifests method
• 8af4a24: add metric lint test
• 937155c: add digest helper
• da6d413: add some prometheus helpers
• 3575d9c: fix typo

v1.1.6 Release

Unreleased

v1.1.6 - 2021-12-07

Chore

• 8332795: v1.1.6 changelog bump

Dockerfile

• 8b5a73d: handle whitespace runs correctly
  • #526

Ubuntu

• 00537e5: updater log evaluation bug (#537)
  • #537

v1.1.5 Release

Unreleased

v1.1.5 - 2021-12-07

Chore

• 62a6547: v1.1.5 changelog bump

Crda

• d9e2950: fix typo (#534)
  • #534