[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
anchore/syft	minor	1.56.0 → 1.57.0	1.57.1

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

anchore/syft

v1.57.0

Compare Source

Added Features

• capture GNU ELF build IDs [PR #​5426 @​adityasaky]
• build lower layer squashes only when a scan reads them [PR #​5492 @​wagoodman]

Bug Fixes

• do not generate CPEs for msrc-kb packages [PR #​5510 @​juanjsebgarcia]
• Fix truncated pre-release versions in Go binaries' ldflags [PR #​5422 @​LemonCondor]
• generate NVD-style terraform_provider CPEs for terraform lock packages [PR #​5261 @​timols]
• OpenSSL-only SHA-256 fallback aborts installation [Issue #​5520] [PR #​5521 @​pujitha24]

Dependencies

1 dependency change (1 updated).

Updated (1 package)

• github.com/anchore/stereoscope v0.4.0 → v0.4.1

(Full Changelog)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.