Skip to content

build(deps): bump github.com/anchore/syft from 1.38.0 to 1.42.4#1932

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/anchore/syft-1.42.4
Closed

build(deps): bump github.com/anchore/syft from 1.38.0 to 1.42.4#1932
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/anchore/syft-1.42.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 9, 2026

Bumps github.com/anchore/syft from 1.38.0 to 1.42.4.

Release notes

Sourced from github.com/anchore/syft's releases.

v1.42.4

Bug Fixes

Additional Changes

(Full Changelog)

v1.42.3

Bug Fixes

  • Missing secondary evidence for .NET dependency in ghcr.io/open-telemetry/demo:2.0.0-accounting image [#4652]

Additional Changes

(Full Changelog)

v1.42.2

Bug Fixes

Additional Changes

(Full Changelog)

v1.42.1

Bug Fixes

Additional Changes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 9, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/anchore/syft-1.42.4 branch 4 times, most recently from 0d28e82 to ea0ad02 Compare April 16, 2026 16:34
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 1.38.0 to 1.42.4.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v1.38.0...v1.42.4)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-version: 1.42.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/anchore/syft-1.42.4 branch from ea0ad02 to e0554b5 Compare April 22, 2026 00:31
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 22, 2026

Superseded by #1957.

@dependabot dependabot Bot closed this Apr 22, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/github.com/anchore/syft-1.42.4 branch April 22, 2026 16:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants