chore: update dependencies by renovate[bot] · Pull Request #567 · siderolabs/extensions

renovate · 2024-12-25T18:54:47Z

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change
cgr.dev/chainguard/wolfi-base		digest	`441d670` → `b78bb98`
github.com/anchore/grype	indirect	minor	`v0.111.0` → `v0.114.0`
github.com/anchore/syft	indirect	minor	`v1.42.4` → `v1.45.1`
github.com/dsseng/syft	replace	patch	`v1.42.4-0.20260415171054-31b9430f030f` → `v1.42.4`
google/gvisor		minor	`20260525.0` → `20260601.0`
netbirdio/netbird		minor	`0.71.4` → `0.72.2`
sqlite/sqlite		patch	`3.53.1` → `3.53.2`
tailscale/tailscale		patch	`1.98.3` → `1.98.5`

Release Notes

anchore/grype (github.com/anchore/grype)

`v0.114.0`

Compare Source

Added Features

Add ability to scan zarf packages [#3329 #3366 @brandtkeller]

Additional Changes

respect withdrawn status of Go Vuln DB OSV records [#3495 @willmurphyscode]
Govulndb OSV transformer [#3485 @willmurphyscode]

(Full Changelog)

`v0.113.0`

Compare Source

Added Features

Include Ubuntu 26.04 "resolute" in distro codenames [#3397 @anchore-oss-update-bot]
source RPM filtering on Hummingbird [#3410 @willmurphyscode]

Bug Fixes

use relatedVulnerabilities description as fallback in SARIF output [#3271 @axidex]
improve platform CPE determination logic [#3470 @westonsteimel]
normalize uppercase V in semantic version comparison [#3461 @immanuwell]
purl handling in cgr maven libs [#3420 @willmurphyscode]
Treat uppercase V prefixes the same as lowercase v prefixes in fuzzy version comparison [#3037 #3089 @wasup-yash]
Add Runtime Warnings When TLS Verification Is Disabled or HTTP Is Enabled [#3101 #3396 @Dashtid]
Add support for the aarch64 architecture when parsing the version of Ruby gems in lockfiles [#3442 #3475 @msnandhis]
zsh completion fails [#2933 #3433 @brandtkeller]

(Full Changelog)

`v0.112.0`

Compare Source

Added Features

Expand ignore rules to owned sub packages of distro packages [#3368 #3326 @kzantow]

Additional Changes

update anchore dependencies [#3391 @anchore-oss-update-bot]

(Full Changelog)

`v0.111.1`

Compare Source

Bug Fixes

apply overlap by ownership removal to dynamically created relationships [#3363 @kzantow]
compare mismatched package / db versions [#3372 @kzantow]
Grype doesn't recognize debian component when "group" : "debian" is specified [#2967]
HelpURI missing information in SARIF output [#2874 #3351 @will-bates11]

(Full Changelog)

anchore/syft (github.com/anchore/syft)

`v1.45.1`

Compare Source

Bug Fixes

bump stereoscope to pull in fix for registry client hanging [#4934 @anchore-oss-update-bot]

(Full Changelog)

`v1.45.0`

Compare Source

Added Features

Add support for ZapAddOns as jar files [#4654 #4932 @douglasclarke]
MySQL binary classifier should distinguish between MySQL Cluster (ndb) and MySQL [#3297 #4907 @witchcraze]
Catalog ingress-nginx binary [#4818 #4857 @witchcraze]

Bug Fixes

Support helm binary various versions [#4820 #4922 @witchcraze]
Support julia binary various versions [#4867 #4945 @witchcraze]
Support deno binary old versions [#4865 #4939 @witchcraze]
Compressed kernel modules are not scanned by the linux-kernel-cataloger [#4721 #4740 @will-bates11]
Yarn Berry lockfile parser incorrectly deduplicates packages with multiple resolutions [#4691 #4838 @calumleslie]
Possible misdetection of AWS-LC as OpenSSL 1.1.1 [#4539 #4882 @witchcraze]
Support elixir binary rc versions [#4819 #4851 @ChrisJr404]
Exclude path ending with a slash are discarded [#4839 #4892 @ChrisJr404]
Incorrect CPE for .NET Runtime [#4738 #4743 @PGrayCS]
fix parsing of debian/copyright files [#4708 #4754 @Bahtya]
Grype ignores python requirements in arbitrary equality (===) format [#4834 #4835 @cyphercodes]
valkey is detected as both of valkey and redis [#4591 #4619 @witchcraze]
TypeByName missing "nuget" case causes UnknownPkg when reading SPDX SBOMs [#4837 #4848 @ChrisJr404]

Additional Changes

hoist name normalization regexp to package level [#4926 @matiasinsaurralde]
bump the actions-minor-patch group across 1 directory with 6 updates [#4946 @dependabot]
bump the actions-minor-patch group across 2 directories with 2 updates [#4936 @dependabot]
bump the actions-minor-patch group across 1 directory with 4 updates [#4927 @dependabot]
bump the actions-minor-patch group across 1 directory with 2 updates [#4920 @dependabot]
bump the actions-minor-patch group across 1 directory with 2 updates [#4897 @dependabot]
update CPE dictionary index [#4831 @anchore-oss-update-bot]

(Full Changelog)

`v1.44.0`

Compare Source

Added Features

Add support for linux-riscv64 [#4757 @luhenry]

Bug Fixes

Yarn lockfile cataloguing does not handle aliases [#4833 #4836 @cyphercodes]
Some snippet files are saved in the previous test directory [#4829 #4830 @witchcraze]
empty rockspec causes index out of range [#4824 #4827 @aki1770-del]
PE cataloger shows asp.net core ref assemblies using fileversion build stamp instead of productversion [#4813 #4814 @rezmoss]
Syft safeCopy silently swallows archive decompression errors [#4806 #4807 @SAY-5]

(Full Changelog)

`v1.43.0`

Compare Source

Added Features

added deno bin classifiers [#4677 @rezmoss]
Support haskell old versions [#3237 #4793 @witchcraze]
Add support for OpenLDAP binary detection [#4768 #4755 @nadimz]
Support erlang ols versions [#3235 #4766 @witchcraze]

Bug Fixes

improve redhat-release parsing fallback for RHEL clones [#4808 @westonsteimel]
fix format string in search results struct [#4775 @willmurphyscode]
prevent infinite recursion in Document.UnmarshalJSON with encoding/json/v2 [#4748 @benja-M-1]
Syft can not complete scanning golang image [#4686]
javascript-package-cataloger drops entire package.json when authors/contributors/maintainers is a single string [#4778 #4779 @yoav-orca]
pnpm lock file cataloger produces unstable output [#4648 #4765 @lawrence3699]
Linux Kernel bzImage and zImage not cataloged by linux-kernel-cataloger [#4769 #4751 @nadimz]
Support istio binary (pilot-discovery, pilot-agent) alpha,beta,rc,dev version [#4546 #4645 @witchcraze]
Scanning mounted ISO: duplicate entries [#4759]

Additional Changes

update CPE dictionary index [#4767 @anchore-oss-update-bot]

(Full Changelog)

dsseng/syft (github.com/dsseng/syft)

`v1.42.4`

Compare Source

google/gvisor (google/gvisor)

`v20260601.0`

Compare Source

netbirdio/netbird (netbirdio/netbird)

`v0.72.2`

Compare Source

What's Changed

[management] resolve private services on custom domains in synthesized DNS zones by @mlsmaycon in #6348

Full Changelog: netbirdio/netbird@v0.72.1...v0.72.2

`v0.72.1`

Compare Source

What's Changed

[management] Copy private field on shallowCloneMapping by @mlsmaycon in #6347

Full Changelog: netbirdio/netbird@v0.72.0...v0.72.1

`v0.72.0`

Compare Source

Release Notes for v0.72.0

What's New

Private Service Expose & Reverse Proxy

Added support to expose NetBird-only services over tunnel peers across management, client, and proxy.
#6226
Added follow-up fixes for private reverse-proxy services.
#6268
Added private service expose support in the dashboard.
netbirdio/dashboard#646
Updated reverse proxy modals in the dashboard.
netbirdio/dashboard#661
Bound embed client WireGuard per-device memory across proxy and client.
#5962

Client Improvements

Filtered scoped/cloned default routes from BSD network monitor.
#6208
Matched DNS wildcard handlers on label boundaries.
#6255
Refactored Linux system info to use syscalls.
#6230
Released WASM js.FuncOf callbacks in SSH and RDP paths.
#5982
Fixed possible deadlock in statemanager Stop.
#6228
Improved Rosenpass support.
#6136
Recognized NetBird DNS forwarder port in capture text format.
#6177
Applied netroute default-gateway workaround on Android.
#6192
Captured injected ICMPv6 echo replies in debug capture.
#6321
Gated DNS forwarder on BlockInbound.
#6257
Persisted sync response via pluggable store, including disk support on iOS.
#6331
Allowed WireGuard port to be zero in UI and showed the port in status command.
#6158
Prevented corruption from competing log rotation and improved debug bundle.
#6214

Management Improvements

Fixed owner role update.
#6264
Refactored management server bootstrap.
#6256
Updated log levels.
#6266
Extended nmap monitoring.
#6271
Added SSO session extend flow.
#6197
Extended combined server initialization.
#6156
Enriched context in permissions manager.
#6286
Exported ResolveDomain.
#6334

Dashboard Improvements

Added simplified dashboard layout.
netbirdio/dashboard#649
Fixed broken SSH and RDP in the dashboard.
netbirdio/dashboard#650
Moved setup keys to Settings.
netbirdio/dashboard#653
Improved table filters layout.
netbirdio/dashboard#654
Grouped Networks and Routes under Network Routing.
netbirdio/dashboard#660

Infrastructure & CI

Pinned GitHub Actions with SHA and improved workflows.
#6249
Added Codecov integration and coverage reporting across workflows.
#6333
Allowed Docker image overrides for getting started.
#6335
Exposed VCS revision in dev build version output across client, management, and misc.
#6263

New Contributors

@phillebaba made their first contribution in #6230
@riccardomanfrin made their first contribution in #6228
@theodorsm made their first contribution in #6249

Full Changelog: netbirdio/netbird@v0.71.4...v0.72.0

sqlite/sqlite (sqlite/sqlite)

`v3.53.2`

Compare Source

tailscale/tailscale (tailscale/tailscale)

`v1.98.5`

Compare Source

Please refer to the changelog available at https://tailscale.com/changelog

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-04-24T14:06:10Z

ℹ️ Artifact update notice

File name: internal/grype-scan/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

79 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.26.0` -> `1.26.3`
`cloud.google.com/go/auth`	`v0.18.1` -> `v0.18.2`
`cloud.google.com/go/storage`	`v1.60.0` -> `v1.61.3`
`github.com/CycloneDX/cyclonedx-go`	`v0.10.0` -> `v0.11.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.30.0` -> `v1.31.0`
`github.com/Masterminds/semver/v3`	`v3.4.0` -> `v3.5.0`
`github.com/Microsoft/go-winio`	`v0.6.2` -> `v0.6.3-0.20251027160822-ad3df93bed29`
`github.com/Microsoft/hcsshim`	`v0.14.0-rc.1` -> `v0.15.0-rc.1`
`github.com/anchore/stereoscope`	`v0.1.22` -> `v0.2.1`
`github.com/aws/aws-sdk-go-v2`	`v1.41.2` -> `v1.41.5`
`github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream`	`v1.7.4` -> `v1.7.8`
`github.com/aws/aws-sdk-go-v2/config`	`v1.32.10` -> `v1.32.12`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.19.10` -> `v1.19.12`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.18.18` -> `v1.18.20`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.4.18` -> `v1.4.21`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.18` -> `v2.7.21`
`github.com/aws/aws-sdk-go-v2/internal/ini`	`v1.8.4` -> `v1.8.6`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.4.17` -> `v1.4.22`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.13.5` -> `v1.13.7`
`github.com/aws/aws-sdk-go-v2/service/internal/checksum`	`v1.9.8` -> `v1.9.13`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.18` -> `v1.13.21`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.19.17` -> `v1.19.21`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.96.0` -> `v1.97.3`
`github.com/aws/aws-sdk-go-v2/service/signin`	`v1.0.6` -> `v1.0.8`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.30.11` -> `v1.30.13`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.35.15` -> `v1.35.17`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.41.7` -> `v1.41.9`
`github.com/aws/smithy-go`	`v1.24.1` -> `v1.24.2`
`github.com/containerd/cgroups/v3`	`v3.1.2` -> `v3.1.3`
`github.com/containerd/containerd/api`	`v1.10.0` -> `v1.11.1`
`github.com/containerd/containerd/v2`	`v2.2.1` -> `v2.3.1`
`github.com/containerd/continuity`	`v0.4.5` -> `v0.5.0`
`github.com/containerd/platforms`	`v1.0.0-rc.2` -> `v1.0.0-rc.4`
`github.com/containerd/plugin`	`v1.0.0` -> `v1.1.0`
`github.com/containerd/ttrpc`	`v1.2.7` -> `v1.2.8`
`github.com/cyphar/filepath-securejoin`	`v0.6.0` -> `v0.6.1`
`github.com/diskfs/go-diskfs`	`v1.7.0` -> `v1.9.3`
`github.com/docker/cli`	`v29.3.0+incompatible` -> `v29.4.3+incompatible`
`github.com/docker/go-connections`	`v0.6.0` -> `v0.7.0`
`github.com/github/go-spdx/v2`	`v2.4.0` -> `v2.7.0`
`github.com/go-git/go-billy/v5`	`v5.8.0` -> `v5.9.0`
`github.com/go-git/go-git/v5`	`v5.17.0` -> `v5.19.1`
`github.com/go-jose/go-jose/v4`	`v4.1.3` -> `v4.1.4`
`github.com/google/go-containerregistry`	`v0.21.3` -> `v0.21.6`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.11` -> `v0.3.14`
`github.com/gookit/color`	`v1.6.0` -> `v1.6.1`
`github.com/gpustack/gguf-parser-go`	`v0.24.0` -> `v0.24.1`
`github.com/hashicorp/aws-sdk-go-base/v2`	`v2.0.0-beta.70` -> `v2.0.0-beta.72`
`github.com/hashicorp/go-getter`	`v1.8.5` -> `v1.8.6`
`github.com/klauspost/compress`	`v1.18.5` -> `v1.18.6`
`github.com/moby/moby/api`	`v1.54.0` -> `v1.54.2`
`github.com/moby/moby/client`	`v0.3.0` -> `v0.4.1`
`github.com/openvex/go-vex`	`v0.2.7` -> `v0.2.8`
`github.com/package-url/packageurl-go`	`v0.1.3` -> `v0.1.5`
`github.com/pelletier/go-toml/v2`	`v2.2.4` -> `v2.3.1`
`github.com/pierrec/lz4/v4`	`v4.1.22` -> `v4.1.26`
`github.com/pjbgf/sha1cd`	`v0.4.0` -> `v0.6.0`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.63.0` -> `v0.68.0`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.62.0` -> `v0.68.0`
`go.opentelemetry.io/otel`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/metric`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/trace`	`v1.40.0` -> `v1.43.0`
`golang.org/x/crypto`	`v0.49.0` -> `v0.52.0`
`golang.org/x/exp`	`v0.0.0-20251023183803-a4bb9ffd2546` -> `v0.0.0-20260410095643-746e56fc9e2f`
`golang.org/x/mod`	`v0.34.0` -> `v0.36.0`
`golang.org/x/net`	`v0.52.0` -> `v0.55.0`
`golang.org/x/sys`	`v0.42.0` -> `v0.45.0`
`golang.org/x/term`	`v0.41.0` -> `v0.43.0`
`golang.org/x/text`	`v0.35.0` -> `v0.37.0`
`golang.org/x/tools`	`v0.43.0` -> `v0.45.0`
`gonum.org/v1/gonum`	`v0.16.0` -> `v0.17.0`
`google.golang.org/api`	`v0.267.0` -> `v0.271.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260203192932-546029d2fa20` -> `v0.0.0-20260401024825-9d38bb4040a9`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260203192932-546029d2fa20` -> `v0.0.0-20260406210006-6f92a3bedf2d`
`google.golang.org/grpc`	`v1.79.3` -> `v1.80.0`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`
`modernc.org/libc`	`v1.70.0` -> `v1.72.3`
`modernc.org/sqlite`	`v1.46.2` -> `v1.51.0`

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/dependencies branch 3 times, most recently from 5ba679a to 8b58a61 Compare December 31, 2024 20:44

renovate Bot force-pushed the renovate/dependencies branch 4 times, most recently from 490052d to 23754db Compare January 9, 2025 12:01

renovate Bot force-pushed the renovate/dependencies branch 6 times, most recently from c9a1639 to 5aabad4 Compare January 17, 2025 07:19

renovate Bot force-pushed the renovate/dependencies branch 5 times, most recently from 6e3a52e to 3c9057e Compare January 25, 2025 12:15

renovate Bot force-pushed the renovate/dependencies branch 5 times, most recently from 37862c0 to ade8620 Compare February 5, 2025 00:08

renovate Bot force-pushed the renovate/dependencies branch 7 times, most recently from 88a8ea0 to 849332e Compare February 12, 2025 12:33

renovate Bot force-pushed the renovate/dependencies branch 8 times, most recently from dee5df0 to 2ed628e Compare March 10, 2025 09:42

renovate Bot force-pushed the renovate/dependencies branch from 2ed628e to 8833055 Compare March 10, 2025 20:32

smira closed this Apr 2, 2025

smira deleted the renovate/dependencies branch April 2, 2025 13:51

smira restored the renovate/dependencies branch April 2, 2025 15:12

smira reopened this Apr 2, 2025

talos-bot added the status/ok-to-test label Apr 2, 2025

talos-bot added this to Planning Apr 2, 2025

github-project-automation Bot moved this to To Do in Planning Apr 2, 2025

talos-bot moved this from To Do to In Review in Planning Apr 2, 2025

smira force-pushed the renovate/dependencies branch from 8833055 to 9d222f7 Compare April 2, 2025 15:42

smira removed this from Planning Apr 2, 2025

renovate Bot force-pushed the renovate/dependencies branch 3 times, most recently from 95295d4 to 66ab4f9 Compare April 6, 2025 11:50

renovate Bot force-pushed the renovate/dependencies branch 5 times, most recently from 929d827 to 83bdebd Compare April 17, 2025 13:15

renovate Bot force-pushed the renovate/dependencies branch from 83bdebd to 1e5f791 Compare April 19, 2025 11:22

chore: update dependencies

511cb53

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update dependencies#567

chore: update dependencies#567
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dependencies

renovate Bot commented Dec 25, 2024 •

edited

Loading

Uh oh!

renovate Bot commented Apr 24, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate Bot commented Dec 25, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Added Features

Additional Changes

Added Features

Bug Fixes

Added Features

Additional Changes

Bug Fixes

Bug Fixes

Added Features

Bug Fixes

Additional Changes

Added Features

Bug Fixes

Added Features

Bug Fixes

Additional Changes

What's Changed

What's Changed

Release Notes for v0.72.0

What's New

Private Service Expose & Reverse Proxy

Client Improvements

Management Improvements

Dashboard Improvements

Infrastructure & CI

New Contributors

Configuration

Uh oh!

renovate Bot commented Apr 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: internal/grype-scan/go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Dec 25, 2024 •

edited

Loading

renovate Bot commented Apr 24, 2026 •

edited

Loading