Skip to content

Conversation

@github-actions
Copy link
Contributor

Bump anchore/syft version

Update version in aqua.yaml

1 file(s) updated with "${1}v1.42.0": * aqua.yaml

v1.42.0
### Added Features

- Add support for scanning GGUF models from OCI registries [[#4335](https://github.com/anchore/syft/pull/4335) @spiffcs]
- yarn lockfile scan doesnt catch dev dependencies [[#4548](https://github.com/anchore/syft/issues/4548) [#4549](https://github.com/anchore/syft/pull/4549) @rezmoss]

### Additional Changes

- CPE detection for APK libavif to use aomedia vendor [[#4597](https://github.com/anchore/syft/pull/4597) @naag]

**[(Full Changelog)](https://github.com/anchore/syft/compare/v1.41.2...v1.42.0)**

GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

@github-actions github-actions bot added the dependencies Pull requests that update a dependency file label Feb 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants