Skip to content

chore(deps): update module github.com/quay/clair/v2 to v4 #282

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate-rancher wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update module github.com/quay/clair/v2 to v4 #282

renovate-rancher wants to merge 1 commit into from

Conversation

@renovate-rancher
Copy link
Contributor

@renovate-rancher renovate-rancher bot commented Aug 11, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/quay/clair/v2 v2.1.8 → v4.9.0 age confidence

Release Notes

quay/clair (github.com/quay/clair/v2)

v4.9.0

Compare Source

All
Amqp
Build(Deps)
  • e4feca46: bump golang.org/x/time from 0.7.0 to 0.8.0
  • f54011b5: bump golang.org/x/sync from 0.8.0 to 0.9.0
  • ee5524b8: bump go.opentelemetry.io/otel/sdk from 1.31.0 to 1.32.0
  • 757b649c: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • 20c0040f: bump github.com/go-stomp/stomp/v3 from 3.1.2 to 3.1.3
  • 1607766c: bump github.com/prometheus/client_golang
  • 0a3a4611: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 12ea7bf9: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • 146d4a67: bump github.com/urfave/cli/v2 from 2.27.3 to 2.27.5
  • 50003694: bump github.com/klauspost/compress from 1.17.10 to 1.17.11
  • 6069bb24: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
Chore
  • cbfd97b6: fix typos in config.yaml.sample
  • 7c9c079b: update claircore to v1.5.48
  • 8e9a6d46: update claircore to v1.5.47
  • 804ef6a4: update claircore to v1.5.46
  • a50727a3: add DVO ignore annotations
  • 8d991938: update claircore to v1.5.45
  • ff2059cf: update claircore to v1.5.44
  • db51ed82: update claircore to v1.5.42
  • c2dc1766: update claircore to v1.5.41
  • 8aa9e1e2: update claircore to v1.5.40
  • eca299b7: update go references to go1.24
  • 1660b66b: upgrade from pgx v4 to v5
  • 68d03bae: remove reviews from dependabot config
  • 0c5292e7: upgrade config module to v1.4.2
  • e5d4c19c: update minimum go version to 1.23
  • e45fbf0e: update claircore to v1.5.35
  • 708bf2f5: update local-dev tracing configs to fix errors
  • 216ca2f1: update claircore to v1.5.34
  • dde57fc1: update openAPI spec to remove SourcePackage
  • e5149fd3: group some dependencies to avoid excessive PRs
  • 60ebea73: update claircore to v1.5.33
Chore(Deps)
  • f598d3ec: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • a952e3c6: bump the otel group with 11 updates
  • 878fbceb: bump github.com/google/go-containerregistry
  • 468e409c: bump actions/upload-artifact from 4 to 5
  • c87bc8f0: bump github.com/klauspost/compress from 1.18.1 to 1.18.2
  • 2a5c11fd: bump actions/checkout from 5 to 6
  • b12439f4: bump golang.org/x/crypto from 0.44.0 to 0.45.0
  • e169a50a: bump google.golang.org/grpc from 1.76.0 to 1.77.0
  • 3e778f2c: bump golang.org/x/net in the golang-x group
  • 4563ccbd: bump github.com/go-stomp/stomp/v3 from 3.1.3 to 3.1.5
  • 195cdb06: bump golang.org/x/sync in the golang-x group
  • b50044f4: bump actions/download-artifact from 5 to 6
  • 1b429595: bump github.com/klauspost/compress from 1.18.0 to 1.18.1
  • e439e4df: bump the golang-x group with 2 updates
  • fe37c68b: bump google.golang.org/grpc from 1.75.1 to 1.76.0
  • ee6ea1c8: bump github.com/quay/claircore from 1.5.42 to 1.5.43
  • afcfd7f0: bump google.golang.org/grpc from 1.75.0 to 1.75.1
  • 6a4937e4: bump the golang-x group across 1 directory with 3 updates
  • 53cf68e9: bump github.com/jackc/pgx/v5 from 5.7.5 to 5.7.6
  • e9850949: bump github.com/prometheus/client_golang
  • 290969cd: bump actions/stale from 9 to 10
  • 5b5519b5: bump actions/github-script from 7 to 8
  • b78c76b1: bump actions/setup-go from 5 to 6
  • b1f4716b: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 93174450: bump github.com/grafana/pyroscope-go/godeltaprof
  • 0f1fde39: bump the otel group with 11 updates
  • 8dbb0f48: bump golang.org/x/net in the golang-x group
  • a35a1281: bump github.com/ulikunitz/xz from 0.5.11 to 0.5.14
  • 1fa9a753: bump actions/checkout from 4 to 5
  • f0b0949c: bump actions/download-artifact from 4 to 5
  • 890f4a1b: bump github.com/prometheus/client_golang
  • 80add42b: bump google.golang.org/grpc from 1.73.0 to 1.75.0
  • e4746794: bump github.com/jackc/pgx/v5 from 5.7.4 to 5.7.5
  • ba6fe31c: bump go.opentelemetry.io/otel/exporters/prometheus
  • 40b0402e: bump the golang-x group with 2 updates
  • f9635886: bump github.com/quay/zlog from 1.1.8 to 1.1.9
  • 4415106e: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • b7325ada: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • 78b92595: bump the otel group with 11 updates
  • 62956271: bump github.com/urfave/cli/v2 from 2.27.6 to 2.27.7
  • 440eee8e: bump github.com/google/go-containerregistry
  • e75e2e2b: bump the golang-x group with 3 updates
  • cf20adbd: bump google.golang.org/grpc from 1.72.2 to 1.73.0
  • d9c211b4: bump github.com/quay/claircore from 1.5.37 to 1.5.38
  • 6338de8b: bump github.com/ugorji/go/codec from 1.2.12 to 1.2.14
  • 566271a1: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 3e3a2d33: bump github.com/google/go-containerregistry
  • 81b725ba: bump google.golang.org/grpc from 1.72.1 to 1.72.2
  • faad36e2: bump the otel group with 11 updates
  • 7979e036: bump google.golang.org/grpc from 1.72.0 to 1.72.1
  • 99ab2c1a: bump the golang-x group with 2 updates
  • a166f610: bump github.com/quay/claircore from 1.5.36 to 1.5.37
  • d8e9dcf4: bump google.golang.org/grpc from 1.71.1 to 1.72.0
  • bfa8f11d: bump github.com/quay/claircore from 1.5.35 to 1.5.36
  • f8a41628: bump github.com/prometheus/client_golang
  • 7ce22abe: bump google.golang.org/grpc from 1.71.0 to 1.71.1
  • c53cf2ba: bump the golang-x group with 2 updates
  • a5833a44: bump golang.org/x/net in the golang-x group
  • cc6fb14a: bump github.com/rs/zerolog from 1.33.0 to 1.34.0
  • 851e4a36: bump github.com/urfave/cli/v2 from 2.27.5 to 2.27.6
  • e9997624: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • a73e832b: bump github.com/prometheus/client_golang
  • 35110e9e: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • 0a9866e3: bump the golang-x group with 3 updates
  • 1ce14606: bump the otel group with 11 updates
  • 919d5287: bump github.com/google/go-cmp in /config
  • 2673e4f4: bump github.com/rogpeppe/go-internal from 1.13.1 to 1.14.1
  • cf7af98a: bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
  • 6c9fae1e: bump github.com/google/go-cmp from 0.6.0 to 0.7.0
  • 707d8049: bump github.com/prometheus/client_golang
  • 136a618f: bump github.com/klauspost/compress from 1.17.11 to 1.18.0
  • 3e7c6e74: bump the golang-x group with 3 updates
  • 73db520d: bump github.com/evanphx/json-patch/v5 from 5.9.10 to 5.9.11
  • a3a60f10: bump google.golang.org/grpc from 1.69.4 to 1.70.0
  • cc29705c: bump github.com/evanphx/json-patch/v5 from 5.9.0 to 5.9.10
  • d05b4049: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 8b99d320: bump the otel group with 11 updates
  • b2c66991: bump google.golang.org/grpc from 1.69.2 to 1.69.4
  • ef4a1f11: bump the golang-x group with 2 updates
  • 38b77499: bump golang.org/x/net in the golang-x group
  • 80c0381a: bump the otel group across 1 directory with 2 updates
  • 3eff1ef1: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 5bf85313: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • 9ebb61d9: bump golang.org/x/crypto from 0.30.0 to 0.31.0
  • 0881e079: bump the golang-x group with 2 updates
  • f556ef16: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • bf8737a1: bump golang.org/x/net in the golang-x group
  • f1d9aae4: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
Chore(Manifests)
Ci
  • a0a35fd7: Allow go test to access un-vendored dependencies
Cicd
  • ab791a2e: run multiarch tests without a full container
  • 935a61f3: vendor modules into nightly source
Clairctl
Dev
  • 503215f5: rename dashboard.json file to clair.json
  • 65cd4244: add a grafana dashboard for postgres stats
Docker
  • 10485679: remove version line from docker-compose.yaml
Docker-Compose
Enrichments
  • 6527a9ec: disable enrichers if config option is set
Fix
Go.Mod
Health
Introspection
  • 797c2f45: implement OTLP support for metrics and traces
Misc
  • 5891f64b: remove API doc make target, CI check
Notifier
  • a9a68e18: increase default durations to be more reasonable
Openapi
Signer
Types/V1
  • 50d0164b: add JSON API v1 types and schemas
Reverts
  • cicd: exclude darwin/arm64

v4.8.0

Compare Source

'Chore
Admin
  • d3467bad: add pre v4.8.0 admin command to delete OVAL vulns
  • d53780b6: add a check for compatible migration version
  • 87c24a9c: add command to update go packages with norm_version
  • 02e6c925: add pre v4.7.3 admin command to create index
All
Amqp
  • 8fcd294c: migrate to maintained package
  • #​1793### Auto
  • 07b0ea7b: improve log messages
  • #​2092### Build(Deps)
  • 5092198b: bump golang.org/x/time from 0.6.0 to 0.7.0
  • e7b6deac: bump golang.org/x/net from 0.29.0 to 0.30.0
  • 55fb7735: bump github.com/klauspost/compress from 1.17.9 to 1.17.10
  • 7a2e7186: bump github.com/prometheus/client_golang
  • 698d9170: bump github.com/rogpeppe/go-internal from 1.12.0 to 1.13.1
  • 7ec7e04f: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 96ee336f: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • 5fb41ed8: bump golang.org/x/net from 0.28.0 to 0.29.0
  • 2a13e7b7: bump peter-evans/create-pull-request from 6 to 7
  • 061b1e09: bump github.com/prometheus/client_golang
  • a2c920f4: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • bbaece4e: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 24aff4e4: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • b203913a: bump github.com/prometheus/client_golang
  • 96937294: bump github.com/grafana/pyroscope-go/godeltaprof
  • 01b57db6: bump github.com/google/go-containerregistry
  • 7ceeaaa2: bump github.com/go-stomp/stomp/v3 from 3.1.1 to 3.1.2
  • c3ce1982: bump github.com/urfave/cli/v2 from 2.27.2 to 2.27.3
  • 95f5a5f2: bump github.com/google/go-containerregistry
  • 1a5f342c: bump github.com/go-stomp/stomp/v3 from 3.1.0 to 3.1.1
  • 5821a5bf: bump golang.org/x/net from 0.26.0 to 0.27.0
  • 08587861: bump github.com/google/go-containerregistry
  • 74914938: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 67bdbbbe: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • dd9d6760: bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0
  • fcee4364: bump github.com/klauspost/compress from 1.17.8 to 1.17.9
  • 3f229e99: bump github.com/google/go-containerregistry
  • c5ae5021: bump docker/build-push-action from 5 to 6
  • 7400db24: bump golang.org/x/net from 0.25.0 to 0.26.0
  • 74b377b8: bump github.com/rs/zerolog from 1.32.0 to 1.33.0
  • 1fff0726: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • f2533fbf: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • 5376a756: bump github.com/rabbitmq/amqp091-go from 1.9.0 to 1.10.0
  • d82ab343: bump golang.org/x/net from 0.24.0 to 0.25.0
  • 453d2c60: bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2
  • 5323fa31: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • 3e1f5c15: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 71078832: bump go.opentelemetry.io/otel from 1.25.0 to 1.26.0
  • 1006287a: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • 43f3a3e4: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 343515af: bump github.com/klauspost/compress from 1.17.7 to 1.17.8
  • c3db2e4d: bump github.com/quay/claircore from 1.5.25 to 1.5.26
  • 4cf0febf: bump golang.org/x/sync from 0.6.0 to 0.7.0
  • 36d21edd: bump golang.org/x/net from 0.22.0 to 0.24.0
  • 93a70b35: bump go.opentelemetry.io/otel/sdk from 1.24.0 to 1.25.0
  • da30be8b: bump github.com/google/go-containerregistry
  • 5a5e1776: bump golang.org/x/net from 0.21.0 to 0.22.0
  • d4ceeea2: bump github.com/go-jose/go-jose/v3 from 3.0.2 to 3.0.3
  • d64064ce: bump github.com/prometheus/client_golang
  • 06c9ddab: bump github.com/jackc/pgx/v4 from 4.18.1 to 4.18.3
  • e4d79110: bump github.com/go-stomp/stomp/v3 from 3.0.6 to 3.1.0
  • d7c5821f: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 523ebf7f: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • 0803380f: bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.2
  • a3e0786c: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • 684c3ac3: bump peter-evans/create-pull-request from 6.0.0 to 6.0.1
  • 3fb2c921: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • 51981290: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 115cbb22: bump github.com/go-stomp/stomp/v3 from 3.0.5 to 3.0.6
  • 43b164e7: bump golang.org/x/net from 0.20.0 to 0.21.0
  • acf2cdf6: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • 0c7fe4dd: bump go.opentelemetry.io/otel/sdk from 1.22.0 to 1.23.1
  • 16a1504a: bump go.opentelemetry.io/otel from 1.22.0 to 1.23.1
  • 1f98abe7: bump peter-evans/create-pull-request from 5.0.2 to 6.0.0
  • fb5efb51: bump github.com/klauspost/compress from 1.17.5 to 1.17.6
  • 8dbacd3c: bump github.com/rs/zerolog from 1.31.0 to 1.32.0
  • 96d34f64: bump github.com/google/go-containerregistry
  • 3bcf9aac: bump github.com/klauspost/compress from 1.17.4 to 1.17.5
  • 19afbbbe: bump github.com/evanphx/json-patch/v5 from 5.8.0 to 5.9.0
  • 50eb4b52: bump github.com/google/uuid from 1.5.0 to 1.6.0
  • 4ed100ec: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • 1d338051: bump actions/cache from 3 to 4
  • a0e1ba8b: bump github.com/grafana/pyroscope-go/godeltaprof
  • 1ab0557b: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • fcf0ccdd: bump go.opentelemetry.io/otel/sdk from 1.21.0 to 1.22.0
  • 6fe56438: bump github.com/evanphx/json-patch/v5 from 5.7.0 to 5.8.0
  • 6ef2554e: bump golang.org/x/net from 0.19.0 to 0.20.0
  • 7b48e897: bump golang.org/x/sync from 0.5.0 to 0.6.0
  • c25d841a: bump github.com/quay/zlog from 1.1.7 to 1.1.8
  • 94b57fa0: bump github.com/prometheus/client_golang
  • ad2c872c: bump github.com/urfave/cli/v2 from 2.26.0 to 2.27.1
  • 2159bfb5: bump github.com/google/uuid from 1.4.0 to 1.5.0
  • aaa335b3: bump golang.org/x/crypto from 0.16.0 to 0.17.0
  • 9c588cf5: bump github.com/google/go-containerregistry
  • cbc166d6: bump actions/upload-artifact from 3 to 4
  • 355cab98: bump actions/download-artifact from 3 to 4
  • 7b7ff298: bump github.com/ugorji/go/codec from 1.2.11 to 1.2.12
  • 45625c51: bump github.com/urfave/cli/v2 from 2.25.7 to 2.26.0
  • b6b39706: bump actions/setup-go from 4 to 5
  • 913a5114: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • 71c66638: bump github.com/klauspost/compress from 1.17.2 to 1.17.4
  • 825dddc1: bump golang.org/x/net from 0.17.0 to 0.19.0
  • e7314325: bump actions/stale from 8 to 9
  • 99291347: bump github.com/quay/zlog from 1.1.5 to 1.1.7
  • d75c2c40: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 83a935dd: bump go.opentelemetry.io/otel/sdk from 1.20.0 to 1.21.0
  • 4db3b77e: bump github.com/go-jose/go-jose/v3
  • 1b2248b9: update opentelemetry modules
  • #​1909 - #​1911 - #​1912 - #​1913- 4a84b949: bump github.com/google/uuid from 1.3.1 to 1.4.0
  • efc1ab07: bump golang.org/x/time from 0.3.0 to 0.4.0
  • 61aa3ebd: bump golang.org/x/sync from 0.4.0 to 0.5.0
  • 54eb2e85: bump github.com/google/go-cmp from 0.5.9 to 0.6.0
  • b0497e58: bump github.com/klauspost/compress from 1.17.0 to 1.17.2
  • a90ecc45: bump go.opentelemetry.io/otel/sdk from 1.17.0 to 1.19.0
  • 55dc551f: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • 5a8c21a0: bump github.com/google/go-cmp in /config
  • f3072d19: bump go.opentelemetry.io/otel from 1.18.0 to 1.19.0
  • 8468d861: bump golang.org/x/net from 0.16.0 to 0.17.0
  • afafe835: bump golang.org/x/net from 0.15.0 to 0.16.0
  • f162e1ce: bump github.com/rs/zerolog from 1.30.0 to 1.31.0
  • e6f72bc4: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • c0eef84b: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  • 7129bacf: bump github.com/evanphx/json-patch/v5 from 5.6.0 to 5.7.0
  • 6969e003: bump docker/setup-buildx-action from 2 to 3
  • 606c5c9b: bump docker/login-action from 2 to 3
  • 24eb3f71: bump docker/build-push-action from 4 to 5
  • dbaebb58: bump docker/setup-qemu-action from 2 to 3
  • a31be2e2: bump actions/checkout from 3 to 4
  • 480996b1: bump go.opentelemetry.io/otel/exporters/jaeger
  • bc21afa0: bump github.com/google/uuid from 1.3.0 to 1.3.1
  • 5ae4f0fa: bump github.com/google/go-containerregistry
  • 56cd1851: bump github.com/rs/zerolog from 1.29.1 to 1.30.0
  • 67b92e71: bump golang.org/x/net from 0.12.0 to 0.15.0
  • a478ce91: bump github.com/pyroscope-io/godeltaprof
Chore
  • 05680a2b: v4.8.0 changelog bump
  • 94113d95: update claircore to v1.5.32
  • e77deb98: update config module to v1.4.1
  • e5fca953: update references to rhel updater to rhel-vex updater
  • 64b66ff9: update go version to specific patch
  • 89ebd521: update go version to 1.22
  • 9333770e: update claircore to v1.5.31
  • 93fa883d: update claircore to v1.5.30
  • 1209772d: update claircore to v1.5.29
  • 3c623553: run the go formatting over the repo
  • 7703b4a2: fix some comments
  • 7d3f12e3: use the merge-multiple directive when downloading binaries
  • b5a0d8a6: update claircore to v1.5.28
  • ac255112: Add merge step when creating release binaries
  • 5dc73b16: update go version for release
  • ea990567: update claircore to v1.5.27
  • 0bf9286e: update production manifest with new tmp dir
  • 6a3ce17f: update go version
  • 3e5740e0: remove repetitive word
  • 222f2273: update claircore to v1.5.25
  • 7ac4609b: update claircore to v1.5.24
  • bad8abe5: update claircore to v1.5.23
  • c81b3b9a: update claircore to v1.5.22
  • a9b5e91d: update claircore to v1.5.21
  • 6de0d807: Add Go 1.22 support via moved godeltaprof dependancy bump
  • b65445ce: clean up sample config
  • a359eb01: migrate go-jose to maintained version
  • 5cf5fb8d: update claircore to v1.5.20
  • 180fa4f4: bump claircore to v1.5.16
  • 696b266e: bump claircore to v1.5.15
  • 2829eacf: bump claircore to v1.5.14
Cicd
  • dbcfe30d: tweak login behavior
  • 6861b804: remove second go-caching action
  • c42bee62: improve nightly script output
  • 08581d82: tweaks to the set-image-expiration action
  • 3b650c56: fix nightly build
  • 6884969b: add /var/tmp mount to make sure it's on a real filesystem
  • 139aed21: reorganize the docker test so that it's less error-prone
  • b48682a4: remove comment that the linter complained about
  • bf7005f0: add /fast-forward command
  • d11a2602: add container version skew check
  • fd153765: update testing workflow
  • 23a8c33d: don't upload workspace on failure
  • 6f3b1347: update actions/cache version
  • 0604f1e6: change version specifiers to be major-version only
  • 718ef948: make nightly script shellcheck-clean
Clair
  • ba6fc371: add platform-specific signals
  • 76a5d50b: break cancellation chain for request contexts
  • b0086d80: redo shutdown structure
  • #​1946### Clairctl
  • 13acc582: warn when range requests are not honored
Cmd
Compress
  • c90a55fd: update compression middleware
Config
  • 33a77438: update minimum TLS version for server
  • e0a1f235: Update comment to describe currently supported updaters
  • 36210370: add Sentry config
  • 33cc3e5c: add OTLP configuration types
  • f503d670: fix typo
Contrib
  • 74974320: correct position of startupProbe spec
  • 5ad0d6be: update build_and_deploy.sh script
  • accee22f: account for different container engine clients
  • 1160febe: update build script to use podman
  • f19b59bd: remove rms that were needed for previous fetcher
  • b60d8266: update dashboard regex
  • 4405fdad: simplify openshift/pr_check.sh
  • 16bd3666: add grafana dashboards for deletion metrics
Contrib/Openshfit
  • 89af3db1: only start buildkitd container if needed
Contrib/Openshift
  • ab6e9e07: login shenanigans
  • 002df72b: avoid patching when using upstream images
Doc
Dockerfile
Docs
  • 038966e2: add building and Makefile usage sections
  • 137b6c50: add mention of disk space path and usage
  • 1e78f45a: add OTLP configuration to prose documentation
  • eb54b889: add dropins to prose documentation
  • #​1783### Documentation
  • 80482345: add more information on how to test and get started
Documentation
  • 38b72352: correct stale configuration options
Httptransport
  • 20582315: fix test flake
  • df348dc9: GET vuln report returns 404 when indexing in-progress
  • e84883f7: change api error handling to panic internally
  • c7920962: add metrics test
  • 15732398: add unauthenticated "/robots.txt" endpoint
  • 201ed2be: add "robots.txt" endpoint
  • 5262f773: add client-close detection
  • e97f6b3c: use compression middleware
  • 0d2bf7e6: lints
  • d4b9d30f: rework constructor
  • 067bf861: update DiscoveryHandler to new style
  • 7a1186e3: re-instrument handlers with new primitives
  • bddbc57b: exit goroutine in error helper
Httputil

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@renovate-rancher renovate-rancher bot requested a review from a team as a code owner August 11, 2025 06:46
@renovate-rancher
Copy link
Contributor Author

renovate-rancher bot commented Aug 11, 2025 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: mod upgrade --mod-name=github.com/quay/clair/v2 -t=4
could not load package: err: exit status 1: stderr: go: inconsistent vendoring in /tmp/renovate/repos/github/neuvector/scanner:
	github.com/quay/clair/v4@v4.9.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	google.golang.org/grpc@v1.77.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/cespare/xxhash/v2@v2.3.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/go-jose/go-jose/v4@v4.1.3: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/klauspost/compress@v1.18.2: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/mattn/go-isatty@v0.0.20: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/ncruces/go-strftime@v0.1.9: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/spiffe/go-spiffe/v2@v2.6.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	go.opentelemetry.io/auto/sdk@v1.2.1: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.64.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	go.opentelemetry.io/otel@v1.39.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	go.opentelemetry.io/otel/metric@v1.39.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	go.opentelemetry.io/otel/trace@v1.39.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	golang.org/x/exp@v0.0.0-20250620022241-b7579e27df2b: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	golang.org/x/oauth2@v0.32.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	golang.org/x/sys@v0.39.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	golang.org/x/time@v0.14.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	google.golang.org/genproto/googleapis/rpc@v0.0.0-20251202230838-ff82c1b0f217: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	google.golang.org/protobuf@v1.36.10: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	modernc.org/libc@v1.66.10: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	modernc.org/mathutil@v1.7.1: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	modernc.org/memory@v1.11.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	modernc.org/sqlite@v1.39.1: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/go-jose/go-jose/v4@v4.0.5: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	github.com/klauspost/compress@v1.18.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	github.com/mattn/go-isatty@v0.0.17: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	github.com/remyoudompheng/bigfft@v0.0.0-20230126093431-47fa9a501578: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	github.com/spiffe/go-spiffe/v2@v2.5.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	go.opentelemetry.io/auto/sdk@v1.1.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.60.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	go.opentelemetry.io/otel@v1.36.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	go.opentelemetry.io/otel/metric@v1.36.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	go.opentelemetry.io/otel/trace@v1.36.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	golang.org/x/oauth2@v0.30.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	golang.org/x/sys@v0.38.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	golang.org/x/time@v0.7.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	google.golang.org/genproto/googleapis/rpc@v0.0.0-20250528174236-200df99c418a: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	google.golang.org/grpc@v1.74.2: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	google.golang.org/protobuf@v1.36.6: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	modernc.org/libc@v1.22.2: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	modernc.org/mathutil@v1.5.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	modernc.org/memory@v1.5.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	modernc.org/sqlite@v1.20.3: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod

	To ignore the vendor directory, use -mod=readonly or -mod=mod.
	To sync the vendor directory, run:
		go mod vendor

@renovate-rancher renovate-rancher bot changed the title Update module github.com/quay/clair/v2 to v4 chore(deps): update module github.com/quay/clair/v2 to v4 Aug 12, 2025
@renovate-rancher renovate-rancher bot changed the title chore(deps): update module github.com/quay/clair/v2 to v4 Update module github.com/quay/clair/v2 to v4 Sep 15, 2025
@renovate-rancher renovate-rancher bot force-pushed the renovate/github.com-quay-clair-v2-4.x branch 8 times, most recently from 6c8617b to c8d6439 Compare October 2, 2025 04:39
@renovate-rancher renovate-rancher bot force-pushed the renovate/github.com-quay-clair-v2-4.x branch 6 times, most recently from 76e3d10 to eb2cb33 Compare October 8, 2025 04:39
@renovate-rancher renovate-rancher bot changed the title Update module github.com/quay/clair/v2 to v4 chore(deps): update module github.com/quay/clair/v2 to v4 Oct 17, 2025
@renovate-rancher renovate-rancher bot force-pushed the renovate/github.com-quay-clair-v2-4.x branch from eb2cb33 to af6aeac Compare December 16, 2025 04:45
@renovate-rancher renovate-rancher bot requested a review from a team as a code owner December 16, 2025 04:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@williamlin-suse williamlin-suse Awaiting requested review from williamlin-suse williamlin-suse was automatically assigned from neuvector/scanner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant