Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: quay/claircore
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.5.38
Choose a base ref
...
head repository: quay/claircore
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.5.39
Choose a head ref
  • 5 commits
  • 64 files changed
  • 4 contributors

Commits on Jun 9, 2025

  1. chore(deps): bump the golang-x group with 6 updates

    Bumps the golang-x group with 6 updates:
    
    | Package | From | To |
    | --- | --- | --- |
    | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.38.0` | `0.39.0` |
    | [golang.org/x/net](https://github.com/golang/net) | `0.40.0` | `0.41.0` |
    | [golang.org/x/sync](https://github.com/golang/sync) | `0.14.0` | `0.15.0` |
    | [golang.org/x/text](https://github.com/golang/text) | `0.25.0` | `0.26.0` |
    | [golang.org/x/time](https://github.com/golang/time) | `0.11.0` | `0.12.0` |
    | [golang.org/x/tools](https://github.com/golang/tools) | `0.33.0` | `0.34.0` |
    
    
    Updates `golang.org/x/crypto` from 0.38.0 to 0.39.0
    - [Commits](golang/crypto@v0.38.0...v0.39.0)
    
    Updates `golang.org/x/net` from 0.40.0 to 0.41.0
    - [Commits](golang/net@v0.40.0...v0.41.0)
    
    Updates `golang.org/x/sync` from 0.14.0 to 0.15.0
    - [Commits](golang/sync@v0.14.0...v0.15.0)
    
    Updates `golang.org/x/text` from 0.25.0 to 0.26.0
    - [Release notes](https://github.com/golang/text/releases)
    - [Commits](golang/text@v0.25.0...v0.26.0)
    
    Updates `golang.org/x/time` from 0.11.0 to 0.12.0
    - [Commits](golang/time@v0.11.0...v0.12.0)
    
    Updates `golang.org/x/tools` from 0.33.0 to 0.34.0
    - [Release notes](https://github.com/golang/tools/releases)
    - [Commits](golang/tools@v0.33.0...v0.34.0)
    
    ---
    updated-dependencies:
    - dependency-name: golang.org/x/crypto
      dependency-version: 0.39.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: golang-x
    - dependency-name: golang.org/x/net
      dependency-version: 0.41.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: golang-x
    - dependency-name: golang.org/x/sync
      dependency-version: 0.15.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: golang-x
    - dependency-name: golang.org/x/text
      dependency-version: 0.26.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: golang-x
    - dependency-name: golang.org/x/time
      dependency-version: 0.12.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: golang-x
    - dependency-name: golang.org/x/tools
      dependency-version: 0.34.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: golang-x
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored Jun 9, 2025
    Configuration menu
    Copy the full SHA
    49f1591 View commit details
    Browse the repository at this point in the history

Commits on Jun 11, 2025

  1. chore: upgrade from pgx v4 to v5

    In July 2025 v4 will reach end of life. This change updates claircore to
    use v5.
    
    Signed-off-by: crozzy <joseph.crosland@gmail.com>
    crozzy committed Jun 11, 2025
    Configuration menu
    Copy the full SHA
    674d0f9 View commit details
    Browse the repository at this point in the history
  2. java: change search query

    This change constructs the solr search as a string field instead of a
    text field. Other implementations of the Cental search API seem to like
    it this way instead of the other.
    
    See-also: #1567
    Signed-off-by: Hank Donnay <hdonnay@redhat.com>
    hdonnay committed Jun 11, 2025
    Configuration menu
    Copy the full SHA
    3bdb00f View commit details
    Browse the repository at this point in the history
  3. test: discount packages without source information in rpm-manifest

    /api/containers/v1/images/id/{img_id}/rpm-manifest now returns a lot of
    packages in the response for different architectures. These packages
    don't have any source information. This was causing test errors when
    trying to convert them into `claircore.Package`s. This patch ignores
    pacakges that don't contain full source information.
    
    Signed-off-by: crozzy <joseph.crosland@gmail.com>
    crozzy committed Jun 11, 2025
    Configuration menu
    Copy the full SHA
    8dcc7ed View commit details
    Browse the repository at this point in the history

Commits on Jun 12, 2025

  1. chore: v1.5.39 changelog bump

    Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
    crozzy authored and github-actions[bot] committed Jun 12, 2025
    Configuration menu
    Copy the full SHA
    61db15f View commit details
    Browse the repository at this point in the history
Loading