v2.9.1

What's Changed

• Updates github-config by @paketo-bot in #474
• Bump github.com/onsi/gomega from 1.27.4 to 1.27.5 by @dependabot in #475
• Bump github.com/onsi/gomega from 1.27.5 to 1.27.6 by @dependabot in #476
• Bump github.com/anchore/syft from 0.74.0 to 0.75.0 by @dependabot in #471
• raise error when dependecy download returns http error status code by @phil9909 in #477
• Bump github.com/anchore/syft from 0.75.0 to 0.76.0 by @dependabot in #478
• Updates github-config by @paketo-bot in #480
• Bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 by @dependabot in #482
• Bump github.com/anchore/syft from 0.76.0 to 0.79.0 by @dependabot in #488

Full Changelog: v2.9.0...v2.9.1

v2.9.0

What's Changed

• Bump github.com/onsi/gomega from 1.27.1 to 1.27.2 by @dependabot in #464
• Bump github.com/anchore/syft from 0.73.0 to 0.74.0 by @dependabot in #465
• Add stack extension support by @c0d1ngm0nk3y in #433
• Bump github.com/gabriel-vasile/mimetype from 1.4.1 to 1.4.2 by @dependabot in #467
• Updates github-config by @paketo-bot in #466
• Bump github.com/onsi/gomega from 1.27.2 to 1.27.3 by @dependabot in #469
• Bump github.com/onsi/gomega from 1.27.3 to 1.27.4 by @dependabot in #470
• Adds stdin to pexec by @ryanmoran in #472

New Contributors

• @c0d1ngm0nk3y made their first contribution in #433

Full Changelog: v2.8.2...v2.9.0

v2.8.2

What's Changed

• Bump github.com/onsi/gomega from 1.26.0 to 1.27.0 by @dependabot in #455
• Bump github.com/onsi/gomega from 1.27.0 to 1.27.1 by @dependabot in #457
• Bump github.com/anchore/syft from 0.70.0 to 0.72.0 by @dependabot in #456
• Fix confusion in boolean parameter order in tests by @phil9909 in #460
• Bump github.com/anchore/syft from 0.72.0 to 0.73.0 by @dependabot in #459
• Updates github-config by @paketo-bot in #461
• Updates github-config by @paketo-bot in #462
• Bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by @dependabot in #463

New Contributors

• @phil9909 made their first contribution in #460

Full Changelog: v2.8.1...v2.8.2

v2.8.1

What's Changed

• Bump github.com/apex/log from 1.1.4 to 1.9.0 by @dependabot in #445
• Bump github.com/onsi/gomega from 1.24.2 to 1.25.0 by @dependabot in #443
• Updates github-config by @paketo-bot in #442
• Updates github-config by @paketo-bot in #446
• Bump github.com/anchore/syft from 0.66.1 to 0.68.0 by @dependabot in #447
• Bump github.com/onsi/gomega from 1.25.0 to 1.26.0 by @dependabot in #448
• Bump github.com/anchore/syft from 0.68.0 to 0.68.1 by @dependabot in #449
• Bump github.com/anchore/syft from 0.68.1 to 0.69.0 by @dependabot in #450
• Bump github.com/anchore/syft from 0.69.0 to 0.69.1 by @dependabot in #451
• Bump github.com/anchore/syft from 0.69.1 to 0.70.0 by @dependabot in #452

Full Changelog: v2.8.0...v2.8.1

v2.8.0

What's Changed

• Updates github-config by @paketo-bot in #423
• Bump github.com/onsi/gomega from 1.24.0 to 1.24.1 by @dependabot in #424
• Return a typed error when no dependencies are found during resolution. by @robdimsdale in #425
• Bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0 by @dependabot in #428
• Bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11 by @dependabot in #435
• Bump github.com/onsi/gomega from 1.24.1 to 1.24.2 by @dependabot in #436
• Bump github.com/sergi/go-diff from 1.2.0 to 1.3.1 by @dependabot in #441
• Bump Syft from 0.60.3 to 0.66.1 by @sophiewigmore in #440

Full Changelog: v2.7.0...v2.8.0

v2.7.0

What's Changed

Features

• Converts all present strip-componets keys to integers by @ForestEckhardt in #417
• Enable support for checksum in postal dependency mappings by @sophiewigmore in #422

Dependency Upgrades

• Bump github.com/onsi/gomega from 1.20.2 to 1.21.1 by @dependabot in #404
• Bump github.com/onsi/gomega from 1.21.1 to 1.22.1 by @dependabot in #407
• Bump github.com/anchore/syft from 0.58.0 to 0.59.0 by @dependabot in #409
• Bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by @dependabot in #411
• Bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1 by @dependabot in #412
• Bump github.com/onsi/gomega from 1.22.1 to 1.23.0 by @dependabot in #413
• Bump github.com/anchore/syft from 0.59.0 to 0.60.0 by @dependabot in #414
• Bump github.com/anchore/syft from 0.60.0 to 0.60.1 by @dependabot in #416
• Bump github.com/onsi/gomega from 1.23.0 to 1.24.0 by @dependabot in #419
• Bump github.com/anchore/syft from 0.60.1 to 0.60.2 by @dependabot in #418
• Bump github.com/anchore/syft from 0.60.2 to 0.60.3 by @dependabot in #421

Full Changelog: v2.6.1...v2.7.0

v2.6.1

What's Changed

• Bump github.com/anchore/syft from 0.57.0 to 0.58.0 by @dependabot in #400
• Deprioritize wildcard stacks when resolving dependency. by @robdimsdale in #402

Full Changelog: v2.6.0...v2.6.1

v2.6.0

What's Changed

• Add AreChecksumsEqual by @joshuatcasey in #398
• Refactors out common Checksum concept by @ryanmoran in #399

Full Changelog: v2.5.1...v2.6.0

v2.5.1

What's Changed

• Support usage of checksum field in legacy sbom by @sophiewigmore in #396
• Bump github.com/anchore/syft from 0.56.0 to 0.57.0 by @dependabot in #397

Full Changelog: v2.5.0...v2.5.1

v2.5.0

What's Changed

• Bump github.com/onsi/gomega from 1.20.0 to 1.20.1 by @dependabot in #384
• Bump github.com/anchore/syft from 0.53.4 to 0.54.0 by @dependabot in #381
• Standardize workflows to appear more similar to github-config by @joshuatcasey in #385
• Bump github.com/anchore/syft from 0.54.0 to 0.55.0 by @dependabot in #386
• Bump github.com/onsi/gomega from 1.20.1 to 1.20.2 by @dependabot in #388
• Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 by @dependabot in #391
• Add update-github-config workflow to sync from github-config/library by @joshuatcasey in #390
• Open github-config updates against v2 branch by @ryanmoran in #393
• Bump github.com/anchore/syft from 0.55.0 to 0.56.0 by @dependabot in #394
• Adds checksum and source-checksum field in dependencies by @ForestEckhardt in #389

Full Changelog: v2.4.2...v2.5.0