Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps github.com/quay/claircore from 1.5.39 to 1.5.44.

Release notes

Sourced from github.com/quay/claircore's releases.

v1.5.44 Release

v1.5.44 - 2025-10-01

Nothing interesting happened this release.

v1.5.43 Release

v1.5.43 - 2025-09-29

  • enrichment: don't consider vulnerability.Description for enrichments

  • postgres: better GetEnrichments query

v1.5.42 Release

v1.5.42 - 2025-09-19

Nothing interesting happened this release.

v1.5.41 Release

v1.5.41 - 2025-09-18

  • rpm: fix use of unique.Handle pinning fs.FS

v1.5.40 Release

v1.5.40 - 2025-09-16

  • vex: account for new VEX RPM module logic

... (truncated)

Changelog

Sourced from github.com/quay/claircore's changelog.

v1.5.44 - 2025-10-01

Nothing interesting happened this release.

v1.5.43 - 2025-09-29

  • enrichment: don't consider vulnerability.Description for enrichments

  • postgres: better GetEnrichments query

v1.5.42 - 2025-09-19

Nothing interesting happened this release.

v1.5.41 - 2025-09-18

  • rpm: fix use of unique.Handle pinning fs.FS

v1.5.40 - 2025-09-16

  • vex: account for new VEX RPM module logic

... (truncated)

Commits
  • e5d6258 chore: v1.5.44 changelog bump
  • 92673d6 test: remove pgxv4 from integration test setup
  • b982e82 ctxlock: remove v1 code
  • 34fb8ee enrichments: modify getEnrichments() query
  • 77d29a0 chore: v1.5.43 changelog bump
  • 64a3f69 enrichment: don't consider vulnerability.Description for enrichments
  • 4e4c37a postgres: better GetEnrichments query
  • e54ac58 rhel: don't add repo id to environment if repo isn't valid
  • a147cd0 cache: generic cache implementation
  • 73057e1 singleflight: generic singleflight package
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/quay/claircore](https://github.com/quay/claircore) from 1.5.39 to 1.5.44.
- [Release notes](https://github.com/quay/claircore/releases)
- [Changelog](https://github.com/quay/claircore/blob/main/CHANGELOG.md)
- [Commits](quay/claircore@v1.5.39...v1.5.44)

---
updated-dependencies:
- dependency-name: github.com/quay/claircore
  dependency-version: 1.5.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 1, 2025 21:07
@dependabot dependabot bot requested review from crozzy and removed request for a team October 1, 2025 21:07
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 20, 2025

Superseded by #243.

@dependabot dependabot bot closed this Oct 20, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/quay/claircore-1.5.44 branch October 20, 2025 21:12
@github-actions
Copy link

Triggered from #241 (comment) by @​dependabot[bot].

Trying to fast forward main (64b4558) to dependabot/go_modules/github.com/quay/claircore-1.5.44 (3414205).

Target branch (main):

commit 64b45586ee8593ae91ee5b32e05ee8bed6d9dfac (HEAD -> main, origin/main)
Author: Hank Donnay <hdonnay@redhat.com>
Date:   Thu Sep 18 09:37:14 2025 -0500

    chore: add license information
    
    Signed-off-by: Hank Donnay <hdonnay@redhat.com>

Pull request (dependabot/go_modules/github.com/quay/claircore-1.5.44):

commit 34142054ed229392363abb892f8c80f68017a538 (pull_request/dependabot/go_modules/github.com/quay/claircore-1.5.44)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Wed Oct 1 21:07:48 2025 +0000

    chore(deps): bump github.com/quay/claircore from 1.5.39 to 1.5.44
    
    Bumps [github.com/quay/claircore](https://github.com/quay/claircore) from 1.5.39 to 1.5.44.
    - [Release notes](https://github.com/quay/claircore/releases)
    - [Changelog](https://github.com/quay/claircore/blob/main/CHANGELOG.md)
    - [Commits](https://github.com/quay/claircore/compare/v1.5.39...v1.5.44)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/quay/claircore
      dependency-version: 1.5.44
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>

curl: (3) bad range in URL position 73:
https://api.github.com/repos/quay/clair-action/collaborators/dependabot[bot]/permission
^

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Development

Successfully merging this pull request may close these issues.

0 participants