All pull requests

Pull requests

• fix(python): link uv.lock dependents to the locked version they name

  #5351·devtechedge opened Sep 29, 2026·

  ·
  1

• fix(spdx): write a name for the root package when the source has none

  #5349·DrVelvetFog opened Sep 29, 2026Contributor·

  ·

• Fix hang when scanning a Java resource adapter (.rar) file

  dependencies
  #5348·ismail opened Sep 29, 2026·

  ·

• fix(golang): account for UPX's loader padding when unpacking Go binaries

  bug
  #5347·huuyafwww opened Sep 29, 2026·

  ·

• fix: make release changelog readable

  #5346·KKamJi98 opened Sep 29, 2026·

  ·
  1

• Fix missing file hashes when running on windows system

  bugwindows
  #5341·wagoodman opened Sep 28, 2026Contributor·

  ·
  1

  6

• fix(java): filter Tomcat server CPE for embedded EL

  #5322·jstar0 opened Sep 24, 2026·

  ·
  1

• Kernel module parameters lose, fixed #5318

  #5319·rezmoss opened Sep 22, 2026Contributor·

  ·
  1

  2

• CPE generation attributes the umbrella project's product , fixed #5316

  #5317·rezmoss opened Sep 21, 2026Contributor·

  ·
  1

  1

• chore(deps): update SPDX license list

  automation
  #5315·anchore-oss-update-bot opened Sep 21, 2026Contributor·

  ·

• fix(cpegenerate): normalise PyPI dictionary keys to match cataloger normalisation

  #5314·auyua9 opened Sep 21, 2026·

  ·

• chore(deps): update anchore dependencies

  automationchangelog-ignoredependencies
  #5304·anchore-oss-update-bot opened Sep 18, 2026Contributor·

  ·

• feat: record CocoaPods EXTERNAL SOURCES on the package

  #5303·az-catch opened Sep 18, 2026·

  ·
  1

• fix: preserve POSIX info paths for dpkg packages when running on Windows

  #5296·dprohaska opened Sep 15, 2026·

  ·

• fix(java): exclude pom profile dependencies that cannot be active

  #5289·kokhlo opened Sep 13, 2026·

  ·
  1

  4

• feat: add download location for go modules

  #5288·kjanat opened Sep 12, 2026·

  ·
  2

• fix(javascript): keep pnpm packages when resolution is nested

  bug
  #5287·vulragrag-star opened Sep 12, 2026·

  ·
  1

  1

• Replace anchore/go-version fork with hashicorp/go-version

  dependencies
  #5286·texasich opened Sep 12, 2026Contributor·

  ·
  1

• fix(binary): correct traefik version detection on big-endian arches

  #5281·mayanksekhar opened Sep 11, 2026·

  ·
  1

• chore(deps): bump github.com/gohugoio/hashstructure from 0.6.0 to 1.1.0

  dependenciesneeds-manual-review
  #5277·dependabot[bot] opened Sep 11, 2026Bot·

  ·
  2

• feat(terraform): add license detection for terraform providers

  #5263·timols opened Sep 9, 2026Contributor·

  ·
  1

• fix(terraform): generate terraform-provider-specific CPEs for terraform lock packages

  #5261·timols opened Sep 8, 2026Contributor·

  ·
  2

• Add nested archive cataloging

  #5260·kzantow opened Sep 8, 2026Contributor·

  ·
  1

  1

• fix(conan): add libexpat_project CPE candidates for expat packages

  #5259·KR-Ravindra opened Sep 8, 2026·

  ·
  1

  2

• fix(java): do not catalog declared dependencies of an embedded pom.xml

  #5258·Eljees opened Sep 7, 2026Contributor·

  ·