oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-30 22:12:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

chore(deps): bump the go-minor-patch group with 3 updates (#4524)

Browse Source 
* chore(deps): bump the go-minor-patch group with 3 updates

Bumps the go-minor-patch group with 3 updates: [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema).


Updates `github.com/BurntSushi/toml` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/BurntSushi/toml/releases)
- [Commits](https://github.com/BurntSushi/toml/compare/v1.5.0...v1.6.0)

Updates `github.com/go-git/go-git/v5` from 5.16.3 to 5.16.4
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4)

Updates `github.com/invopop/jsonschema` from 0.7.0 to 0.13.0
- [Commits](https://github.com/invopop/jsonschema/compare/v0.7.0...v0.13.0)

---
updated-dependencies:
- dependency-name: github.com/BurntSushi/toml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/invopop/jsonschema
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* port breaking jsonschema lib changes

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

* regenerate the existing json schema with new generation code

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
This commit is contained in:
dependabot[bot]
2026-01-06 15:25:43 +00:00
committed by GitHub
co-authored by Alex Goodman
parent 81dd955871
commit 3ea6a03cd0
9 changed files with 127 additions and 172 deletions
Download Patch File Download Diff File Expand all files Collapse all files
schema/json/schema-16.1.2.json
+46 -71
View File
@@ -793,7 +793,8 @@
"items": {
"$ref": "#/$defs/Package"
},
"type": "array"
"type": "array",
"description": "Artifacts is the list of packages discovered and placed into the catalog"
},
"artifactRelationships": {
"items": {
@@ -805,19 +806,24 @@
"items": {
"$ref": "#/$defs/File"
},
"type": "array"
"type": "array",
"description": "note: must have omitempty"
},
"source": {
"$ref": "#/$defs/Source"
"$ref": "#/$defs/Source",
"description": "Source represents the original object that was cataloged"
},
"distro": {
"$ref": "#/$defs/LinuxRelease"
"$ref": "#/$defs/LinuxRelease",
"description": "Distro represents the Linux distribution that was detected from the source"
},
"descriptor": {
"$ref": "#/$defs/Descriptor"
"$ref": "#/$defs/Descriptor",
"description": "Descriptor is a block containing self-describing information about syft"
},
"schema": {
"$ref": "#/$defs/Schema"
"$ref": "#/$defs/Schema",
"description": "Schema is a block reserved for defining the version for the shape of this JSON document and where to find the schema document to validate the shape"
}
},
"type": "object",
@@ -858,10 +864,8 @@
"description": "Type is type of entry could be package or project for internal refs"
},
"executables": {
"patternProperties": {
".*": {
"$ref": "#/$defs/DotnetPortableExecutableEntry"
}
"additionalProperties": {
"$ref": "#/$defs/DotnetPortableExecutableEntry"
},
"type": "object",
"description": "Executables are the map of .NET Portable Executable files within this package with their version resources"
@@ -1797,10 +1801,8 @@
"description": "Scope is dependency scope determining when dependency is available (compile=default all phases, test=test compilation/execution only, runtime=runtime and test not compile, provided=expected from JDK or container)"
},
"extraFields": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Extra is additional custom properties not in standard Maven coordinates"
@@ -1963,10 +1965,8 @@
"description": "Integrity is Subresource Integrity hash for verification using standard SRI format (sha512-... or sha1-...). npm changed from SHA-1 to SHA-512 in newer versions. For registry sources this is the integrity from registry, for remote tarballs it's SHA-512 of the file. npm verifies tarball matches this hash before unpacking, throwing EINTEGRITY error if mismatch detected."
},
"dependencies": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Dependencies is a map of dependencies and their version markers, i.e. \"lodash\": \"^1.0.0\""
@@ -1987,10 +1987,8 @@
"description": "Resolution is the resolution information for the package"
},
"dependencies": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Dependencies is a map of dependencies and their versions"
@@ -2014,10 +2012,8 @@
"description": "Integrity is Subresource Integrity hash for verification (SRI format)"
},
"dependencies": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Dependencies is a map of dependencies and their versions"
@@ -2193,10 +2189,8 @@
"description": "VersionMagic is version magic string for compatibility checking (includes kernel version, SMP status, module loading capabilities like \"3.17.4-302.fc21.x86_64 SMP mod_unload modversions\"). Module will NOT load if vermagic doesn't match running kernel."
},
"parameters": {
"patternProperties": {
".*": {
"$ref": "#/$defs/LinuxKernelModuleParameter"
}
"additionalProperties": {
"$ref": "#/$defs/LinuxKernelModuleParameter"
},
"type": "object",
"description": "Parameters are the module parameters that can be configured at load time (user-settable values like module options)"
@@ -2316,12 +2310,11 @@
"description": "AccessPath is the path used to retrieve file contents (which may or may not have hardlinks / symlinks in the path)"
},
"annotations": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object"
"type": "object",
"description": "Arbitrary key-value pairs that can be used to annotate a location"
}
},
"type": "object",
@@ -2358,10 +2351,8 @@
"description": "URL is the source download URL"
},
"dependencies": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Dependencies are the map of dependency names to version constraints"
@@ -2856,37 +2847,29 @@
"description": "Dist is distribution archive information for production (typically zip/tar, default install method). Packaged version of released code."
},
"require": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Require is runtime dependencies with version constraints (package will not install unless these requirements can be met)"
},
"provide": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Provide is virtual packages/functionality provided by this package (allows other packages to depend on capabilities)"
},
"require-dev": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "RequireDev is development-only dependencies (not installed in production, only when developing this package or running tests)"
},
"suggest": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Suggest is optional but recommended dependencies (suggestions for packages that would extend functionality)"
@@ -2968,37 +2951,29 @@
"description": "Dist is distribution archive information for production (typically zip/tar, default install method). Packaged version of released code."
},
"require": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Require is runtime dependencies with version constraints (package will not install unless these requirements can be met)"
},
"provide": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Provide is virtual packages/functionality provided by this package (allows other packages to depend on capabilities)"
},
"require-dev": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "RequireDev is development-only dependencies (not installed in production, only when developing this package or running tests)"
},
"suggest": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Suggest is optional but recommended dependencies (suggestions for packages that would extend functionality)"
schema/json/schema-latest.json
+46 -71
View File
@@ -793,7 +793,8 @@
"items": {
"$ref": "#/$defs/Package"
},
"type": "array"
"type": "array",
"description": "Artifacts is the list of packages discovered and placed into the catalog"
},
"artifactRelationships": {
"items": {
@@ -805,19 +806,24 @@
"items": {
"$ref": "#/$defs/File"
},
"type": "array"
"type": "array",
"description": "note: must have omitempty"
},
"source": {
"$ref": "#/$defs/Source"
"$ref": "#/$defs/Source",
"description": "Source represents the original object that was cataloged"
},
"distro": {
"$ref": "#/$defs/LinuxRelease"
"$ref": "#/$defs/LinuxRelease",
"description": "Distro represents the Linux distribution that was detected from the source"
},
"descriptor": {
"$ref": "#/$defs/Descriptor"
"$ref": "#/$defs/Descriptor",
"description": "Descriptor is a block containing self-describing information about syft"
},
"schema": {
"$ref": "#/$defs/Schema"
"$ref": "#/$defs/Schema",
"description": "Schema is a block reserved for defining the version for the shape of this JSON document and where to find the schema document to validate the shape"
}
},
"type": "object",
@@ -858,10 +864,8 @@
"description": "Type is type of entry could be package or project for internal refs"
},
"executables": {
"patternProperties": {
".*": {
"$ref": "#/$defs/DotnetPortableExecutableEntry"
}
"additionalProperties": {
"$ref": "#/$defs/DotnetPortableExecutableEntry"
},
"type": "object",
"description": "Executables are the map of .NET Portable Executable files within this package with their version resources"
@@ -1797,10 +1801,8 @@
"description": "Scope is dependency scope determining when dependency is available (compile=default all phases, test=test compilation/execution only, runtime=runtime and test not compile, provided=expected from JDK or container)"
},
"extraFields": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Extra is additional custom properties not in standard Maven coordinates"
@@ -1963,10 +1965,8 @@
"description": "Integrity is Subresource Integrity hash for verification using standard SRI format (sha512-... or sha1-...). npm changed from SHA-1 to SHA-512 in newer versions. For registry sources this is the integrity from registry, for remote tarballs it's SHA-512 of the file. npm verifies tarball matches this hash before unpacking, throwing EINTEGRITY error if mismatch detected."
},
"dependencies": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Dependencies is a map of dependencies and their version markers, i.e. \"lodash\": \"^1.0.0\""
@@ -1987,10 +1987,8 @@
"description": "Resolution is the resolution information for the package"
},
"dependencies": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Dependencies is a map of dependencies and their versions"
@@ -2014,10 +2012,8 @@
"description": "Integrity is Subresource Integrity hash for verification (SRI format)"
},
"dependencies": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Dependencies is a map of dependencies and their versions"
@@ -2193,10 +2189,8 @@
"description": "VersionMagic is version magic string for compatibility checking (includes kernel version, SMP status, module loading capabilities like \"3.17.4-302.fc21.x86_64 SMP mod_unload modversions\"). Module will NOT load if vermagic doesn't match running kernel."
},
"parameters": {
"patternProperties": {
".*": {
"$ref": "#/$defs/LinuxKernelModuleParameter"
}
"additionalProperties": {
"$ref": "#/$defs/LinuxKernelModuleParameter"
},
"type": "object",
"description": "Parameters are the module parameters that can be configured at load time (user-settable values like module options)"
@@ -2316,12 +2310,11 @@
"description": "AccessPath is the path used to retrieve file contents (which may or may not have hardlinks / symlinks in the path)"
},
"annotations": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object"
"type": "object",
"description": "Arbitrary key-value pairs that can be used to annotate a location"
}
},
"type": "object",
@@ -2358,10 +2351,8 @@
"description": "URL is the source download URL"
},
"dependencies": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Dependencies are the map of dependency names to version constraints"
@@ -2856,37 +2847,29 @@
"description": "Dist is distribution archive information for production (typically zip/tar, default install method). Packaged version of released code."
},
"require": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Require is runtime dependencies with version constraints (package will not install unless these requirements can be met)"
},
"provide": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Provide is virtual packages/functionality provided by this package (allows other packages to depend on capabilities)"
},
"require-dev": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "RequireDev is development-only dependencies (not installed in production, only when developing this package or running tests)"
},
"suggest": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Suggest is optional but recommended dependencies (suggestions for packages that would extend functionality)"
@@ -2968,37 +2951,29 @@
"description": "Dist is distribution archive information for production (typically zip/tar, default install method). Packaged version of released code."
},
"require": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Require is runtime dependencies with version constraints (package will not install unless these requirements can be met)"
},
"provide": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Provide is virtual packages/functionality provided by this package (allows other packages to depend on capabilities)"
},
"require-dev": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "RequireDev is development-only dependencies (not installed in production, only when developing this package or running tests)"
},
"suggest": {
"patternProperties": {
".*": {
"type": "string"
}
"additionalProperties": {
"type": "string"
},
"type": "object",
"description": "Suggest is optional but recommended dependencies (suggestions for packages that would extend functionality)"