Added Features
- Swap format uses of io.ReadSeeker for io.Reader [#2515 @wagoodman]
- Cataloger interface should accept context.Context [#2521 #2528 @wagoodman]
Bug Fixes
- Implement golang Purl subpath [#2547 @LaurentGoderre]
- CPE definition on
pkg.Packageis coupled to an external package as a type alias [#2529 #2534 @willmurphyscode] - Turn off SBOM cataloger by default [#1555 #2527 @wagoodman]
- Syft missing linux kernel archives from SBOM results [#2524 #2526 @wagoodman]
- LocationResolver can leak goroutines [#2487 #2518 @willmurphyscode]
- Duplicates in Syft JSON "artifactRelationships" [#2251]
Breaking Changes
- Use the json schema as input for templating [#2542 @wagoodman]
- Unexport types and functions cataloger packages [#2530 @wagoodman]
- Internalize majority of cmd package [#2533 @wagoodman]
- Allow for RPM modularity to be optional [#2540 @wagoodman]
- CPE definition on
pkg.Packageis coupled to an external package as a type alias [#2529 #2534 @willmurphyscode] - Cataloger interface should accept context.Context [#2521 #2528 @wagoodman]
- Remove deprecated API features [#2257 #2508 @wagoodman]
- Remove deprecated configuration [#1864 #2508 @wagoodman]
- Turn off SBOM cataloger by default [#1555 #2527 @wagoodman]
Additional Changes
- Fix migration of integration test [#2546 @wagoodman]
- minor cataloger and docs nits [#2519 @luhring]