v0.90.0 (2023-09-11)

Full Changelog

Added Features

• Expose cobra command in cli package [PR #2097] [wagoodman]
• Explicitly test PURL generation against key packages [Issue #2071]
• Add User-Agent with Syft version during update check [Issue #2072] [PR #2100] [hainenber]

Bug Fixes

• fix: correct group IDs for commons-codec, okhttp, okio, and add integration tests for Java PURL generation [PR #2075] [willmurphyscode]
• Cyclonedx external reference URLs are not validated when encoding [Issue #2079] [PR #2091] [hainenber]

Additional Changes

• Bump the golang.org/x/exp dependency and fix a build breakage. [PR #2088] [dlorenc]
• fix: update codeql-analysis for go 1.21 [PR #2108] [spiffcs]