Added Features
- Detect go main module from partial package builds [#3060 @wagoodman]
- Support traefik in linux/arm/v6, linux/riscv64 [#3038 #3077 @witchcraze]
- Catalog TiDB binary [#2763]
- Generate a Maven friendly CPE [#3042 #3045 @kzantow]
Bug Fixes
- Only match ldflag version if it matches the main module or targets main.version [#3062 @LaurentGoderre]
- python requirements.txt cataloger: allow dots in python package names [#3070 @Mikcl]
- SPDX output performance with many relationships [#3053 @kzantow]
- Order CPEs deterministically for SBOM reproducibility [#2967 #3085 @kzantow]
- Python packages: name normalization [#3064 #3069 @Mikcl]
- Syft report panics with the golang cataloger [#3037 #3043 @willmurphyscode]