Changelog
- cf2dbba feat(contrib/trivy): pass through Trivy's repository class to models.Package (#2662)
- f0b1087 fix(scanner): add missing separator between rpm -qf query format and paths in getOwnerPkgs (#2657)
- 5dd453f perf(detector/vuls2): fold vuls2 detections from the streaming Detect (#2648)
- 6499d0e fix(detector/vuls2): break CVSS merge score ties deterministically (#2649)
- e901c00 fix(models): map trivy-db julia, seal, and redhat-csaf-vex sources (#2646)
- 8547d1a chore(deps): bump the trivy group across 1 directory with 2 updates (#2640)
- 94f7c31 chore(deps): bump golang in the all group across 1 directory (#2624)
- 383e246 chore(deps): bump github.com/moby/buildkit (#2644)
- 03f1c5d chore(deps): bump the others group across 1 directory with 8 updates (#2641)
- 8879b73 chore(deps): bump the all group across 1 directory with 13 updates (#2625)
- 386ec57 feat(detector/vuls2): detect OpenSSH security advisories (#2636)
- cb6d2e3 feat(detector/vuls2): detect Apple security releases (#2635)
- 39f6cf1 chore(deps): bump vuls2 and vuls-data-update for fortinet cvrf RangeTypes (#2633)
- 86d476c feat(scanner/windows): update windowsReleases through 2026-07 (#2630)
- 95e4c7f chore(deps): bump vuls-data-update to latest (#2626)
- 63cf6b1 ci(check-enums): include a remediation playbook in drift issues (#2627)
- b7691ee fix(detector/vuls2): report NVD and VulnCheck CVSS per source, not whichever sorts first (#2621)