Unreleased
v4.10.0-rc.0 - 2026-11-13
Chore
- e66370dc: v4.10.0-rc.0 changelog bump
- 263f0f68: update claircore to v1.6.3
- 2f1f7d22: update Go images to 1.26
- 34177047: update claircore to v1.6.2
- 978bc11d: update claircore to v1.6.0
- 32121718: add clair-maintainers to CODEOWNERS
- 99453516: replace gopkg.in/yaml.v3 as it has been deprecated
- e52ee811: Add Enrichment latency panel to sample dashboard
- e87a300a: remove refs to deprecated trace.NewNoopTracerProvider
- b843a58f: update zlog to v2.1.1
- 508e6dba: update claircore to v1.5.51
- 594b6e7a: update general project go version to 1.25
- adfd42e2: update claircore to v1.5.50
- 75e20ccd: fix typo in api_internal.md
Chore(Deps)
- 876766fc: bump go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6
- c52db8fb: bump github.com/klauspost/compress from 1.20.1 to 1.20.3
- 82150014: bump github.com/jackc/pgx/v5 from 5.11.0 to 5.12.0
- e98a64d6: bump the golang-x group across 1 directory with 2 updates
- 5d84f1f2: bump google.golang.org/grpc from 1.83.2 to 1.85.0
- 5671b4f7: bump github.com/rabbitmq/amqp091-go from 1.13.0 to 1.16.0
- c5f3e32d: bump github.com/go-stomp/stomp/v3 from 3.1.5 to 3.2.1
- 195abb85: bump the otel group across 1 directory with 12 updates
- 4cec58a0: bump github.com/klauspost/compress from 1.20.0 to 1.20.1
- c9ac9a0a: bump github.com/klauspost/compress from 1.19.2 to 1.20.0
- 5fa4b744: bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace
- 058c4fa9: bump github.com/jackc/pgx/v5 from 5.10.0 to 5.11.0
- 49678ca2: bump the otel group across 1 directory with 14 updates
- 9b9f531b: bump google.golang.org/grpc from 1.82.1 to 1.83.2
- 10f22879: bump github.com/google/go-containerregistry
- 3953837d: bump actions/stale from 10 to 11
- d293e896: bump actions/setup-go from 6 to 7
- 45453753: bump actions/cache from 5 to 6
- eb22407d: bump google.golang.org/grpc from 1.81.1 to 1.82.1
- 6e78de95: bump github.com/prometheus/client_golang
- 8a6aba54: bump github.com/klauspost/compress from 1.19.0 to 1.19.1
- c7b29460: bump github.com/rabbitmq/amqp091-go from 1.11.0 to 1.13.0
- fbc62bba: bump the golang-x group across 1 directory with 2 updates
- 248f642e: bump github.com/klauspost/compress from 1.18.7 to 1.19.0
- 0f750adb: bump github.com/google/go-containerregistry
- 45d21fa1: bump actions/checkout from 6 to 7
- f75709a1: bump github.com/klauspost/compress from 1.18.6 to 1.18.7
- 1ef310cf: bump the golang-x group across 1 directory with 2 updates
- d1326077: bump github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0
- c3b13eb7: bump github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0
- 7f601675: bump github.com/google/go-containerregistry
- 8ba399ee: bump github.com/grafana/pyroscope-go/godeltaprof
- 38bc5a70: bump the otel group with 14 updates
- 2b364fbe: bump golang.org/x/net
- 30bf14a0: bump google.golang.org/grpc from 1.81.0 to 1.81.1
- 973a773c: bump golang.org/x/net
- 6d7cc9e4: bump github.com/grafana/pyroscope-go/godeltaprof
- c9721931: bump google.golang.org/grpc from 1.80.0 to 1.81.0
- 52515373: bump github.com/klauspost/compress from 1.18.5 to 1.18.6
- afdb4667: bump github.com/quay/claircore from 1.5.51 to 1.5.52
- 83c8ed31: bump github.com/rabbitmq/amqp091-go from 1.10.0 to 1.11.0
- b1d65517: bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2
- f66fd148: bump github.com/quay/claircore/toolkit from 1.4.0 to 1.6.0
- 1ea50102: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
- c1ed2d40: bump github.com/google/go-containerregistry
- 3b94e283: bump actions/github-script from 8 to 9
- 7412c8c3: bump the otel group with 11 updates
- 97c4d32b: bump github.com/klauspost/compress from 1.18.4 to 1.18.5
- 55f77805: bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5
- c8a47eb5: bump docker/setup-qemu-action from 3 to 4
- 5f359714: bump docker/build-push-action from 6 to 7
- 1731cd91: bump docker/login-action from 3 to 4
- b908bdf4: bump docker/setup-buildx-action from 3 to 4
- 84265031: bump actions/download-artifact from 7 to 8
- 546721d8: bump google.golang.org/grpc from 1.79.1 to 1.79.3
- eab7aaf8: bump the golang-x group across 1 directory with 3 updates
- effe37da: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
- 378b050a: bump the otel group with 11 updates
- a7fb24ef: bump the otel group with 11 updates
- 47fa5264: bump actions/upload-artifact from 6 to 7
- a9dfee29: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
- 929b8002: bump golang.org/x/net in the golang-x group
- b119849b: bump github.com/klauspost/compress from 1.18.3 to 1.18.4
- d31ff3f4: bump the otel group with 11 updates
- 320c953f: bump github.com/klauspost/compress from 1.18.2 to 1.18.3
- f72735ee: bump golang.org/x/net in the golang-x group
- 635cf74f: bump google.golang.org/grpc from 1.77.0 to 1.78.0
- 07b1f470: bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0
- eec2d5e0: bump actions/upload-artifact from 5 to 6
- 37ac5618: bump peter-evans/create-pull-request from 7 to 8
- fefde5e1: bump actions/cache from 4 to 5
- 08c50917: bump actions/download-artifact from 6 to 7
- 47c5ba61: bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
- 674b570e: bump the golang-x group with 2 updates
Cicd
- 0fceddec: additional dependabot grouping
Clair
- 33676f01: enable h2c
- 3303894a: print flag parse errors
- 68aad348: fix profile flags
- 104efb91: add profiling flags
- bab68a8c: migrate to log/slog
Contrib
Httptransport
Refactor
- e685ebfb: replace context.WithCancel with t.Context