All pull requests

Pull requests

• fix: keep SPDX license refs unique regardless of case

  #5545·theluckystrike opened Nov 8, 2026·

  ·
  1

• deps: bump brotli

  dependencies
  #5543·willmurphyscode opened Nov 7, 2026Contributor·

  ·

• chore(deps): update anchore dependencies

  automationchangelog-ignoredependencies
  #5535·anchore-oss-update-bot opened Nov 6, 2026Contributor·

  ·
  4

• fix(binary): catalog Windows node.exe with the nodejs-binary classifier

  #5534·pujitha24 opened Nov 6, 2026Contributor·4 tasks done·

  ·
  1

• Fix relative directory scans including sibling packages when the working directory is a symlink

  #5532·RyoKusnadi opened Nov 6, 2026·4 tasks done·

  ·
  1

• fixed python-package-cataloger misses pip requirement files in requir…

  #5531·rezmoss opened Nov 5, 2026Contributor·4 of 9 tasks·

  ·
  1

• fix(spdx): qualify decoded package IDs with the document namespace

  #5526·santhiprakash opened Nov 5, 2026·4 tasks done·

  ·
  1

• fix(java): correct purl namespace for hibernate-commons-annotations

  #5524·Shanmukh-l33t opened Nov 4, 2026·4 tasks done·

  ·
  1

• Fix acceptance test image cache never restored in CI

  needs-manual-review
  #5523·Shanmukh-l33t opened Nov 4, 2026·4 of 9 tasks·

  ·

• feat: improve OCaml opam cataloging

  #5518·bn-d opened Nov 3, 2026·1 of 9 tasks·

  ·

• fixed pe-binary-package-cataloger reports php ext dlls , fixed #5516

  #5517·rezmoss opened Nov 3, 2026Contributor·4 of 9 tasks·

  ·
  1

• perf: reduce cataloger task selection work per CreateSBOM call

  #5515·caleballen opened Nov 3, 2026·4 tasks done·

  ·

• fix: build the out-of-range FileMode test cases at run time

  #5512·vejeta opened Nov 3, 2026·

  ·

• fix: catalog buildscript and settings gradle lockfiles

  #5511·wils0ns opened Nov 2, 2026·4 tasks done·

  ·

• fix(source): respect --source-version latest for container images

  #5508·LiShuochen opened Nov 1, 2026·4 tasks done·

  ·
  1

• fix(rust): omit Cargo PURLs for local packages in audit binaries

  #5507·soufiane-bouchaara opened Oct 31, 2026·3 of 4 tasks·

  ·

• fix: deterministic dev-only detection for yarn.lock and bun.lock

  #5506·mikey923 opened Oct 31, 2026·4 tasks done·

  ·
  1

• fix(python): find license files under .dist-info/licenses (PEP 639)

  #5496·ToreMerkely opened Oct 30, 2026·4 tasks done·

  ·

• fix(binary): detect julia on linux/arm64, ppc64le and 1.9.0 betas

  #5494·26wv opened Oct 30, 2026·4 tasks done·

  ·
  1

  1

• Fix yarn.lock dev-dependency filtering for lock files in sub-folders

  #5490·sarankumar1325 opened Oct 29, 2026·4 tasks done·

  ·
  1

• Fix duplicate and misnamed packages for linked entries in package-lock.json

  #5488·jayhemnani9910 opened Oct 29, 2026·4 tasks done·

  ·
  1

• fix(java): map gRPC, OpenCensus, Reactor and other group IDs for jars without pom metadata

  #5487·knutwannheden opened Oct 28, 2026·4 tasks done·

  ·

• fix(java): map Kotlin and kotlinx group IDs for jars without pom metadata

  #5486·knutwannheden opened Oct 28, 2026·4 tasks done·

  ·

• fix(java): resolve ASM 4+ group IDs to org.ow2.asm

  #5485·knutwannheden opened Oct 28, 2026·4 tasks done·

  ·

• fix: use pointer receiver for FileResolver to enable reuse

  #5483·caleballen opened Oct 27, 2026·5 tasks done·

  ·