v1.5.50 Release

v1.5.50 - 2026-03-02

Nothing interesting happened this release.

v1.5.49 Release

v1.5.49 - 2026-02-05

• sbom: add SPDX decoding support

  Claircore can now make use of SPDX documents it generates. The SPDX support is currently limited to claircore-generated documents.

• logging: claircore now uses log/slog

  If users were integrating with `zlog`, they should now instead configure the `log/slog` package's `Default.`

  For additional integration, see the toolkit/log package.

• sbom: add purls to SPDX documents

  When creating SPDX documents, claircore now generates purls.

v1.5.48 Release

v1.5.48 - 2025-12-05

Nothing interesting happened this release.

v1.5.47 Release

v1.5.47 - 2025-12-03

Nothing interesting happened this release.

v1.5.46 Release

v1.5.46 - 2025-12-01

Nothing interesting happened this release.

v1.5.45 Release

v1.5.45 - 2025-10-20

Nothing interesting happened this release.

v1.5.44 Release

v1.5.44 - 2025-10-01

Nothing interesting happened this release.

v1.5.43 Release

v1.5.43 - 2025-09-29

• enrichment: don't consider vulnerability.Description for enrichments

  Descriptions can often refer to different CVEs or multiple CVEs to the actual CVE that is associated to the vulnerability leading to erroneous scores. We should only consider the Name and Links fields.

• postgres: better GetEnrichments query

  The new query is in "normal" `JOIN`-and-`WHERE` form and does not use the `latest_update_operations` view. In testing, this was much quicker to execute.

v1.5.42 Release

v1.5.42 - 2025-09-19

Nothing interesting happened this release.

v1.5.41 Release

v1.5.41 - 2025-09-18

• rpm: fix use of unique.Handle pinning fs.FS
  Previous code wouldn't allow memory resources to be reclaimed and could lead to excessive memory consumption by the indexer in v1.5.40.