Skip to content

[pull] main from guacsec:main - #232

Merged
pull[bot] merged 5 commits into
trustification:mainfrom
guacsec:main
Aug 26, 2026
Merged

[pull] main from guacsec:main#232
pull[bot] merged 5 commits into
trustification:mainfrom
guacsec:main

Conversation

@pull

@pull pull Bot commented Aug 26, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

rh-jfuller and others added 5 commits August 26, 2026 06:13
…struction

- Skip JSON serialization in filter() for queries that don't use nested
  purl:/cpe: field access; the common path (full-text search, name filters)
  now uses only Value::Custom with zero JSON allocation per node
- Share graph node data in BaseSummary via Arc instead of deep cloning:
  purl/cpe use Arc<[T]>, document_id/product_name/product_version use
  Arc<String>
- Fix Context::intern double hash lookup (contains_key + get) with single
  entry() call
…de clones

Each matching node in run_graph_query cloned the HashSet<Relationship>
into the async closure. Replace with Arc::new once, Arc::clone per node.
- Collapse resolve_rh_external_sbom_descendants from two sequential
  queries into a single self-join on sbom_node_checksum, also adding
  checksum type matching
- Add ExternalSbomCache to deduplicate resolve_external_sbom calls
  during descendant traversal; uses OnceCell coalescing so concurrent
  collectors for the same external reference share one DB query
Since v8.0.0, astral-sh/setup-uv stopped publishing major version alias
tags (v8, v9, etc.) for supply chain security. The @v9 tag does not
exist, causing the workflow to fail at action resolution before any step
runs. Pin to the latest immutable release tag instead.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@pull pull Bot locked and limited conversation to collaborators Aug 26, 2026
@pull pull Bot added the ⤵️ pull label Aug 26, 2026
@pull
pull Bot merged commit 73513bc into trustification:main Aug 26, 2026
1 check passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants