Release v1.11.0 · anchore/syft · GitHub
Added Features
- Added the SWI Prolog (swipl) ecosystem #3076 @LaurentGoderre
- Improved java cataloging #2769 @GijsCalis
Bug Fixes
- Empty version field on some dependencies when reading pom.xml #1129 #2769 @GijsCalis
- Support Maven multi-level configuration file / parent POM #2017 #2769 @GijsCalis
- DependencyManagement ignored in pom.xml #1813 #2769 @GijsCalis
- Version parsing regression for Go binaries #3086 #3087 @spiffcs
Additional Changes
- rather than have a hard max recursive depth - syft should detect parent pom cycles #2284 #2769 @GijsCalis
- increase java purl generation test coverage #3110 @westonsteimel
- Updated PackageSupplier to type Organization for JAR files #3093 @harippriyas
- Ensure accurate java main artifact name retrieval for multi-JARs and refine fallback approach #3054 @dor-hayun