v2.4.1

What's Changed

• Update lint.yml by @ForestEckhardt in #380
• Marshal CycloneDX/SPDX SBOM with indentation by @sophiewigmore in #379

Full Changelog: v2.4.0...v2.4.1

v2.4.0

What's Changed

• Adds scribe.WithPrefix option for scribe.Writer by @ryanmoran in #353
• Bump github.com/stretchr/testify from 1.7.4 to 1.7.5 by @dependabot in #354
• Bump github.com/anchore/syft from 0.48.1 to 0.49.0 by @dependabot in #355
• Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 by @dependabot in #356
• Bump github.com/anchore/syft from 0.49.0 to 0.50.0 by @dependabot in #357
• Bump github.com/gabriel-vasile/mimetype from 1.4.0 to 1.4.1 by @dependabot in #358
• Bump github.com/anchore/syft from 0.50.0 to 0.51.0 by @dependabot in #359
• Bump github.com/onsi/gomega from 1.19.0 to 1.20.0 by @dependabot in #360
• Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0 by @dependabot in #361
• Bump github.com/anchore/syft from 0.51.0 to 0.52.0 by @dependabot in #362
• Add debug logging for layer flags, build configuration by @fg-j in #363
• Bump github.com/anchore/syft from 0.52.0 to 0.53.0 by @dependabot in #366
• Validate env var names before writing env var files by @fg-j in #365
• Bump github.com/anchore/syft from 0.53.0 to 0.53.2 by @dependabot in #370
• Makes CycloneDX SBOM Reproducible by @ForestEckhardt in #369
• Adds a reproducibility verification check by @ForestEckhardt in #371
• Bump github.com/anchore/syft from 0.53.2 to 0.53.4 by @dependabot in #374
• Add support for wild-card stacks in dependencies by @samj1912 in #376
• Makes SPDX SBOM Reproducible by @ForestEckhardt in #372
• GenerateFromDependency without CPE or PURL by @fg-j in #373
• Adds CPEs to buildpack.toml dependency metadata by @fg-j in #377

Full Changelog: v2.3.1...v2.4.0

v2.3.1

What's Changed

• Bump github.com/anchore/syft from 0.44.1 to 0.45.0 by @dependabot in #340
• Bump github.com/anchore/syft from 0.45.0 to 0.45.1 by @dependabot in #341
• Remove deprecated ioutil package. by @robdimsdale in #344
• Bump github.com/anchore/syft from 0.45.1 to 0.46.0 by @dependabot in #345
• Bump github.com/anchore/syft from 0.46.0 to 0.46.1 by @dependabot in #346
• Bump github.com/anchore/syft from 0.46.1 to 0.46.2 by @dependabot in #347
• Bump github.com/anchore/syft from 0.46.2 to 0.46.3 by @dependabot in #348
• Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 by @dependabot in #349
• Bump github.com/anchore/syft from 0.46.3 to 0.47.0 by @dependabot in #350
• Bump github.com/anchore/syft from 0.47.0 to 0.48.1 by @dependabot in #351
• Bump github.com/stretchr/testify from 1.7.2 to 1.7.4 by @dependabot in #352

Full Changelog: v2.3.0...v2.3.1

v2.3.0

What's Changed

🎉 Buildpack API 0.8 🎉

As of this release, packit fully supports Cloud Native Buildpacks Buildpack API 0.8. This includes the ability to set the working directory for each launch process.

PRs

• Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 by @dependabot in #326
• Adds sbom.NewSBOM by @ryanmoran in #327
• Bump github.com/anchore/syft from 0.43.2 to 0.44.0 by @dependabot in #328
• Bump github.com/anchore/syft from 0.44.0 to 0.44.1 by @dependabot in #332
• update auto-label workflow trigger by @sophiewigmore in #333
• Rebase instead of squashing on auto-merge by @fg-j in #334
• Bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in #337
• API 0.8: Allows for process specific working directory by @ForestEckhardt in #336
• Bump github.com/google/go-cmp from 0.5.7 to 0.5.8 by @dependabot in #338
• API 0.8: Uses environment variables over postional args when available by @ForestEckhardt in #335
• Fallback to id if idLike doesn't exist by @ryanmoran in #339

Full Changelog: v2.2.0...v2.3.0

v2.2.0

What's Changed

• Fixes error interpolation case where err is nil by @ryanmoran in #289
• Bump github.com/anchore/syft from 0.38.0 to 0.41.1 by @dependabot in #290, #292, #294, #295, #297
• Trims whitespace around dependency-mapping values by @ryanmoran in #291
• Updates README and adds top level GoDoc blurb by @ForestEckhardt in #298
• Fixes line continuations in indented writer streams by @ryanmoran in #304
• Use a file source for SBOM when applicable by @ryanmoran in #305
• Add "application/octet-stream" as an allowed file type by @joshuatcasey in #309
• Fix: application/x-executable should use NewExecutable decompression strategy by @joshuatcasey in #310
• Automatically move listed Exec.D executables into <layer>/exec.d/<executable> by @joshuatcasey in #300
• Bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0 by @dependabot in #324
• Implement Syft2, 3 and CycloneDX 1.3 SBOM formats; upgrade to github.com/anchore/syft v0.43.2 by @fg-j in #312

New Contributors

• @joshuatcasey made their first contribution in #309

Full Changelog: v2.1.0...v2.2.0

v2.1.0

What's Changed

• Bump github.com/onsi/gomega from 1.17.0 to 1.18.0 by @dependabot in #282
• Bump github.com/anchore/syft from 0.35.1 to 0.36.0 by @dependabot in #281
• Bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in #283
• Bump github.com/anchore/syft from 0.36.0 to 0.37.5 by @dependabot in #285
• Bump github.com/anchore/syft from 0.37.5 to 0.37.10 by @dependabot in #286
• Expose LeveledLogger's Writers by @fg-j in #284
• Bump github.com/anchore/syft from 0.37.10 to 0.38.0 by @dependabot in #287
• Add SBOM logging to scribe.Emitter by @fg-j in #288

Full Changelog: v2.0.3...v2.1.0

v2.0.3

What's Changed

• fix(servicebindings): trim provider/type whitespace by @noamichael in #276
• Bump github.com/anchore/syft from 0.34.0 to 0.35.0 by @dependabot in #277
• Bump github.com/anchore/syft from 0.35.0 to 0.35.1 by @dependabot in #278
• Bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 by @dependabot in #279

New Contributors

• @noamichael made their first contribution in #276

Full Changelog: v2.0.2...v2.0.3

v2.0.2

What's Changed

• Bump github.com/anchore/syft from 0.32.2 to 0.33.0 by @dependabot in #270
• Simplify SBOM test assertions by @fg-j in #272
• Bump github.com/anchore/syft from 0.33.0 to 0.34.0 by @dependabot in #271
• Add a WithLevel function to scribe.Emitter by @sophiewigmore in #274

Full Changelog: v2.0.1...v2.0.2

v2.0.1

What's Changed

• Removes syft replace directive to use upstream by @ryanmoran in #267
• Bump github.com/anchore/syft from 0.32.0 to 0.32.1 by @dependabot in #268
• Bump github.com/anchore/syft from 0.32.1 to 0.32.2 by @dependabot in #269

Full Changelog: v2.0.0...v2.0.1

v2.0.0

What's Changed

• add sbom field to buildpack.toml (Buildpack API 0.7) by @robdimsdale in #248
• Adds Exists function by @ForestEckhardt in #249
• Use semver labels to calculate release version by @sophiewigmore in #257
• vacation: handle compressed non-tar archives by @mboldt in #258
• Adds Info and Debug logger functionality by @ForestEckhardt in #254
• Refactor vacation.Executable by @ForestEckhardt in #260
• New package to generate SBOMs using Syft by @ryanmoran in #255
• Remove Paketo-specific BOM from top-level package by @sophiewigmore in #241
• Removes deprecated fields and methods by @ryanmoran in #263
• Fixes import statement for v2 module by @ryanmoran in #266

New Contributors

• @mboldt made their first contribution in #258

Full Changelog: v1.3.1...v2.0.0