chore(deps): Bump github.com/anchore/grype from 0.95.0 to 0.104.1 in the go_modules group across 1 directory #1707

dependabot · 2026-01-13T06:25:31Z

Bumps the go_modules group with 1 update in the / directory: github.com/anchore/grype.

Updates github.com/anchore/grype from 0.95.0 to 0.104.1

Release notes

Sourced from github.com/anchore/grype's releases.

v0.104.1

Bug Fixes

Redact during file output [#3068 @kzantow]

Unaffected match table does not filter results if CPE matching is enabled [#3056 #3066 @kzantow]

Additional Changes

Migrate grype to use mholt/archives instead of anchore fork [#3036 @joonas]

(Full Changelog)

v0.104.0

Added Features

Add --from flag [#3035 @wagoodman]

Let a suppression expire to prevent that one will forget to resolve a vulnerability [#3031]

Bug Fixes

Unnormalized fix version triggers false-positive in mssql-jdbc [#3042 #3034 @jamestexas]

Additional Changes

junit template use CDATA block to prevent XML parse errors [#3019 @nvtkaszpir]

Keep nested loggers labeled [#3040 @wagoodman]

(Full Changelog)

v0.103.0

Added Features

Allow hyphen in version string [#3021 @willmurphyscode]

Respect rpmmod PURL qualifier [#3020 @willmurphyscode]

(Full Changelog)

v0.102.0

Added Features

Use Alma Linux specific advisories for Alma Linux scans [#2745 #2939 @willmurphyscode]

Bug Fixes

Bitnami packages with CPEs are not matched against CPE-based vulnerabilities [#2997]

Additional Changes

add markdown template [#2987 @sebdanielsson]

... (truncated)

Commits

39f7fa1 fix: redact during file output (#3068)
029bd47 fix: unaffected package ignore rules (#3066)
947857a chore: migrate grype to use mholt/archives instead of anchore fork (#3036)
12b72ab chore(deps): update tools to latest versions (#3051)
68c4672 chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#3059)
aa54c0c chore(deps): bump anchore/sbom-action from 0.20.9 to 0.20.10 (#3060)
50d343d chore(deps): bump github/codeql-action from 4.31.2 to 4.31.4 (#3061)
99a1d80 chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#3063)
644e571 chore(deps): bump actions/setup-go in /.github/actions/bootstrap (#3064)
b1706ca chore(deps): update anchore dependencies (#3055)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

github-actions · 2026-01-13T06:29:20Z

✅⚠️MegaLinter analysis: Success with warnings

⚠️ REPOSITORY / checkov - 1 error

2026-01-18 13:16:41,616 [MainThread  ] [ERROR]  Failed to invoke function /venvs/checkov/lib/python3.13/site-packages/checkov/common/runners/object_runner.<lambda> with ./.github/workflows/daily-qa.lock.yml
Traceback (most recent call last):
  File "/venvs/checkov/lib/python3.13/site-packages/checkov/github_actions/utils.py", line 79, in is_schema_valid
    validate(config_dict, gha_schema)
    ~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/venvs/checkov/lib/python3.13/site-packages/jsonschema/validators.py", line 1332, in validate
    raise error
jsonschema.exceptions.ValidationError: Additional properties are not allowed ('concurrency', 'jobs', 'on', 'permissions', 'run-name' were unexpected)

Failed validating 'additionalProperties' in schema:
    {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions',
     '$schema': 'http://json-schema.org/draft-07/schema',
     'additionalProperties': False,
     'definitions': {'expressionSyntax': {'type': 'string',
                                          '$comment': 'escape `{` and `}` '
                                                      'in pattern to be '
                                                      'unicode compatible '
                                                      '(#1360)',
                                          'pattern': '^\\$\\{\\{.*\\}\\}$'},
                     'pre-if': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#pre-if',
                                'description': 'Allows you to define '
                                               'conditions for the `pre:` '
                                               'action execution. The '
                                               '`pre:` action will only '
                                               'run if the conditions in '
                                               '`pre-if` are met. If not '
                                               'set, then `pre-if` '
                                               'defaults to `always()`. '
                                               'Note that the `step` '
                                               'context is unavailable, as '
                                               'no steps have run yet.',
                                'type': 'string'},
                     'post-if': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#post-if',
                                 'description': 'Allows you to define '
                                                'conditions for the '
                                                '`post:` action execution. '
                                                'The `post:` action will '
                                                'only run if the '
                                                'conditions in `post-if` '
                                                'are met. If not set, then '
                                                '`post-if` defaults to '
                                                '`always()`.',
                                 'type': 'string'},
                     'runs-javascript': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runs-for-javascript-actions',
                                         'description': 'Configures the '
                                                        'path to the '
                                                        "action's code and "
                                                        'the application '
                                                        'used to execute '
                                                        'the code.',
                                         'type': 'object',
                                         'properties': {'using': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsusing',
                                                                  'description': 'The '
                                                                                 'application '
                                                                                 'used '
                                                                                 'to '
                                                                                 'execute '
                                                                                 'the '
                                                                                 'code '
                                                                                 'specified '
                                                                                 'in '
                                                                                 '`main`.',
                                                                  'enum': ['node12',
                                                                           'node16']},
                                                        'main': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsmain',
                                                                 'description': 'The '
                                                                                'file '
                                                                                'that '
                                                                                'contains '
                                                                                'your '
                                                                                'action '
                                                                                'code. '
                                                                                'The '
                                                                                'application '
                                                                                'specified '
                                                                                'in '
                                                                                '`using` '
                                                                                'executes '
                                                                                'this '
                                                                                'file.',
                                                                 'type': 'string'},
                                                        'pre': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#pre',
                                                                'description': 'Allows '
                                                                               'you '
                                                                               'to '
                                                                               'run '
                                                                               'a '
                                                                               'script '
                                                                               'at '
                                                                               'the '
                                                                               'start '
                                                                               'of '
                                                                               'a '
                                                                               'job, '
                                                                               'before '
                                                                               'the '
                                                                               '`main:` '
                                                                               'action '
                                                                               'begins. '
                                                                               'For '
                                                                               'example, '
                                                                               'you '
                                                                               'can '
                                                                               'use '
                                                                               '`pre:` '
                                                                               'to '
                                                                               'run '
                                                                               'a '
                                                                               'prerequisite '
                                                                               'setup '
                                                                               'script. '
                                                                               'The '
                                                                               'application '
                                                                               'specified '
                                                                               'with '
                                                                               'the '
                                                                               '`using` '
                                                                               'syntax '
                                                                               'will '
                                                                               'execute '
                                                                               'this '
                                                                               'file. '
                                                                               'The '
                                                                               '`pre:` '
                                                                               'action '
                                                                               'always '
                                                                               'runs '
                                                                               'by '
                                                                               'default '
                                                                               'but '
                                                                               'you '
                                                                               'can '
                                                                               'override '
                                                                               'this '
                                                                               'using '
                                                                               '`pre-if`.',
                                                                'type': 'string'},
                                                        'pre-if': {'$ref': '#/definitions/pre-if'},
                                                        'post': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#post',
                                                                 'description': 'Allows '
                                                                                'you '
                                                                                'to '
                                                                                'run '
                                                                                'a '
                                                                                'script '
                                                                                'at '
                                                                                'the '
                                                                                'end '
                                                                                'of '
                                                                                'a '
                                                                                'job, '
                                                                                'once '
                                                                                'the '
                                                                                '`main:` '
                                                                                'action '
                                                                                'has '
                                                                                'completed. '
                                                                                'For '
                                                                                'example, '
                                                                                'you '
                                                                                'can '
                                                                                'use '
                                                                                '`post:` '
                                                                                'to '
                                                                                'terminate '
                                                                                'certain '
                                                                                'processes '
                                                                                'or '
                                                                                'remove '
                                                                                'unneeded '
                                                                                'files. '
                                                                                'The '
                                                                                'application '
                                                                                'specified '
                                                                                'with '
                                                                                'the '
                                                                                '`using` '
                                                                                'syntax '
                                                                                'will '
                                                                                'execute '
                                                                                'this '
                                                                                'file. '
                                                                                'The '
                                                                                '`post:` '
                                                                                'action '
                                                                                'always '
                                                                                'runs '
                                                                                'by '
                                                                                'default '
                                                                                'but '
                                                                                'you '
                                                                                'can '
                                                                                'override '
                                                                                'this '
                                                                                'using '
                                                                                '`post-if`.',
                                                                 'type': 'string'},
                                                        'post-if': {'$ref': '#/definitions/post-if'}},
                                         'required': ['using', 'main'],
                                         'additionalProperties': False},
                     'runs-composite': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runs-for-composite-run-steps-actions',
                                        'description': 'Configures the '
                                                       'path to the '
                                                       'composite action, '
                                                       'and the '
                                                       'application used '
                                                       'to execute the '
                                                       'code.',
                                        'type': 'object',
                                        'properties': {'using': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsusing-1',
                                                                 'description': 'To '
                                                                                'use '
                                                                                'a '
                                                                                'composite '
                                                                                'run '
                                                                                'steps '
                                                                                'action, '
                                                                                'set '
                                                                                'this '
                                                                                'to '
                                                                                "'composite'.",
                                                                 'const': 'composite'},
                                                       'steps': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runssteps',
                                                                 'description': 'The '
                                                                                'run '
                                                                                'steps '
                                                                                'that '
                                                                                'you '
                                                                                'plan '
                                                                                'to '
                                                                                'run '
                                                                                'in '
                                                                                'this '
                                                                                'action.',
                                                                 'type': 'array',
                                                                 'items': {'type': 'object',
                                                                           'properties': {'run': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsstepsrun',
                                                                                                  'description': 'The '
                                                                                                                 'command '
                                                                                                                 'you '
                                                                                                                 'want '
                                                                                                                 'to '
                                                                                                                 'run. '
                                                                                                                 'This '
                                                                                                                 'can '
                                                                                                                 'be '
                                                                                                                 'inline '
                                                                                                                 'or '
                                                                                                                 'a '
                                                                                                                 'script '
                                                                                                                 'in '
                                                                                                                 'your '
                                                                                                                 'action '
                                                                                                                 'repository.',
                                                                                                  'type': 'string'},
                                                                                          'shell': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsstepsshell',
                                                                                                    'description': 'The '
                                                                                                                   'shell '
                                                                                                                   'where '
                                                                                                                   'you '
                                                                                                                   'want '
                                                                                                                   'to '
                                                                                                                   'run '
                                                                                                                   'the '
                                                                                                                   'command.',
                                                                                                    'type': 'string',
                                                                                                    'anyOf': [{'$comment': 'https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions#custom-shell'},
                                                                                                              {'enum': ['bash',
                                                                                                                        'pwsh',
                                                                                                                        'python',
                                                                                                                        'sh',
                                                                                                                        'cmd',
                                                                                                                        'powershell']}]},
                                                                                          'uses': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsstepsuses',
                                                                                                   'description': 'Selects '
                                                                                                                  'an '
                                                                                                                  'action '
                                                                                                                  'to '
                                                                                                                  'run '
                                                                                                                  'as '
                                                                                                                  'part '
                                                                                                                  'of '
                                                                                                                  'a '
                                                                                                                  'step '
                                                                                                                  'in '
                                                                                                                  'your '
                                                                                                                  'job.',
                                                                                                   'type': 'string'},
                                                                                          'with': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsstepswith',
                                                                                                   'description': 'A '
                                                                                                                  'map '
                                                                                                                  'of '
                                                                                                                  'the '
                                                                                                                  'input '
                                                                                                                  'parameters '
                                                                                                                  'defined '
                                                                                                                  'by '
                                                                                                                  'the '
                                                                                                                  'action. '
                                                                                                                  'Each '
                                                                                                                  'input '
                                                                                                                  'parameter '
                                                                                                                  'is '
                                                                                                                  'a '
                                                                                                                  'key/value '
                                                                                                                  'pair. '
                                                                                                                  'Input '
                                                                                                                  'parameters '
                                                                                                                  'are '
                                                                                                                  'set '
                                                                                                                  'as '
                                                                                                                  'environment '
                                                                                                                  'variables. '
                                                                                                                  'The '
                                                                                                                  'variable '
                                                                                                                  'is '
                                                                                                                  'prefixed '
                                                                                                                  'with '
                                                                                                                  'INPUT_ '
                                                                                                                  'and '
                                                                                                                  'converted '
                                                                                                                  'to '
                                                                                                                  'upper '
                                                                                                                  'case.',
                                                                                                   'type': 'object'},
                                                                                          'name': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsstepsname',
                                                                                                   'description': 'The '
                                                                                                                  'name '
                                                                                                                  'of '
                                                                                                                  'the '
                                                                                                                  'composite '
                                                                                                                  'run '
                                                                                                                  'step.',
                                                                                                   'type': 'string'},
                                                                                          'id': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsstepsid',
                                                                                                 'description': 'A '
                                                                                                                'unique '
                                                                                                                'identifier '
                                                                                                                'for '
                                                                                                                'the '
                                                                                                                'step. '
                                                                                                                'You '
                                                                                                                'can '
                                                                                                                'use '
                                                                                                                'the '
                                                                                                                '`id` '
                                                                                                                'to '
                                                                                                                'reference '
                                                                                                                'the '
                                                                                                                'step '
                                                                                                                'in '
                                                                                                                'contexts.',
                                                                                                 'type': 'string'},
                                                                                          'if': {'$comment': 'https://docs.github.com/en/actions/creating-actions/metadata-syntax-for-github-actions#runsstepsif',
                                                                                                 'description': 'You '
                                                                                                                'can '
                                                                                                                'use '
                                                                                                                'the '
                                                                                                                'if '
                                                                                                                'conditional '
                                                                                                                'to '
                                                                                                                'prevent '
                                                                                                                'a '
                                                                                                                'step '
                                                                                                                'from '
                                                                                                                'running '
                                                                                                                'unless '
                                                                                                                'a '
                                                                                                                'condition '
                                                                                                                'is '
                                                                                                                'met. '
                                                                                                                'You '
                                                                                                                'can '
                                                                                                                'use '
                                                                                                                'any '
                                                                                                                'supported '
                                                                                                                'context '
                                                                                                                'and '
                                                                                                                'expression '
                                                                                                                'to '
                                                                                                                'create '
                                                                                                                'a '
                                                                                                                'conditional.\n'
                                                                                                                'Expressions '
                                                                                                                'in '
                                                                                                                'an '
                                                                                                                'if '
                                                                                                                'conditional '
                                        

(Truncated to 40000 characters out of 2273254)

✅ Linters with no issues

actionlint, bash-exec, git_diff, grype, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, syft, trivy, trivy-sbom, trufflehog, v8r, v8r, yamllint

See detailed reports in MegaLinter artifacts

devantler · 2026-01-13T07:33:53Z

@dependabot recreate

devantler · 2026-01-14T00:46:01Z

@dependabot recreate

devantler · 2026-01-14T02:51:10Z

@dependabot recreate

devantler · 2026-01-14T09:48:48Z

@dependabot recreate

Bumps the go_modules group with 1 update in the / directory: [github.com/anchore/grype](https://github.com/anchore/grype). Updates `github.com/anchore/grype` from 0.95.0 to 0.104.1 - [Release notes](https://github.com/anchore/grype/releases) - [Changelog](https://github.com/anchore/grype/blob/main/RELEASE.md) - [Commits](anchore/grype@v0.95.0...v0.104.1) --- updated-dependencies: - dependency-name: github.com/anchore/grype dependency-version: 0.104.1 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jan 13, 2026

dependabot bot requested a review from devantler as a code owner January 13, 2026 06:25

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 13, 2026

github-project-automation bot added this to 🌊 Project Board Jan 13, 2026

dependabot bot added the go Pull requests that update go code label Jan 13, 2026

github-project-automation bot moved this to 🏃🏻‍♂️ In Progress in 🌊 Project Board Jan 13, 2026

github-actions bot approved these changes Jan 13, 2026

View reviewed changes

github-project-automation bot moved this from 🏃🏻‍♂️ In Progress to 🚀 In Finalization in 🌊 Project Board Jan 13, 2026

botantler bot enabled auto-merge (squash) January 13, 2026 06:25

dependabot bot force-pushed the dependabot/go_modules/go_modules-8123b80ff8 branch 2 times, most recently from 916bcca to 1c39b6b Compare January 13, 2026 06:56

dependabot bot force-pushed the dependabot/go_modules/go_modules-8123b80ff8 branch 3 times, most recently from f14429d to 2f470f2 Compare January 13, 2026 23:40

dependabot bot force-pushed the dependabot/go_modules/go_modules-8123b80ff8 branch from 2f470f2 to 3379c6b Compare January 14, 2026 00:47

devantler disabled auto-merge January 14, 2026 02:28

devantler added this pull request to the merge queue Jan 14, 2026

github-merge-queue bot removed this pull request from the merge queue due to failed status checks Jan 14, 2026

dependabot bot force-pushed the dependabot/go_modules/go_modules-8123b80ff8 branch from e9bcac9 to 8f8b0d7 Compare January 14, 2026 02:52

dependabot bot force-pushed the dependabot/go_modules/go_modules-8123b80ff8 branch from 8f8b0d7 to 8cb0666 Compare January 14, 2026 09:50

botantler bot enabled auto-merge January 14, 2026 09:50

dependabot bot force-pushed the dependabot/go_modules/go_modules-8123b80ff8 branch from 8cb0666 to 8ede153 Compare January 18, 2026 13:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): Bump github.com/anchore/grype from 0.95.0 to 0.104.1 in the go_modules group across 1 directory #1707

chore(deps): Bump github.com/anchore/grype from 0.95.0 to 0.104.1 in the go_modules group across 1 directory #1707

dependabot bot commented on behalf of github Jan 13, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 13, 2026 •

edited

Loading

Uh oh!

devantler commented Jan 13, 2026

Uh oh!

devantler commented Jan 14, 2026

Uh oh!

Uh oh!

devantler commented Jan 14, 2026

Uh oh!

devantler commented Jan 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

chore(deps): Bump github.com/anchore/grype from 0.95.0 to 0.104.1 in the go_modules group across 1 directory #1707

Are you sure you want to change the base?

chore(deps): Bump github.com/anchore/grype from 0.95.0 to 0.104.1 in the go_modules group across 1 directory #1707

Conversation

dependabot bot commented on behalf of github Jan 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.104.1

Bug Fixes

Additional Changes

v0.104.0

Added Features

Bug Fixes

Additional Changes

v0.103.0

Added Features

v0.102.0

Added Features

Bug Fixes

Additional Changes

Uh oh!

github-actions bot commented Jan 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅⚠️MegaLinter analysis: Success with warnings

✅ Linters with no issues

Uh oh!

devantler commented Jan 13, 2026

Uh oh!

devantler commented Jan 14, 2026

Uh oh!

Uh oh!

devantler commented Jan 14, 2026

Uh oh!

devantler commented Jan 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Jan 13, 2026 •

edited

Loading

github-actions bot commented Jan 13, 2026 •

edited

Loading