Skip to content

chore(deps): bump github.com/quay/claircore from 1.5.52 to 1.5.54#126

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/quay/claircore-1.5.54
Closed

chore(deps): bump github.com/quay/claircore from 1.5.52 to 1.5.54#126
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/quay/claircore-1.5.54

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/quay/claircore from 1.5.52 to 1.5.54.

Release notes

Sourced from github.com/quay/claircore's releases.

v1.5.54 Release

v1.5.54 - 2026-07-20

  • apk: guard against short lines in installed database

    An installed database with a stray blank line inside a record produces exactly that: the "\n\n" split leaves the extra newline at the head of the next record. This patch skips lines too short to hold a key and a value.

v1.5.53 Release

v1.5.53 - 2026-07-17

  • claircore: support "not affected" vulnerability assertions

    The Red Hat VEX updater now ingests known_not_affected product status as inverted vulnerabilities.

  • acceptance: add the acceptance testing framework

  • postgres: add existence check to type in all cases

Changelog

Sourced from github.com/quay/claircore's changelog.

v1.5.54 - 2026-07-20

  • apk: guard against short lines in installed database

    An installed database with a stray blank line inside a record produces exactly that: the "\n\n" split leaves the extra newline at the head of the next record. This patch skips lines too short to hold a key and a value.

v1.5.53 - 2026-07-17

  • claircore: support "not affected" vulnerability assertions

    The Red Hat VEX updater now ingests known_not_affected product status as inverted vulnerabilities.

  • acceptance: add the acceptance testing framework

  • postgres: add existence check to type in all cases

Commits
  • fae55a6 chore: v1.5.54 changelog bump
  • 949aa2c apk: guard against short lines in installed database
  • 3e30aeb chore(deps): bump actions/cache from 5 to 6
  • 7e3081c ci: fix release workflow changelog extraction
  • b14401b chore: v1.5.53 changelog bump
  • 910c3c5 chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.0
  • 40ee906 datastore/postgres: fix iterator exhaustion in alias insertion
  • 074c316 postgres: bulk-link vulnerability aliases in two statements
  • f70c12d postgres: alias insertion deadlock
  • 11818e7 chore(deps): bump golang.org/x/tools
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/quay/claircore](https://github.com/quay/claircore) from 1.5.52 to 1.5.54.
- [Release notes](https://github.com/quay/claircore/releases)
- [Changelog](https://github.com/quay/claircore/blob/main/CHANGELOG.md)
- [Commits](quay/claircore@v1.5.52...v1.5.54)

---
updated-dependencies:
- dependency-name: github.com/quay/claircore
  dependency-version: 1.5.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like github.com/quay/claircore is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 24, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/quay/claircore-1.5.54 branch July 24, 2026 12:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants