v0.42.0

v0.42.0

Added Features

• emit AlmaLinux advisories as "advisory only" records [#886 @willmurphyscode]

Additional Changes

• doc: Add llms.txt for the 🤖 🕷️ [#862 @popey]
• bump quality gate labels [#900 @westonsteimel]

(Full Changelog)

v0.41.0

v0.41.0

Added Features

• allow synthesis of new NVD records from overrides [#894 @westonsteimel]

Bug Fixes

• workspace result_count fails with multiple .db files [#892 @jamestexas]

(Full Changelog)

v0.40.1

v0.40.1

Bug Fixes

• Add mariner first-observed fix date support [#891 @wagoodman]

(Full Changelog)

v0.40.0

v0.40.0

Added Features

• Add support for annotated openvex with observed fix dates [#885 @wagoodman]

Bug Fixes

• Remove old CSAF archives when downloading new ones [#883 @wagoodman]

(Full Changelog)

v0.39.2

v0.39.2

Bug Fixes

• Update RHEL parser to account for missing module in CSAF product tree [#882 @wagoodman]

(Full Changelog)

v0.39.1

v0.39.1

Bug Fixes

• Use context managers for provider and parser resource cleanup [#881 @wagoodman]

(Full Changelog)

v0.39.0

v0.39.0

Added Features

• add vex as valid vulnerability format [#847 @crosleyzack]
• Track first observed fix dates on each run [#880 @wagoodman]

Bug Fixes

• Apply fix dates and overrides together [#879 @wagoodman]

(Full Changelog)

v0.38.3

v0.38.3

Bug Fixes

• Process all NVD records to ensure a fix date is associated [#878 @wagoodman]

(Full Changelog)

v0.38.2

v0.38.2

Bug Fixes

• Wire ecosystem normalization [#877 @wagoodman]

Additional Changes

• Add nocase statements to schema (remove from queries) [#876 @wagoodman]

(Full Changelog)

v0.38.1

v0.38.1

Bug Fixes

• Ensure fetching entries from the fixdates db is case insensitive [#873 @wagoodman]

(Full Changelog)