Merge branch 'master' into dependency-track-tags-support

gschafra · web-flow · commit 5844f04a8c3a · 2025-11-07T09:31:44.000+01:00
Signed-off-by: gschafra &lt;gschafra@web.de&gt;
diff --git a/.github/workflows/binary-builds.yml b/.github/workflows/binary-builds.yml
@@ -48,16 +48,16 @@ jobs:
         arch: [ amd64, arm64]
         libc: [ gnu, musl ]
         exclude:
-          # No more intel on macos
-          - os: darwin
-            arch: amd64
           # musl can only be built on linux
           - os: darwin
             libc: musl
           - os: windows
             libc: musl
         include:
           # Set all the runners
+          - os: darwin
+            arch: amd64
+            runner: macos-14-large
           - os: darwin
             arch: arm64
             runner: macos-14
diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml
@@ -183,6 +183,9 @@ jobs:
 
           - lang: python313
 
+          - lang: python313
+            distro: alpine
+
           - lang: ruby25
             fix-qemu: true
             skip-arm: true
diff --git a/.nvmrc b/.nvmrc
@@ -1 +1 @@
-24.10.0
+24.11.0
diff --git a/.versions/node_24 b/.versions/node_24
@@ -1,2 +1,2 @@
 # renovate: datasource=node-version depName=node
-24.10.0
+24.11.0
diff --git a/.versions/node_25 b/.versions/node_25
@@ -1,2 +1,2 @@
 # renovate: datasource=node-version depName=node
-25.0.0
+25.1.0
diff --git a/biome.json b/biome.json
@@ -1,5 +1,5 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.3.2/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.3.3/schema.json",
   "assist": {
     "actions": {
       "source": {
diff --git a/ci/Dockerfile b/ci/Dockerfile
@@ -14,7 +14,7 @@ ARG GRADLE_VERSION=8.14.3
 # renovate: datasource=golang-version depName=golang
 ARG GO_VERSION=1.25.3
 # renovate: datasource=node-version depName=node
-ARG NODE_VERSION=24.10.0
+ARG NODE_VERSION=24.11.0
 ARG RUBY_VERSION=3.4.5
 ARG JAVA_TOOL_OPTIONS="-Dfile.encoding=UTF-8"
 ARG SCALA_VERSION=3.7.2
diff --git a/ci/images/Dockerfile.dotnet8 b/ci/images/Dockerfile.dotnet8
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/dotnet-sdk:8.0.21@sha256:fd9ddda0ed8a4c2435b4a26529eeea1c55755f79fb84689ddf91b227210dfe5e AS base
+FROM registry.suse.com/bci/dotnet-sdk:8.0.21@sha256:7318a8ce154c8e93d9fae24ee8129ad14368e396de738afe5647a7aa1177c1ea AS base
 
 ARG GITHUB_URL=https://github.com
 ARG NODEJS_DIST_URL
@@ -40,6 +40,7 @@ RUN set -e; \
  && zypper \
       --non-interactive \
         update \
+ && zypper addlock mssql-zulu-jre-8 \
  && zypper \
       --non-interactive \
         install \
diff --git a/ci/images/Dockerfile.dotnet9 b/ci/images/Dockerfile.dotnet9
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/dotnet-sdk:9.0.10@sha256:25e481dcc98f1df3e94d639f48165335d9d305a612c1a221e3dca21c3cea1a96 AS base
+FROM registry.suse.com/bci/dotnet-sdk:9.0.10@sha256:0630dc3fc8272c6a6880f1952a15c68bd3555cb998c7e4cb055c542fac42b33a AS base
 
 ARG NODEJS_DIST_URL
 ARG NPM_REPO
@@ -39,6 +39,7 @@ RUN set -e; \
  && zypper \
       --non-interactive \
         update \
+ && zypper addlock mssql-zulu-jre-8 \
  && zypper \
       --non-interactive \
         install \
diff --git a/ci/images/Dockerfile.java17 b/ci/images/Dockerfile.java17
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/openjdk-devel:17.0.16.0@sha256:596ac8eb4c7a65bff3efd75bdd7c7e0fea5f8186accd5d81db0f67b052a12969 AS base
+FROM registry.suse.com/bci/openjdk-devel:17.0.16.0@sha256:6dc2d83b89849b5f590be104e798f2488804d7c61aeac79d05cdae5f75e503e2 AS base
 
 ARG GITHUB_URL=https://github.com
 ARG GRADLE_8
diff --git a/ci/images/Dockerfile.java17-slim b/ci/images/Dockerfile.java17-slim
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/openjdk-devel:17.0.16.0@sha256:596ac8eb4c7a65bff3efd75bdd7c7e0fea5f8186accd5d81db0f67b052a12969 AS base
+FROM registry.suse.com/bci/openjdk-devel:17.0.16.0@sha256:6dc2d83b89849b5f590be104e798f2488804d7c61aeac79d05cdae5f75e503e2 AS base
 
 ARG GITHUB_URL=https://github.com
 ARG GRADLE_8
diff --git a/ci/images/Dockerfile.node20 b/ci/images/Dockerfile.node20
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/nodejs:20.19.2@sha256:740a6b6d3e255ac3ef069b138c011dd68d18ebef441e63d1131db93d15dae0ce AS base
+FROM registry.suse.com/bci/nodejs:20.19.2@sha256:c241078b252b10ae59bb2f86b866531d92b633c46f8402691f4837a39de925a0 AS base
 
 ARG GITHUB_RAW_URL=https://raw.githubusercontent.com
 ARG GITHUB_URL=https://github.com
diff --git a/ci/images/Dockerfile.python311 b/ci/images/Dockerfile.python311
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/python:3.11.13@sha256:2002d6ac744e24f9c4e6bd717552f1e1843959fcd600d80608796b4c52244e78 AS base
+FROM registry.suse.com/bci/python:3.11.13@sha256:013705f6958086fd8e7a42b029803ebee2844306643f0fe53a9f5951d39cc92a AS base
 
 ARG GCC_VERSION=14
 ARG GITHUB_RAW_URL=https://raw.githubusercontent.com
diff --git a/ci/images/Dockerfile.python312 b/ci/images/Dockerfile.python312
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/python:3.12.11@sha256:445b377776adc14d2735be00ed3e4c62d46c3bf953a78311be265af40e53a534 AS base
+FROM registry.suse.com/bci/python:3.12.11@sha256:49af8e3acc999cb70d0fc3b641477aec4a398978fb2c42a98a9a60cad2eba452 AS base
 
 ARG GCC_VERSION=14
 ARG GITHUB_RAW_URL=https://raw.githubusercontent.com
diff --git a/ci/images/Dockerfile.python313 b/ci/images/Dockerfile.python313
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/python:3.13.7@sha256:3ea28beb8093f7763cc46eef8f731296a0885674dac820645a328b7b4d51afa0 AS base
+FROM registry.suse.com/bci/python:3.13.7@sha256:a9d44c317d881821a0239c1dd965705315b625c2a3baa559c8bb4484c49c4e43 AS base
 
 ARG GCC_VERSION=14
 ARG GITHUB_RAW_URL=https://raw.githubusercontent.com
diff --git a/ci/images/Dockerfile.python36 b/ci/images/Dockerfile.python36
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/python:3.6.15@sha256:b7d5c08f4ac6ceceb8905aa2da712fe224b4a02ef80eae6ced818b52b57f76f6 AS base
+FROM registry.suse.com/bci/python:3.6.15@sha256:74ef60601fdbd18bda19fcb41b7105d863ad005a0e76cd93e83fd25ae9ae2de7 AS base
 
 ARG GCC_VERSION=14
 ARG GITHUB_RAW_URL=https://raw.githubusercontent.com
diff --git a/ci/images/Dockerfile.ruby25 b/ci/images/Dockerfile.ruby25
@@ -1,5 +1,5 @@
 # Base-image
-FROM registry.suse.com/bci/ruby:2.5@sha256:f562f00aa56bfdf6b47c7e99623b4e303a7f616e73d4177e9abf84089b312443 AS base
+FROM registry.suse.com/bci/ruby:2.5@sha256:3af20f832b437ece09e5e887401631684d21ee35698798b6e2cdcc8fd9b4d5d4 AS base
 
 ARG ATOM_RUBY_VERSION=3.4.5
 ARG NODEJS_DIST_URL
diff --git a/ci/images/alpine/Dockerfile.python313 b/ci/images/alpine/Dockerfile.python313
@@ -0,0 +1,89 @@
+# Base-image
+FROM python:3.13-alpine3.22@sha256:e5fa639e49b85986c4481e28faa2564b45aa8021413f31026c3856e5911618b1 AS base
+
+ARG ALPINE_REPO
+ARG NODEJS_DIST_URL
+ARG NPM_REPO
+ARG PIP_CONFIG
+
+ENV PATH=${PATH}:/usr/local/bin
+
+RUN set -e; \
+    if [ -n "$ALPINE_REPO" ]; then \
+      sed -i "s|https://dl-cdn.alpinelinux.org|$ALPINE_REPO|g" /etc/apk/repositories; \
+    fi; \
+    if [ -n "$NODEJS_DIST_URL" ]; then \
+      export "NVM_NODEJS_ORG_MIRROR=$NODEJS_DIST_URL"; \
+      printf "disturl=$NODEJS_DIST_URL\n" >> $HOME/.npmrc; \
+    fi; \
+    if [ -n "$NPM_REPO" ]; then \
+      export "COREPACK_NPM_REGISTRY=$NPM_REPO"; \
+      printf "registry=$NPM_REPO\n@jsr:registry=$NPM_REPO\n" >> $HOME/.npmrc; \
+    fi; \
+    if [ -n "$PIP_CONFIG" ]; then \
+      mkdir $HOME/.pip/; \
+      printf "$PIP_CONFIG" > $HOME/.pip/pip.conf; \
+    fi; \
+    apk update \
+ && apk add --no-cache \
+      nodejs \
+      npm \
+ && npm install -g corepack \
+ && python --version \
+ && python -m pip install \
+      --break-system-packages \
+      --no-cache-dir \
+      --target ${PYTHONPATH} \
+      --upgrade \
+        atom-tools \
+ && node -v \
+ && npm -v \
+ && rm -rf $HOME/.npmrc $HOME/.pip /var/cache/apk/* \
+ && if [ -n "$ALPINE_REPO" ]; then \
+      sed -i "s|$ALPINE_REPO|https://dl-cdn.alpinelinux.org|g" /etc/apk/repositories; \
+    fi
+
+
+
+# cdxgen-image
+FROM base AS cdxgen
+
+ENV CDXGEN_IN_CONTAINER=true \
+    NODE_COMPILE_CACHE="/opt/cdxgen-node-cache" \
+    PATH=${PATH}:/opt/cdxgen/node_modules/.bin
+
+COPY . /opt/cdxgen
+
+RUN set -e; \
+    if [ -n "$ALPINE_REPO" ]; then \
+      sed -i "s|https://dl-cdn.alpinelinux.org|$ALPINE_REPO|g" /etc/apk/repositories; \
+    fi; \
+    if [ -n "$NODEJS_DIST_URL" ]; then \
+      export "NVM_NODEJS_ORG_MIRROR=$NODEJS_DIST_URL"; \
+      printf "disturl=$NODEJS_DIST_URL\n" >> $HOME/.npmrc; \
+    fi; \
+    if [ -n "$NPM_REPO" ]; then \
+      export "COREPACK_NPM_REGISTRY=$NPM_REPO"; \
+      printf "registry=$NPM_REPO\n@jsr:registry=$NPM_REPO\n" >> $HOME/.npmrc; \
+    fi; \
+    if [ -n "$PIP_CONFIG" ]; then \
+      mkdir $HOME/.pip/; \
+      printf "$PIP_CONFIG" > $HOME/.pip/pip.conf; \
+    fi; \
+    cd /opt/cdxgen \
+ && corepack enable \
+ && corepack pnpm install:prod \
+ && corepack pnpm cache delete \
+ && npm uninstall -g corepack \
+ && apk del npm \
+ && mkdir -p ${NODE_COMPILE_CACHE} \
+ && node /opt/cdxgen/bin/cdxgen.js --help \
+ && rm -rf $HOME/.npmrc $HOME/.pip /root/.cache/node \
+ && chmod a-w -R /opt \
+ && if [ -n "$ALPINE_REPO" ]; then \
+      sed -i "s|$ALPINE_REPO|https://dl-cdn.alpinelinux.org|g" /etc/apk/repositories; \
+    fi
+
+WORKDIR /app
+
+ENTRYPOINT ["node", "/opt/cdxgen/bin/cdxgen.js"]
diff --git a/ci/images/debian/Dockerfile.dotnet8 b/ci/images/debian/Dockerfile.dotnet8
@@ -1,5 +1,5 @@
 # Base-image
-FROM mcr.microsoft.com/dotnet/sdk:8.0.415@sha256:f2f0cb3af991eb6959c8a20551b0152f10cce61354c089dd863a7b72c0f00fea AS base
+FROM mcr.microsoft.com/dotnet/sdk:8.0.415@sha256:4632e98dc703311ca09d0c37170fe70ad4ba334bd88a841c78cbcc9d29994b2c AS base
 
 ARG DEBIAN_REPO
 ARG GITHUB_RAW_URL=https://raw.githubusercontent.com
diff --git a/ci/images/debian/Dockerfile.dotnet9 b/ci/images/debian/Dockerfile.dotnet9
@@ -1,5 +1,5 @@
 # Base-image
-FROM mcr.microsoft.com/dotnet/sdk:9.0.306@sha256:ca77338a19f87a7d24494a3656cb7d878a040c158621337b9cd3ab811c5eb057 AS base
+FROM mcr.microsoft.com/dotnet/sdk:9.0.306@sha256:81f6d622fe21ed9d31375167f62a3538ff4d6835f9d5e6da9c2defa8a84b7687 AS base
 
 ARG DEBIAN_REPO
 ARG GITHUB_RAW_URL=https://raw.githubusercontent.com
diff --git a/ci/images/debian/Dockerfile.php84 b/ci/images/debian/Dockerfile.php84
@@ -1,5 +1,5 @@
 # Base-image
-FROM php:8.4.14-bookworm@sha256:76284be4faf9c35ffcf97f690f2f7d706359c1bf2a7bbd238df1a70ea1a9da95 AS base
+FROM php:8.4.14-bookworm@sha256:eefa5a2f56499a037258469f9bbd0d959f0d74c222848ca3730a1132b86cab36 AS base
 
 ARG COMPOSER_URL=https://getcomposer.org
 ARG DEBIAN_REPO
diff --git a/ci/images/debian/Dockerfile.ruby34 b/ci/images/debian/Dockerfile.ruby34
@@ -1,5 +1,5 @@
 # Base-image
-FROM ruby:3.4.7-slim@sha256:c1734f5d0a502ece7f35658c30168fe85777e21531d7c800386f1514f5207ac8 AS base
+FROM ruby:3.4.7-slim@sha256:6ad3e90f473b88a0aa45c8cd00a99c896a7fab1c0814767d40c501028aafbeab AS base
 
 ARG DEBIAN_REPO
 ARG GITHUB_RAW_URL=https://raw.githubusercontent.com
diff --git a/ci/images/debian/Dockerfile.swift6 b/ci/images/debian/Dockerfile.swift6
@@ -1,5 +1,5 @@
 # Base-image
-FROM debian:12.12@sha256:26f2a7cab45014541c65f9d140ccfa6aaefbb49686c6759bea9c6f7f5bb3d72f AS base
+FROM debian:12.12@sha256:6337ad82d5c764a8b6a16cde86b157fdce353e36d8ca06fc1b16d4f34d29960e AS base
 
 ARG DEBIAN_REPO
 ARG GITHUB_RAW_URL=https://raw.githubusercontent.com
diff --git a/ci/images/opensuse/Dockerfile.rolling b/ci/images/opensuse/Dockerfile.rolling
@@ -1,5 +1,5 @@
 # Base-image
-FROM opensuse/tumbleweed:latest@sha256:41eb1ded593aac4c6d0954276ef9ce6b75a574c671b3a2322c7a2fb047f54bf3 AS base
+FROM opensuse/tumbleweed:latest@sha256:7272a708ee245cc28546bf45767b690176a0fc88fe02b3364d8bdb449c5067bf AS base
 
 ARG DOTNET_SDK_VERSION=9.0.305
 ARG DOTNETCLI_URL=https://dotnetcli.azureedge.net
diff --git a/lib/helpers/utils.poku.js b/lib/helpers/utils.poku.js
@@ -2095,7 +2095,7 @@ it("get crates metadata", async () => {
     homepage: { url: "https://github.com/iqlusioninc/abscissa/" },
     properties: [
       { name: "cdx:cargo:crate_id", value: "207912" },
-      { name: "cdx:cargo:latest_version", value: "0.8.2" },
+      { name: "cdx:cargo:latest_version", value: "0.9.0" },
       {
         name: "cdx:cargo:features",
         value:
diff --git a/package.json b/package.json
@@ -123,7 +123,7 @@
     "@babel/template": "7.27.2",
     "@babel/traverse": "7.28.5",
     "@babel/types": "7.28.5",
-    "@biomejs/biome": "2.3.2",
+    "@biomejs/biome": "2.3.3",
     "@bufbuild/protobuf": "2.10.0",
     "@cyclonedx/cdxgen-plugins-bin": "1.7.0",
     "@cyclonedx/cdxgen-plugins-bin-darwin-amd64": "1.7.0",
@@ -167,7 +167,7 @@
     "escape-string-regexp": "5.0.0",
     "glob": "11.0.3",
     "global-agent": "3.0.0",
-    "got": "14.6.1",
+    "got": "14.6.2",
     "hosted-git-info": "9.0.2",
     "iconv-lite": "0.7.0",
     "ini": "6.0.0",
@@ -217,7 +217,7 @@
     "table": "6.9.0",
     "tar": "7.5.2",
     "treeverse": "3.0.0",
-    "type-fest": "5.1.0",
+    "type-fest": "5.2.0",
     "typescript": "5.9.3",
     "unique-filename": "5.0.0",
     "unique-slug": "6.0.0",
@@ -252,7 +252,7 @@
     "encoding": "0.1.13",
     "glob": "11.0.3",
     "global-agent": "3.0.0",
-    "got": "14.6.1",
+    "got": "14.6.2",
     "hosted-git-info": "9.0.2",
     "iconv-lite": "0.7.0",
     "json-stringify-nice": "1.1.4",
@@ -285,7 +285,7 @@
     "yoctocolors": "2.1.2"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.3.2",
+    "@biomejs/biome": "2.3.3",
     "poku": "3.0.2",
     "quibble": "0.9.2",
     "sinon": "21.0.0",
@@ -335,7 +335,7 @@
       "@babel/template": "7.27.2",
       "@babel/traverse": "7.28.5",
       "@babel/types": "7.28.5",
-      "@biomejs/biome": "2.3.2",
+      "@biomejs/biome": "2.3.3",
       "@bufbuild/protobuf": "2.10.0",
       "@cyclonedx/cdxgen-plugins-bin": "1.7.0",
       "@cyclonedx/cdxgen-plugins-bin-darwin-amd64": "1.7.0",
@@ -379,7 +379,7 @@
       "escape-string-regexp": "5.0.0",
       "glob": "11.0.3",
       "global-agent": "3.0.0",
-      "got": "14.6.1",
+      "got": "14.6.2",
       "hosted-git-info": "9.0.2",
       "iconv-lite": "0.7.0",
       "ini": "6.0.0",
@@ -430,7 +430,7 @@
       "tar": "7.5.2",
       "tar-fs": "3.1.1",
       "treeverse": "3.0.0",
-      "type-fest": "5.1.0",
+      "type-fest": "5.2.0",
       "typescript": "5.9.3",
       "unique-filename": "5.0.0",
       "unique-slug": "6.0.0",
@@ -452,7 +452,7 @@
     "runtime": [
       {
         "name": "node",
-        "version": "24.10.0",
+        "version": ">=24",
         "onFail": "ignore"
       },
       {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/renovate.json b/renovate.json

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`# renovate: datasource=node-version depName=node`
`2`		`-24.10.0`
	`2`	`+24.11.0`
Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`# renovate: datasource=node-version depName=node`
`2`		`-25.0.0`
	`2`	`+25.1.0`
Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`	`1`	`{`
`2`		`- "$schema": "https://biomejs.dev/schemas/2.3.2/schema.json",`
	`2`	`+ "$schema": "https://biomejs.dev/schemas/2.3.3/schema.json",`
`3`	`3`	`"assist": {`
`4`	`4`	`"actions": {`
`5`	`5`	`"source": {`