Grype 0.121.0

What's new in 0.121.0

Added Features

• OS End of life warnings should account for SupportEnd date from the distro release information [Issue #3230] [PR #3787 @tomersein]
• Licensing: copyright owner missing, needed for Debian packaging [Issue #3501] [PR #3791 @wagoodman]

Bug Fixes

• fix(db-build) allow configuring sqlite cache size at db build time [PR #3814 @willmurphyscode]
• Carry AlmaLinux fix dates onto replaced RHEL matches [PR #3773 @wagoodman]
• carry fix availability through extended support fix merging [PR #3809 @bot190]
• upgrade to golang.org/x/net v0.61.0 [PR #3802 @westonsteimel]
• Swift Package Manager packages miss GitHub Swift advisories (searched by identity, not repository path) [Issue #3795] [PR #3713 @az-catch]

Additional Changes

• bump go-make module and action together [PR #3793 @wagoodman]

Dependencies
50 dependency changes (47 updated, 1 added, 2 removed). 5 vulnerabilities remediated.
🟢 Remediated (5)
- GO-2026-6603 (High) — golang.org/x/net
- GO-2026-6610 (High) — golang.org/x/net
- GO-2026-6611 (High) — golang.org/x/net
- GO-2026-6612 (Critical) — golang.org/x/net
- GO-2026-6617 (High) — golang.org/x/net
Updated (47 packages)
- cloud.google.com/go/auth v0.23.2 → v0.23.3
- cloud.google.com/go/compute/metadata v0.9.0 → v0.9.1
- cloud.google.com/go/storage v1.65.1 → v1.68.0
- github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.33.0 → v1.34.0
- github.com/anchore/syft v1.54.1 → v1.55.0
- github.com/aws/aws-sdk-go-v2 v1.44.0 → v1.47.1
- github.com/aws/aws-sdk-go-v2/config v1.32.40 → v1.33.6
- github.com/aws/aws-sdk-go-v2/credentials v1.19.39 → v1.20.6
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.40 → v1.20.1
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.40 → v1.5.4
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.40 → v2.8.4
- github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.41 → v1.5.4
- github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.10.0 → v1.11.5
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.40 → v1.14.4
- github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.41 → v1.20.4
- github.com/aws/aws-sdk-go-v2/service/s3 v1.108.0 → v1.114.0
- github.com/aws/aws-sdk-go-v2/service/signin v1.6.0 → v1.10.1
- github.com/aws/aws-sdk-go-v2/service/sso v1.34.0 → v1.38.1
- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.39.0 → v1.43.1
- github.com/aws/aws-sdk-go-v2/service/sts v1.46.0 → v1.51.1
- github.com/github/go-spdx/v2 v2.7.0 → v2.7.1 …

Full release notes »