all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe76:a457
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 8024664b-f48d-44a4-a9ee-c277dc8ec7f5
        host_id: 0d3d02185f810c959252bd1d303ec55040bf5bb0b401cceef814c3a7
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe76:a457
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.105
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.100
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe76:a457
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job flake8 explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#32>'
      - '<Job flake8 explicit: None implied: None source: osism/release/.zuul.yaml@main#2>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: b3f1a3a5597044358e49146e18ddce8b
      build_refs:
      - branch: main
        change: '2454'
        change_message: "chore(deps): update anchore/syft docker tag to v1.42.4\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [anchore/syft](https://redirect.github.com/anchore/syft) | patch | `v1.42.1`
          \u2192 `v1.42.4` |\n\n---\n\n> [!WARNING]\n> Some dependencies could not
          be looked up. Check the [Dependency Dashboard](../issues/152) for more information.\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>anchore/syft (anchore/syft)</summary>\n\n###
          [`v1.42.4`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.4)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.42.3...v1.42.4)\n\n#####
          Bug Fixes\n\n- Similar Packages Should Be Aggregated \\[[#&#8203;1162](https://redirect.github.com/anchore/syft/issues/1162)]\n-
          Support arangodb binary recent version \\[[#&#8203;4571](https://redirect.github.com/anchore/syft/issues/4571)
          [#&#8203;4662](https://redirect.github.com/anchore/syft/pull/4662) [@&#8203;witchcraze](https://redirect.github.com/witchcraze)]\n-
          Support go binary various versions \\[[#&#8203;4687](https://redirect.github.com/anchore/syft/issues/4687)
          [#&#8203;4694](https://redirect.github.com/anchore/syft/pull/4694) [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n\n#####
          Additional Changes\n\n- update CPE dictionary index \\[[#&#8203;4745](https://redirect.github.com/anchore/syft/pull/4745)
          [@&#8203;anchore-oss-update-bot](https://redirect.github.com/anchore-oss-update-bot)]\n-
          update CPE dictionary index \\[[#&#8203;4726](https://redirect.github.com/anchore/syft/pull/4726)
          [@&#8203;anchore-oss-update-bot](https://redirect.github.com/anchore-oss-update-bot)]\n-
          Add a trust boundary section \\[[#&#8203;4716](https://redirect.github.com/anchore/syft/pull/4716)
          [@&#8203;joshbressers](https://redirect.github.com/joshbressers)]\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.3...v1.42.4)**\n\n###
          [`v1.42.3`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.3)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.42.2...v1.42.3)\n\n#####
          Bug Fixes\n\n- Missing secondary evidence for .NET dependency in ghcr.io/open-telemetry/demo:2.0.0-accounting
          image \\[[#&#8203;4652](https://redirect.github.com/anchore/syft/issues/4652)]\n\n#####
          Additional Changes\n\n- bump github.com/buger/jsonsparser to v1.1.2 \\[[#&#8203;4680](https://redirect.github.com/anchore/syft/pull/4680)
          [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n-
          centralize temp files and prefer streaming IO \\[[#&#8203;4668](https://redirect.github.com/anchore/syft/pull/4668)
          [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.2...v1.42.3)**\n\n###
          [`v1.42.2`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.2)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.42.1...v1.42.2)\n\n#####
          Bug Fixes\n\n- \\[BUG] Incorrect Maven PURL generation: `Automatic-Module-Name`
          should not be used as Maven groupId \\[[#&#8203;4611](https://redirect.github.com/anchore/syft/issues/4611)
          [#&#8203;4642](https://redirect.github.com/anchore/syft/pull/4642) [@&#8203;xnox](https://redirect.github.com/xnox)]\n-
          Checksum is 0 for spdx files \\[[#&#8203;2307](https://redirect.github.com/anchore/syft/issues/2307)
          [#&#8203;4620](https://redirect.github.com/anchore/syft/pull/4620) [@&#8203;ppalucha](https://redirect.github.com/ppalucha)]\n-
          Support grafana binary various versions \\[[#&#8203;4559](https://redirect.github.com/anchore/syft/issues/4559)
          [#&#8203;4635](https://redirect.github.com/anchore/syft/pull/4635) [@&#8203;witchcraze](https://redirect.github.com/witchcraze)]\n\n#####
          Additional Changes\n\n- migrate fixtures to testdata \\[[#&#8203;4651](https://redirect.github.com/anchore/syft/pull/4651)
          [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.1...v1.42.2)**\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/2454
        commit_id: 30d5064547f0579432461c963639449c6444bf70
        patchset: 30d5064547f0579432461c963639449c6444bf70
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      buildset: c62b6d2a27c843a383b7759ec8303376
      buildset_refs:
      - branch: main
        change: '2454'
        change_message: "chore(deps): update anchore/syft docker tag to v1.42.4\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [anchore/syft](https://redirect.github.com/anchore/syft) | patch | `v1.42.1`
          \u2192 `v1.42.4` |\n\n---\n\n> [!WARNING]\n> Some dependencies could not
          be looked up. Check the [Dependency Dashboard](../issues/152) for more information.\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>anchore/syft (anchore/syft)</summary>\n\n###
          [`v1.42.4`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.4)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.42.3...v1.42.4)\n\n#####
          Bug Fixes\n\n- Similar Packages Should Be Aggregated \\[[#&#8203;1162](https://redirect.github.com/anchore/syft/issues/1162)]\n-
          Support arangodb binary recent version \\[[#&#8203;4571](https://redirect.github.com/anchore/syft/issues/4571)
          [#&#8203;4662](https://redirect.github.com/anchore/syft/pull/4662) [@&#8203;witchcraze](https://redirect.github.com/witchcraze)]\n-
          Support go binary various versions \\[[#&#8203;4687](https://redirect.github.com/anchore/syft/issues/4687)
          [#&#8203;4694](https://redirect.github.com/anchore/syft/pull/4694) [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n\n#####
          Additional Changes\n\n- update CPE dictionary index \\[[#&#8203;4745](https://redirect.github.com/anchore/syft/pull/4745)
          [@&#8203;anchore-oss-update-bot](https://redirect.github.com/anchore-oss-update-bot)]\n-
          update CPE dictionary index \\[[#&#8203;4726](https://redirect.github.com/anchore/syft/pull/4726)
          [@&#8203;anchore-oss-update-bot](https://redirect.github.com/anchore-oss-update-bot)]\n-
          Add a trust boundary section \\[[#&#8203;4716](https://redirect.github.com/anchore/syft/pull/4716)
          [@&#8203;joshbressers](https://redirect.github.com/joshbressers)]\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.3...v1.42.4)**\n\n###
          [`v1.42.3`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.3)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.42.2...v1.42.3)\n\n#####
          Bug Fixes\n\n- Missing secondary evidence for .NET dependency in ghcr.io/open-telemetry/demo:2.0.0-accounting
          image \\[[#&#8203;4652](https://redirect.github.com/anchore/syft/issues/4652)]\n\n#####
          Additional Changes\n\n- bump github.com/buger/jsonsparser to v1.1.2 \\[[#&#8203;4680](https://redirect.github.com/anchore/syft/pull/4680)
          [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n-
          centralize temp files and prefer streaming IO \\[[#&#8203;4668](https://redirect.github.com/anchore/syft/pull/4668)
          [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.2...v1.42.3)**\n\n###
          [`v1.42.2`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.2)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.42.1...v1.42.2)\n\n#####
          Bug Fixes\n\n- \\[BUG] Incorrect Maven PURL generation: `Automatic-Module-Name`
          should not be used as Maven groupId \\[[#&#8203;4611](https://redirect.github.com/anchore/syft/issues/4611)
          [#&#8203;4642](https://redirect.github.com/anchore/syft/pull/4642) [@&#8203;xnox](https://redirect.github.com/xnox)]\n-
          Checksum is 0 for spdx files \\[[#&#8203;2307](https://redirect.github.com/anchore/syft/issues/2307)
          [#&#8203;4620](https://redirect.github.com/anchore/syft/pull/4620) [@&#8203;ppalucha](https://redirect.github.com/ppalucha)]\n-
          Support grafana binary various versions \\[[#&#8203;4559](https://redirect.github.com/anchore/syft/issues/4559)
          [#&#8203;4635](https://redirect.github.com/anchore/syft/pull/4635) [@&#8203;witchcraze](https://redirect.github.com/witchcraze)]\n\n#####
          Additional Changes\n\n- migrate fixtures to testdata \\[[#&#8203;4651](https://redirect.github.com/anchore/syft/pull/4651)
          [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.1...v1.42.2)**\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/2454
        commit_id: 30d5064547f0579432461c963639449c6444bf70
        patchset: 30d5064547f0579432461c963639449c6444bf70
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      change: '2454'
      change_message: "chore(deps): update anchore/syft docker tag to v1.42.4\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [anchore/syft](https://redirect.github.com/anchore/syft) | patch | `v1.42.1`
        \u2192 `v1.42.4` |\n\n---\n\n> [!WARNING]\n> Some dependencies could not be
        looked up. Check the [Dependency Dashboard](../issues/152) for more information.\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>anchore/syft (anchore/syft)</summary>\n\n###
        [`v1.42.4`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.4)\n\n[Compare
        Source](https://redirect.github.com/anchore/syft/compare/v1.42.3...v1.42.4)\n\n#####
        Bug Fixes\n\n- Similar Packages Should Be Aggregated \\[[#&#8203;1162](https://redirect.github.com/anchore/syft/issues/1162)]\n-
        Support arangodb binary recent version \\[[#&#8203;4571](https://redirect.github.com/anchore/syft/issues/4571)
        [#&#8203;4662](https://redirect.github.com/anchore/syft/pull/4662) [@&#8203;witchcraze](https://redirect.github.com/witchcraze)]\n-
        Support go binary various versions \\[[#&#8203;4687](https://redirect.github.com/anchore/syft/issues/4687)
        [#&#8203;4694](https://redirect.github.com/anchore/syft/pull/4694) [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n\n#####
        Additional Changes\n\n- update CPE dictionary index \\[[#&#8203;4745](https://redirect.github.com/anchore/syft/pull/4745)
        [@&#8203;anchore-oss-update-bot](https://redirect.github.com/anchore-oss-update-bot)]\n-
        update CPE dictionary index \\[[#&#8203;4726](https://redirect.github.com/anchore/syft/pull/4726)
        [@&#8203;anchore-oss-update-bot](https://redirect.github.com/anchore-oss-update-bot)]\n-
        Add a trust boundary section \\[[#&#8203;4716](https://redirect.github.com/anchore/syft/pull/4716)
        [@&#8203;joshbressers](https://redirect.github.com/joshbressers)]\n\n**[(Full
        Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.3...v1.42.4)**\n\n###
        [`v1.42.3`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.3)\n\n[Compare
        Source](https://redirect.github.com/anchore/syft/compare/v1.42.2...v1.42.3)\n\n#####
        Bug Fixes\n\n- Missing secondary evidence for .NET dependency in ghcr.io/open-telemetry/demo:2.0.0-accounting
        image \\[[#&#8203;4652](https://redirect.github.com/anchore/syft/issues/4652)]\n\n#####
        Additional Changes\n\n- bump github.com/buger/jsonsparser to v1.1.2 \\[[#&#8203;4680](https://redirect.github.com/anchore/syft/pull/4680)
        [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n-
        centralize temp files and prefer streaming IO \\[[#&#8203;4668](https://redirect.github.com/anchore/syft/pull/4668)
        [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n\n**[(Full
        Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.2...v1.42.3)**\n\n###
        [`v1.42.2`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.2)\n\n[Compare
        Source](https://redirect.github.com/anchore/syft/compare/v1.42.1...v1.42.2)\n\n#####
        Bug Fixes\n\n- \\[BUG] Incorrect Maven PURL generation: `Automatic-Module-Name`
        should not be used as Maven groupId \\[[#&#8203;4611](https://redirect.github.com/anchore/syft/issues/4611)
        [#&#8203;4642](https://redirect.github.com/anchore/syft/pull/4642) [@&#8203;xnox](https://redirect.github.com/xnox)]\n-
        Checksum is 0 for spdx files \\[[#&#8203;2307](https://redirect.github.com/anchore/syft/issues/2307)
        [#&#8203;4620](https://redirect.github.com/anchore/syft/pull/4620) [@&#8203;ppalucha](https://redirect.github.com/ppalucha)]\n-
        Support grafana binary various versions \\[[#&#8203;4559](https://redirect.github.com/anchore/syft/issues/4559)
        [#&#8203;4635](https://redirect.github.com/anchore/syft/pull/4635) [@&#8203;witchcraze](https://redirect.github.com/witchcraze)]\n\n#####
        Additional Changes\n\n- migrate fixtures to testdata \\[[#&#8203;4651](https://redirect.github.com/anchore/syft/pull/4651)
        [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n\n**[(Full Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.1...v1.42.2)**\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
        At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
        defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
        manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
        conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
        Close this PR and you won't be reminded about this update again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
      change_url: https://github.com/osism/release/pull/2454
      child_jobs: []
      commit_id: 30d5064547f0579432461c963639449c6444bf70
      event_id: 46137f20-3809-11f1-8f02-f0a2a196a086
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/b3f1a3a5597044358e49146e18ddce8b/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/b3f1a3a5597044358e49146e18ddce8b/work/logs
        result_data_file: /var/lib/zuul/builds/b3f1a3a5597044358e49146e18ddce8b/work/results.json
        src_root: /var/lib/zuul/builds/b3f1a3a5597044358e49146e18ddce8b/work/src
        work_root: /var/lib/zuul/builds/b3f1a3a5597044358e49146e18ddce8b/work
      include_vars: []
      items:
      - branch: main
        change: '2454'
        change_message: "chore(deps): update anchore/syft docker tag to v1.42.4\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [anchore/syft](https://redirect.github.com/anchore/syft) | patch | `v1.42.1`
          \u2192 `v1.42.4` |\n\n---\n\n> [!WARNING]\n> Some dependencies could not
          be looked up. Check the [Dependency Dashboard](../issues/152) for more information.\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>anchore/syft (anchore/syft)</summary>\n\n###
          [`v1.42.4`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.4)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.42.3...v1.42.4)\n\n#####
          Bug Fixes\n\n- Similar Packages Should Be Aggregated \\[[#&#8203;1162](https://redirect.github.com/anchore/syft/issues/1162)]\n-
          Support arangodb binary recent version \\[[#&#8203;4571](https://redirect.github.com/anchore/syft/issues/4571)
          [#&#8203;4662](https://redirect.github.com/anchore/syft/pull/4662) [@&#8203;witchcraze](https://redirect.github.com/witchcraze)]\n-
          Support go binary various versions \\[[#&#8203;4687](https://redirect.github.com/anchore/syft/issues/4687)
          [#&#8203;4694](https://redirect.github.com/anchore/syft/pull/4694) [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n\n#####
          Additional Changes\n\n- update CPE dictionary index \\[[#&#8203;4745](https://redirect.github.com/anchore/syft/pull/4745)
          [@&#8203;anchore-oss-update-bot](https://redirect.github.com/anchore-oss-update-bot)]\n-
          update CPE dictionary index \\[[#&#8203;4726](https://redirect.github.com/anchore/syft/pull/4726)
          [@&#8203;anchore-oss-update-bot](https://redirect.github.com/anchore-oss-update-bot)]\n-
          Add a trust boundary section \\[[#&#8203;4716](https://redirect.github.com/anchore/syft/pull/4716)
          [@&#8203;joshbressers](https://redirect.github.com/joshbressers)]\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.3...v1.42.4)**\n\n###
          [`v1.42.3`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.3)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.42.2...v1.42.3)\n\n#####
          Bug Fixes\n\n- Missing secondary evidence for .NET dependency in ghcr.io/open-telemetry/demo:2.0.0-accounting
          image \\[[#&#8203;4652](https://redirect.github.com/anchore/syft/issues/4652)]\n\n#####
          Additional Changes\n\n- bump github.com/buger/jsonsparser to v1.1.2 \\[[#&#8203;4680](https://redirect.github.com/anchore/syft/pull/4680)
          [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n-
          centralize temp files and prefer streaming IO \\[[#&#8203;4668](https://redirect.github.com/anchore/syft/pull/4668)
          [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.2...v1.42.3)**\n\n###
          [`v1.42.2`](https://redirect.github.com/anchore/syft/releases/tag/v1.42.2)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.42.1...v1.42.2)\n\n#####
          Bug Fixes\n\n- \\[BUG] Incorrect Maven PURL generation: `Automatic-Module-Name`
          should not be used as Maven groupId \\[[#&#8203;4611](https://redirect.github.com/anchore/syft/issues/4611)
          [#&#8203;4642](https://redirect.github.com/anchore/syft/pull/4642) [@&#8203;xnox](https://redirect.github.com/xnox)]\n-
          Checksum is 0 for spdx files \\[[#&#8203;2307](https://redirect.github.com/anchore/syft/issues/2307)
          [#&#8203;4620](https://redirect.github.com/anchore/syft/pull/4620) [@&#8203;ppalucha](https://redirect.github.com/ppalucha)]\n-
          Support grafana binary various versions \\[[#&#8203;4559](https://redirect.github.com/anchore/syft/issues/4559)
          [#&#8203;4635](https://redirect.github.com/anchore/syft/pull/4635) [@&#8203;witchcraze](https://redirect.github.com/witchcraze)]\n\n#####
          Additional Changes\n\n- migrate fixtures to testdata \\[[#&#8203;4651](https://redirect.github.com/anchore/syft/pull/4651)
          [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.42.1...v1.42.2)**\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/2454
        commit_id: 30d5064547f0579432461c963639449c6444bf70
        patchset: 30d5064547f0579432461c963639449c6444bf70
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
          src_dir: src/github.com/osism/release
        topic: null
      job: flake8
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 30d5064547f0579432461c963639449c6444bf70
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: a01eed06dffe368c1d01819193bfadccb137414d
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/flake8/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/release
        name: osism/release
        short_name: release
        src_dir: src/github.com/osism/release
      projects:
        github.com/osism/release:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          checkout: main
          checkout_description: zuul branch
          commit: 7afd4dbd16322e97468a5646b940c2a05956d3c9
          name: osism/release
          required: false
          short_name: release
          src_dir: src/github.com/osism/release
      ref: refs/pull/2454/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
