release: v0.59.0 [main]

[aqua-bot]

🤖 I have created a release beep boop

0.59.0 (2024-12-28)

Features

• add --distro flag to manually specify OS distribution for vulnerability scanning (#8070) (da17dc7)
• misconf: generate placeholders for random provider resources (#8051) (ffe24e1)
• nodejs: respect peer dependencies for dependency tree (#7989) (7389961)
• python: add support for poetry dev dependencies (#8152) (774e04d)
• python: add support for uv (#8080) (c4a4a5f)
• python: add support for uv dev and optional dependencies (#8134) (49c54b4)

Bug Fixes

• CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (#8088) (d7ac286)
• enable err-error and errorf rules from perfsprint linter (#7859) (156a2aa)
• flag: skip hidden flags for --generate-default-config command (#8046) (5e68bdc)
• handle BLOW_UNKNOWN error to download DBs (#8060) (51f2123)
• java: correctly overwrite version from depManagement if dependency uses project.* props (#8050) (9d9f80d)
• license: always trim leading and trailing spaces for licenses (#8095) (f5e4291)
• misconf: use log instead of fmt for logging (#8033) (07b2d7f)
• oracle: add architectures support for advisories (#4809) (90f1d8d)
• python: skip dev group's deps for poetry (#8106) (a034d26)
• redhat: correct rewriting of recommendations for the same vulnerability (#8063) (4202c4b)
• respect GITHUB_TOKEN to download artifacts from GHCR (#7580) (21b68e1)
• sbom: attach nested packages to Application (#8144) (735335f)
• sbom: fix wrong overwriting of applications obtained from different sbom files but having same app type (#8052) (fd07074)
• sbom: scan results of SBOMs generated from container images are missing layers (#7635) (f9fceb5)
• sbom: use root package for unknown dependencies (if exists) (#8104) (7558df7)
• Updated twitter icon (#7772) (2c41ac8)
• wasm module test (#8099) (2200f38)

Performance Improvements

• avoid heap allocation in applier findPackage (#7883) (9bd6ed7)

---

This PR was generated with Release Please. See documentation.