v1.10.0

Added Features

• Detect go main module from partial package builds [#3060 @wagoodman]
• Support traefik in linux/arm/v6, linux/riscv64 [#3038 #3077 @witchcraze]
• Catalog TiDB binary [#2763]
• Generate a Maven friendly CPE [#3042 #3045 @kzantow]

Bug Fixes

• Only match ldflag version if it matches the main module or targets main.version [#3062 @LaurentGoderre]
• python requirements.txt cataloger: allow dots in python package names [#3070 @Mikcl]
• SPDX output performance with many relationships [#3053 @kzantow]
• Order CPEs deterministically for SBOM reproducibility [#2967 #3085 @kzantow]
• Python packages: name normalization [#3064 #3069 @Mikcl]
• Syft report panics with the golang cataloger [#3037 #3043 @willmurphyscode]

Additional Changes

• add debug logging for errors reading RPM files [#3051 @kzantow]

(Full Changelog)