Tags: google/osv.dev
Tags
docs(blog): fix broken external link (#4133) This replaces the yuzu link in [Introducing broad C/C++ vulnerability management support](https://osv.dev/blog/posts/introducing-broad-c-c++-support/) with an archived version, since the original repository is no longer available. The example steps have also been updated to reflect the current flow verified locally. This should fix a `404` reported by the markdown-link-check action. There's still `429`/`403` issues but those can be fixed in a separate PR. --------- Co-authored-by: Rex P <106129829+another-rex@users.noreply.github.com> Co-authored-by: Xueqin Cui <72771658+cuixq@users.noreply.github.com>
fix(frontend): prevent pURL overflow in vulnerability details (#4105) Fixes a UI issue on the vulnerability details page, where extremely long pURLs would overflow outside their containers. This was spotted on [SUSE-SU-2025](https://osv.dev/vulnerability/SUSE-SU-2025:03333-1#:~:text=pkg%3Arpm/suse/avahi%26distro%3DSUSE%2520Linux%2520Enterprise%2520Module%2520for%2520Desktop%2520Applications%252015%2520SP6). The overflow also caused the layout to break completely on mobile displays, which should now be resolved.
fix: update go pubsub library to v2 (#4056) Re: #4018 (comment)
chore: bump osv library version to 0.1.2 for PyPI release (#4030) This PR bumps the osv library version to 0.1.2 for PyPI release to include the fix in osv-schema. Also updates the osv requirement in `gcp/functions/pypi/pyproject.toml` (version 0.1.0 is yanked). Co-authored-by: Rex P <106129829+another-rex@users.noreply.github.com>
chore: bump osv library version to 0.1.2 for PyPI release (#4030) This PR bumps the osv library version to 0.1.2 for PyPI release to include the fix in osv-schema. Also updates the osv requirement in `gcp/functions/pypi/pyproject.toml` (version 0.1.0 is yanked). Co-authored-by: Rex P <106129829+another-rex@users.noreply.github.com>
chore(deps): update osv/osv-schema digest to c3926b6 (#4015) This PR contains the following updates: | Package | Update | Change | |---|---|---| | osv/osv-schema | digest | `99dae29` -> `c3926b6` | --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv.dev). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45Ny4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjk3LjEwIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
fix(vulnfeeds): make logging a bit better (#3955) 1. Fix the `sourceLocation` log field so that it a) maps to the location where the logger helper function was called and b) only shows the filename, rather than the full path. 2. When not logging in GCP, make the logs ✨ colourful ✨ <img width="521" height="74" alt="image" src="https://github.com/user-attachments/assets/626925ee-ecc9-48bc-87d6-e0b0fa6dd7c5" />
PreviousNext