Rene Leonhardt

You're welcome! I would say it's your decision if you allow major updates or if you want to continue using outdated versions 😅

@m0j0mada Did you have time to check the latest release 1.5.0?

Great to see progress! I just wonder what good a toy repository would do to determine hard no-gos... Why not just fork grype in a personal account and bombard it...

In other news, is this to be expected on comment creation? https://github.com/anchore/grype/actions/runs/14929680895/job/41942473113#step:3:34 > jq: error (at :0): Cannot iterate over null (null)

Glad to hear, but what does it actually mean? 😅 Your dependencies are years old, for example `bincode` 2 requires MSRV 1.85 and `vergen-git2` 9 requires MSRV 1.86. edition 2024...

> I think that upgrading Rust to the latest stable version is almost always recommended. For apps like rathole yes, and for CI of course. Libraries like tokio may want...

Could 3.14 be added to CI too? It will be released on [2025-10-07](https://pythoninsider.blogspot.com/2025/09/python-3140rc3-is-go.html). Please note that pypy doesn't support 3.10 or older anymore. 7.3.16 was the last to support 3.9,...

Thank your for implementing my suggestions! CI isn't allowed to run in pull requests, could you trigger it manually to see if there are problems before merging?

That could be a problem, the last pull request has been merged over a year ago... You can try to run locally with [nektos/act](https://github.com/nektos/act), but remove macos and windows first.

MXFP4 is awesome, at least on text 😄 @Blaizzy Can you run workflows? They don't run automatically.