
Security
- sec: update go-git to 5.19.1
- sec: update x/text to 0.39.0
Features
- feat: optimise yr scanner flag and callback tracking
Refactors
- refactor: preallocate expire check stat
Build
- build: harden dockerfile
Docs
- doc: remove retired goreportcard
- doc: bump download release
Flag and callback handling with yara scanner c binding optimised for our use case. The larger the files are, the more this improvement shines.
File expire stats are now always preallocated, so that eliminates one op per file (after first one!).
Vulnerabilities affecting go-git as GO-2026-5336, GO-2026-5496 and GO-2026-5693 resolved
https://pkg.go.dev/vuln/GO-2026-5336
https://pkg.go.dev/vuln/GO-2026-5496
https://pkg.go.dev/vuln/GO-2026-5693
This project was unaffected by these third party vulnerabilities.
Further information is available at the GitHub release or project page.

