Major Features:
- [Feature 168](https://github.com/google/osv-scanner/pull/168) Support for
scanning debian package status file, usually located in
`/var/lib/dpkg/status`. Thanks cmaritan
- [Feature 94](https://github.com/google/osv-scanner/pull/94) Specify what
parser should be used in `--lockfile`.
- [Feature 158](https://github.com/google/osv-scanner/pull/158) Specify
output format to use with the `--format` flag.
- [Feature 165](https://github.com/google/osv-scanner/pull/165) Respect
`.gitignore` files by default when scanning.
- [Feature 156](https://github.com/google/osv-scanner/pull/156) Support
markdown table output format. Thanks deftdawg
- [Feature 59](https://github.com/google/osv-scanner/pull/59) Support
`conan.lock` lockfiles and ecosystem Thanks SSE4
- Updated documentation! Check it out here:
https://google.github.io/osv-scanner/
Minor Updates:
- [Feature 178](https://github.com/google/osv-scanner/pull/178) Support SPDX
2.3.
- [Feature 221](https://github.com/google/osv-scanner/pull/221) Support
dependencyManagement section in Maven poms.
- [Feature 167](https://github.com/google/osv-scanner/pull/167) Make
osvscanner API library public.
- [Feature 141](https://github.com/google/osv-scanner/pull/141) Retry OSV API
calls to mitigate transient network issues. Thanks davift
- [Feature 220](https://github.com/google/osv-scanner/pull/220) Vulnerability
output is ordered deterministically.
- [Feature 179](https://github.com/google/osv-scanner/pull/179) Log number of
packages scanned from SBOM.
- General dependency updates
Fixes
- [Bug 161](https://github.com/google/osv-scanner/pull/161) Exit with non
zero exit code when there is a general error.
- [Bug 185](https://github.com/google/osv-scanner/pull/185) Properly omit
Source from JSON output.