chore(deps): update module github.com/quay/claircore to v1.5.50

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/quay/claircore	v1.5.48 -> v1.5.50

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

quay/claircore (github.com/quay/claircore)

v1.5.50: Release

Compare Source

v1.5.50 - 2026-03-02

Nothing interesting happened this release.

v1.5.49

Compare Source

• sbom: add SPDX decoding support

  Details

  Claircore can now make use of SPDX documents it generates. The SPDX support is currently limited to claircore-generated documents.

• logging: claircore now uses log/slog

  Details

  If users were integrating with `zlog`, they should now instead configure the `log/slog` package's `Default.`

  For additional integration, see the toolkit/log package.

• sbom: add purls to SPDX documents

  Details

  When creating SPDX documents, claircore now generates purls.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/net	v0.50.0 -> v0.51.0

[lingyzhuang]

/lgtm

[red-hat-konflux]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: lingyzhuang, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[lingyzhuang]

/retest

[openshift-ci]

New changes are detected. LGTM label has been removed.

[openshift-ci]

New changes are detected. LGTM label has been removed.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[lingyzhuang]

/retest

[konflux-ci-qe-bot]

@red-hat-konflux[bot]: The following test has Failed, say /retest to rerun failed tests.

PipelineRun Name	Status	Rerun command	Build Log	Test Log
e2e-4.20-fh2tt	Failed	/retest	View Pipeline Log	View Test Logs

Inspecting Test Artifacts

To inspect your test artifacts, follow these steps:

1. Install ORAS (see the ORAS installation guide).
2. Download artifacts with the following commands:

mkdir -p oras-artifacts
cd oras-artifacts
oras pull quay.io/konflux-test-storage/rhtap-team/rhtap-cli:e2e-4.20-fh2tt

Test results analysis

<not enabled>

OCI Artifact Browser URL

<not enabled>