## future-architect/vuls — v0.40.1…v0.41.0-rc.1

_17 commits._

### Features
- **feat(contrib/trivy): pass through Trivy's repository class to models.Package (#2662)** (cf2dbba)
- **feat(detector/vuls2): detect OpenSSH security advisories (#2636)** (386ec57)
- **feat(detector/vuls2): detect Apple security releases (#2635)** (cb6d2e3)
- **feat(scanner/windows): update windowsReleases through 2026-07 (#2630)** (86d476c)

### Fixes
- **fix(scanner): add missing separator between rpm -qf query format and paths in getOwnerPkgs (#2657)** (f0b1087)
- **perf(detector/vuls2): fold vuls2 detections from the streaming Detect (#2648)** (5dd453f)
- **fix(detector/vuls2): break CVSS merge score ties deterministically (#2649)** (6499d0e)
- **fix(models): map trivy-db julia, seal, and redhat-csaf-vex sources (#2646)** (e901c00)
- **fix(detector/vuls2): report NVD and VulnCheck CVSS per source, not whichever sorts first (#2621)** (b7691ee)

### Chore
- **chore(deps): bump the trivy group across 1 directory with 2 updates (#2640)** (8547d1a)
- **chore(deps): bump golang in the all group across 1 directory (#2624)** (94f7c31)
- **chore(deps): bump github.com/moby/buildkit (#2644)** (383e246)
- **chore(deps): bump the others group across 1 directory with 8 updates (#2641)** (03f1c5d)
- **chore(deps): bump the all group across 1 directory with 13 updates (#2625)** (8879b73)
- **chore(deps): bump vuls2 and vuls-data-update for fortinet cvrf RangeTypes (#2633)** (39f6cf1)
- **chore(deps): bump vuls-data-update to latest (#2626)** (95e4c7f)
- **ci(check-enums): include a remediation playbook in drift issues (#2627)** (63cf6b1)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/future-architect/vuls?utm_source=github-action)._