SCA: Fix versioned depends, cover pkg-config and ld.so, and enable them by default - #2634

Draft

xnox wants to merge 8 commits into

chainguard-dev:mainfrom

xnox:so-ver-depends-opt-in

Commits on Sep 5, 2026

SCA: Add a test showing that so-ver: depends lose their constraint

xnox
and
claude
committed
dc64440
SCA: Preserve the version constraint on so-ver: depends

xnox
and
claude
committed
1c1049e
SCA: Allow packages to opt in to versioned shlib depends

xnox
and
claude
committed
0aebbfa
SCA: Fix inverted check for a versioned shlib "provides:"

xnox
and
claude
committed
bee1454
ci: Build jq with versioned shlib depends in the wolfi presubmit

xnox
and
claude
committed
9c62984
SCA: Version-depend on the dynamic linker like any other shlib

xnox
and
claude
committed
5c3f69c
SCA: Generate versioned "depends:" for pkg-config packages too

xnox
and
claude
committed
b3f8166

Commits on Sep 7, 2026

SCA: Generate versioned "depends:" by default, with a per-package opt out

xnox
and
claude
committed
dccba3f