Update lockfile patterns in analyzer and diff_driver for additional formats

Author: andrew

README.md

@@ -431,8 +431,6 @@ git-pkgs uses [ecosystems-bibliothecary](https://github.com/ecosyste-ms/biblioth
 
 Actions, BentoML, Bower, Cargo, Carthage, Clojars, CocoaPods, Cog, Conda, CPAN, CRAN, Docker, Dub, DVC, Elm, Go, Hackage, Haxelib, Hex, Homebrew, Julia, Maven, Meteor, MLflow, npm, NuGet, Ollama, Packagist, Pub, PyPI, RubyGems, Shards, SwiftPM, Vcpkg
 
-SBOM formats (CycloneDX, SPDX) are not supported as they duplicate information from the actual lockfiles.
-
 ## Contributing
 
 Bug reports, feature requests, and pull requests are welcome. If you're unsure about a change, open an issue first to discuss it.

lib/git/pkgs/analyzer.rb

@@ -13,27 +13,27 @@ class Analyzer
         Gemfile Gemfile.lock gems.rb gems.locked *.gemspec
         package.json package-lock.json yarn.lock npm-shrinkwrap.json pnpm-lock.yaml bun.lock npm-ls.json
         setup.py req*.txt req*.pip requirements/*.txt requirements/*.pip requirements.frozen
-        Pipfile Pipfile.lock pyproject.toml poetry.lock uv.lock pylock.toml
+        Pipfile Pipfile.lock pyproject.toml poetry.lock uv.lock pylock.toml pdm.lock
         pip-resolved-dependencies.txt pip-dependency-graph.json
-        pom.xml ivy.xml build.gradle build.gradle.kts gradle-dependencies-q.txt
+        pom.xml ivy.xml build.gradle build.gradle.kts gradle-dependencies-q.txt gradle.lockfile verification-metadata.xml
         maven-resolved-dependencies.txt sbt-update-full.txt maven-dependency-tree.txt maven-dependency-tree.dot
         Cargo.toml Cargo.lock
         go.mod go.sum glide.yaml glide.lock Godeps Godeps/Godeps.json
         vendor/manifest vendor/vendor.json Gopkg.toml Gopkg.lock go-resolved-dependencies.json
         composer.json composer.lock
         Podfile Podfile.lock *.podspec *.podspec.json
         packages.config packages.lock.json Project.json Project.lock.json
-        *.nuspec paket.lock *.csproj project.assets.json
+        *.nuspec paket.lock *.csproj project.assets.json *.deps.json
         bower.json bentofile.yaml
         META.json META.yml
         environment.yml environment.yaml
-        cog.yaml versions.json MLmodel DESCRIPTION
+        cog.yaml versions.json MLmodel DESCRIPTION renv.lock
         pubspec.yaml pubspec.lock
         dub.json dub.sdl
         REQUIRE
         shard.yml shard.lock
         elm-package.json elm_dependencies.json elm-stuff/exact-dependencies.json
-        haxelib.json
+        haxelib.json stack.yaml stack.yaml.lock
         action.yml action.yaml .github/workflows/*.yml .github/workflows/*.yaml
         Dockerfile docker-compose*.yml docker-compose*.yaml
         dvc.yaml vcpkg.json

lib/git/pkgs/commands/diff_driver.rb

@@ -24,18 +24,23 @@ class DiffDriver
           gems.locked
           glide.lock
           go.sum
+          gradle.lockfile
           mix.lock
           npm-shrinkwrap.json
           package-lock.json
           packages.lock.json
           paket.lock
+          pdm.lock
           pnpm-lock.yaml
           poetry.lock
           project.assets.json
           pubspec.lock
           pylock.toml
+          renv.lock
           shard.lock
+          stack.yaml.lock
           uv.lock
+          verification-metadata.xml
           yarn.lock
         ].freeze