Skip to content

Releases: oss-review-toolkit/ort

22.6.0

30 May 07:34
Compare
Choose a tag to compare

What's Changed

Bug Fixes 🐞

  • 99f6c97 scripts: Export variables in docker_build.sh again

New Features 🎉

  • 230beec evaluated-model: Re-filter scan summary by VCS path
  • c7edb85 osv: Enable querying vulnerabilities for the SwiftURL ecosystem

Chores 🔧

  • 5f31ec6 common-utils: Consistently use "()" in test names for functions
  • 5f034b4 docker: Do not run pip install pip ... twice
  • e2f71f0 docker: Update Poetry to the latest version
  • 2bfa41f docker: Update pip to the latest version
  • b1d557b docker: Update pyenv to the latest version
  • 042ded5 docker: Upgrate Python to the latest 3.11.x version
  • 69f8c6e model: Drop some unnecessary sorting

Dependency Updates 🚀

  • b6044b0 Dockerfile: Ensure to use the latest dockerfile-x syntax
  • 1113161 spdx-utils: Update the SPDX license list version to 3.24.0
  • d293a19 Update CycloneDX to version 9.0.2
  • 22aee3e update dependency com.autonomousapps.dependency-analysis to v1.32.0
  • a97d099 update dependency org.apache.commons:commons-compress to v1.26.2
  • 8d77eaf update dependency us.springett:cvss-calculator to v1.4.3
  • db8c595 update maven to v3.9.7

Documentation 📖

  • 740b7d6 model: Use the new SCANOSS API endpoint also in reference.yml

Refactorings 🚜

  • f19867c clearly-defined: Get enum serial names more efficiently
  • 7b10a04 clearly-defined: Get enums for serial names directly
  • 11baaeb common-utils: Prefer a symbolic name for the charset
  • 4fb504e common-utils: Use forAll in tests to simplify code
  • 2693bba docker: Swap two RUN statements in pythonbuild
  • 4342001 evaluated-model: Factor out some mapping to a function
  • f6fa2cb evaluated-model: Inline actualScanResult
  • d8fb1d0 model: Do not use SortedSet for dependencies
  • 0dba9c9 model: Serialize dependency graph edges in sorted order
  • 64f7aae model: Turn a function parameter type into a Set
  • 76f8121 model: Use a more generic name for SortedSetConverters
  • 4c2db37 model: Use sets instead of lists for DependencyGraphEdge
  • d22d659 utils: Slightly re-write a function
  • 41b450b Remove some unnecessary uses of sorted sets

Tests ✅

  • 1765a15 analyzer: Fix-up a broken assertion
  • 53752d5 common-utils: Extend the percentEncode test with decoding
  • eef3dac osv: Update expected results
  • 2d0d1e7 pub: Update expected results
  • ae9ede0 Re-serialize test assets

22.5.0

23 May 07:51
Compare
Choose a tag to compare

What's Changed

Bug Fixes 🐞

  • 2bfeec1 fossid-webapp: Count snippets when enforcing the snippet limit
  • f55ce56 reporter: Prevent null in snippet report template
  • d42863c spdx-utils: List correct choices in an exception message

New Features 🎉

  • 84aa5b0 scripting: Make the logger available by default
  • 869bf65 static-html: Make the descriptions of issues more compact

Build 🐘 & CI ⚙️

  • 6ae4429 github: Use a non-deprecated value to configure CodeQL tools

Chores 🔧

  • ae6fc78 docker: Update CocoaPods to the latest version
  • 808b005 docker: Update NodeJS to the current version
  • 1636ddc docker: Update Pipenv to the latest version
  • b8026ba docker: Update sbt to the latest version
  • c0977c5 docker: Upgrade Bower to the latest version
  • ba9541a spdx-utils: Slightly simplify code via isSubExpression()

Dependency Updates 🚀

  • 8bc7f88 update dependency com.github.ajalt.mordant:mordant to v2.6.0
  • 10d9b6e update dependency org.asciidoctor:asciidoctorj to v2.5.13
  • ce2e767 update dependency org.springframework:spring-core to v5.3.36
  • 8e2817f update dependency org.wiremock:wiremock to v3.6.0
  • f0d81ea update kotlin monorepo to v2

Documentation 📖

  • 55c2003 spdx-utils: Add a missing comma in a code comment
  • 64d8b4f spdx-utils: Use "an" instead of "a" before "Spdx"
  • 599dbc2 Add OpossumUI to the list of related tools
  • c78e8ed Add the ORT Server to the list of related tools

Refactorings 🚜

  • 8451714 script: Migrate from deprecated constructorArgs to properties

Tests ✅

  • a9b800e asciidoc: Use placeholders for the asciidoctor version
  • 823613c pub: Update expected results
  • 64bd622 spdx-utils: Add DNF / CNF tests for validChoices()

22.4.0

17 May 16:09
Compare
Choose a tag to compare

What's Changed

Bug Fixes 🐞

  • 4bd380b analyzer: Serialize sharedPackages ordered by their id
  • b051095 model: Fix-up filtering excluded issues
  • e074893 model: Serialize project's scope names in alphabetical order

New Features 🎉

  • 9bf11d3 clients/osv: Align model with latest OSV schema version 1.6.3
  • a765916 gradle: Also make distribution archives reproducible
  • fc60edc gradle: Configure signing of distribution archives

Build 🐘 & CI ⚙️

  • 6f4735e github: Make signing properties available to the distribution
  • 37ec96b github: Sign releases and upload them along with their signatures

Chores 🔧

  • 833dac3 downloader: Map directly to a set instead of converting a list
  • 268a2b4 gradle: Sort a list of options alphabetically

Dependency Updates 🚀

  • 723299a Update the native-gradle-plugin to version 0.10.2
  • 8181666 update dependency io.mockk:mockk to v1.13.11
  • c57ded4 update dependency org.springframework:spring-core to v5.3.35
  • 62f008b update jetbrains/qodana-action action to v2024.1.5

Documentation 📖

  • 19dfc01 README: Update CII links to OpenSSF

Tests ✅

  • 066413b Align test assets with recent changes in advisor result model
  • 889f474 Re-serialize a couple of test assets

22.3.0

16 May 07:42
Compare
Choose a tag to compare

What's Changed

Bug Fixes 🐞

  • 2b19f91 asciidoc: Handle vulnerability URLs with special characters
  • 1d8e089 bundler: Make parsing of dependency output more robust
  • 7916730 evaluator: Do not add default rules unless they exist
  • b793e22 fossid-webapp: List snippets concurrently
  • 0b56a4e helper-cli: Fix broken reading of scan results by identifier
  • 559aafa node: Use a fallback name for (unpublished) project-packages
  • 208d958 python: Support ZIP archives for source artifacts
  • 1fc611f scanner: Mention the correct source code origins in an error
  • 1f689aa scanoss: Update the official REST API URL
  • f2018b7 spdx: Accept "additional-terms" as part of LicenseRef exceptions
  • 587b594 web-app-template: Fixup issues / violations / vulnerabilities terms

New Features 🎉

  • 124b984 cli: Add some coloring to output before program exit
  • 10cef09 fossid-webapp: Add a new scanner property snippetsLimit
  • bee55e3 fossid-webapp: Add an issue when the snippet limit has been reached
  • 9223e90 fossid-webapp: Enforce the snippets limit
  • 6a53cc0 fossid-webapp: List snippets from FossID lazily
  • 45bb867 static-html: Also show advisor issues in the project tables
  • 71f1eb8 static-html: Re-design the project table
  • 10a4ff9 static-html: Sort the concluded license expression

Build 🐘 & CI ⚙️

  • c49fdf9 gradle: Use the dedicated optIn DSL for Kotlin compiler options
  • 6298797 github: Fix permissions to upload SARIF results

Chores 🔧

  • 106ef01 NOTICE: Update the HERE Europe B.V. contribution year
  • cea1df6 fossid-webapp: Align the configuration property names
  • e764ff0 fossid-webapp: Extract the function mapSnippetFindingsForFile
  • c080db0 model: Do not serialize empty defects or vulnerabilities
  • ca63a52 osv: Do not create empty advisor results
  • a25da75 static-html: Remove the hover effect from the project tables
  • 23b7b70 web-app-template: Trim a trailing space

Dependency Updates 🚀

  • ee73c93 Update Kotlin to version 1.9.24
  • ec0bfdc Update kotlinx-coroutines to version 1.8.1
  • e1932ba update exposed to v0.50.1
  • 76237c2 update jackson to v2.17.1
  • 9b34a7b update jetbrains/qodana-action action to v2024.1.3
  • 43131ad update jetbrains/qodana-action action to v2024.1.4
  • a1ac10a update kotest to v5.9.0
  • 2e5cbfc update ktor to v2.3.11

Documentation 📖

  • c15c8b8 bundler: Correct a script reference
  • a8787d3 spdx: Distinguish all "The name must not be blank" requirements
  • 5d48b31 static-html: Drop an obsolete comment
  • 8ed8e2b static-html: Fix-up the KDoc for Row.issue
  • ec016a4 static-html: Re-align the KDocs for the summary tables

Refactorings 🚜

  • ff2780e bundler: Inline a script variable
  • ae16d01 docker: Define tool versions only once
  • d4c16a5 static-html: Drop ort- prefix from class attribute names
  • 2cbe474 static-html: Extract getProjectTable()
  • 3332c90 static-html: Extract a variable for the effective license
  • 5ec427a static-html: Factor out Row.isExcluded()
  • b8b0fe3 static-html: Factor out Scope.isExcluded()
  • 62295cb static-html: Improve the naming of TablesReport properties
  • ccdc852 static-html: Inline a variable
  • 6fee2c3 static-html: Inline a variable
  • b5f42f7 static-html: Inline another variable
  • 69e5491 static-html: Introduce ProjectTable.Scope
  • 685bf39 static-html: Make ProjectTable.projectDependencies a List
  • d28923f static-html: Make constructing allIds a one-liner
  • e8360e6 static-html: Make the ProjectTable self-contained
  • e984471 static-html: Move `containsUnresolved()´ out of the model
  • a47efba static-html: Pass the project table to projectRow()
  • ddd4497 static-html: Re-arrange the CSS file
  • 3ac0573 static-html: Reduce nesting of model classes
  • 106e553 static-html: Remove some unnecessary specialization
  • 387303f static-html: Rename the model and mapper to TablesReport*
  • c0471df static-html: Shorten a variable name
  • 2a30b5c static-html: Simplify getting scanner issues
  • 62b6318 static-html: Simplify the sorting of the project table rows
  • 31c30dc static-html: Style the report label at the top via ID
  • 3ebfaff static-html: Use a more speaking name for ort-report-labels
  • e547afa static-html: Use a more speaking name for pkg
  • e8a563a static-html: Use a shorter name for DependencyRow
  • 22a86a1 static-html: Use a shorter name for IssueRow
  • 801b3ad static-html: Use a shorter name for ReportTableModel
  • edff378 static-html: Use better names for issues and violations
  • 358049e static-html: Use more speaking names for two top level tables
  • dbc1de6 statichtml: Make getScopesForDependencies() OrtResult-aware

Tests ✅

  • 894895d bundler: Add a test for a GitHub dependency
  • f804dd0 osv: Update expected results
  • 1b99133 8d760c4 osv: Update expected results
  • cdb317d pub: Update expected results
  • c99fe7b pub: Update expected results
  • 60aa728 python: Update expected results

Other Changes 💡

  • ac7614a style(Gradle): Fix alphabetical sorting of paths

22.2.0

02 May 07:51
Compare
Choose a tag to compare

What's Changed

Bug Fixes 🐞

  • 4dd1612 cargo: Treat projects outside the analyzer root as packages
  • c3c6325 evaluated-model: Fix inconsistency with path exclude serialization
  • addff4e github: Forward GRADLE_OPTS to Docker for unified diffs in funTests
  • 456167b reporter: Fix-up determining the worst severity
  • e7d781f subversion: Make the peg revision newer than the operative revision
  • f8540b2 subversion: Return the actual revision instead of the requested one

New Features 🎉

  • 50a2428 github: Create issue templates
  • bd76214 github: Mark new issues as 'to triage'
  • c91f248 model: Add OrtResult.isExcluded(Issue,Identifier)
  • e64bcbd model: Add isExcluded to EvaluatedIssue
  • 7887428 model: Add the param omitExcluded to getProjectsAndPackages()
  • 6a84fa2 model: Handle excluded affected paths in OrtResult.getIssues()
  • 378795c reporters: Extend license statistics by effective license
  • 237f3e2 static-html: Add an advisor issue summary table
  • e844f82 static-html: Order issues by their severity
  • 9c6b867 static-html: Re-design the summary of issues
  • ba7c817 web-app-template: Add is_excluded to WebAppOrtIssue
  • 4c334aa web-app-template: Add effective stats in models
  • 7c74524 web-app-template: Make use of WebAppIssue.isExcluded

Build 🐘 & CI ⚙️

  • d300540 Gradle: Work on tasks instead of their providers to simplify code
  • 0370fd6 github: Disable Gradle build scans for non-test jobs
  • cfee6f1 github: Disable expensive tests for PR and main builds
  • f51b2a5 github: Do not build the web-app reporter separately anymore
  • d3ddb4d github: Do not push Docker images for pull requests
  • 12a9f4d github: Enable Qodana for PRs only
  • 28c4178 github: Make host users and groups available in the container
  • b9b43f7 github: Move the workspace mount closer to the -w option
  • 1852c30 github: Remove the superfluous --entrypoint argument
  • 69bdfd9 github: Run Docker as the GitHub user to simplify code
  • c5fcc9b github: Set an environment variable for Docker via the -e option

Chores 🔧

  • 7ec5fa9 Gradle: Sort dependency tasks for really deterministic output
  • 90f5f75 analyzer: Filter directly to a list
  • 424b371 analyzer: Make it explicit that project paths are directories
  • d7ae28e cargo: Do not even try to parse a null repository
  • 34af1e8 cargo: Make a Git SHA1 Regex pattern a bit more strict
  • 3d0510d docker: Upgrade Go to version 1.22.2
  • 7a46ed5 downloader: Generalize VCS directory filtering in tests
  • 8942c43 jenkins: Use the non-legacy Dockerfile
  • d6d5cea node: Make directory walking a bit more safe
  • 25515fb reporter: Remove a redundant toMap() call
  • 2d3d710 sbt: Make it explicit that POMs are expected to be files
  • 0e56143 subversion: Align test code for comparing files
  • 1d129ce subversion: Set isIgnoreExternals only once
  • 9dfd352 vcs: Remove some redundant failure logging
  • 16a8501 web-app-template: Alphabetically order functions
  • d61323c web-app-template: Remove unused variable
  • 168394b Remove the unused Dockerfile-legacy

Dependency Updates 🚀

  • 239db45 Update maven-resolver to version 1.9.20
  • 044358a update dependency com.github.ajalt.clikt:clikt to v4.4.0
  • 17d14cd update dependency org.jruby:jruby to v9.4.7.0
  • 872ba5d update dependency org.semver4j:semver4j to v5.3.0
  • 92d2be5 update exposed to v0.50.0
  • 0cec7d6 update jetbrains/qodana-action action to v2024

Documentation 📖

  • 8f945e9 evaluated-model: Fix a KDoc reference to Excludes
  • e098d42 evaluated-model: Fix a typo
  • 328d0f2 spdx: Simplify a function's documentation
  • c94ae6b static-html: Fix a typo
  • 2c1d375 Add Double Open to the list of adopters

Performance Enhancements ⚡

  • 04ff787 evaluator: Turn a list into a sequence to address an inspection hint

Refactorings 🚜

  • b47b7ff Gradle: Avoid the use of {all,sub}projects altogether
  • 40b1e97 model: Expose sparate getIssues() for related ORT stages
  • 37c81f1 model: Factor out filterIssues()
  • 446f77c model: Inline two variables
  • 9fea65a model: Simplify getProjectsAndPackages()
  • f6d808f reporter: Make a local function more specific
  • c27f794 reporter: Rewrite countLicenses() to be more flexible
  • 5628538 static-html: Align on the term "rule violation"
  • a313d42 static-html: Extract constant for the rule violation table ID
  • b1de267 static-html: Move the p tag out of issueDescription()
  • 32b0b1b subversion: Unify code paths for (non-)numeric revisions
  • 1eb0c8b web-app-template: Construct some columns arrays via push only
  • ff053f3 web-app-template: Swap two columns in summary views
  • 2f57ea0 Migrate remaining list(Files) calls to walk

Tests ✅

  • 1981a4e carthage: Fix the GitHub organization replacement
  • 5724311 model: Improve a test case name
  • 0577f85 model: Make use of an EMPTY constant in a couple of places
  • 002d238 reporters: Add analyzer issues to package references
  • eec0fa7 reporters: Consistently make the severity explicit
  • 34c7ee7 reporters: Extend test assets by further issues
  • 3ba6e25 reporters: Fix-up an inconsistent scan issue
  • bf3cb5e reports: Add a couple of advisor issues to reporter test assets
  • eeeb5e3 scanner: Enable a Subversion test that works now
  • 95b82fa static-html: Fixup an expected result
  • fc68834 web-app-template: Add effective licenses
  • 8fc715a web-app-template: Use orthw example
  • ce47e72 Remove all but one ExpensiveTag

Other Changes 💡

  • 974b002 Revert "helper-cli: Add command to delete entries from postgres scan storage"
  • efa25ba style(github): Align to use spaces inside variable interpolation

22.1.0

25 Apr 07:58
Compare
Choose a tag to compare

What's Changed

Bug Fixes 🐞

  • 3d27d61 git: Properly configure insteadOf for submodules
  • bee7613 version-control-systems: Mark the git CLI command as a requirement

New Features 🎉

  • 5b64b6c model: Allow configuring further PostgreSQL connection parameters
  • 7a3732f requirements: Support categorizing objects from bundled plugins

Build 🐘 & CI ⚙️

  • 2fcae57 github: Fix the number of CodeCov action calls after which to comment
  • ce7d028 github: Stop using the deprecated arguments of setup-gradle
  • 9ef10eb github: Trivially simplify the always() condition

Chores 🔧

  • 47daa3f model: Add new PostgreSQL connection params to reference.yml
  • eb47587 model: Drop a TODO comment
  • 3fc76e7 model: Remove an unused configuration parameter

Dependency Updates 🚀

  • ba9803b Update the Maven resolver to version 1.9.19
  • ac009c5 update dependency com.github.ajalt.mordant:mordant to v2.5.0
  • c544784 update dependency org.wiremock:wiremock to v3.5.4

Documentation 📖

  • b296744 website: Fix-up a package curation example

Refactorings 🚜

  • d53ac0b DependencyHandler: Consume abstract but generate concrete types
  • 3cfe66e version-control-systems: Extract Git's CommandLineTool

Tests ✅

  • 6a57057 model: Extract variables for rule violations
  • a63e987 model: Fix-up two function names in test case names
  • 62cf9cf model: Simplify several assertions via shouldContainExactly()
  • 1b00fae model: Split-up a test case into two
  • 136d411 pub: Update expected results
  • c091056 reporters: Add three scan issues to reporter-test-input.yml
  • 02b4129 static-html: Make a replace operation less invasive

Other Changes 💡

  • 4e73f5a Revert "test(pub): Temporarily disable PubFunTest"

22.0.0

18 Apr 07:44
Compare
Choose a tag to compare

What's Changed

Breaking Changes 🛠

  • 2db3890 refactor(model)!: Align severity filtering in getRuleViolations()

Bug Fixes 🐞

  • 6c84bba GenerateScopeExcludesCommand: Ensure that an input file is readable
  • ac57032 docs: Add the correct snippet_choices element in the documentation
  • 70e15d1 jenkins: Consistenly delete output directories before running tools
  • d95c996 jenkins: Quote path-related variables in more places
  • 993e98a model: Ensure getOpenIssues() returns no duplicates
  • d39d163 reporter: Correct the how-to-fix element for snippet choices
  • b344e09 web-app-template: Auto-resolve eslint issues
  • 127968b web-app-template: Fix DOM invalid string error
  • ed7fdbe web-app-template: Remove unneeded initial-scale
  • 14c9d34 web-app-template: Resolve build warning

New Features 🎉

  • e942b66 GenerateScopeExcludesCommand: Do not require the repo config to exist
  • 72f0659 jenkins: Expose the report formats and their options as parameters

Build 🐘 & CI ⚙️

  • c4c14f2 github: Migrate to the new Gradle actions
  • 1237a37 web-app-template: Update Node and Yarn
  • 0206c8f github: Add a composite action to free disk space
  • edf431a github: Hard-code Ubuntu 22.04 for website deployment
  • 3a073cf github: Remove the unused ortdocker action
  • 94ef009 github: Rewrite the Docker build job
  • ded860a github: Run functional tests in up-to-date Docker container
  • 675694d github: Set infinite fetch depth for docker-build

Chores 🔧

  • 50069be GenerateScopeExcludesCommand: Log the scopes at info level
  • 9b97454 commands: Only show once where the results has been written to
  • 60ccfdb docker: Replace --file with --output for Syft
  • f27af07 evaluator: Improve echoing of rule violations
  • 4a423b3 reuse: Align formatting of files in the LICENSES directory
  • b6484ef scripting: Leave measuring the duration to the caller

Dependency Updates 🚀

  • 2612096 web-app-template: Migrate to Ant Design v5
  • 5904758 web-app-template: Various version updates
  • 3fd42b2 Update S3 to version 2.25.30
  • fb1eecd update dependency ch.qos.logback:logback-classic to v1.5.5
  • e337a5c update dependency ch.qos.logback:logback-classic to v1.5.6
  • 948e6d6 update dependency dev.adamko.dokkatoo:dokkatoo-plugin to v2.3.1
  • c8878bf update dependency org.slf4j:slf4j-api to v2.0.13
  • 556310a update dependency org.springframework:spring-core to v5.3.34
  • d168a93 update dependency org.wiremock:wiremock to v3.5.3
  • db58406 update gradle/wrapper-validation-action action to v3
  • 68dc6dd update graphqlplugin to v6.8.0

Documentation 📖

  • bdecdaa README: Update copyright end year
  • eaf648d commands: Improve the reporter's --report-formats description

Performance Enhancements ⚡

  • 615ae0a GenerateScopeExcludesCommand: Deduplicate scopes into sets

Refactorings 🚜

  • e49b7ec docker: Add ORT to the image at the end of the build
  • 2848c22 model: Add minSeverity as param to getIssues()
  • 2eb66c1 model: Add omitExcluded as parameter to getIssues()
  • 41e88f1 model: Add omitResolved as param to getIssues()
  • 3a097bb model: Inline a variable
  • 69eb64c model: Simplify getRuleViolations()
  • cbd4e5a web-app-template: Use vite for builds

Tests ✅

  • 6f3af0d model: Improve two test case names
  • 06fde33 model: Postfix function names in test case names by ()
  • dde0365 node: Add another test case for parseNpmVcsInfo()
  • ef22250 node: Consistently create JSON objects from strings
  • 9b46c1e node: Format two JSON strings with jq
  • b4d70ad node: Make creating a JSON object more readable
  • 2105523 node: Postfix function names in test case names with ()
  • e69445a node: Simplify a test setup
  • 0b0c108 osv: Update expected results
  • fd086f1 python: Update expected results
  • 9f04bfa python: Update expected test results
  • f5f2b18 web-app-template: Add eslint config

Other Changes 💡

  • 7833ace style(web-app-template): Add an .editorconfig file
  • 63da5d8 style(web-app-template): Reformat JSON

21.0.0

11 Apr 07:38
Compare
Choose a tag to compare

What's Changed

Breaking Changes 🛠

  • 6c08226 refactor(model)!: Use a better name for getIssues()

Bug Fixes 🐞

  • adf14d4 cargo: Do not make assumptions about the package ID for hash lookups
  • 7522a0c cargo: Do not make assumptions about the package ID for projects
  • 0940053 cargo: Improve parsing of lockfile formats
  • bef2e95 fossid-webapp: Remove unecessary call to normalize
  • f71f994 schemas: Add missing entries for package managers

New Features 🎉

  • 9ef7945 cargo: Add the alternative deps to the metadata model
  • 4771b24 requirements: Add a dedicated version status for unknown versions

Build 🐘 & CI ⚙️

  • c7d5c3a renovate: Extend from config:recommended

Chores 🔧

  • cf06ac9 cargo: Move two variables closer to where they are being used
  • 303705c cargo: Reorder top-level functions
  • e407d11 downloader: Remove the redundant protected enum qualifier
  • f54813e go: Drop the support for the Go dep package manager
  • f0121b2 integrations: Re-generate shell completion scripts
  • b9481f0 model: Replace a size check with isNotEmpty()
  • 9707529 requirements: Add "!" prefixes for identified problems
  • 968f956 Sort NOTICE file entries alphabetically

Dependency Updates 🚀

  • 65ed107 update dependency ch.qos.logback:logback-classic to v1.5.4
  • 9cb8e7c update dependency com.autonomousapps.dependency-analysis to v1.31.0
  • 87f2675 update dependency com.opentable.components:otj-pg-embedded to v1.0.3
  • f1623e8 update dependency org.semver4j:semver4j to v5.2.3
  • 6fca267 update ktor to v2.3.10

Documentation 📖

  • c7ed840 cargo: Document CargoMetadata members
  • 67dda33 requirements: Document the VersionStatus enum members

Refactorings 🚜

  • c1a0c66 cargo: Do not require parsing the manifest
  • 5e701a8 cargo: Extract kind names to constants
  • e6b84fa cargo: Get project authors and homepage from projectPkg
  • 887fcc2 cargo: Get the project's processed declared licenses directly
  • 85c4523 cargo: Inline processDeclaredLicenses()
  • b815e65 cargo: Make fewer assumptions about internal package IDs
  • acb18cb cargo: Move serializers to their respective model classes
  • c7d24d9 cargo: Turn some functions into extensions for convenience
  • 5818de3 go: Move normalizeModuleVersion() to GoMod.kt
  • 2f8c7b5 model: Simplify filtering resolved issues
  • 8b63ffe model: Simplify filtering resolved vulnerabilities
  • 03bd194 model: Simplify resolving rule violations

Other Changes 💡

  • 3ce77c7 revert(docker): Revert "Revert Upgrade Go to version 1.22.0"
  • 1a10da7 style(Gradle): Adhere to const naming conventions
  • 3876ec7 style: Prefer equality checks over Elvis operator use

20.1.0

04 Apr 07:44
Compare
Choose a tag to compare

What's Changed

Bug Fixes 🐞

  • b73f36b scancode: Filter out non-originary findings that are just references
  • b1de439 scancode: Use SPDX expressions for file matches if present

New Features 🎉

  • 85ef86a scancode: Support reading matched_text fields

Chores 🔧

  • 858f29b gradle-plugin: End a log message with a dot for consistency

Dependency Updates 🚀

  • 5d61699 Upgrade ScanCode to version 32.1.0
  • edb6919 update dependency org.wiremock:wiremock to v3.5.0
  • cf19739 update dependency org.wiremock:wiremock to v3.5.1
  • 48ae816 update dependency org.wiremock:wiremock to v3.5.2
  • 96c5e18 update graphqlplugin to v6.7.0
  • 563d91c update retrofit to v2.11.0
  • 0cc08fc update wagoid/commitlint-github-action action to v6

Refactorings 🚜

  • 747187f Use Kotest's own tempdir() in tests

Tests ✅

  • 71d6375 python: Update expected test results
  • 3e929b6 scancode: Add a test for findings from other files

20.0.0

28 Mar 08:45
Compare
Choose a tag to compare

What's Changed

Breaking Changes 🛠

  • 7c0717f chore(model)!: Remove findPathExcludes() that is only used in tests

Bug Fixes 🐞

  • e9b6d35 fossid: Map to the normalized license on success
  • 4f32b50 gradle-plugin: Do not fail with NPE when dependency POMs are missing
  • e2dbfc8 version: Add missing Bazel version

New Features 🎉

  • 2577dd0 clients: Add Bazel module registry client
  • 79f9da0 docker: Add Bazel to runtime image and env path
  • d860271 package-manager: Add initial support for Bazel

Build 🐘 & CI ⚙️

  • 3126b41 GitHub: Include Bazel in docker-ort workflow

Chores 🔧

  • 4578371 fossid: Remove a redundant qualifier
  • 5cca282 model: Remove a superfluous conversion via let
  • bb28def model: Remove the unused transactionAsync() function

Dependency Updates 🚀

  • 0a48698 update dependency com.github.ajalt.clikt:clikt to v4.3.0
  • ad24746 update dependency dev.adamko.dokkatoo:dokkatoo-plugin to v2.3.0
  • 399665f update dependency gradle to v8.7
  • 28f4ae6 update detektplugin to v1.23.6
  • d8d70ce update exposed to v0.49.0
  • 653f296 update jetbrains/qodana-action action to v2023.3.2

Documentation 📖

  • e4af83c model: Explain why the ConfigurationResolver filters curations
  • ed75108 model: Improve PathExclude class documentation
  • 3bf3115 scanner: Add a missing import for KnownProvenance
  • c9c8f49 scanner: Fix scan storage references

Refactorings 🚜

  • 9495d54 model: Make an associateLicensesWithExceptions overload public