22.3.0

What's Changed

Bug Fixes 🐞

• 2b19f91 asciidoc: Handle vulnerability URLs with special characters
• 1d8e089 bundler: Make parsing of dependency output more robust
• 7916730 evaluator: Do not add default rules unless they exist
• b793e22 fossid-webapp: List snippets concurrently
• 0b56a4e helper-cli: Fix broken reading of scan results by identifier
• 559aafa node: Use a fallback name for (unpublished) project-packages
• 208d958 python: Support ZIP archives for source artifacts
• 1fc611f scanner: Mention the correct source code origins in an error
• 1f689aa scanoss: Update the official REST API URL
• f2018b7 spdx: Accept "additional-terms" as part of LicenseRef exceptions
• 587b594 web-app-template: Fixup issues / violations / vulnerabilities terms

New Features 🎉

• 124b984 cli: Add some coloring to output before program exit
• 10cef09 fossid-webapp: Add a new scanner property snippetsLimit
• bee55e3 fossid-webapp: Add an issue when the snippet limit has been reached
• 9223e90 fossid-webapp: Enforce the snippets limit
• 6a53cc0 fossid-webapp: List snippets from FossID lazily
• 45bb867 static-html: Also show advisor issues in the project tables
• 71f1eb8 static-html: Re-design the project table
• 10a4ff9 static-html: Sort the concluded license expression

Build 🐘 & CI ⚙️

• c49fdf9 gradle: Use the dedicated optIn DSL for Kotlin compiler options
• 6298797 github: Fix permissions to upload SARIF results

Chores 🔧

• 106ef01 NOTICE: Update the HERE Europe B.V. contribution year
• cea1df6 fossid-webapp: Align the configuration property names
• e764ff0 fossid-webapp: Extract the function mapSnippetFindingsForFile
• c080db0 model: Do not serialize empty defects or vulnerabilities
• ca63a52 osv: Do not create empty advisor results
• a25da75 static-html: Remove the hover effect from the project tables
• 23b7b70 web-app-template: Trim a trailing space

Dependency Updates 🚀

• ee73c93 Update Kotlin to version 1.9.24
• ec0bfdc Update kotlinx-coroutines to version 1.8.1
• e1932ba update exposed to v0.50.1
• 76237c2 update jackson to v2.17.1
• 9b34a7b update jetbrains/qodana-action action to v2024.1.3
• 43131ad update jetbrains/qodana-action action to v2024.1.4
• a1ac10a update kotest to v5.9.0
• 2e5cbfc update ktor to v2.3.11

Documentation 📖

• c15c8b8 bundler: Correct a script reference
• a8787d3 spdx: Distinguish all "The name must not be blank" requirements
• 5d48b31 static-html: Drop an obsolete comment
• 8ed8e2b static-html: Fix-up the KDoc for Row.issue
• ec016a4 static-html: Re-align the KDocs for the summary tables

Refactorings 🚜

• ff2780e bundler: Inline a script variable
• ae16d01 docker: Define tool versions only once
• d4c16a5 static-html: Drop ort- prefix from class attribute names
• 2cbe474 static-html: Extract getProjectTable()
• 3332c90 static-html: Extract a variable for the effective license
• 5ec427a static-html: Factor out Row.isExcluded()
• b8b0fe3 static-html: Factor out Scope.isExcluded()
• 62295cb static-html: Improve the naming of TablesReport properties
• ccdc852 static-html: Inline a variable
• 6fee2c3 static-html: Inline a variable
• b5f42f7 static-html: Inline another variable
• 69e5491 static-html: Introduce ProjectTable.Scope
• 685bf39 static-html: Make ProjectTable.projectDependencies a List
• d28923f static-html: Make constructing allIds a one-liner
• e8360e6 static-html: Make the ProjectTable self-contained
• e984471 static-html: Move `containsUnresolved()´ out of the model
• a47efba static-html: Pass the project table to projectRow()
• ddd4497 static-html: Re-arrange the CSS file
• 3ac0573 static-html: Reduce nesting of model classes
• 106e553 static-html: Remove some unnecessary specialization
• 387303f static-html: Rename the model and mapper to TablesReport*
• c0471df static-html: Shorten a variable name
• 2a30b5c static-html: Simplify getting scanner issues
• 62b6318 static-html: Simplify the sorting of the project table rows
• 31c30dc static-html: Style the report label at the top via ID
• 3ebfaff static-html: Use a more speaking name for ort-report-labels
• e547afa static-html: Use a more speaking name for pkg
• e8a563a static-html: Use a shorter name for DependencyRow
• 22a86a1 static-html: Use a shorter name for IssueRow
• 801b3ad static-html: Use a shorter name for ReportTableModel
• edff378 static-html: Use better names for issues and violations
• 358049e static-html: Use more speaking names for two top level tables
• dbc1de6 statichtml: Make getScopesForDependencies() OrtResult-aware

Tests ✅

• 894895d bundler: Add a test for a GitHub dependency
• f804dd0 osv: Update expected results
• 1b99133 8d760c4 osv: Update expected results
• cdb317d pub: Update expected results
• c99fe7b pub: Update expected results
• 60aa728 python: Update expected results

Other Changes 💡

• ac7614a style(Gradle): Fix alphabetical sorting of paths