Releases: oss-review-toolkit/ort
Releases · oss-review-toolkit/ort
22.6.0
What's Changed
Bug Fixes 🐞
- 99f6c97 scripts: Export variables in
docker_build.sh
again
New Features 🎉
- 230beec evaluated-model: Re-filter scan summary by VCS path
- c7edb85 osv: Enable querying vulnerabilities for the SwiftURL ecosystem
Chores 🔧
- 5f31ec6 common-utils: Consistently use "()" in test names for functions
- 5f034b4 docker: Do not run
pip install pip ...
twice - e2f71f0 docker: Update Poetry to the latest version
- 2bfa41f docker: Update pip to the latest version
- b1d557b docker: Update pyenv to the latest version
- 042ded5 docker: Upgrate Python to the latest 3.11.x version
- 69f8c6e model: Drop some unnecessary sorting
Dependency Updates 🚀
- b6044b0 Dockerfile: Ensure to use the latest
dockerfile-x
syntax - 1113161 spdx-utils: Update the SPDX license list version to 3.24.0
- d293a19 Update CycloneDX to version 9.0.2
- 22aee3e update dependency com.autonomousapps.dependency-analysis to v1.32.0
- a97d099 update dependency org.apache.commons:commons-compress to v1.26.2
- 8d77eaf update dependency us.springett:cvss-calculator to v1.4.3
- db8c595 update maven to v3.9.7
Documentation 📖
- 740b7d6 model: Use the new SCANOSS API endpoint also in
reference.yml
Refactorings 🚜
- f19867c clearly-defined: Get enum serial names more efficiently
- 7b10a04 clearly-defined: Get enums for serial names directly
- 11baaeb common-utils: Prefer a symbolic name for the charset
- 4fb504e common-utils: Use
forAll
in tests to simplify code - 2693bba docker: Swap two
RUN
statements inpythonbuild
- 4342001 evaluated-model: Factor out some mapping to a function
- f6fa2cb evaluated-model: Inline
actualScanResult
- d8fb1d0 model: Do not use
SortedSet
fordependencies
- 0dba9c9 model: Serialize dependency graph edges in sorted order
- 64f7aae model: Turn a function parameter type into a
Set
- 76f8121 model: Use a more generic name for
SortedSetConverters
- 4c2db37 model: Use sets instead of lists for DependencyGraphEdge
- d22d659 utils: Slightly re-write a function
- 41b450b Remove some unnecessary uses of sorted sets
Tests ✅
22.5.0
What's Changed
Bug Fixes 🐞
- 2bfeec1 fossid-webapp: Count snippets when enforcing the snippet limit
- f55ce56 reporter: Prevent
null
in snippet report template - d42863c spdx-utils: List correct choices in an exception message
New Features 🎉
- 84aa5b0 scripting: Make the
logger
available by default - 869bf65 static-html: Make the descriptions of issues more compact
Build 🐘 & CI ⚙️
- 6ae4429 github: Use a non-deprecated value to configure CodeQL tools
Chores 🔧
- ae6fc78 docker: Update CocoaPods to the latest version
- 808b005 docker: Update NodeJS to the current version
- 1636ddc docker: Update Pipenv to the latest version
- b8026ba docker: Update sbt to the latest version
- c0977c5 docker: Upgrade Bower to the latest version
- ba9541a spdx-utils: Slightly simplify code via
isSubExpression()
Dependency Updates 🚀
- 8bc7f88 update dependency com.github.ajalt.mordant:mordant to v2.6.0
- 10d9b6e update dependency org.asciidoctor:asciidoctorj to v2.5.13
- ce2e767 update dependency org.springframework:spring-core to v5.3.36
- 8e2817f update dependency org.wiremock:wiremock to v3.6.0
- f0d81ea update kotlin monorepo to v2
Documentation 📖
- 55c2003 spdx-utils: Add a missing comma in a code comment
- 64d8b4f spdx-utils: Use "an" instead of "a" before "Spdx"
- 599dbc2 Add OpossumUI to the list of related tools
- c78e8ed Add the ORT Server to the list of related tools
Refactorings 🚜
- 8451714 script: Migrate from deprecated
constructorArgs
to properties
Tests ✅
22.4.0
What's Changed
Bug Fixes 🐞
- 4bd380b analyzer: Serialize
sharedPackages
ordered by theirid
- b051095 model: Fix-up filtering excluded issues
- e074893 model: Serialize project's scope names in alphabetical order
New Features 🎉
- 9bf11d3 clients/osv: Align model with latest OSV schema version 1.6.3
- a765916 gradle: Also make distribution archives reproducible
- fc60edc gradle: Configure signing of distribution archives
Build 🐘 & CI ⚙️
- 6f4735e github: Make signing properties available to the distribution
- 37ec96b github: Sign releases and upload them along with their signatures
Chores 🔧
- 833dac3 downloader: Map directly to a set instead of converting a list
- 268a2b4 gradle: Sort a list of options alphabetically
Dependency Updates 🚀
- 723299a Update the native-gradle-plugin to version 0.10.2
- 8181666 update dependency io.mockk:mockk to v1.13.11
- c57ded4 update dependency org.springframework:spring-core to v5.3.35
- 62f008b update jetbrains/qodana-action action to v2024.1.5
Documentation 📖
- 19dfc01 README: Update CII links to OpenSSF
Tests ✅
22.3.0
What's Changed
Bug Fixes 🐞
- 2b19f91 asciidoc: Handle vulnerability URLs with special characters
- 1d8e089 bundler: Make parsing of dependency output more robust
- 7916730 evaluator: Do not add default rules unless they exist
- b793e22 fossid-webapp: List snippets concurrently
- 0b56a4e helper-cli: Fix broken reading of scan results by identifier
- 559aafa node: Use a fallback name for (unpublished) project-packages
- 208d958 python: Support ZIP archives for source artifacts
- 1fc611f scanner: Mention the correct source code origins in an error
- 1f689aa scanoss: Update the official REST API URL
- f2018b7 spdx: Accept "additional-terms" as part of LicenseRef exceptions
- 587b594 web-app-template: Fixup issues / violations / vulnerabilities terms
New Features 🎉
- 124b984 cli: Add some coloring to output before program exit
- 10cef09 fossid-webapp: Add a new scanner property
snippetsLimit
- bee55e3 fossid-webapp: Add an issue when the snippet limit has been reached
- 9223e90 fossid-webapp: Enforce the snippets limit
- 6a53cc0 fossid-webapp: List snippets from FossID lazily
- 45bb867 static-html: Also show advisor issues in the project tables
- 71f1eb8 static-html: Re-design the project table
- 10a4ff9 static-html: Sort the concluded license expression
Build 🐘 & CI ⚙️
- c49fdf9 gradle: Use the dedicated
optIn
DSL for Kotlin compiler options - 6298797 github: Fix permissions to upload SARIF results
Chores 🔧
- 106ef01 NOTICE: Update the HERE Europe B.V. contribution year
- cea1df6 fossid-webapp: Align the configuration property names
- e764ff0 fossid-webapp: Extract the function
mapSnippetFindingsForFile
- c080db0 model: Do not serialize empty defects or vulnerabilities
- ca63a52 osv: Do not create empty advisor results
- a25da75 static-html: Remove the hover effect from the project tables
- 23b7b70 web-app-template: Trim a trailing space
Dependency Updates 🚀
- ee73c93 Update Kotlin to version 1.9.24
- ec0bfdc Update kotlinx-coroutines to version 1.8.1
- e1932ba update exposed to v0.50.1
- 76237c2 update jackson to v2.17.1
- 9b34a7b update jetbrains/qodana-action action to v2024.1.3
- 43131ad update jetbrains/qodana-action action to v2024.1.4
- a1ac10a update kotest to v5.9.0
- 2e5cbfc update ktor to v2.3.11
Documentation 📖
- c15c8b8 bundler: Correct a script reference
- a8787d3 spdx: Distinguish all "The name must not be blank" requirements
- 5d48b31 static-html: Drop an obsolete comment
- 8ed8e2b static-html: Fix-up the KDoc for
Row.issue
- ec016a4 static-html: Re-align the KDocs for the summary tables
Refactorings 🚜
- ff2780e bundler: Inline a script variable
- ae16d01 docker: Define tool versions only once
- d4c16a5 static-html: Drop
ort-
prefix fromclass
attribute names - 2cbe474 static-html: Extract
getProjectTable()
- 3332c90 static-html: Extract a variable for the effective license
- 5ec427a static-html: Factor out
Row.isExcluded()
- b8b0fe3 static-html: Factor out
Scope.isExcluded()
- 62295cb static-html: Improve the naming of
TablesReport
properties - ccdc852 static-html: Inline a variable
- 6fee2c3 static-html: Inline a variable
- b5f42f7 static-html: Inline another variable
- 69e5491 static-html: Introduce
ProjectTable.Scope
- 685bf39 static-html: Make
ProjectTable.projectDependencies
aList
- d28923f static-html: Make constructing
allIds
a one-liner - e8360e6 static-html: Make the
ProjectTable
self-contained - e984471 static-html: Move `containsUnresolved()´ out of the model
- a47efba static-html: Pass the project table to
projectRow()
- ddd4497 static-html: Re-arrange the CSS file
- 3ac0573 static-html: Reduce nesting of model classes
- 106e553 static-html: Remove some unnecessary specialization
- 387303f static-html: Rename the model and mapper to
TablesReport*
- c0471df static-html: Shorten a variable name
- 2a30b5c static-html: Simplify getting scanner issues
- 62b6318 static-html: Simplify the sorting of the project table rows
- 31c30dc static-html: Style the report label at the top via ID
- 3ebfaff static-html: Use a more speaking name for
ort-report-labels
- e547afa static-html: Use a more speaking name for
pkg
- e8a563a static-html: Use a shorter name for
DependencyRow
- 22a86a1 static-html: Use a shorter name for
IssueRow
- 801b3ad static-html: Use a shorter name for
ReportTableModel
- edff378 static-html: Use better names for issues and violations
- 358049e static-html: Use more speaking names for two top level tables
- dbc1de6 statichtml: Make
getScopesForDependencies()
OrtResult-aware
Tests ✅
- 894895d bundler: Add a test for a GitHub dependency
- f804dd0 osv: Update expected results
- 1b99133 8d760c4 osv: Update expected results
- cdb317d pub: Update expected results
- c99fe7b pub: Update expected results
- 60aa728 python: Update expected results
Other Changes 💡
- ac7614a style(Gradle): Fix alphabetical sorting of paths
22.2.0
What's Changed
Bug Fixes 🐞
- 4dd1612 cargo: Treat projects outside the analyzer root as packages
- c3c6325 evaluated-model: Fix inconsistency with path exclude serialization
- addff4e github: Forward
GRADLE_OPTS
to Docker for unified diffs in funTests - 456167b reporter: Fix-up determining the worst severity
- e7d781f subversion: Make the peg revision newer than the operative revision
- f8540b2 subversion: Return the actual revision instead of the requested one
New Features 🎉
- 50a2428 github: Create issue templates
- bd76214 github: Mark new issues as 'to triage'
- c91f248 model: Add
OrtResult.isExcluded(Issue,Identifier)
- e64bcbd model: Add
isExcluded
toEvaluatedIssue
- 7887428 model: Add the param
omitExcluded
togetProjectsAndPackages()
- 6a84fa2 model: Handle excluded affected paths in
OrtResult.getIssues()
- 378795c reporters: Extend license statistics by effective license
- 237f3e2 static-html: Add an advisor issue summary table
- e844f82 static-html: Order issues by their severity
- 9c6b867 static-html: Re-design the summary of issues
- ba7c817 web-app-template: Add
is_excluded
toWebAppOrtIssue
- 4c334aa web-app-template: Add effective stats in models
- 7c74524 web-app-template: Make use of
WebAppIssue.isExcluded
Build 🐘 & CI ⚙️
- d300540 Gradle: Work on tasks instead of their providers to simplify code
- 0370fd6 github: Disable Gradle build scans for non-test jobs
- cfee6f1 github: Disable expensive tests for PR and
main
builds - f51b2a5 github: Do not build the web-app reporter separately anymore
- d3ddb4d github: Do not push Docker images for pull requests
- 12a9f4d github: Enable Qodana for PRs only
- 28c4178 github: Make host users and groups available in the container
- b9b43f7 github: Move the
workspace
mount closer to the-w
option - 1852c30 github: Remove the superfluous
--entrypoint
argument - 69bdfd9 github: Run Docker as the GitHub user to simplify code
- c5fcc9b github: Set an environment variable for Docker via the
-e
option
Chores 🔧
- 7ec5fa9 Gradle: Sort dependency tasks for really deterministic output
- 90f5f75 analyzer: Filter directly to a list
- 424b371 analyzer: Make it explicit that project paths are directories
- d7ae28e cargo: Do not even try to parse a null repository
- 34af1e8 cargo: Make a Git SHA1 Regex pattern a bit more strict
- 3d0510d docker: Upgrade Go to version 1.22.2
- 7a46ed5 downloader: Generalize VCS directory filtering in tests
- 8942c43 jenkins: Use the non-legacy
Dockerfile
- d6d5cea node: Make directory walking a bit more safe
- 25515fb reporter: Remove a redundant
toMap()
call - 2d3d710 sbt: Make it explicit that POMs are expected to be files
- 0e56143 subversion: Align test code for comparing files
- 1d129ce subversion: Set
isIgnoreExternals
only once - 9dfd352 vcs: Remove some redundant failure logging
- 16a8501 web-app-template: Alphabetically order functions
- d61323c web-app-template: Remove unused variable
- 168394b Remove the unused
Dockerfile-legacy
Dependency Updates 🚀
- 239db45 Update
maven-resolver
to version 1.9.20 - 044358a update dependency com.github.ajalt.clikt:clikt to v4.4.0
- 17d14cd update dependency org.jruby:jruby to v9.4.7.0
- 872ba5d update dependency org.semver4j:semver4j to v5.3.0
- 92d2be5 update exposed to v0.50.0
- 0cec7d6 update jetbrains/qodana-action action to v2024
Documentation 📖
- 8f945e9 evaluated-model: Fix a KDoc reference to
Excludes
- e098d42 evaluated-model: Fix a typo
- 328d0f2 spdx: Simplify a function's documentation
- c94ae6b static-html: Fix a typo
- 2c1d375 Add Double Open to the list of adopters
Performance Enhancements ⚡
- 04ff787 evaluator: Turn a list into a sequence to address an inspection hint
Refactorings 🚜
- b47b7ff Gradle: Avoid the use of
{all,sub}projects
altogether - 40b1e97 model: Expose sparate
getIssues()
for related ORT stages - 37c81f1 model: Factor out
filterIssues()
- 446f77c model: Inline two variables
- 9fea65a model: Simplify
getProjectsAndPackages()
- f6d808f reporter: Make a local function more specific
- c27f794 reporter: Rewrite
countLicenses()
to be more flexible - 5628538 static-html: Align on the term "rule violation"
- a313d42 static-html: Extract constant for the rule violation table ID
- b1de267 static-html: Move the
p
tag out ofissueDescription()
- 32b0b1b subversion: Unify code paths for (non-)numeric revisions
- 1eb0c8b web-app-template: Construct some
columns
arrays via push only - ff053f3 web-app-template: Swap two columns in summary views
- 2f57ea0 Migrate remaining
list(Files)
calls towalk
Tests ✅
- 1981a4e carthage: Fix the GitHub organization replacement
- 5724311 model: Improve a test case name
- 0577f85 model: Make use of an
EMPTY
constant in a couple of places - 002d238 reporters: Add analyzer issues to package references
- eec0fa7 reporters: Consistently make the severity explicit
- 34c7ee7 reporters: Extend test assets by further issues
- 3ba6e25 reporters: Fix-up an inconsistent scan issue
- bf3cb5e reports: Add a couple of advisor issues to reporter test assets
- eeeb5e3 scanner: Enable a Subversion test that works now
- 95b82fa static-html: Fixup an expected result
- fc68834 web-app-template: Add effective licenses
- 8fc715a web-app-template: Use orthw example
- ce47e72 Remove all but one
ExpensiveTag
Other Changes 💡
22.1.0
What's Changed
Bug Fixes 🐞
- 3d27d61 git: Properly configure
insteadOf
for submodules - bee7613 version-control-systems: Mark the
git
CLI command as a requirement
New Features 🎉
- 5b64b6c model: Allow configuring further PostgreSQL connection parameters
- 7a3732f requirements: Support categorizing objects from bundled plugins
Build 🐘 & CI ⚙️
- 2fcae57 github: Fix the number of CodeCov action calls after which to comment
- ce7d028 github: Stop using the deprecated
arguments
ofsetup-gradle
- 9ef10eb github: Trivially simplify the
always()
condition
Chores 🔧
- 47daa3f model: Add new PostgreSQL connection params to
reference.yml
- eb47587 model: Drop a TODO comment
- 3fc76e7 model: Remove an unused configuration parameter
Dependency Updates 🚀
- ba9803b Update the Maven resolver to version 1.9.19
- ac009c5 update dependency com.github.ajalt.mordant:mordant to v2.5.0
- c544784 update dependency org.wiremock:wiremock to v3.5.4
Documentation 📖
- b296744 website: Fix-up a package curation example
Refactorings 🚜
- d53ac0b DependencyHandler: Consume abstract but generate concrete types
- 3cfe66e version-control-systems: Extract
Git
'sCommandLineTool
Tests ✅
- 6a57057 model: Extract variables for rule violations
- a63e987 model: Fix-up two function names in test case names
- 62cf9cf model: Simplify several assertions via
shouldContainExactly()
- 1b00fae model: Split-up a test case into two
- 136d411 pub: Update expected results
- c091056 reporters: Add three scan issues to
reporter-test-input.yml
- 02b4129 static-html: Make a replace operation less invasive
Other Changes 💡
- 4e73f5a Revert "test(pub): Temporarily disable
PubFunTest
"
22.0.0
What's Changed
Breaking Changes 🛠
- 2db3890 refactor(model)!: Align severity filtering in
getRuleViolations()
Bug Fixes 🐞
- 6c84bba GenerateScopeExcludesCommand: Ensure that an input file is readable
- ac57032 docs: Add the correct
snippet_choices
element in the documentation - 70e15d1 jenkins: Consistenly delete output directories before running tools
- d95c996 jenkins: Quote path-related variables in more places
- 993e98a model: Ensure
getOpenIssues()
returns no duplicates - d39d163 reporter: Correct the how-to-fix element for snippet choices
- b344e09 web-app-template: Auto-resolve eslint issues
- 127968b web-app-template: Fix DOM invalid string error
- ed7fdbe web-app-template: Remove unneeded initial-scale
- 14c9d34 web-app-template: Resolve build warning
New Features 🎉
- e942b66 GenerateScopeExcludesCommand: Do not require the repo config to exist
- 72f0659 jenkins: Expose the report formats and their options as parameters
Build 🐘 & CI ⚙️
- c4c14f2 github: Migrate to the new Gradle actions
- 1237a37 web-app-template: Update Node and Yarn
- 0206c8f github: Add a composite action to free disk space
- edf431a github: Hard-code Ubuntu 22.04 for website deployment
- 3a073cf github: Remove the unused
ortdocker
action - 94ef009 github: Rewrite the Docker build job
- ded860a github: Run functional tests in up-to-date Docker container
- 675694d github: Set infinite fetch depth for
docker-build
Chores 🔧
- 50069be GenerateScopeExcludesCommand: Log the scopes at info level
- 9b97454 commands: Only show once where the results has been written to
- 60ccfdb docker: Replace
--file
with--output
for Syft - f27af07 evaluator: Improve echoing of rule violations
- 4a423b3 reuse: Align formatting of files in the
LICENSES
directory - b6484ef scripting: Leave measuring the duration to the caller
Dependency Updates 🚀
- 2612096 web-app-template: Migrate to Ant Design v5
- 5904758 web-app-template: Various version updates
- 3fd42b2 Update S3 to version 2.25.30
- fb1eecd update dependency ch.qos.logback:logback-classic to v1.5.5
- e337a5c update dependency ch.qos.logback:logback-classic to v1.5.6
- 948e6d6 update dependency dev.adamko.dokkatoo:dokkatoo-plugin to v2.3.1
- c8878bf update dependency org.slf4j:slf4j-api to v2.0.13
- 556310a update dependency org.springframework:spring-core to v5.3.34
- d168a93 update dependency org.wiremock:wiremock to v3.5.3
- db58406 update gradle/wrapper-validation-action action to v3
- 68dc6dd update graphqlplugin to v6.8.0
Documentation 📖
- bdecdaa README: Update copyright end year
- eaf648d commands: Improve the reporter's
--report-formats
description
Performance Enhancements ⚡
- 615ae0a GenerateScopeExcludesCommand: Deduplicate scopes into sets
Refactorings 🚜
- e49b7ec docker: Add ORT to the image at the end of the build
- 2848c22 model: Add
minSeverity
as param togetIssues()
- 2eb66c1 model: Add
omitExcluded
as parameter togetIssues()
- 41e88f1 model: Add
omitResolved
as param togetIssues()
- 3a097bb model: Inline a variable
- 69eb64c model: Simplify
getRuleViolations()
- cbd4e5a web-app-template: Use vite for builds
Tests ✅
- 6f3af0d model: Improve two test case names
- 06fde33 model: Postfix function names in test case names by
()
- dde0365 node: Add another test case for
parseNpmVcsInfo()
- ef22250 node: Consistently create JSON objects from strings
- 9b46c1e node: Format two JSON strings with
jq
- b4d70ad node: Make creating a JSON object more readable
- 2105523 node: Postfix function names in test case names with
()
- e69445a node: Simplify a test setup
- 0b0c108 osv: Update expected results
- fd086f1 python: Update expected results
- 9f04bfa python: Update expected test results
- f5f2b18 web-app-template: Add eslint config
Other Changes 💡
21.0.0
What's Changed
Breaking Changes 🛠
- 6c08226 refactor(model)!: Use a better name for
getIssues()
Bug Fixes 🐞
- adf14d4 cargo: Do not make assumptions about the package ID for hash lookups
- 7522a0c cargo: Do not make assumptions about the package ID for projects
- 0940053 cargo: Improve parsing of lockfile formats
- bef2e95 fossid-webapp: Remove unecessary call to
normalize
- f71f994 schemas: Add missing entries for package managers
New Features 🎉
- 9ef7945 cargo: Add the alternative
deps
to the metadata model - 4771b24 requirements: Add a dedicated version status for unknown versions
Build 🐘 & CI ⚙️
- c7d5c3a renovate: Extend from
config:recommended
Chores 🔧
- cf06ac9 cargo: Move two variables closer to where they are being used
- 303705c cargo: Reorder top-level functions
- e407d11 downloader: Remove the redundant
protected
enum qualifier - f54813e go: Drop the support for the Go dep package manager
- f0121b2 integrations: Re-generate shell completion scripts
- b9481f0 model: Replace a size check with
isNotEmpty()
- 9707529 requirements: Add "!" prefixes for identified problems
- 968f956 Sort
NOTICE
file entries alphabetically
Dependency Updates 🚀
- 65ed107 update dependency ch.qos.logback:logback-classic to v1.5.4
- 9cb8e7c update dependency com.autonomousapps.dependency-analysis to v1.31.0
- 87f2675 update dependency com.opentable.components:otj-pg-embedded to v1.0.3
- f1623e8 update dependency org.semver4j:semver4j to v5.2.3
- 6fca267 update ktor to v2.3.10
Documentation 📖
- c7ed840 cargo: Document
CargoMetadata
members - 67dda33 requirements: Document the
VersionStatus
enum members
Refactorings 🚜
- c1a0c66 cargo: Do not require parsing the manifest
- 5e701a8 cargo: Extract kind names to constants
- e6b84fa cargo: Get project authors and homepage from
projectPkg
- 887fcc2 cargo: Get the project's processed declared licenses directly
- 85c4523 cargo: Inline
processDeclaredLicenses()
- b815e65 cargo: Make fewer assumptions about internal package IDs
- acb18cb cargo: Move serializers to their respective model classes
- c7d24d9 cargo: Turn some functions into extensions for convenience
- 5818de3 go: Move
normalizeModuleVersion()
toGoMod.kt
- 2f8c7b5 model: Simplify filtering resolved issues
- 8b63ffe model: Simplify filtering resolved vulnerabilities
- 03bd194 model: Simplify resolving rule violations
Other Changes 💡
20.1.0
What's Changed
Bug Fixes 🐞
- b73f36b scancode: Filter out non-originary findings that are just references
- b1de439 scancode: Use SPDX expressions for file matches if present
New Features 🎉
- 85ef86a scancode: Support reading
matched_text
fields
Chores 🔧
- 858f29b gradle-plugin: End a log message with a dot for consistency
Dependency Updates 🚀
- 5d61699 Upgrade ScanCode to version 32.1.0
- edb6919 update dependency org.wiremock:wiremock to v3.5.0
- cf19739 update dependency org.wiremock:wiremock to v3.5.1
- 48ae816 update dependency org.wiremock:wiremock to v3.5.2
- 96c5e18 update graphqlplugin to v6.7.0
- 563d91c update retrofit to v2.11.0
- 0cc08fc update wagoid/commitlint-github-action action to v6
Refactorings 🚜
- 747187f Use Kotest's own
tempdir()
in tests
Tests ✅
20.0.0
What's Changed
Breaking Changes 🛠
- 7c0717f chore(model)!: Remove
findPathExcludes()
that is only used in tests
Bug Fixes 🐞
- e9b6d35 fossid: Map to the normalized license on success
- 4f32b50 gradle-plugin: Do not fail with NPE when dependency POMs are missing
- e2dbfc8 version: Add missing Bazel version
New Features 🎉
- 2577dd0 clients: Add Bazel module registry client
- 79f9da0 docker: Add Bazel to runtime image and env path
- d860271 package-manager: Add initial support for Bazel
Build 🐘 & CI ⚙️
- 3126b41 GitHub: Include Bazel in docker-ort workflow
Chores 🔧
- 4578371 fossid: Remove a redundant qualifier
- 5cca282 model: Remove a superfluous conversion via
let
- bb28def model: Remove the unused
transactionAsync()
function
Dependency Updates 🚀
- 0a48698 update dependency com.github.ajalt.clikt:clikt to v4.3.0
- ad24746 update dependency dev.adamko.dokkatoo:dokkatoo-plugin to v2.3.0
- 399665f update dependency gradle to v8.7
- 28f4ae6 update detektplugin to v1.23.6
- d8d70ce update exposed to v0.49.0
- 653f296 update jetbrains/qodana-action action to v2023.3.2
Documentation 📖
- e4af83c model: Explain why the
ConfigurationResolver
filters curations - ed75108 model: Improve
PathExclude
class documentation - 3bf3115 scanner: Add a missing import for
KnownProvenance
- c9c8f49 scanner: Fix scan storage references
Refactorings 🚜
- 9495d54 model: Make an
associateLicensesWithExceptions
overload public