Skip to content

9.0.0
Compare
Choose a tag to compare
@github-actions github-actions released this 07 Dec 08:19
· 1786 commits to main since this release
9.0.0
b3c98bb

What's Changed

Breaking Changes 🛠

  • 247b046 refactor(scancode)!: Make parseScanResult(JsonElement) private

Bug Fixes 🐞

  • 374b4a0 command: Drop an obsolete scanner command option
  • ba66567 commands: Avoid a duplicate plural "s" in the summary sentence
  • 281a854 integrations: Re-generate shell completions
  • f16bf59 integrations: Re-generate shell completions
  • 849f987 node: Default to NPM if there is no indication for any Node manager
  • 8e1ec1d node: Do not crash on projects that do not set a version
  • f99e2ed node: Rewrite manager detection to solve issues
  • b6f6bc5 scancode: Fix the broken file paths in mapped timeout errors

Build 🐘 & CI ⚙️

  • a951533 github: Disable parallelization when publishing

Chores 🔧

  • a464678 Jenkinsfile: Remove the VULNERABLE_CODE_API_KEY parameter
  • bec02fd cli: Make properties come before functions and classes
  • 161acdd detekt: Remove an exception for an unused wildcard import
  • 7aac204 jenkins: Omit empty string default values
  • f9d1124 reporters: Improve log wording about the generated (temporary) file
  • ff9e1cf scancode: Make the internal timeout constant private
  • b3c98bb spdx: Give more context in require checks

Dependency Updates 🚀

  • 7fbd47f gradle-inspector: Again use current Gradle's tooling API version
  • e86a1b9 Update kotlinx-serialization to version 1.6.2
  • fd8fc8e update actions/setup-python action to v5
  • 5af7043 update dependency ch.qos.logback:logback-classic to v1.4.14
  • 99b0f86 update dependency com.autonomousapps.dependency-analysis to v1.27.0
  • 33be29a update dependency net.sf.saxon:saxon-he to v12.4
  • 36e8138 update dependency org.jetbrains.kotlinx:kotlinx-html-jvm to v0.10.1
  • 894a29e update dependency org.postgresql:postgresql to v42.7.1
  • 8c4879c update jetbrains/qodana-action action to v2023.2.9
  • f898d75 update jgit to v6.8.0.202311291450-r
  • bff2d01 update maven to v3.9.6

New Features 🎉

  • 53a8dd3 helper-cli: Add two patterns to path exclude generation
  • eb93dd5 jenkins: Allow to use a custom scanner from a plugin
  • 81b3130 jenkins: Show the active configuration to ease debugging
  • 521640b model: Add the property Issue.affectedPath
  • 5839604 model: Adhere to Issue.affectedPath when filtering a summary
  • 4d532d8 model: Enable Issue.affectedPath also for older scan results
  • 0033123 scancode: Relax precondition for mapping timeout issues
  • 27bc117 scancode: Set Issue.affectedPath for timeout errors

Other Changes 💡

  • 67297b2 config: Align on setting "skip excluded" in the config
  • e14dc23 scancode: Move toSummary() to ScanCodeResultModelMapper
  • da463b8 scancode: Move mapping of scan errors into toSummary()
  • d6f39ce scancode: Use a more generic name for ScanCodeErrorMappers

Tests ✅

  • f073323 conan: Update expected results
  • 69ab754 model: Add a test for ScanSummary.filterByPaths()
  • 91d07c2 scancode: Factor out getAssetFile()
  • 97c121e scancode: Include timeout errors in the assets for output formats
  • 51d7faf scancode: Remove some redundant variable definitions
  • 7cc5e49 scanner: Never read or write stored results for the "Dummy" scanner
  • d9b1f8d scanner: Simplify filtering files
  • 9b26515 scanner: Use NOASSERTION instead of NONE for dummy findings
  • 84d2f6d 46816a5 0a2ca2c cc92894 spm: Update expected results
  • 55e226f vulnerable-code: Also assert issues to be empty
  • 4bf0241 vulnerable-code: Always enable the test, even without an API key

Other Changes 💡

  • bd6d9ec Revert "chore(jenkins): Omit empty string default values"
  • 58f1155 style(vulnerable-code): Unwrap lines that do not need wrapping
Assets 4
Loading