Skip to content

Releases: fosslight/fosslight

v1.6.3

21 May 05:03
030d3fb
Compare
Choose a tag to compare

Changes

  • Change Distribution Type Name @hyeinlee00 (#1038)
  • Fix broken images by reverting a jib migration @jongwooo (#1034)
  • Modify uploaded packaging file size from 4GB to 5GB @FOSSLight-dev (#1042)
  • Update CheckOSSName Button UI as disabled in DEP tab because it cannot be used in DEP tab @hyeinlee00 @Min-Kyungsun (#1042)
    • /api/v1/oss_report_bin
    • /api/v1/oss_report_dep
    • /api/v1/oss_report_src
    • /api/v1/oss_report_selfcheck

🐛 Hotfixes

  • Fix API (/api/v1/prj_bom_export) @hyeinlee00 (#1037)
  • Modify text notice file format @hyeinlee00 (#1027)
  • Bug fix/project/dep bulk edit btn @hyeinlee00 (#1025)
  • Admin check is fixed. Even if there is a warning message (excluding unconfirmed license), confirmation will proceed if admin check is checked @FOSSLight-dev (#1042)
  • Apply DEPENDENCIE and REF_OSS_NAME in mapper for component copy @FOSSLight-dev (#1042)
  • Change DEPENDENCIES Column data type as text in DB @FOSSLight-dev (#1042)
  • Project list was modified to check the open source vulnerability score in DEP tab @FOSSLight-dev (#1042)
  • Bug fix where loading open source from 3rd party SW has an error when license name has 'and', 'or' keyword @FOSSLight-dev (#1042)
  • Bug fix where a watcher with a changed division was not deleted from the project watcher list @FOSSLight-dev (#1042)
  • Bug fix where notice appended contents was not visible in the confirmed project @FOSSLight-dev (#1042)
  • Bug fix where list export result was different from the actual search result @FOSSLight-dev (#1042)
  • Bug fix where not show vulnerability list when clicking on the security vulnerability icon in the Identification tab @FOSSLight-dev (#1042)
  • Data sorting logic is fixed in OSS Table @FOSSLight-dev (#1042)
  • Add highcharts.js as source code for Statistics @FOSSLight-dev (#1042)
  • Bug fix where open source delete and merge is failed because of out of memory error @FOSSLight-dev (#1042)
  • Bug fix where detected license information was not applied @FOSSLight-dev (#1042)
  • Bug fix where SPDX export failed because 'exclude' data was included @FOSSLight-dev (#1042)
  • Bug fix where CycloneDX file is not generated due to empty dependency info @FOSSLight-dev (#1042)

v1.6.2

19 Dec 08:05
b9eec2f
Compare
Choose a tag to compare

Changes

🚀 Features

  • Help Message is added (Role of Creator & Reviewer, How to use FOSSLight) @FOSSLight-dev (#1020)

🐛 Hotfixes

  • Bug fix where removing empty space when uploading report file and loading data into oss table. @FOSSLight-dev (#1022)
  • Bug fix where modified comments are not saved in the security tab. @FOSSLight-dev (#1021)
  • In Self-check, null license is generated. @FOSSLight-dev (#1020)
  • Modify notice template css in Self-Check. @FOSSLight-dev (#1020)
  • Bug fix where the loaded list only shows up to 20 items and is no longer displayed in Project > Identification. @FOSSLight-dev (#1020)
  • Bug fix where warning message disappears when ID is clicked in BOM tab. @FOSSLight-dev (#1020)
  • Bug fix where remove duplicates of rows with the same oss name, version, license, and copyright in OSS Notice of self-check. @FOSSLight-dev (#1020)
  • Bug fix where clicking "confirm" button, a success pop up appears even if there is a warning message in bom tab. @FOSSLight-dev (#1020)
  • Bug fix where saving the oss table loaded in the 3rd party tab. @FOSSLight-dev (#1020)
  • Bug fix where a warning message is added to the license in case of a dual license when clicking Bulk Edit button. @FOSSLight-dev (#1020)
  • Bug fix where warning messages are displayed in duplicate in the oss table. @FOSSLight-dev (#1020)
  • Fix to prevent Korean language from being broken in PDF @MyunghyunNero (#1008)
  • Change CheckOSSName Button in DEP tab @hyeinlee00 (#1017)

v1.6.1

23 Nov 02:30
662dc00
Compare
Choose a tag to compare

🚀 Features

  • Added "Change" Button in Project List, 3rd party list @FOSSLight-dev (#1013)
  • In BOM tab, append all copyright when oss name and oss version is same. @FOSSLight-dev (#1011)
  • CycloneDX is now supported by FOSSLight Hub. You can select the form to be issued at the packaging stage and export the SBOM in project(identification). @FOSSLight-dev (#1009)
  • In OSS detail view, added OSS type row and info icon in OSS name row. When info icon is clicked, OSS information popup by version is displayed. @FOSSLight-dev (#1009)
  • In License detail view, added info icon in License name row. When info icon is clicked, help message is displayed. @FOSSLight-dev (#1009)
  • It is possible to delete several OSS at the same time for only admin. @FOSSLight-dev (#1009)
  • Added new api /api/v1/prj_not_applicable which is possible to check “N/A” in 3rd, src, bin tab. @FOSSLight-dev (#1009)
  • Add “Not the same as property” warning message in copyright column @FOSSLight-dev (#1009)
  • Project > Identification > The “DEP” tab has been added to upload the results of FOSSLight Dependency Scanner. @FOSSLight-dev (#987)
  • When selecting "admin check", it is possible to modify download location, homepage and copyright information. @FOSSLight-dev (#987)
  • The OSS report form has been updated to version 3.2. Please note that the "DEP" sheet has been added for the dependency analysis results, and the automatic selection form for the Operating System field and Category field within the Model Info sheet has also been updated with the latest information. @FOSSLight-dev (#987)
  • Add vulnerability search to OSS List @jiwon83 (#983)
  • Fix to show multiple notifications @parkmuhyeun (#937)
  • Combine comment into one when packaging confirm @MyunghyunNero (#984)
  • Added new API that can add a watcher in project, 3rd party, self-check. (/api/v1/prj_watcher_add, /api/v1/partner_watcher_add, /api/v1/selfcheck_watcher_add) @FOSSLight-dev (#986)
  • All OSS are included in the BOM when exported, regardless of the notification obligation. @FOSSLight-dev (#986)
  • A button to download the FOSSLight Report in yaml format has been added to “export” button. @FOSSLight-dev (#986)
  • The parameter whether to reset or not when uploading report in Project/Self-check is newly added. (/api/v1/oss_report_src, /api/v1/oss_report_bin, /api/v1/oss_report_selfcheck) @FOSSLight-dev (#986)
  • Add new popup to ask enter version of oss which has N/A version to ensure accurate vulnerability when clicking “request”. @FOSSLight-dev (#986)
  • When an open source with a different license for each version is saved to the system for the first time, a pop-up displays the detected license information for each saved version. @FOSSLight-dev (#986)
  • Sending email when reviewer is changed as other person. @FOSSLight-dev (#986)
  • Modify to do not have to press the search button @dener8 (#933)
  • Add stackoverflow pattern for check oss name @dener8 (#974)
  • OSS > add > new icon for newly added nicknames @Lightieey (#931)
  • Added watcher search box in Project List, 3rd Party List @Youngseo-Jeon0313 (#934)
  • Block unsupported file extensions in the packaging tab @MyunghyunNero (#917)
  • Add Attach Pdf to Email @MyunghyunNero (#760)

🐛 Hotfixes

  • Bug fix in Identification (CheckOSSName Button in DEP tab, first tab) @hyeinlee00 (#1010)
  • In self-check, OSS Notice cannot be generated when unconfirmed license is included in oss table. @FOSSLight-dev (#1009)
  • Bug fix where verify logic in packaging tab.@FOSSLight-dev (#1009)
  • Bug fix when using “admin check”, save checked oss list regardless of active page. @FOSSLight-dev (#1009)
  • Bug fix where displaying “fixed” in security column of project list even if remaining not fixed CVE ID. @FOSSLight-dev (#1009)
  • Modify pdf with error @MyunghyunNero (#1003)
  • Fix bugs related to Vulnerability when searching OSS List @Youngseo-Jeon0313 (#999)
  • Bug fix where displaying same SPDXElementID in spdx document. @FOSSLight-dev (#987)
  • Fix the logic to find user information by using email. @FOSSLight-dev (#986)
  • Change the condition of displaying the list in “check license”. @FOSSLight-dev (#986)
  • Do not send email when watcher is added in self check. @FOSSLight-dev (#986)
  • In Bin tab, If two or more same binary names are created and any one of them has an excluded item, it is excluded from the warning message ("The following binaries are written to the OSS report as excluded, but they are in the binary.txt. Make sure it is not included in the final firmware." ). @FOSSLight-dev (#986)
  • Display “delete” button of model information even if the project status is complete. @FOSSLight-dev (#986)
  • Bug fix where the license disappeared after executing “bulk edit”. @FOSSLight-dev (#986)
  • Bug fix were sending recalculated, discovered vulnerability email. @FOSSLight-dev (#986)
  • When uploading FOSSLight report, the copyright value is entered as value entered by user. @FOSSLight-dev (#986)
  • Before saving download location, homepage of oss table, remove html tag. @FOSSLight-dev (#986)
  • When clicking “Check OSS Name”, ignore values after the “?” in the link. @FOSSLight-dev (#986)
  • When project is copied, the comment of oss table is also copied. @FOSSLight-dev (#986)
  • Bug fix when changing the settings of User Setting > Default Search Conditions, the setting is applied well. @FOSSLight-dev (#986)
  • Bug fix when registering the comment via api, set user information properly. @FOSSLight-dev (#986)
  • Bug fix where user’s token is not working. @FOSSLight-dev (#986)
  • Even when the compressed file name is included in the path, the number of files can be counted. @FOSSLight-dev (#986)
  • Bug fix when saving self-check, division information is changed as null. @FOSSLight-dev (#986)
  • Bug fix where register license by using “Bulk registration” in License list. @FOSSLight-dev (#986)
  • Bug fix when download the spdx document, the license is printed as spdx format. @FOSSLight-dev (#986)
  • Fix to support searching by either CVE-ID or OSS Name in /api/v1/vuln… @KyuheonKim (#866)

🔧 Maintenance

  • Use early return pattern to avoid nested conditions @parkcoldroad (#920)
  • Seperate Build and Deploy-demo from publish workflow @hseungho (#963)
  • Fix the RUN script format of Dockerfile @hseungho (#971)
  • “There is no data to load” error message is added in report upload api when there is no row to load in FOSSLight report. @FOSSLight-dev (#986)
  • “[tab name] sheet name cannot be found” error message is added in report upload api when there is no sheet to load in FOSSLight report. @FOSSLight-dev (#986)
  • Display “Notice” screen before login screen. @FOSSLight-dev (#986)
  • Add “comment” field in Bulk Edit of Self-check. @FOSSLight-dev (#986)
  • Fetch base-check-commit-message.yml from .github @Gseungmin (#969)
  • Remove unused Slack notification step @che-so (#930)
  • Fix a typo of CoMail's getSndSeq comment @hseungho (#898)
  • Fix a typo at Url @brorica (#905)
  • Remove Unused Parameter 'binaryName' in Function @brorica (#921)
  • Change string concatenation method @jaehee329 (#859)

v1.6.0

28 Jul 05:32
ed53a52
Compare
Choose a tag to compare

🚀 Features

  • If project is loaded through "Load" feature in the SRC/BIN tab, the loaded project ID will be displayed in the comment field. @FOSSLight-dev
  • The comment field has been added to the OSS table of 3rd party @FOSSLight-dev
  • Display license with "Dual license: Select a license" warning message in Check License @FOSSLight-dev (#865)
  • Possible to download spdx report regardless of obligation @FOSSLight-dev (#862)
  • Possible to search by 3rd party id ,project id in Identification. @FOSSLight-dev (#862)
  • Add "new" security tab where possible to check the vulnerability information. @FOSSLight-dev (#849)
  • Add the API(/api/v1/export_selfcheck) that can download the result file exported from the Self-Check project @FOSSLight-dev (#845)
  • Add 3rd party description search @cookienc (#842)
  • Add files for DB migration @soimkim (#832)
  • Add a file to use mybatis migrations @soimkim (#831)
  • In 3rd party, "OSS Bulk Registration" is possible. @Min-Kyungsun (#820)
  • Add reset password feature @han-gyeong (#813)
  • Uploading/removing files works independently of clicking the "save" button in BIN(Android) @Min-Kyungsun (#804)
  • Binary Auto Identification @FOSSLight-dev (#797)
  • Fix bug with previously generated OSS notices @FOSSLight-dev (#795)
  • Self Check > Check validation when add/edit self-check project @Min-Kyungsun (#792)
  • Possible to check the recommended OSS Name even if the download location is not valid @Min-Kyungsun (#790)
  • When project identification is confirmed, the information of bom tab is updated based on DB. @Min-Kyungsun (#789)
  • License Bulk Registration @Gseungmin (#784)

🐛 Hotfixes

🔧 Maintenance

v1.5.0

23 Dec 05:01
Compare
Choose a tag to compare

🚀 Features

🐛 Hotfixes

🔧 Maintenance

  • Update 3rd party licenses @soimkim (#780)
  • Vulnerability > Change OSS Name matching method (improved accuracy) @FOSSLight-dev (#775)
  • Change the LDAP login failure log level to debug @Min-Kyungsun (#773)
  • chore: Configure Dependabot for GitHub Actions @jongwooo (#766)
  • LDAP > Modify the updated date to be displayed in user information when sending mail. @FOSSLight-dev (#765)
  • Display "Required oss name" warning message when oss name is "-" and license has source obligation. @FOSSLight-dev (#763)
  • Exclude deactivated OSS from analysis results @FOSSLight-dev (#758)
  • When sync oss, it is also possible to update only comment. @Min-Kyungsun (#756)
  • Display the latest oss information which has nickname or oss name of auto analysis result @Min-Kyungsun (#755)
  • When export the specific oss name of vulnerablity, append oss name to exported file name @Min-Kyungsun (#754)
  • Possible to select other version of oss even if the information is same in oss sync @Min-Kyungsun (#753)
  • Add defensive code in check oss name @Min-Kyungsun (#752)
  • Add code for Vulnerability Notification Score to code management (Code No. 750) @FOSSLight-dev (#746)
  • (Experimental) Add file extraction tag in Notice of Android @soimkim (#742)
  • When "Change OSS Name" button is clicked, internal logic has been modified and added. @Min-Kyungsun (#727)
  • Show projects regardless of permissions in the project list. @FOSSLight-dev (#739)
  • Separate messages of issue and pull request @jongwooo (#735)
  • Add the file name for apex in NOTICE @soimkim (#737)
  • Remove issue auto-close @soimkim (#734)
  • Fix link in registration mail OSS Name (version) @Min-Kyungsun (#731)
  • Add latest tag to docker image @jongwooo (#719)

v1.4.10

07 Oct 02:00
289975b
Compare
Choose a tag to compare

🚀 Features

🐛 Hotfixes

🔧 Maintenance

v1.4.9

12 Aug 06:03
283b486
Compare
Choose a tag to compare

🚀 Features

🐛 Hotfixes

🔧 Maintenance

  • In the basic information tab of the project, add an edit/save button in the additional information field. @Min-Kyungsun (#628)
  • When adding or copying project, remove view/edit button to additional information. @Min-Kyungsun (#629)

v1.4.8

05 Aug 13:52
cb43ec9
Compare
Choose a tag to compare

🚀 Features

🐛 Hotfixes

🔧 Maintenance

v1.4.7

29 Jul 15:08
aff2a4f
Compare
Choose a tag to compare

🐛 Hotfixes

🔧 Maintenance

  • Add priority to the status tooltip of the Project List @JIY0UNG (#602)
  • Increase the length of the name field @hataerin (#604)
  • Move to a cell what I double-click @Gseungmin (#580)
  • Add guide comment in Configuration @MoonDD99 (#600)
  • Change nickname input position of OSS List, License List when Add button is clicked @70825 (#589)
  • �Make it search even if space is included at the beginning and end of the �word in the OSS List @MiniVee (#591)
  • Fix comment in Self-check to remove newline @acisliver (#583)
  • XSS prevention with jstl @swa07016 (#588)
  • Show "Double click" when mouse hovers on project name @MyunghyunNero (#572)
  • Hide user email as per option @MiniVee (#593)

v1.4.6

22 Jul 09:47
2a77e95
Compare
Choose a tag to compare

Changes

🚀 Features

🔧 Maintenance

  • Reload tab to you're working on after checking OSS Name/License @FRESH-TUNA (#568)
  • Add a flag to use the license's internal url @soimkim (#587)