Skip to content

Releases: advanced-security/maven-dependency-submission-action

v4.0.3

29 Apr 10:25
Compare
Choose a tag to compare
  • Updating the build process and tooling for Node 20 support in the CLI executables which were introduced when the dependency-submission-toolkit transitioned in to an ESM module

  • Fixes #69 #61

v4.0.2

05 Mar 16:35
Compare
Choose a tag to compare
chore: Updating release files

v4.0.1

15 Feb 16:43
Compare
Choose a tag to compare
  • Updating branding for the marketplace
  • Utilizing rollup to build cli executables as the ESM module for the dependency-submission-toolkit broke the 4.0.0 pkg based executable builds.

v4.0.0

23 Jan 16:34
Compare
Choose a tag to compare

Version 4.0.0 release:

  • Breaking change, the name presented in the submission report now matches the current name of the repository maven-dependency-submission-action (previously it was moved from a repository called maven-dependency-tree-action)
  • When running the GitHub Action the ref and sha are injected as inputs (with defaults to the current workflow values)
  • Updated dependencies, specifically dependency-submission-toolkit that includes improvements to uploading of the snapshots and error handling around unhappy path scenarios
  • CLI application options made compatible with the GitHub Actions inputs
  • CLI applications made available as part of the release process and notes
  • Project testing and releases - swapped jest out for vitest and added GitHub Actions release workflow

v3.0.3

19 Oct 11:32
fcd7eab
Compare
Choose a tag to compare
  • Fixes issue with POMs that set a non-default outputDirectory resulting is no dependency data being found and uploaded #48.

v3.0.2

31 May 15:27
c5ad0fd
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v3...v3.0.2

v3.0.1

19 Apr 11:15
d682d5d
Compare
Choose a tag to compare
  • Updated to latest dependency snapshot library 1.2.10
  • Fixed error in the cli tools that was incorrectly validating the branch specification #26
  • Correctly injecting the additional maven command line options #28

v3.0.0

22 Feb 17:30
72bdd87
Compare
Choose a tag to compare
  • Introduced support for maven multi module project, reporting as an aggregation on the top level POM
  • Added support for maven wrapper if provided in the project
  • Improved reporting and modification of the path to the POM file so as to be a correct link in dependency graph
  • Fixed the bug reported in #19 by using more parts of the Maven coordinate system to guarantee uniqueness on the PackageURLs for the dependencies, i.e. the type and classifier are now supported if specified.

2.0.1

26 Oct 10:56
2ecce44
Compare
Choose a tag to compare
  • Updated the dependency submission tool kit version to 1.2.6 to support GHES

v2.0.0

18 Oct 17:10
571e99a
Compare
Choose a tag to compare