Skip to content

0.98.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Oct 07:02
· 96 commits to main since this release
0.98.0
21c25f0

What's Changed

🛠 Breaking Changes

  • ce72fb6 feat(api)!: Make plugin lists in job configurations nullable
  • d8755ad feat(config-worker)!: Apply default plugins to unspecified plugin lists
  • 7e2af49 refactor(api)!: Expose MANAGE_ROLES instead of MANAGE_GROUPS
  • 6f97871 refactor(api)!: Return the role of each user from the users endpoints

🐞 Bug Fixes

  • a2bb38d advisor: Match plugin configs case-insensitively
  • 7d8b5df authorization: Reject invalid hierarchy IDs for the user info
  • 8e4a3a7 authorization: Return the superuser flag as a JSON boolean
  • a102a7e core: Match plugin IDs case-insensitively when collecting configs
  • de0cb1d core: Reject plugin configs with ambiguous plugin IDs
  • 5b4ce59 core: Return 400 for repositories outside the product in product runs
  • c34f829 core: Return 404 when deleting a user that does not exist
  • 42cfb5f dao: Make the unique constraint on secret names effective
  • 12fd0c0 dao: Map invalid regular expressions to query parameter errors
  • f59f492 ort-run: Compare advisor names case-insensitively in filters
  • 5c7b457 ort-run: Offer advisor names in canonical spelling
  • f997f20 plugin-manager: Attach the example of the organization plugins route
  • 5114719 plugin-manager: Do not check report definitions against templates
  • 22ce6bc plugin-manager: Document the default plugins category as an enum
  • 5d29364 plugin-manager: Match stored plugin IDs ignoring case for availability
  • 4630b9a plugin-manager: Match stored plugin IDs ignoring case for templates
  • 4eb160d plugin-manager: Return an error object when adding templates fails
  • 1fb18d9 plugin-manager: Validate the plugin type of plugin routes
  • 78d268d scanner: Match plugin configs case-insensitively
  • 0e4696f search: Reject invalid scope and 'returnPurl' parameters
  • 6f8bcd7 service: Keep scope includes in mapped repository configurations
  • bb4eed0 ui: Distinguish unset and empty plugin lists in the create-run form
  • 1867b89 ui: Link findings without a PURL to their project
  • 5edad14 ui: Open the exact package or project from run links
  • a3474f9 ui: Show resolution editing only with MANAGE_RESOLUTIONS
  • 6114a9a ui: Title the resolution panel "Resolutions" unless it can resolve
  • 98c02d3 website: Do not use the deprecated baseUrl compiler option
  • 59d1287 website: Import the JSX namespace from React
  • 26c04de Respond with 404 for unknown runs in component routes

🎉 New Features

  • 7cf704b Analyzer: Add cmake to container image
  • 81ac5ac analyzer: Apply the includes and excludes requested for a run
  • a34c172 api: Add an identifier match type to run packages and projects
  • afd9ac9 api: Allow setting includes and excludes when creating a run
  • 968b0f4 api: Expose the license finding curation reason schema
  • 25e7431 api: Return the includes and excludes of a run
  • f284dc8 authorization: Add a permission to manage default plugins
  • 93a0a75 dao: Add storage for includes and excludes requested for a run
  • 4c6aced dao: Store scope includes of repository configurations
  • b4a3643 plugin-manager: Add a route for plugins usable as global defaults
  • f63c838 plugin-manager: Add a route to get the plugins of an organization
  • 1a9f3ef plugin-manager: Add a service for default plugins
  • def6308 plugin-manager: Add model for default plugins
  • ff42cbf plugin-manager: Add routes for global default plugins
  • 49b2411 plugin-manager: Add routes for organization default plugins
  • 5c96837 plugin-manager: Expose resolved default plugins for repositories
  • b063669 search: Return the package identifier for PURL searches
  • a65078a service: Support exact run package and project identifier filters
  • bc96bdf ui: Add a page for global default plugins
  • a46b7e3 ui: Add a page for organization default plugins
  • c4415d4 ui: Add buttons to reset plugin selections to the defaults
  • 7a644ad ui: Add includes and excludes to the create run form
  • 69d2b21 ui: Add link parameters for an exact package or project match
  • f818d59 ui: Link the elements of shortest dependency paths
  • 25a80b8 ui: Preview the outcome of includes and excludes
  • 1059ebf ui: Show the includes and excludes of a run in its configuration
  • 873efca ui: Suggest common includes and excludes by package manager
  • 5ca6a39 ui: Suggest includes and excludes from the last run's projects
  • a36c12e ui: Use the default plugins in the create-run form

🐘 Build & ⚙️ CI

  • ee0cf8d website: Add @types/react as a dev dependency
  • 2ef9011 website: Run the type check

📖 Documentation

  • e79a37a Document default plugins
  • 38d0042 Document the admin configuration in the admin guide
  • 2b1a52e Explain why Kotest extensions are declared via the property
  • 779cb23 Explain why plugin templates do not apply to report definitions
  • 8a458a6 Rewrite the authorization documentation
  • 4358a25 Rewrite the secure Analyzer setup guide for admins
  • d251b21 Update the access rights in the user guide

🚀 Dependency Updates

  • 3a250a4 update at.yawk.lz4:lz4-java to v1.12.1
  • e70d27b update awssdk to v1.9.24
  • a2a5147 update ch.qos.logback:logback-classic to v1.6.6
  • 21c25f0 update com.azure:azure-security-keyvault-secrets to v4.12.0
  • 4c2dbcb update dependency @dnd-kit/react to v0.5.1
  • a1c5391 update dependency @hookform/resolvers to v5.9.2
  • 11f66aa update dependency @hookform/resolvers to v6
  • 20130d4 update dependency @playwright/test to v1.64.1
  • 30c4fab update dependency @tanstack/react-table to v9.3.1
  • b00c3d4 update dependency @tanstack/react-virtual to v3.14.21
  • 71d4810 update dependency eslint to v10.13.0
  • 00cb78d update dependency jsdom to v30.1.3
  • 13d1b40 update dependency lucide-react to v1.59.0
  • 241d6c0 update dependency postcss to v8.5.31
  • 6449874 update dependency ruby to v4.0.8
  • 3b154fa update dependency ruby to v4.0.9
  • 5d7151a update docker/login-action action to v4.7.0
  • e0cd5d2 update flyway to v13.11.0
  • c56a9d3 update flyway to v13.11.1
  • 6c1c544 update grafana/logstash-output-loki docker tag to v3.7.9
  • 1587fb5 update grafana/loki docker tag to v3.7.9
  • c957566 update hashicorp/vault docker tag to v2.2.1
  • b38fab6 update hoplite to v3.0.5
  • 4b833f5 update io.micrometer:micrometer-registry-graphite to v1.17.2
  • 1174caf update kubernetesclient to v28
  • 3a4ad71 update nginx:1.31-alpine docker digest to 060849a
  • 0771e52 update nginx:1.31-alpine docker digest to a3554c0
  • a6adfb5 update node.js to 55fb5f5
  • d30d7cb update node.js to v24.22.1
  • 9cafd7f update org.ossreviewtoolkit:version-catalog to v97.1.0
  • 91ddbf0 update org.ossreviewtoolkit:version-catalog to v97.2.0
  • 8291245 update org.springframework.security:spring-security-crypto to v7.1.2
  • dce4891 update pnpm to v12.14.0
  • 7f0b2e9 update pnpm/setup action to v3.1.2
  • 2183c28 update react monorepo to v19.3.1
  • 8f3d5ee update tanstack-query monorepo to v5.104.4
  • 2365d79 update tanstack-router monorepo
  • 9aec40e update typescript-eslint monorepo to v8.72.0
  • 50ff834 update vitest monorepo to v5.0.5

🚜 Refactorings

  • ae60197 authorization: Rename the internal MANAGE_GROUPS permission
  • 4ceb130 model: Remove the unused UserGroup enum
  • dcc5b4f model: Type license finding curation reasons as an enum
  • a09e285 ui: Show selected plugins first in all reorderable lists
  • c0a22fe ui: Use generated license finding curation reasons
  • 3275a32 Align the operationIds of vulnerability resolutions
  • c3d8399 Use camelCase operationIds consistently
Assets 7
Loading