diff --git a/Changelog.md b/Changelog.md index bf490ea3e7..2fd7c10385 100644 --- a/Changelog.md +++ b/Changelog.md @@ -1,8 +1,14 @@ # FOSSA CLI Changelog -## v3.9.15 +## v3.9.16 - Poetry: Adds partial support for dependency groups. ([#1420](https://github.com/fossas/fossa-cli/pull/1420)). +## v3.9.15 +- Change TLS to a version that takes advantage of but does not require 1.2 with EMS. + This will be reverted in six months. + On-prem users should upgrade their servers to support either TLS 1.2 with EMS or TLS 1.3. + SAAS customers are unaffected. ([#1418](https://github.com/fossas/fossa-cli/pull/1418)). + ## v3.9.14 - Cargo: Update cargo strategy to parse new `cargo metadata` format for cargo >= 1.77.0 ([#1416](https://github.com/fossas/fossa-cli/pull/1416)). - `fossa release-group`: Add command to create a FOSSA release group release (`fossa release-group create-release`) [#1409](https://github.com/fossas/fossa-cli/pull/1409). diff --git a/spectrometer.cabal b/spectrometer.cabal index 8e887bdc1b..1796494d9c 100644 --- a/spectrometer.cabal +++ b/spectrometer.cabal @@ -76,8 +76,10 @@ common lang -- TODO: Switch `semver` back to `versions` since https://github.com/fosskers/versions/issues/47 is fixed. This package maintainer seems much more responsive. Contrast https://github.com/brendanhay/semver/issues/12. -- codec-rpm is installed via cabal.project, so this number is an expected future version. --- Upgrade text and mtl after codec-rpm conflict is fixed, probably as part of 9.4 upgrade. --- Upgrade zip after text is upgraded +-- TODO: Upgrade text and mtl after codec-rpm conflict is fixed, probably as part of 9.4 upgrade. +-- TODO: Upgrade zip after text is upgraded. +-- TODO: TLS isn't used directly but is pinned here while customers upgrade their servers to support TLS 1.2 with EMS or TLS 1.3. +-- They've been warned about future support breaking. Upgrade to tls-2.* after 10/25/2024. common deps build-depends: , aeson ^>=2.2 @@ -146,6 +148,7 @@ common deps , text ^>=2.0.0 , th-lift-instances ^>=0.1.17 , time >=1.9 && <1.13 + , tls >=1.9 && <2.0 , tomland ^>=1.3.3.0 , transformers , typed-process ^>=0.2.6