v2.5.0

🚀 Features

• Project
  • Added a feature to upload or load all tab data at once, without uploading or loading each tab individually. @FOSSLight-dev (#1120)
• Common
• Added a feature to request permissions for Project and 3rd Party. @FOSSLight-dev (#1119)
• Added a feature to send notification emails for Projects, 3rd Parties, and Self-checks that have not been updated in the last six months. @Min-Kyungsun (#1118)

🐛 Hotfixes

• Bug fix inactivate packaging > source tab @FOSSLight-dev (#1122)

🔧 Maintenance

• Packaging : OSS Version is not displayed by default when generating an OSS Notice. @Min-Kyungsun (#1117 )

• Improve the speed of identification request and confirm @FOSSLight-dev (#1122)

• Security > export, all sheets are exported @FOSSLight-dev (#1122)

• Modify @transactional and @CacheEvict applied to private methods @Lightieey (#995)

• Full Changelog: v2.4.0...v2.5.0

v2.4.0

What's Changed

• Fix bug in migration scripts by @syleeeee in #1107
• Fix OSS Rename performance issues and Project Search UI bugs by @dongs0 in #1114
• Fix migration script that deletes table data by @syleeeee in #1110
• fix: improve OSS nickname search and autocomplete by @dongs0 in #1113

New Contributors

• @dongs0 made their first contribution in #1114

🚀 Features

• Security
  • Added an Overview tab to view project vulnerability statistics and chart information.
• Project
  • Added new Distribution Types:
    • Contribution for open-source disclosure and contribution purposes.
    • Self-Check for internal review and pre-assessment purposes.
  • Added a new input field for the transfer division when the Distribution Type is Transfer In-House.
• Self-Check
  • Added integration with the FOSSLight Scanner Service.
• Common
  • When deleting a Project or 3rd Party, the SBOM-exported FOSSLight Report file is now automatically sent via email.

🐛 Hotfixes

• Security > Need to Resolve: Fixed an issue where the max score was displayed incorrectly.
• OSS Save: Fixed an issue where identical licenses were duplicated in declared or both declared and detected fields.
• Identification
  • Fixed an issue where the admin check* status was unintentionally cleared.
    -Fixed an issue where 3rd party copyright was not displayed in the SBOM tab.
    -Fixed an issue where exports failed when required warning messages existed.
    -Fixed an issue where license information disappeared after exclude and save.
    -Fixed an issue where Proprietary license types did not display warning messages.
    -Fixed an issue where Pre-review > License change targets were not listed.
• Packaging: Fixed an issue where network service OSS was incorrectly categorized as source disclosure required.

🔧 Maintenance

• Project
  • Packaging
    • Added support for uploading files in the tar.bz2 format.
    • Verify and Save buttons have been merged into a single action.
    • During Confirm, OSS items without notice or source are now excluded from warning message checks.
  • Distribution
    • The action performer’s information is now displayed in the completion email.
• Security
  • Added the Affected SW Version Range column to the Need to Resolve and Full Discovered tabs.
• History List
  • OSS: Added information for include CPE, exclude CPE, and version alias.
• OSS
  • When saving Dual or Multi licenses, licenses are now sorted in alphabetical order.
  • For OSS with Version Diff, the version information table in the registration email is now sorted by version order.
• Vulnerability
  • Modified NVD sync behavior to skip entries where download location, homepage is null.

Full Changelog: v2.3.0...v2.4.0

v2.3.0

What Changes

• Release version 2.3.0 by @Min-Kyungsun, @FOSSLight-dev(#1096)

🚀 Features

• Added Security Responsible Person and Security Mail functionality in Project Information
• Added Share Url in OSS, License
• Added OSORI DB in Pre-Review > OpenSource, License
• Added Depedendency Tree View in DEP tab when using fosslight dependency scanner
• Added 3rd party info sheet when export
• Added Important Notes for OSS in the Review Report.
• In packaging step,  the number of uploadable files has been increased to 5.
• The user can now check their issued Token information in the User Settings menu within the FOSSLight Hub.
• When SPDX and CycloneDX documents are generated, the output will be based on the package URL in the DEP tab.
• The Custom Column feature is now available in the Security tab, Project/3rd Party Identification, and Self-Check sections.
• Support CycloneDX 1.6
• Added API to add security responsible person and to set security mail
• Add tab refresh function

🐛 Hotfixes

• Bug fix where saving duplicated license
• Improved vulnerability data collection, synchronization, and mailing logic
• Bug fix when export yaml file and spdx file
• Fixed various management features including project/3rd party lists, copy, delete, permissions, search conditions
• Improved multiple features related to 3rd party data loading, identification, status search, BOM comparison, Excel export
• Fixed multiple bugs in OSS save, merge, bulk registration, license validation, NVD synchronization

🔧 Maintenance

• Cleanup legacy file/code
• Add physical file deletion logic when deleting project/3rd party

v2.2.0

What's Changed

• Release version 2.2.0 by @FOSSLight-dev @Min-Kyungsun @hyeinlee00 @parkcoldroad in #1093

🚀 New Features

• 3rd Party

  • Added 3rd Party Information
  • Added 3rd Party Identification(3rd Party tab/ BOM tab)
  • Implemented a 3rd Party BOM Compare feature

• Project

  • Added codelinaro type to Pre-review

• Use httpstatus class to print http status code @parkcoldroad (#863)

Changes

• Project
  • Enabled the ability to change the status of multiple projects simultaneously.
  • Updated BOM merge conditions:
    • If OSS Name is “-”, merge if license, homepage, and download location are the same.
  • Adjusted the Loaded list to display items in the order of most recently added.
• Open Source
  • OSS name can now only be changed through the edit button in the detailed screen.
  • Changed the initial list display to sort by modified date in descending order.
• License
  • Changed the initial list display to sort by modified date in descending order.
  • Modified the License text field to allow null values.
  • Added a notification feature for users in the division (Code No: 200) when USE_YN is changed to N in Code Management.
• Review Report
  • Updated to include OSS Important Notes information in the output.
  • Provided links to detailed screens when clicking on OSS and License names.
• DataBase
  • Updated column names
    • PROJECT_MASTER: DESTRIBUTION_STATUS > DISTRIBUTION_STATUS
  • Deleted columns
    • PRE_PROJECT_MASTER: OSS_TYPE, OS_TYPE_ETC, DISTRIBUTION_TYPE

🐛 Hotfixes

• Fixed an issue where the banned list of all files would merge and display when multiple package files are uploaded in Packaging.
• Resolved an issue where existing data would change when saving a copied OSS with a new name (added logic to reset oss_common_id).
• Fixed an issue where information was not displayed correctly in the Statistics menu.
• Resolved an issue where the Vulnerability menu could not be queried.
• Fixed an issue where the column width would not be maintained after filtering in the Grid table.
• Addressed an issue where no email was sent when adding a new OSS version.

Full Changelog: v2.1.1...v2.2.0

v2.1.1

What's Changed

• Release version 2.1.1 by @FOSSLight-dev @Min-Kyungsun @hyeinlee00 in #1090

🚀 New Features

• Open Source
  • Added Important Notes section
• Project
  • Added cargo type to Pre-review
  • Added functionality to allow appending in file format in the Packaging - Notice section
• UI
  • Added icon color based on level in Restrictions
• API
  • Added Project reset API
  • Added Project delete API

Changes

• Project
  • Changed terminology in Information: Watcher -> Editor
  • Removed unnecessary confirmation popup when saving BOM
  • Changed warning message level in Identification > BIN tab
    • OSS Name different and License cases, lowered level from Warning -> Info
  • Modified Packaging to prevent '/' from being entered in the path
  • Deleted fosslight_binary.txt area. Replaced with fosslight binary report to include tlsh and checksum values.
  • Modified to prevent BOM Compare for projects without permissions
  • Changed permission check logic to make modifications impossible in Request status
  • Handled to disallow input of single and double quotes during Distribution
• Open Source
  • Deleted items corresponding to OSS_COMMON in Sync functionality
  • Added restriction in Sync
  • Modified Sync operation to add comment with current version
  • Added CPE-related items to the List search criteria
• Mail
  • Displayed changes related to Open Source common information
  • Changed format for Open Source all version comments
  • Added Open Source purl information
  • Modified query to retrieve info table from Vulnerability Discovered email.
    Adjusted query to ensure OSS Name is also used in the Dependency tab
• Review Report
  • Changed conditions for displaying License review
• UI
  • Automatically adds input box values when the save button is clicked in License / Open Source details.
• API
  • Changed API name according to the terminology change from Watcher to Editor
  • Modified User permission check functionality in API calls to align with UI
  • Project search API
    • Added parameter for paging
    • Changed key in return values
  • Removed limit on the number of Project creations
  • Changed to use random tokens during token generation

🐛 Hotfixes

• Project > Identification
  • Fixed status bar bug
  • Corrected pre-review error
  • Resolved issue with copyright information not updating
• Project > Packaging
  • Fixed bug in the verify process
  • Modified to prevent physical deletion of packaging files when referenced by multiple projects
  • Fixed issue where the 4th packaging file was not visible when loading previous project or could not be copied
• Project > Security
  • Fixed issue with status indication on the Security button
  • Resolved issue where vulnerability list for open source without versions was not visible
• 3rd Party
  • Fixed bug preventing deletion of related documents
  • Corrected bug in the 3rd party creation screen
• License
  • Fixed bug when sending mail with only comments added in License
• Open source
  • Modified to display restrictions of licenses linked to open source on the detail page
  • Fixed bug related to Purl creation
• Vulnerability
  • Modified logic related to recalculation
• DB
  • Fixed bug causing duplicate OSS COMMON IDs
  • Added missing tables to fosslight_create.sql
  • Added missing code data
    • Source code disclosure scope
    • Restriction

• Other Changes
  • Legacy code deletion: Removed unused JSP and library files
  • Changed verify script path to an absolute path including root.dir

Full Changelog: v2.1.0...v2.1.1

v2.1.0

Changes

🚀 Features

• Release version 2.1.0 @FOSSLight-dev @Min-Kyungsun (#1088)
  • Added Security Tab Features
    • Renamed internal tabs to Need to Resolve / Full Discovered
      • Changed from the previous Total / Fixed / Not Fixed classification to Need to Resolve / Full Discovered
      • Need to Resolve: Displays CVE IDs above the standard score.
        The standard score can be set in the Code management menu under Security Vulnerability Standard Score
      • Full Discovered: Displays all detected CVE IDs
    • Added Columns: Vulnerability Link, Security Comments
      • Vulnerability Link:
      • Security Comments: Added a Security Comments column to leave comments on the results of Vulnerability Resolution
    • Added Excel upload feature
  • Added Security Mail Enable/Disable Feature
    • Added an option to set whether to receive Security Mail for the project
    • Can be set in Project Information
    • Reason for disabling Security Mail is mandatory
  • Added Binary List to Packaging > Source Tab
    • Added a binary list feature to prevent binaries from being collected instead of source code during the packaging process
  • Added v2.1.0 Migration Script
    • 20241025020001_update_v2.1.0.sql: Migration script for v2.1.0 changes
    • 20241104111630_update_v2.1.0_update_license_data.sql: Migration script to update license data used in open source
  • Added Data to fosslight_create.sql
    • Added License data to fosslight_create.sql
    • There was a bug where the Opensource List only showed part of the data due to missing License data
  • Increased Number of Upload Files in Packaging Tab
    • Increased the number of packaging file uploads to 4 to support up to 20GB of upload capacity

🐛 Hotfixes

• Release version 2.1.0 @FOSSLight-dev @Min-Kyungsun (#1088)
  • Fixed a bug where the file count was not correct due to a Packaging verify bug
  • Fixed a bug when exporting Statistics to an Excel file
  • Fixed a bug where saving was not possible when Project > Identification > Admin was checked due to OSS Component ID matching issues
  • Fixed an error in the default column names displayed in License / Open Source List (Obligation -> Notice/Source)
  • Fixed an error where the 3rd party name did not appear when loading 3rd party data in Project > Identification
  • Fixed bugs related to Vulnerability matching

v2.0.2

Changes

🐛 Hotfixes

• Release version 2.0.2 @FOSSLight-dev @Min-Kyungsun (#1086)
  • Fixed errors occurring during the save process
  • Performance Improvement
  • Packaging Bug Fixes and Features Added
  • Comment Bug Fixes and Features Added
  • Security Tab Bug Fixes and Features Added
  • Revised the 2.0.0 version release note

v2.0.1

Hotfix

• 2.0.1 release. Implemented due to the discontinuation of CDN support for jqgrid. @FOSSLight-dev (#1083)

v2.0.0

Changes

• Release Hub 2.0.0 official @FOSSLight-dev, @Min-Kyungsun, @hyeinlee00 (#1081)
• bug fix and speed improvement @FOSSLight-dev (#1080)
• [DEV] Changed the path of verify executable to relative path @vampard (#1073)
• Added migration script for bug fixes for higher versions of v2.0.0.pre-release @hyeinlee00 (#1060)
• API changes
  • Modify report upload api to upload empty file @hyeinlee00 (#1059)
  • �Change report upload api in API V2 @hyeinlee00 (#1057)
  • Bugfix/api v2 3rd party @hyeinlee00 (#1056)

🚀 Features

• Improved osori db related functions @FOSSLight-dev (#1053)
  • License: Add source code disclosure scope
  • OSS:
    • Add restriction
    • Store OSS information by separating it into
      • Common: OSS_COMMON Table added
      • Version: OSS_VERSION Table added
    • Store 'Download location' info for OSS in common information
    • Add PURL for each download location
    • Subdivide the comment into
      • Common comments
      • Version comments
    • Add 'include_cpe', 'exclude_cpe', 'version_alias' to enhance vulnerability matching
• API changes
  • Add 3rd party export APIs @Min-Kyungsun (#1053)
  • Add common authorization in API V2 @hyeinlee00 (#1077)
  • Add get an api to get security json data to API V2 @hyeinlee00 (#1076)
  • Feature/api v2 load project @hyeinlee00 (#1075)
  • Feature/api v2 project bom @hyeinlee00 (#1072)

🐛 Hotfixes

• Bugfix in migration script @hyeinlee00 @Min-Kyungsun (#1079) (#1081)
• [DEV] Changed Character-set and Collate for NVD_CVE_V3 to utf8mb4 from utf8 @vampard (#1071)
• Bugfix user_columns in fosslight_create.sql @hyeinlee00 (#1061)
• Update unit test for hub 2.0.0.pre-release @hyeinlee00 (#1055)

v2.0.1.pre-release

🐛 Hotfixes

• Bug fix in v2.0.0.pre-release and Update to v2.0.1.pre-release @hyeinlee00 @FOSSLight-dev @Min-Kyungsun (#1052)
  • Fix wrong column name in fosslight_create.sql
  • Bug fix in API V2
    • Change 3rd party search API return value type
    • Fix the bug that source code analysis result was uploaded to BIN tab
  • Bug fix in email format
  • Bug fix in review report
  • Bug fix in search bar in Opensource menu
  • Bug fix in SPDX document

Known Issue

Issue1

• Issue: Recent FOSSLight scanner report file format, which includes TLSH and checksum data, cannot be uploaded to the BIN tab.
• Reason: The TLSH and CHECK_SUM columns are not included in the OSS_COMPONENTS table.
• Workaround: Manually add the following columns to the OSS_COMPONENTS table:
  • `TLSH`text DEFAULT NULL
  • `CHECK_SUM` text DEFAULT NULL

Issue2

• Issue: User custom column in list view doesn't work
• Reason: USER_COLUMNS table is not included in fosslight_create.sql
• Note: The table is already included in the migration script 20240401085317_update_2.0.0-beta.sql
• Workaround: Manually add the following SQL script to fosslight_create.sql or create table in DB:

  CREATE TABLE `USER_COLUMNS` (
  `COLUMNS` longtext DEFAULT NULL,
  `LIST_TYPE` varchar(20) NOT NULL DEFAULT '',
  `CREATED_DATE` datetime NOT NULL DEFAULT current_timestamp(),
  `UPDATED_DATE` datetime NOT NULL DEFAULT current_timestamp(),
  `USER_ID` varchar(45) NOT NULL DEFAULT '',
  PRIMARY KEY (`LIST_TYPE`,`USER_ID`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

Fixed Version

Above issues will be resolved in the official version 2.0.0.

• Bug fix for Issue1: de15493
• Bug fix for Issue2: d8060a8