Version 7.2.0

Changes

• Add support for Bazel's pinned maven_install.json (#4772).
• Fixed bug preventing the use of custom report templates (#4800).
• Updated several dependencies including upgrades for dependencies with CVEs.
• Several bug fixes made and suppression rules were added.
• See the full listing of changes.

Version 7.1.2

Changes

• The maven plugin now includes pnpm and yarn lock files in the scan by default (#4753).
• If a suppression rule is no longer used a log entry will be written (#4685).
• Several bug fixes made and suppression rules added.
• See the full listing of changes.

Version 7.1.1

Changes

• Minor bug fixes.
• Resolved several false positives.
• See the full listing of changes.

Version 7.1.0

Changes

• Improved sorting in the HTML report (see #4112).
• Improved support for Swift (see #4265).
• Resolved several false positives.
• See the full listing of changes.

Version 7.0.4

Changes

• Update to jackson-databind (see #4285).
• See the full listing of changes.

Version 7.0.3

Changes

• Update to jackson-databind (see #4285).
• See the full listing of changes.

Version 7.0.2

Changes

• General project maintenance, bug fixes, and false positive and false negative reductions.
• See the full listing of changes.

Version 7.0.1

Changes

• General project maintenance, bug fixes, and false positive reductions.
• See the full listing of changes.

Version 7.0.0

Breaking Changes

• The H2 database version has been upgraded.
  • if you use the dataDirectory option you will need to run a purge after upgrading.
• Upgraded to dotnet core 6.0. If analyzing dotnet assemblies the system will need to have the dotnet core 6.0.x runtime available.

Changes

• The Sarif report format has been fixed and can now be imported into GitHub if desired (See #3993).
• Introduced IssueOps for False Positive reports to assist the team in evaluating FP reports.
  • Create New FP Report Issue.
• When analyzing Java projects ODC now includes data from the developers section.
  • This will likely cause false positives on things like Apache James, please report the FP and we will fix these quickly.
• General project maintenance, bug fixes, and false positive reductions.
• See the full listing of changes.

Version 6.5.3

Changes in this Release

• Performance improvements for some Maven projects (see #3923 and #3931).
• Fixed bug in npm version handling introduced in 6.5.2 (see #3956).
• Improved the node package analyzer to correctly report the origin of a dependency (see #3970).
• General code maintenance and false positive reductions.
• See the full listing of changes.