v4.3.5

⚙️ Changes

• Lower experiments log severity by @cobya (#1094)

🧰 Maintenance

• build(deps): bump stefanzweifel/git-auto-commit-action from 5.0.0 to 5.0.1 by @dependabot (#1074)
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot (#1081)
• build(deps): bump github/codeql-action from 3.25.1 to 3.25.2 by @dependabot (#1079)
• build(deps): bump codecov/codecov-action from 4.1.0 to 4.3.0 by @dependabot (#1060)
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot (#1077)
• build(deps): bump shogo82148/actions-upload-release-asset from 1.7.4 to 1.7.5 by @dependabot (#1056)
• chore(deps): update actions/upload-artifact action to v4.3.2 by @renovate (#1072)
• build(deps): bump danhellem/github-actions-issue-to-work-item from 2.2 to 2.3 by @dependabot (#1058)
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot (#1040)
• chore(deps): update release-drafter/release-drafter action to v6 by @renovate (#1002)
• build(deps): bump github/codeql-action from 3.24.6 to 3.25.1 by @dependabot (#1068)
• chore(deps): update dependency microsoft.net.test.sdk to v17.9.0 by @renovate (#1082)
• chore(deps): update dependency valleysoft.dockerfilemodel to v1.1.1 by @renovate (#1075)

v4.3.4

⚙️ Changes

• Adding go with replace experiment by @amitla1 (#1067)

v4.3.3

⚙️ Changes

• Go CLI Replacement by @amitla1 (#1052)

v4.3.2

⚙️ Changes

• Replace in Go Mod by @amitla1 (#1045)

v4.3.1

⚙️ Changes

• Update VCPKG component identifier in detector by @grvillic (#1046)

v4.3.0

⚙️ Changes

• Add new VCPKG experiment by @grvillic (#1042)

🚀 New Features

• Flip prod switch for rust detector and clean up root dependencies by @FernandoRojo (#1034)

🐛 Bug Fixes

• Support for release candidate versions python detector by @jcfiorenzano (#1021)
• Evaluating invalid maven scope as "Compile" by @RushabhBhansali (#1033)
• Handle comments gracefully by the go fallback detector. by @jcfiorenzano (#1027)

🧰 Maintenance

• build(deps): bump mshick/add-pr-comment from 2.8.1 to 2.8.2 by @dependabot (#998)
• build(deps): bump shogo82148/actions-upload-release-asset from 1.7.2 to 1.7.4 by @dependabot (#1024)
• build(deps): bump release-drafter/release-drafter from 5.25.0 to 6.0.0 by @dependabot (#1003)
• build(deps): bump codecov/codecov-action from 4.0.0 to 4.1.0 by @dependabot (#1019)
• chore(deps): update mstest monorepo to v3.2.2 by @renovate (#985)
• build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot (#1005)

v4.2.3

⚙️ Changes

• Added optional dependency detection for npm lockfiles (version 2 and 3) by @RushabhBhansali (#1030)
• Ignore leading and trailing spaces on versions by @jcfiorenzano (#1025)

v4.2.2

⚙️ Changes

• Resolve vulnerabilities in transitive dep by @grvillic (#1023)
• chore(deps): update github/codeql-action action to v3.24.6 by @renovate (#988)
• Support development dependencies for the Gradle detector by @joakley-msft (#878)

v4.2.1

⚙️ Changes

• Update RustCLI processing to handle virtual manifests / skip over vendor packages by @FernandoRojo (#1015)

🐛 Bug Fixes

• Catch version spec failures in Python detection by @cobya (#1006)

🧰 Maintenance

• build(deps): bump github/codeql-action from 3.23.2 to 3.24.1 by @dependabot (#1007)

v4.2.0

⚙️ Changes

🚀 New Features

• Get ancestor for displaying dependency tree in relationships by @tarun06 (#927)

🐛 Bug Fixes

• remove category usage from the poetry detector by @tofay (#991)

🧰 Maintenance

• build(deps): bump codecov/codecov-action from 3.1.4 to 4.0.0 by @dependabot (#993)
• build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot (#984)
• build(deps): bump github/codeql-action from 3.23.1 to 3.23.2 by @dependabot (#989)