Skip to content

85.1.0

Choose a tag to compare

@github-actions github-actions released this 07 May 07:40
· 343 commits to main since this release

What's Changed

🐞 Bug Fixes

  • ce299a1 conan: Correctly set non-interactive mode for Conan2
  • 67ff216 conan: Handle list-format sources in conandata.yml
  • ee4e732 scanoss: Add missing handling for path includes
  • 110413f yarn2: Capture transitive dependencies of packages with peer deps

🎉 New Features

  • 7d6c020 advisors: Add support for SCANOSS
  • ccbc837 clients: Add a client for SCANOSS REST API v2
  • b162145 cyclonedx: Include project licenses in the project BOMs
  • be95e71 cyclonedx: Include project licenses in the single BOM
  • 63d7cb6 cyclonedx: Include the copyright of projects in the output
  • 43167f1 cyclonedx: Use pedigree instead of the deprecated modified
  • fb1e3a6 model: Add OrtResult.isScopeExcluded()
  • 00e57a5 spdx: Include information for modified packages
  • 90cf722 spdx: Include the linkage type in the output SPDX file(s)

✅ Tests

  • f42aff7 conan: Update expected results
  • 05bb569 cyclonedx: Enhance test data to cover a modified package
  • 5f57a2b cyclonedx: Re-format a JSON expected result file
  • 81fab25 osv: Also assert that there are no issues
  • 5a6ffa6 python: Update expected results
  • aaa7425 spdx: Enhance test input data to cover linkage types
  • 880b4e0 spdx: Make the test data cover a modified package
  • 593d68a spdx: Set a proper definitionFilePath in test input data
  • 3c2c321 yarn2: Use a dependency with normal and peer dependencies

📖 Documentation

  • c3b2fd6 README: Add contacting information
  • 49c3ed2 conan: Fix the toVcsInfo() function description
  • 10ab7ea static-html: Fix a typo
  • c8fa4b2 website: Add a link to the governance repository
  • 2e66ee2 website: Add the team's email address to the footer
  • 655e56f Stop saying "if and only if"

🔧 Chores

  • 4fc5616 cyclonedx: Factor out an enum for the dependency type
  • 8a5631f cyclonedx: Move Bom.addComponent() into the class
  • e2d27fe model: Factor out OrtResult.isPathExcluded()
  • a879049 reporter: Avoid an unnecessary conversion
  • 5d93271 scanoss: Improve logging for match types
  • 0caaa3b spdx: Disambiguate from SpdxPackage.id
  • 2b0d1b5 spdx: Do not drop any multiple concluded licenses
  • 1155d23 spdx: Factor out addDependencyRelationships()
  • ad5beef spdx: Only calculate count if needed for debug logging
  • 2741336 Make use of OrtResult.isScopeExcluded()

🚀 Dependency Updates

  • 4263318 docker: Update Bazelisk to version 1.29
  • 080a394 docker: Update the default Node.js version to the latest LTS
  • 671ccab update aws-java-sdk-v2 monorepo to v2.44.1
  • 7a28000 update github/codeql-action action to v4.35.3

🚜 Refactorings

  • 774f4f0 cyclonedx: Factor out Component.setCopyright()
  • e0be70a cyclonedx: Factor out Component.setLicenses()
  • be6f887 cyclonedx: Factor out getResolvedLicenseForId()
  • 7997b24 osv: Inline a trivial test function