Skip to content

97.0.0

Choose a tag to compare

@github-actions github-actions released this 15 Oct 07:29
· 85 commits to main since this release

What's Changed

  • Environment variable overrides for configuration need to use _ instead of . or __ now. I.e. ort.scanner.storages.postgresStorage.connection.url becomes ort_scanner_storages_postgresStorage_connection_url (following Spring rules).
  • Health metrics for CrOSSD and Scorecard.

🛠 Breaking Changes

  • 8f5be8c deps!: update hoplite to v3

🐞 Bug Fixes

  • facd05a analyzer: Merge distinct metadata values for same packages
  • 2301c03 commitlint: Extend the list of note keywords
  • 8a98168 crossd: Guard against JsonNull metrics
  • 0823686 model: Do not load default Hoplite property sources
  • acaf869 model: Extend NOTICE file patterns to be ignored by the scanner

🎉 New Features

  • 9b1ff4b advisor: Extend advisor result to include health metrics
  • 116be02 crossd: Implement CrOSSD project health metric provider
  • 1558671 nuget: Add Visual Basic projects (targeting .NET)
  • b0e622b scorecard: Implement a Scorecard project health metric provider

✅ Tests

  • 4f531d3 bazel: Update expected results
  • 8cec680 scanoss: Enable the test for a full file match
  • 95f1824 scanoss: Prefer a SCANOSS_API_KEY over a OSSKB_API_KEY

🐘 Build & ⚙️ CI

  • 6b13be3 github: Forward a SCANOSS_API_KEY secret to the environment

📖 Documentation

  • 00d29f3 nuget: Add comments about definition file types

🔧 Chores

  • 7ca2291 analyzer: Fixup some test names
  • 556a2a8 bazel: Make use of getAnalyzerResult()
  • dc51bff evaluator: Fix a ProjectSourceRule.description
  • 02a884b evaluator: Use a unique description for ProjectSourceRule
  • afeee2c package-*-providers: Make two functions private

🚀 Dependency Updates

  • fe90b95 update actions/setup-java action to v6.1.0
  • a3d8292 update aws-java-sdk-v2 monorepo to v2.56.0
  • dff18db update com.gradleup.tapmoc:tapmoc-gradle-plugin to v0.5.0
  • 232a3b7 update dependency getprovenant/provenant to v1.0.12
  • deea82b update dependency getprovenant/provenant to v1.0.13
  • 50884fa update dependency getprovenant/provenant to v1.0.14
  • 60ac596 update dependency getprovenant/provenant to v1.0.15
  • ecef55c update exposed to v1.5.1
  • b04f662 update github/codeql-action action to v4.38.3
  • 363fb8a update jdx/mise-action action to v5.1.2
  • 84961dc update kotest to v6.2.6
  • a3052b5 update kotlin monorepo to v2.4.21
  • 3445ea3 update org.jetbrains.kotlin.jvm to v2.4.21
  • c011cc1 update org.metaeffekt.core:ae-security to v0.159.0
  • 97c5c1e update ossf/scorecard-action action to v2.5.0

🚜 Refactorings

  • 15b96e6 downloader: Rename a function to downloadPackages()
  • ef9f980 downloader: Use the number of packages for progress info

💡 Other Changes

  • 368e913 style(downloader): Reindent a function