Skip to content

Commit

Permalink
2.4.0
Browse files Browse the repository at this point in the history
  • Loading branch information
vemv committed Mar 29, 2022
1 parent 6dd0ae7 commit 7d30b13
Show file tree
Hide file tree
Showing 4 changed files with 7 additions and 5 deletions.
2 changes: 2 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@
* i.e. the internal analyzers that are specialized in other ecosystems e.g. .NET, Ruby, Node.js, etc will not be run at all, improving performance and accuracy.
* The nvd-clojure implementation never allowed non-jar files to be analyzed, so in practice no behavior has possibly been changed.
* ([Read more](https://github.com/rm-hull/nvd-clojure/tree/v2.4.0#configuration-options))
* Update `dependency-check-core`.
* Misc cosmetic improvements for what is printed during execution.

## Changes from 2.2.0 to 2.3.0

Expand Down
2 changes: 1 addition & 1 deletion Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

# Example usage:
# copy a temporary Clojars token to your clipboard
# GIT_TAG=v2.3.0 CLOJARS_USERNAME=$USER CLOJARS_PASSWORD=$(pbpaste) make deploy
# GIT_TAG=v2.4.0 CLOJARS_USERNAME=$USER CLOJARS_PASSWORD=$(pbpaste) make deploy
# (recommended) delete said token.

deploy: check-env
Expand Down
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,12 +26,12 @@ dependencies and passes them to a library called [Dependency-Check](https://gith

<details>

Please create a separate project consisting of `[nvd-clojure/nvd-clojure "2.3.0"]`. Said project can be located inside the targeted repo's Git repository.
Please create a separate project consisting of `[nvd-clojure/nvd-clojure "2.4.0"]`. Said project can be located inside the targeted repo's Git repository.

```
(defproject nvd-helper "local"
:description "nvd-clojure helper project"
:dependencies [[nvd-clojure "2.3.0"]])
:dependencies [[nvd-clojure "2.4.0"]])
```

Please do not add nvd-clojure as a dependency or plugin in the project.clj of the project to be analysed.
Expand All @@ -54,7 +54,7 @@ If you are using a multi-modules solution (e.g. `lein-monolith`), you should ens

<details>

Please create a separate project consisting exclusively of `nvd-clojure/nvd-clojure {:mvn/version "2.3.0"}`. Said project can be located inside the targeted repo's Git repository.
Please create a separate project consisting exclusively of `nvd-clojure/nvd-clojure {:mvn/version "2.4.0"}`. Said project can be located inside the targeted repo's Git repository.

Please do not add nvd-clojure as a dependency in the deps.edn of the project to be analysed.

Expand Down
2 changes: 1 addition & 1 deletion project.clj
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
(defproject nvd-clojure "2.3.0"
(defproject nvd-clojure "2.4.0"
:description "National Vulnerability Database dependency checker"
:url "https://github.com/rm-hull/nvd-clojure"
:license {:name "The MIT License (MIT)"
Expand Down

0 comments on commit 7d30b13

Please sign in to comment.