Skip to content

v1.6.0

Choose a tag to compare

View all tags
@sonukapoor sonukapoor released this 17 Apr 01:22
· 631 commits to main since this release
v1.6.0
e1e3f49
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's new

Added

  • Bun lockfile support — CVE Lite CLI now parses bun.lock (the JSONC format introduced in Bun v1.1.38). Dev-only packages are detected via workspace dependency manifests, --prod-only filtering is supported, and fix commands emit bun add automatically.
  • Breaking change labels — fix command tables now annotate major-version upgrade targets (e.g. 8.5.1 → 9.0.0) with (breaking change) so you know before running the command.

Full changelog

See CHANGELOG.md for details.

Assets 2
Loading