v32.3.0

[AyanSinhaMahapatra]

Major API/other changes:

• Output Format Version updated to 4.0.0 (major version bump)
• Dependency attribute rename: is_resolved renamed to is_pinned See Rename dependency is_resolved to is_pinned #3888 for more details.
• License Match attribute rename: spdx_license_expression is renamed to license_expression_spdx.

Changes in Output Data Structure:

• The data structure of the JSON output has changed for: - dependencies at file level package_data, and at top-level. - license matches at file level or unique codebase level license detections Note that the change is a modification to the JSON output, so we have a major version bump 3.2.0 to 4.0.0:
• Dependency attribute is_resolved renamed to is_pinned
• LicenseMatch attribute spdx_license_expression renamed to license_expression_spdx

What's Changed

• Improve npm workspace processing by @AyanSinhaMahapatra in Improve npm workspace processing #3857
• Fix Package/PackageData creation bugs in purldb by @AyanSinhaMahapatra in Fix Package/PackageData creation bugs in purldb #3710
• Fix python package detection issues Incorrect declared license for bunkerweb #3859 by @AyanSinhaMahapatra in Fix python package detection issues #3859 #3869
• typo in how_to_run_a_scan.rst by @spheex in typo in how_to_run_a_scan.rst #3886
• Fix typo in NuGet package manager reference in README.rst by @Crown0815 in Fix typo in NuGet package manager reference in README.rst #3880
• Synchronize Licenses by @AyanSinhaMahapatra in Synchronize Licenses and update SPDX License List to 3.25.0 #3897
• Improve copyright detection by @pombredanne in Improve copyright detection #3910
• Improve copyrights detection more by @pombredanne in Improve copyrights detection more #3917
• Update license rules and license detections by @AyanSinhaMahapatra in Update license rules and license detections #3905
• Update licenses by @AyanSinhaMahapatra in Update licenses #3887
• Consolidate Swift package assembly under a single BaseSwiftDatafileHandler by @keshav-space in Consolidate Swift package assembly under a single BaseSwiftDatafileHandler #3855
• Improve Copyright Detection by @AyanSinhaMahapatra in Improve Copyright Detection #3929
• Apply miscellaneous license detection updates by @pombredanne in Apply miscellaneous license detection updates #3936
• textcode markup: fix SyntaxWarning in regex by @gotmax23 in textcode markup: fix SyntaxWarning in regex #3891
• Update yarn lock parser Incorrect extracted requirement when parsing yarn.lock #3931 by @JonoYang in Update yarn lock parser #3931 #3943
• Detect go binary packages by @pombredanne in Detect go binary packages #3894
• Rename dependency is_resolved to is_pinned by @AyanSinhaMahapatra in Rename dependency is_resolved to is_pinned #3888
• Rename license match attribute for spdx expression by @AyanSinhaMahapatra in Rename license match attribute for spdx expression #3851
• Prepare release v32.3.0 by @AyanSinhaMahapatra in Prepare release v32.3.0 #3952

New Contributors

• @spheex made their first contribution in typo in how_to_run_a_scan.rst #3886
• @Crown0815 made their first contribution in Fix typo in NuGet package manager reference in README.rst #3880
• @gotmax23 made their first contribution in textcode markup: fix SyntaxWarning in regex #3891

Full Changelog: v32.2.1...v32.3.0

---

This discussion was created from the release v32.3.0.

[FaberFlorian]

Please update the Dockerfile:

ERROR: Package 'scancode-toolkit' requires a different Python: 3.8.16 not in '>=3.9'

FROM --platform=linux/amd64 python:3.8-slim-buster
e.g. ->
FROM --platform=linux/amd64 python:3.9-slim-buster
but 3.13 is current stable.