v0.1.1

What's Changed

• fix: maven - in case version is of type number , "stringify" it by @zvigrinberg in #86
• fix: in case version is of type number , "stringify" it by @zvigrinberg in #87
• fix: maven deps parsing bugs by @zvigrinberg in #89
• feat: upgrade exhort api response payload with TC remediation by @zvigrinberg in #91
• fix: maven sa wrongly excluding provided scoped artifacts by @zvigrinberg in #90
• feat: log ex-request-id resp header in debug Mode by @zvigrinberg in #93
• chore: test workflow by @zvigrinberg in #94
• feat: get output of pip commands from env variables by @zvigrinberg in #92
• fix: skip binaries validation when externalizing pip commands by @zvigrinberg in #95
• ci: fix broken link of JDK in Dockerfile by @zvigrinberg in #96
• feat: add maven component analysis path argument by @zvigrinberg in #97
• feat: expose validate token for cli usage by @zvigrinberg in #98
• fix: handle spaces in file paths used in shell commands by @zvigrinberg in #100
• fix: bug in stack/component analysis with path having spaces by @zvigrinberg in #101
• feat: add functionallity of EXHORT_GO_MVS_LOGIC_ENABLED setting by @zvigrinberg in #102
• fix: fix broken cli stack analysis summary option by @zvigrinberg in #103
• test: add cli test for stack analysis summary option by @zvigrinberg in #104
• fix: fix missing version/namespace in maven & npm by @zvigrinberg in #105
• ci: prevent staging wf from running twice by @zvigrinberg in #106
• fix: parameterize Dockerfile' jdk minor+patch version by @zvigrinberg in #107
• docs: add comment by @zvigrinberg in #108
• ci: trigger staging pipeline for docker image change by @zvigrinberg in #109
• fix: replace placeholder with secret token by @zvigrinberg in #110
• fix: unlimited wrapping for a terminal output by @vbelouso in #111
• ci: stage from forks by @zvigrinberg in #112
• ci: stage release from forks with fixes by @zvigrinberg in #114
• ci: fix syntax error by @zvigrinberg in #117
• ci: allow forks to stage by @zvigrinberg in #118
• ci: enable forks repo to stage via PR by @zvigrinberg in #119
• ci: fix event name by @zvigrinberg in #120
• feat: fix performance issue in python version >= 3.11.X by @zvigrinberg in #121
• feat: allow manifest from path for npm CA by @zvigrinberg in #122
• fix: bug of parsing package without version in requirements.txt by @zvigrinberg in #123
• test: remove snyk provider from integration tests by @zvigrinberg in #125
• feat: upgrade docker image by @IlonaShishov in #124
• fix: revive root component in generated sbom for python pip by @zvigrinberg in #126
• fix: expose exhort backend errors to clients by @zvigrinberg in #128
• feat: add support for gradle by @zvigrinberg in #127
• fix: make gradle bin errors more informative by @zvigrinberg in #129
• fix: gradle component analsyis duplicates artifacts in sbom by @zvigrinberg in #130
• fix: gradle ca produces two versions of the same package by @zvigrinberg in #131
• fix: gradle - fix crash and remove dep without ver from sbom by @zvigrinberg in #132
• fix: vulnerability in 3rd party package and fixed breakage of IT tests by @zvigrinberg in #133
• ci: add re-test functionality to staging workflow by @zvigrinberg in #134
• fix: two small big adjustments by @zvigrinberg in #135
• ci: fix workflow error because of python action location by @zvigrinberg in #136
• fix: get newer cyclonedx version without vuln by @zvigrinberg in #137
• fix: commonjs clients crash by @zvigrinberg in #139
• fix: print version of api only in case of EXHORT_DEBUG=true by @zvigrinberg in #140
• fix: add node-fetch to dependencies by @zvigrinberg in #141
• feat: add manifest content to sbom' metadata by @zvigrinberg in #142
• fix: handle spaces in package manager binaries paths by @zvigrinberg in #143
• fix: add and fix missing configurations for gradle ca by @zvigrinberg in #144
• fix: maven component analysis xml wrong parsing of x.0 versions ( x >=0) by @zvigrinberg in #145
• fix: bugs of windows os for python and npm ecosystems by @zvigrinberg in #146
• fix: in windows os, golang creates output with newlines of linux anyway by @zvigrinberg in #147
• fix: add compile only deps gradle by @zvigrinberg in #148
• fix: 2 bugs of gradle and maven by @zvigrinberg in #149
• ci: disable auto-me-bot signed off verification by @carlosthe19916 in #153
• ci: upgrade github action dependencies by @carlosthe19916 in #152
• chore: update deps with audit-fix command by @ruromero in #155
• build: validate commit and title messages by @ruromero in #158
• feat: adding gradle kotlin dsl support by @ruromero in #157
• build: restore signedCommits check by @ruromero in #156
• fix: npm should be supported only if package-lock.json exists by @carlosthe19916 in #151
• build: remove autome bot by @ruromero in #161
• fix: correctly return custom maven invocation error messages by @Strum355 in #159
• fix: error when attempting to generate sbom for npm package with no dependencies by @Strum355 in #160
• fix: bug in handling of comments with leading whitespace in requirements.txt by @Strum355 in #168
• feat: update component analysis API to work with manifest path instead of manifest content by @Strum355 in #165
• feat: support mvnw if requested and exists by @Strum355 in #170
• chore: update references from RHEcosystemAppEng to trustification by @Strum355 in #171
• chore: use secrets.GITHUB_TOKEN for npm publish & creating GH release by @Strum355 in #172
• chore: revert to RHEcosystemAppEng for installing exhort-javascript-api in docker image by @Strum355 in #173
• chore: revert to RHEcosystemAppEng in .npmrc for building docker image by @Strum355 in #174
• build: migrate deprecated action and remove pip cache by @ruromero in #175
• build: update dockerfile to use provided exhort-javascript-api instead of hardcoded version by @Strum355 in #177
• chore: dont pass callback for thrown errors in invokeCommand by @Strum355 in #183
• fix: correctly return custom golang invocation error messages by @Strum355 in #180
• feat: add support for pnpm by @ruromero in #182
• fix: correctly return custom python invocation error messages by @Strum355 in #185
• fix: make maven and pnpm tests immutable by @ruromero in #186
• fix: use --prefix instead of --dir for npm provider by @Strum355 in #187
• fix: ignore reference to 'go@version' from newer go mod graph output by @Strum355 in #188
• fix: address self-adding of npm workspace to package.json by @Strum355 in #189
• fix: fix invoking of binaries on windows by @Strum355 in #190
• feat: add yarn support by @ruromero in #191
• fix: fallback to global mvn if mvnw not found by @Strum355 in #193
• feat: support preferring gradlew by @Strum355 in #195
• feat: support configure a proxy url by @ruromero in #197
• refactor: remove self-generated openapi-spec by @ruromero in #198
• chore(deps): use [email protected] by @ruromero in #203
• fix: use http-proxy-agent by @ruromero in #204
• feat: implement OCI image analysis by @Strum355 in #202
• fix: add better compatibility for yarn and pnpm binaries by @ruromero in #206
• fix: pass html flag correctly to image analysis by @Strum355 in #208
• chore(ci): update workflow triggers for releases by @ruromero in #207

New Contributors

• @vbelouso made their first contribution in #111
• @carlosthe19916 made their first contribution in #153
• @Strum355 made their first contribution in #159

Full Changelog: v0.1.1-ea.0...v0.1.1