4.2.2

What's Changed

• SCANNPM-46 Bump axios to fix CVE-2024-39338 (& bump micromatch to fix CVE-2024-4067) by @7PH in #167

New Contributors

• @SamirM-BE made their first contribution in #166

Full Changelog: 4.2.1.2339...4.2.2.2373

4.2.1

What's Changed

• SCANNPM-42 Allow scan to run without a token provided by @lucas-paulger-sonarsource in #161

Full Changelog: 4.2.0.2326...4.2.1.2339

4.2.0

What's Changed

• Update cli scanner version to 6.0.0.4432 by @vdiez in #148
• SCANNPM-38 Fully support sonar-project.properties file parsing by @7PH in #149
• SCANNPM-39 exit parent process w correct exit code by @lucas-paulger-sonarsource in #153
• SCANNPM-40 Handle deprecated 'sonar.login' correctly by @lucas-paulger-sonarsource in #154
• SCANNPM-41 Allow package.json not to contain a name entry by @7PH in #158

Full Changelog: 4.0.1...4.2.0.2326

4.0.1

What's Changed

• NO-JIRA Publish v4.0.1 & Fix release pipeline to include build folder by @7PH in #147

Full Changelog: 4.0.0...4.0.1

4.0.0

What's Changed

• MMF-3712 No specific JRE version dependency #119

Full Changelog: 3.5.0...4.0.0

3.5.0

What's Changed

• Update dependencies by @saberduck in #103
• Update dependencies in tools/orchestrator by @saberduck in #105
• Enable shell on Windows by @vdiez in #131

Full Changelog: 3.4.0...3.5.0

3.4.0

What's Changed

• Prepare next development iteration by @vdiez in #81
• Fix integration tests by @vdiez in #83
• Use new promote script by @saberduck in #74
• Fix PR coverage by @vdiez in #84
• Fix CVE-2023-45857: upgrade axios to 1.6.0 by @ilia-kebets-sonarsource in #85
• Drop Node.js 14 support by @yassin-kammoun-sonarsource in #88
• Fix CVE-2023-26159 by @yassin-kammoun-sonarsource in #87
• Fix repox access by @ilia-kebets-sonarsource in #90
• Clarify example by @ilia-kebets-sonarsource in #89
• Fix 401 error on CI (Windows QA) by @vdiez in #94
• Resolve issue #91 - CLI arguments and local scanner no more supported by @ericmorand-sonarsource in #96
• Update follow-redirects to 1.15.6 by @zglicz in #99
• Update test fixture with sonar.branch.name by @saberduck in #100
• Update release.yml by @saberduck in #101
• Use full sha for jfrog-setup-wrapper in release.yml by @saberduck in #102

New Contributors

• @ericmorand-sonarsource made their first contribution in #96
• @zglicz made their first contribution in #99

Full Changelog: 3.3.0...3.4.0

3.3.0

What's Changed

• Fix SSF-490 by @vdiez in #77
• Sanitize version, basePath and HTTP proxies by @vdiez in #78
• Add prettier pre-commit hook on npm ci by @vdiez in #80
• Improve coverage by @vdiez in #79

Full Changelog: 3.2.0...3.3.0

3.2.0

What's Changed

• Prepare next development iteration by @victor-diez-sonarsource in #59
• Update chai version to fix vulnerability in transitive dependency get-func-name by @ilia-kebets-sonarsource in #62
• Replace mocha and nyc with jest by @ilia-kebets-sonarsource in #65
• Setup format pre-commit hook by @ilia-kebets-sonarsource in #68
• Update license to LGPL-3.0-only by @ilia-kebets-sonarsource in #70
• Add login parameter mapped to sonar.login and map token parameter to sonar.token by @yassin-kammoun-sonarsource in #69
• Add self-signed CA support by @ilia-kebets-sonarsource in #71

Full Changelog: 3.1.0...3.2.0

3.1.0

What's Changed

• Replace decompress lib by adm-zip because of vulnerability (and upgrade other dependencies for minor vulnerabilities) by @ilia-kebets-sonarsource in #47
• Update scanner version to v5.0.1.3006 by @dvolpato in #53
• Add support for https proxy by @interone-ms in #54
• Add support for Basic authentication on SonarScanner mirrors by @interone-ms in #57
• Update dependencies and minor improvements by @victor-diez-sonarsource in #55

Full Changelog: 3.0.1...3.1.0