Releases
6.1.0
What's Changed
Bug Fixes 🐞
170db0b FileListResolver: Delete the temporary directory
5edbe72 cargo: Allow metadata
to be missing again
1f2ad1e reporter: Add score and method properties in CycloneDX report
edafd51 Properly delete parent directories of temporary files
Build 🐘 & CI ⚙️
df5ede2 Gradle: Move advisors to individual plugin projects
53ea4ce Gradle: Move remaining Maven and Sbt package managers to projects
ced939b renovate: Disable patch-level updates for the AWS S3 dependency
Chores 🔧
d606322 NpmFunTest: Remove two unused imports
e04aa88 Use new ORT slack subdomain
Dependency Updates 🚀
5ba8629 Gradle: Upgrade to the latest WireMock version 3.2.0
0e3e3a1 update dependency com.zaxxer:hikaricp to v5.1.0
34095e5 update dependency io.ktor:ktor-client-okhttp to v2.3.6
b36ec78 update dependency org.jruby:jruby to v9.4.5.0
df0ba6e update dependency org.wiremock:wiremock to v3.3.0
b08bc3c update dependency org.wiremock:wiremock to v3.3.1
c5add7d update kotest to v5.8.0
Documentation 📖
3efccf5 ProvenanceDownloader: Clarify the semantics of download()
f5c556d evaluator: Fix-up the docs for two CLI options
a701b73 reference: Improve the wording for package curation providers
New Features 🎉
7296ec0 analyzer: Log about configured but unavailable package managers
91647b2 helper-cli: Extend the scope exclude generation for Poetry
1d74f26 model: Add 'DOCUMENTATION_DEPENDENCY_OF` as scope exclude reason
2416358 vulnerabilities: Support the CVSS 4 qualitative severity rating scale
Refactorings 🚜
e2bb20e analyzer: Remove the special exception code for Maven
80498cf model: Make tests independent of Maven or SBT package managers
7c0ca7c reporter: update the TrustSource data model and the reporter
32ed408 Introduce an alsoIfNull
convenience extension function
Tests ✅
236997c analyzer: Remove the AnalyzerTest
ae37645 ossindex: Simplify some result assertions
e4f232a osv: Update expected results
cb139cc 66eee50 spm: Update expected results
b26c5bd spm: Update expected results
ca7424a trustsource: Add a basic functional test for the expected report
Other Changes 💡
6c25e2c style(trustsource): Apply some trivial reformatting
You can’t perform that action at this time.