You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- build: improve GHA workflow experience for forks ([#8285](https://github.com/dependency-check/DependencyCheck/pull/8285))
37
-
- build: use maven jdk toolchains to build with Java 25; test against Java 11/17/21/25 ([#8292](https://github.com/dependency-check/DependencyCheck/pull/8292))
38
-
- chore: avoid use of parent pom and maven properties where unnecessary ([#8322](https://github.com/dependency-check/DependencyCheck/pull/8322))
39
-
- chore: bump java development to 25.0 ([#8365](https://github.com/dependency-check/DependencyCheck/pull/8365))
- chore: fix Maven scm tags after 12.2.1-SNAPSHOT bump ([#8265](https://github.com/dependency-check/DependencyCheck/pull/8265))
63
+
- chore: pin GitHub actions to specific SHAs rather than mutable tags ([#8381](https://github.com/dependency-check/DependencyCheck/pull/8381))
64
+
- chore: remove unused properties and schemas ([#8378](https://github.com/dependency-check/DependencyCheck/pull/8378))
67
65
- test: Make tests locale independent ([#8328](https://github.com/dependency-check/DependencyCheck/pull/8328))
68
66
- test: [#8140](https://github.com/dependency-check/DependencyCheck/pull/8140) reproduce current behavior
69
67
- test: avoid polluting test classpaths with sample dependencies to be scanned ([#8267](https://github.com/dependency-check/DependencyCheck/pull/8267))
68
+
- build: improve GHA workflow experience for forks ([#8285](https://github.com/dependency-check/DependencyCheck/pull/8285))
69
+
- build: use maven jdk toolchains to build with Java 25; test against Java 11/17/21/25 ([#8292](https://github.com/dependency-check/DependencyCheck/pull/8292))
70
70
71
71
See the full listing of [changes](https://github.com/dependency-check/DependencyCheck/milestone/104?closed=1)
72
72
@@ -77,13 +77,13 @@ See the full listing of [changes](https://github.com/dependency-check/Dependency
77
77
- feat: support multiple cvssBelow thresholds per version ([#2563](https://github.com/dependency-check/DependencyCheck/pull/2563)) ([#8024](https://github.com/dependency-check/DependencyCheck/pull/8024))
78
78
- feat: usage telemetry via scarf ([#8066](https://github.com/dependency-check/DependencyCheck/pull/8066))
79
79
- feat: add new suppression xsd allowing grouping of suppressions ([#7957](https://github.com/dependency-check/DependencyCheck/pull/7957))
80
-
- fix(ant): resolve relative paths against basedir ([#8202](https://github.com/dependency-check/DependencyCheck/pull/8202))
81
80
- fix: add hint for Elastic APM Java agent CPE mapping ([#8200](https://github.com/dependency-check/DependencyCheck/pull/8200))
82
81
- fix: Allow NVD data feed metadata downloads to fail on 1st Jan while logging correct errors ([#8205](https://github.com/dependency-check/DependencyCheck/pull/8205))
83
-
- fix(ant): resolve paths relative to basedir for suppression and output
84
82
- fix: correct XML/JSON report CVSS field & HTML report URL mappings ([#8156](https://github.com/dependency-check/DependencyCheck/pull/8156))
85
83
- fix: log GrokAssembly output when dotnet invocation fails ([#8141](https://github.com/dependency-check/DependencyCheck/pull/8141))
86
84
- fix: correct reliability of Central etc (JCS cache) analyzers on Java 25/Docker by making CLI classpath deterministic ([#8117](https://github.com/dependency-check/DependencyCheck/pull/8117))
85
+
- fix(ant): resolve relative paths against basedir ([#8202](https://github.com/dependency-check/DependencyCheck/pull/8202))
86
+
- fix(ant): resolve paths relative to basedir for suppression and output
- build: fix flaky central test ([#8039](https://github.com/dependency-check/DependencyCheck/pull/8039))
116
115
- docs: Improve Gradle docs wrt experimental analyzers, use of Central and Proxy configuration ([#8036](https://github.com/dependency-check/DependencyCheck/pull/8036))
117
116
- docs: add note about central analyzer for gradle ([#8038](https://github.com/dependency-check/DependencyCheck/pull/8038))
117
+
- build: fix flaky central test ([#8039](https://github.com/dependency-check/DependencyCheck/pull/8039))
118
118
119
119
See the full listing of [changes](https://github.com/dependency-check/DependencyCheck/milestone/101?closed=1)
120
120
@@ -217,10 +217,10 @@ See the full listing of [changes](https://github.com/dependency-check/Dependency
- docs: Fix OSS Index Maven config documentation ([#7322](https://github.com/dependency-check/DependencyCheck/pull/7322))
240
-
- Fix OSS Index Maven config documentation
241
-
- chore(docs): Document Gradle plugin support for failBuildOnUnusedSuppressionRule ([#7307](https://github.com/dependency-check/DependencyCheck/pull/7307))
242
-
- chore(docs): Correct analyzers config example to use Gradle dot-syntax ([#7305](https://github.com/dependency-check/DependencyCheck/pull/7305))
243
239
- fix: improve error message on improperly configured serverId credentials in settings.xml ([#7313](https://github.com/dependency-check/DependencyCheck/pull/7313))
244
240
- fix: Lower Basic serverId when Bearer was expected to a warning
245
241
- fix: improve error message on improperly configured serverId credentials
246
242
- fix: Correct nonProxyHosts support when no sys properties set ([#7306](https://github.com/dependency-check/DependencyCheck/pull/7306))
247
-
- core(docs): Group failBuildOnUnusedSuppressionRule flag next to suppression file configuration
248
-
- core(docs): Update Gradle plugin documentation for failBuildOnUnusedSuppressionRule support
249
-
- fix: Correct nonProxyHosts support when no sys properties set
243
+
- docs: Fix OSS Index Maven config documentation ([#7322](https://github.com/dependency-check/DependencyCheck/pull/7322))
244
+
- chore(docs): Document Gradle plugin support for failBuildOnUnusedSuppressionRule ([#7307](https://github.com/dependency-check/DependencyCheck/pull/7307))
245
+
- chore(docs): Correct analyzers config example to use Gradle dot-syntax ([#7305](https://github.com/dependency-check/DependencyCheck/pull/7305))
246
+
- chore(docs): Group failBuildOnUnusedSuppressionRule flag next to suppression file configuration
247
+
- chore(docs): Update Gradle plugin documentation for failBuildOnUnusedSuppressionRule support
250
248
- chore(docs): Correct analyzers config example to use Gradle dot-syntax
251
249
252
250
See the full listing of [changes](https://github.com/dependency-check/DependencyCheck/milestone/92?closed=1).
@@ -276,10 +274,10 @@ See the full listing of [changes](https://github.com/dependency-check/Dependency
276
274
- fix: do not log loading of JDBC driver ([#7155](https://github.com/dependency-check/DependencyCheck/pull/7155))
277
275
- fix: expose flag to disable version check ([#7147](https://github.com/dependency-check/DependencyCheck/pull/7147))
278
276
- fix: Gracefully handle CVEs with bad configuration nodes missing CPE match expressions ([#7125](https://github.com/dependency-check/DependencyCheck/pull/7125))
279
-
- chore: cleanup base suppression ([#7138](https://github.com/dependency-check/DependencyCheck/pull/7138))
- chore: cleanup base suppression ([#7138](https://github.com/dependency-check/DependencyCheck/pull/7138))
283
281
284
282
See the full listing of [changes](https://github.com/dependency-check/DependencyCheck/milestone/90?closed=1).
285
283
@@ -315,13 +313,13 @@ See the full listing of [changes](https://github.com/dependency-check/Dependency
315
313
- fix: Fixup the missing addition of NVD API Datafeed credentials (if configured)
316
314
- fix: Fixup broken proxy authentication in first attempt; extend to include KEV downloads
317
315
- fix: store timestamps locally for local resources ([#6936](https://github.com/dependency-check/DependencyCheck/pull/6936))
318
-
- build: Remove the animal-sniffer, propagate java version to plugin-archetype ([#6950](https://github.com/dependency-check/DependencyCheck/pull/6950))
319
-
- build: Update Checkstyle configuration and Suppression DTD references ([#6951](https://github.com/dependency-check/DependencyCheck/pull/6951))
320
-
- chore: Update test db schema ([#7036](https://github.com/dependency-check/DependencyCheck/pull/7036))
- chore: Replace use of several deprecated methods/classes by their successors ([#6933](https://github.com/dependency-check/DependencyCheck/pull/6933))
321
+
- build: Remove the animal-sniffer, propagate java version to plugin-archetype ([#6950](https://github.com/dependency-check/DependencyCheck/pull/6950))
322
+
- build: Update Checkstyle configuration and Suppression DTD references ([#6951](https://github.com/dependency-check/DependencyCheck/pull/6951))
325
323
326
324
See the full listing of [changes](https://github.com/dependency-check/DependencyCheck/milestone/87?closed=1).
0 commit comments