Early-Access

What's Changed

• chore: prepare next development version by @ruromero in #252
• feat: add license compatibility checking and mismatch detection by @soul2zimate in #243
• fix(gradle): replace internal IElementType.getDebugName() with direct type equality by @ruromero in #254
• fix(maven): replace internal MavenGeneralSettings.getLocalRepository() API by @ruromero in #255
• feat(pypi): add pyproject.toml support to IntelliJ plugin by @ruromero in #244
• feat(batch): add batch workspace analysis action and settings UI by @a-oren in #253
• feat(python): add uv path settings and bump java client (TC-3860) by @a-oren in #257
• feat: add Generate SBOM action to IntelliJ plugin by @a-oren in #258
• feat: read provider-level recommendations in IntelliJ plugin (TC-4696) by @a-oren in #259
• feat: add unknown severity handling to DockerfileAnnotator (TC-4728) by @a-oren in #260
• feat: add hardened image recommendations to DockerfileAnnotator (TC-4811) by @a-oren in #261
• fix: deduplicate hardened image recommendations in DockerfileAnnotator (TC-4934) by @a-oren in #263

New Contributors

• @a-oren made their first contribution in #253

Full Changelog: 1.3.0...early-access

1.3.1

Bug Fixes

• Replace internal IElementType.getDebugName() with direct type equality (#254) link
• Replace internal MavenGeneralSettings.getLocalRepository() API (#255) link

Other

• Prepare release 1.3.1 link

1.3.0

Features

• Allow user to define a local path to save analytics report (#242) link
• Rust Cargo support (#241) link

Bug Fixes

• Prevent IDE freeze and threading violations in Stack Analysis and Component Analysis (#245) link
• Show warning notification instead of silently failing when report save directory is invalid (#247) link
• Ensure Dockerfile analysis works in IntelliJ 2026.1 with bundled TextMate Docker grammar (#249) link

Builds

• Upgrade trustify-da-java-client to 0.0.13 (#239) link
• Upgrade trustify-da-java-client to 0.0.15 (#250) link

Other

• Bump to next development version 1.3.0 (#238) link
• Update change notes (#246) link
• Prepare release 1.3.0 (#251) link

1.2.0

Features

• Add support for user-configurable patterns/globs for excluding manifests from Component Analysis link
• Add feature descritpion and examples to README.md and plugin.xml link
• Retrieve IDE maven user settings file and local repository. (#220) link
• Go Plugin dependency removal (#216) link
• Docker plugin dependency removal. (#222) link
• Update to trustify-da link

Bug Fixes

• Fix deprecated API warning from FileChooserDescriptorFactory. Replace with modern API. (#201) link
• Step "Check for changes since last nightly" needs to run before "Determine version and channel" link
• Avoid Avoid expanding secrets in a run block check failure in SonarCloud Code Analysis link
• Make the action only runs on the redhat-developer/intellij-dependency-analytics repository link
• Ensure step Verify ZIP file exists only runs when there's actually something to verify link
• Return a new list to allow ExcludeManifestIntentionAction adds elements afterwards link
• IntelliJ platform version range for plugin verification (#221) link
• Fix in Go annotator for single-line require and replace (#227) link
• Resize images (#228) link
• Add back exhortignore to for backward compatibility and set required TRUSTIFY_DA_BACKEND_URL before creating ExhortApi instance link
• Fix NPE when issue.getRemediation() return null link
• Eliminate duplicate vulnerability annotations in CAAnnotator link
• Ensure plugin.xml explicitly declares a dependency on the JSON module which is required at runtime (#232) link
• Allow Inline Vulnerability Severity Alerts level change in Dockerfile (#235) link

Documentation

• Update change-notes link

Builds

• Rename plugin files to include short commit ID (#229) link
• Upgrade trustify-da-api-spec 2.0.1 and trustify-da-java-client 0.0.9 link
• Upgrade trustify-da-java-client to 0.0.11 and trustify-da-api-spec to 2.0.2 link
• Upgrade trustify-da-java-client to 0.0.12 (#236) link

Other

• Bump to next development version 1.2.0 link
• Publish plugin upon release creation or publication link
• Add some validations and logging information link
• Remove unused code link
• Update var names and add missing docs (#223) link
• Update change notes (#226) link
• Add RHTPA integration note to release notes (#230) link
• Prepare 1.2.0 (#237) link

1.1.0

Features

• Added recommendation acceptance tracking link
• Add gradle support link
• Support idea IJ 2024.1.x link
• Upgrade ideaVersion to 2024.2 and make necessary updates. (#168) link
• Support http proxy (#179) link
• Add support for pnpm package manager (#180) link
• Add support for yarn package manager (#181) link
• Add action group ID to comply Dynamic Plugin restrictions to avoid restart after plugin installation. (#192) link
• Enable using the Maven Wrapper (mvnw) (#198) link

Bug Fixes

• Gradle - add action to insert Redhat GA Maven Repository to build.gradle manifest link
• TC-1631 link
• Bug of exception in components analysis link
• Remove unwanted logs(#163) link
• Add more possibilities to lexer and grammar of build.gradle groovy dsl language (#162) link
• Fix incorrect link of ubi-9 container image link
• Delete recursively temp directory after component analysis link
• Remove duplicate CA files for PNPM and Yarn providers (#187) link
• Correct exhortApi.componentAnalysis call parameter (#189) link
• TC-1631 Explicitly synchronize PSI file cached document content and disk file content to avoid analysis happens before changes is saved to disk. (#197) link
• Clarify IntelliJ Ultimate Edition requirment for Golang projects. (#195) link
• Allow Inline Vulnerability Severity Alerts level change. (#204) link
• TC-2796 add more standard configuration names to lexer and grammar of build.gradle (#206) link
• Unable to detect workflow_dispatch (#211) link
• Trigger manual wf missing build (#212) link
• Format issue link
• Token usage link

Documentation

• Add documentation for gradle link
• Add documentation for gradle (#165) link
• Correct docs for dockerfile scanning (#157) link
• Update readme and change-notes. (#202) link

Refactoring

• Use exhort-api-spec (#174) link

Builds

• Bump actions to latest versions (#172) link

Other

• Bump development version to 1.1.0-SNAPSHOT link
• Change the idea version since-build property to 223.0 link
• Save backup job configuration in xml due to jenkins studio decommissioning link
• Bump changelog version to 0.0.12 (#151) link
• Update .gitignore (#178) link
• Code cleanup, remove redundant and obsolete codes and simplify some method calls. (#190) link
• Upgrade gradle wrapper to 8.5 link
• Upgrade Gradle IntelliJ Plugin to 2.x link
• Update Plugin verification and enable gradle caching for build link
• Remove redundant validate step, Upgrade plugins to compatible versions and suppress one plugin descriptor error since the plugin was previously uploaded to the JetBrains Marketplace link
• Update idea-version version link
• Upgrade exhort-java-api to 0.0.8 (#205) link
• Update deprecated feature and target file name (#207) link
• Migrate jenkins to github workflow (#208) link
• Fix token usage and publish nightly if there are changes (#209) link
• Format nightly using the date as suffix (#210) link
• Prepare 1.1.0 (#213) link

1.0.0

Features

• Support dockerfile base image vulnerability scan (#150) link

Bug Fixes

• Add error annotation and link to DA link
• Python MATCH_MANIFEST_VERSIONS unchecked-->false link
• Requirements plugin issue link

Other

• Bump development version to 0.9.1-SNAPSHOT link
• Bump exhort-java-api version to 0.0.6-SNAPSHOT link
• Bump redhat intellij telemetry plugin version link

0.9.0

Features

• Supporting scanning go.mod (#134) link
• Support requirements.txt (#136) link
• Set rhda_token, rhda_source, MATCH_MANIFEST_VERSIONS and EXHORT_PYTHON_VIRTUAL_ENV for exhort api calls (#135) link
• Support multi-source link
• Add oss-index provider/source support link
• Add quickfix with RH TC recommendation/remediation link
• Add CAUpdateManifestIntentionAction mechanism to add an updateManifest annotation link

Bug Fixes

• Python dependency name mismatch (#141) link
• Perform stack analysis asynchronously to avoid UI freezing (#139) link
• Point to exhort backend PROD again link
• Artifact' quickfix should be highlighted with different color link

Documentation

• Update plugin.xml with release 0.9.0' change-notes link

Builds

• Add xieshenzh as jenkins release approver (#132) link
• Update username in Jenkinsfile (#140) link

Other

• Bump development version to 0.7.1-SNAPSHOT (#133) link
• Update docs (#137) link
• Adding backstage configuration catalog-info.yaml (#142) link
• Bump exhort-java-api' version to 0.0.4-SNAPSHOT link
• Bump plugin version to 0.9.0-SNAPSHOT link
• Bump exhort-java-api to version 0.0.5-SNAPSHOT link

0.7.0

Features

• Use new backend for java pom manifests stack analysis (#118) link
• Moving stack analysis for npm package manager to be used by new exhort java api (#126) link
• Adjust component analysis for java-api (#128) link

Bug Fixes

• Crda api break function name (#123) link

Builds

• Add zgrinber as jenkins release approver (#124) link
• Add vbelouso as jenkins release approver (#127) link

Other

• Bump development version to 0.7.0-SNAPSHOT (#115) link
• Set gradle to always update snapshots version when building (#120) link
• Correct the docs (#129) link
• Release Intelli-J dependency analytics version 0.7.0 (#130) link

0.6.0

Bug Fixes

• Version 2022.3 breaks by marking PreloadingActivity for internal usage (#107) link

Builds

• Bump intellij plugin from 1.9.0 to 1.13.2 (#96) link
• Bump org.kohshuke.github-api from 1.306 to 1.314 (#104) link
• Bump java version from 1.8 to 11 (#98) link
• Add latest IJ workflow (#108) link
• Pin lsp4intellij to version 0.95.0 (#106) link

Other

• Pin 3rd-party actions to SHA1 (#90) link
• Bump telemetry plugin dependency to 0.0.3.33 (#102) link
• Removed unused source file (#99) link
• Update gradle distribution url from 7.6 to version 8.0.2 (#103) link
• The file field in the storage annotation id depercated, replaced by value (#100) link
• Bump crda cli from 0.2.4 to 0.2.5 (#101) link
• Replace ocp icon with tc one (#114) link

0.5.0

Bug Fixes

• Update com.fasterxml.jackson.core:jackson-databind (#77) link
• Crda not found (#87) link

Builds

• Add IntelliJ 2022.2 (#83) link
• Add IntelliJ 2022.3 (#85) link