Skip to content

feat: add create_dependencies option to all import forms#540

Merged
tdruez merged 4 commits into
mainfrom
create-depedencies-import
Jun 8, 2026
Merged

feat: add create_dependencies option to all import forms#540
tdruez merged 4 commits into
mainfrom
create-depedencies-import

Conversation

@tdruez

@tdruez tdruez commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

Add a create_dependencies boolean field (default: False) to all product import forms (ImportFromScanForm, PullProjectDataForm, LoadSBOMsForm, ImportManifestsForm) so users must explicitly opt in to importing dependency
relationships.

tdruez added 4 commits June 8, 2026 10:13
Signed-off-by: tdruez <tdruez@aboutcode.org>
Signed-off-by: tdruez <tdruez@aboutcode.org>
Signed-off-by: tdruez <tdruez@aboutcode.org>
Signed-off-by: tdruez <tdruez@aboutcode.org>
@tdruez tdruez merged commit c338408 into main Jun 8, 2026
8 checks passed
@tdruez tdruez deleted the create-depedencies-import branch June 8, 2026 09:43
@rogu-beta

Copy link
Copy Markdown
Contributor

@tdruez Is there a particular reason why this is suddenly being disable by default? This is a breaking change for us and I need to patch this to enable it by default.

@tdruez

tdruez commented Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

@rogu-beta Thanks for reporting, I'll push a fix today.

@rogu-beta

Copy link
Copy Markdown
Contributor

@tdruez Take your time, we are not in a hurry. I've already patched our fork. I was mostly asking to understand why this change was made.

@tdruez

tdruez commented Jun 18, 2026

Copy link
Copy Markdown
Contributor Author

@rogu-beta Importing dependencies by default was problematic for large scans containing hundreds of thousands of dependencies, which were blocking the package import entirely.

Reverted to an opt-in checkbox (unchecked by default) and introduced a CREATE_DEPENDENCIES_DEFAULT setting to configure the default value per instance.

Fixed in #546

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants