Release 0.0.15

What's Changed

• chore: bump to next development version by @github-actions[bot] in #381
• build(deps): bump jackson.version from 2.21.1 to 2.21.2 by @dependabot[bot] in #357
• fix: read ignore patterns from workspace member Cargo.toml files by @a-oren in #375
• feat: include path dependencies in SBOM with repository_url=local qua… by @a-oren in #384

Full Changelog: v0.0.14...v0.0.15

Release 0.0.14

What's Changed

• chore: bump to next development version by @github-actions[bot] in #313
• build(deps-dev): bump mockito.version from 5.21.0 to 5.22.0 by @dependabot[bot] in #330
• build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #329
• build(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5 by @dependabot[bot] in #327
• build(deps-dev): bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.4 to 3.5.5 by @dependabot[bot] in #326
• build(deps): bump jackson.version from 2.21.0 to 2.21.1 by @dependabot[bot] in #325
• build(deps): bump com.diffplug.spotless:spotless-maven-plugin from 3.2.1 to 3.3.0 by @dependabot[bot] in #334
• fix(deps): remove dependabot ecosystems for test-only fixtures by @soul2zimate in #336
• build(deps-dev): bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 by @dependabot[bot] in #339
• build(deps): bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2 by @dependabot[bot] in #338
• build: bump trustify-da-api-model to 2.0.7 by @soul2zimate in #342
• build(deps-dev): bump mockito.version from 5.22.0 to 5.23.0 by @dependabot[bot] in #345
• fix: handle missing [workspace.dependencies] in virtual workspace component analysis (#344) by @soul2zimate in #346
• build(deps): bump org.pitest:pitest-maven from 1.22.1 to 1.23.0 by @dependabot[bot] in #350
• build(deps): bump org.codehaus.mojo:extra-enforcer-rules from 1.11.0 to 1.12.0 by @dependabot[bot] in #351
• build(deps): bump com.diffplug.spotless:spotless-maven-plugin from 3.3.0 to 3.4.0 by @dependabot[bot] in #353
• feat: implement license resolution and identification by @soul2zimate in #356
• fix: throw error on gradle command failure instead of returning empty… by @a-oren in #362
• feat(python): add pyproject.toml provider support by @ruromero in #358
• feat(python): use pyproject.toml metadata for root SBOM component by @ruromero in #368
• build(deps): bump gradle/actions from 5 to 6 by @dependabot[bot] in #376
• fix: avoid passing empty string argument to skopeo when raw=false by @soul2zimate in #380
• fix(python): avoid FileAlreadyExistsException in venv cleanup by @ruromero in #373

New Contributors

• @github-actions[bot] made their first contribution in #313
• @a-oren made their first contribution in #362

Full Changelog: v0.0.13...v0.0.14

Release 0.0.13

What's Changed

• chore: bump to next development version by @soul2zimate in #238
• chore(deps): exclude test manifest dependencies from dependabot update by @soul2zimate in #249
• Dependabot fix by @soul2zimate in #254
• feat: rust analysis support by @soul2zimate in #252
• build: bump various github actions by @soul2zimate in #266
• fix: fix various issues by @soul2zimate in #273
• fix: add missing environment variable to test by @soul2zimate in #274
• build(deps-dev): bump mockito.version from 5.17.0 to 5.21.0 by @dependabot[bot] in #276
• build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin from 3.3.0 to 3.6.2 by @dependabot[bot] in #275
• build(deps-dev): bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.1 to 3.1.4 by @dependabot[bot] in #277
• build(deps-dev): bump org.apache.maven.plugins:maven-release-plugin from 3.0.0 to 3.3.1 by @dependabot[bot] in #279
• build: bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 3.2.1 by @soul2zimate in #280
• build(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot[bot] in #281
• build(deps): bump actions/setup-python from 4 to 6 by @dependabot[bot] in #283
• build(deps): bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 by @dependabot[bot] in #282
• build(deps-dev): bump org.apache.maven.plugins:maven-install-plugin from 3.1.1 to 3.1.4 by @dependabot[bot] in #284
• build(deps): bump peter-evans/create-pull-request from 5 to 8 by @dependabot[bot] in #285
• build(deps): bump org.codehaus.mojo:extra-enforcer-rules from 1.6.2 to 1.11.0 by @dependabot[bot] in #286
• build(deps-dev): bump org.apache.maven.plugins:maven-resources-plugin from 3.3.1 to 3.4.0 by @dependabot[bot] in #287
• build(deps): bump me.fabriciorby:maven-surefire-junit5-tree-reporter from 1.2.1 to 1.5.1 by @dependabot[bot] in #288
• build(deps-dev): bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4 by @dependabot[bot] in #290
• build(deps-dev): bump org.codehaus.mojo:versions-maven-plugin from 2.15.0 to 2.21.0 by @dependabot[bot] in #292
• build(deps): bump com.mycila:license-maven-plugin from 4.1 to 5.0.0 by @dependabot[bot] in #289
• build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin from 0.9.0 to 0.10.0 by @dependabot[bot] in #293
• build(deps-dev): bump org.apache.maven.plugins:maven-clean-plugin from 3.2.0 to 3.5.0 by @dependabot[bot] in #291
• build(deps): bump org.cyclonedx:cyclonedx-core-java from 12.0.1 to 12.1.0 by @dependabot[bot] in #298
• build(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4 by @dependabot[bot] in #297
• build(deps): bump io.github.guacsec:trustify-da-api-model from 2.0.1 to 2.0.4 by @dependabot[bot] in #296
• build(deps): bump jakarta.annotation:jakarta.annotation-api from 2.1.1 to 3.0.0 by @dependabot[bot] in #294
• build(deps): bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.15.0 by @dependabot[bot] in #295
• build(deps-dev): bump org.apache.maven.plugins:maven-site-plugin from 4.0.0-M6 to 4.0.0-M16 by @dependabot[bot] in #301
• build(deps-dev): bump org.apache.maven.plugins:maven-dependency-plugin from 3.6.0 to 3.10.0 by @dependabot[bot] in #302
• build(deps): bump org.pitest:pitest-junit5-plugin from 1.1.2 to 1.2.3 by @dependabot[bot] in #303
• build(deps): bump org.apache.maven.plugins:maven-source-plugin from 3.2.1 to 3.4.0 by @dependabot[bot] in #304
• fix: handle package name format mismatch in dependency ignore logic by @soul2zimate in #310
• fix: fix project layout detection by @soul2zimate in #308
• doc: add missing doc for Rust support by @soul2zimate in #306

New Contributors

• @dependabot[bot] made their first contribution in #276

Full Changelog: v0.0.12...v0.0.13

Release 0.0.12

What's Changed

• chore: bump to next development version by @soul2zimate in #227
• fix: java stack analysis doesn't ignore deps inherited version by @soul2zimate in #234
• fix: fix parsing with indented comments in requirements.txt by @soul2zimate in #236

Full Changelog: v0.0.11...v0.0.12

Release 0.0.11

What's Changed

• chore: bump to next development version by @soul2zimate in #223
• fix: correct go path for commands executed in method getFinalPackagesVersionsForModule by @soul2zimate in #225

Full Changelog: v0.0.10...v0.0.11

Release 0.0.10

What's Changed

• feat: support image scan in cli by @soul2zimate in #214
• chore: bump to next development version by @soul2zimate in #219
• build: component upgrade (cyclonedx-core-java, jakarta.mail and jackson) by @soul2zimate in #220

Full Changelog: v0.0.9...v0.0.10

Release 0.0.9

What's Changed

• chore: components upgrade by @soul2zimate in #180
• build: repository update by @soul2zimate in #181
• fix: docker and podman are optional for image analysis by @soul2zimate in #173
• feat: accept customized Maven user settings file and local repository. by @soul2zimate in #184
• feat!: remove go toolchain from sbom and qualifiers by @ruromero in #191
• feat!: set golang mvs true as default by @ruromero in #188
• chore: update license header by @soul2zimate in #202
• chore: rename trustification references to guacsec by @soul2zimate in #194
• Trustify da ignore main by @soul2zimate in #205
• build: replace secrets.STAGING_PAT and secrets.DEPLOY_KEY with secrets.GITHUB_TOKEN by @soul2zimate in #206
• build: publish to maven central by @soul2zimate in #207
• fix: don't trigger the workflow in pull_request_target and push event by @soul2zimate in #209
• chore: remove exhort_dev_mode and default endpoints and use value from environment variables or arguments by @soul2zimate in #211
• chore: update gpg plugin version by @ruromero in #212
• chore: generate javadocs and sources by @ruromero in #216

Full Changelog: 0.0.8...v0.0.9

0.0.9-SNAPSHOT

What's Changed

• chore: components upgrade by @soul2zimate in #180
• build: repository update by @soul2zimate in #181
• fix: docker and podman are optional for image analysis by @soul2zimate in #173
• feat: accept customized Maven user settings file and local repository. by @soul2zimate in #184
• feat!: remove go toolchain from sbom and qualifiers by @ruromero in #191
• feat!: set golang mvs true as default by @ruromero in #188
• chore: update license header by @soul2zimate in #202
• chore: rename trustification references to guacsec by @soul2zimate in #194
• Trustify da ignore main by @soul2zimate in #205
• build: replace secrets.STAGING_PAT and secrets.DEPLOY_KEY with secrets.GITHUB_TOKEN by @soul2zimate in #206

Full Changelog: 0.0.8...0.0.9-SNAPSHOT

0.0.8

What's Changed

• feat: add java spotless code formatter by @JudeNiroshan in #101
• fix: revive root component in generated sbom for python pip by @JudeNiroshan in #104
• fix: fixes the crash for the deps with no versions and removes duplicates by @olavtar in #105
• feat: introduce new flag to avoid using pip freeze and pip show by @JudeNiroshan in #106
• fix: fixes the version number discrepancy for gradle by @olavtar in #107
• fix: add and fix missing configurations for gradle ca by @zvigrinberg in #108
• fix: bug of ex-client-trace-id not cleared in the end by @zvigrinberg in #109
• build: upgrade upload-artifact v4 by @ruromero in #111
• feat: add gradle kotlin dsl support by @ruromero in #110
• fix: package-json.lock files are generated even if npm is not the package manager by @ruromero in #114
• build: remove autome bot by @ruromero in #117
• chore: test LTS Java versions by @ruromero in #115
• refactor: use exhort-api-spec by @ruromero in #119
• fix: typo in method signature by @ruromero in #120
• fix: validate if npm has lock file by @ruromero in #121
• fix: make_latest must be a string by @ruromero in #122
• feat: add support for pnpm by @ruromero in #126
• feat: add support for yarn by @ruromero in #127
• doc: amend yarn processor comments by @ruromero in #128
• feat: support configure a proxy url for external requests by @soul2zimate in #131
• fix: fix incorrect pathEnv() implementation in JavaScriptProvider subclass by @soul2zimate in #133
• fix: validate executable binary in the path before running the analysis. by @soul2zimate in #134
• fix: missing placeholder %s in String.format by @soul2zimate in #135
• fix: add necessary envs (if has) to validate executable binary in the PATH by @soul2zimate in #137
• fix: problem with gradle version resolution by @soul2zimate in #141
• chore: code cleanup, remove redundant and obsolete codes and simplify some method calls. by @soul2zimate in #142
• fix: yarn classic was adding an invalid @ to the version by @ruromero in #146
• feat: support configuring maven wrapper by @soul2zimate in #147
• chore: update python test dependency immutables to be compitable with higher version python by @soul2zimate in #152
• feat: add cli entrypoint and fat jar to use standalone by @ruromero in #149
• fix: prefer stdout by @ruromero in #157
• fix: use same summary format as in js by @ruromero in #156
• fix: mvn binary in windows by @ruromero in #159
• fix: js related binaries by @ruromero in #161
• fix: lineSeparator does not return a value by @ruromero in #163
• fix: manifest dir as working directory by @ruromero in #165
• fix: use generic line separator by @ruromero in #169
• fix: parse go env in json format by @ruromero in #167
• Add integration tests workflow by @ruromero in #151
• chore: Upgrade jackson and jakarta.mail versions by @soul2zimate in #171
• fix: update for logging by @soul2zimate in #176
• fix: TC-2773 Do not collect indirect dependencies inside dependencyManagement and plugins by @soul2zimate in #177
• chore: prepare release 0.0.8 by @ruromero in #178

New Contributors

• @JudeNiroshan made their first contribution in #101
• @soul2zimate made their first contribution in #131

Full Changelog: v0.0.7...0.0.8

0.0.8-SNAPSHOT

What's Changed

• feat: add java spotless code formatter by @JudeNiroshan in #101
• fix: revive root component in generated sbom for python pip by @JudeNiroshan in #104
• fix: fixes the crash for the deps with no versions and removes duplicates by @olavtar in #105
• feat: introduce new flag to avoid using pip freeze and pip show by @JudeNiroshan in #106
• fix: fixes the version number discrepancy for gradle by @olavtar in #107
• fix: add and fix missing configurations for gradle ca by @zvigrinberg in #108
• fix: bug of ex-client-trace-id not cleared in the end by @zvigrinberg in #109
• build: upgrade upload-artifact v4 by @ruromero in #111
• feat: add gradle kotlin dsl support by @ruromero in #110
• fix: package-json.lock files are generated even if npm is not the package manager by @ruromero in #114
• build: remove autome bot by @ruromero in #117
• chore: test LTS Java versions by @ruromero in #115
• refactor: use exhort-api-spec by @ruromero in #119
• fix: typo in method signature by @ruromero in #120
• fix: validate if npm has lock file by @ruromero in #121
• fix: make_latest must be a string by @ruromero in #122
• feat: add support for pnpm by @ruromero in #126
• feat: add support for yarn by @ruromero in #127
• doc: amend yarn processor comments by @ruromero in #128
• feat: support configure a proxy url for external requests by @soul2zimate in #131
• fix: fix incorrect pathEnv() implementation in JavaScriptProvider subclass by @soul2zimate in #133
• fix: validate executable binary in the path before running the analysis. by @soul2zimate in #134
• fix: missing placeholder %s in String.format by @soul2zimate in #135
• fix: add necessary envs (if has) to validate executable binary in the PATH by @soul2zimate in #137
• fix: problem with gradle version resolution by @soul2zimate in #141
• chore: code cleanup, remove redundant and obsolete codes and simplify some method calls. by @soul2zimate in #142
• fix: yarn classic was adding an invalid @ to the version by @ruromero in #146
• feat: support configuring maven wrapper by @soul2zimate in #147
• chore: update python test dependency immutables to be compitable with higher version python by @soul2zimate in #152
• feat: add cli entrypoint and fat jar to use standalone by @ruromero in #149
• fix: prefer stdout by @ruromero in #157
• fix: use same summary format as in js by @ruromero in #156
• fix: mvn binary in windows by @ruromero in #159
• fix: js related binaries by @ruromero in #161
• fix: lineSeparator does not return a value by @ruromero in #163
• fix: manifest dir as working directory by @ruromero in #165
• fix: use generic line separator by @ruromero in #169
• fix: parse go env in json format by @ruromero in #167
• Add integration tests workflow by @ruromero in #151
• chore: Upgrade jackson and jakarta.mail versions by @soul2zimate in #171
• fix: update for logging by @soul2zimate in #176
• fix: TC-2773 Do not collect indirect dependencies inside dependencyManagement and plugins by @soul2zimate in #177

New Contributors

• @JudeNiroshan made their first contribution in #101
• @soul2zimate made their first contribution in #131

Full Changelog: 0.0.7...0.0.8-SNAPSHOT