Release v2.0.5 Latest

What's Changed

• chore: add table of contents to README by @KLongmuirHD in #532
• chore: update cdxgen by @KLongmuirHD in #533
• chore: update dependabot config to ignore e2e by @KLongmuirHD in #536
• fix(cli): handle 413 payload-too-large errors for SBOM scans by @facundo-herodevs in #545
• fix: classify CI token refresh communication failures by @facundo-herodevs in #546
• chore(deps): bump @apollo/client from 4.1.3 to 4.1.7 by @dependabot[bot] in #538
• chore(deps-dev): bump @types/debug from 4.1.12 to 4.1.13 by @dependabot[bot] in #539
• chore(deps): bump graphql from 16.12.0 to 16.13.2 by @dependabot[bot] in #542
• chore(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #531
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #524
• chore(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #512
• chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #511
• chore(deps): bump aws-actions/configure-aws-credentials from 5 to 6 by @dependabot[bot] in #472
• chore(deps-dev): bump @oclif/test from 4.1.16 to 4.1.18 by @dependabot[bot] in #543
• chore(deps): bump the npm_and_yarn group across 1 directory with 6 updates by @dependabot[bot] in #548
• chore(deps): bump @amplitude/analytics-node from 1.5.34 to 1.5.54 by @dependabot[bot] in #544
• chore(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #554
• chore(deps): bump ora from 9.1.0 to 9.3.0 by @dependabot[bot] in #553
• chore(deps): bump @oclif/plugin-update from 4.7.18 to 4.7.32 by @dependabot[bot] in #552
• chore(deps-dev): bump @biomejs/biome from 2.3.13 to 2.4.12 by @dependabot[bot] in #551
• chore(deps): bump @oclif/core from 4.9.0 to 4.10.5 by @dependabot[bot] in #550
• chore: release 2.0.5 by @KLongmuirHD in #555

Full Changelog: v2.0.4...v2.0.5

Release v2.0.4 Latest

What's Changed

• feat: skip ci on workflow updates by @KLongmuirHD in #501
• chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #516
• feat(gh): enable Trusted Publisher authentication for NPM publishing by @eduardoRoth in #521
• fix(auth): update code/token generation from CLI and redirect to successful page by @eduardoRoth in #518
• fix: use NES user id for cli amplitude events by @facundo-herodevs in #526
• fix: opt out tracking in e2e programmatically by @KLongmuirHD in #520
• chore(deps): bump biomejs/setup-biome from 2.6.0 to 2.7.1 by @dependabot[bot] in #525
• chore: release 2.0.4 by @eduardoRoth in #529

Full Changelog: v2.0.2...v2.0.4

Release v2.0.3 Latest

What's Changed

• feat: skip ci on workflow updates by @KLongmuirHD in #501
• chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #516
• feat(gh): enable Trusted Publisher authentication for NPM publishing by @eduardoRoth in #521

Full Changelog: v2.0.2...v2.0.3

Release v2.0.2 Latest

What's Changed

• feat: detect and prevent hd update command in npm installation by @KLongmuirHD in #514
• fix: version flag when running with no args by @KLongmuirHD in #513
• chore: release 2.0.2 by @KLongmuirHD in #515

Full Changelog: v2.0.1...v2.0.2

Release v2.0.1 Latest

What's Changed

• fix README typo
• Release 2.0.1 by @KLongmuirHD in #507

Full Changelog: v2.0.0...v2.0.1

Release v2.0.0 Latest

What's Changed

• Full rewrite of the HeroDevs CLI
• New features for authenticated EOL scans, powered by the HeroDevs End-of-Life Dataset

See full changelog comparison for more details

New Contributors

• @github-actions[bot] made their first contribution in #122
• @rlmestre made their first contribution in #160
• @KLongmuirHD made their first contribution in #253
• @sunshastry made their first contribution in #352
• @v3nant made their first contribution in #376
• @facundo-herodevs made their first contribution in #377
• @eduardoRoth made their first contribution in #423
• @dannysauer made their first contribution in #494

Full Changelog: v0.3.1...v2.0.0

Release v2.0.0-beta.18 beta

What's Changed

• fix: removes rs-keyring usage and use encrypted file to store tokens by @sunshastry in #504
• chore: release v2.0.0-beta.18 by @KLongmuirHD in #505

Full Changelog: v2.0.0-beta.17...v2.0.0-beta.18

Release v2.0.0-beta.17 beta

What's Changed

• feat: change default command to help by @KLongmuirHD in #497
• fix: eol shared global install issue by @KLongmuirHD in #499
• fix: revert cdxgen image by @KLongmuirHD in #503
• chore: release 2.0.0-beta.17 by @KLongmuirHD in #500

Full Changelog: v2.0.0-beta.16...v2.0.0-beta.17

Release v2.0.0-beta.16 beta

What's Changed

• fix: user setup uses org token on provision by @v3nant in #495
• chore: release 2.0.0-beta.16 by @v3nant in #496

Full Changelog: v2.0.0-beta.15...v2.0.0-beta.16

Release v2.0.0-beta.15 beta

What's Changed

• feat: add login and logout commands and tie it up with graphql invoca… by @sunshastry in #435
• chore(biome): update schema version by @eduardoRoth in #442
• fix: publish images issue by @KLongmuirHD in #432
• feat(tracker): add run command by @eduardoRoth in #436
• chore(deps-dev): bump @biomejs/biome from 2.3.4 to 2.3.7 by @dependabot[bot] in #427
• chore(deps-dev): bump @types/node from 24.10.0 to 24.10.1 by @dependabot[bot] in #428
• chore(deps-dev): bump @types/sinon from 17.0.4 to 21.0.0 by @dependabot[bot] in #429
• chore(deps): bump @oclif/plugin-update from 4.7.14 to 4.7.16 by @dependabot[bot] in #430
• chore(deps-dev): bump @oclif/test from 4.1.13 to 4.1.15 by @dependabot[bot] in #431
• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #433
• fix: dependabot PRs on e2e and update gitignore by @KLongmuirHD in #445
• chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #444
• chore(deps-dev): bump tsx from 4.20.6 to 4.21.0 by @dependabot[bot] in #448
• chore(deps): bump @inquirer/prompts from 8.0.1 to 8.0.2 by @dependabot[bot] in #449
• chore(deps): bump @amplitude/analytics-node from 1.5.22 to 1.5.26 by @dependabot[bot] in #451
• chore(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in #452
• chore(deps): bump actions/download-artifact from 6 to 7 by @dependabot[bot] in #455
• chore(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #456
• chore: upgrade vitest by @KLongmuirHD in #459
• chore: update dependencies eol-shared by @KLongmuirHD in #460
• feat: add auth error handling by @facundo-herodevs in #461
• feat: add scan origin to report generation by @facundo-herodevs in #465
• fix: adjust broken links by @facundo-herodevs in #466
• chore: update eol-shared version by @facundo-herodevs in #468
• feat: add user setup flow behind feature flag by @facundo-herodevs in #469
• chore: remove auth and user-setup feature flags (always-on) by @facundo-herodevs in #471
• feat: add login success message by @KLongmuirHD in #473
• fix(auth): prevent ERR_SERVER_NOT_RUNNING on magic-link login; harden stopServer by @facundo-herodevs in #474
• fix(analytics): include scan_load_time for failed scan events by @facundo-herodevs in #476
• feat: adds long lived refresh token feature for ci by @v3nant in #475
• feat: adjust CLI messaging in certain error states by @KLongmuirHD in #477
• fix: user setup using wrong token for login and ci provision by @v3nant in #480
• fix: ensuring org user has its own setup configured by @v3nant in #482
• refactor(auth): better UX for OAuth error messages by @facundo-herodevs in #479
• feat(cli): unify Amplitude identify flow and enforce cli event source by @facundo-herodevs in #478
• feat: auth token priority and ux by @v3nant in #483
• moving out iam host to promote federated api by @v3nant in #485
• chore: update dependencies by @KLongmuirHD in #484
• chore: update_cdxgen_docker_version by @KLongmuirHD in #488
• feat: update default oauth client by @KLongmuirHD in #491
• chore: release 2.0.0-beta.15 by @v3nant in #490
• fix: manual release typo on setup-node by @v3nant in #493

Full Changelog: v2.0.0-beta.14...v2.0.0-beta.15