Bump version and update CHANGELOG

Signed-off-by: Philippe Ombredanne <[email protected]>

Author: pombredanne

CHANGELOG.rst

@@ -23,10 +23,40 @@ Breaking API changes:
    that contains each package instace that can be aggregating data from
    multiple manifests for a single package instance.
 
+Ouputs:
+~~~~~~~
+
+ - Add new YAML-formatted output. This is exactly the same data structure as for
+   the JSON output
 
-v21.6.6
+
+v21.6.7
 --------
 
+This is a major new release with important security and bug fixes, as well as
+significant improvement in license detection.
+
+
+Many thanks to every contributors that made this possible and in particular:
+
+- Akanksha Garg @akugarg
+- Ayan Sinha Mahapatra @AyanSinhaMahapatra
+- Dennis Clark @DennisClark
+- François Granade @farialima
+- Hanna Modica @hanna-modica
+- Jelmer Vernooij @jelmer
+- Jono Yang @JonoYang
+- Konrad Weihmann @priv-kweihmann
+- Philippe Ombredanne @pombredanne
+- Pierre Tardy @tardyp
+- Sarita Singh @itssingh
+- Sebastian Thomas @sebathomas
+- Steven Esser @majurg
+- Till Jaeger @LeChasseur 
+- Thomas Druez @tdruez
+
+
+
 Breaking API changes:
 ~~~~~~~~~~~~~~~~~~~~~
 
@@ -41,7 +71,7 @@ Security updates:
 ~~~~~~~~~~~~~~~~~
 
  - Update minimum versions and pinned version of thirdparty dependencies
-   to benefit from latest improvements and sceurity fixes. This includes in
+   to benefit from latest improvements and security fixes. This includes in
    particular this issues:
 
      - pkg:pypi/pygments: (low severity, limited impact) CVE-2021-20270, CVE-2021-27291
@@ -55,23 +85,58 @@ Security updates:
 Ouputs:
 ~~~~~~~
 
- - Add new YAML-formatted output. This is exactly the same data structure as for
-   the JSON output
  - The JSON output packages section has a new "extra_data" attributes which is
    a JSON object that can contain arbitrary data that are specific to a package
    type.
 
 
-License scanning:
+License detection:
 ~~~~~~~~~~~~~~~~~
 
- - Add new command line option to filter ignorable copyrights when included
-   in licenses.
+ - The SPDX license list has been update to 3.13
 
- - Add new and improved license detection rules.
-   Thank you to:
-    - Sebastian Thomas @sebathomas
-    - Till Jaeger @LeChasseur 
+ - Add 42 new and updated 45 existing licenses.
+
+ - Over 14,300 new and improved license detection rules have been added. A large
+   number of these (~13,400) are to avoid false positive detections.
+
+
+Copyright detection:
+~~~~~~~~~~~~~~~~~~~~
+
+ - Improved speed and fixed some timeout issues. Fixed minor misc. bugs.
+
+ - Allow calling copyright detection from text lines to ease integration
+
+
+Package detection:
+~~~~~~~~~~~~~~~~~~
+
+ - A new "extra_data" dictiuonary is now part of the "packages" data in the
+   returned JSON. This is used to store arbitrary type-specific data that do
+   cannot be fit in the Package data structure.
+
+ - The Debian copyright files license detection has been reworked and
+   significantly improved.
+
+ - The PyPI package detection and manifest parsing has been reworked and
+   significantly improved.
+   
+ - The detection of Windows executables and DLLs metadata has been enabled.
+   These metadata are returned as packages.
+
+
+Other:
+~~~~~~~
+ - Most third-party libraries have been updated to their newer versions. Some
+   dependency constraints have been relaxed to help some usage as a library.
+
+ - The on-commit CI tests now validate that we can install from PyPI without
+   problem.
+
+ - Fix several installation issues.
+
+ - Add new function to detect copyrights from lines.
 
 
 
@@ -126,9 +191,6 @@ Copyright scanning:
  - Fix bug when using the --filter-clues command line option
    Thank you to Van Lindberg @VanL
 
- - Allow calling copyright detection from text lines to ease integration
-   Thank you to Jelmer Vernooij @jelmer
-
  - Fixed copyright truncation bug
    Thank you to Akanksha Garg @akugarg
 

setup-mini.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = scancode-toolkit-mini
-version = 21.6.2
+version = 21.6.7
 license = Apache-2.0 AND CC-BY-4.0 AND LicenseRef-scancode-other-permissive AND LicenseRef-scancode-other-copyleft
 
 description = ScanCode is a tool to scan code for license, copyright, package and their documented dependencies and other interesting facts. scancode-toolkit-mini is a special build that does not come with pre-built binary dependencies by default. These are instead installed separately or with the extra_requires scancode-toolkit-mini[full]

setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = scancode-toolkit
-version = 21.6.2
+version = 21.6.7
 license = Apache-2.0 AND CC-BY-4.0 AND LicenseRef-scancode-other-permissive AND LicenseRef-scancode-other-copyleft
 
 description = ScanCode is a tool to scan code for license, copyright, package and their documented dependencies and other interesting facts.

src/scancode_config.py

@@ -74,7 +74,7 @@ def _create_dir(location):
 
 # in case package is not installed or we do not have setutools/pkg_resources
 # on hand fall back to this version
-__version__ = '21.6.2'
+__version__ = '21.6.7'
 try:
     from pkg_resources import get_distribution, DistributionNotFound
     try: