0.2.0

0.2.0 (October 7th, 2020)

• enhancement - Integration of user management to connect Snyk account with Dependency Analytics report, which enables advance vulnerability analysis for publicly known exploits and Snyk curated unique and pre-published security advisories.
• enhancement - Add shortcut icon for Dependency Analytics Report in editor groups. See #418
• enhancement - Use webpack to reduce extension loading time. See #359
• enhancement - Updated fabric8-analytics-lsp-server to latest version (v0.3.2): See #420
  • Using component-analysis batch API with POST request method. See #125
  • Update Diagnostic Message. See #146
  • Show exploitable vulnerability count in Diagnostic Message. See #137
• enhancement - Upadated Stack Report UI:
  • Snyk token submission modal to connect Snyk account with Dependency Analytics Report. See #161
  • View premium fields after connecting Snyk account with Dependency Analytics Report. See #157
  • Remove Github stats and Licenses details from Security Issues card. See #166
• fixes - Can not navigate to Synk: Added postMessage to handle url click. See #403
• fixes - Rename notification button with 'Click here for Detailed Vulnerability Report'. See #423
• fixes - Update tags for extension to enable better prioritization in marketplace search. See #427

0.1.0

0.1.0 (July 14th, 2020)

• enhancement - Integration with Snyk Intel Vulnerability DB, it is the most advanced and accurate open source vulnerability database in the industry. That adds value with the latest, fastest and more number of vulnerabilities derived from numerous sources and also includes Snyk curated unique and pre-published security advisories that come with early stage of vulnerability detection.
• enhancement - Updated fabric8-analytics-lsp-server to latest version (v0.2.1): See #381
  • Different Underline color scheme for commonly known vulnerabilities and vulnerability unique to snyk. See #118
  • Updated Diagnostic Message: See #118
    • Number of Known Security Vulnerabilities and Security Advisories for each dependency.
    • Highest Severity of vulnerabilities for each affected Dependency. (Low/Medium/High/Critical)
    • Recommended version for dependencies having Known Security Vulnerabilities.
    • Added Snyk attribution “Powered by Snyk” in the source of the Diagnostic. See #121
    • Removed CVE-IDs from message.
• enhancement - Upadated Stack Report UI: See #142
  • Updated Security Issue Card content: See #142
    • New headers for Security Issue.
    • Added Transitives as a sub-tab in the particular Direct Dependency.
    • Separate tabs for Commonly Known Vulnerabilities and Vulnerabilities Unique to Snyk.
    • Added Snyk Vulnerability ID in place of CVE-ID.
    • Added Vulnerability Titles with Severity (Low/Medium/High/Critical) and removed Tags.
    • Added hyperlink to package name, Snyk Vulnerability ID, and Vulnerability Titles.
  • Dependency Details card rearranged in order of preference.
  • Attribution to Snyk “Powered by Snyk” with a Sign UP/Sign In Hyperlink to Snyk Login page.
• fixes - Upgraded typescript to fix tsc-watch misbehave. See #373
• fixes - Upgraded node version to 14.x LTS. See #377
• fixes - Quick fixes on hover don't show associated code actions however click on version does. See #297
• fixes - A direct dependency included in manifest should not be shown as transitive dependency. See #337
• fixes - CVE IDs should be hyperlinks to NVD. See #318
• fixes - Visual artifact seen after taking corrective action from lsp. See #357
• fixes - Opening manifest file does not show the scanned results. See #365

0.0.13

0.0.13 (September 12th, 2019)

• enhancement - Add python support. See #308
• enhancement - Enable transitive(indirect) dependency report by default. See #330
• enhancement - Show welcome message after upgrading to latest version. See #334
• enhancement - Resolved dependencies are stored in target in workspace root. See #302
• fixes - Dependency Analytics Report not generated if triggered via file explorer. See #299
• fixes - Stop polling for stack-report if it takes any longer than 120 secs. See #304 #338 #352
• fixes - Issue with running manifest file without having a workspace. See #314

2019.9.5

2019.9.5 (Sep 5th, 2019)

• enhancement - Show welcome message after upgrading to latest version. See [#334]
• bug - Fix stack report polling frequency and duration. See [#338]

2019.8.23

2019.8.23 (Aug 23th, 2019)

• bug - Enable transitive dependency report by default. See [#330]
• bug - Generate dependency graph only if pip install completes without error. See [#333]

2019.8.16

2019.8.16 (Aug 16th, 2019)

• bug - fixes issue with running manifest file without having a workspace. See [#314]
• enhancement - updates python support. See [#308]
• bug - Use fabric8-analytics-lsp-server 0.1.56. See [#325]

0.0.12

0.0.12 (April 25th, 2019)

• enhancement - Replace priview-html with VSCode webView APIs. See #257
• enhancement - Shows error(STDOUT/ERR) in output channel. See #284
• enhancement - Support for Eclipse che/theia.
• enhancement - codeAction returns command which does seems to be supported by all LSP implementations. See #95
• fixes - Issue with Dependency analytics report, if triggered via file explorer. #279
• fixes - Unable to update dependency version. See #274
• fixes - Unable to generate stack report for Maven pom.xml. See #272
• fixes - Experiencing 504 Gateway Time-out for component-analyses. See #270
• fixes - Switching to report page is slow. See #89
• fixes - Generate application stack report for manifest file is throwing unable to parse error for package.json. See #216
• fixes - Recommended version shown in component analyses and stack analyses are not Same. See #292
• improvements - Improved latency numbers to analyze your application dependencies.
• improvements - Optimized resolving application dependencies.