63 lines (51 loc) · 1.84 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.6.0] - 2025-03-02

Changed

Added Supplier, Dependency Relationship and Velnerability details

[1.5.0] - 2025-06-20

Changed

Optimized CycloneDX report to run independently using CodeInsight Database using data directly from DB calls rather than Codeinsight REST API's
Refer Updated README.md file for using cammand line utitlity

[1.4.2] - 2025-04-03

Changed

Updated CycloneDX report json version compliant to 1.6.x

[1.4.1] - 2024-11-05

Changed

Enhanced the VEX report to retrieve annotated vulnerability analysis data for inventory, including all suppressed vulnerabilities.

[1.4.0] - 2024-10-18

Changed

Enhanced VEX report to retrieve annotated vulnerability analysis data.

[1.3.1] - 2023-10-16

Changed

Update common submodule to prep for tomcat upgrade in 2023R4

[1.3.0] - 2023-09-07

Changed

Using common 3.6.8 env/requirements
Use common module for API and branding etc

Fixed

Resove issue with SPDX license mapping
Improved logging
unicode cleanup for description

Added

Validated with cyclonedx-cli v 0.24.2

[1.2.0] - 2023-03-21

Fixed

Handle failure in purl creation gracefully (custom components will probably be skipped)
Standardized registration logic

Added

Added support for VRD and VEX options vs just auto creating

[1.1.1] - 2022-10-04

Fixed

Updates for validation passing
common requirements venv for all reports

[1.1.0] - 2022-06-09

Added

Support for project level custom fields
Add purls
Add license url

[1.0.2] - 2022-05-18

Added

Initial internal release of CycloneDX Report