v7.5.0

Changed

• version and purl fields in components list are now optional in CycloneDX SBOMs

v7.4.0

Added

• Nix store access to the default sandbox
• Mac OS's Library/Java/JavaVirtualMachines paths to the dependency parsing sandbox

Fixed

• Unclear error when running phylum init with an invalid organization

v7.3.0

Added

• phylum exception subcommand for managing suppressions

Fixed

• msbuild lockfile parser allowing missing names and versions

v7.2.0

Added

• Support for C#'s packages.*.config lockfile type
• phylum firewall log command to browse firewall activity log

Changed

• Certificate check option name doesn't match configuration option

Fixed

• Gradle manifests incorrectly retained on Windows

v7.1.5

Fixed

• pnpm version 5 parser including metadata in package versions
• Platform-specific dependencies ignored by the Gemfile.lock parser

v7.1.4

CLI

Fixed

• pip parser failing with whitespace around == in requirement specifier

Extensions API

Fixed

• Add missing organization parameters to global Phylum object endpoints

v7.1.4-rc1

Fixed

• pip parser failing with whitespace around == in requirement specifier

v7.1.3

Fixed

• phylum package showing complete packages as analysis failures

v7.1.2

Fixed

• phylum package subcommand showing unprocessed packages as complete
• Packages which cannot be analyzed showing up as having no issues

v7.1.1

Changed

• Use suppression_reason instead of deprecated suppressed field

Fixed

• Package subcommand failing to parse API responses