Release 0.0.13

What's Changed

• chore: bump to next development version by @soul2zimate in #238
• chore(deps): exclude test manifest dependencies from dependabot update by @soul2zimate in #249
• Dependabot fix by @soul2zimate in #254
• feat: rust analysis support by @soul2zimate in #252
• build: bump various github actions by @soul2zimate in #266
• fix: fix various issues by @soul2zimate in #273
• fix: add missing environment variable to test by @soul2zimate in #274
• build(deps-dev): bump mockito.version from 5.17.0 to 5.21.0 by @dependabot[bot] in #276
• build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin from 3.3.0 to 3.6.2 by @dependabot[bot] in #275
• build(deps-dev): bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.1 to 3.1.4 by @dependabot[bot] in #277
• build(deps-dev): bump org.apache.maven.plugins:maven-release-plugin from 3.0.0 to 3.3.1 by @dependabot[bot] in #279
• build: bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 3.2.1 by @soul2zimate in #280
• build(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot[bot] in #281
• build(deps): bump actions/setup-python from 4 to 6 by @dependabot[bot] in #283
• build(deps): bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 by @dependabot[bot] in #282
• build(deps-dev): bump org.apache.maven.plugins:maven-install-plugin from 3.1.1 to 3.1.4 by @dependabot[bot] in #284
• build(deps): bump peter-evans/create-pull-request from 5 to 8 by @dependabot[bot] in #285
• build(deps): bump org.codehaus.mojo:extra-enforcer-rules from 1.6.2 to 1.11.0 by @dependabot[bot] in #286
• build(deps-dev): bump org.apache.maven.plugins:maven-resources-plugin from 3.3.1 to 3.4.0 by @dependabot[bot] in #287
• build(deps): bump me.fabriciorby:maven-surefire-junit5-tree-reporter from 1.2.1 to 1.5.1 by @dependabot[bot] in #288
• build(deps-dev): bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4 by @dependabot[bot] in #290
• build(deps-dev): bump org.codehaus.mojo:versions-maven-plugin from 2.15.0 to 2.21.0 by @dependabot[bot] in #292
• build(deps): bump com.mycila:license-maven-plugin from 4.1 to 5.0.0 by @dependabot[bot] in #289
• build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin from 0.9.0 to 0.10.0 by @dependabot[bot] in #293
• build(deps-dev): bump org.apache.maven.plugins:maven-clean-plugin from 3.2.0 to 3.5.0 by @dependabot[bot] in #291
• build(deps): bump org.cyclonedx:cyclonedx-core-java from 12.0.1 to 12.1.0 by @dependabot[bot] in #298
• build(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4 by @dependabot[bot] in #297
• build(deps): bump io.github.guacsec:trustify-da-api-model from 2.0.1 to 2.0.4 by @dependabot[bot] in #296
• build(deps): bump jakarta.annotation:jakarta.annotation-api from 2.1.1 to 3.0.0 by @dependabot[bot] in #294
• build(deps): bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.15.0 by @dependabot[bot] in #295
• build(deps-dev): bump org.apache.maven.plugins:maven-site-plugin from 4.0.0-M6 to 4.0.0-M16 by @dependabot[bot] in #301
• build(deps-dev): bump org.apache.maven.plugins:maven-dependency-plugin from 3.6.0 to 3.10.0 by @dependabot[bot] in #302
• build(deps): bump org.pitest:pitest-junit5-plugin from 1.1.2 to 1.2.3 by @dependabot[bot] in #303
• build(deps): bump org.apache.maven.plugins:maven-source-plugin from 3.2.1 to 3.4.0 by @dependabot[bot] in #304
• fix: handle package name format mismatch in dependency ignore logic by @soul2zimate in #310
• fix: fix project layout detection by @soul2zimate in #308
• doc: add missing doc for Rust support by @soul2zimate in #306

New Contributors

• @dependabot[bot] made their first contribution in #276

Full Changelog: v0.0.12...v0.0.13

Release 0.0.12

What's Changed

• chore: bump to next development version by @soul2zimate in #227
• fix: java stack analysis doesn't ignore deps inherited version by @soul2zimate in #234
• fix: fix parsing with indented comments in requirements.txt by @soul2zimate in #236

Full Changelog: v0.0.11...v0.0.12

Release 0.0.11

What's Changed

• chore: bump to next development version by @soul2zimate in #223
• fix: correct go path for commands executed in method getFinalPackagesVersionsForModule by @soul2zimate in #225

Full Changelog: v0.0.10...v0.0.11

Release 0.0.10

What's Changed

• feat: support image scan in cli by @soul2zimate in #214
• chore: bump to next development version by @soul2zimate in #219
• build: component upgrade (cyclonedx-core-java, jakarta.mail and jackson) by @soul2zimate in #220

Full Changelog: v0.0.9...v0.0.10

Release 0.0.9

What's Changed

• chore: components upgrade by @soul2zimate in #180
• build: repository update by @soul2zimate in #181
• fix: docker and podman are optional for image analysis by @soul2zimate in #173
• feat: accept customized Maven user settings file and local repository. by @soul2zimate in #184
• feat!: remove go toolchain from sbom and qualifiers by @ruromero in #191
• feat!: set golang mvs true as default by @ruromero in #188
• chore: update license header by @soul2zimate in #202
• chore: rename trustification references to guacsec by @soul2zimate in #194
• Trustify da ignore main by @soul2zimate in #205
• build: replace secrets.STAGING_PAT and secrets.DEPLOY_KEY with secrets.GITHUB_TOKEN by @soul2zimate in #206
• build: publish to maven central by @soul2zimate in #207
• fix: don't trigger the workflow in pull_request_target and push event by @soul2zimate in #209
• chore: remove exhort_dev_mode and default endpoints and use value from environment variables or arguments by @soul2zimate in #211
• chore: update gpg plugin version by @ruromero in #212
• chore: generate javadocs and sources by @ruromero in #216

Full Changelog: 0.0.8...v0.0.9

0.0.9-SNAPSHOT

What's Changed

• chore: components upgrade by @soul2zimate in #180
• build: repository update by @soul2zimate in #181
• fix: docker and podman are optional for image analysis by @soul2zimate in #173
• feat: accept customized Maven user settings file and local repository. by @soul2zimate in #184
• feat!: remove go toolchain from sbom and qualifiers by @ruromero in #191
• feat!: set golang mvs true as default by @ruromero in #188
• chore: update license header by @soul2zimate in #202
• chore: rename trustification references to guacsec by @soul2zimate in #194
• Trustify da ignore main by @soul2zimate in #205
• build: replace secrets.STAGING_PAT and secrets.DEPLOY_KEY with secrets.GITHUB_TOKEN by @soul2zimate in #206

Full Changelog: 0.0.8...0.0.9-SNAPSHOT

0.0.8

What's Changed

• feat: add java spotless code formatter by @JudeNiroshan in #101
• fix: revive root component in generated sbom for python pip by @JudeNiroshan in #104
• fix: fixes the crash for the deps with no versions and removes duplicates by @olavtar in #105
• feat: introduce new flag to avoid using pip freeze and pip show by @JudeNiroshan in #106
• fix: fixes the version number discrepancy for gradle by @olavtar in #107
• fix: add and fix missing configurations for gradle ca by @zvigrinberg in #108
• fix: bug of ex-client-trace-id not cleared in the end by @zvigrinberg in #109
• build: upgrade upload-artifact v4 by @ruromero in #111
• feat: add gradle kotlin dsl support by @ruromero in #110
• fix: package-json.lock files are generated even if npm is not the package manager by @ruromero in #114
• build: remove autome bot by @ruromero in #117
• chore: test LTS Java versions by @ruromero in #115
• refactor: use exhort-api-spec by @ruromero in #119
• fix: typo in method signature by @ruromero in #120
• fix: validate if npm has lock file by @ruromero in #121
• fix: make_latest must be a string by @ruromero in #122
• feat: add support for pnpm by @ruromero in #126
• feat: add support for yarn by @ruromero in #127
• doc: amend yarn processor comments by @ruromero in #128
• feat: support configure a proxy url for external requests by @soul2zimate in #131
• fix: fix incorrect pathEnv() implementation in JavaScriptProvider subclass by @soul2zimate in #133
• fix: validate executable binary in the path before running the analysis. by @soul2zimate in #134
• fix: missing placeholder %s in String.format by @soul2zimate in #135
• fix: add necessary envs (if has) to validate executable binary in the PATH by @soul2zimate in #137
• fix: problem with gradle version resolution by @soul2zimate in #141
• chore: code cleanup, remove redundant and obsolete codes and simplify some method calls. by @soul2zimate in #142
• fix: yarn classic was adding an invalid @ to the version by @ruromero in #146
• feat: support configuring maven wrapper by @soul2zimate in #147
• chore: update python test dependency immutables to be compitable with higher version python by @soul2zimate in #152
• feat: add cli entrypoint and fat jar to use standalone by @ruromero in #149
• fix: prefer stdout by @ruromero in #157
• fix: use same summary format as in js by @ruromero in #156
• fix: mvn binary in windows by @ruromero in #159
• fix: js related binaries by @ruromero in #161
• fix: lineSeparator does not return a value by @ruromero in #163
• fix: manifest dir as working directory by @ruromero in #165
• fix: use generic line separator by @ruromero in #169
• fix: parse go env in json format by @ruromero in #167
• Add integration tests workflow by @ruromero in #151
• chore: Upgrade jackson and jakarta.mail versions by @soul2zimate in #171
• fix: update for logging by @soul2zimate in #176
• fix: TC-2773 Do not collect indirect dependencies inside dependencyManagement and plugins by @soul2zimate in #177
• chore: prepare release 0.0.8 by @ruromero in #178

New Contributors

• @JudeNiroshan made their first contribution in #101
• @soul2zimate made their first contribution in #131

Full Changelog: v0.0.7...0.0.8

0.0.8-SNAPSHOT

What's Changed

• feat: add java spotless code formatter by @JudeNiroshan in #101
• fix: revive root component in generated sbom for python pip by @JudeNiroshan in #104
• fix: fixes the crash for the deps with no versions and removes duplicates by @olavtar in #105
• feat: introduce new flag to avoid using pip freeze and pip show by @JudeNiroshan in #106
• fix: fixes the version number discrepancy for gradle by @olavtar in #107
• fix: add and fix missing configurations for gradle ca by @zvigrinberg in #108
• fix: bug of ex-client-trace-id not cleared in the end by @zvigrinberg in #109
• build: upgrade upload-artifact v4 by @ruromero in #111
• feat: add gradle kotlin dsl support by @ruromero in #110
• fix: package-json.lock files are generated even if npm is not the package manager by @ruromero in #114
• build: remove autome bot by @ruromero in #117
• chore: test LTS Java versions by @ruromero in #115
• refactor: use exhort-api-spec by @ruromero in #119
• fix: typo in method signature by @ruromero in #120
• fix: validate if npm has lock file by @ruromero in #121
• fix: make_latest must be a string by @ruromero in #122
• feat: add support for pnpm by @ruromero in #126
• feat: add support for yarn by @ruromero in #127
• doc: amend yarn processor comments by @ruromero in #128
• feat: support configure a proxy url for external requests by @soul2zimate in #131
• fix: fix incorrect pathEnv() implementation in JavaScriptProvider subclass by @soul2zimate in #133
• fix: validate executable binary in the path before running the analysis. by @soul2zimate in #134
• fix: missing placeholder %s in String.format by @soul2zimate in #135
• fix: add necessary envs (if has) to validate executable binary in the PATH by @soul2zimate in #137
• fix: problem with gradle version resolution by @soul2zimate in #141
• chore: code cleanup, remove redundant and obsolete codes and simplify some method calls. by @soul2zimate in #142
• fix: yarn classic was adding an invalid @ to the version by @ruromero in #146
• feat: support configuring maven wrapper by @soul2zimate in #147
• chore: update python test dependency immutables to be compitable with higher version python by @soul2zimate in #152
• feat: add cli entrypoint and fat jar to use standalone by @ruromero in #149
• fix: prefer stdout by @ruromero in #157
• fix: use same summary format as in js by @ruromero in #156
• fix: mvn binary in windows by @ruromero in #159
• fix: js related binaries by @ruromero in #161
• fix: lineSeparator does not return a value by @ruromero in #163
• fix: manifest dir as working directory by @ruromero in #165
• fix: use generic line separator by @ruromero in #169
• fix: parse go env in json format by @ruromero in #167
• Add integration tests workflow by @ruromero in #151
• chore: Upgrade jackson and jakarta.mail versions by @soul2zimate in #171
• fix: update for logging by @soul2zimate in #176
• fix: TC-2773 Do not collect indirect dependencies inside dependencyManagement and plugins by @soul2zimate in #177

New Contributors

• @JudeNiroshan made their first contribution in #101
• @soul2zimate made their first contribution in #131

Full Changelog: 0.0.7...0.0.8-SNAPSHOT

0.0.7

What's Changed

• test: remove snyk from integration tests by @zvigrinberg in #97
• ci: enable releasing from forks repositories by @zvigrinberg in #98
• feat: support analyzing images by @xieshenzh in #96
• fix: logs should only printed in EXHORT_DEBUG=true by @zvigrinberg in #100
• feat: added support for gradle by @olavtar in #99
• fix: fixed the duplicates in gradle stack analysis by @olavtar in #103

New Contributors

• @olavtar made their first contribution in #99

Full Changelog: v0.0.6...0.0.7

0.0.7-SNAPSHOT

What's Changed

• test: remove snyk from integration tests by @zvigrinberg in #97
• ci: enable releasing from forks repositories by @zvigrinberg in #98
• feat: support analyzing images by @xieshenzh in #96
• fix: logs should only printed in EXHORT_DEBUG=true by @zvigrinberg in #100
• feat: added support for gradle by @olavtar in #99
• fix: fixed the duplicates in gradle stack analysis by @olavtar in #103

New Contributors

• @olavtar made their first contribution in #99

Full Changelog: 0.0.6...0.0.7-SNAPSHOT