v0.11.0

Changelog

• a306042 chore(deps): bump github.com/PuerkitoBio/goquery from 1.9.2 to 1.10.0 (#404)
• 77b5f54 refactor: use std slices, maps package (#403)
• 368d390 build: update go to 1.23 (#402)
• dbdd7b4 feat: select advisories (#396)
• af25e2c feat(fetcher/mitre): fill DataType, DataVersion, affected (#395)
• 400255c feat(db) no progress when --log-json option (#394)
• dbc1681 feat(nvd): support CVSS v4.0 (#393)
• 73f1570 feat(mitre): add new datasource: mitre (#392)
• 6b4e7a7 chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#388)
• ef17bfe chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 (#385)
• 3b597e4 chore(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 (#384)
• c9155df chore(deps): bump github.com/PuerkitoBio/goquery from 1.9.1 to 1.9.2 (#382)
• c0e404f chore(deps): bump requests from 2.31.0 to 2.32.0 in /integration (#383)
• 3225ee6 feat(fetcher/nvd): update reject cve logic (#387)
• a687194 fix(fetch): fix first CVE year (#380)
• d68f2ea feat(commands): add search command (#379)
• 7d9560e feat(db,server): add GetCveIDs (#358)
• 0382630 chore(deps): bump github.com/labstack/echo/v4 from 4.11.4 to 4.12.0 (#378)
• e1c1a94 chore(deps): bump golang.org/x/net from 0.21.0 to 0.23.0 (#377)
• 13d230a fix(fetch/fortinet): collect all CPEs (#374)
• af03be3 chore(deps): bump github.com/PuerkitoBio/goquery from 1.8.1 to 1.9.1 (#367)
• 803cfd8 chore(deps): bump github.com/jackc/pgx/v5 from 5.4.3 to 5.5.4 (#369)
• e629a03 chore(deps): bump gorm.io/driver/postgres from 1.5.4 to 1.5.7 (#368)
• f8d412d chore(deps): bump gorm.io/driver/mysql from 1.5.1 to 1.5.5 (#370)
• 310c515 chore(deps): bump github.com/glebarez/sqlite from 1.10.0 to 1.11.0 (#371)
• f8ffd2c chore(deps): bump github.com/cheggaaa/pb/v3 from 3.1.4 to 3.1.5 (#360)
• 7000242 chore(deps): bump github.com/labstack/echo/v4 from 4.11.3 to 4.11.4 (#354)
• 591cf5c chore(deps): bump github.com/spf13/viper from 1.18.1 to 1.18.2 (#353)
• c5db288 chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#352)

v0.10.1

Changelog

• 38f11ea chore(deps): bump gorm.io/driver/postgres from 1.5.2 to 1.5.4 (#344)
• 4a8e52c chore(deps): bump github.com/spf13/viper from 1.17.0 to 1.18.1 (#350)
• 46054e7 chore(deps): bump github.com/labstack/echo/v4 from 4.11.2 to 4.11.3 (#347)
• a2c4f96 chore(deps): bump github.com/glebarez/sqlite from 1.9.0 to 1.10.0 (#345)
• a8e46a4 chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#346)
• 9dd0d27 feat(nvd): add source, type field (#349)

v0.10.0

Changelog

• 4ffa5ad feat(fetch/nvd): use NVD API feed (#348)
• 12bf39c chore(deps): bump github.com/labstack/echo/v4 from 4.11.1 to 4.11.2 (#342)
• f8db17a chore(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 (#339)
• e16ca17 chore(deps): bump github.com/spf13/viper from 1.16.0 to 1.17.0 (#338)
• 66e5573 chore(command): --without-jvncert flag limited to jvn command (#337)

v0.9.0

Changelog

• 553ed5d feat(fetch-jvn): add without-jvncert option (#335)
• eb8acd8 feat(fortinet): new support for fortinet data feed (#336)

v0.8.5

What's Changed

• chore(deps): bump requests from 2.25.1 to 2.31.0 in /integration by @dependabot in #325
• chore(deps): bump gorm.io/gorm from 1.25.0 to 1.25.2 by @dependabot in #327
• chore(deps): bump github.com/spf13/viper from 1.15.0 to 1.16.0 by @dependabot in #326
• chore(deps): bump github.com/cheggaaa/pb/v3 from 3.1.2 to 3.1.4 by @dependabot in #330
• chore(deps): bump github.com/labstack/echo/v4 from 4.10.2 to 4.11.1 by @dependabot in #329
• feat(ci): add darwin by @MaineK00n in #331

Full Changelog: v0.8.4...v0.8.5

v0.8.4

What's Changed

• chore(deps): bump golang.org/x/text from 0.3.6 to 0.3.8 by @dependabot in #304
• chore(deps): bump golang.org/x/net from 0.0.0-20210405180319-a5a99cb37ef4 to 0.7.0 by @dependabot in #307
• chore(deps): bump github.com/mattn/go-sqlite3 from 1.14.7 to 1.14.16 by @dependabot in #288
• chore(deps): bump github.com/hashicorp/go-version from 1.2.1 to 1.6.0 by @dependabot in #267
• chore(deps): bump golang.org/x/crypto from 0.0.0-20210616213533-5ff15b29337e to 0.1.0 by @dependabot in #308
• chore(deps): bump github.com/spf13/cobra from 1.2.1 to 1.7.0 by @dependabot in #313
• chore(deps): bump gorm.io/gorm from 1.21.11 to 1.25.0 by @dependabot in #311
• chore(deps): bump github.com/inconshreveable/log15 from 0.0.0-20201112154412-8562bdadbbac to 3.0.0-testing.5+incompatible by @dependabot in #316
• chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.15.0 by @dependabot in #317
• chore(deps): bump github.com/cheggaaa/pb/v3 from 3.0.5 to 3.1.2 by @dependabot in #318
• chore(deps): bump github.com/PuerkitoBio/goquery from 1.6.1 to 1.8.1 by @dependabot in #319
• chore(deps): bump github.com/go-redis/redis/v8 from 8.4.11 to 8.11.5 by @dependabot in #315
• chore(deps): use github.com/labstack/echo/v4 by @MaineK00n in #320
• refactor: use pure go sqlite driver by @MaineK00n in #321

New Contributors

• @dependabot made their first contribution in #304

Full Changelog: v0.8.3...v0.8.4

v0.8.3

What's Changed

• fix(ci): add context in docker image build by @MaineK00n in #286
• feat(ci): add windows by @MaineK00n in #302
• fix(ci): remove unnecessary step by @MaineK00n in #303
• feat(ci): test fetch periodically by @MaineK00n in #299

Full Changelog: v0.8.2...v0.8.3

v0.8.2

Changelog

• 4b59b78 fix(cpescan): match if affected version is NA (#283)
• 2c30455 chore: print to stderr (#261)
• a28e7ff support arm64 (#260)
• 221f5bb feat(db): add LastFetchedDate in fetchmeta (#235)
• aa64b3b feat(fetch): fetch by year (#236)
• d8f27a1 fix(redis): pipe cannot take err except for pipe.Exec (#232)
• 9ea45a2 chore(fetch/jvn): logging when invalid CVE-ID is found (#242)
• 473b08f fix(fetcher/jvn): not register invalid CVE-ID (#233)
• 591e34d chore(GHActions): replace with dependabot (#234)
• 8df4f0b chore(linter): change linter from golint to revive (#220)
• 0a854f8 add redis timeout option (#230)
• ec22aa7 fix(cpescan): bug in NvdVendorProductMatch (#228)
• 4d1f7ac breaking-change(redis): deprecated expire option (#225)
• cf3186e refactor(db): return pipeline in Redis GetMulti and do not judge ErrRecordNotFound unnecessarily (#224)
• 28fdbe6 fix(fetch): not to use htcat, use backoff retry, set user-agent as curl (#221)
• d45a5f7 fix(db): change fetchmeta insert order (#223)
• f8fc626 fix(redis): change IsGoCVEDictModelV1 (#222)

v0.8.1

NOTE
In this Release, we are changing the architecture of Redis.

// delete all old key
$ redis-cli keys "CVE#*" | xargs redis-cli del

Changelog

ac5cf33 feat(models): remove FeedMeta (#218)
76e786d fix(fetch-nvd): fix 403 Forbidden (#219)
8a51113 breaking-change(redis): change Redis Architecture (#205)
8933fa6 chore: fix .goreleaser.yml (#217)
947df30 chore: chore: move github.com/kotakanbe to github.com/vulsio (#216)

v0.8.0

Changelog

6c93275 feat: change fetch command (#214)
6992249 fix: If the same affected product deifned in NVD and JVN, ignore JVN (#212)
53194a8 fix: remove duplicate cves (#211)
c737678 feat(cpematch): rpm match if version range defined in NVD is not semver style (#209)