diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 29ffd15f3f9..c368df2c1fa 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -185,20 +185,17 @@ jobs: prerelease: false draft: false body: | - ### Added - - - `Pipefile.lock` files are now supported ([#5404](https://github.com/jeremylong/DependencyCheck/pull/5404)). - - Python projects with only a `pyproject.toml` but no lock file or requirements will report an error as ODC is unable to analyze the project ([#5409](https://github.com/jeremylong/DependencyCheck/pull/5409)). - ### Fixed - - Some maven projects caused false positives due to bad string interpolation ([#5421](https://github.com/jeremylong/DependencyCheck/pull/5421)). - - Error message from Assembly Analyzer has been updated to emphasize dotnet 6 is required for analysis ([#5408](https://github.com/jeremylong/DependencyCheck/pull/5408)). - - Correct issue where database defrag occurs even when no updates were performed ([#5441](https://github.com/jeremylong/DependencyCheck/pull/5441)). - - Fixed several False Positives and one False Negative. - - Fixed the `format` configuration more flexible in the gradle plugin ([dependency-check-gradle/#324](https://github.com/dependency-check/dependency-check-gradle/pull/324)). + - allow hosted suppressions file to be disabled (#5509) + - Several FPs not suitable for our automation (#5504) + - Fix incorrect defaults for nexus and central-analyzer in gradle plugin documentation (#5503) + - Erroneous error-log for deprecated CLI flag usage when using properyfile based disablement of Node Audit Analyzer (#5487) + - Prefer pom.properties G/A/V over pom.xml G/A/V to resolve GAV interpolation issues (#5473) + - Node package dependencies ending up as related dependency of the wrong version of the package (#5479) + - do not throw error if pyproject.toml is in node_modules (#5470) - See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/60?closed=1). + See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/61?closed=1). - name: Upload CLI id: upload-release-cli diff --git a/CHANGELOG.md b/CHANGELOG.md index 81bb5009f86..c20723683ae 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,19 @@ # Change Log +## [Version 8.1.1](https://github.com/jeremylong/DependencyCheck/releases/tag/v8.1.1) (2023-02-27) + +### Fixed + + - allow hosted suppressions file to be disabled (#5509) + - Several FPs not suitable for our automation (#5504) + - Fix incorrect defaults for nexus and central-analyzer in gradle plugin documentation (#5503) + - Erroneous error-log for deprecated CLI flag usage when using properyfile based disablement of Node Audit Analyzer (#5487) + - Prefer pom.properties G/A/V over pom.xml G/A/V to resolve GAV interpolation issues (#5473) + - Node package dependencies ending up as related dependency of the wrong version of the package (#5479) + - do not throw error if pyproject.toml is in node_modules (#5470) + +See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/61?closed=1). + ## [Version 8.1.0](https://github.com/jeremylong/DependencyCheck/releases/tag/v8.1.0) (2023-01-26) ### Added diff --git a/ant/pom.xml b/ant/pom.xml index bd3f448a529..b91b702b876 100644 --- a/ant/pom.xml +++ b/ant/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.2-SNAPSHOT dependency-check-ant diff --git a/archetype/pom.xml b/archetype/pom.xml index 1aef7512cf1..1e7f0b5fdbb 100644 --- a/archetype/pom.xml +++ b/archetype/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2017 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.2-SNAPSHOT dependency-check-plugin Dependency-Check Plugin Archetype diff --git a/cli/pom.xml b/cli/pom.xml index 3a2825246f5..ef7fb72903d 100644 --- a/cli/pom.xml +++ b/cli/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.2-SNAPSHOT dependency-check-cli diff --git a/core/pom.xml b/core/pom.xml index 570581c5c85..8cc370a9797 100644 --- a/core/pom.xml +++ b/core/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.2-SNAPSHOT dependency-check-core diff --git a/maven/pom.xml b/maven/pom.xml index a68792f7850..67de98f6013 100644 --- a/maven/pom.xml +++ b/maven/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.2-SNAPSHOT dependency-check-maven maven-plugin diff --git a/pom.xml b/pom.xml index 196a556a5d0..a4235ea5b93 100644 --- a/pom.xml +++ b/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 - Jeremy Long org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.2-SNAPSHOT pom diff --git a/utils/pom.xml b/utils/pom.xml index b9a76eadb28..483cbc6df13 100644 --- a/utils/pom.xml +++ b/utils/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2014 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.2-SNAPSHOT dependency-check-utils