From 3999033a7ed7727d2ec176a49347c721e5e4d241 Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Mon, 27 Feb 2023 07:40:36 -0500 Subject: [PATCH 1/3] docs: release 8.1.1 --- .github/workflows/release.yml | 19 ++++++++----------- CHANGELOG.md | 14 ++++++++++++++ 2 files changed, 22 insertions(+), 11 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 29ffd15f3f9..c368df2c1fa 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -185,20 +185,17 @@ jobs: prerelease: false draft: false body: | - ### Added - - - `Pipefile.lock` files are now supported ([#5404](https://github.com/jeremylong/DependencyCheck/pull/5404)). - - Python projects with only a `pyproject.toml` but no lock file or requirements will report an error as ODC is unable to analyze the project ([#5409](https://github.com/jeremylong/DependencyCheck/pull/5409)). - ### Fixed - - Some maven projects caused false positives due to bad string interpolation ([#5421](https://github.com/jeremylong/DependencyCheck/pull/5421)). - - Error message from Assembly Analyzer has been updated to emphasize dotnet 6 is required for analysis ([#5408](https://github.com/jeremylong/DependencyCheck/pull/5408)). - - Correct issue where database defrag occurs even when no updates were performed ([#5441](https://github.com/jeremylong/DependencyCheck/pull/5441)). - - Fixed several False Positives and one False Negative. - - Fixed the `format` configuration more flexible in the gradle plugin ([dependency-check-gradle/#324](https://github.com/dependency-check/dependency-check-gradle/pull/324)). + - allow hosted suppressions file to be disabled (#5509) + - Several FPs not suitable for our automation (#5504) + - Fix incorrect defaults for nexus and central-analyzer in gradle plugin documentation (#5503) + - Erroneous error-log for deprecated CLI flag usage when using properyfile based disablement of Node Audit Analyzer (#5487) + - Prefer pom.properties G/A/V over pom.xml G/A/V to resolve GAV interpolation issues (#5473) + - Node package dependencies ending up as related dependency of the wrong version of the package (#5479) + - do not throw error if pyproject.toml is in node_modules (#5470) - See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/60?closed=1). + See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/61?closed=1). - name: Upload CLI id: upload-release-cli diff --git a/CHANGELOG.md b/CHANGELOG.md index 81bb5009f86..c20723683ae 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,19 @@ # Change Log +## [Version 8.1.1](https://github.com/jeremylong/DependencyCheck/releases/tag/v8.1.1) (2023-02-27) + +### Fixed + + - allow hosted suppressions file to be disabled (#5509) + - Several FPs not suitable for our automation (#5504) + - Fix incorrect defaults for nexus and central-analyzer in gradle plugin documentation (#5503) + - Erroneous error-log for deprecated CLI flag usage when using properyfile based disablement of Node Audit Analyzer (#5487) + - Prefer pom.properties G/A/V over pom.xml G/A/V to resolve GAV interpolation issues (#5473) + - Node package dependencies ending up as related dependency of the wrong version of the package (#5479) + - do not throw error if pyproject.toml is in node_modules (#5470) + +See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/61?closed=1). + ## [Version 8.1.0](https://github.com/jeremylong/DependencyCheck/releases/tag/v8.1.0) (2023-01-26) ### Added From c5820bafb94c0d373608e26840b0bfe4e2c944f2 Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Mon, 27 Feb 2023 07:44:38 -0500 Subject: [PATCH 2/3] build:prepare release v8.1.1 --- ant/pom.xml | 4 ++-- archetype/pom.xml | 4 ++-- cli/pom.xml | 4 ++-- core/pom.xml | 4 ++-- maven/pom.xml | 4 ++-- pom.xml | 4 ++-- utils/pom.xml | 4 ++-- 7 files changed, 14 insertions(+), 14 deletions(-) diff --git a/ant/pom.xml b/ant/pom.xml index bd3f448a529..6db1500d045 100644 --- a/ant/pom.xml +++ b/ant/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.1 dependency-check-ant @@ -32,7 +32,7 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/ant scm:git:git@github.com:jeremylong/DependencyCheck.git - v6.4.1 + v8.1.1 diff --git a/archetype/pom.xml b/archetype/pom.xml index 1aef7512cf1..fa66c1804d8 100644 --- a/archetype/pom.xml +++ b/archetype/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2017 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.1 dependency-check-plugin Dependency-Check Plugin Archetype @@ -33,7 +33,7 @@ Copyright (c) 2017 Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/archetype scm:git:git@github.com:jeremylong/DependencyCheck.git - HEAD + v8.1.1 diff --git a/cli/pom.xml b/cli/pom.xml index 3a2825246f5..a1746c72fa5 100644 --- a/cli/pom.xml +++ b/cli/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.1 dependency-check-cli @@ -32,7 +32,7 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/cli scm:git:git@github.com:jeremylong/DependencyCheck.git - v6.4.1 + v8.1.1 dependency-check-${project.version} diff --git a/core/pom.xml b/core/pom.xml index 570581c5c85..ae40f63bb17 100644 --- a/core/pom.xml +++ b/core/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.1 dependency-check-core @@ -32,7 +32,7 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/core scm:git:git@github.com:jeremylong/DependencyCheck.git - v6.4.1 + v8.1.1 diff --git a/maven/pom.xml b/maven/pom.xml index a68792f7850..90468f4788a 100644 --- a/maven/pom.xml +++ b/maven/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.1 dependency-check-maven maven-plugin @@ -35,7 +35,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/master/maven scm:git:git@github.com:jeremylong/DependencyCheck.git - v6.4.1 + v8.1.1 3.1.0 diff --git a/pom.xml b/pom.xml index 196a556a5d0..adfe0a34c00 100644 --- a/pom.xml +++ b/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 - Jeremy Long org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.1 pom @@ -94,7 +94,7 @@ Copyright (c) 2012 - Jeremy Long scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck scm:git:https://github.com/jeremylong/DependencyCheck.git - v6.4.1 + v8.1.1 github diff --git a/utils/pom.xml b/utils/pom.xml index b9a76eadb28..175259e530d 100644 --- a/utils/pom.xml +++ b/utils/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2014 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1-SNAPSHOT + 8.1.1 dependency-check-utils @@ -30,7 +30,7 @@ Copyright (c) 2014 - Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/utils scm:git:git@github.com:jeremylong/DependencyCheck.git - v6.4.1 + v8.1.1 org.owasp.dependencycheck.utils.* From 78aeab4736cb78fbe8328f355c6aeb3cf62e9e66 Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Mon, 27 Feb 2023 07:44:39 -0500 Subject: [PATCH 3/3] build:prepare for next development iteration --- ant/pom.xml | 4 ++-- archetype/pom.xml | 4 ++-- cli/pom.xml | 4 ++-- core/pom.xml | 4 ++-- maven/pom.xml | 4 ++-- pom.xml | 4 ++-- utils/pom.xml | 4 ++-- 7 files changed, 14 insertions(+), 14 deletions(-) diff --git a/ant/pom.xml b/ant/pom.xml index 6db1500d045..b91b702b876 100644 --- a/ant/pom.xml +++ b/ant/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1 + 8.1.2-SNAPSHOT dependency-check-ant @@ -32,7 +32,7 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/ant scm:git:git@github.com:jeremylong/DependencyCheck.git - v8.1.1 + v6.4.1 diff --git a/archetype/pom.xml b/archetype/pom.xml index fa66c1804d8..1e7f0b5fdbb 100644 --- a/archetype/pom.xml +++ b/archetype/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2017 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1 + 8.1.2-SNAPSHOT dependency-check-plugin Dependency-Check Plugin Archetype @@ -33,7 +33,7 @@ Copyright (c) 2017 Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/archetype scm:git:git@github.com:jeremylong/DependencyCheck.git - v8.1.1 + HEAD diff --git a/cli/pom.xml b/cli/pom.xml index a1746c72fa5..ef7fb72903d 100644 --- a/cli/pom.xml +++ b/cli/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1 + 8.1.2-SNAPSHOT dependency-check-cli @@ -32,7 +32,7 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/cli scm:git:git@github.com:jeremylong/DependencyCheck.git - v8.1.1 + v6.4.1 dependency-check-${project.version} diff --git a/core/pom.xml b/core/pom.xml index ae40f63bb17..8cc370a9797 100644 --- a/core/pom.xml +++ b/core/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1 + 8.1.2-SNAPSHOT dependency-check-core @@ -32,7 +32,7 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/core scm:git:git@github.com:jeremylong/DependencyCheck.git - v8.1.1 + v6.4.1 diff --git a/maven/pom.xml b/maven/pom.xml index 90468f4788a..67de98f6013 100644 --- a/maven/pom.xml +++ b/maven/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1 + 8.1.2-SNAPSHOT dependency-check-maven maven-plugin @@ -35,7 +35,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/master/maven scm:git:git@github.com:jeremylong/DependencyCheck.git - v8.1.1 + v6.4.1 3.1.0 diff --git a/pom.xml b/pom.xml index adfe0a34c00..a4235ea5b93 100644 --- a/pom.xml +++ b/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 - Jeremy Long org.owasp dependency-check-parent - 8.1.1 + 8.1.2-SNAPSHOT pom @@ -94,7 +94,7 @@ Copyright (c) 2012 - Jeremy Long scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck scm:git:https://github.com/jeremylong/DependencyCheck.git - v8.1.1 + v6.4.1 github diff --git a/utils/pom.xml b/utils/pom.xml index 175259e530d..483cbc6df13 100644 --- a/utils/pom.xml +++ b/utils/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2014 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 8.1.1 + 8.1.2-SNAPSHOT dependency-check-utils @@ -30,7 +30,7 @@ Copyright (c) 2014 - Jeremy Long. All Rights Reserved. scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck/tree/main/utils scm:git:git@github.com:jeremylong/DependencyCheck.git - v8.1.1 + v6.4.1 org.owasp.dependencycheck.utils.*