2.1.0

2.1.0 - 2024-11-05

Note

PHP minimum requirement is now version 8.1 (since latest release 2.0.1)

Removed

• support to PHP 7.4 and PHP 8.0

Full Changelog: 2.0.1...2.1.0

2.0.1

2.0.1 - 2024-11-05

Warning

This version is the last one to support PHP 7.4 and PHP 8.0

Next feature version 2.1.0 will only support PHP 8.1 or greater !

Changed

• provides full support to PHP 8.4 (without deprecation messages)

Full Changelog: 2.0.0...2.0.1

2.0.0

2.0.0 - 2024-07-02

Important

This major release removed all converters that were introduced on versions 1.2.0 and 1.4.0
You'll find them with a new architecture on future release 1.0.0 of new package bartlett/sarif-php-converters
(repository: https://github.com/llaville/sarif-php-converters)

If you used this package since version 1.0.0, you won't be able to have BC breaks on standard API,
and fluent builders API.

Be aware that all Definition are now constructed without parameters. Look on setters, if you previously used any of them.

Full Changelog: 1.5.0...2.0.0

1.5.0

1.5.0 - 2024-06-15

Added

Fluent builders API as an alternative to basic declarative API.
See Builder Guide

Full Changelog: 1.4.0...1.5.0

1.4.0

1.4.0 - 2024-06-02

I'm happy to announce a new converter :

Added

• PHPMD : PHP Mess Detector

Note

Even if PHPMD has a native SARIF renderer since v2.10.0,
this new converter provide more info, and is customizable as others.

Full Changelog: 1.3.0...1.4.0

1.3.0

1.3.0 - 2024-05-24

I'm happy to announce next level of SARIF converters improvements :

Changed

For all converters :

• Add ability to retrieve code snippet (snippet property of region object).
• Add automationDetails on Bartlett\Sarif\Converter\ConverterInterface with a default implementation
  into Bartlett\Sarif\Converter\AbstractConverter.
• Add ability to print startTimeUtc and endTimeUtc properties of invocation object.
• Add ability to print commandLine property of invocation object.
• Add ability to provide a fullName property of toolComponent object (driver). This property is required by the Azure DevOps Advanced Security service.

PHP_CodeSniffer :

• Add originalUriBaseIds property on run object.
• Add partialFingerprints property of result object. This property is required by the GitHub Advanced Security service.
• Supports now the responseFiles property of invocation object.

PHPLint :

• Creation of a custom launcher is no more necessary with PHPLint 9.3.1 or greater. Use the --bootstrap option.
• Add partialFingerprints property of result object. This property is required by the GitHub Advanced Security service.
• Introduces a single ReportingDescriptor (rule) for syntax errors.
• Supports now the responseFiles property of invocation object.

PHPStan :

• Add partialFingerprints property of result object. This property is required by the GitHub Advanced Security service.
• Introduces a single ReportingDescriptor (rule) for analysis errors.

Fixed

• for all converters, make path really relative to working directory.

Full Changelog: 1.2.0...1.3.0

1.2.0

1.2.0 - 2024-05-02

I'm happy to announce adds of SARIF converters for three well-known PHP linters :

• PHP_CodeSniffer (see feature request squizlabs/PHP_CodeSniffer#3496)
• PHPLint (see feature request overtrue/phplint#186)
• PHPStan (see feature request phpstan/phpstan#5973)

Added

• Bartlett\Sarif\Factory\SerializerFactory contract that define encoder and serializer
  for json data (compatible with Symfony Serializer Component)
• Native PHP JSON implementation with Bartlett\Sarif\Factory\PhpSerializerFactory
• Symfony Serializer implementation with Bartlett\Sarif\Factory\SymfonySerializerFactory

Full Changelog: 1.1.0...1.2.0

1.1.0

1.1.0 - 2024-01-07

Added

• introduces the new resources/serialize.php script (to demonstrate usage with help of Symfony/Serializer component)
• all unit tests missing from first release 1.0

Changed

• raise minimum PHP requirement (7.4 or greater) for property type hinting
• add type hinting on properties and upgrade phpDoc blocks
• remove try/catch bloc that print the final SarifLog object in json format on all examples scripts
• API: SarifLog is no more marked as final to be able to extends or change current (__toString, jsonSerializable) behavior

Fixed

Codebase is now PHPStan rule level 9 compatible :

• ExternalPropertyFileReference definition with optional values
• GraphTraversal definition with optional values
• PhysicalLocation definition with optional values
• Region definition with optional values
• Taxonomies property

Full Changelog: 1.0.1...1.1.0

1.0.1

Fixed

• clean-up code in PropertyBag because duplicated keys is not possible

1.0.0

Implements full SARIF specifications 2.1.0