What's Changed
- chore: bump to next development version by @trustify-ci-bot[bot] in #462
- feat(workspace): add Go workspace (go.work) discovery by @Strum355 in #445
- feat(workspace): add Maven multi-module workspace discovery by @Strum355 in #443
- feat(workspace): add uv workspace discovery (TC-4266) by @Strum355 in #446
- feat(workspace): add Gradle multi-project workspace discovery by @Strum355 in #444
- fix(go): handle replace directives in go list -m all parsing by @a-oren in #468
- fix(workspace): parse actual XML output from mvn help:evaluate by @Strum355 in #470
- fix(go): support semicolon format for exhortignore in indirect deps by @a-oren in #474
- fix(python): handle pip options, hashes, and line continuations in requirements.txt by @a-oren in #485
- build(deps): bump org.pitest:pitest-maven from 1.23.1 to 1.24.1 by @dependabot[bot] in #488
- build(deps): bump com.diffplug.spotless:spotless-maven-plugin from 3.4.0 to 3.5.1 by @dependabot[bot] in #473
- build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 by @dependabot[bot] in #472
- fix(python): handle PEP 440 direct references and path dependencies in uv export by @a-oren in #490
- build(deps): bump org.pitest:pitest-maven from 1.24.1 to 1.25.0 by @dependabot[bot] in #493
- fix(cargo): resolve workspace-inherited license in Cargo.toml by @ruromero in #486
- build(deps): bump org.pitest:pitest-maven from 1.25.0 to 1.25.1 by @dependabot[bot] in #497
- build(deps): bump com.diffplug.spotless:spotless-maven-plugin from 3.5.1 to 3.6.0 by @dependabot[bot] in #498
- build(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 by @dependabot[bot] in #499
- ci: onboard Codecov for unit test coverage tracking by @ptomanRH in #510
- feat(deps): bump trustify-da-api-model for recommendation schemas by @a-oren in #519
- fix(maven): resolve version ranges in component analysis by @Strum355 in #491
- build(deps-dev): bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6 by @dependabot[bot] in #500
- build(deps-dev): bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0 by @dependabot[bot] in #502
- build(deps): bump org.pitest:pitest-maven from 1.25.1 to 1.25.4 by @dependabot[bot] in #505
- build(deps): bump jackson.version from 2.21.3 to 2.22.0 by @dependabot[bot] in #506
- build(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 by @dependabot[bot] in #514
- build(deps): bump com.fasterxml.jackson.core:jackson-annotations from 2.21 to 2.22 by @dependabot[bot] in #511
- fix(license): treat UNKNOWN-category dependencies as incompatible by @a-oren in #513
- build(deps): bump trustify-da-api-model from 2.0.8 to 2.0.9 by @a-oren in #526
- build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 by @dependabot[bot] in #524
New Contributors
- @trustify-ci-bot[bot] made their first contribution in #462
- @Strum355 made their first contribution in #445
- @ptomanRH made their first contribution in #510
Full Changelog: v0.0.18...v0.0.19
Contributors
ruromero, Strum355, and 3 other contributors