What's Changed
- feat: drop snyk and oss-sonatype vulnerability providers by @ruromero in #492
- fix: validate 1.5 and 1.6 spdx licenses using cyclonedx 11.0.0 by @ruromero in #493
- feat: rename tpa to trustify by @ruromero in #495
- feat: multitenant trustify by @ruromero in #496
- chore: multitenant trustify properties by @ruromero in #498
- chore: update deployment properties and dashboard by @ruromero in #499
- feat: drop segment backend events by @ruromero in #501
- fix: osv readiness check locking thread by @ruromero in #502
- chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9.6-1760515502 by @red-hat-konflux[bot] in #503
- chore: remove dashboards by @ruromero in #510
- chore: update license header by @soul2zimate in #507
- chore: Rephrase references by @soul2zimate in #512
- chore: remove tekton files by @ruromero in #515
- chore: update request headers by @soul2zimate in #514
- chore: rename package and use trustda-api-model by @ruromero in #518
- chore: remove devfile by @ruromero in #520
- feat: separate Red Hat and Community profiles for HTML report by @soul2zimate in #522
- chore: add a placeholder brand-overrides.css for brand override by @soul2zimate in #525
- chore: update deployment resources by @ruromero in #524
- feat: trustify recommendations by @ruromero in #526
- feat: use deps.dev for remediation info by @ruromero in #528
- build(deps): bump org.cyclonedx:cyclonedx-core-java from 11.0.0 to 11.0.1 by @dependabot[bot] in #529
- feat: report recommendations error but show vulnerabilities by @ruromero in #531
- feat: support tpa response with details and warnings by @ruromero in #456
- build(deps): bump node-forge from 1.3.1 to 1.3.2 in /ui by @dependabot[bot] in #533
- feat: add warnings to Provider status by @ruromero in #534
- fix: ignore invalid severities by @ruromero in #536
- fix: take source from importers field by @ruromero in #538
- fix: capture possible NPE by @ruromero in #540
- feat: cache trustify responses by @ruromero in #542
- chore: update config for Redis by @ruromero in #543
- chore: expose rest routes to monitor latency by @ruromero in #546
- fix: correct exposed routes names by @ruromero in #547
- fix: skip identity recommendations by @ruromero in #549
- fix: cache only success responses by @ruromero in #551
- fix: cache only success responses by @ruromero in #552
- chore: decommission OnGuard service from DA backend by @soul2zimate in #545
- build(deps): bump lodash from 4.17.21 to 4.17.23 in /ui by @dependabot[bot] in #553
- chore(deps): migrate to yarn v4 through corepack by @ruromero in #555
- feat: implement oss-license package scanning by @ruromero in #561
- feat: html license report by @ruromero in #563
- fix: ignore withdrawn vulnerabilies by @ruromero in #565
- feat: bump quarkus to 3.31.3 by @ruromero in #569
- feat: limit validation to minimum required data by @ruromero in #567
- build(deps): bump qs from 6.14.1 to 6.14.2 in /ui by @dependabot[bot] in #570
- feat: add manually imported data into report by @ruromero in #572
- feat: spdx license identify in sboms by @ruromero in #576
- build(deps): bump tar from 7.5.7 to 7.5.10 in /ui by @dependabot[bot] in #578
- fix: unable to configure multiple trustify endpoints by @ruromero in #580
- build(deps): bump ajv from 6.12.6 to 6.14.0 in /ui by @dependabot[bot] in #574
- build(deps): bump flatted from 3.3.3 to 3.4.1 in /ui by @dependabot[bot] in #582
- build(deps): bump tar from 7.5.10 to 7.5.11 in /ui by @dependabot[bot] in #581
- feat: ignore local packages by @ruromero in #584
- build(deps): bump rollup from 2.79.2 to 2.80.0 in /ui by @dependabot[bot] in #577
- fix: hide sbom report when there isn't any reported license by @ruromero in #586
- fix: normalize + to -or-later before parsing by @soul2zimate in #589
- build(deps): bump flatted from 3.4.1 to 3.4.2 in /ui by @dependabot[bot] in #587
- fix: html report missing link for cargo packages by @ruromero in #592
- build(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /ui by @dependabot[bot] in #595
- docs: improve CONVENTIONS.md and project configuration by @ruromero in #597
- build(release): prepare release v2.0.0 by @ruromero in #599
New Contributors
- @soul2zimate made their first contribution in #507
- @dependabot[bot] made their first contribution in #529
Full Changelog: v1.6.2...v2.0.0