Skip to content

Releases: advanced-security/maven-dependency-submission-action

v4.1.1

07 Aug 14:33
Compare
Choose a tag to compare
chore: Updating release files

v4.1.0

03 Jul 10:01
Compare
Choose a tag to compare
  • Adds the ability to change the detector details for the dependency snapshots via the optional input parameters:

    • detector-name
    • detector-url
    • detector-version

    If the detector-name is specified, then all three become mandatory as there are no sensible defaults that can be attributed to the values.

v4.0.3

29 Apr 10:25
Compare
Choose a tag to compare
  • Updating the build process and tooling for Node 20 support in the CLI executables which were introduced when the dependency-submission-toolkit transitioned in to an ESM module

  • Fixes #69 #61

v4.0.2

05 Mar 16:35
Compare
Choose a tag to compare
chore: Updating release files

v4.0.1

15 Feb 16:43
Compare
Choose a tag to compare
  • Updating branding for the marketplace
  • Utilizing rollup to build cli executables as the ESM module for the dependency-submission-toolkit broke the 4.0.0 pkg based executable builds.

v4.0.0

23 Jan 16:34
Compare
Choose a tag to compare

Version 4.0.0 release:

  • Breaking change, the name presented in the submission report now matches the current name of the repository maven-dependency-submission-action (previously it was moved from a repository called maven-dependency-tree-action)
  • When running the GitHub Action the ref and sha are injected as inputs (with defaults to the current workflow values)
  • Updated dependencies, specifically dependency-submission-toolkit that includes improvements to uploading of the snapshots and error handling around unhappy path scenarios
  • CLI application options made compatible with the GitHub Actions inputs
  • CLI applications made available as part of the release process and notes
  • Project testing and releases - swapped jest out for vitest and added GitHub Actions release workflow

v3.0.3

19 Oct 11:32
fcd7eab
Compare
Choose a tag to compare
  • Fixes issue with POMs that set a non-default outputDirectory resulting is no dependency data being found and uploaded #48.

v3.0.2

31 May 15:27
c5ad0fd
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v3...v3.0.2

v3.0.1

19 Apr 11:15
d682d5d
Compare
Choose a tag to compare
  • Updated to latest dependency snapshot library 1.2.10
  • Fixed error in the cli tools that was incorrectly validating the branch specification #26
  • Correctly injecting the additional maven command line options #28

v3.0.0

22 Feb 17:30
72bdd87
Compare
Choose a tag to compare
  • Introduced support for maven multi module project, reporting as an aggregation on the top level POM
  • Added support for maven wrapper if provided in the project
  • Improved reporting and modification of the path to the POM file so as to be a correct link in dependency graph
  • Fixed the bug reported in #19 by using more parts of the Maven coordinate system to guarantee uniqueness on the PackageURLs for the dependencies, i.e. the type and classifier are now supported if specified.