v3.16.7

• Cargo: Deal with git-backed cargo locators properly (#1670)

v3.16.6

What's Changed

• Bump tar crate to 0.4.45 to fix CVE-2026-33055 and CVE-2026-33056 by @spatten in #1679
• [ANE-2795] Fix UTF-8 encoding for ficus output on Windows by @Conor-FOSSA in #1646

Full Changelog: v3.16.5...v3.16.6

v3.16.5

• PNPM: Fix pnpm v9 lockfile transitive devDependency classification. Dependencies of devDependencies were incorrectly reported as production dependencies in pnpm v9 projects. (#1668)

v3.16.4

Mac OS: Resolve an issue with dynamic linking on some Mac OS systems.

v3.16.3

• Elixir: Use MIX_ENV=prod for accurate production dependency resolution, with fallback to --only prod for projects lacking config/prod.exs (#1662)
• Infrastructure: Add cmdEnvVars field to Command type for setting environment variables on subprocesses via typed-process (#1662)

v3.16.2

• Conda: Make conda analysis work on versions of conda where the --force flag is deprecated for conda env create (#1661)
• Bug fix: fail early if the --output flag is combined with --snippet-scan or --x-vendetta flags (#1659)
• Hide deprecated --experimental-use-v3-go-resolver, --experimental-skip-vsi-graph and --experimental-link-project-binary flags, and deprecate the experimental-link-user-defined-dependency-binary subcommand. The flags and subcommand still work, but are no longer documented or shown in the help text (#1633)

v3.16.1

• Licensing: Add standalone detection for Solace proprietary licenses (solace-software-2021, solace-non-production-1.0, solace-api-1.1) (#1660)
• Licensing: Add support for SPDX tag-value format license declarations

v3.16.0

What's Changed

• add bun support by @jagonalez in #1648
• Cut release 3.16.0 by @nficca in #1650

Full Changelog: v3.15.9...v3.16.0

v3.15.9

• Improvements for licensing and snippet scanning (#1649)
  • Licensing: Additional proprietary license detection
  • Snippet scanning: Support TLS operation with platform native certificate store

v3.15.8

What's Changed

• Prep for release 3.15.8 by @spatten in #1645

Full Changelog: v3.15.7...v3.15.8