Releases: microsoft/sbom-tool
Releases · microsoft/sbom-tool
v2.2.0
⚙️ Changes
- Bump sdk, pin dependency versions. by @sebasgomez238 (#455)
- Update Microsoft.Sbom.Api README.md by @sebasgomez238 (#401)
- Add supplier/license info support for rubygems. by @sebasgomez238 (#453)
- Better default for JsonSerialization by @ryanbrandenburg (#442)
- Enable ConanLock detector by default by @sebasgomez238 (#450)
- Extract package info from local package cache for NuGet and Maven by @sebasgomez238 (#441)
v2.0.0
⚙️ Changes
- Large Stream Json Library by @ryanbrandenburg (#387)
- build(deps): bump github/codeql-action from 2.22.4 to 2.22.5 by @dependabot (#440)
- Remove BOM from .cs and csproj files by @ryanbrandenburg (#439)
v1.8.1
⚙️ Changes
- Update to latest version of Component-Detection Libraries. by @sebasgomez238 (#436)
- build(deps): bump release-drafter/release-drafter from 5.24.0 to 5.25.0 by @dependabot (#430)
- build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot (#431)
- build(deps): bump github/codeql-action from 2.22.3 to 2.22.4 by @dependabot (#434)
v1.8.0
⚙️ Changes
- Update ValidateAsync & throw exception if SBOM not found by @micyunmsft (#425)
- Target net6.0 and net8.0 by @sebasgomez238 (#422)
- build(deps): bump github/codeql-action from 2.21.8 to 2.22.3 by @dependabot (#429)
- Fix typos in documentation by @LukaszKokot (#426)
- build(deps): bump stefanzweifel/git-auto-commit-action from 4.16.0 to 5.0.0 by @dependabot (#419)
v1.7.1
⚙️ Changes
- Update SBOMValidator API / Revert sdk update by @sebasgomez238 (#418)
- Add example on how to use --DirectoryExclusionList by @sebasgomez238 (#416)
- Administrative Comments for docs Folder by @Charles1992Sail (#392)
- Warn when passing -m argument by @sebasgomez238 (#415)
v1.7.0
⚙️ Changes
- Record response parsing exceptions as APIExceptions by @sebasgomez238 (#414)
- Revert Conan changes. by @sebasgomez238 (#413)
- Argument spelling corrections by @robertcrockett (#411)
- Remove unused validation workflow. by @sebasgomez238 (#407)
v1.6.3
⚙️ Changes
- chore: bump dotnet sdk to 8 by @JamieMagee (#406)
- docs: add xml documentation for component detection adapters by @JamieMagee (#403)
- refactor: IDE0007 Use
varinstead of explicit type by @JamieMagee (#405) - refactor: multiple roslyn analyzer fixes by @JamieMagee (#404)
- Filter out files section of ClearlyDefined API responses by @sebasgomez238 (#402)
- build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot (#399)
- Remove unnecessary line from docs by @sebasgomez238 (#398)
- Update API documentation. by @sebasgomez238 (#393)
- Return exit code 2 on permissions errors. by @sebasgomez238 (#390)
- chore: CA1816 Call GC.SuppressFinalize correctly by @JamieMagee (#375)
- docs: add documentation to
IFileSystemUtilsand all implementations by @JamieMagee (#389) - Add support for Conan and SPDX package information to SPDX file by @tarun06 (#319)
- build(deps): bump github/codeql-action from 2.21.5 to 2.21.8 by @dependabot (#388)
v1.6.2
⚙️ Changes
- Revert mono libraries to Mono.Posix.NETStandard by @sebasgomez238 (#381)
- Fix null ref when multiple SPDX components are detected. by @sebasgomez238 (#385)
- [docs] remove unsupported ARM notice for Homebrew installation by @shawnfunke (#378)
v1.6.1
⚙️ Changes
- Bring back build property that allows proper versioning. by @sebasgomez238 (#376)
- ci: collect and upload code coverage by @JamieMagee (#373)
v1.6.0
⚙️ Changes
- Don't warn on NU5104 for Mono.Unix Package by @sebasgomez238 (#374)
- docs: add winget installation to documentation by @JamieMagee (#368)
- Update to Help Options by @Charles1992Sail (#371)
- Fix mapping when using a config file to pass license argument. by @sebasgomez238 (#370)
- Add license retrieval for Cargo, Pip, Ruby, Cocoapods. by @sebasgomez238 (#369)
- chore: CA1715 identifiers should have correct prefix by @JamieMagee (#367)
- ci: migrate from
MinVerDefaultPreReleasePhasetoMinVerDefaultPreReleaseIdentifiersby @JamieMagee (#366) - Add telemetry and error handling to license retrieval. by @sebasgomez238 (#360)
- chore: SA1206 declaration keywords must follow order by @JamieMagee (#365)
- chore: SA1117 parameters must be on same line or separate lines by @JamieMagee (#364)
- chore: SA1028 code must not contain trailing whitespace by @JamieMagee (#363)
- chore: SA1000 keywords must be spaced correctly by @JamieMagee (#362)
- test: add
Microsoft.NET.Test.Sdkto all test projects by @JamieMagee (#361) - Add ability to fetch license info for packages. by @sebasgomez238 (#359)
- chore: remove
System.Security.Cryptography.ProtectedDataby @JamieMagee (#356) - chore: update dotnet sdk from
6.0.400to7.0.400by @JamieMagee (#357) - refactor: SA1518 use line endings correctly at end of file by @JamieMagee (#351)
- Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot (#353)
- chore: silence IL3000 by @JamieMagee (#355)
- refactor: IDE0017 simplify object initialization by @JamieMagee (#350)
- Revert Automapper extensions to working version by @sebasgomez238 (#354)
- refactor: fix IDE0073 require file header by @JamieMagee (#347)
- refactor: fix SA1108 block statements must not contain embedded comments by @JamieMagee (#348)
- chore: add docker to our dependabot updates by @JamieMagee (#344)
- refactor: fix IDE0004 by @JamieMagee (#345)
- Migrate from Mono.Posix.NETStandard to Mono.Unix by @sebasgomez238 (#346)
- ci: pin github actions digest by @JamieMagee (#343)
- chore: codestyle and roslyn analyzers best practices by @JamieMagee (#341)
- Bump coverlet.collector from 3.1.0 to 6.0.0 by @dependabot (#339)
- chore: sort
PackageReferences alphabetically by @JamieMagee (#338) - Bump ComponentDetectionPackageVersion from 3.6.2 to 3.6.4 by @dependabot (#336)
- ci: scope down permissions of
GITHUB_TOKENby @JamieMagee (#333) - Bump actions/setup-dotnet from 2 to 3 by @dependabot (#307)
- Bump AutoMapper.Extensions.Microsoft.DependencyInjection from 8.1.1 to 12.0.1 by @dependabot (#334)
- Bump Microsoft.NET.Test.Sdk from 17.4.0-preview-20220726-02 to 17.7.2 by @dependabot (#335)
- chore: remove
serilog.aspnetcoreby @JamieMagee (#332) - Bump MinVer from 2.5.0 to 4.3.0 by @dependabot (#330)
- Bump Microsoft.Extensions.Hosting from 6.0.1 to 7.0.1 by @dependabot (#326)