Merge pull request #104 from sktelecom/release/v1.2.0

chore(release): v1.2.0

Author: haksungjang

CHANGELOG.md

@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [v1.2.0] - 2026-06-11
+
+### Added
+
+- Web UI source scans (current directory, Git URL, ZIP upload) now resolve transitive dependencies through cdxgen language images, matching the CLI. The web UI previously used syft, which captured only directly declared dependencies; a Spring Boot sample went from 8 to 91 components. (#95)
+- Scan results gained Components and Vulnerabilities tabs with searchable, sortable tables, next to the existing summary. (#96)
+- Source scans now fetch dependency licenses (`FETCH_LICENSE`, on by default), so components and the NOTICE carry real license data instead of NOASSERTION. Set `FETCH_LICENSE=false` to skip the lookups. (#98)
+- The NOTICE normalizes license aliases to SPDX ids, shows component copyright when present, and appends the SPDX standard full text of each used license from a bundled set (21 common licenses, offline). (#99)
+- The security report surfaces CVSS, EPSS (exploit probability) and CISA KEV (known-exploited) signals, sorting findings KEV first, then by severity, then by EPSS. Set `SECURITY_ENRICH=false` for offline runs. (#100)
+- Redesigned the post-scan artifact download experience with per-format chips and a bulk ZIP download. (#102)
+
+### Changed
+
+- Synced the user documentation, in-app help, and screenshots with the new features. (#101, #103)
+
+### Fixed
+
+- Removed the redundant maven pre-resolve step in build-prep that printed a spurious NoPluginFoundForPrefix error on every Java source scan, with no effect on the resulting SBOM. (#97)
+
 ## [v1.1.1] - 2026-06-09
 
 ### Added

electron/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sbom-generator-desktop",
-  "version": "1.1.1",
+  "version": "1.2.0",
   "private": true,
   "type": "module",
   "description": "Double-click desktop app that wraps the SBOM Generator web UI (runs the scanner in Docker).",