v35.1.0

What's Changed

• Catch NotImplementedError by @JonoYang in #1700
• Debug get unique unresolved purls 2 by @JonoYang in #1701
• Add a --fail-on-vulnerabilities in check-compliance command by @tdruez in #1702
• Improve file handling in UI by @jayanth-kumar-morem in #1036
• Introduce Independent License Clarity Thresholds Mechanism by @NucleonGodX in #1689
• Enable --license-references option in scan_single_package pipeline by @tdruez in #1706
• Add ecosystem specific inclusions or exclusions by @AyanSinhaMahapatra in #1550
• Refine ScanCode.io d2d pipeline for JavaScript using string literals mapping by @keshav-space in #1652
• Update scancode-toolkit to v32.4.0 by @AyanSinhaMahapatra in #1708
• Update D2D pipeline with Cython source to binary matching by @JonoYang in #1703
• Replace the setup.py/setup.cfg by pyproject.toml #1608 by @tdruez in #1709

New Contributors

• @NucleonGodX made their first contribution in #1689

Full Changelog: v35.0.0...v35.1.0

v35.0.0

What's Changed

• Adding sorting layer to the compliance alerts #1581 by @abanoub-samy-farhan in #1632
• Raise a MatchCodeIOException for invalid responses from MatchCode.io … by @tdruez in #1666
• Slice the fragment from the URL to 50 chars max #1669 by @tdruez in #1670
• Match binaries to source using elf symbols by @AyanSinhaMahapatra in #1621
• Upgrade Django and dependencies to latest security release by @tdruez in #1681
• Strip rightmost / in settings.py, from URL envvars #1672 by @JonoYang in #1673
• Add support for using Package URL (purl) as project input. by @tdruez in #1686
• Add filtering by label and pipeline in the flush-projects managem… by @tdruez in #1690
• Upgrade Ace library to latest version 1.42.0 by @tdruez in #1692
• Display matched snippets details in "Resource viewer" by @tdruez in #1693
• Rename the parent_path function to parent_directory #1691 by @tdruez in #1694
• Upgrade Django to latest security release by @tdruez in #1695
• Add "(No value detected)" for Copyright and Holder charts #1697 by @tdruez in #1698
• Add support for Python3.13 by @tdruez in #1469
• Add "Package Compliance Alert" chart in the Policies section by @tdruez in #1699
• Add d2d symbols matching for winpe macho binaries by @AyanSinhaMahapatra in #1674

New Contributors

• @abanoub-samy-farhan made their first contribution in #1632

Full Changelog: v34.11.0...v35.0.0

v34.11.0

What's Changed

• Upgrade Django to latest 5.1.8 security release by @tdruez in #1653
• Add an UUID field on the DiscoveredDependency model #1651 by @tdruez in #1654
• Add functions to create fingerprints from stemmed code, highlight code snippet matches from matchcode by @JonoYang in #1656
• Only process match results for file matches by @JonoYang in #1658
• Add ability to export filtered QuerySet of FilterView to JSON format by @aayushkdev in #1572
• Include ProjectMessages in the JSON output headers section #1659 by @tdruez in #1662
• Dependencies upgrade by @tdruez in #1663
• Define a COMPLIANCE_SEVERITY_MAP on the ComplianceAlertMixin #1581 by @tdruez in #1664

Full Changelog: v34.10.1...v34.11.0

v34.10.1

What's Changed

• Upgrade python-inspector and other dependencies to latest version by @tdruez in #1642
• Add a GitHub workflow that resolves dependencies and generates SBOMS … by @tdruez in #1643
• Convert the declared_license field value in resolve_pypi_packages #1598 by @tdruez in #1645
• Provide dummy wheel distributions for installing on Apple Silicon #866 by @tdruez in #1646
• Refine readability in resolve_pypi_packages and add logging #1598 by @tdruez in #1647

Full Changelog: v34.10.0...v34.10.1

v34.10.0

What's Changed

• Add extracted_to and extracted_from methods by @AyanSinhaMahapatra in #1588
• Include the optional_step steps in the get_graph() list #1599 by @tdruez in #1600
• Add proper progress logging for the assemble function #1601 by @tdruez in #1602
• Extract an assemble_package function from assemble_packages #1398 by @tdruez in #1604
• Fix missing migration for Project.purl field #1603 by @aayushkdev in #1605
• Webhook features and documentation by @tdruez in #1596
• Import setting from django.conf instead of scancodeio module #1587 by @tdruez in #1609
• Refine the XLSX documentation and add SPDX/CycloneDX entries #1589 by @tdruez in #1610
• Maintenance by @tdruez in #1611
• Upgrade bulma CSS to version 1.0.2 by @tdruez in #1268
• Bump scancode-toolkit to latest v32.3.3 by @AyanSinhaMahapatra in #1619
• Reorder XLSX output fields in RESOURCES sheet #1546 by @aayushkdev in #1590
• Display date and time using user's current timezone by @tdruez in #1624
• Add the ability to "Copy to Clipboard" in the UI #1120 by @tdruez in #1627
• Freeze the top row or each worksheet and set font size to 10 #1553 by @tdruez in #1628
• Disable the creation of the global webhook in the batch-create co… by @tdruez in #1629
• Add support for "Permission denied" file access in make_codebase_resource by @tdruez in #1631
• Add the task output in the webhook Slack payload in case of run failu… by @tdruez in #1634
• CSS improvements by @tdruez in #1635
• Refine ScanCode.io d2d pipeline for JavaScript using symbol mapping by @keshav-space in #1622
• Refine the scan_single_package pipeline to work on git inputs #1376 by @tdruez in #1636
• Bump version for v34.10.0 release by @tdruez in #1637

New Contributors

• @aayushkdev made their first contribution in #1605

Full Changelog: v34.9.5...v34.10.0

v34.9.5

What's Changed

• Upgrade dependencies to latest versions by @tdruez in #1557
• Ignore the "__MACOSX" macOS metadata folder dejacode#229 by @tdruez in #1558
• 1524 report api by @tdruez in #1559
• Do not check docker image checksums by @pombredanne in #1540
• Handle the exception when the policies.yml is not valid #1560 by @tdruez in #1561
• Add note to clarify users to use WSL when installing on windows by @chinyeungli in #1478
• Increase the HTTP requests timeout to 30 in fetch pipes #1144 by @tdruez in #1567
• Add options to the Project reset action by @tdruez in #1568
• Bump commoncode to v32.2.0 and pin BeautifulSoup4 by @AyanSinhaMahapatra in #1583
• Do not fail on collecting symbols by @AyanSinhaMahapatra in #1573
• Add missing init.py to ensure submodule included in whl dist #1423 by @tdruez in #1584

Full Changelog: v34.9.4...v34.9.5

v34.9.4

What's Changed

• Improve Project list page navigation #1200 by @tdruez in #1505
• Do not fail project on memory spikes by @AyanSinhaMahapatra in #1504
• Add rust binary support #1435 by @AyanSinhaMahapatra in #1488
• Add support extra_data value from the JSON input in load_inventory #926 by @tdruez in #1507
• Turn off CycloneDX document validation and load data anyway #1515 by @tdruez in #1516
• Add a report action on project list to export XLSX of packages #1437 by @tdruez in #1517
• Add labels to Project level search #1520 by @tdruez in #1522
• Add a batch-create management command by @tdruez in #1509
• Add a TODOs sheet containing on REQUIRES_REVIEW resources in XLSX #1524 by @tdruez in #1527
• Improve XLSX output for Vulnerabilities #1519 by @tdruez in #1531
• Skip package creation when no package_data from purldb by @keshav-space in #1532
• Do not download input_urls in CLI commands #1437 by @tdruez in #1535
• Ensure that we process specifically JavaScript map files #1538 by @JonoYang in #1541
• Escape special characters in directory path regex by @keshav-space in #1542
• Add support for download URL as --input-list in batch-create #1524 by @tdruez in #1544
• Add a report management command to generate XLSX reports #1524 by @tdruez in #1545
• Keep the InputSource objects when using reset on Projects #1536 by @tdruez in #1549
• Add a select_across checkbox on the ProjectReportForm #1524 by @tdruez in #1534
• Refine the map_java_to_class implementation #1552 by @tdruez in #1554
• Ignore large data files and bump scancode-toolkit by @AyanSinhaMahapatra in #1508

Full Changelog: v34.9.3...v34.9.4

v34.9.3

What's Changed

• Refine the available options for RQ_QUEUES settings #1465 by @tdruez in #1467
• Update matchcode-toolkit to v7.0.0 by @JonoYang in #1466
• Add a run-docker-dev Makefile command by @tdruez in #1480
• Refine the run-docker-dev to watch changes and restart worker service by @tdruez in #1483
• Bump aboutcode.hashid to v0.2.0 by @keshav-space in #1479
• Move the for_packages field in SCIO XLSX output #1487 by @tdruez in #1489
• Load the LAYERS sheet data in load_inventory_from_xlsx #1490 by @tdruez in #1491

Full Changelog: v34.9.2...v34.9.3

v34.9.2

What's Changed

• Fix a bug in scan_rootfs_for_system_packages #1462 by @tdruez in #1464

Full Changelog: v34.9.1...v34.9.2

v34.9.1

What's Changed

• Refactor the group decorator for pipeline steps as optional_step … by @tdruez in #1442
• Bump aboutcode.pipeline version to 0.2.0 for release by @tdruez in #1451
• Enable filtering on Project API actions #1449 by @tdruez in #1450
• Fix the ability to provide multiple optional step in API #1454 by @tdruez in #1455
• Make the header row of tables sticky to the top of the screen #1457 by @tdruez in #1458
• Bump commoncode to v32.1.0 by @AyanSinhaMahapatra in #1460

Full Changelog: v34.9.0...v34.9.1