Releases: microsoft/component-detection
Releases · microsoft/component-detection
v7.1.1
⚙️ Changes
- Update packageurl-dotnet to 2.0.0 by @JamieMagee (#1799)
- fix: harden Docker scan timeout and cancellation in LinuxContainerDetector by @AMaini503 (#1798)
- Reconcile bare/rich component Ids in DependencyGraphs by @AMaini503 (#1784)
v7.1.0
⚙️ Changes
- Add the HelmComponentDetector and associated tests. by @jpinz (#1796)
- Increase parallelism in smoketest yaml + reduce iterations in PR by @grvillic (#1792)
- chore: replace 2-string Resources.resx with constants by @JamieMagee (#1786)
- chore: drop System.Runtime.Loader package ref (in-box on net8.0) by @JamieMagee (#1787)
- chore: remove dead CommandLineParser dependency by @JamieMagee (#1791)
- feat(spdx): extract creator tool and organization from SPDX 2.2 SBOMs by @alisonlomaka (#1783)
- [experiment] Add MSBuild binary log detector as replacement for DotNet and NuGet detectors by @ericstj (#1710)
- Reorder search patterns for Pnpm component detection by @jpinz (#1782)
🚀 New Features
v7.0.18
⚙️ Changes
- Reconcile bare/rich component identities in ComponentsFound by @AMaini503 (#1760)
- Fix Docker scan hang: bound container removal, surface timeout telemetry by @AMaini503 (#1778)
- Address follow-up review feedback for matcher reuse and null-pattern validation by @jpinz (#1770)
v7.0.17
⚙️ Changes
- Bump mvn cli detector timeout to 9 min by @zhenghao104 (#1771)
v7.0.16
⚙️ Changes
- Simplify PatternMatchingUtility by removing expression trees by @JamieMagee (#1766)
- Replace
DotNet.GlobwithMicrosoft.Extensions.FileSystemGlobbingby @JamieMagee (#1767)
v7.0.15
⚙️ Changes
- Reapply "Add OCI image support to Linux scanner (#1708)" (#1716) by @jasonpaulos (#1717)
v7.0.14
⚙️ Changes
- Promote MavenWithFallback detector replacing MvnCli by @zhenghao104 (#1756)
v7.0.13
⚙️ Changes
- Fix VcpkgComponent purl construction for names containing slashes by @JamieMagee (#1752)
- Reapply "Update packageurl-dotnet to 2.0.0-rc.2 (#1730)" (#1751) by @JamieMagee (#1753)
v7.0.12
⚙️ Changes
- Revert: Bump packageurl-dotnet from 2.0.0-rc.2 to 1.0.0 by @zhenghao104 (#1751)
- Fix Docker scan timeout cancellation not working by @AMaini503 (#1729)
v7.0.11
⚙️ Changes
- Bump packageurl-dotnet from 2.0.0-rc.2 to 2.0.0-rc.3 by @JamieMagee (#1737)
- Only run smoketests in PRs targetting main repository by @grvillic (#1736)