v0.3.0-rc.4

🐛 Bug Fixes

• recover from panic in xml query (#456) by @github-actions in #458
• Use window of correct size in presence of newlines to grab content from xml files (#461) by @github-actions in #462

New Contributors

• @github-actions made their first contribution in #458

Full Changelog: v0.3.0-rc.3...v0.3.0-rc.4

v0.3.0-rc.3

🐛 Bug Fixes

• Handle exact package match in incident selector by @fabianvf in #454

Full Changelog: v0.3.0-rc.2...v0.3.0-rc.3

v0.3.0-rc.2

✨ Features

• Add XMLPublicID condition to builtin provider by @aufi in #306

🐛 Bug Fixes

• fixing up multimodule pom in examples by @shawn-hurley in #447
• Adding internal provider to provide the package for a given match. by @shawn-hurley in #448
• Fix up the demo output with the package output by @shawn-hurley in #449
• Handle cases when copyright and license are at top of file by @shawn-hurley in #451

New Contributors

• @aufi made their first contribution in #306

Full Changelog: v0.3.0-rc.1...v0.3.0-rc.2

v0.3.0-rc.1

✨ Features

• adding incident label selector CLI option by @shawn-hurley in #445

🐛 Bug Fixes

• using golang for filecontent searching" by @shawn-hurley in #443
• fixing panic when the deferenced slice variable is nil by @shawn-hurley in #444

Full Changelog: v0.3.0-beta.3...v0.3.0-rc.1

v0.3.0-beta.3

✨ Features

• add dependency location resolver and get code locations for XML, JSON files by @pranavgaikwad in #412

🐛 Bug Fixes

• Fix source decompilation by @jmle in #409
• Also download deps prior to downloading sources by @pranavgaikwad in #414
• Update generic + golang provider deps by @dymurray in #415
• Fix golang provider build by @dymurray in #417
• Use qaware's dependency plugin to avoid all issues related to maven dependency plugin by @jmle in #426
• #390 Workaround to prevent SEGV when POM file has no properties by @ascheman in #425
• Only analyze dependencies if running on source-only mode by @jmle in #429
• using golang for filecontent searching by @shawn-hurley in #430
• Implement sorting on structs when marshaling by @JonahSussman in #431
• Analyze all (yet known) formats of Maven dependency graph elements by @ascheman in #437
• Keep rule total in output logging by @eemcmullan in #435
• Test cases for #390 by @ascheman in #427
• Do not create tags for filtered out incidents by @pranavgaikwad in #438

New Contributors

• @dymurray made their first contribution in #415
• @ascheman made their first contribution in #425

Full Changelog: v0.3.0-beta.2...v0.3.0-beta.3

v0.3.0-beta.2

🐛 Bug Fixes

• Set xmx value on JVM to avoid OOMKilled by @pranavgaikwad in #388
• Fix dependency handling by @jmle in #385
• Fix compile step by @jmle in #397
• Fix test output by @jmle in #402

Full Changelog: v0.3.0-beta.1.2...v0.3.0-beta.2

v0.3.0-beta.1.2

✨ Features

• Use perl regexes to improve special char handling by @jmle in #383

🐛 Bug Fixes

• remove dep label selector from dependency condition by @shawn-hurley in #380

Full Changelog: v0.3.0-beta.1.1...v0.3.0-beta.1.2

v0.3.0-beta.1.1

✨ Features

• CVE-2023-39325 fix by @pranavgaikwad in #376

🐛 Bug Fixes

• fixing panics that occurred in the windup-shim by @shawn-hurley in #375
• Adding test to make sure that we don't find match in doc comment by @shawn-hurley in #374
• use base image when building for release by @djzager in #379

Full Changelog: v0.3.0-beta.1...v0.3.0-beta.1.1

v0.3.0-beta.1

✨ Features

• Add preliminary python support by @JonahSussman in #348
• only apply dep label selector on dep incidents by @pranavgaikwad in #371

🐛 Bug Fixes

• Handle file writing errors as fatal errors by @sarthaksarthak9 in #367
• Must compile for dependency:sources to work properly by @jmle in #368
• Fix ppc64le build by @JonahSussman in #372
• use the capture groups if they are set by @shawn-hurley in #369
• Do not add same jar twice when looking for deps and improve maven lookup by @pranavgaikwad in #373

New Contributors

• @jmle made their first contribution in #366
• @sarthaksarthak9 made their first contribution in #367

Full Changelog: v0.3.0-alpha.6...v0.3.0-beta.1

v0.3.0-alpha.6

✨ Features

• match targets with version ranges correctly by @pranavgaikwad in #341
• Update LSP types to more recent version by @JonahSussman in #324
• Add a label to short-circuit selector by @pranavgaikwad in #347
• Identify interesting Jars to decomp and improve decomp performance by @pranavgaikwad in #352

🐛 Bug Fixes

• Update the label value format as per new format by @pranavgaikwad in #342

New Contributors

• @jwmatthews made their first contribution in #346

Full Changelog: v0.3.0-alpha.5...v0.3.0-alpha.6