Changelog of FOSSology

4.6.0 (Nov 25th 2025)

This release 4.6.0 includes important fixes to 4.5.1 and introduces several enhancements to FOSSology, including:

Support added for Debian 13 (Trixie) and Tuxedo.
New OSSelot-based reuse.
- Ability to enable/disable OSSelot export from user settings and configuration pages.
- OSSelot import is enabled by default and can be toggled from the Customize page.
- Added feature to read a component name and fetch if available versions from OSSelot.
New folder-exclusion feature for skipping test or other specific folders during scanning.
Upload information export supported in JSON and CSV formats from the Admin > Folder Proportions page.
New REST API endpoints to schedule copyright false-positive cleanup/decluttering.
Expanded copyright cleanup rules in the copyright agent to further reduce false positives.
Added new license footprints and various fixes.
For more check 4.6.0-rc1

Credits to contributors for 4.6.0

From the GIT commit history, we have the following contributors since 4.5.1:

> deo002 <oberoidearsh@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> harshitg927 <gandhiharshit716@gmail.com>
> Ishaan Aggrawal <ishaanaggrawal101@gmail.com>
> its-sushant <sushant.kumar@siemens-healthineers.com>
> Jan Altenberg <jan.altenberg@osadl.org>
> Kaushlendra Pratap <kaushlendra-pratap.singh@siemens.com>
> laky241 <lakshay.kapoor.3333@gmail.com>
> Muhammad Salman <chsalmanramzan422@gmail.com>
> OliverFendt <ofendt@googlemail.com>
> Prakash Mishra <prakashmishra9921@gmail.com>
> Rajul Jha <rajuljha49@gmail.com>
> Ritankar Saha <ritankar.saha786@gmail.com>
> Saksham Mishra <sakshammishra112@gmail.com>
> SalmanDeveloperz <chsalmanramzan422@gmail.com>
> scanoss-qg <quique.goni@scanoss.com>
> Shaheem Azmal M MD <shaheem.azmal@gmail.com>
> Tiyasa Kundu <tiyasakundu20@gmail.com>
> Vaibhav <sahusv4527@gmail.com>

Corrections

5635d2f89 fix(copyright): advance search behaving erratically due to newline
13264baba fix(ui): fix edit in group edit page
e6e256ddc fix(nomos): fix mpl identification
09f5d01b7 fix(postinstall): update postinstall to accomodate release for multi OS versions
1b86e3522 fix(spdx): ensure valid SPDX ID generation for license candidates during RDF import

Infrastructure

02db05722 refactor(scheduleAgents): refactor breaking alignment of lists
19a594487 chore(ci): remove eol image and update dependency installation

4.6.0-rc1 (Oct 29th 2025)

This release 4.6.0-rc1 includes important fixes to 4.5.1 and introduces several enhancements to FOSSology, including:

Support added for Debian 13 (Trixie) and Tuxedo.
New OSSelot-based reuse.
- Ability to enable/disable OSSelot export from user settings and configuration pages.
- OSSelot import is enabled by default and can be toggled from the Customize page.
- Added feature to read a component name and fetch if available versions from OSSelot.
New folder-exclusion feature for skipping test or other specific folders during scanning.
Upload information export supported in JSON and CSV formats from the Admin > Folder Proportions page.
New REST API endpoints to schedule copyright false-positive cleanup/decluttering.
Expanded copyright cleanup rules in the copyright agent to further reduce false positives.
Added new license footprints and various fixes.

Credits to contributors for 4.6.0-rc1

From the GIT commit history, we have the following contributors since 4.5.1:

> deo002 <oberoidearsh@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> harshitg927 <gandhiharshit716@gmail.com>
> Ishaan Aggrawal <ishaanaggrawal101@gmail.com>
> its-sushant <sushant.kumar@siemens-healthineers.com>
> Jan Altenberg <jan.altenberg@osadl.org>
> Kaushlendra Pratap <kaushlendra-pratap.singh@siemens.com>
> laky241 <lakshay.kapoor.3333@gmail.com>
> Muhammad Salman <chsalmanramzan422@gmail.com>
> OliverFendt <ofendt@googlemail.com>
> Prakash Mishra <prakashmishra9921@gmail.com>
> Rajul Jha <rajuljha49@gmail.com>
> Ritankar Saha <ritankar.saha786@gmail.com>
> Saksham Mishra <sakshammishra112@gmail.com>
> SalmanDeveloperz <chsalmanramzan422@gmail.com>
> scanoss-qg <quique.goni@scanoss.com>
> Shaheem Azmal M MD <shaheem.azmal@gmail.com>
> Tiyasa Kundu <tiyasakundu20@gmail.com>
> Vaibhav <sahusv4527@gmail.com>

Features

846330ef3 feat(cmake): version ranging for fixing the policy errors
e20f7b95f feat(upload): add chipsbased UI for ignore folders
f3cd2c8c1 feat(trixie): add support for Debian 13 trixie
f36fa083d feat(reuser): add “Reuse from OSSelot” option to upload UI and import pipeline
e6a760500 feat(ui): create main license from browse lic pg
794e80cd3 feat(spdx): enhance OSSelot export for SPDX and ReadmeOSS compatibility
9501162aa perf(automation): optimize code for fossologyscanner
0730111af feat(folderoruploadproportions): add status and upload id to the existing table and exports
e6f7c76ab feat(release): add job to upload nomos binary
20976cd78 feat(core): introduce exclude folder functionality for ununpack
4f91c2a3d feat(oidc): add client credentials flow for m2m communication between licensedb and fossology
03bda161c feat(agent): scancode agent version upgrade to fix build
dc270f2bc perf(bulk): add upload_fk value to avoid query aggregation
517f230bc feat: adding support for Tuxedo
02e76b61b feat(api): 100% Models Test Case Coverage
66ba4bc65 feat(ci): add npm parser to ci
e0193e062 feat(group): add option to edit groupname
c14a625cb feat(ui): add confirmation dialog for export downloads
9e46d8230 feat(debug): Add option to enable detailed debugging logs for version control commands
d4147f1c6 feat(multi-file report): Fix issue with report generation
597a5247d test(api): update test cases for decider model
b0dc5697f feat(rest): add option to schedule copyrightfp
ff4fa74f8 feat(rest): patch upload name and description
16e0753b6 feat(ui): add CSV and JSON export functionality in folder dashboard
bc9a1571d feat(scanoss): Adds proxy support

Corrections

eefbae0af fix(ui): enhance export functionality in user edit template
85b24694d fix(copyright): add copyright cleanup rules
d22ff118d fix(spdxutils): fix export of spdxtv reports
6d9e289eb fix(spdxutils): improve handling of dual-license for spdxtv
fe9448104 fix(automation): add missing file
a41f03a3a fix(automation): optimize generation of SBOM
39c60b213 fix(reportimport): parse argument correctly
79ed00878 fix(folderanduploads): do not include duplicates by upload;
87e532f7e fix(spdxutils): fix handling of dual-license
6d84a0343 fix(obligations): import obligations message handling was broken due to unexpected type input passed
2a73a58c8 fix(automation): do not download diff for sbom
30d8956c7 fix: replace exit with proper error handling in LicenseMainGetter.php and spdx.php
1ab3d27ba fix(ci): static check for dco failing
806dd6d7c fix(dco): ignore dependabot user only
50b39e2c1 fix(dco): ignore checks for dependabot
91928e4e1 fix(UI): schedule an analysis
f1ec84d0d fix(nomos): fix footprints for licenses
d9419ef89 fix(nomos): fix regex for LGPL and CC0
e3f8d05ef fix(nomossa): define should_connect_to_db
e0470d084 fix(test): improve ruleset for better report and suites
ffa55f7c0 fix(phpfatalerror): fixed uncaught error to member function getRisk()
fcf95aa15 fix(nomos): prevent nomos CLI from connecting to DB when not required (fossology#1299)
54bc007a7 fix(nomos): add new licenses TI-TFL and TI-TSPA
0ec6a9a13 fix(agent-tests): modernize PHPUnit test and fix phpcs issues in test_common_menu.php
f7cb465b1 fix(pkgagent): remove wrong pg_free_result
c9773dbbb fix(bulk): update bulk to consider global decision conditionally
fad27ecd0 fix(jsload): reuse folder selector fails due to delayed JS loading
90dafa0ae fix(treeview): exclude scancode, reportimport and spasht from scheduleing
34ac31560 fix(ui): fix tooltip for reuse modal in file upload page
5c9b31a44 fix(pkgagenterror): pkgagent printing proper html encoded characters
12ca88795 fix(report): license type in clixml report appeared incorrect
fcdfcdf03 fix(licensepull): license and obligation pull error handling improvement
151edd62f fix(ui): jquery deferred exception fix
64b54c58d fix(agent): exclude example domains and specific TLDs from email/URL detection
37dffe6a6 fix(Convert2BrowserTime): improve error handling and validation
effe1817f fix(searchingAndSorting): unify search & sort for name column
34b414298 refactor(ui): refactor copyright and con lic page
4255e9c53 fix(api): fix /tree/view endpoint parameter check
07f690af3 fix(UI): improve duplicate file warning
f34a4f1eb fix(browse): resolve comment truncation inconsistency in DataTables
115978236 fix(ui): show copyright if only scancode data is available
31a449064 fix(api): enable JSON configuration support for external scanner agents
60da97544 fix: preventing é from being detected as ©

Infrastructure

c46c9e4f1 chore(deps): bump lukka/get-cmake from 4.1.1 to 4.1.2
6b83daa39 chore(deps): bump lukka/get-cmake from 4.0.3 to 4.1.1
f9fe3a6f7 chore(deps): bump actions/checkout from 4 to 5
38700fccc chore(deps): bump lukka/get-cmake from 4.0.3 to 4.1.1
c0aab8591 chore(deps): bump actions/checkout from 4 to 5
7772abd07 chore(deps): bump lukka/get-cmake from 3.31.5 to 4.0.3
53029ccb2 chore(deps): bump requests
0b7b43868 chore(deps): bump stoplightio/spectral-action from 0.8.11 to 0.8.12

4.5.1 (Mar 25th 2025)

This release is for the quick hot-fix on 4.5.0.

This release applies fix for decisionimporter agent user issue and also fixes PHP Errors and Notices.

Credits to contributors for 4.5.1

From the GIT commit history, we have the following contributors since 4.5.0:

> its-sushant <sushant.kumar@siemens-healthineers.com>
> Kaushlendra Pratap <kaushlendra-pratap.singh@siemens.com>

Features

bfac55322 feat(workflow): lint commit step in commit check added

Corrections

51a495b66 fix(ci): dco check not running on push event on main
60b7ca5f4 fix(decisionimport): fix incorrect parsing of argument
95f1fba31 fix(adminObligationsImport): undefined variable throwing warning

4.5.0 (Mar 18th 2025)

This release adds important corrections to 4.4.0

The release 4.5.0 introduces a number of corrections to 4.4.0 and changes to FOSSology, including:

Support SPDX v3.0 Reports
- SPDX3.0 report in JSON format.
- SPDX3.0 report in JSON-LD format.
- SPDX3.0 report in RDF format.
- SPDX3.0 report in tag/value format.
New Compatibility Agent with auto-conclusion feature using license_type
- Users can create new license type from admin > customize
- By default all the licenses are of type 'permissive'.
- One can change license type by editing a license.
- For importing OSADL compatibility matrix refer (documentation.)[https://github.com/fossology/fossology/blob/master/utils/OSADL_CONVERTOR.md]
- Create/update compatibility rules from admin.
JSON format export and import of licenses and obligations.
Import licenses from licenseDb.
Multi upload reuse support.
Improved ML based copyright false positive deactivation and clutter.
- Execute fo-postinstall --python-experimental to install this feature.
Number of API endpoints & test cases for existing features.

Credits to contributors for 4.5.0

From the GIT commit history, we have the following contributors since 4.4.0:

> abhi-kumar17871 <akumar17871@gmail.com>
> abhishekrj02 <abhishekbokaro442@gmail.com>
> Akash Kumar Sah <akashsah2003@gmail.com>
> Alberto Pianon <alberto@pianon.eu>
> Andreas Menzl <Andreas.Menzl@magna.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> deo002 <oberoidearsh@gmail.com>
> Dinesh Ravi <dineshr93@gmail.com>
> Divij Sharma <divijs75@gmail.com>
> Florian Greinacher <florian@greinacher.de>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Grigory Balashov <g.balashov@omp.ru>
> Harshit Gandhi <gandhiharshit716@gmail.com>
> Hero2323 <abdelrahmanjamal5565@gmail.com>
> Ibrahim-Muhammad13 <ibrahimmuhammad13720@gmail.com>
> its-sushant <sushant.kumar@siemens-healthineers.com>
> Jan Altenberg <jan.altenberg@osadl.org>
> Jeronimo Ortiz <jeronimo.ortiz@scanoss.com>
> Kaushlendra Pratap Singh <kaushlendra-pratap.singh@siemens.com>
> martyone <martin.kampas@seafarix.com>
> Rajul Jha <rajuljha49@gmail.com>
> scanoss-qg <quique.goni@scanoss.com>
> Shaheem Azmal M MD <shaheem.azmal@gmail.com>
> Sourav Bhowmik <sourav.bhowmik@siemens.com>
> Sushant Kumar <sushant.kumar@siemens-healthineers.com>
> valens200 <valensniyonsenga2003@gmail.com>

Features

8a34040b8 feat(import): Import Obligations From LicenseDB

Corrections

551899e62 fix(db): check on drop view if exists
f705e3e65 fix(docker): Runtime dependency not found for compatibility
ed9403d28 fix(docker): add missing dependency

Infrastructure

cd3ea88c0 chore(docker): Removed version from docker-compose.yml

4.5.0-rc2 (Mar 3rd 2025)

This release adds important corrections to 4.5.0-rc1 and changes to FOSSology, including:

Support SPDX v3.0 Reports
- SPDX3.0 report in JSON format.
- SPDX3.0 report in JSON-LD format.
- SPDX3.0 report in RDF format.
- SPDX3.0 report in tag/value format.
New Compatibility Agent with auto-conclusion feature using license_type
- Users can create new license type from admin > customize
- By default all the licenses are of type 'permissive'.
- One can change license type by editing a license.
- For importing OSADL compatibility matrix refer (documentation.)[https://github.com/fossology/fossology/blob/master/utils/OSADL_CONVERTOR.md]
- Create/update compatibility rules from admin.
JSON format export and import of licenses and obligations.
Import licenses from licenseDb.
Multi upload reuse support.
Improved ML based copyright false positive deactivation and clutter.
- Execute fo-postinstall --python-experimental to install this feature.
Number of API endpoints & test cases for existing features.

Credits to contributors for 4.5.0-rc2

From the GIT commit history, we have the following contributors since 4.5.0-rc1:

> Andreas Menzl <Andreas.Menzl@magna.com>
> Jan Altenberg <jan.altenberg@osadl.org>
> Kaushlendra Pratap <kaushlendra-pratap.singh@siemens.com>
> Rajul Jha <rajuljha49@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@gmail.com>
> Sourav Bhowmik <sourav.bhowmik@siemens.com>

Features

43047c5a2 feat(changelog): add change log for release 4.5
3576fe1d1 feat(conclusionString): Update Conclusion String

Corrections

fb81f1c97 fix(python): Use safaa 0.0.2
b7aafc710 fix(scanner): Fix broken Scanner Image
59006b83d fix(packaging): add required yaml dependency
dbf6a5b93 fix(api):Plugin Load ajax-copyright-hist
0788830dd fix(ui): fixing the folder navigation collapse issue
3c409df76 fix(reportImport): (Re-)enable import of SPDX 2.2 documents
089f6dd67 fix(api): Jobs no longer displayed wrongly as queued
8fe5bcd57 fix(db): Migration Was failing due to Old views and Tables

Infrastructure

714fe0247 build(deps): bump requests
58797a159 chore(notice): update third party notices for 4.5.0

4.5.0-rc1 (Jan 9th 2025)

This release adds important corrections to 4.4.0

The release 4.5.0-rc1 introduces a number of corrections to 4.4.0 and changes to FOSSology, including:

Support SPDX v3.0 Reports
- SPDX3.0 report in JSON format.
- SPDX3.0 report in JSON-LD format.
- SPDX3.0 report in RDF format.
- SPDX3.0 report in tag/value format.
New Compatibility Agent with auto-conclusion feature using license_type
- Users can create new license type from admin > customize
- By default all the licenses are of type 'permissive'.
- One can change license type by editing a license.
- For importing OSADL compatibility matrix refer (documentation.)[https://github.com/fossology/fossology/blob/master/utils/OSADL_CONVERTOR.md]
- Create/update compatibility rules from admin.
JSON format export and import of licenses and obligations.
Import licenses from licenseDb.
Multi upload reuse support.
Improved ML based copyright false positive deactivation and clutter.
Number of API endpoints & test cases for existing features.

Credits to contributors for 4.5.0-rc1

From the GIT commit history, we have the following contributors since 4.4.0:

> Abhishek Kumar <akumar17871@gmail.com>
> abhishekrj02 <abhishekbokaro442@gmail.com>
> Akash Kumar Sah <akashsah2003@gmail.com>
> Alberto Pianon <alberto@pianon.eu>
> Andreas Menzl <Andreas.Menzl@magna.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> deo002 <oberoidearsh@gmail.com>
> Dinesh Ravi <dineshr93@gmail.com>
> Divij Sharma <divijs75@gmail.com>
> Florian Greinacher <florian@greinacher.de>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Grigory Balashov <g.balashov@omp.ru>
> Hero2323 <abdelrahmanjamal5565@gmail.com>
> Ibrahim-Muhammad13 <ibrahimmuhammad13720@gmail.com>
> Jan Altenberg <jan.altenberg@osadl.org>
> Jeronimo Ortiz <jeronimo.ortiz@scanoss.com>
> Kaushlendra Pratap Singh <kaushlendra-pratap.singh@siemens.com>
> martyone <martin.kampas@seafarix.com>
> Rajul Jha <rajuljha49@gmail.com>
> scanoss-qg <quique.goni@scanoss.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Sushant Kumar <sushant.kumar@siemens-healthineers.com>
> valens200 <valensniyonsenga2003@gmail.com>

Features

b35ba4784 feat(spdx): Support SPDX v3.0 Reports
e3297b8e6 enhancement(ui): add server side pagination to compatibility rule page
f42555771 doc(compatiblity): add docs to compatibility agent
c90827b83 test(compatibility): add unit and functional tests
c0cff0dd0 feat(compatibility): convert OSADL matrix to yaml
09b4f2582 feat(automation): Add custom allowlist.json
c978bd4a8 feat(differential scans): Add differntial scans to CI Scanner
009f1df15 feat(automation) : Add custom keyword.conf file
ed7ada3a2 feat(api): New endpoints to get/delete/restore/update scancode email, author, url findings
00bdea4ef feat(api): New endpoints to get/delete/restore/update scancode copyright findings
66302bdb1 feat(api): Added OneShot analysis endpoints for Nomos, Monk and Copyright scanners
632073271 feat(api): New endpoints to delete/restore/update/count user copyright findings
7cf8ab759 feat(api): New endpoint to retrieve user copyright findings
909b6ac72 test(api): added more unit test cases for maintenance and upload tree APIs
fe4d8f20e feat(treeview): make the bulk option availible for multiple folders
baa4db049 feat(api): sort and status filter options to jobs endpoint
75b6e6c67 feat(ui): multi upload support for reuse In case of multi file upload, provide a modal to select reuse options for each upload. Multi file upload modal data and the mapping.
eaaea7257 feat(newAgent/Compatibility): compatibility agent
8ca3cbc6c test(api): added unit test cases for api including folder,upload,license,maintenance andd overview
bfea384ad test(api): upgraded controller test cases to support v2 standards
c01458e8d test(models): added more unit tests for group,job,scancode.etc
2adcd36d7 feat(api): modify /jobs and related endpoints
6eef93663 feat(nomos): Add start, end, len to nomos JSON output.
9664b00ce feat(automation) : Add line numbers to copryright and keyword
682f56006 feat(automation) : Add line number to copyright and keyword scans for diff scans
6d4d08c78 feat(info): add assignee, assigned data and clearing duration in info page
60da85491 feat(import): introduce json format to import licenses and obligations via json
69773a089 feat(experimental): change color and tooltip information
a1d5f914d feat(api): Upgrade Jobs & Report APIs to Version 2
a871f3cfb feat(api): Upgrade User & Group APIs to Version 2
dfd3a1a53 feat(decider): send heartbeat
9a2cc13cc feat(copyright): integerate safaa for copyright
7a2caa8c0 feat(api): Completed tasks 7, 8, 12, 14, 15, 16, 17 and changed unit tests, models and documentation
7a53e741d feat(api): task 1,3,4,5,6,9,10,11 done, unit-tess, models and documentation changed accordingly.
cc4c95873 feat(userFindings): club unique user findings of copyright ecc and ipra for report
4337ea4cb feat(buildsystem): Introduce FORCE_CONF_OVERWRITE option
0a104650a feat(licenses): introduce JSON format export for licenses and obligations
0f43cfa88 feat(api): Upgrade Folder, License & Obligation APIs to Version 2
52cf30d3b feat(api): JSON format export and import of licenses and obligations via APIs
2e11f5e01 feat(line_numbers) : Add line numbers to CI Scanners output
02972d94b feat(upload): add tooltips and description to individual agents
c6c757d5f feat(api): Upgrade Search, Copyright & Admin APIs to Version 2

Corrections

bca013ddc fix(licensedb): remove redundant usage of LicenseDBSleep
deeb8464f fix(reportImport): Adding a fallback to ShortName for RDF imports.
f3f5b1286 fix(reportImport): Parse for ListedLicense when importing an RDF report
f543afa1e fix(reports): remove additional licenses in obligation section
bed7627bc fix(conf): unify license names to match in reports
2c126e86d fix(ui): Ignore SCM files option is always disabled when use Upload - From Server page
56dedaa49 fix(reportutils): use groupId to get concludedlicense
ada8c0d12 fix(api): Modified openapiv2.yaml to accommodate V2 post upload requests with multipart/form-data content type
8d2e68777 fix internal server error
3debd2f65 fix(monk): filter bulk scan files by agent for current upload
8feee2853 fix(composer): update phpoffice/phpspreadsheet without XSS vulnerability
c251676a8 fix(decisionimporter): fix agent to handle missing pfile
1d6aed3ba fix(ui): wrong pagination for show jobs page & missing upload accessible check
82ac4b9bf fix(ui): Add exactmatch to license search
bfdb34d63 fix(ecc): Update conf file to satisfy specific use cases for ecc
d059c57e0 fix(scanoss): Add heartbeat to scanoss agent
37a3b52c3 fix(ui): Add loader to upload per and edit dec page
833a93a69 fix(created_by): Add created by column to candidate license table
3dc1ee285 fix(scanoss): Fix row number out of range. Restore Snippet match UI. Delete temp folders
3c221e245 fix(ui): DataTable Showing last addition
02f403a1d fix(report): use groupId to get candidate licenses which are main license
75efafafc fix(Report): Check the return value of getLicenseById()
e45d4a9f7 fix(AjaxExplorer): Check the return value of getLicenseByShortName()
9bf69d4df fix(ReportUtils): Include files with No_license_found as well
2f09bfc15 fix(scancode): Use spdx_license_key instead of key
2a604b8c8 fix(scancode): Fixed failing scancode agent in Docker
95260a6ca fix(spdx): encode rdfs:seeAlso uri if contains &
31ac4128d fix(RestAuthMiddleware): exclude from auth only the right endpoints
3ec401409 fix(ojo): ignore extra symbols at end
0f821c075 fix(fo_mapping_license.php): Fix update_license()
1f01b5a49 fix(delagent): use uploadtree as default table name
7175642f1 fix(unifiedreport): excluded obligation license
2f02bf561 fix(ui): implemented search in software heritage page and search and filter in file browser page
48b76d5b9 fix(doc): Update UploadTree Description
acc545c8e fix(import): Do not require an agent if the report has no related data
d4046f949 fix issue 1868: SPDX import does not conclude licenses based on hash values but on file name
192b0091e fix(licenseExport): add all licenses to csv and fix cells
ebd05d4e1 fix(spdx2): Mark duplicates correctly with LicenseRef prefix
dc7cb7c90 hotfix(scanner): fix scanner image build
51817c752 hotfix(docker tests): Migrate to docker compose from docker-compose
df2fde3e5 hotfix(docker_test): Use docker compose (v2) instead of docker-compose (v1)
7aa37b778 refactor(php): used expressions with combined operators (#2685)
04ec5efa7 refactor(automation): Upgrade spdx_tools package from 0.8.0a2 to 0.8.2(latest) in requirements.txt
3f7440edb refactor(search): refactor search page
51df904b4 refactor(report): remove datetime from report names
6be8f6e24 refactor(reportImport): use EasyRdf to read report
0233f5e53 feat(ubuntu): support ubuntu noble 24.04 for fossology
574b7b635 refact(models): renamed services.xml to services.xml.in file

Infrastructure

1102c20e7 build(deps): bump lukka/get-cmake from 3.31.3 to 3.31.4
c30a578fe build(deps): bump the composer group across 1 directory with 3 updates
5424418e5 build(deps): bump docker/login-action from 2 to 3
66669d54a build(deps): bump docker/build-push-action from 3 to 6
dd7f9dd7f build(deps): bump lukka/get-cmake from 3.31.2 to 3.31.3
0add9d3ca build(deps): bump peaceiris/actions-gh-pages from 3 to 4
c13187372 build(deps): bump stoplightio/spectral-action from 0.8.10 to 0.8.11
7e3662efd build(deps): bump docker/setup-buildx-action from 2 to 3
00d95772f build(deps): bump actions/checkout from 2 to 4
b7802ee13 build(deps): bump lukka/get-cmake from 3.23.0 to 3.31.2
9d2e909e7 build(deps): bump fsfe/reuse-action from 1 to 5
3c2f25a8f build(deps): bump docker/setup-qemu-action from 2 to 3
1f15c5763 build(deps): bump twig/twig from 3.4.3 to 3.11.1 in /src
0b0337563 build(deps): bump twig/twig from 3.11.1 to 3.11.2 in /src
7d7dbf61c chore(cmake): ignore anaconda paths
98b3ab24a chore(package): add compatibility agent deb package
c7cc8ce8c chore(compatibility): optimize agent
46db9cd7c chore(dependabot): add dependabot.yml
68ef02021 chore(decider): fix indent
51188fe34 chore(model): fix indent
76ebce114 deps(docker)!: update docker base to Debian 12
ea9a54467 ci: define permissions for conflict check workflow
842f3dd3c docs(scanoss): updated documentation for the SCANOSS agent

4.4.0 (Jan 15th 2024)

This release adds important corrections to 4.4.0-rc2

The release 4.4.0 introduces a number of corrections to 4.3.0 and major changes to FOSSology, including:

Major changes from GSoC contributors:
- During GSoC 2023, FOSSology saw a major influx in REST API endpoints. Now there are endpoints for almost all information available on UI.
- During same operations, we also created the framework changes to allow 2 versions of REST API (v1 & v2). This will allow us to unify the REST API in future while still supporting v1.
- Another big change was creation of new agent to generate CycloneDX reports.
- We also changed the integration mechanism with ScanCode resulting in major speed improvements in the scan.
With this release, we also bring support for Debian Bookworm (12)
Support extraction of Zstandard files
Support GitHub Actions in the scanner image and generate SPDX reports
Multiple fixes in SPDX reports
Sync with SPDX License list v3.22

Credits to contributors for 4.4.0

From the GIT commit history, we have the following contributors since 4.3.0:

> Abdelrahman Jamal <abdelrahmanjamal5565@gmail.com>
> Devesh Negi
> Divij Sharma <divijs75@gmail.com>
> dushimsam <dushsam@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Hero2323 <abdelrahmanjamal5565@gmail.com>
> Igor Mishchuk <igor.mishchuk@carbonhealth.com>
> Kamal Nayan
> Kgitman
> lata <imlata1111@gmail.com>
> Marc-Etienne Vargenau <marc-etienne.vargenau@nokia.com>
> mayank-pathakk <mayank234pathak@gmail.com>
> Nejc Habjan <nejc.habjan@siemens.com>
> Richard Diederen <richard.diederen@ict.nl>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Simran Nigam <nigamsimran14@gmail.com>
> soham4abc <sohambanerjee4abc@hotmail.com>
> srideep-banerjee <banerjee.srideep@gmail.com>
> Sushant Kumar <sushantmishra02102002@gmail.com>

Corrections

68dbed209 fix(spdx_ref): use LicenseRef to check ref license
8d990bb05 fix(ui): use group id to get shortname
5a70fbddf fix(api): read optional agentId, UploadController
24b0e1a67 fix(postinstall): check status of a2ensite

4.4.0-rc2 (Jan 8th 2024)

This release adds important corrections to 4.4.0-rc1

The release 4.4.0-rc2 introduces a few corrections to 4.4.0-rc1 and changes to FOSSology, including:

fix token generation for user.
fix dependencies for bookworm.
check if ScanOSS is installed.

Credits to contributors for 4.4.0-rc2

From the GIT commit history, we have the following contributors since 4.4.0-rc1:

> Devesh Negi <@DEVESH-N2>
> Divij Sharma <divijs75@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Kgitman <@Kgitman>
> Richard Diederen <richard.diederen@ict.nl>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>

Features

9e9085b1e feat(api): make cyclonedx report available via the API

Corrections

3f2bda48d fix(api): do not check page for empty response
c9b396dc0 fix(view): check if ScanOSS is installed
e712da2c6 fix(token): fix token generation for user
ad5636fdb fix(action): Ensure proper handeling of enum values in argparse
bef8ca024 fix(licenseRef): make dataype consistent
01c073c89 fix(php): Fix null pointer issue in createClearingDecisions() (#2658)
dff597d00 fix(deb): fix dependencies for bookworm
6761de11d style(php): Corrected the SQL syntax error in AllDecisionsDao.php

Infrastructure

9028e7dc8 chore(notice): update both notice and notice.spdx files to latest
23be4848c chore(notice): update third party notices 4.4.0

4.4.0-rc1 (Nov 21st 2023)

This release adds important corrections to 4.3.0

The release 4.4.0-rc1 introduces a number of corrections to 4.3.0 and major changes to FOSSology, including:

Major changes from GSoC contributors:
- During GSoC 2023, FOSSology saw a major influx in REST API endpoints. Now there are endpoints for almost all information available on UI.
- During same operations, we also created the framework changes to allow 2 versions of REST API (v1 & v2). This will allow us to unify the REST API in future while still supporting v1.
- Another big change was creation of new agent to generate CycloneDX reports.
- We also changed the integration mechanism with ScanCode resulting in major speed improvements in the scan.
With this release, we also bring support for Debian Bookworm (12)
Support extraction of Zstandard files
Support GitHub Actions in the scanner image and generate SPDX reports
Multiple fixes in SPDX reports
Sync with SPDX License list v3.22

Credits to contributors for 4.4.0-rc1

From the GIT commit history, we have the following contributors since 4.3.0:

> dushimsam <dushsam@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Hero2323 <abdelrahmanjamal5565@gmail.com>
> Igor Mishchuk <igor.mishchuk@carbonhealth.com>
> Kamal Nayan @legendarykamal
> lata <imlata1111@gmail.com>
> Marc-Etienne Vargenau <marc-etienne.vargenau@nokia.com>
> mayank-pathakk <mayank234pathak@gmail.com>
> Nejc Habjan <nejc.habjan@siemens.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Simran Nigam <nigamsimran14@gmail.com>
> soham4abc <sohambanerjee4abc@hotmail.com>
> srideep-banerjee <banerjee.srideep@gmail.com>
> Sushant Kumar <sushantmishra02102002@gmail.com>

Features

7ed5f9ad9 feat(licenseRef): add new licenses from SPDX
572fdaeda feat(menu): add new button to indicate system load in banner
f154bfd53 feat(upload): track assignee and closing events
33a581909 feat(bulk): checkbox to select scan for findings only
16f8cffce feat(conf): support CLIXML conf for a upload
2f16eef42 feat(os): add support for Debian Bookworm (12)
8c28b2f72 feat(api): migrate /tokens endpoints to v2
16331926b feat(dashboard): add new page for upload and folder dashboard
dc47e29b1 feat(unifiedreport): support json format for rows and also html break
bc1cc0d24 feat(api): add 'topitem' endpoint to Upload API
c217a3991 feat(schedule agent): add select2 to search for uploads with name
88d04ec6d feat(api): unify cx endpoints
4e3e0bfc5 feat(api): added author API endpoints
deeb79e20 feat(api): Export Obligation list as CSV
54f4859e0 feat(api): delete obligation based on id
697960066 feat(api): Import obligation list from CSV
a5f29c38c feat(api): get all obligations details
8d8573ff8 feat(api): get details of a particular obligation using id
1630e79d0 feat(api): export single license as CSV
94d874dcb feat(api): The REST API to export licenses-list as CSV
e0220f921 feat(api): api to get the list of obligations
7fb494c4c feat(api): Get all contents of a specific folder
be9d9cba6 feat(api): get Banner message
bfff708bc feat(api): Unlink folder contents
524090aed feat(api): Get removable folder contents
4e213d350 feat(api): update conf data endpoint implemented
d9223a635 feat(api): update customise endpoint
1d6898920 feat(api): Get Customise page data
ce3b009e2 feat(api): Run scheduler based on the given operation's option
3a48ab052 feat(api): Get scheduler options for a given operation
8c45508e6 feat(api): Get active queries for Dashboard overview
9af03d271 feat(api): Get database metrics overview for dashboard
5da361699 feat(api): Suggest license from reference text
f591d2a28 feat(api): Get all server jobs for Admin Dashboard
f878673df feat(api): Get PHP-Info for the Dasbhoard Overview
e19384ef3 feat(api): Get disk space usage overview
1234f19e0 feat(api): Get the database contents for the overview of Foss. operations
e607bcc45 feat(api): Merge a license into an existing one
7e7e0ebfa feat(api): verify license as new or variant
7404e6b37 feat(ununpack): support for Zstandard
7e51fed2c feat(api): Add, Edit, toggle standard-license comment
34af20910 feat(api): Get the summary statistics for all Jobs
f55fed9ac feat(SETUP-V2): Support Multiple Versions (V1 & V2)
a95d77459 feat(api): get-all standard comments
eccede06d feat(api): REST API to schedule the bulk-scan
01f73826a feat(api): Get Customise page data
cbee2ee97 feat(api): Add, edit & delete license decision
0dd1c3e89 feat(api): Add, Edit & toggle admin license acknowledgement
89e7748ae feat(api): get all agents revisions
e82a0cf8a feat(api): conf info for upload
c755ff564 feat(api): get a list of scanned licenses for an upload
0bde97682 feat(CycloneDX): Add new agent cyclonedx
7e181f87d feat(api): Get licenses reuse summary API
309dd70d5 feat(api): get list of license decisions for an item
13d79e23e feat(api): File info API implemented
e4085b07e feat(api): get edited licenses list
bf5a8c569 feat(api): Get all licenses-admin acknowlegments
33f75c7f5 feat(api): get the license tree-view of the upload and item
e2370c786 feat(nomos): add more regex to nomos to identify different licenses
ac1897635 feat(api): Update upload-summary API for additional info
08fba9484 feat(api): get all agents for the upload
707094c31 feat(api): API to return total number of copyrights for a file
87e756c63 feat(api): get licenses histogram
670a37de4 feat(api): Get the clearing-progress info for an upload.
76d75929b feat(api): restore deleted copyrights
3bb66039b feat(api): REST API to get keywords and hightlight-entries from content
c0e6c8b00 feat(api): Get clearing-history data API
ea3adb358 feat(api): Get list of bulk-history API
e6b086f8d feat(api): handle three filters to get prev & next item
779e2331a feat(scanner): generate spdx report
ee2b2f703 feat(api): update file copyright api added
bec422b64 feat(api): delete copyright
22b4c594c feat(api): copyright info for file
b3351361c feat(scanner): support github in scanner
b8a3590f3 feat(api): Remove a particular main license from an upload
c36b317cf feat(api): add the new main license for the upload
f34019cae feat(api): set the clearing decision for a particular item
9207e349a feat(api): content negotiation on /openapi
55b06cc2c feat(api): get the contents of the file
5bcb4f5a6 feat(api): openapi.yaml exposed through api
3f701df9b feat(api): add pagination to license browser
f4a578b87 feat(api): get main licenses assigned on an upload
992c0b2d1 feat(delete-job-endpoint): Added a delete job endpoint to the Fossology API

Corrections

a943cb4ad fix(spdx2): avoid license text duplication in rdf
145318a5f fix(spdx2): accept null values for arrays
19041f0d9 fix(unifiedreport): replace double quotes with single to fix line breaks
ccad99efa fix(documentation): update README.md with PHP version
099fe015c fix(ci): fix build in Debian Buster
6373c574c fix(api): default values of page and limit
4160f35db fix(user-edit): handle HttpForbiddenException
249207f8b fix(user-edit): compare old email and skip email count check
e979e2782 fix(db): change agent_rev to text
9af3fcf9c fix(php): replace array_push by assignment
ba6506619 fix(php): add missing semicolon
2915b7534 fix(php): remove & to be compatible with PHP 8
a882ff932 fix(php): Factor common code
df39a6744 fix(cylonedx): update for changes in SPDX
e01006b21 fix(spdx): de-duplicate licenses with same SPDX ID
8682ab5c5 fix(php): replace deprecated split by explode
d871f83d6 fix(php): Using ${var} in strings is deprecated
f3b2e0a8b fix(php) Optional parameter declared before required parameter
7370c2bd6 fix(PSR-12): closing ?> tag MUST be omitted
c10906db7 fix(test): fix REST API testcases
226d38e0d fix(api): move obligation removal code for rest
0eb928490 fix(api): use ObligationMap instead of Model class
7e630262f fix(api): extend obligation model don't create new
1e9ef3739 fix(api): use ObligationMap instead of modifying UI
8d6ab4550 fix(dao): use DbManager in SysConfigDao
cdc011348 fix(api): fix ConfController to accept diff values
9ba7b468a fix(api): fix sysconfig controller and dao
b7b611ecd fix(api): fix lint error and use UTC where possible
ea4d682fe fix(test): fix wrong test according to comment
92e1eb44b fix(cd): Fix release workflow for version
7f7a5c362 fix(delagent): Use bcrypt to check password
a49f6c8d6 fix(clixml): fix deb package name
879e205bf fix(api): fix linter issues
70aca2a63 fix(automation): update copyright
fb3a5600a fix(eyeButtonForPasswords): removed external css usage
6bc1ddd05 fix(clixml.php): Fixed the issue of PhP 8 Warning

Infrastructure

05bf86a9b deps(composer): update composer/spdx-licenses
c356f1b38 chore(lib): refactor code
ebeeadbdb chore(ununpack): drop upx support
ce8a51553 test(nomos): add new test files
82f169228 chore(ci): tag scanner image on release
5a4b9b1ff refactor(api): introduce error handling
8ee16e820 chore(api)!: update minor version; breaking change
f143d709d chore(api): update API version 20231006
8d44d989b chore(api): move obligation endpoints from license
7e20bd677 perf(scancode):Improve scanning speed of scancode agent
5764e24c7 perf(api): performance optimization for FolderController
1b16ed786 chore(dao): update FolderDao::removeContent to return bool
1fffdd41b chore(api): rename endpoint /unlinkable to be unambiguous
b3df71d23 chore(api): update API version 20230929
0b964c3e1 perf(api): refactor /license/suggest for optimization
91a06f86a doc(php): fix parameter docs
3850bde2e doc(php): fix parameter docs
3065d249c chore(gitpod): update gitpod scripts
9847f6ef4 chore(UploadTreeProxy): optimize license file query
3251d494a chore(pythondeps): preserve proxy env with su
aa7e5b4e8 chore(api): update API version 20230811
b65cb4946 refactor(browse): use join to fetch data from two tables
d11e08ec8 chore(api): update version 20230728
880ed0114 chore(api): update api version
a5afabdc3 refactor(copyright): Refactored some redundant code. Resolved declutter turning text to lowercase. Renamed some variables to be more informative.
4d347d911 chore(css): change look for eye button
33f123f5e docs(README.md): adding more details about docker-compose cmd

4.3.0 (Jun 22nd 2023)

This release adds important corrections to 4.3.0-rc2

The release 4.3.0 introduces a number of corrections to 4.2.1 and major changes to FOSSology, including:

Integration with ScanOSS
Add new field SPDX ID for licenses, making FOSSology reports more SPDX compliant.
- Same time, fix SPDX reports and update to v2.3
- Rename deprecated licenses like GPL-2.0+
Update build system to CMake from GNU Make.
New option to export and import FOSSology decisions.
Several security fixes.
New list to define predefined acknowledgements for easy reuse.
Consider folder level and package level bulk.
Drop Ubuntu Bionic support.

Credits to contributors for 4.3.0

From the GIT commit history, we have the following contributors since 4.2.1:

> Avinal Kumar <avinal.xlvii@gmail.com>
> dushimsam <dushsam@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> hero2323 <abdelrahmanjamal5565@gmail.com>
> Krishna Mahato <krishhtrishh9304@gmail.com>
> mayank-pathakk <mayank234pathak@gmail.com>
> Sanjay Krishna S R <sanjaykrishna1203@gmail.com>
> scanoss-qg <quique.goni@scanoss.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Simran Nigam <nigamsimran14@gmail.com>
> soham4abc <sohambanerjee4abc@hotmail.com>
> srideep-banerjee <banerjee.srideep@gmail.com>
> Toussaint Nicolas <nicolas1.toussaint@orange.com>

Features

83191c8e9 feat(thirdpartyLicenses): update third notices

Corrections

753fbbbc9 fix(scanoss): check json-c version for buster

4.3.0-rc2 (Jun 13th 2023)

This release adds important corrections to 4.3.0-rc1

The release 4.3.0-rc2 introduces following major corrections to 4.3.0-rc1:

Consider folder level and package level bulk.
Drop Ubuntu Bionic support.
Replace two single quotes to one in escaped string.

Credits to contributors for 4.3.0-rc2

From the GIT commit history, we have the following contributors since 4.3.0-rc1:

> Gaurav Mishra <mishra.gaurav@siemens.com>
> hero2323 <abdelrahmanjamal5565@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>

Corrections

c9abbe0c7 fix(user-edit.php): Fixed editing emails allows for duplicate emails for multiple users.
c9fb01d93 fix(user-add.php): Fixed email can be blank but required.
a3f7d469a fix(bulkReuse): consider folder level and package level bulk
3a782ceb0 fix(composer.json.in): update slim/psr7 in .in file
97ef64c67 fix(warnings): fix unified report warnings
0d175334d fix(conf): replace two single quotes to one in escaped string
a3a022c6b fix(cd): fix release build action

Infrastructure

c50da8045 chore(scanoss): remove jq
6c393d4e1 chore(composer): update min php to 7.3.31
2cc1b4249 chore(os): drop Ubuntu Bionic support
b8fbcb4e9 chore(deps): bump slim/psr7 from 1.4 to 1.4.1 in /src

4.3.0-rc1 (May 9th 2023)

This release adds important corrections to 4.2.1

The release 4.3.0-rc1 introduces a number of corrections to 4.2.1 and major changes to FOSSology, including:

Integration with ScanOSS
Add new field SPDX ID for licenses, making FOSSology reports more SPDX compliant.
- Same time, fix SPDX reports and update to v2.3
- Rename deprecated licenses like GPL-2.0+
Update build system to CMake from GNU Make.
New option to export and import FOSSology decisions.
Several security fixes.
New list to define predefined acknowledgements for easy reuse.

Credits to contributors for 4.3.0-rc1

From the GIT commit history, we have the following contributors since 4.2.1:

> Avinal Kumar <avinal.xlvii@gmail.com>
> dushimsam <dushsam@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Krishna Mahato <krishhtrishh9304@gmail.com>
> mayank-pathakk <mayank234pathak@gmail.com>
> Sanjay Krishna S R <sanjaykrishna1203@gmail.com>
> scanoss-qg <quique.goni@scanoss.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Simran Nigam <nigamsimran14@gmail.com>
> soham4abc <sohambanerjee4abc@hotmail.com>
> srideep-banerjee <banerjee.srideep@gmail.com>
> Toussaint Nicolas <nicolas1.toussaint@orange.com>

Features

e826f5141 feat(docker): update images to Debian 11 (bullseye)
081bc812c feat(clixml): introduce LinkScanTool
1faf25a60 feat(licenseCsv): export spdx id in license CSV
d62e603d9 feat(deleteFileFromBrowse): Ability to delete file from browse page
bda57059b feat(viewPasswordInLogin): Eye button to view Password while logging in
0576ef943 feat(scanoss-agent): Initial version of SCANOSS agent for FOSSology
987b2774a feat(API): POST report/import route for initiating a report import job
de006de77 feat(decision-dump): export-import IPRA data
485bb8856 feat(invertSearch):Added inverse search in Email/Url/Author Page
e40e7ae37 feat(API): /jobs/{id}/history GET route to get the history of all the jobs queued based on an upload
fec0e60da feat(highlightRows):Highlighted deleted rows on copyright/URL/Author/Email tables
644879dd6 feat(api): update response for candidate delete
a4721ab4a feat(API): delete admin-license candidate
7ed947d3c feat(API): get license candidates
0fd6be41c feat(api): clearing status
2ac466b19 feat(api): change API schema for file uploads
23ff12e3f feat(API): change group member's permission
d9b2597a7 feat(spdx): validate SPDX ID before adding
a113b816c feat(spdx): update tag:value format to v2.3
f844ea1d7 feat(spdx): update to v2.3
c173a05ce feat(nomos): update SPDX license shortnames
738c259c2 feat(spdx-tools): update to new repository
d6aaaf805 feat(license): use spdx identifiers for licenses
c4e702f82 feat(copyright): add new agent IPRA to FOSSology
266299f06 feat(copyright): add new keywords for ECC and keyword agent
7e1b7a801 feat(cmake): include libraries using cmake style
52ac2abad feat(install): cmake changes for easy-install and vagrantfile
df8ddfe41 feat(eximporter): add file path for upload tree
f9d7e2156 feat(acknowledgements): add new ack dropdown to select saved ack
c5d8c5b78 feat(showjobs): show status link for inprogress jobs
de52028e6 feat(newagent): new agent decision export import
4b9c941c0 feat(buildsystem): Add CMake Build System

Corrections

24983d146 fix(dao): getLicenseByCondition set statement name on condition
add8abf00 fix(report): check array key exists
d4adf4a09 fix(spdx): create LicenseRef for custom license text
54562ca00 fix(README): Fix broken Travis SVG
fb9d50f8e fix(api): check if hist has required keys
fc34bb660 fix(clixml): add acknowledgement to reports
e98e22e15 fix(api): jti not required for oauth tokens
9540a9cbd fix(adminLicensecandidate): replace while loop with foreach and correct variables
5ba11350b fix(rest): swap upload and folder id to create job
01019b5f4 fix(dumpExport): create pfile table always
8c729eee8 fix(import): ignore missing utree in dump import
1295ea11d fix(clixml): use license full name in clixml report
d1bd7b55d fix(api): unify dump and report import
ada5f201a fix(search): fix search endpoint
56ba70bb0 fix(manualCopyright):Made Disabled Manual Copyrights Visible in UI
73c471438 fix(api): change response of job history
e40e7ae37 feat(API): /jobs/{id}/history GET route to get the history of all the jobs queued based on an upload
62212dbed fix(decisionImporter): deduplicate file
5bf20e3ef fix(obligationsGetter): separate licenses
963faaae1 fix(unifiedreport): fix warnings of unified report agent
7f4df1597 fix(spdx-rdf): use CDATA for attributionText
affc84466 fix(core-schema): fix index to match DB
14723b5d3 fix(api): add new model LicenseCandidate for admin endpoint
eb5d5e0bd fix(api): add new model FileLicenses for REST API
4c7be95ca fix(API): merge multiple upload-api calls into one.
bd38495bc fix(api): check user permission before editing groups
b7a6a9c15 fix(unifiedReport): fix table distortion for component link
523d832fc fix(ci): add missing dependency to runner image
7bd7ecba6 fix(spdx): add license text for valid RDF
f5eb9ea13 fix(security) fix inaproppriate encoding for output context Added ENT_HTML5 | ENT_QUOTES to ensure that all characters are properly encoded on output
d10d972e5 fix(security) fix Reflected XSS vulnerability, where input data was displayed directly on the web page
29604025e fix(security) Sanitized external command parameter with escapeshellarg as untrusted string may contain malicious system-level commands engineered by an attacker
bd2fb8f2e fix(security) Replaced cryptographically insecure PHP rand() function with built-in for PHP random_int() with secure pseudo-random number generator
58fec86e2 fix(build): various build fixes
47066a32c fix(oauth): update username if oauth email matches
1fcc19be9 fix(licenseRef): show only active licenses in bulk and user decisions
5d39fab5a Fix(api): Fixed filesearch request
5dafd15a5 fix(conf): add escape string and fetch raw content

Infrastructure

3149e444d chore(deps): bump guzzlehttp/psr7 from 2.4.3 to 2.5.0 in /src
df2fb2716 chore(scancode): fix the version to 31.2.4
34fd909db chore(cmake): do not cache git version
c443aebca chore(build): fix building of monkbulk package
14f8ea382 chore(Makefile): remove old Makefiles

4.2.1 (Nov 15th 2022)

This release is for the quick hot-fix on 4.2.0.

This release applies fix for REST API to patch access to User object. More fixes like importing missing classes and handling other PHP Errors and Notices.

Credits to contributors for 4.2.1

From the GIT commit history, we have the following contributors since 4.2.0:

> Gaurav Mishra <mishra.gaurav@siemens.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>

Features

4bcf25682 feat(user-edit): make use of retention period to display expired tokens

Corrections

53c047bfb fix(ui): fix PHP error and notices
aeceaff6a hotfix(ui): fix User object accessing

4.2.0 (Nov 11th 2022)

This release adds important corrections to 4.2.0-rc1

Since RC1, minor updates with dependencies and a fix to unified report has happened.

The release 4.2.0 introduces a number of corrections to 4.1.0 and major changes to FOSSology, including:

Adopting REUSE.software standards to FOSSology source code.
Detecting copyrights as per REUSE standards.
Support for Ubuntu Jammy (22.04)
Display package health according to Licenses folder.
Update various dependencies.
Fix line breaks for LibreOffice.
Multiple new features in REST API.

Credits to contributors for 4.2.0

From the GIT commit history, we have the following contributors since 4.1.0:

> aman1971 <ak584584@gmail.com>
> Antoine Auger <antoineauger@users.noreply.github.com>
> Avinal Kumar <avinal.xlvii@gmail.com>
> dushimsam <dushsam100@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Karthik Krishna <gkarthikkrishna1@gmail.com>
> Krishna Mahato <krishhtrishh9304@gmail.com>
> Martin Daur <mdaur@gmx.net>
> pret3nti0u5 <vineetvatsal09@gmail.com>
> rohitpandey49 <rohit.pandey4900@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Soham Banerjee <sohambanerjee4abc@hotmail.com>
> Thanvi pendyala <thanvipendyala194@gmail.com>

Features

76dc5801d chore(php-jwt): use new features from v6.3.0
fd8eef901 feat(composer): update composer dependencies

Corrections

88faee7e7 fix(debian): prevent duplication of bootstrap
965552b12 fix(unifiedReport): fix line break issue in libre office
f2650a9de fix(oneShotMonk): convert value to int to fix php fatal
28de987d6 fix(licenseView): fix missing comment select

4.2.0-rc1 (Sep 30th 2022)

This release adds important corrections to 4.1.0

The release 4.2.0-rc1 introduces reuse specifications to fossology.

The release 4.2.0-rc1 introduces a number of corrections to 4.1.0 and major changes to FOSSology, including:

Support ubuntu jammy 22.04
Detect SPDX-FileCopyrightText keyword
Allow user to configure token
Reuse all report columns
Detect Licenses Folder

Credits to contributors for 4.2.0-rc1

From the GIT commit history, we have following contributors since 4.1.0:

> aman1971 <ak584584@gmail.com>
> Antoine Auger @antoineauger
> Avinal Kumar <avinal.xlvii@gmail.com>
> dushimsam <dushsam@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Karthik Krishna <gkarthikkrishna1@gmail.com>
> Krishna Mahato <krishhtrishh9304@gmail.com>
> Martin Daur <mdaur@gmx.net>
> pret3nti0u5 <vineetvatsal09@gmail.com>
> rohitpandey49 <rohit.pandey4900@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> soham4abc <sohambanerjee4abc@hotmail.com>
> Thanvi pendyala <thanvipendyala194@gmail.com>

Features

eb07d7626 feat(reuse): detect Licenses Folder
f9f9023a2 feat(ubuntu): support ubuntu jammy 22.04 for fossology
afa5fd58a feat(licenseRef): add/update licenses from spdx.org
88025d5a6 feat(copyright): Detect SPDX-FileCopyrightText keyword
41674a5bd feat(API): add user to a group.
b154feee9 feat(api): Download file using UploadID
7fbbe736c feat(API): import csv-license file
85cf46567 feat(oidc): allow user to configure token
54f80533c feat(api): Set permissions for a upload in a folder for different groups
14aba0a4c feat(API): REST-API to initiate FOSSology mantainance
a5d6a18d5 feat(API): get group members with corresponding roles
42e7f0c13 feat(API): remove member from group.
0c9620e95 feat(api): new endpoint for geting copyright details
c2b09f16e feat(api): jobs/all endpoint added
53b043b19 feat(API): delete user group
917ee86af feat(API): jobs returns only logged in user's jobs
4038daac1 feat(reuse): ignore text of testdata
454c8cede feat(resue): reuse standard
40dfd5833 feat(reuse): implemented REUSE standard
f60b09983 feat(reuse): implemented REUSE standard
a3e8f235e feat(reuse): Adopted Reuse.software standard
3424028f5 feat(API): Add pagination to search request
9c12b6222 feat(copyrightexport): Added copyright export to fo_nomos_license_list
262b93954 feat(ui): close banner for a session
11f424ac3 feat(API): added a copyright feat in /uploads/{id}/licenses api

Corrections

cc1f48985 fix(lint): openapi lint corrected
f88a614ec fix(api): add missing variables
b8de588a6 fix(reportImport): remove dual check for access and fix array warning
6778a6041 refactor(demomod): add missing code in makefile
118f29e0f fix(copyright): fix regex conf files
41cd3d446 fix(default_group): exposed deafult_group in /users/self
8bde786a7 fix(ui): restore license text for bulk modal
fa4964c83 fix(reuser): reuse all report columns
b9f727dc4 fix(ci): update spectral-action to fix ci test
a9054815a fix(uploadPermission):introduced error on changing upload permissions
20376e602 fix(reuse): perform code fixes on reuse branch
75a386bc1 test(ci): Run REUSE compliance check in CI
dd873faf6 fix(reuser): add scancode as dependency if sched
8c9f8bf92 fix(ui): Fix upload from Srv for parameterize agent
13fb71910 fix(make): Fix warnings in make for Ubuntu 20.04.2 LTS
d94cced54 fix(readme): typo fixed

Infrastructure

251be4682 chore(deps): bump twig/twig from 3.3.8 to 3.4.3 in /src
03b180355 chore(Dockerfile): add OCI annotations
534564bc9 docs(openapi): fix spectral lint warnings/errors
045440de8 chore(component-id): use package-url instead purl
ff8e440de chore(deps): bump guzzlehttp/guzzle from 7.4.1 to 7.4.3 in /src
42aa7c40d chore(workflow): update GHA dependencies
c7d61ba6d chore(deps): bump guzzlehttp/guzzle from 7.4.4 to 7.4.5 in /src
113253c2d chore(deps): bump guzzlehttp/guzzle from 7.4.3 to 7.4.4 in /src
fe2bd41a0 docs(reuse): reuse badge added

4.1.0 (May 12th 2022)

This release adds important corrections to 4.1.0-rc1

The release 4.1.0 introduces new agent ScanCode, used to scan for licenses, copyrights etc.

The release 4.1.0 also introduces new feature to automatically deactivate the copyrights and cutter removal. There is a special note about this feature.

As this feature can still be improved, we are marking this as experimental and not recomended for productive instances. Also this feature requires to install additional dependencies. One needs to run fo-postinstall with --python-experimental.

The release 4.1.0 introduces a number of corrections to 4.1.0-rc1 and major changes to FOSSology, including:

Security fix for JWT tokens
Migration fix for copyrights

Credits to contributors for 4.1.0

From the GIT commit history, we have following contributors since 4.0.0:

> Anupam Ghosh <anupam.ghosh@siemens.com>
> Archisman Dawn <archismandawn7@gmail.com>
> coder-whale @coder-whale
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Ettinger Katharina <katharina.ettinger@siemens.com>
> Karthik Krishna <gkarthikkrishna1@gmail.com>
> Kaushlendra Pratap <kaushlendrapratap.9837@gmail.com>
> krishna9304 <krishna.mahato@precily.com>
> Rohit Pandey <rohit.pandey4900@gmail.com>
> Sarita Singh <saritasingh.0425@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> SvetaInChina <Huaying.Liu@mediatek.com>
> Tassilo Pitrasch <t.pitrasch@gmail.com>
> Toussaint Nicolas <nicolas1.toussaint@orange.com>

Corrections

840479e51 fix(scancode): add missing class name to fix tooltip
31ca7525a fix(scancode): move python dependencies
cc5d9d8e5 fix(jwt): explicitly declare jwk algorithm
f8a18ae7e fix(copyright): do not update empty copyrights

Infrastructure

f431c98c7 chore(scancode): hide scancode UI if not installed

4.1.0-rc1 (April 8th 2022)

This release adds important corrections to 4.0.0

The release 4.1.0-rc1 also introduces new agent ScanCode, used to scan for licenses, copyrights etc.

The release 4.1.0-rc1 also introduces new feature to automatically deactivate the copyrights and cutter removal. There is a special note about this feature.

As this feature can still be improved, we are marking this as experimental and not recomended for productive instances. Also this feature requires to install additional dependencies. One needs to run fo-postinstall with --python-experimental.

The release 4.1.0-rc1 introduces a number of corrections to 4.0.0 and major changes to FOSSology, including:

Add a new agent scancode-toolkit
Deciding copyrights with Spacy
Add new decision type non-functional
Admin can delete any upload
Fix unicode replacement in exportLicenseRef
Provide server version on REST api
Update license texts from SPDX
Clixml-xml based reporting format

Credits to contributors for 4.1.0-rc1

From the GIT commit history, we have following contributors since 4.0.0:

> Anupam Ghosh <anupam.ghosh@siemens.com>
> Archisman Dawn <archismandawn7@gmail.com>
> coder-whale @coder-whale
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Ettinger Katharina <katharina.ettinger@siemens.com>
> Karthik Krishna <gkarthikkrishna1@gmail.com>
> Kaushlendra Pratap <kaushlendrapratap.9837@gmail.com>
> krishna9304 <krishna.mahato@precily.com>
> Rohit Pandey <rohit.pandey4900@gmail.com>
> Sarita Singh <saritasingh.0425@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> SvetaInChina <Huaying.Liu@mediatek.com>
> Tassilo Pitrasch <t.pitrasch@gmail.com>
> Toussaint Nicolas <nicolas1.toussaint@orange.com>

Corrections

3fb149388 fix(rest): fix CORS issue
163866bd6 fix(rest): Added default client ID claim
711618199 fix(rest): Allows client ID claim to be configurable
0f53f78fd fix(exportLicenseRef): fix unicode replacement
32ed138b2 fix(pkgagent): Fixes FossologyUI unexpected token error
13603a0c6 fix(API): Fixes FossologyUI CORS error for localhost
346db84fc fix(openapi.yaml): OpenAPI Description: Fix typo in HeathInfo
784bb5782 fix(api): Correct uploadId is returned for UploadFromURL
568fe02e3 fix(rest): fix scope for oauth
6e6688402 fix(nomos): Improved nomos GPL detection
b81696054 feat(nomos): add 'BSD-4-Clauset-Shortened' license
4739e6c93 fix(scancode): update load function and fix testcases for scan code
d10e3c3f8 hotfix(rest): fix file upload
4e26e35b7 fix(deleteupload): Admin can delete any upload
d5bdf4acd fix(installdeps): fix call to external script
f15fe07db fix(global): add statement name for global query to fix reuser
b2e1273f6 fix(clixml): fix free text fields in clixml
79d604d8b fix(testcase): fix test cases for lib
fc603ef54 fix(rest): Slim fixes for REST API
b37948fe5 fix(phpunit): Fix function signature for PHPUnit
52e37ca0b fix(test): fix test failures caused by sysconfig
2e9b8f1de fix(report): Set content type header

Features

0b65c31b6 feat(licenseRef): add or update license texts from SPDX
c00bc94f8 feat(scancode): add scancode to debian packaging
bc577a049 feat(report): accept package URL
19d6cb2f0 feat(copyright): Deciding copyrights with Spacy
cc9f94bd3 feat(dev-ctbutton): Added clean text button at license text field
2a7d18e86 feat(rest): oidc based authentication
24f666101 feat(upload): Warning on duplicate upload
b8e94ac29 feat(scancode):Added scancode API and minor fixes
6cf46d450 feat(copyright):Integrating scancode to copyrightUI
14437f970 feat(scancode):Add a new agent scancode-toolkit
e08eeb71f feat(version): Update sysconfig release from version
cc30d1293 feat(newAgent): clixml-xml based reporting format
7fcf09f70 feat(ui): show dropdown for "mark as" decisions
bb85d5350 feat(decisions): add new decision type non-functional
438f178f2 feat(upload): allow multifile upload from UI
d98041925 feat(gdpr) deactivate users + Store last cnx timestamp
7445f15bf feat(keyword): add new word 'stolen from' to keyword agent
f9d17c50c feat(lbtablelength):Added all for license browser table
1da36ad53 feat(rest): Provide server version on REST api

Infrastructure

5d3b01304 chore(deps): bump guzzlehttp/psr7 from 2.1.0 to 2.2.1 in /src
5fd23105f chore(install): update python deps installation
01bafc2e2 test(ci): run docker tests in GitHub Actions
d70570c56 chore(browse): redirect to license view if empty
3fc43965f chore(composer): update composer form 1.9.0 to 2.2.6 version
830608b62 chore(deps): bump twig/twig from 3.3.4 to 3.3.8 in /src
8d245be73 chore(composer): Update composer dependencies
9b1df8f77 refactor(clearingDao): add few functions to a single one
0aeebfe2e refactor(ui-clearing-view_rhs.html.twig) : Changed tooltip description for "Do not use"
10011f039 perf(sysconfig): Setup sysconfig at fossinit

4.0.0 (Jan 20th 2022)

This release adds important corrections to 4.0.0-rc1

The release 4.0.0 introduces following major changes since 3.11.0:

Support Debian 11
Add bootstrap in fossology to beautify ui
Remove old gold files
Remove old log files
Provide custom delimiters for monkbulk scan
New info and health endpoints for rest
Update license texts from SPDX
Add new report format CSV.
Option to make user details read-only
Make global decisions configurable while upload

NOTE: The release also introduces new look to fossology tool, only few pages have changes/classes of new bootstrap UI. Other pages still needs corrections.

Credits to contributors for 4.0.0

From the GIT commit history, we have following contributors since 3.11.0:

> Anupam Ghosh <anupam.ghosh@siemens.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Ettinger Katharina <katharina.ettinger@siemens.com>
> Marion Deveaud <marion.deveaud@siemens.com>
> Piyussshh @Piyussshh
> Sarita Singh <saritasingh.0425@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Shruti3004 <mail2shruti.ag@gmail.com>
> Toussaint Nicolas <nicolas1.toussaint@orange.com>
> Wonjae Park <wonjae.park@lge.com>

Corrections

734f439e4 fix(reportImport): Fix interfaces in report import
bc70462a8 fix(ui): Fix bulk modal with selectable bg
d4f32b865 fix(reports) fix CSV report action title
1287c5723 Fix merge errors

Features

574c13d1c feat(reports): fix indent errors
2550919a2 feat(reports): Add new CSV report type
df3573982 feat(nomos): See file regex to include view
44acd2029 feat(nomos): New see-url pattern
01273ae78 feat(users) Add option to make user details read-only
306260bfc feat(reports) Fix DEP5 report menu entry
144875921 feat(reports): change report names in drop down menu
a778c5f68 feat(upload): make global decisions configurable
f1c4ed4fa Add option to make user details read-only

Infrastructure

0afbb8fe5 chore(cd): Continue release build on failure
ff3b7d63a Update src/www/ui/async/AjaxShowJobs.php
ec0a26956 Revert "fix(login): Allow non-admin user to update"
5596f78d7 Revert "Add option to make user details read-only"
e063beda2 Revert "Fix merge errors"
a07ccd939 Merge all GDPR related work

4.0.0-rc1 (Dec 21st 2021)

This release adds important corrections to 3.11.0

The release 4.0.0-rc1 introduces following major changes since 3.11.0:

Support Debian 11
Add bootstrap in fossology to beautify ui
Remove old gold files
Remove old log files
Provide custom delimiters for monkbulk scan
New info and health endpoints for rest
Update license texts from SPDX

NOTE: The release also introduces new look to fossology tool, only few pages have changes/classes of new bootstrap UI. Other pages still needs corrections.

Credits to contributors for 4.0.0-rc1

From the GIT commit history, we have following contributors since 3.11.0:

> Anupam Ghosh <anupam.ghosh@siemens.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Marion Deveaud <marion.deveaud@siemens.com>
> Piyussshh @Piyussshh
> Sarita Singh <saritasingh.0425@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Shruti3004 <mail2shruti.ag@gmail.com>
> Toussaint Nicolas <nicolas1.toussaint@orange.com>
> Wonjae Park <wonjae.park@lge.com>

Corrections

b7fca0b45 fix(logrotate): Send SIGHUP
272c0c8a3 fix(report): same license text for different shortname
31127344e fix(ui):Fix upload from VCS for parameterize agent
93c5fa446 fix(ui): Change folder edit to bootstrap
8a52c390d fix (build): do not fail is /usr/share/man* folders already exist
f7dbf3833 fix(rest): fixed the pagination in apis
d8b776ba1 fix(unifiedreport): Fix upload link for API
a3c92909e hotfix(api): Add missing auth controller
4a978109a fix(upload): Fix upload description input
36a1573ae fix(login): Allow non-admin user to update
6c241d202 fix(test): Fix licenseRef.json
e62c84291 fix(ci): Update OpenAPI lint
c039b4c37 fix(ui): Allign folder tree
7e7cf82db fix(rest): fix typo in openapi.yaml, s/reuse_uplod/reuse_upload/
5b17c4999 fix(ui): add line break in upload name if exceeds 20 chars

Features

7db93f622 feat(gitpod): Inital contribution
2e2b27642 feat(spasht): Show effective score
7f117cbe6 feat(ui): add bootstrap in fossology to beautify ui
bb9d7f946 feat(licenseText): update license texts from SPDX
5f0696095 feat(monkbulk): Custom delimters
f42e07318 feat(monk): New delimiters dnl
143e20e80 feat(edit-user): Let user can define default folder and use the default
b6de455d6 feat(rest): New info and health endpoints
50ebaf51f feat(maintagent): Implement deleteOrphanGold fn
9b474be28 feat(ui): Read delimiters for clean text
267ef0af4 feat(rest): Filter uploads with 4 new parameters
31dd1c44f feat(ci): GitHub-ci for c-tests
3d71a2ca7 feat(os): Support Debian 11
4064dfc31 feat(maintagent): Implement removeOrphanedFiles fn
d0f7bddcf feat(maintagent): Remove old gold files
856a2c40d feat(maintagent): Remove old log files

Infrastructure

6af218c92 chore(os): Drop xenial support for eol
2844492a0 docs(openapi): complete OAS spec to pass linting
32f707c25 chore(lint): make sure swagger spec is correct
a309c814d ci(actions): Build Docker images in Actions
0d5227960 docs: Updated README.md and CONTRIBUTING.md
50b3bf168 feat(rest): Update upload information
b3d8b4789 feat(unifiedreport): include assigned to in component clearing section

3.11.0 (Jul 27th 2021)

This release adds important corrections to 3.11.0-rc2

The release 3.11.0 introduces following major changes since 3.10.0:

Add bulk undo for deactivated copyrights.
Configurable irrelevant file scan for monkbulk.
Add job to remove expired tokens from database.
Add a simple search to get folder.
Unit test cases for REST API.
Reuse edited copyright.
Add scroll to NOTICE file modal.
Set candidate license creator for ojo.
Fix external auth.
Updating the license info files.

NOTE: The release 3.11.0 also introduces new agent reso which copies license findings from OJO based on REUSE.Software standard on what license is a binary file licensed under(if available).

Credits to contributors for 3.11.0

From the GIT commit history, we have following contributors since 3.10.0:

> Aman Dwivedi <aman.dwivedi5@gmail.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> Anwar Hashmi @HashmiAS
> bighnesh0404 <saibighneshprusty@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Michael C. Jaeger <michael.c.jaeger@siemens.com>
> Nicolas Toussaint <nicolas1.toussaint@orange.com>
> OmarAbdelSamea <1700903@eng.asu.edu.eg>
> R3da <hash.rkh@gmail.com>
> Rolf Eike Beer <eb@emlix.com>
> Sarita Singh <saritasingh.0425@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> shivamgoyal7 <goyalshivam661@gmail.com>
> Shruti3004 <mail2shruti.ag@gmail.com>
> Wonjae Park <wonjae.park@lge.com>
> Ying-Chun Liu (PaulLiu) <paulliu@debian.org>

Corrections

e4803b8fe fix(migration): check if uploadtree is empty
635d4904a fix(rules) : adding debian package for reso agent
b44249e2d fix(copyright):Change menu text of copyright page

3.11.0-RC2 (Jul 12th 2021)

This release adds important corrections to 3.11.0-rc1

The release 3.11.0-rc2 introduces following major changes since 3.11.0-rc1:

Set candidate license creator for ojo.
Fix external auth.
Updating the license info files.

The release 3.11.0-rc2 also introduces new agent reso which copies license findings from OJO based on REUSE.Software standard on what license is a binary file licensed under(if available).

Credits to contributors for 3.11.0-RC2

From the GIT commit history, we have following contributors since 3.11.0-rc1:

> Gaurav Mishra <mishra.gaurav@siemens.com>
> Michael C. Jaeger <michael.c.jaeger@siemens.com>
> Nicolas Toussaint <nicolas1.toussaint@orange.com>
> Shruti3004 <mail2shruti.ag@gmail.com>

Corrections

f7c7715fa fix(reso) fix comment
8e399f0cd fix(ojo): Set candidate license creator
8031b128b fix(auth): read default visibility from database rather then config file
b3f0d1db0 fix(api): Check for duplicate shortnames
2d6d8b187 fix(auth): fix call to add_user() when login from external auth

Features

df52e53ba feat(rest): Filter licenses by kind
3c98947cf feat(expose-headers): added the expose headers option for response headers
d1031cae3 feat(reso): new agent for REUSE.Software standard
2e1d28eb1 feat(rest): Add POST/PATCH license endpoints

Infrastructure

93a47eab0 docs(licenses): updating the license info files
0eacc14af test(api): Test cases for LicenseController

3.11.0-RC1 (Jun 29th 2021)

This release adds important corrections to 3.10.0

The release 3.11.0-rc1 introduces following major changes since 3.10.0:

Add bulk undo for deactivated copyrights.
Configurable irrelevant file scan for monkbulk.
Add job to remove expired tokens from database.
Add a simple search to get folder.
Unit test cases for REST API.
Reuse edited copyright.
Add scroll to NOTICE file modal

> Aman Dwivedi <aman.dwivedi5@gmail.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> Anwar Hashmi @HashmiAS
> bighnesh0404 <saibighneshprusty@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> OmarAbdelSamea <1700903@eng.asu.edu.eg>
> R3da <hash.rkh@gmail.com>
> Rolf Eike Beer <eb@emlix.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> shivamgoyal7 <goyalshivam661@gmail.com>
> Shruti3004 <mail2shruti.ag@gmail.com>
> Wonjae Park <wonjae.park@lge.com>
> Ying-Chun Liu (PaulLiu) <paulliu@debian.org>

Corrections

858a9070d fix(ui): Fix the modal height for small screens
01afe6c2d fix(reuser): Reuse edited copyright
7343edb40 fix(copyright): Make check strict
d90541903 fix(nomos): improved nomos MPL-2.0 detection
e16588a8c fix(api): Add missing reuser options
7782452a7 fix(ui): Break long lines in copyright table
65832e9a0 fix(debian): Add php-gd package as dependency
576bf4c79 fix(ui-export-list): Dont add integers
c985342f9 fix(ui): License text editor
ac86e7e6c fix(ui): Add scroll to NOTICE file modal
06796d149 fix: remove wrong 'extern "C"' guards
5365585a6 fix(links): fix broken links
c7a2a9ab1 fix(decision): Create ce for folder decisions irr
1139443b7 fix(Dockerfile): upgrade debian distribution
58160879f fix(ui): Show error message for invalid license id
d9857c6dc fix(report): Do not merge ack text
3a6454b4d Update ReuserAgent.php
c7cfffbdc fix(UI): fix html errors, css errors and add viewport meta tag
f2ff40b6d fix(username): update session variable on username change
d92ee4c0b fix(email): Update email command for s-nail
d5d56f7c2 fix(gcc-10): Fix errors and warnings
83e857261 fix(test): Add new assignee attribute to REST
c38d57888 fix(cli): Dependency exception
858a9070d fix(ui): Fix the modal height for small screens

Features

b1ab4d0a0 feat(dbcreate): retry psql check while starting
1d7f5f9fc feat(restAPI): Added options request and verification function
ff3816fb3 test(rest): Unit test cases for REST API
1c3dab241 feat(licenseExport): include obligation topic in exported CSV
61c320418 feat(ui): Remember assignee filter on Browse view
1e8764463 feat(rest): Add assignee id to fossology API
40b3e2faf feat(Ui): added Default upload visibility
af89659c7 feat(addMetadata): added creationdate,lastModifiedDate,usernameCreated and usernameModified in candidate license
2bc632925 feat(migration): general improvements for copyright migration
5a7d45708 feat(copyright): add bulk undo for deactivated copyrights
86fe8a3f2 feat(browse): add a simple search to get folder
1dc44506d feat(ci): Mark PRs with conflict with Actions
47d9cb9be feat(maintagent): add job to remove expired tokens from database
c563e80ce feat(export): Download results in spreadsheet (xlsx)
26fe22e8a feat(monkbulk): Configurable irrelevant file scan
d973e1983 feat(export) : Consolidating results per file or directories
02fcb8afd feat(rest): Add /users/self endpoint

Infrastructure

ccabb703c chore(gitignore): add db.cron and fossdash-publish.py to .gitignore
4238d7808 chore(dependency): update jquery and select2 version

3.10.0 (May 7th 2021)

This release adds important corrections to 3.10.0-rc2

The release 3.10.0 introduces following major changes since 3.9.0:

Change copyright handling add new table copyright_event.
Drop support for PHP5 and update dependencies for PHP7
Update password hashing algorithm from SHA1 to more secure bcrypt.
Advance search and replace for copyrights.
Ability to enforce password policies.
Feature to import license acknowledgement from NOTICE file.
Ununpack agent can be compiled to work in standalone mode.
Create new licenses as candidate for OJO.
Read XML in chunks to support large files for ReportImport.
Add license search based on short name in REST.
Do not add decisions if the events have no change.

NOTE: This release also adds a migration script which migrates copyright data to new table copyright_event. Migration processes is mandatory because without migration, old copyright activation/deactivation may not work. also it approximately takes 15 min for 1M records.

Credits to contributors for 3.10.0

From the GIT commit history, we have following contributors since 3.9.0:

> Alan Hohn <Alan.M.Hohn@lmco.com>
> Aman Dwivedi <aman.dwivedi5@gmail.com>
> Andreas J. Reichel <andreas.reichel@tngtech.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> Avinal Kumar <avinal.xlvii@gmail.com>
> Bartłomiej Dróżdż <bartlomiej.drozdz@orange.com>
> Darshan <kansagara.darshan97@gmail.com>
> David Lechner <david@pybricks.com>
> Dineshkumar Devarajan (RBEI/BSF6) <Devarajan.Dineshkumar@in.bosch.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Helio Chissini de Castro <helio@kde.org>
> Mikko Murto <mikko.murto@hhpartners.fi>
> Michael C.Jaeger <michael.c.jaeger@siemens.com>
> Pawan Kumar Meena <Pawank1804@gmail.com>
> Piotr Pszczola <piotr.pszczola@orange.com>
> rlintu <raino.lintulampi@bittium.com>
> Sahil <sjha200000@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Shruti3004 <mail2shruti.ag@gmail.com>
> Toussaint Nicolas <nicolas1.toussaint@orange.com>
> YashJipkate <yashjipkate@gmail.com>

Corrections

58e1e4c9d fix(docker-compose): Revert container port to 8081
d269582a5 fix(actions): Build pages on release

Infrastructure

e9ca31401 perf(migration): remove offset to make the query faster
271287be1 fix(build): Make script compatible with Xenial

3.10.0-RC2 (Apr 19th 2021)

This release adds important corrections to 3.10.0-rc1

The release 3.10.0-RC2 introduces following major changes:

Change copyright handling add new table copyright_event.
Create new licenses as candidate for OJO.
Read XML in chunks to support large files for ReportImport.
Show parent folder on *Browser views.
Add license search based on short name in REST.
Do not add decisions if the events have no change.
Migrate github pages deployment to GHA.

Credits to contributors for 3.10.0-RC2

From the GIT commit history, we have following contributors since 3.10.0-rc1:

> Alan Hohn <Alan.M.Hohn@lmco.com>
> Aman Dwivedi <aman.dwivedi5@gmail.com>
> Anupam <ag.4ums@gmail.com>
> Avinal Kumar <avinal.xlvii@gmail.com>
> Darshan <kansagara.darshan97@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Mikko Murto <mikko.murto@hhpartners.fi>
> Pawan Kumar Meena <Pawank1804@gmail.com>
> Piotr Pszczola <piotr.pszczola@orange.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Shruti3004 <mail2shruti.ag@gmail.com>
> Toussaint Nicolas <nicolas1.toussaint@orange.com>
> YashJipkate <yashjipkate@gmail.com>

Corrections

53aa058cb fix(DBMigrate): add rows with same agent_fk for migration
8e1e7bfcd fix(ui): updated the link of scheduler documentation
71cc0cea1 fix(copyright): improve reuse and correct update queries
23fe64335 fix(link): changed the broken documentation page link
3a5eeab03 fix(copyrightevent): General improvements
50b9dd5e4 fix(rest): missing Group component in API documentation
0bda7e2b7 fix(nomos): Flush stdout in JSON writer
44dea1ab0 fix(UploadTreeProxy): Get if candidate license
36200a90a fix(ui): Show parent folder on *Browser views
5fc03c699 fix(uploadDao): Fetch status based on group id
405e8529e fix(globalDecision): fix global decision prevent adding history in case of global decision
a4e5dd93a fix(decider): Do not global ojo decisions
729e654fb fix(ojo): Create new licenses as candidate
1e9138445 fix(reuser): updated misleading UI label This closes issue 1876
81ac2b584 fix(reportImport): Read XML in chunks
cf547a77f fix(reuser): Do not process pfiles with id 0
3e4dcdf7b fix(reuse): correct docstring
ca9395bfd fix(globaldecision): do not add decisions if the events have no change
de92148a8 fix(cd): Use published event to build release pkgs
1c42760b7 fix(fossdash) : waiting for completing the execuition of find command
84d9153fa bugfix(fossdash) : updated find cmd to clean reported files
707b93149 fix(fossdash script): script file to install fossdash dependencies
fae866901 fix(fossdash script) : fix the improper formate of data to influxDB.
14e7ee101 other(fossdash config): changed config file link to permanent wiki page.
4d2c1791d other(fossdash.log) : changed fossdash log path
a635bc1aa removed(bootstrap file): removed bootstrap min js and it's related references.
870e5fd94 Other(license changed) : License info changed and fossdash UI config changed
3c28b7df9 remove(log counter) : remove error counter feat from fossdash. and consider it in the future scope.
a6341a21f fix(fossdash-config): fixed substring find
4ff79d6c0 fix(uuid-ossp): Create extension as postgres

Features

9a1fd6163 feat(static-checks.yml): migrate static checks and analysis to GHA
2a90ff34b feat(copyright): save deleted copyrights in copyright_event table
eded1d7d2 feat(deploy-pages.yml): migrate github pages deployment to GHA
f91881a7b feat(swh): Allow API token
1e28973b2 feat(rest): get groups and create group functionality
41d8e88fa feat(reuse): Change data type of reuse_group from int to string
8aa47c444 feat(rest): add license search based on short name
6181f9165 feat(rest): get copyright info for file hash
7d1fa425b feat(fossdash metrics config): using default metrics file, if metric config is empty.
14afdd588 feat(beautify error) : Added ERROR and WARNING sign
e8da2b880 feat(log counter) : Maintain and push log counter into influxDB.
57db5d36f Test(fossdash-config) : unit-test for fossdash_config.php

Infrastructure

0dba2364c docs(deploy-pages.yml): add copyright
d434bf7b5 docs(CONTRIBUTING.md): Fixed broken link and typos
98311e89d docs(README): fixed broken links, typos, grammatical errors and added test instance
0886d574f refactor(.travis.yml): remove static checks and analysis
f0603b6e1 refactor(.travis.yml): remove github pages deployment
cbdb12d73 Revert "feat(copyright): save deleted copyrights in copyright_event table"
0c564843c refac(swh): Move agent configuration to Sysconf
5c23a327e refactor(fossdash UI menu) : created new menu and new php pages for fossdash.
5e39eb87b refactor(fossdash script) : remove all metric queries from the code, Put them into configuration way.
3f1ecc583 add the cron-triggered metrics exporter for FossDash
744485fd2 chore(ui): Show candidate licenses from agents
50fc42213 chore(reportImport): Make agent immortal

3.10.0-RC1 (Jan 8th 2021)

With every new release, FOSSology brings various bug fixes, infrastructure changes and various new features.

You can check the list of commits in release bellow but few highlights for the release will be:

Drop support for PHP5 and update dependencies for PHP7
Update password hashing algorithm from SHA1 to more secure bcrypt.
Ability to search file from hash values in REST API.
New licenses from SPDX 3.10 and many fixes in nomos.
Advance search and replace for copyrights.
Ability to enforce password policies.
Feature to import license acknowledgement from NOTICE file.
Change the versioning scheme to include patch number (featched from GIT).
Ununpack agent can be compiled to work in standalone mode.

Credits to contributors for 3.10.0-RC1

From the GIT commit history, we have following contributors since 3.9.0:

> Aman Dwivedi <aman.dwivedi5@gmail.com>
> Andreas J. Reichel <andreas.reichel@tngtech.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> Bartłomiej Dróżdż <bartlomiej.drozdz@orange.com>
> David Lechner <david@pybricks.com>
> Dineshkumar Devarajan (RBEI/BSF6) <Devarajan.Dineshkumar@in.bosch.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Helio Chissini de Castro <helio@kde.org>
> Mikko Murto <mikko.murto@hhpartners.fi>
> Piotr Pszczola <piotr.pszczola@orange.com>
> rlintu <raino.lintulampi@bittium.com>
> Sahil <sjha200000@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Toussaint Nicolas <nicolas1.toussaint@orange.com>

Corrections

9027b8711 fix(login): Do not set group_fk if empty
e6b060fbe fix(db): add indexes to pfile on sha1 and sha256
0714946c9 fix(ack): add missing uploadid in getresults function
71981e494 fix(API): added container-interop dependency for resolving Internal Server Error
c6d1c87a3 fix(twig): Update twig version to preserve spaces
d250b735b fix(globalDecision): make includesubfolders true in case of global to capture previous decisions
32cef88e4 fix(readmeoss): unescape contents
34486d07d fix(conf): fix not able to save conf in case of brackets
88024fe35 fix(ununpack): Initialize gcrypt
40d96ebeb fix(rest) : Set job status as Failed when any one of the job is failed

Infrastructure

a0338b740 refactor(login): updated password hashing algorithm
30f0b773a docs(db): remove obsolete comment from schema
3d29039b7 chore(cd): Use fo-debuild script to build packages
65041f002 debian: Improve deb package building (#1828)
855aec69a update(org): upgraded php version to php7

Features

932b82d76 feat(ununpack): standalone
106a95907 feat(docker): improve database healthcheck command
3291eec27 feat(docker): services healthchecks in docker-compose file
fc8b111ca feat(build): Get build version number from git
7f36edb90 feat(password): Create password policy
a3dad10ab feat(browser): total files in license browser view
4fd3007e4 feat(copyright): Search and replace with regex
c1773ec41 feat(conf): make unified report configurable
b96010ea1 feat(licenses): New licenses added from SPDX 3.10 to nomos.
9b327e80b Nomos: New licenses from SPDX 3.10 added. Lots of other corrections.
323155150 feat(cd): Build Focal packages on release
a9ce7e738 feat(nomos): add new license intel-binary
bc3e1bf6b feat(rest): Filter uploads by folder id
03f7f53c4 feat(utils): Filter inputs for unicode ctrl chars
5e4fae26e feat(search) - possibility to search in selected upload only
d03ed3493 feat(gui): Add Bucket link for license view page
f9cdc2d38 feat(conf): add textarea in conf page for notes
42ffc492f feat(nomos): Apache detection
5db568481 feat(rest): Get file info from hash
d1fdfe4d7 feat(modal): use jquery-ui dailog instead of plain modal
d013e0903 feat(noticeImport): add child modal to load notice files
d1583ca87 feat(notice_import): Increase size of textarea and fix a max notice preview length
0642f8ed2 feat(notice_import): Import notice file content into acknowledgement

3.9.0 (November 30th 2020)

This release adds important corrections to 3.9.0-rc2

The release 3.9.0 introduces following major changes:

Introduce support for Ubuntu Focal Fossa (20.04)
Drop support for Debian 8 Jessie
Obligations now refer to license conclusions
Auto deactivation of copyrights for irrelevant files
REST API now supports upload from URL
Display time in browser's timezone wherever possible
Ability to export Copyright CSV

The release 3.9.0 also introduces new agent Spasht which connects with ClearlyDefined server and pulls information like License and Copyrights (if available). To use it, upload a package, open it and goto Spasht page from the top yellow bar. From there, search for the desired package on ClearlyDefined and schedule the scan. Licenses and copyrights will appear on the same page.

Credits to contributors for 3.9.0

From the git commit history, we have following contributors since 3.8.0:

> adityabisoi <adityabisoi1999@gmail.com>
> Akash-Sareen <akash7sareen@gmail.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> Avneet Singh <Avneet.Singh@sony.com>
> Dineshkumar Devarajan (RBEI/BSF6) <Devarajan.Dineshkumar@in.bosch.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Lakshmi Bhavani <Nagavalli.LakshmiBhavani@in.bosch.com>
> Marion Deveaud <marion.deveaud@siemens.com>
> Michael C. Jaeger <michael.c.jaeger@siemens.com>
> Mikko Murto <mikko.murto@hhpartners.fi>
> Piotr Pszczola <piotr.pszczola@orange.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> sjha2048 <sjha200000@gmail.com>
> vivek kumar <vvksindia@gmail.com>

Features

d9ed388d5 chore(documentation): updating basic license info in UI
81e029137 feat(about): add new page for third party licenses
a333fb5eb update(org): added focal-fossa support
010f94747 chore(spdx): bump spdx version to 2.2

Corrections

6a2ce3dee fix(spasht): Fix advance search
be5189da4 fix(swh): Update User-Agent, lowecase SHA256
bd65ab70b fix(ununpack): Correct the mimetype for deb files
4f4f311b2 fix(copyrightDao): Change statement in updateTable

Infrastructure

87829c8e4 feat(cd): Publish release packages with Actions
bc2f2eb07 update(org): drop debian 8 support

3.9.0-RC2 (Oct 8th 2020)

This pre-release adds important corrections to 3.9.0-RC2.

Corrections

4df3358c2 perf(ui): Reduce load time for tree view
c56ae1733 fix(ClearingDao): Get uploadtree table name

3.9.0-RC1 (Aug 31st 2020)

With every new release, FOSSology brings various bug fixes, infrastructure changes and various new features.

You can check the list of commits in release bellow but few highlights for the release will be:

New agent Spasht which searches for decisions from ClearlyDefined.io and bring them to FOSSology.
New Docker image to use in CI
PostgreSQL 12 support
New page to check status of all job in a server
Using user's time zone to change time in UI
Ability to specify GIT branch in Upload from VCS
Reuse of deactivated copyrights
Remove OpenSSL dependency and use libgcrypt
Removal of redundant MD5 checksum from licenseRef.json

Credits to contributors for 3.9.0-RC1

From the GIT commit history, we have following contributors since 3.8.1:

> adityabisoi <adityabisoi1999@gmail.com>
> Akash-Sareen <akash7sareen@gmail.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> Avneet Singh <Avneet.Singh@sony.com>
> Dineshkumar Devarajan (RBEI/BSF6) <Devarajan.Dineshkumar@in.bosch.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Lakshmi Bhavani <Nagavalli.LakshmiBhavani@in.bosch.com>
> Marion Deveaud <marion.deveaud@siemens.com>
> Michael <michael.c.jaeger@siemens.com>
> Mikko Murto <mikko.murto@gmail.com>
> Piotr Pszczola <piotr.pszczola@orange.com>
> Sahil <sjha200000@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> vivek kumar <vvksindia@gmail.com>

Corrections

f24547d85 fix(licenseRef): Fix type in array_map
f09761d20 fix(licenseref): handle errors license errors
2fcbff0b1 fix(Nomos): Added a new License signature
a7908a68d fix(spasht-ui): Removed extension from the spasht search
5638337f2 fix(report): Don't group results with custom text
865f8ac02 fix(licenseRef): Fix import of licenseRef.json
23504c7a2 fix(lib): Correct non-default argument position
059ed1cfb fix(lib): Remove extra parameters
485ddc75d fix(obligation): Refer to license conclusions
eb60785b5 fix(rest): fixed ignoreScm flag when input is false
7880e856a fix(delagent): Remove clearing_decision and lrb
a41120ad8 fix(spdxReport): add missing artifact to file path in spdx reporting
40792c1c2 fix(ui): Use default timezone if not set
75c59cde8 fix(bulk): add class to show text highlighted for matched page
3931634dd fix(spdx): Fix duplicate copyrights
0728965c8 fix(clearingDao): Copy acknowledgement with event
441d224e4 fix(clearingCount): do not add count as cleared in case of to be discussed
58562d7da fix(nomos-standalone): included changes for the PR #1600
c07cf2ee0 fix(SCM): fix warnings in apache log if SCM is not selected
eb08c0e2b fix(unifiedreport): Get department from config
7b8b5ef77 fix(fo-installdeps): added a missing dependency
420903394 fix(upload): Fix the check for expire_action
1b062b135 fix(spdx): fix spdx-rdf export.
de279e3de fix(libschema): Schema fix for PostgreSQL 12
421a4221f fix(AdviceLicense):show error message on failed merge
c08a54f8c fix(rest): Get upload summary without UI

Infrastructure

73c5b6a08 chore(alljobs): Restrict to read
b002820e9 perf(license_candidate): Create PRIMARY KEY
7fecfc84e test(GetHashes): Change tests for sha256
685e78632 table reference fixed
52f4096a0 chore(delagent): Remove OpenSSL dependency
926f8540f chore(ununpack): Remove external checksum code

Features

e35f31c73 feat(licenseRef): update existing licenses
cb06d031e feat(spasht): Use dialog for details
758ed16ab feat(spasht): Change UI and remove some steps
e27a9862d feat(spasht): Added Agent spasht
3aa573e33 feat(reuser): reuse deactivated copyrights
dbd411529 feat(showjobs): Show delete file name
87f8876f5 feat(ci): Use FOSSology scanners in GitLab CI
46c1384fb feat(decisions): auto deactivate copyrights
84185975d feat(conf): add feature to change all local clearings to global from conf
bd5662577 feat(ReportDao): send heartbeat from Dao to keep the agent alive for large files
a737c4bcb feat(jobs): Show all running jobs
462591e8c feat(export): Export Copyrights
4e025c1b7 feat(download): Limit source code download only for users with specified access rights
00a68a13d feat(ui): Display Job timings in browser timezone and formatted date time to Y-m-d H:i:s
2ca5257cd feat(rest): Upload from URL and server
08132e0c9 feat(rest): extend upload model with filesha1
0bc755ad7 feat(globalDecision): show warning if the candidate license is added to license list
8f395952a feat(upload): Add possibility to upload specific Git branch
a35edb985 feat(groups): Update default group for user
e834b41bd feat(spdx export): Add sha256 to exported spdx.
d90175480 feat(copyright): Enable agent to read authors from ROS catkin package manifest files as per spec
bbaf4f071 feat(nomos): Print JSON directly to STDOUT
807f6614b feat(nomos): Optimize JSON output
af22a5b21 feat(scanner): ignore files from scanning using mimetype
59464a500 feat(maintenance): Remove orphan log files

3.8.0 (April 23rd 2020)

This release adds important corrections to 3.8.0-rc1

The release 3.8.0 also introduces new agent Software Heritage. There is a special note about this agent.

Due to rate-limiting from Software Heritage, the agent might run slow. Please check the Geeky Scan Details of the agent to understand the cause of the delay.

Please check https://archive.softwareheritage.org/api/#rate-limiting for more info.

Some notes about the UTF-8 database. The copyright (and sister) agent now creates only UTF-8 string. So it is safe to update to Postgres with UTF-8 encoded database. For more information, please refer to the wikipage Migration to UTF-8 DB

Credits to contributors for 3.8.0

From the git commit history, we have following contributors since 3.8.0-rc1:

> adityabisoi <adityabisoi1999@gmail.com>
> Anupam <ag.4ums@gmail.com>
> Carmen Bianca Bakker <carmenbianca.bakker@liferay.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Kaushl2208 <kaushlendrapratap.9837@gmail.com>
> Mikko Murto <mikko.murto@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> sjha2048 <sjha200000@gmail.com>

Features

5ca84b7a4 feat(SWH): catch exceptions in case of bad response
d8ac396c7 feat(DB): Recode copyright tables to UTF-8
3bbb7156a feat(SWH): add time to reset if X-RateLimit-Limit reached for SWH agent
144b81c19 feat(Copyright): Fixed the checking of config file in wrong folder
3b6f4fac6 feat(unifiedReport): move obligations to DAO layer remove unused file

Corrections

148b774e5 fix(delete): Do not remove upload_pk
6296b6738 fix(schema): Match schema with schema export
c49c5a691 fix(spdx-rdf-report): Fix comments in export.
8880d1a98 fix(travis): Fix build config warnings
c9c6f3cb9 fix(fo-installdeps): Added missing Fedora dependecies
7d905ed6a fix(AdviceLicense):Show error message on failure
c0a4b25b3 fix(package): fix syntax
eec0a5faa fix(rest): Remove hostname from JWT

Infrastructure

88f6de2e8 fix(travis): Fix page deploy stage
a106def1c fix(packaging): Create apache softlink on source
b3abe195b docs(contributing.md): Fixed broken link in contributing.md
018de9705 fix(git) : add php.ini to gitignore
09b48ffe5 docs(README): Refer to the correct file for the licenses
5a28eabdc fix(apache): Enable fossology on source install

3.8.0-RC1 (Mar 05th 2020)

This release brings a number of corrections (see below) and changes to the infrastructure. But it also adds new features to FOSSology, including:

A new agent added Software Heritage Analysis which searches for file existance in softare heritage
Reuse of report configuration settings
New decision type do not use
Consider a particular license for its obligation to be listed in report in conf
Add external authentification feature
New dashboard pages with submenu

Credits to contributors for 3.8.0-RC1

From the git commit history, we have following contributors since 3.7.0:

> Andreas J. Reichel <andreas.reichel@tngtech.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> Bartłomiej Dróżdż <bartlomiej.drozdz@orange.com>
> dineshr93 <dineshr93@gmail.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Michael <michael.c.jaeger@siemens.com>
> Nicolas Toussaint <nicolas1.toussaint@orange.com>
> Piotr Pszczola <piotr.pszczola@orange.com>
> sandipbhuyan <sandipbhuyan@gmail.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>
> Woznicki Pawel <pawel.woznicki@orange.com>

Corrections

31d4c7b39 fix(copyright): Remove non utf8 strings
ddcaa8eb9 fix(conf): Update install/defconf/fossology.conf.in
50e7cf569 Fix(Dockerfile): make clean install clean
2143f6aec fix(lib): Check group on local decision only
5a7bd82a8 fix(reuser): Run decider after reuser
d97f9cec9 fix(ext-auth): check that external authentication is configured
c20b7fb0f fix(SHagent): add proxy settings, add SH agent to PHPCS
c60150d59 fix(bulk): Fix dropdown bulk on folder level
251fd8dfd fix(ojo): Add lower limit to license length
fbc86017c fix(nomos):test-cases
a1b287e06 fix(nomos) : CC-BY-SA identification
4c04b59bc fix(nomos) : segfault for large offset value
ffdd07786 fix(highlight): highlight for reference text that exists in different page
a3323dac8 fix(log): fix warnings from apache error log
415b2ae78 fix(view-license): Browse file without scanner ars
efe1301ab fix(ui): decision and scope for licenses
7c9ca59ef fix(CHANGELOG): Fix the changelog
87e709233 fix(build-dep): Add PHP-CLI as build dependency
73fe66278 fix(ojo): Handle dual-license and SPDX new naming
b84b6d26b fix(admin): Allow read user to edit user
c839f02b6 fix(copyright): Wait for ajax calls
ca9a1908c fix(license-csv): Handle candidate licenses
bdaad200d fix(license-csv): Update license if exists
50558dcb5 fix(rest): Hide sensitive user info
79d42b791 fix(wget_agent): Fix possible memory corruption and leaks
a84db62f8 fix(wget_agent): Archivefs: Prevent possible buffer overflow
1c5498f0c fix(wget_agent): GetURL: Part 3 - Prevent possible buffer overflow
afed499a3 fix(wget_agent): GetURL: Part 2 - Prevent possible buffer overflow
1db296e2c fix(wget_agent): GetURL: Part 1 - Prevent possible buffer overflow

Infrastructure

88d98224f Revert "Merge pull request #1498 from siemens/feat/rest/provide-group-upload"
a55e1e818 chore(wget_agent): Remove redndant code
8cb62708e chore(nomos): Rename test file
12b7da1d7 chore(lib): Move agent list to common place
f50ff3ca6 refac(wget_agent): DBLoadGold Don't open pipe before checking Fin
7237b38b8 refac(wget_agent): DBLoadGold: Prevent possible buffer overflow
d9beb426a refac(wget_agent): Remove superfluous rc_system variable
2244a9150 refac(wget_agent): Part 1 - Prevent possible buffer overflow
dff78a713 refac(wget_agent): add function for destination of wget command

Features

c3dca9ae0 feat(migrate): Program to make file UTF-8 compatible
b31ba2ff1 feat(unifiedReport): include DNU information in assesment summary
80a184dad feat(SWHagent): add status of request to DB
e2b92bc15 feat(auth): Add external authentification feature
8f4c63010 feat(ojo): Remove upper limit from license name
2a6ab581b feat(rest): Get the license list for upload
164fb898f feat(reuse): add reuse of report configuration settings
28111118e feat(SHagent): add new table column with Software Heritage Status
d15c64d3b feat(email-smtp-config): Add SMTP User field into Fossology email
6f00ed38e feat(rest): Add group context (groupName param) for REST Api calls
9d981d2ce feat(rest): Send upload summary
f4b56e186 feat(upload): add feature to change permission of a all uploads in a folder
77d4d8895 feat(decisions): add new decision type do not use
74aa499d2 feat(ui): Place DataTables processing at top
f3bb51eac feat(software-heritage): Update the description in debian package
a05ac660d feat(software-heritage): Update the composer.lock file
d9fdbd6c1 feat(softwareHeritage): Update software heritage details in debian package
1e994d646 feat(softwareHeritageView): Show the details of software heritage in the license list page
de6a46b85 feat(softwareHeritageView): Show the details of software heritage in the license list page
71d785cda feat(software-heritage): Make softwareHeritage dao function and add all
abb463dd9 feat(software-heritage): Redundancy check while inserting softwareHeritage record
6a9786544 feat(software-heritage): Make the ui section of software heritage
0869f6c66 feat(software-heritage): Create a software heritage agent
bf47edabd feat(db): Make table of software heritage to store information
034c48aa2 feat(dashboard): New dashboard pages with submenu
9fe3d90d3 feat(unifiedReport): exclude scanner found copyrights of irrelevent files
66a009d83 feat(conf): add obligations to consider a particular license for its obligation

3.7.0 (Dec 11th 2019)

This release adds important corrections to 3.7.0-RC1

Contributors

Credits go to the following persons for this release since 3.7.0-RC1:

> Anupam Ghosh <anupam.ghosh@siemens.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Martin Michlmayr <tbm@cyrius.com>
> Maximilian Huber <maximilian.huber@tngtech.com>
> Michael C. Jaeger <michael.c.jaeger@siemens.com>
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>

Corrections

7cdc6b50a fix(obligation): Move candidate licenses
c74f2f4af fix(obligation): Associate all lic with same name
68094159b fix(copyright): only scanner finding copyrights to unifiedreport
23cb2f66a fix(counter): Optimize clearing counter queries
3885ac14d fix(db): Optimize license browse queries
96a4da4c3 refactor(report): edited global license code make it available for unified repot fix php codesniffer
08ac47678 fix(decider): remove force dependency of nomos and monk for ojo decider add nomos dependency if required

Infrastructure

48c0caa14 chore(composer.json): updated symfony/dependency-injection version
252bbaeb2 chore(installdeps): remove php-yaml from os level and add it to composer update composer.lock..
2e158034e docs(changelog): fix typo
d85038afc chore(unifiedReport): change phpword to a latest version update composer.lock with new changes
a674aa9e3 chore(docker-compose): harmonize versions with sw360chores

3.7.0-RC1 (Oct 24th 2019)

This release was created in order to bring important changes for the REST endpoints to a release, so integration, for example with sw360, work on a release but not with latest master. Besides improvement is the extension of the decider agent to allow for decisions based on found SPDX-License-Identifier tags found by the ojo agent.

Contributors

There are many ways to commit to the source code, but if you count the commits to master, then the credits go to the following persons for this release since 3.6.0:

> Andreas J. Reichel <andreas.reichel@tngtech.com>,
> Anupam <anupam.ghosh@siemens.com>,
> Bruno Cornec <bruno.cornec@hpe.com>,
> Gaurav Mishra <mishra.gaurav@siemens.com>,
> Maximilian Huber <maximilian.huber@tngtech.com>,
> Michael <michael.c.jaeger@siemens.com>,
> Onyemenam Ndubuisi <onyemenamndu@gmail.com>,
> Piotr Pszczola <piotr.pszczola@orange.com>,
> Shaheem Azmal M MD <shaheem.azmal@siemens.com>,
> Toussaint Nicolas <nicolas1.toussaint@orange.com>,
> vivek kumar <vvksindia@gmail.com>,
> abirw,

Features

8bbe52d2b feat(rest): add auto conclusion for ojo findings if
af3f5738d feat(license): Provide predefined license comments
651a89088 feat(rest): Provide group ID during POST upload
1a82e74a2 feat(decider): add auto conclusion for ojo findings if no contradiction with other findings
71d1b7871 feat(rest): Provide API version as an endpoint
808fa1db2 feat(rest): Upload packages from VCS
fa2c27d16 feat(upload_vcs.html.twig) Use HTML
7887f02ad feat(spdx): add user found copyrights to SPDX reports
0505ca138 feat(upload_vcs.html.twig) make Git the default VCS rather than SVN
8a5f14fd3 feat(pbconf): adapt to pb 0.15 and new fossology 3.3+
5a9a341be feat(api): Add pagination to jobs endpoint
7a190c110 feat(api): Add OJO analysis to REST API
12f064abe feat(api): Get job status and ETA
8989c1e17 feat(copyright): New directory scan and better JSON

Corrections

49fcfa05a fix(rest): do not schedule decider if the option is empty
1045cf4f6 fix(readmeoss): added edited global license text in readmeoss
213222d31 fix(notices): updating notice file, debian copyright and spdx lic info
9e524ef52 fix(rest): getUploads - invoke getRows with proper parameters
416da0abc fix: fix formatting as suggested in comment
9a3f86d64 fix(groups): add validations and remove CONSTRAINTS
e4e811f22 fix(geekyscan): make full job report link more descriptive closes #1346
fcc5ef797 fix(deps): Added missing php-pgsql
41fe2b4cd fix(deps): Fix dependencies for Debian Buster
f0348b64c fix(buckets): Prevent possible buffer overflow/-run
5f77fe45d fix(ununpack): Fix compiler warnings for Debian 10/gcc8
7beb859d1 fix(pkgagent): Avoid possible buffer overrun with strncpy
359ae6101 fix(lib/c): Prevent possible buffer overflow/-run
89e461394 fix(delagent): Fix possible buffer overrun
7ee6b5955 fix(mimetype): Fix usage of strncpy, remove memset
4a2829ef2 fix(testing/db/c): Prevent buffer overflows
c1d165af6 fix(ununpack): Increase buffer sizes to prevent overflow
7b62b6759 Attempting to fix bug in fo_nomos_license_list

Infrastructure

e559e388a chore(control): Remove ninka from debian/control
c4df71415 refactor(fossology): Refactor modularity
8c3caef81 chore(composer): Bumping composer to 1.9.0
ff1aa9fe3 chore(ninka): Remove Ninka packaging from master
f0e56b1c5 test(licenseStdCommentDao): Add test cases for DAO

3.6.0 (Sep 10th 2019)

After two release candidates, making fixes for migration tests, unified report and load issues with tree-view, FOSSology is stable enough for a new release. The main features of the 3.6.0 release can be found under RC1. Particular corrections after RC1 can be found under RC2.

Few interesting features in this release are:

A new agent named ojo (eye in Spanish) which does dedicated searches for the 'SPDX-License-Identifier' statements
Improved handling of manually added copyright statements to files
Improvements to the SPDX reporting, for example output also of comments
Calculating the SHA256 values for files from now on, because that is going to be used for integration of, for example, Software Heritage or Clearly defined

Credits to 3.6.0

From the git commit history, we have following contributors since 3.5.0:

@andi8086 andreas.reichel@tngtech.com,

@ag4ums anupam.ghosh@siemens.com,

@hastagAB classicayush@gmail.com,

@chienphamvu chienphamvu@gmail.com,

@ChristopheRequillart christophe.requillart@atos.net,

@GMishx mishra.gaurav@siemens.com,

@maxhbr maximilian.huber@tngtech.com,

@mcjaeger michael.c.jaeger@siemens.com,

@NicolasToussaint nicolas1.toussaint@orange.com,

@PeterDaveHello hsu@peterdavehello.org,

@rlintu raino.lintulampi@bittium.com,

@sandipbhuyan sandipbhuyan@gmail.com,

@shaheemazmalmmd shaheem.azmal@siemens.com,

@tiegz tieg@tidelift.com,

@vivekaindia vvksindia@gmail.com

Corrections

7a17bc7b6 fix(src/ununpack/agent/utils.c) update SHA256 of existing entries, patch proposed by @fogninid.
bdd004e43 fix(src/ununpack/agent/utils.c) remove unused #define
ef4820fcd fix(ajaxExplorer): Reduce view creation
f16c0eecb fix(importReport): update easyRDF to a stable version

3.6.0-RC2 (Aug 24th 2019)

This pre-release adds important corrections to 3.6.0-RC2.

Corrections

f4c2de9df fix(dbMigrate): Fix PHP syntax error
69b03a368 fix(copyright): Check if empty decision sent
83897a185 fix(obligation): add default value if the obligation type and classification is empty
90b7f551f feat(unifiedreport): add candidate licenses to the list of obligations
49d901c02 fix(ojo): Remove call to omitEndingLineFeed on<0.6

3.6.0-RC1 (Aug 12th 2019)

This release brings a number of corrections (see below) and changes to the infrastructure. But it also adds nw features to FOSSology, including:

A new agent named ojo (eye in Spanish) which does dedicated searches for the 'SPDX-License-Identifier' statements
Improved handling of manually added copyright statements to files
Improvements to the SPDX reporting, for example output also of comments
Calculating the SHA256 values for files from now on, because that is going to be used for integration of, for example, Software Heritage or Clearly defined

Contributors

There are many ways to commit to the source code, but if you count the commits to master, then the credits go to the following persons for this release:

ag4ums
shaheemazmalmmd
NicolasToussaint
rlintu
sandipbhuyan (GSOC 2019!)
ChristopheRequillart
GMishx
hastagAB (GSOC 2019!)
vivekaindia (GSOC 2019!)
maxhbr
mcjaeger
PeterDaveHello
tiegz
chienphamvu

Features

21bd38428 feat(api): Cache Slim DI container
840ba9b8d feat(ci): Run travis jobs on Xenial
62c86b865 feat(codesniffer): check php codesniffer through travis
64878b7d7 feat(copyright): Show text findings in copyright
1bbc203cc feat(cp2foss): cp2foss prints out FolderPk as well
cc16066ef feat(datatable): add select plugin of datatable to change paging
d3641939e feat(db): Calculate the sha256 value of the uploading file and store it in database
6b705539f feat(db): Store SHA256 of the uploaded file
7bc49eaec feat(dbmigrate_3.5-3.6): add limit to process number of records
4790c6353 feat(licenseRef): add new functionality to add new licenses and update existing licenses from SPDX
d8076a088 feat(licenseref): convert licenseref file from sql to json format
5ab3fe831 feat(licenses): nomos merge error fixed
020595190 feat(licenses): SPDX identifier detection modified to include AND and OR options
84cbbbbea feat(ojo): New license scanner for SPDX
fbfdc79fc feat(spdx2): ignore files with no info in SPDX reports
92cbbc2a0 feat(spdx2): SPDX output does not yet show license comments
e514dc6d9 feat(ui): Add user description of available user in group management page
dcc74a9be feat(ui): Show both user description and user name in 'Assigned to' list
57493d0f1 feat(unifiedReport): separate user and scanner findings of copyrights
f3c9e3df7 feat(unifiedReport): update phpword version from v0.13.* to v0.16.*

Corrections

d528e4fb4 fix(obligations): fix UI and connected db to dropdown menu
f65397495 fix(admin-license-file): Fix update conclusion to self
de2f76fd0 fix(advicelicense): fix double select of risk in advice license remove select2 initialisation in macro
db9f8c8fa fix(api): Adhere to specification
5ef99c95b fix(build): Fix clean build from all dirs
61f06e348 fix(codesniffer): Fix errors reported by phpcs
1d1b94fbb fix(copyright): Fix pagination of copyright
d6d2fabe3 fix(copyright): fix php notices in copyright hist view
53849883c fix(dbmigrate_3.5-3.6): add single quotes to string and calculate actual minutes
0943d97ad fix(download): Fix a call to non-static function
4fb3dd1f0 fix(init.d): Implement missing function
1a961298f fix(migration): Make pfile sha calculation separate script
0c6d64741 fix(nomos): nomos crash (#1337)
9705b2d64 fix(pfile): Fix warnings in ununpack and wget
75fc1252f fix(pfile): SHA256 is still optional
fd1dc495a fix(reportConf): include correct array from to fix report conf closes #1377
d6f62de15 fix(showjob): General fix after refactor
9659ac1b2 fix(showjobs): Check empty for allusers before updating
c2585dcb9 fix(showjobs): Fix the pagination
3f2117c46 fix(spdx2): remove dependency from upload table
de64361f7 fix(strings): correct typo
ad9c6d7bc fix(UI): increased the size of upload to reuse window in upload files
40defdb6b fix(ui): Show license findings for folder with single child
65896cd3e fix(unifiedreport): fixed issue with irrelevant file display
5361fefd2 fix(unifiedReport): remove php warnings from job log
453da1f13 fix(upload): remove dependency from upload table for SPDX shift the report info to new conf page
e304e4e39 fix(vscode): Add vscode editor file to gitignore
b6fdf1121 fix(process): Fix the PHP agent installation

Infrastructure and Testing

3bccc4078 test(ojo): Test cases
dcc429edc chore(debian): Fix lintian erros and warnings
82653993d chore(decisions): Store SHA256 of text findings
c2a22fb4a chore(fo-installdeps): drop unsupported distros
3b6a06e28 chore(travis): Disable unnecessary addon to speed up tests
13e2cfd39 chore(travis): Enable ccache to speed up tests
df793036e chore(travis): Enable composer cache to speed up tests
34b8784e0 chore(travis): Enable Fast-Finish to retrieve build result faster
0fc133583 chore(travis): Fix Coveralls execution path
a45fc6965 chore(travis): Fix Coveralls output json file not writable issue
f1676582d chore(travis): Leverage yaml anchor for phpunit
b576acbdc chore(travis): Remove deprecated Travis CI sudo config
fcff243fd chore(travis): Run PHPUnit via phpdbg to speed up tests
90e7bdfe4 chore(travis): Set pipefail in Travis CI PHPUnit on PHP 7.0
e5f9651c6 chore(travis): Show ccache bins & statistics summary
2d24945f2 chore(version): Force the VERSION variable

Refactorings

a7db0edd6 refac(showjobs): Refactor code to send JSON

3.5.0 (Apr 11th 2019)

After two release candidates, making fixes for REST API installation and various migration tests, FOSSology is stable enough for a new release. The main features of the 3.5.0 release can be found under RC1. Particular corrections after RC1 can be found under RC2.

Mainly 3.5.0 adds more documentation, infrastructure improvements and support for brand new FOSSology REST API.

Moreover, new functionality has improved JSON output for nomos and restructured license detection for nomos. Last but not the least, FOSSology now have capabilities to ignore files specific to version control systems from the scanning improving scan times.

Credits

From the git commit history, we have following contributors since 3.4.0:

@ag4ums, @ChristopheRequillart, @AMDmi3, @GMishx, @mcieno, @max-wittig, @maxhbr, @rlintu, @sandipbhuyan, @shaheemazmalmmd

Corrections

9c1bf18a9 : chore(docker): bump docker base image to stretch

Refactorings, Infrastructure

8df86b308 : fixup! chore(docker): bump docker base image to stretch

3.5.0-RC2 (Apr 3rd 2019)

This pre-release adds important corrections to 3.5.0-RC1.

Corrections

262634d99 fix(apache): Add rewrite string to apache conf
ba2b25ba6 fix(git): Add ubuntu log file to gitignore

3.5.0-RC1 (Mar 29th 2019)

Features

e63c17534 : feat(tokenExp): Make token max validity configurable
16762d5a8 : feat(rest): Use bearer auth instead of basic
229860e6f : feat(nomos): Fix the JSON output
e72db0331 : feat(scm): correct in cli/cp2foss.php and add comment in agent/utils.c
3b72db061 : feat(scm): ignore scm data when scanning
0f277a1cb : chore(docker): update dockerignore
a4f136ab9 : feat(trac): Fix typo flase instead of false
8e314a12b : feat(licenseref): add new exception text to fossology database
854817d74 : feat(report): Added new endpoint to create reports
62b25d07d : feat(restapi): Post upload and get folders path
0f5991a74 : chore(restapi): Use Slim inplace of Silex
93dbe3df9 : feat(licenses): creative commons detection rewritten. Bug fixes.
94b0f1ee3 : feat(license-admin): Show obligations for license
3b3eb3f5e : refactor(maintagent): refactor maintagent code
c46cb3bef : feat(reused-info): Show reused package in info page
47307a87e : docs(lib-php): Doxygen comments for BusinessRules
388bd2245 : refactor(view-page): Use Twig templates for info page
e47676311 : feat(maintagent): add feature to delete orphaned files from database
041b5770c : docs(lib-php): Doxygen comments for Auth namespace
c9cc5cd01 : docs(lib-php): Added doxygen comments for Application namespace
ba2193c3b : docs(lib-php): Added doxygen comment for Agent class
8805b55ca : docs(libphp): Added doxygen comments for PHP common lib
8fda5381b : docs(libcpp): Added doxygen comments for CPP library
a9e862baf : test(nomos): Added test case for EPL in pom.xml
9a30827ee : docs(templates): Fix minor typos in templates
e1608f9e6 : chore(fo-postinstall.in): Give better notification
b6645af42 : feat(licenseRef): check flag before updating the license text
6b6dbb186 : feat(copyright): select and replace copyright in bulk mode
34661939a : docs(restapi): Option to create API documentation
af6ba64f9 : chore(common-job): Remove unnecessery changes
87cb1104f : chore(restapi): Change the path for REST classes
bea3cf48c : chore(restapi): Allocate namespaces to the files
07ab61055 : replay 6a1f712, 45f02535 and 8c3a710
7aa12b0a7 : add auth
8fb000fef : feat(api): add fossology openapi specification
ec5ebeb99 : feat(select2): Use select2 lib for drop-downs
ab40ea0f8 : feat(pages): Deploy FOSSology GitHub pages using Travis
8fc071da7 : chore: add best practices badge

Corrections

ec9409ab1 : fix(restApi): Fix for missing plugins
5e9433d29 : fix(maintagent): do not delete decisions with scope 1
4a3c7cb01 : fix(Vagrantfile): Enable mod rewrite in vagrant for REST
14e1a4517 : fix(api): Change back to version 1, remove trailing '/'
7623c4436 : fix(schema): Use open api 3.0.0 to describe API documentation
93dbe3df9 : feat(licenses): creative commons detection rewritten. Bug fixes.
3b01a5333 : fix(fo-installdeps): Add php-mbstring to build deps
fa2378625 : fix(delagent): delete existing clearing events using delagent
6e26fdde1 : fix(scheduler): add check for empty results from query
d9fd5fe4b : fix(filter): Update the filter in license browser
7e6506355 : fix(nomos): Detect EPL-1.0
78b41aee3 : fix(constraints): Also clean old constraints
36e22784c : fix(licenses): restore regexp POSIX compatibility
2c71518ae : fix(nomos): Fix license string checks
191abff84 : fix(nomos): Use space as separator
47b71300f : fix(restapi): Implement TODOs
a115b460a : fix(restapi): Use FOSSology functions
11486eea9 : fix(response): Use JsonResponse instead of plain Response
0ccea49a5 : fix(libschema): Remove schema to match PHP strings
b71c25696 : fix(bulk-license): Resize the dropdown for bluk license
e8bc89878 : fix(web.postinst): Reflect changes from php-conf-fix
7e3e9b081 : fix(ScheduleAgent): Prevent multiple agent schedules
d05d30aa9 : fix(agent): Reschedule failed agents

3.4.0 (Nov 29th 2018)

After two release candidates, compatibility isues with updating from 3.2.0 and 3.3.0 have been resolved. The main features of the 3.4.0 release are found under the release candidate one for the 3.4.0 release (cf. https://github.com/fossology/fossology/releases/tag/3.4.0-rc1). Particular updates compared to the release candidate two (cf. https://github.com/fossology/fossology/releases/tag/3.4.0-rc2) are found below.

Mainly, 3.4.0, including the two release candidates, adds more documentation, infrastructure support and testing. It improves the support for Debian 9 stretch and Ubuntu 18.04 LTS. Moreover, new functionality has been added for running FOSSology from the command line including optimized output in JSON directly from the agent. Last but now least, updates have been applied to incorporate updates at the SPDX License List, such as the support for recognizing license exceptions.

Credits

Looking into the git commit history, it shows you all the users who have contributed to this release since 3.3:

Tatsuo, Steve, Shaheem, Robert, rlintu, Michael, Maximilian, Gaurav, Dmitry, Anupam

Corrections

ee8b69c fix(constraints): Remove more faulty constraints
c6743d5 fix(unifiedreport): add default count as 0 in result of scan

Refactorings, Infrastructure

faaaeed fix(installdeps): Run child terminals interactively
6a298ea fix(debian): Add php7.2 dependencies for Ubuntu Bionic
36c8da7 fix(debian): Install composer.phar before running it

3.4.0-RC2 (Nov 2nd 2018)

This pre-release adds important corrections to 3.4.0-RC1 and also the commit to update the changelog information and therefore features for the 3.4.0 release are found in the section for the release candidate 1 for 3.4.0 information listed below.

Corrections

b6cb10d fix(dashboard): change comparison statements for postgres
5c463d1 fix(constraints): Remove faulty constraints
6b017b1 fix(resequence): Check the column name from DB
1983b29 fix(tests): fix PHPCS and phpunit testcases for deciderjob
592e48f fix(core-schema): drop constraint from clearing_event and license_filter

Refactorings, Infrastructure

99a56a1 fix(postgresql): Fixed postgresql version to 9.6 and use a volume
0ce85bd chore(copyright): Remove DISABLE_JSON macro
31be206 feat(copyright): Use package based dependency for json

Documentation

714d7f4 docs(changelog): updating changelog files

3.4.0-RC1 (Oct 18th 2018)

Features

114750a feat(addLicense): Retain previous request values
be6e705 feat(adminLicense): Add search to each column
de88249 feat(bulk): inclusion of licensetext, acknowledgement and comment
e67549b feat(composer): Updated development dependencies. * Switched to Mockery::pattern for pattern matching.
f5c89fa feat(copyright): allow copyright to run standalone
fd302b1 feat(copyright): Enable recursion test
aef0070 feat(copyright): New JSON hpp version
5dd657a feat(copyright): refactor copyrightDao check uploadtree table name
923982a feat(docker-compose): Prepared docker-compose Dockerfile to replace the standalone Dockerfile. Changes: docker-compose.docker-entrypoint.sh: * Refactored bash script.
4ffe259 feat(docker): Implemented multi-staged build. * Added simple test for standalone copyright.
346546d feat(docker): Replaced standalone Dockerfile with docker-compose. Changes: .dockerignore: * Added some unrelated files for docker.
058a41b feat(emailConfig): Move config settings to sysconfig table
215b6d8 feat(fo-installdeps): Drop support for End-of-Life distributions.
7b804e1 feat(fo-postinstall): Added flag to omit all database operations.
063d5df feat(fo-postinstall): Implemented best practises for bash script.
e9345a2 feat(fossology): Support for Bionic Beaver
d89c334 feat(info): change tag from input to textarea refactor ShowReportInfo add missing
843d319 feat(jquery): update jquery, datatable and select2 to latest versions 1) fix delete license color issue 2) fix width issue for user decisions
ab30fbf feat(keyword): new-keyword-agent
192b1bb feat(license_administration): add sorting, update datatable
7e22a09 feat(license_administration): Improvements of the existing implementation for the admin license table.
320865e feat(licenses): add license test to licenseref.sql from SPDX
1b5f5ee feat(licenses): exceptions detection restructured
6da4823 feat(licenses): gnu-javamail-exception bug corrected
baec095 feat(licenses): MPL detection bug corrected
0a6436a feat(monk): add monk knowledgebase serialization
4c5c00a feat(php): Improved PHP 7.2 support.Added support for PHPUnit 6.
49ffd73 feat(php): Replaced the class Object by builtin features.
0093d1a feat(phpunit): Migrated to namespaced phpunit.
d89539e feat(pkgagent): Drop support for RPM 4.4.x and RHEL/CentOS 5.
d09331f feat(prepare-test): Print a warning to user for perpare-test
b202f93 feat(readmeoss): add license shortname above the license text
5033861 feat(serverUpload): Check for wildchar during upload
891bb45 feat(test): Bypass API rate limit of github.
fd237b0 feat(wget_agent): Mask password in log

Corrections

0bcd1b7 fix(ars_seq): Reset ars sequence to ars_master
7276004 fix(author): Fix multiple entries in author table
d764d97 fix(cli): there were minor problems in the variable names
cb9f5c0 fix(cliTest): Ununpack and copyright cli test fixes
24beb0e fix(copyright): match copyright statements in full
945aad2 fix(copyright): replace ct_pk with table_pk for all copyright sub-agents
13898c2 fix(copyright): unify same column selection for both queries
4e1acb4 fix(cunit-version): Change script with new syntax
33b5ea7 fix(dataTable): Make removed class common
d3a1b31 fix(dataTables): Update datatable objects to 1.10
edb57fc fix(decisions): Replace copyright_decision_pk with table_pk
8638bd7 fix(delagent): Extra drop statements in test
5a041ab fix(delagent): Prevent unauthorized delete from CLI
d277eb7 fix(deps): Add Boost runtime dependencies
aac3126 fix(deps): Add boost runtime dependency fix #1175
af0d048 fix(docker-compose): Added missing mod_deps in the docker-compose.Dockerfile.
8f65e44 fix(ecc-view): Update ecc_decision table to match other schema
97647f1 fix(email): Prevent scheduler crashes
7813c66 fix(email): Update existing sysconfig values
87016ec fix(fo-installdeps): Allow running without the option '-y'.
f88d428 fix(import-csv): syntax error in importing license-csv
42ab00a fix(install_offline): Fix install_offline recipe to run in install folder
d2a3b85 fix(license-list): fix handling of getLicensesPerFileNameForAgentId result
e79df05 fix(licenseUpdate): update the license parameters with same shortname
dcbbff4 fix(mimetype): Quick fix for mimetype test
d83507a fix(monkbulk): check the job status when scheduling multiple monkbulks
fa35d2a fix(ninka): typo for ninka script
f77eeaf fix(nomos): fix nomos crash
3ff7487 fix(nomos): fix posix incompatible regular expressions
181a9f6 fix(nonzipUpload): change the upload_mode
ce8dab0 fix(perpare-test): Give more options to users
85573fe fix(pkgagent): Added support for RPM >= 4.14
793eb13 fix(postinstall): Look for compressed man pages also
44e2bd6 fix(scheduler): make init script wait for postgresql on startup
daa0bd0 fix(scheduler): revert make init script wait for postgresql on startup
b4fdf40 fix(schema): Add missing constraints
a87c285 fix(schema): check with the table property for current scheme
8a8097d fix(sysconfig): Change structure of values
ddab228 fix(test): Remove prepare test from test target
4e670f8 fix(testCases): Fix scheduler and ununpack test cases
08cfa75 fix(travis): Missing phppcd on travis. * Switched the jobs "Syntax Check", "Static Code Analysis" and "Copy/Paste Detector" to sudoless.
051f91e fix(unitTests): Fixing CUnit and PHPUnit tests
196731f fix(uploadSrv): Copyright statement fix
94424d9 fix(user): Update user's current group while removing from group
426fdbb fix(wget_agent): Ignore test_proxy_ftp, because it is flaky on travis.
372a308 fix(xenial): Added the missing runtime dependency php7.0-mbstring.

Refactorings, Infrastructure

51376ae chore(deps): Implemented best practices for bash scripts.
adc9117 chore(doxygen): Add license header to doxygen conf file
69ce635 chore(tests): Removed dummy directories for testing.
a824fe1 chore(travis): Removed global environment variables usage. * Moved syntax check and static code analysis in separate steps.
252f663 chore(travis): Simplified travis.yml * Removed unused dependencies. * Removed caching for apt
a11fdfb chore(unifiedreport): Remove extra space
762e9fc chore(vagrant): Switched to ubuntu/xenial64. * Removed symlinks. * Added missing test dependency. * Added script to configure vagrant for development.
c13f06d perf(copyright): Improve query for pfile on upload
ae66e68 perf(copyright): Use prepared statements to fetch pfiles
7473a25 perf(Docker): Use Debian Jessie slim variant
6e5b21c refactor(monk): refactor and cleanup code
ee154ea test(monk): add more unit and functional tests for monk

Documentation

f06006f doc(screenshots): add wrongly deleted screenshots back into the source code
87d2d9c docs(adj2nest): Added doxygen comments for adj2nest
3380961 docs(agents): Added supported CLI options to every agent
65764e5 docs(buckets): Added doxygen comments for buckets agent
1c6b01d docs(contributing): Added steps to create PR
ce496cc docs(CONTRIBUTING): Made required changes in note
b97f643 docs(copyright): Added doxygen comments for copyright agent
d013713 docs(debug): Added doxygen comments for debug plugin
b835cb6 docs(decider): Added doxygen comments for decider agent
b85cb8c docs(deciderjob): Added doxygen comments for deciderjob agent
3bb9c64 docs(delagent): Added doxygen comments for delagent
a11054d docs(demomod): Added doxygen comments for demomod
ddca886 docs(doxygen): Add doxygen conf file
a0387d9 docs(issue): Issue, PR template for new requests
6793719 docs(libc): Doxygen documentation for C library
cf1305c docs(LICENSE): Create LICENSE to reflect in git
c3925cb docs(main): remove outdated screenshots
42f7737 docs(mainpage): Include text from README.md
c415a5e docs(maintagent): Added doxygen comments for maintagent
5fa5579 docs(mimetype): Added doxygen comments for mimetype agent
d652eb1 docs(nomos): Doxygen documentation for NOMOS agent
e0c4ecc docs(nomos):update call hierarchy notes
a125fc4 docs(pkgagent): Added doxygen comments for pkgagnet
f1ae113 docs(README): fix readme for docker-compose and version numbers
d57c426 docs(README): Show only master build status
9d6f865 docs(readmeoss): Added doxygen comments for ReadmeOss
bd32a77 docs(regexscan): Added doxygen comments for regexscan
fe463a7 docs(reuser): Added doxygen comments for reuser
d1d8a6a docs(scheduler): Added doxygen comments for scheduler
8f73e10 docs(sections): Created unique section name for every agent
2ca0ea5 docs(spdx2): Added doxygen comments for SPDX2
315f4d4 docs(unifiedreport): Added doxygen comments for unifiedreport
10d0588 docs(ununpack): Added doxygen comments for ununpack
07a8356 docs(ununpack): Fix few spelling mistakes
eb30027 docs(wc_agent): Added doxygen comments for wc_agent
e79fe95 docs(wget_agent): Added doxygen comments for wget_agent

3.3.0 (May 2018)

Features

4f48227 feat(ui): Color mapping for risk level in the ui.
12f5546 feat(nomos): extend unclassified license detection
9904b2c feat(license): add acknowledgements to license clearing include acknowledgements in unified report include acknowledgements in readmeoss add acknowledgement tests
05dbf91 feat(licenses): add license text to fossology database from SPDX license text added for Abstyles, Adobe-2006, Adobe-Glyph, Afmparse, AMPAS, APAFML, bzip2-1.0.5, bzip2-1.0.6, CrystalStacker, curl, gnuplot, Intel-ACPI, MIT-CMU, SCEA, TCL, TMate rename license Intel-acpi to Intel-ACPI closes #1052
4299a5f feat(obligation): update csv licesnse changes in the obligation table
be6434e feat(licenses): missing INFILE added, IBM-reciprocal added

Corrections

e478bbf fix(reuser): copy license decision in reuse
3d0c4b8 fix(schema): check for inherits when drop indexes
7bc1c82 fix(copyright): Fix copyright_decision table
d7cd66c fix(upload-file): get distinct of groupid to insert in perm upload table
d76a643 fix(reuser): remove warnings and errors with testcases for reuse
1d6ff8e fix(unifiedreport): Global license appears twice in Main license section
9269a36 fix(uploadSrvPage): Added feature so that users can update the name of upload manually
5b32c69 fix(phptestcase): Remove PHP 5.5 test case
8c3a710 fix(search.php): max records per page updated and documentation added
45f0253 fix(search.php): Fix the algorithm for total number of files matching the search criteria
6a1f712 fix(search.php): Fix the number of files matching the search criteria
9b9c214 fix(copyright): read only users should be able to read copyrights
3bf9fff fix(perm): reading license information and browsing should be allowed with annonymous user
616d635 fix(delagent): change query which deletes all files with same pfile
5bcaa71 fix(browse): ajax browse required login
ca7ac1a fix(obligations): remove extra else cases and fix warnings
000fdb3 fix(browseView): change style of checkbox button whole folder | Marked upload change job title as well as upload name if the multi readmeOss or SPDX2 scheduled
49d1c37 fix(cp2foss): fix cp2foss -X parameter usage

Refactorings, Documentation

f5aa2cf refactor(common-ui): fix spelling mistake
24022a5 docs(vagrant): add vagrant setup documentation

3.2.0 (February 2018)

Features

99254a5 feat(unifiedreport): update phpword from v0.12.0 to v0.13.*
2aab236 feat(copyright-testcases): test for getallcopyrightentries for report
7dd9ac9 feat(unifiedReport): add user findings of copyright and ecc from files with non-agent finding
f0f484f feat(treeView): add remove option for deletion of applied irrelevant decisions through file tree edit
ce78359 feat(schema): add new combined indexes to database tables copyright, author, ecc, clearing_decision, license_file, uploadtree_a
edaa1ad feat(unifiedreport): add upload history url to title table add groupname next to username correct warnings in obligation
3d0c016 feat(report): report assessment summary checkbox selection

Corrections

62580c8 fix(delagent): Delete-Folder without deleting duplicate upload/s in other folders
85ae4ba fix(lib): container.php access fix from cache
1a7fcde fix(spdx): make SPDX-rdf and SPDX-tv templates consistend
19a4919 fix(unifiedreport): rearrange common and additional obligation text for word report
4deb48c fix(deploy): Fix TimeZone computation when links are used
72ce275 fix(common-agents): add check for empty array and false
85ae4ba fix(lib): container.php access fix from cache
33d5c2b fix(ui): checkbox param call more adaptable with php 5.4
c48cc64 fix(www): change var name to not be used in RegisterMenus
dee3aa2 fix(bulk): separate td for each image and add width for select
283352a fix(lib): decision for future occurrence of files
439c496 fix(treeView): removed license through edit, still exists
56b47ea fix(candidateLicense): add a scrollbar to list of files in popup if exceeds 200px
b9d595f fix(obligation): select obligation type and classification by default
a9003b1 fix(dep5): add missing endif for deb5 document
a9606e9 fix(copyright): fix edit and undo of copyright and ecc
90fd1d8 refactor(delagent) use template
9b00ca2 Revert "chore(changelog): update to commitlint"

Improvements on Infrastructure, Packaging and Testing

402ae25 fix(pb): general correction to enable rpm-based packages
9995f56 fix(rpm): Fix VERSION delivery under /etc/fossology
e431594 fix(rpm): Copy the correct VERSION file in /etc/fossology for spec
3b73c0f fix(pb): smaller corrections to enable build on master
15e8645 chore(make): Remove declaration of COMPOSER_PHAR variable
33431fa chore(pb): corrections on the project builder rpm build
bf814ff chore(pb): Provides a working build infrastructure

3.2.0-RC1 (October 2017)

Features

b389a4c feat(report): new word report
05a3061 feat(reportImport): some cleanup and minor improvements
cb24345 feat(reportImport): handle orLaterOperator correctly
025c4fe feat(reportImport): add imported coyprights as decisions
5fdb4ce feat(reportImport): add corresponding debain definitions
09b90a2 feat(reportImport): minor changes to satisfy older PHP versions
74f6241 feat(reportImport): parse also xml files
0fdba11 feat(spdx2): also export ninka and import data
0d46873 feat(reportImport): add option to create real licenses
3f95181 feat(reportImport): handle all arguments from UI
fa56a96 feat(spdx2Import): splitup to support other formats
0bc8788 feat(spdx2Import): refactoring and splitup of files
3d469b2 feat(spdx2Import): menu entry at "Upload::..."
bd20cc7 feat(spdx2Import): start to make conclusions optional
26c4187 feat(spdx2Import): compare only by sha1
9e68781 feat(spdx2Import): conclusions
26bff73 feat(spdx2Import): also import copyright statements
b7bd5b6 feat(spdx2Import): inital commit
effb5a2 feat(candidate): add delete feature to candidate licenses
3ee22e9 feat(copyright): allow to have multiple copyright decisions
7bc2e43 feat(treeView): add operation to make multiple files irrelevant
4716837 feat(backup): add s3 backup and restore
b69a771 feat(spdx2): add name field to extracted license info
6cb3192 feat(copyright): also show deactivated copyrights in the UI
eb6f19e feat(spdx2): bump output version from 2.0 to 2.1
27225f4 feat(spdx2): strip invalid characters from non-spdx-compatible licenses
fb99c54 feat(docker-compose): increase apache verbosity
82356c2 feat(copyright): JSON output
956855f feat(monk): JSON output
2a397af feat(nomos): JSON output
5439978 feat(obligations): extend datamodel and obligation management
e9a1481 feat(copyright): split tables, separate tables for copyright and email,author,url
97fe4c4 feat(dashboard): add PHP info table
6fa1479 feat(delete): allow deletion of multiple uploads
d88a645 feat(delete): add select2 to folder select
c946064 feat(organize): allow searching for folders to copy/move to
d5871d7 feat(search): show number of search-results
5576025 feat(install): provide easy install script
268b689 feat(reuse): search all folders
e59ee82 feat(clearing): load clearing history in a model on click
919503c feat(monk): make use of rf_active to detect monk scan for licenses
5523b77 feat(clearing): Add dialog box for text and comment feilds in single file clearing view
dfcc733 feat(Obligation): add first implementation of obligations and risks management
d8b291e feat(clearingView): add action column in the leftmost position
cb582fa feat(advice-license): add full text search to advice license
d19cb3b feat(licenseList): add clearing decisions as part of license list generation and export in csv
64e5ffa feat(copyright): split copyright histogram to seperate copyrights hist and email,author,url hist
21c2787 feat(GUI): yellow flag for files with decision type "To Be Determined"
a77cba4 feat(select-searchbar): add select2 searchbar

Corrections

f5e65fb fix(reportImport): fix bug in reportImport, refactor file matching
29d5a7a fix(delagent): Delete-Folder without deleting duplicate upload/s in other folders
c1f4cdb fix(install): update packages deps for latest debian and ubuntu
55ce2bb fix(debian9): add compatibility with debian9
e7603a5 fix(ui): own css file shoult be loaded last
c8af79d fix(docker): .git should not be excluded via dockerignore
773c459 fix(obligations): select only single value for ob_classification and ob_type
8115de6 fix(obligations): rename obligation to license map table
4eda85d fix(spdx): adhere file naming convention
8ba2d52 fix(travis): do not build multiple times
81d3590 fix(licenses): remove special chars from GPL-1.0, CPAL-1.0 and MPL-2.0
c49d4c0 fix(docker-compose): do not build twice
4616608 fix(www): Undefined index in admin-license-file.php
8a66754 fix(obligations): correct php syntax using phpcs
40775c5 fix(licenseref): changing shortname of 3DFX license to 'Glide'
9570e7f fix(nomos): fix posix incomparible regular expressions
5d01085 fix(license): remove junk characters from LGPL-2.1 license text
4e222c8 fix(debian9): fix debian linker error
070ee8a fix(jquery): remove old version of jquery from copyright-hist
a1b818a fix(docker): use debian 8.8 for images
ecfefea fix(delagent): remove unused variables
15f748a fix(obligations): reintegrate lost changes
0cf4c7d fix(folder-deletion): don't delete duplicate files in other folder ...
3105198 fix(licenseView): display clearing history for all clearings done on file level
e4e6cda fix(delagent): delete child folder by parent id
cbe65df fix(license-edit): fix regression with broken license edit list
6607b13 fix(resolveConflicts): resolve conflicts after merge from master
1985be3 fix(licenseExport): change the filename format of export license
5c5cb4f fix(bulk-scan): don't schedule bulk scan, if no license/ref-text
35d12a5 feat(nomos): add new license RSA-Cryptoki
0b8e58b fix(nomos): issue #754 (regex error)
14f6062 fix(libfoss): make agent processed items counting atomic
056a9a8 fix(spdx) typo 'spxd2' in document templates
9cdf1d6 refactor(reportImport): spdx2Import -> reportImport

Improvements on Infrastructure, Packaging and Testing

ca77960 chore(changelog): update to commitlint
fcb8357 chore(changelog): removed changelog
e268d89 chore(gitignore): add more entries to the blacklist
8dfcee6 chore(travis): fix changelog lint
833d4ce chore(travis): enforce changelog
40495f7 chore(composer): composer enhancements
c77c7ad chore(copyright): Fetch json.hpp on the fly
c655c84 chore(pb): vagrant file and spec file for pb run for centos7
ae26006 style(GUI): License Comment column needs line breaks
f62a4ec chore(editorconfig): change indent_style and size
ed30641 chore(travis): Add PHP syntax checking to Travis
2a4b8d3 chore(jquery): update jQuery to 3.2.0 and jQuery UI to 1.12.1
acb62cc chore(editorconfig): add editorconfig to project

3.1.0 (April 2017)

Smaller Features

feat(nomos): add and correct nomos licenses
feat(users): apply correct email validation
feat(spdx2): allow licenses to be spdx compatible and adapt the templates enhancement needs review

Corrections

fix(ninka): ninka needs a new dependency
fix(docker): use a simpler Dockerfile for standalone build
fix(browsefolder): added a check to see, if the folder is accessible
fix(copyright): invalid pointer to regex
fix(copyrightandeccview): added tooltip next to description
fix(cp2foss): Refactor common perms
fix(deshboard): Missing quotes around string literal
fix(docker): change Dockerfile, docker run command
fix(install): xenial support for postgres in progress
fix(make): do not place composer at /tmp/composer/composer
fix(readme): Corrected the issue with mainlicense which was not displayed in readmeoss
fix(scripts) : update timezone info to php.ini bug needs review
fix(setup): PHP warnings
fix(spdx): fixes a list of SPDX compatibility bugs
fix(test): fix copyright character
fix(test): phpunit-bootstrap doesn't find Hamcrest Category: Testing
fix(ui): Added recent agent_pk in the place of any agent_pk
fix(unpacking): fix unpacking of mime-type application/java-archive
fix(user-creation): email needs to be unique and required
fix(www): correct ETA in all job view
fix(www): PHP warnings
fix(cleanup): remove HACKING, install_locations.xls, build.xml
fix(spdx): typo in template and bump LicenseListVersion
fix(spdx): add files with no license found to generated output format

Improvements on Infrastructure and Testing

chore(changelog): rename CHANGES.md to CHANGELOG.md
chore(doc): update documentation, change releases link to Github
chore(docker): docker usage information
chore(docker): refactor dockerfiles, splitting containers, avoid rebuilding, etc.
chore(gitignore): update gitignore
chore(make): Fix a typo
chore(make): Fix target name for stanalone nomos
chore(php): remove 5.3, set 5.6, add 7.0 to travis-ci
chore(setup): Set Postgres driver using variable reference
chore(testing): travis php7.1, phpunit5 for php56
chore(travis): remove gcc-4.4,clang-3.5, MAKETARGETS for gcc variants

Improvements on Packaging

chore(packaging): first import of a pbconf tree
chore(packaging): Fix EPEL dependency
chore(packaging): updating existing debian packaging for current fossology enhancement needs review
chore(packaging): vagrant test file and config for httpd 2.4 enhancement
chore(packaging): various enhancements with project builder

3.1.0-RC2 (May 21st, 2016)

Corrections

feat(conf): added header/copyright information
fix(showjob): Fixed problem with pagination and jobs not shown properly
fix(showjobs): permission test left function to early and fixed jobs not shown properly
fix(docker): only wait for postgresql if not on localhost bug

3.1.0-RC1 (April 15th, 2016)

Refactoring

refactor(ui) rewrite upload pages
refactor(ui) rewrite/refactor delagent and fix #273
refactor(ui) escape strings which become HTML or SQL

New Larger Features

New Dockerfile also used for Docker Hub, including composed containers with separate DB server
DEP5 / debian-copyright file generation
Adding tag-value format for the SPDX2 generation
More efficient UI for bulk scan with multiple licenses at the same time

New Smaller Features

feature(CONTRIBUTING.md) create initial CONTRIBUTING.md to support github feature
feature(database) add reindexing option to maintenance agent, as turned out necessary
feature(database) add some indexes and clusters to database
feature(infrastructure) add coverage coverage, adding badge to README.md
feature(license-list) improve UI for allowing more agents
feature(spdx-tools) install spdx-tools script for vagrant and travis
feature(ui) add security check to user-edit.php
feature(ui) allow users to move and copy their uploads
feature(vagrant) increase upload size setting
feature(vagrant) support proxy from host_ip:3128

Corrections on the (PHP) UI

fix(ui) fix ui-view error reporting [#615]
fix(ui) fo_copyright_list - bad error checking, - bad error message #277 and #276
fix(ui) handled exception in common-auth.php for incorrect username
fix(ui) mark decisions as irrelevant from file tree [edit] option for uploads
fix(ui) password handling for adding users improved
fix(ui) #635: add parameter to URLs for showjobs
fix(ui) only admin should be able to create groups
fix(ui) repair error, which emerges in PHP <= 5.4
fix(ui) repair issue mentioned in #660
fix(ui) repair prepared statement in admin-license-file.php
fix(ui-download) add $filenameFallback solve #589
fix(ui) added branch name and separated version into string
fix(license-browser) menu order with ECC and other corrected
fix(upload-browser) visibility issues with selection of "entire folder"

Corrections on the Application Functionality

fix(agents) fossupload_status print usage on error or --help
fix(agents) repair the calls of heartbeat #560
fix(composer) replace hash with correct one
fix(copyright) fixing listing of copyrights at Readme export
fix(copyright) increase maximum length of TLD's
fix(copyrights) removed extra where condition which leads to miss copyright statements
fix(dashboard) missing $this-> in method call
fix(delagent) any user who is not the owner can delete any folder via /delagent -F
fix(delagent) delagent error message wording
fix(monk) fix one shot functionality
fix(nomos) #340 correct path output on command line use
fix(nomos) Remove extra spaces from the end of usage messages
fix(reuse) Corrected lrb_ori to lrb_origin in bulkreuser
fix(security) SQL injection vulnerability in read_permission
fix(showjobs) correct view for &upload=-1 in the URL
fix(spdx2) Remove control characters from SPDX output #591
fix(spdx2) fix several bugs in DEP5 and SPDX2 reports
fix(ununpack) remove extraneous parentheses
fix(wget_agent) fix issue #298
fix(wget_agent) fix issue #298

Corrections to the Database, Deployment, Tests and Framework

fix(infrastructure) agent_desc not being initialized in install
fix(infrastrcuture) add to vagrant support for ninka
fix(infrastructure) Added DTD to index file to prevent phpunit test case failure
fix(infrastructure) add fo_chmod and fo_folder to .gitignore
fix(infrastructure) emoved SVN_REV from files and replaced Commit with commit_hash #331
fix(infrastructure) error which emerges in PHP <= 5.4
fix(infrastructure) improved protocol inference #580
fix(infrastructure) Missing newline in fossupload_status utility
fix(infrastructure) Missing newlines in fo_chmod error messages
fix(infrastructure) reading of .fossology.rc for not parsing values
fix(infrastructure) remove duplicate test and fix #579
fix(infrastructure) SVN_REV and added branch name in version file #331
fix(infrastructure) Write correct version of DB-scheme to DB
fix(travis) apt-get install -qq ... times out
fix(travis) use debian perl instead of cpan

Closed Issues for this Release

In order to see the issues that were closed so far for this release candidate, please refer to the github page:

https://github.com/fossology/fossology/issues?q=milestone%3A3.1.0+sort%3Acreated-asc+is%3Aclosed

Please note that you will find some of the issues open for 3.1.0 milestone - the goal of the release candidate is testing and wrapping things up, and as such the issue space for 3.1.0 will be cleaned up soon.

3.0.0 (November 5th, 2015)

Correction of wildcard handling with the wget agent
Correction of log file path settings in PHP test suite

3.0.0-RC1 (October 25th, 2015)

New Features

Feature : Brief Explanation

New folder navigation : Jquery based table UI for downloads including sorting and filtering with more handling attributes per upload.

New license UI for editing concluded licenses : Instead of providing a separate UI for license conclusion, now a single file view license UI allows for efficient license situation review: highlighted texts and selected licenses are moving together to one view now.

Re-use of license decisions : At uploading a new file, a user can select existing uploads for reusing already applied license decisions, if the file hash is the same.

Bulk assignment of license decisions based on text phrases : When identifying a phrase hinting to particular license (e.g. "license info can be found in readme"), the user can define this text as search string and assign a license decision to every matching file.

Auto-decision of the Monk and Nomos scanner find the same license in the same text area : If both scanners find the same license by short name, then a license decision can be applied automatically.

Adding Ninka as optional scanner : At upload or at scheduling jobs, the user can run Ninka scanner with FOSSology as third license scanner.

New UI for editing copyrights : Separate display for URL, E-Mails, copyright statements and authorship notes.

Adding the concept of candidate licenses, to let users add licenses as candidates for the system : New licenses must be added carefully to the server database. However, in order not to stop a user a reviewing an upload, candidate licenses can be registered for addition to the server by the server admin later.

License import and export using a CSV interface : Using CSV formatted files, licenses with the reference texts can be imported and exported to the FOSSology server.

Adding readme / copying file generation : Concluded licenses and copyright statements are written into a text file that is information for the distribution.

SPDX 2.0 file generation : Based on the scan results and concluded licenses, SPDX 2.0 XML format is generated (passes verification tool).

Issues: Corrections

Issue No. : Issue Title : Resolution

#508 : Copyright agent fails to show copyrights without license information : Corrected filter value
#492 : Correcting SPDX-non compliant LicenseRefs : FOSSology license refs contained so characters like single quotes which are not SPDX compliant
#490 : Missing (report) cache for license overview : Fixed performance issue with separate new view in PHP
#479 : Correcting Nomos Segmentation fault : That was an issue also shown in testing, corrected
#472 : Adding escaping to license texts in SPDX output : If a license contains non-std chars, the generated extracted texts could contains also these non-UTF-8 characters. As such, the SPDX was invalid.
#469 : Adding tooltip to the priority of the browse menu : In order to explain the user what the green and blue arrows in the priority column mean
#467 : Adding header content of main table in the browse view : In order to tell the user which the current folder is that is displayed
#465 : using wget_agent can modify files : Fixed an incompatibility with the wget call
#404 : Error when load the license browse page : Fixed error in migration script
#401 : At fo_nomos_license_list.php using --user instead of --username : Fixed by corrected commit
#400 : Upload from File page cannot select folder : Corrected the according FolderDAO (data access object)
#392 : Error when run cli cp2foss script : Corrected wrong function call
#384 : Dashboard failure in 2.6.2 : Was a compatibility issue between different postgresql versions, solved for 9.2 and 9.3 now
#366 : Incomplete scheduler error message : Loggin missing columns
#364 : At large number of jobs - performance problem : Correcting the SQL query to be a dimension faster
#362 : Allow install to skip version (to skip versions at updates) : Changed the fossinit.php accordingly
#360 : MIT and University of Illinois Open Source licenses not detected : Added licenses
#359 : Remove hardcoded path in wget_agent : Fixed / removed hardcoced path
#355 : Password in DBConnection string is printed to Fossology log when connection attempt fails : Password is removed from connection info map before printed to log
#352 : Copyright agent using uploadtree: is it better now? : Ran analyses on copyright agent which confirmed copyright performance / precision
#350 : License not found : Not really licenses, but some license references where not found, but they are found now with correction to the Nomos
#349 : cp2foss fails to upload a directory using '*' option : Corrected the use of wild cards
#347 : Copyright agent 2.5.0: support copyright symbol : Copyright symbol in UTF-8 is supported
#345 : copyright agent 2.5.0: non-ASCII symbols : Changed copyright agent does cover also non-ASCII symbols
#339 : A read only user can find none public files : Corrected access rights
#335 : Scanner dependency: Monk agent rescan link not shown (needed for new licenses) : Adding manual setting to allow for enabling monk rescans
#323 : Completely remove BSAM : Removed BSAM sub-project and UI references from codebase
#282 : Need License Admin Documentation : Added documentation to the fossology.org wiki
#264 : Nomos missing unidentified license ("Tapjoy") : Corrected and Nomos finds it now
#259 : Documentation fix for copyright agent : Corrected documentation of the copyright agent
#251 : On Maintenance page, be able to check all checkboxes one time : Corrected issue
#218 : Edit users forgets users agent selections : Corrected issue
#213 : Copyright - missed after long year string, for example ten years in a row : Corrected issue
#212 : Moving an upload folder fails (circle protection) : Corrected issue
#24 : Migration issue with table license_file_audit : Corrected issue

Issues: Enhancements

Issue No. : Issue Title : Resolution

#342 : Show Jobs - add estimated completion date/time : New completion time column was added (ETA)
#319 : Tooltips for UI elements : Added tooltips mechanism and text for many UI elements
#224 : At listing of copyrights - add text filter : Added a filter field - comes with the new jquery UI
#214 : Create survey & solicit fossology users to respond to questions about fossology usage : yeay: http://www.fossology.org/projects/fossology/wiki/WhoUsesFOSSology

Issues: Closed w/o Particular Commit

Issue No. : Issue Title : Resolution

#474 : copyright browser file path misplaced : Indeed, but UI needs major correction anyways, unchanged
#388 : Major Nomos Regression with AGPL : Checked that license finding is acceptable
#387 : Both Monk and Nomos appear to miss PostgreSQL License : Checked that license are found with reference file
#338 : License browser regression - schedule link : Checked that link is there
#318 : Scaling performance issues : Checked that large files seem to work with tables (also referring to #490)
#216 : ‘(c)' is recognized as a copyright signature wrongly : Retested with current version and does not seem to be a serious problem since false positives have been reduced
#247 : The maintagent - add feature to remove failed uploads : Closed because user can remove uploads also with the menu item for organising uploads
#238 : Browser tab interference when using FOSSology : Changes in the PHP UI do not show this issue anymore
#225 : Folder selection fails in Edit Uploaded File Properties : Retested and current version does not show issue anymore
#219 : New regex scanner module : There is on new module in the form of the all-new copyright agent (in c++) which is also generalised and thus extensible for new applications
#215 : Flag license as possibly proprietary : Closed without modification because it needs to be solved with commercial license options
#180 : Push continuous integration information to fossology.org : Is going to be moved to TLF
#26 : View License Audit Link confusing with Edit concluded license : Covered with changes in the UI anyways
#25 : Pull SPDX module into master branch : Closed, because SPDX module was there

2.6.2 (Jan 15, 2015)

No changes from 2.6.2-RC1

2.6.2-RC1 (Jan 6, 2015)

Performance enhancements for large uploads
Several license scanner updates
Fix for uploading from Git
Moved source from SourceForge to Github
License Browser fixes

2.6.1 (Oct 10, 2014)

This is the same as 2.6.0-RC1 but with a performance fix that effected large databases.

2.6.0-RC1 (September 15, 2014)

monk. This is a new license scanner contributed by our friends at Siemens and TNGTech. Monk looks for complete licenses (as defined in the database) and reports the percentage match (see also License highlighting below).
License highlighting. Now when you view a license you can see exactly what was added or removed from a license. This works especially well with monk since monk scans for complete licenses (stored in the fossology database). But it also works to show you what snippet nomos matched to identify a license.
New license browser
fo_copyright_list can now list files that contain a copyright, or list files that do not contain a copyright.
fo_license_list has new options to exclude licenses (or directories)
Many new licenses added
Old bugs fixed, new ones added. see our "issue tracker": (link outdated)

2.5.0 (April 9, 2014)

See the RC1 notes below for what changed. If you are upgrading an RPM system make sure you follow the [[Sysadmin_Documentation|System administration documentation]]. There was a serious bug in our previous rpm packages that can delete your existing repository. So please follow the updated upgrade instructions. Debian/Ubuntu systems are not effected by this.

2.5.0-RC1 (March 26, 2014)

NOTICE

Be aware that the only supported upgrade path is a sequential one 2.0 > 2.1 > 2.2 > 2.3 > 2.4 > 2.5.
If you run into any upgrade errors, for example with the copyright table, please let us know.
Many thanks to all of you who submitted bugs, patches and suggestions. FOSSology is for everyone, please help make it better.

What Changed

Switched source code repository to GIT (but still on SourceForge)
Fixed unpack failure when archive asks for password
Make nightly builds publicly accessible
Fix Ubuntu 12.04 packaging error
Improve FOSSology upgrade speed
New command line program to list buckets (fo_bucket_list)
Several user interface bugs fixed.

License scanner updates:

Fixed issue detecting Apache 2.0 reference
Fix for GPL-v3 being labeled GPL-v3+ in certain cases
Fixed several special cases where GPL was labelled LGPL or missed completely
Fix problem of embedded quote in license names
Fix case of GPL-2.0+ being identified as GPL-2.0
Fix EPL labeled as CPL
Fix special case of missed Boost software license
Multiple fixes for special cases where GPL was missed
Fix missed Sun Legal Notice
Fix case where upload was failing on directories that contain spaces
Fix special case where Freetype license was missed
Fix MIT that should have been MIT-style
Fix special case of missed CPL-1.0
Fix cases of missed file references
Add LIBGCJ license
Add WordNet (was being detected as MIT/Princeton license
Add Interbase-1.0 license
Add KnowledgeTree-1.1
Add Open Cascade Technology Public License
Add identifing licenses referenced in .spec files
Add ACE license
Add FACE license
Add Tapjoy license
Add ClearSilver license
Add LGPL-2.1+-KDE-exception

All the issues can be seen in our "issue tracker": (link outdated)

FilesExpand file tree

CHANGELOG.md

Latest commit

History

CHANGELOG.md

File metadata and controls

Changelog of FOSSology

4.6.0 (Nov 25th 2025)

Credits to contributors for 4.6.0

Corrections

Infrastructure

4.6.0-rc1 (Oct 29th 2025)

Credits to contributors for 4.6.0-rc1

Features

Corrections

Infrastructure

4.5.1 (Mar 25th 2025)

Credits to contributors for 4.5.1

Features

Corrections

4.5.0 (Mar 18th 2025)

Credits to contributors for 4.5.0

Features

Corrections

Infrastructure

4.5.0-rc2 (Mar 3rd 2025)

Credits to contributors for 4.5.0-rc2

Features

Corrections

Infrastructure

4.5.0-rc1 (Jan 9th 2025)

Credits to contributors for 4.5.0-rc1

Features

Corrections

Infrastructure

4.4.0 (Jan 15th 2024)

Credits to contributors for 4.4.0

Corrections

4.4.0-rc2 (Jan 8th 2024)

Credits to contributors for 4.4.0-rc2

Features

Corrections

Infrastructure

4.4.0-rc1 (Nov 21st 2023)

Credits to contributors for 4.4.0-rc1

Features

Corrections

Infrastructure

4.3.0 (Jun 22nd 2023)

Credits to contributors for 4.3.0

Features

Corrections

4.3.0-rc2 (Jun 13th 2023)

Credits to contributors for 4.3.0-rc2

Corrections

Infrastructure

4.3.0-rc1 (May 9th 2023)

Credits to contributors for 4.3.0-rc1

Features

Corrections

Infrastructure

4.2.1 (Nov 15th 2022)

Credits to contributors for 4.2.1

Features

Corrections

4.2.0 (Nov 11th 2022)

Credits to contributors for 4.2.0

Features

Corrections

4.2.0-rc1 (Sep 30th 2022)

Credits to contributors for 4.2.0-rc1

Features

Corrections

Infrastructure

4.1.0 (May 12th 2022)

Credits to contributors for 4.1.0

Corrections

Infrastructure

4.1.0-rc1 (April 8th 2022)

Credits to contributors for 4.1.0-rc1