Bug fix Release
- TC-4542 Improve behaviour of cache then it's under memory pressure
- TC-4162 Create a read only/kill switch for TPA
Bug fix Release
- TC-3623 OIDC userinfo call fails for Azure Entra as OIDC
- TC-4108 Add OIDC_LOAD_USER configuration support to server API
Bug fix Release
- TC-3742 Slow TPA responses
- TC-3745 RHTPA UI - re-executes endpoint that fails
- TC-3762 UIScopes field for OIDC
- TC-3751 Identify Red Hat SBOMs using case insensitive Organization
Bug fix Release
- TC-3624 Can't find some components in latest analysis endpoint
Bug fix Release
- TC-2717 500 error when searching for purl using /analysis/latest/component/ endpoint
- TC-2848 After an SBOM is deleted, there are errors displayed in the Dashboar
- TC-2985 Scan SBOM Report Failed screen UX mistmatch cod Client side validation
- TC-3037 CBOM: Cannot read properties of undefined (reading uui) erorr on SBOM details page
- TC-3073 Missing result in latest returned by non-latest endpoint
- TC-3170 Query latest (and non latest) endpoints omits "anchestors"
- TC-3201 Github CVE Importer error - data did not match any variant of untagged enum
- TC-3212 Slow performance of analysis endpoints
- TC-3214 Improve source_document deletes
- TC-3234 Concurrent upload: refactoring
- TC-3278 Latest endpoint only returning one result where non-latest returns many
- TC-3286 q processing mismatch for in-memory vs DB for PURLS of SBOMs
- TC 3432 Metrics not matching the right path for /reccomend and /analyze
Bug fix and enhance release
- TC-2414 Version 2 - License Export SPDX package CPE mismatches to SBOM
- TC-2598 Vulnerabilities table - Inconsistent CVSS column sorting
- TC-2615 Performance issues with DELETE /api/v2/sbom/{id} endpoint
- TC-2675 No error is reported in the UI when pointing the Quay importer to a non-existent source
- TC-2685 When disabling a running Quay importer, the message diplayed in the UI is wrong
- TC-2686 When an image tag expires in the repository before the importer digests it, there is a nasty error message in the UI under the importer
- TC-2805 SBOM with vulnerable packages shows 0 vulnerabilities
- TC-2980 Scan SBOM - Report generated only with Affected vulnerabilities - Remove Status filter
- TC-2983 OSV Vulnerability not reported on TPA
- TC-3003 Remove PURL GC endpoint
- TC-3007 Scan SBOM - Static Spinner while uploading sbom and Generating reports
- TC-3152 Concurrent upload: duplicate key value violates unique constraint error
- TC-3176 SBOM and Vulnerability deadlocks fix
- TC-3177 zstd encoding is broken
- TC-2824 AIBOM/CBOM Ingestion and retrieval Task
- TC-2828 Create an ADR for extracting recommendations information from OSV and CSAF
- TC-2948 Implementation of the recommendation API endpoint
- TC-2981 License filtering: consistently update current SBOM packages license filter
Bug Fix Release
- TC-2733 Components missing from analysis/latest/component
- TC-2758 Listing latest components by CPE doesn't show all descendants defined in SBOMs
- TC-2701 Stage Atlas timeout for CPE cpe:/a:redhat:openstack:13::el7 with params descendants=10&limit=20&offset=0
- TC-2717 500 error when searching for purl using /analysis/latest/component/ endpoint
Bug Fix Release
- TC-2498 Use extensible labels to manage extensible metadata for SBOMs and Advisories
- TC-2606 Analysis/latest/component/ only returning a single root
- TC-2677 SBOM link regression on 0.3.z branch
- TC-2415 After uploading SBOM files with hundreds of CVEs, the dashboard page takes a lot of time to load and eventually shows an error
- TC-2562 Importer pod stuck in pending state for PVC
- TC-2418 Aggregate severity in a downloaded Advisory doesn't match the value displayed in the Advisory Explorer
- TC-2431 The number of the total advisories in the dashboard is not the same as in the advisories tab
- TC-2440 Search gets broken by tilde '~' character
- TC-2658 Vulnerabilities not reported for go package
- TC-2666 Labels - Field validation
Bug Fix Release
- TC-2488 Support custom trust anchors for S3
- TC-2441 Deleting a document leads to a stale broken data model
- TC-2469 Python package wrongly affected by vulnerability
- TC-2306 RHTPA 2.0: Support for minio endpoint
- TC-2473 TPA SBOM ingestion - performance issues
- TC-2489 CVSS scores with Environment or Temporal score component cause panic
- TC-2519 Vulnerabilities cannot be deleted due to foreign key constraints
First release based on trustify repository