Skip to content

0.47.0

Choose a tag to compare

@github-actions github-actions released this 13 Jan 11:37
· 1145 commits to main since this release

What's Changed

🛠 Breaking Changes

  • dd050df build(gradle)!: Append "-worker" to all worker projects
  • 57fde0f build(gradle)!: Prefix component subprojects with the component name
  • 64dfbcc feat(api)!: Add the superuser status when listing all users
  • c652017 feat(api)!: Use Identifier instead of String for package search

🐞 Bug Fixes

  • 1140164 compose: Add missing mount for secrets.properties
  • 952bd9c compose: Enable Keycloak database migrations during realm import
  • 27569a3 compose: Fix the Logstash config
  • a7d99f3 config: Use the default branch for blank revisions also when updating
  • 71b9917 dao: Fix handling of rule violations without license sources
  • 68746ef ui: Don't hide the chart tooltip behind other UI elements
  • 33605fa ui: Don't submit form when clicking copy button
  • 295bec0 ui: Fix "total job duration" calculation
  • f7573e9 ui: Fix tooltip rendering when infra durations not in use
  • 7be9eed ui: Make text inside light blue badges more readable
  • 02253d2 ui: Make the tooltip of the run durations chart wider
  • 5acaeca vault: Fix a failing request after token renewal
  • 9af5da8 workers: Also show ORT stacktraces for forked processes

🎉 New Features

  • 69e4453 api: Add routes to add and remove the superuser status
  • 277ba47 dao: Add a migration script to delete fake scan results
  • 3452ef6 dao: Add scan result and scan summary indexes
  • f47b51c logs: Add custom header for UI and CLI clients
  • c898514 search: Add PURL-based package search with curation support
  • 221c3ef search: Extend search service and API
  • 8258cf7 search: Make the searches case-insensitive
  • e0b9470 search: Tests for vulnerability search
  • 727b53b ui: Add "copy to clipboard" where applicable
  • d37407c ui: Add a component to show the SHA1
  • ea9169d ui: Allow to add and remove superusers
  • a7eadc9 ui: Extend RunDuration to align implementation
  • b9128d4 ui: Lift package ID to URL in package search
  • b489084 ui: Link package IDs to packages table
  • 031c853 ui: Refactor the repository runs table
  • 1f8d0c9 ui: Search ORT runs with vulnerabilities
  • f9a2d37 ui: Show superuser status in admin users table
  • 2413753 ui: Unify showing the SHA1 in the UI
  • 38fc897 ui: Use ORT ID or purl in package search
  • 8a8bf45 ui: Use getSize() for element widths in header and body components
  • 68bd7f5 ui: Use the column sizing hook in main table components

✅ Tests

  • 8e9d4e6 search: Add tests for PURL-based package search
  • 1c7a32a search: Add tests for case-insensitive search

🐘 Build & ⚙️ CI

  • e5e58c2 gradle: Automate adding the "-service" suffix to service projects
  • 0423305 gradle: Automate prefixing of SPI projects
  • f47cc7c gradle: Simplify accessing the version catalog from buildSrc

📖 Documentation

  • b4765a7 ui: Improve the "Repository configuration path" description

🔧 Chores

  • 6c2baa1 authorization: Fix some references to outdated classes
  • 86ac8ce buildSrc: Remove unused imports
  • 8b3b85a compose: Set fixed versions for grafana images
  • d131c07 mailmap: Merge Oliver's email addresses
  • f63e86d mailmap: Update Martin's email address
  • 3967d04 Drop obsolete classes from authorization-keycloak

🚀 Dependency Updates

  • 18133bc Update ORT to version 73.0.0
  • 07608f3 Update ORT to version 74.0.0
  • 3e21d56 update awssdk to v1.5.107
  • d9f57d2 update awssdk to v1.5.110
  • 9ac91f6 update awssdk to v1.5.113
  • a1c42f1 update awssdk to v1.5.117
  • fc48c6b update ch.qos.logback:logback-classic to v1.5.23
  • a80530e update ch.qos.logback:logback-classic to v1.5.24
  • 63c1a82 update com.github.dasniko:testcontainers-keycloak to v4.1.0
  • 5a53f1c update com.github.gmazzo.buildconfig to v6.0.7
  • 4b9fd39 update com.github.jmongard.git-semver-plugin to v0.18.0
  • f09c7b0 update com.google.devtools.ksp to v2.3.4
  • c4c84f2 update com.sksamuel.aedile:aedile-core to v3.0.2
  • 211f3ba update dependency @eslint/compat to v2.0.1
  • 3e2fb10 update dependency @hey-api/openapi-ts to v0.89.1
  • 3479a6c update dependency @hey-api/openapi-ts to v0.89.2
  • 6f2eb93 update dependency @hey-api/openapi-ts to v0.90.0
  • 41da262 update dependency @hey-api/openapi-ts to v0.90.1
  • 23281c1 update dependency @hey-api/openapi-ts to v0.90.2
  • a029f19 update dependency @hey-api/openapi-ts to v0.90.3
  • e3119d0 update dependency @tanstack/react-query to v5.90.16
  • 08222f9 update dependency @types/node to v24.10.6
  • 1f883c1 update dependency @types/node to v24.10.7
  • 4458e73 update dependency @types/react to v19.2.8
  • 3ccdf96 update dependency eslint-plugin-react-refresh to v0.4.26
  • 490df93 update dependency globals to v17
  • c60756a update dependency lucide-react to ^0.562.0
  • 8d6f18e update dependency react-hook-form to v7.69.0
  • baa71df update dependency react-hook-form to v7.70.0
  • 1c5da2a update dependency react-hook-form to v7.71.0
  • 35494ea update dependency vite to v7.3.1
  • e52d313 update dependency vitest to v4.0.16
  • cbcbad3 update dependency vitest to v4.0.17
  • a767d42 update dependency zod to v4.3.2
  • 867d852 update dependency zod to v4.3.4
  • 443f7bc update dependency zod to v4.3.5
  • 28a84cf update dependency zustand to v5.0.10
  • 7a28eb8 update docker/setup-buildx-action action to v3.12.0
  • e64882f update flyway to v11.19.1
  • e4df13e update flyway to v11.20.0
  • a9e0eb3 update flyway to v11.20.1
  • 84c60ac update io.micrometer:micrometer-registry-graphite to v1.16.2
  • 881a976 update nginx:1.29-alpine docker digest to 8491795
  • 6810b38 update nginx:1.29-alpine docker digest to 9de2613
  • b2d84c9 update nginx:1.29-alpine docker digest to c083c37
  • 9ed3665 update nginx:1.29-alpine docker digest to ce611bb
  • 40b146f update nginx:1.29-alpine docker digest to fd9f8ce
  • 50f031d update node.js to b83af04
  • 73e2ad0 update org.apache.logging.log4j:log4j-to-slf4j to v2.25.3
  • 2e68536 update org.ossreviewtoolkit:version-catalog to v74.1.0
  • c94f6f3 update org.ossreviewtoolkit:version-catalog to v75
  • 001ae12 update quay.io/keycloak/keycloak docker tag to v26.5.0
  • 3e4248b update tanstack-query monorepo
  • 3b72003 update tanstack-router monorepo
  • fb3894c update tanstack-router monorepo to v1.142.8
  • 2ddd759 update tanstack-router monorepo to v1.144.0
  • d737202 update tanstack-router monorepo to v1.145.4
  • e8a7e93 update typescript-eslint monorepo to v8.50.1
  • 67c86b0 update typescript-eslint monorepo to v8.51.0
  • 73c1db1 update typescript-eslint monorepo to v8.52.0

🚜 Refactorings

  • 89d154f hierarchy: Introduce a HierarchyLevel enum
  • c40fab6 search: Extract finding runs by package ID to a function
  • 24a8616 ui: Add a hook for managing responsive column sizing for tables
  • 1749cb4 ui: Add column sizing props to ColumnMeta
  • c4f142f worker: Remove an unneeded level of package nesting in tests
  • 3439b5e workers: Only keep one REGISTRY_URI variable for testing
  • 50eb599 workers: Remove an unneeded level of directory nesting