0.47.0
What's Changed
🛠 Breaking Changes
- dd050df build(gradle)!: Append "-worker" to all worker projects
- 57fde0f build(gradle)!: Prefix component subprojects with the component name
- 64dfbcc feat(api)!: Add the superuser status when listing all users
- c652017 feat(api)!: Use Identifier instead of String for package search
🐞 Bug Fixes
- 1140164 compose: Add missing mount for
secrets.properties - 952bd9c compose: Enable Keycloak database migrations during realm import
- 27569a3 compose: Fix the Logstash config
- a7d99f3 config: Use the default branch for blank revisions also when updating
- 71b9917 dao: Fix handling of rule violations without license sources
- 68746ef ui: Don't hide the chart tooltip behind other UI elements
- 33605fa ui: Don't submit form when clicking copy button
- 295bec0 ui: Fix "total job duration" calculation
- f7573e9 ui: Fix tooltip rendering when infra durations not in use
- 7be9eed ui: Make text inside light blue badges more readable
- 02253d2 ui: Make the tooltip of the run durations chart wider
- 5acaeca vault: Fix a failing request after token renewal
- 9af5da8 workers: Also show ORT stacktraces for forked processes
🎉 New Features
- 69e4453 api: Add routes to add and remove the superuser status
- 277ba47 dao: Add a migration script to delete fake scan results
- 3452ef6 dao: Add scan result and scan summary indexes
- f47b51c logs: Add custom header for UI and CLI clients
- c898514 search: Add PURL-based package search with curation support
- 221c3ef search: Extend search service and API
- 8258cf7 search: Make the searches case-insensitive
- e0b9470 search: Tests for vulnerability search
- 727b53b ui: Add "copy to clipboard" where applicable
- d37407c ui: Add a component to show the SHA1
- ea9169d ui: Allow to add and remove superusers
- a7eadc9 ui: Extend RunDuration to align implementation
- b9128d4 ui: Lift package ID to URL in package search
- b489084 ui: Link package IDs to packages table
- 031c853 ui: Refactor the repository runs table
- 1f8d0c9 ui: Search ORT runs with vulnerabilities
- f9a2d37 ui: Show superuser status in admin users table
- 2413753 ui: Unify showing the SHA1 in the UI
- 38fc897 ui: Use ORT ID or purl in package search
- 8a8bf45 ui: Use getSize() for element widths in header and body components
- 68bd7f5 ui: Use the column sizing hook in main table components
✅ Tests
- 8e9d4e6 search: Add tests for PURL-based package search
- 1c7a32a search: Add tests for case-insensitive search
🐘 Build & ⚙️ CI
- e5e58c2 gradle: Automate adding the "-service" suffix to service projects
- 0423305 gradle: Automate prefixing of SPI projects
- f47cc7c gradle: Simplify accessing the version catalog from
buildSrc
📖 Documentation
- b4765a7 ui: Improve the "Repository configuration path" description
🔧 Chores
- 6c2baa1 authorization: Fix some references to outdated classes
- 86ac8ce buildSrc: Remove unused imports
- 8b3b85a compose: Set fixed versions for grafana images
- d131c07 mailmap: Merge Oliver's email addresses
- f63e86d mailmap: Update Martin's email address
- 3967d04 Drop obsolete classes from
authorization-keycloak
🚀 Dependency Updates
- 18133bc Update ORT to version 73.0.0
- 07608f3 Update ORT to version 74.0.0
- 3e21d56 update awssdk to v1.5.107
- d9f57d2 update awssdk to v1.5.110
- 9ac91f6 update awssdk to v1.5.113
- a1c42f1 update awssdk to v1.5.117
- fc48c6b update ch.qos.logback:logback-classic to v1.5.23
- a80530e update ch.qos.logback:logback-classic to v1.5.24
- 63c1a82 update com.github.dasniko:testcontainers-keycloak to v4.1.0
- 5a53f1c update com.github.gmazzo.buildconfig to v6.0.7
- 4b9fd39 update com.github.jmongard.git-semver-plugin to v0.18.0
- f09c7b0 update com.google.devtools.ksp to v2.3.4
- c4c84f2 update com.sksamuel.aedile:aedile-core to v3.0.2
- 211f3ba update dependency @eslint/compat to v2.0.1
- 3e2fb10 update dependency @hey-api/openapi-ts to v0.89.1
- 3479a6c update dependency @hey-api/openapi-ts to v0.89.2
- 6f2eb93 update dependency @hey-api/openapi-ts to v0.90.0
- 41da262 update dependency @hey-api/openapi-ts to v0.90.1
- 23281c1 update dependency @hey-api/openapi-ts to v0.90.2
- a029f19 update dependency @hey-api/openapi-ts to v0.90.3
- e3119d0 update dependency @tanstack/react-query to v5.90.16
- 08222f9 update dependency @types/node to v24.10.6
- 1f883c1 update dependency @types/node to v24.10.7
- 4458e73 update dependency @types/react to v19.2.8
- 3ccdf96 update dependency eslint-plugin-react-refresh to v0.4.26
- 490df93 update dependency globals to v17
- c60756a update dependency lucide-react to ^0.562.0
- 8d6f18e update dependency react-hook-form to v7.69.0
- baa71df update dependency react-hook-form to v7.70.0
- 1c5da2a update dependency react-hook-form to v7.71.0
- 35494ea update dependency vite to v7.3.1
- e52d313 update dependency vitest to v4.0.16
- cbcbad3 update dependency vitest to v4.0.17
- a767d42 update dependency zod to v4.3.2
- 867d852 update dependency zod to v4.3.4
- 443f7bc update dependency zod to v4.3.5
- 28a84cf update dependency zustand to v5.0.10
- 7a28eb8 update docker/setup-buildx-action action to v3.12.0
- e64882f update flyway to v11.19.1
- e4df13e update flyway to v11.20.0
- a9e0eb3 update flyway to v11.20.1
- 84c60ac update io.micrometer:micrometer-registry-graphite to v1.16.2
- 881a976 update nginx:1.29-alpine docker digest to 8491795
- 6810b38 update nginx:1.29-alpine docker digest to 9de2613
- b2d84c9 update nginx:1.29-alpine docker digest to c083c37
- 9ed3665 update nginx:1.29-alpine docker digest to ce611bb
- 40b146f update nginx:1.29-alpine docker digest to fd9f8ce
- 50f031d update node.js to b83af04
- 73e2ad0 update org.apache.logging.log4j:log4j-to-slf4j to v2.25.3
- 2e68536 update org.ossreviewtoolkit:version-catalog to v74.1.0
- c94f6f3 update org.ossreviewtoolkit:version-catalog to v75
- 001ae12 update quay.io/keycloak/keycloak docker tag to v26.5.0
- 3e4248b update tanstack-query monorepo
- 3b72003 update tanstack-router monorepo
- fb3894c update tanstack-router monorepo to v1.142.8
- 2ddd759 update tanstack-router monorepo to v1.144.0
- d737202 update tanstack-router monorepo to v1.145.4
- e8a7e93 update typescript-eslint monorepo to v8.50.1
- 67c86b0 update typescript-eslint monorepo to v8.51.0
- 73c1db1 update typescript-eslint monorepo to v8.52.0
🚜 Refactorings
- 89d154f hierarchy: Introduce a
HierarchyLevelenum - c40fab6 search: Extract finding runs by package ID to a function
- 24a8616 ui: Add a hook for managing responsive column sizing for tables
- 1749cb4 ui: Add column sizing props to ColumnMeta
- c4f142f worker: Remove an unneeded level of package nesting in tests
- 3439b5e workers: Only keep one
REGISTRY_URIvariable for testing - 50eb599 workers: Remove an unneeded level of directory nesting