0.77.0

What's Changed

🎉 New Features

• 94f7b67 Kubernetes: Add support for multiple containers
• 5af7e8f Kubernetes: Allow assigning names to volume mounts
• 362c463 Kubernetes: Support init containers
• c0f8dee logs: Log whole uri instead of path
• d108753 ui: Add favorite buttons
• a8188bc ui: Add favoriting actions to hierarchy pages
• f5c81af ui: Add home data provider
• 32f1bfd ui: Implement home dashboard
• b77387f ui: Track recently started runs locally
• 7ef5547 utils: Expose a function to substitute variables in a string

🐘 Build & ⚙️ CI

• e629e1c Kubernetes: Make client-java-api-fluent an api dependency

📖 Documentation

• c6a2c9f Kubernetes: Update the documentation

🚀 Dependency Updates

• a47d910 update awssdk to v1.6.100
• e224e11 update ch.qos.logback:logback-classic to v1.5.35
• 28aefde update dependency axios to v1.18.0
• d6b9f22 update dependency eslint-plugin-react-refresh to v0.5.3
• d0762f8 update dependency react-hook-form to v7.79.0
• 3a0e37e update eslint monorepo
• 88d715a update jsonschemavalidator
• 3daa12a update mavenpublishplugin
• 2a6e634 update nginx:1.31-alpine docker digest to 1a8724a
• 03a4f7c update nginx:1.31-alpine docker digest to 2031656
• 4e801b6 update node.js to c2d5ade
• 3ae42ba update playwright monorepo
• 916dd1d update pnpm to v11.7.0
• d11db20 update radix-ui-primitives monorepo
• f0aa14e update tailwindcss monorepo to v4.3.1
• f233da8 update typescript-eslint monorepo to v8.61.1
• a49723b update vitest monorepo

🚜 Refactorings

• 9daf6f6 Kubernetes: Homogenize the handling of volume mounts
• b6294c1 Kubernetes: Introduce a Container data class
• 3071b7b ui: Move organizations table to "/organizations" route
• a3d5924 Move Identifier to shared API model

0.76.0

What's Changed

🛠 Breaking Changes

• c2838e8 feat(api)!: Replace processed declared license package filter

🐞 Bug Fixes

• fd2c6e5 service: Reflect curations in declared license filters
• 055756a ui: Wrap long labels

🎉 New Features

• 3fb7501 api: Expose unmapped declared licenses
• 95ad291 elasticsearch: Make the provider compatible with JSON logging
• 62292b8 logging: Format the throwable as a single string
• dad6cc8 logging: Include the formatted message in JSON logs
• 210d65c ui: Add package curation provider form support
• 6576c2e ui: Add package curation provider selector
• 0946e8c ui: Add provider priority drag-and-drop
• e693ec3 ui: Align plugin multi select field with plugin templates
• ce937cc ui: Group declared license filter options
• 4996183 ui: Tighten the create run form vertically

🐘 Build & ⚙️ CI

• fa6fb4a gradle: Avoid using property delegates
• d26bd2b ui: Install @dnd-kit for drag-and-drop support in the UI

🔧 Chores

• 76c005f snippet-findings: Strip trailing whitespace

🚀 Dependency Updates

• c82c6b3 update actions/checkout action to v7
• 2d9ff3f update dependency @types/node to v24.13.2
• 0864355 update detektplugin to v2.0.0-alpha.5
• 0760a85 update docker/dockerfile docker tag to v1.25
• a14471c update flyway to v12.9.0
• 80557d9 update gradle to v9.6.0
• 8318b5f update kotest to v6.2.1
• 2b09259 update nginx:1.31-alpine docker digest to d565d19
• 6c7b04c update org.ossreviewtoolkit:version-catalog to v89.2.0
• ace0468 update pnpm to v11.5.3
• 2e15e3e update pnpm to v11.6.0
• 284dc89 update rabbitmq to v5.32.0

🚜 Refactorings

• f474c91 service: Curated declared license lookup helper
• de14088 service: Helper for applying package curations

0.75.0

What's Changed

🐞 Bug Fixes

• 563ed3c dao: Store resolved snippet revisions
• 80cd7d9 docker: Force the lockfile of cargo-credential-netrc to be used

🎉 New Features

• 4b16117 snippet-findings: Add API model for snippet findings
• 233fc4b snippet-findings: Add API routes for snippet findings
• 8ca6687 snippet-findings: Add a service for snippet findings
• f63ba3a ui: Link to provenance
• 43182f1 ui: Show snippet findings

✅ Tests

• b7e5f1c tasks: Remove an unused lambda parameter name
• 7b23b44 Prefer the vararg version of shouldContain where appropriate

🐘 Build & ⚙️ CI

• 4f3fa31 perf: Compute the ORT-Server version only once
• b201bb4 perf: Skip the base image build for the UI image
• eb86937 docker: Build the base image once in a preceding job
• 5504718 docker: Cache the worker base image build
• b103aec docker: Make the build job the sole writer of the base image cache
• ff1afc2 docker: Remove the dead base image build-contexts mapping

🚀 Dependency Updates

• 83fa7e0 scanner: Upgrade Provenant to version 0.1.12
• a51b3d6 scanner: Upgrade Provenant to version 0.1.13
• 03af9be update actions/setup-java action to v5.3.0
• 8bb80a3 update awssdk to v1.6.95
• e73983f update azure-sdk-for-java monorepo to v1.18.4
• dbfbc94 update azure-sdk-for-java monorepo to v12.35.0
• 0c2fcda update dependency @hey-api/openapi-ts to v0.98.2
• 736e067 update dependency @tailwindcss/typography to v0.5.20
• 7c17744 update dependency @types/node to v24.13.1
• f2533f7 update dependency prettier to v3.8.4
• 0b6cbbd update dependency react-hook-form to v7.78.0
• ee8137f update gitsemverplugin to v0.19.2
• 9dac968 update gradle/actions action to v6.2.0
• 4664f89 update hikari to v7.1.0
• 4a1444f update koin to v4.2.2
• 4a49e26 update node.js to 2c87ef9
• 3bd7740 update org.ossreviewtoolkit:version-catalog to v89
• c9c2c6e update org.ossreviewtoolkit:version-catalog to v89.1.0
• efc45fa update org.ossreviewtoolkit:version-catalog to v89.1.1
• 492198d update pnpm to v11.5.2
• ef9dfa0 update rabbitmq docker tag to v4.3.2
• 0816abc update radix-ui-primitives monorepo
• db8a6f6 update react monorepo to v19.2.17
• 49efb0a update tanstack-query monorepo to v5.101.0
• 67f808b update tanstack-router monorepo
• 8ac7ec1 update typescript-eslint monorepo to v8.61.0

0.74.0

Upgrade Notes

The new UI feature to generate authentication tokens requires some changes to the Keycloak client used for the CLI (called ort-server-cli by default):

• Add {UI-URL}/profile/token and {UI-URL}/profile/token/callback to the valid redirect URIs and web origins, where {UI-URL} must be replaced with the public URL of the UI.
• The "Standard flow" must be enabled.
• "Require PKCE" should be enabled and the "PKCE Method" set to "S256".

Also see: https://eclipse-apoapsis.github.io/ort-server/docs/admin-guide/guides/keycloak-config#ort-server-cli

What's Changed

🐞 Bug Fixes

• f9e44c5 docker: Upgrade the base image to Java 25

🎉 New Features

• 78ca0fc cli: Add support for login with offline token
• 6d70440 cli: Move LoginCommand options to groups
• 8f2664e cli: Show required options and default values in help
• 45a599f ui: Add authentication token generation to profile
• af0cf23 ui: Improve wording of some empty tables
• 2bbc964 ui: Provide "no results content" prop to card tables

🐘 Build & ⚙️ CI

• 2a75662 Upgrade to Java 25 to benefit from various optimizations

🔧 Chores

• 142f404 cli: Align test class names with classes under test

🚀 Dependency Updates

• d64787d update com.autonomousapps.build-health to v3.15.0
• f487159 update dependency @types/node to v24.13.0
• 669eddd update dependency axios to v1.17.0
• 8db8c5d update jsonschemavalidator to v3.0.4

🚜 Refactorings

• 2d2a0dd cli: Extract a function for creating the OIDC config

0.73.0

What's Changed

🐞 Bug Fixes

• eb580aa api: Default infrastructure services in the API
• 5b68367 ui: Align the vertical spacing in analyzer form section
• 65d6af8 ui: Clear stale environment definition errors
• 7321804 ui: Fix card item alignment in packages table
• 241e6c9 ui: Left-align wrapped package IDs
• 80fb663 ui: Omit infrastructure services from run payload
• d358909 ui: Wrap copy-to-clipboard component and package IDs together

🎉 New Features

• ff28463 ui: Switch to use dynamic environment configuration forms

✅ Tests

• 128d69d ui: Cover environment configuration payloads

🚀 Dependency Updates

• 8e35dcb update alpine docker tag to v3.24
• d7b7d25 update dependency @hey-api/openapi-ts to v0.98.1
• be0e5c0 update gradle/actions action to v6.1.1
• f47278c update pnpm to v11.5.1
• ad2453d update react monorepo
• c6a06dd update spring security to v7.1.0
• 3414f1f update typescript-eslint monorepo to v8.60.1

0.72.0

What's Changed

🐞 Bug Fixes

• bf7eb26 ui: Show inherited secrets in service edit forms
• 6a5cec6 ui: Show the plugin summary instead of description

🎉 New Features

• dbb7459 Add an option to enable JSON logging

🔧 Chores

• 9017723 ort-test-data: Remove unused fileStorageConfiguration
• f37abd7 Consistently pass durations to delay

🚀 Dependency Updates

• 3c29ea0 update awssdk to v1.6.90
• 080dfed update dependency @easyops-cn/docusaurus-search-local to v0.55.2
• 79a320d update dependency @hey-api/openapi-ts to v0.98.0
• a1fe861 update dependency react-hook-form to v7.77.0
• 09c2ef3 update dependency vite to v8.0.15
• 06f3852 update dependency vite to v8.0.16
• 80f0e58 update dependency zustand to v5.0.14
• dddd4c4 update eslint monorepo to v10.4.1
• 7568c31 update flyway to v12.8.1
• d904a31 update gitsemverplugin to v0.19.1
• 3ce3848 update lucide monorepo to v1.17.0
• 94958cf update micrometer to v1.17.0
• 267e3ed update pnpm to v11.5.0
• aef17dc update quay.io/keycloak/keycloak docker tag to v26.6.3
• 2a8f475 update tanstack-router monorepo
• 9dcea21 update vitest monorepo to v4.1.8

0.71.0

What's Changed

🐞 Bug Fixes

• 3bb11b9 ui: Treat STRING_LIST values as strings in plugin template forms

🎉 New Features

• 3b1868c ui: Add long-lived caching for hashed files
• be70870 ui: Add robots.txt to disallow search engine indexing
• 05c1ea4 ui: Compress static assets
• b3ed86c ui: Force browsers to revalidate a cached index.html

🐘 Build & ⚙️ CI

• ed7e68f gradle: Prefer buildHealth over projectHealth

📖 Documentation

• 8149680 gradle: Remove some weird chars from a because string
• d16d16d kubernetes: Add mountPvcs and mountEmptyDirs documentation

🔧 Chores

• 31072af core: Add missing OpenAPI tags and sort them alphabetically

🚀 Dependency Updates

• dff385a scanner: Upgrade Provenant to version 0.1.8
• 6032ec5 update actions/checkout action to v6.0.3
• 18f6823 update awssdk to v1.6.84
• 5efa705 update buildconfigplugin to v6.0.10
• 884c013 update ch.qos.logback:logback-classic to v1.5.34
• 8bb17d7 update com.autonomousapps.build-health to v3.14.1
• 2d6bc48 update dependency @hey-api/openapi-ts to v0.97.3
• 6398724 update dependency react-hook-form to v7.76.1
• af57545 update flyway to v12.7.0
• 752d241 update flyway to v12.8.0
• 36d9830 update io.mockk:mockk to v1.14.11
• 4a93436 update org.ossreviewtoolkit:version-catalog to v88
• e95e2f7 update pnpm to v11.3.0
• 7fbf7a3 update pnpm to v11.4.0
• 0dd2c70 update tanstack-query monorepo to v5.100.14
• bb107b3 update tanstack-router monorepo
• 6606942 update typesafeconfig to v1.4.9
• 7eac6d3 update typescript-eslint monorepo to v8.60.0

🚜 Refactorings

• b5a0a1c server-settings: Align code with the renaming of the module
• 004a47c server-settings: Change routes to /settings/server
• 0ecfa26 Integrate ContentManagementService into server-settings
• c73bae8 Rename admin-config component to server-settings

0.70.0

What's Changed

🐞 Bug Fixes

• 8b3c23b compose: Update the UID used for the secrets volume

🎉 New Features

• 80d7214 api: Filter all vulnerability endpoints with advisors
• 7b8d76f model: Add advisors field to all filter models and mappings
• 9185115 service: Filter by advisors in single- and multi-run queries
• 6ad5dd6 ui: Filter vulnerabilities with advisors
• 655442e ui: Render plugin descriptions in Markdown

🐘 Build & ⚙️ CI

• d3c78c9 gradle: Remove the global ExperimentalSerializationApi opt-in
• 2393675 gradle: Replace detached config with named config in custom plugin

🚀 Dependency Updates

• 0f24d58 scanner: Upgrade Provenant to version 0.1.5
• b2c6400 scanner: Upgrade Provenant to version 0.1.6
• 6ce7d24 update ch.qos.logback:logback-classic to v1.5.33
• 65da310 update com.autonomousapps.build-health to v3.14.0
• 6c8fa96 update com.azure:azure-security-keyvault-secrets to v4.11.0
• 3318d6d update com.networknt:json-schema-validator to v3.0.3
• efb2057 update com.rabbitmq:amqp-client to v5.31.0
• 78ebf25 update dependency @hookform/resolvers to v5.4.0
• 05482f5 update dependency vite to v8.0.14
• 10b6336 update org.ossreviewtoolkit:version-catalog to v87.2.0
• d826a05 update org.ossreviewtoolkit:version-catalog to v87.3.0
• 5b6c048 update org.slf4j:slf4j-api to v2.0.18
• 6c9ebf8 update pnpm to v11.2.0
• 7c00058 update pnpm to v11.2.1
• 6500325 update pnpm to v11.2.2

🚜 Refactorings

• a8ec79d api: Unify the vulnerability filter handling
• 50d4474 ui: Align column ordering of the vulnerability tables

0.69.0

What's Changed

🐞 Bug Fixes

• 34e7b3b dao: Filter duplicate provenance resolution issues
• 507f1ad kubernetes: Include the run ID in worker job names

🎉 New Features

• d496694 scanner: Store provenance resolution issues for current run

🐘 Build & ⚙️ CI

• 503b5ab gradle: Use the same dependency substitutions as in ORT

📖 Documentation

• 603be13 scanner: Fix an incomplete comment

🚀 Dependency Updates

• e29a154 update com.google.devtools.ksp to v2.3.9
• b6598df update dependency @types/react to v19.2.15
• 5cb702d update dependency vitest to v4.1.7
• 5abea23 update ktor monorepo to v3.5.0
• 4c67af9 update node.js to 242549c
• 764aa59 update rabbitmq docker tag to v4.3.1

0.68.0

What's Changed

🐞 Bug Fixes

• af4d769 docker: Delete the "ubuntu" default user
• 9aaa210 worker: re-enable publishing of the config worker artifact

🎉 New Features

• dae878f ui: Add buttons to rerun and delete runs to the admin runs table

🐘 Build & ⚙️ CI

• 26e1466 gradle: Use rich version declaration instead of enforcedPlatform

🔧 Chores

• 97c3b2c docker: Set the user ID back to 1000
• c170f77 kubernetes: Add a direct dependency to the fluent API
• 368d1a2 Add AI-related directory to .gitignore

🚀 Dependency Updates

• c8dded5 update awssdk to v1.6.80
• e533186 update com.autonomousapps.build-health to v3.12.2
• 264434f update com.autonomousapps.build-health to v3.13.0
• 07b7204 update dependency @hey-api/openapi-ts to v0.97.2
• 55ac93a update dependency @vitejs/plugin-react to v6.0.2
• 674bc9b update dependency eslint to v10.4.0
• ee4ec6c update dependency lucide-react to v1.16.0
• aaca2fd update dependency postcss to v8.5.15
• 54e4a7e update dependency react-hook-form to v7.76.0
• de7fec9 update dependency vite to v8.0.13
• 4d21b77 update dev.panuszewski.typesafe-conventions to v0.11.1
• b574c7c update docker/build-push-action action to v7.2.0
• 3554199 update docker/login-action action to v4.2.0
• 221d2c5 update docker/metadata-action action to v6.1.0
• 1a49aeb update docker/setup-buildx-action action to v4.1.0
• 1318e83 update flyway to v12.6.2
• f8dacc2 update nginx:1.31-alpine docker digest to 8b1e787
• e3ea0d7 update org.ossreviewtoolkit:version-catalog to v87.1.0
• 6455f7f update pnpm to v11.1.2
• c5e1e74 update pnpm to v11.1.3
• 9ca1a84 update tanstack-query monorepo to v5.100.10
• c7fb600 update tanstack-router monorepo
• 710d49d update typescript-eslint monorepo to v8.59.4