0.28.0

What's Changed

🐞 Bug Fixes

• 709d952 core: Add missing project dependencies

🎉 New Features

• c896e03 core: Use a fixed timestamp for OpenAPI examples
• fedb27f docker: Add cargo-credential-netrc to the Docker image
• 37fc8a8 ui: Show purl from issues endpoint
• a43adc1 ui: Show purl from rule violations endpoint
• 36f14b8 ui: Show purl from vulnerability endpoint if configured

🐘 Build & ⚙️ CI

• 8d000ce admin-config: Remove the unused serialization plugin
• bd3754f gradle: Move routes in components into feature variants
• ed4bc47 gradle: Remove the versions plugin
• 787bab2 Add names for the CLI build jobs

🔧 Chores

• edf615a ui: Shorten the label for including infrastructure durations
• 40cbfcd Use Kotest's withEnvironment again

🚀 Dependency Updates

• 5a6a494 analyzer: Upgrade Python to 3.13.5
• db1b092 update actions/setup-node action to v5
• 05a527e update awssdk to v1.5.33
• 156f5ad update com.charleskorn.kaml:kaml to v0.94.0
• 29aeb9d update com.github.gmazzo.buildconfig to v5.6.8
• 7b09478 update dependency @hey-api/openapi-ts to v0.82.3
• db5924b update dependency @hey-api/openapi-ts to v0.82.4
• df10921 update dependency @hey-api/openapi-ts to v0.82.5
• 76a3256 update dependency @types/node to v22.18.1
• afd2a9a update dependency recharts to v3.2.0
• b540efc update dependency tw-animate-css to v1.3.8
• 30190b0 update dependency vite to v7.1.5
• c2cb662 update docker/dockerfile docker tag to v1.18
• 9ea9302 update flyway to v11.12.0
• 4168221 update io.micrometer:micrometer-registry-graphite to v1.15.4
• 2817fd6 update koin to v4.1.1
• 5c65c1f update kotest to v6.0.2
• ce26853 update kotest to v6.0.3
• 760f66e update org.ossreviewtoolkit:version-catalog to v67
• 75e9970 update org.ossreviewtoolkit:version-catalog to v67.1.0
• 9896275 update rabbitmq docker tag to v4.1.4
• 9efd5f5 update tailwindcss monorepo to v4.1.13
• 2a353b6 update tanstack-query monorepo to v5.87.1
• 66f7a50 update tanstack-router monorepo to v1.131.36
• 642f7af update typescript-eslint monorepo to v8.42.0
• 0a5a7b9 update typescript-eslint monorepo to v8.43.0

🚜 Refactorings

• db3580c plugin-manager: Move mappings to separate file
• 530c072 ui: Refactor /colors page
• fb301d2 ui: Refactor admin/users handling
• 2624ce5 ui: Refactor organization creation
• dfced4b ui: Refactor organization infrastructure services handling
• 6d84b02 ui: Refactor organization secrets handling
• 08624e9 ui: Refactor organization settings
• 18dc0b0 ui: Refactor organization users handling
• f2efff3 ui: Refactor organization vulnerabilities route
• 4f61fd1 ui: Refactor organizations/$orgId components
• 5839d86 ui: Refactor organizations/$orgId route and index page
• 3d02cfe ui: Refactor product creation
• 4a09853 ui: Refactor the admin/runs route
• ac7cdc3 ui: Return to ApiError handling
• 0158fd3 Add a helper function for error responses

0.27.0

What's Changed

🐞 Bug Fixes

• 05f36cb admin-config: Support case-insensitive plugin IDs
• ba8e6b7 cli: Ignore white space around report file names
• 43bf1ca ui: Show updated branding values correctly on edit

🎉 New Features

• 98c9fc1 ui: Initialize the query client
• 06214c9 ui: Move the Advisor info to a table column
• 670e08e Return purl for issues
• 05b97db Return purl for rule violations
• cef01ec Return purl for vulnerabilities

🐘 Build & ⚙️ CI

• 8c7811c ui: Install Hey API's OpenAPI to TypeScript codegen
• 7d740b5 ui: Take the Hey API / TanStack Query plugin into use
• ba930b2 Enable Detekt's autoCorrect

🚀 Dependency Updates

• 99762a8 update awssdk to v1.5.29
• 5cfc0ba update com.charleskorn.kaml:kaml to v0.93.0
• f79a5d6 update com.fasterxml.jackson.module:jackson-module-kotlin to v2.20.0
• 379c125 update com.sksamuel.aedile:aedile-core to v3.0.1
• 7346e3b update dependency @ianvs/prettier-plugin-sort-imports to v4.6.3
• 369d735 update dependency @ianvs/prettier-plugin-sort-imports to v4.7.0
• 80daaa2 update dependency @iconify/react to v6.0.1
• 353330a update dependency @mdx-js/react to v3.1.1
• 636ad77 update dependency @types/react to v19.1.12
• 866cf3b update dependency @types/react-dom to v19.1.9
• 8609b4a update dependency @vitejs/plugin-react to v5.0.2
• 63dd44e update dependency lucide-react to ^0.542.0
• f280eff update dependency vite to v7.1.4
• 77e892b update dependency zod to v4.1.4
• c2ccb94 update dependency zod to v4.1.5
• 034ce2a update kotest to v6
• 10b690c update node.js to 0ae9e80
• 501aea7 update org.ossreviewtoolkit:version-catalog to v66.1.0
• b10e07b update tanstack-query monorepo to v5.85.6
• c1acbce update tanstack-router monorepo

🚜 Refactorings

• 06406b6 test-utils: Use SystemEnvironmentExtensions from ORT
• 99192ca ui: Refactor the about route
• 5185151 ui: Refactor the admin/context-management/branding route
• 0bd96a4 ui: Refactor the admin/index route
• 8abf7ee ui: Refactor the index route

0.26.0

What's Changed

🐞 Bug Fixes

• 304aba8 reporter: Make CustomLicenseTextProvider more robust
• 0bdf245 services: Always provide report definitions for all plugins
• e073ee6 ui: Fix redirection from product overview page via refactor
• 7290f8d ui: Fix updating the UI after renaming items
• 5379718 ui: Show updated InfrastructureService values correctly on edit

🎉 New Features

• 2fbdb87 admin-config: Add a custom favicon to admin configuration
• 4777d90 admin-config: Support plugin configs for report definitions
• 05db18b api: Add endpoint to get infrastructure service of a repository
• 668feac api: Add endpoint to get infrastructure service of an organization
• 1bee16e cli: Use exit code 2 for ORT runs finishing with issues
• 8f66a69 reporter: Use plugin configs for report definitions
• 9d7e9c2 services: Add function to get infrastructure service by ID and name
• 8c2beb7 ui: Add a function to set/reset custom favicon
• e8c86a9 ui: Load the custom favicon on header render
• d0ead13 ui: Provide a form for adding a custom favicon in admin/branding
• 74b472f ui: Report the advisor that reported the vulnerability
• e5f7691 ui: Set default preload stale time to 0
• 248d51a ui: Use endpoint for fetching InfrastructureService on edit
• 55624f9 Return advisor details for vulnerabilities of run

✅ Tests

• 62b809b services: Align infrastructure service tests with function names

🐘 Build & ⚙️ CI

• e7f9656 github: Upgrade to the windows-2025 image

📖 Documentation

• eaec7fe user-guide: Move CLI getting-started documentation to user-guide

🔧 Chores

• 15dc803 ui: Streamline the branding page a bit
• 803c271 ui: Tweak the wording for run durations filtering
• 42c53e9 Rename classes to VulnerabilityWithDetails

🚀 Dependency Updates

• 5d523f3 update actions/setup-java action to v5
• cb26aab update actions/upload-pages-artifact action to v4
• bba3a57 update awssdk to v1.5.24
• 1cab371 update azure-sdk-for-java monorepo
• 5386f24 update com.autonomousapps:dependency-analysis-gradle-plugin to v3
• eb0483a update com.autonomousapps:dependency-analysis-gradle-plugin to v3.0.1
• 38419a5 update com.zaxxer:hikaricp to v7.0.2
• 2ffdedc update dependency @types/node to v22.18.0
• f253a1c update dependency @types/react to v19.1.11
• b6ddc05 update dependency @types/react-dom to v19.1.8
• b4f72eb update dependency @vitejs/plugin-react to v5.0.1
• 9fef246 update dependency lucide-react to ^0.541.0
• a3f2d5e update dependency zod to v4.1.1
• 0b0ede5 update dependency zod to v4.1.3
• 4f31559 update dependency zustand to v5.0.8
• 689c2b6 update flyway to v11.11.2
• 205ca1d update org.apache.qpid:qpid-jms-client to v2.8.0
• 9508840 update quay.io/keycloak/keycloak docker tag to v26.3.3
• cbb9425 update tanstack-query monorepo to v5.85.5
• d843bd2 update tanstack-router monorepo to v1.131.27
• a381502 update typescript-eslint monorepo to v8.41.0

0.25.0

What's Changed

🛠 Breaking Changes

• 6237ecf feat(model)!: Rework Reporter job configuration
• 6f0fc03 refactor(core)!: Use roles instead of groups for users in API

🐞 Bug Fixes

• c994e96 ui: Fix branded home icon's sizing
• 3efcdee ui: Fix job duration calculation

🎉 New Features

• d5fb667 admin-config: Add dark mode home icon URL to admin configuration
• 82ef35c authorization-service: Ensure user has only one role per entity
• 2a188fe build: Add a module to host plugin information
• 7863b1d build: Generate a summary of available plugins
• 0caeaf6 build: Introduce a plugin to collect ORT plugin infos
• 15fb660 config: Allow asset references in ReporterJobConfiguration
• d8da3a1 config: Extend AdminConfig for the Reporter
• 517e509 config: Support named groups of Reporter assets
• f82b474 config: Validate files referenced by reporter admin config
• e9f99d2 config: Validate the selected reporter formats
• c8f27d6 hierarchy-service: Add a function to get the repository hierarchy
• 0187c4a plugins: Add an object to provide plugin information
• 4d1de6d reporter: Use the admin configuration
• c4567de secret-service: Add a function to get secrets for a hierarchy
• b5c9f36 secrets: Add a route to get all secrets for a repository
• 4129cbd services: Create report definitions for all plugins
• 1f89c21 ui: Add a component for managing size of run durations chart
• 194653b ui: Add missing data to packages table
• efbbccd ui: Add missing data to projects table
• 0c7fc7e ui: Always show total run duration in the tooltip
• d0d268d ui: Change "all runs" behaviour in run durations chart
• 4445c54 ui: Checkbox for showing/hiding infrastructure durations
• 5c272ea ui: Extend the home icons form
• b368738 ui: Format key-value pairs
• 8db0639 ui: Show infrastructure durations
• deb7325 ui: Show separate home icons for light and dark modes in header

✅ Tests

• 41020e1 authorization-service: Add tests for user role functions

🚀 Dependency Updates

• bdf22bf update awssdk to v1.5.19
• 5e59570 update com.charleskorn.kaml:kaml to v0.88.0
• 86a6332 update com.charleskorn.kaml:kaml to v0.89.0
• 0c8d6cc update com.charleskorn.kaml:kaml to v0.91.0
• 83458f7 update com.charleskorn.kaml:kaml to v0.92.0
• 2ffcce4 update com.google.devtools.ksp to v2.2.10-2.0.2
• 4223188 update dependency @ianvs/prettier-plugin-sort-imports to v4.6.2
• 5437110 update dependency @types/node to v22.17.2
• 40ef572 update dependency tw-animate-css to v1.3.7
• c3aeecb update dependency vite to v7.1.3
• a52a7d8 update flyway to v11.11.1
• e248a8f update io.micrometer:micrometer-registry-graphite to v1.15.3
• c106614 update nginx:1.29-alpine docker digest to 2459838
• 001711a update nginx:1.29-alpine docker digest to 42a516a
• a43274d update nginx:1.29-alpine docker digest to 5a14017
• 7434345 update node.js to 752ea8a
• 88c144b update org.jetbrains.kotlin:kotlin-gradle-plugin to v2.2.10
• 18fb6df update org.ossreviewtoolkit:version-catalog to v66.0.3
• 9696b3b update radix-ui-primitives monorepo
• 0b3bacc update react monorepo to v19.1.10
• 644f084 update tailwindcss monorepo to v4.1.12
• 641fe83 update tanstack-query monorepo to v5.85.3
• 6794e21 update tanstack-router monorepo to v1.131.25
• 5ec063a update typescript-eslint monorepo to v8.40.0

🚜 Refactorings

• 243b12b analyzer: Extract package curation provider plugins
• 990e8bf authorization: Add a sealed parent interface for role types
• 08a01fd authorization-service: Make groups an implementation detail
• 5b7a524 authorization-service: Rename DefaultAuthorizationService
• a38875b core: Call authorization service directly for role assignment
• aa65db4 model: Move some classes to the admin config service model
• 94c933d ui: Helper function for calculating durations for the chart
• 93beefa ui: Use path alias for some imports

0.24.0

What's Changed

🐞 Bug Fixes

• 3da9ef5 scanner: Account issues from failed scans to job status

🎉 New Features

• 649d91b dao: Add support for path includes
• 23bf230 ui: Add a component for word-wrapping "difficult" strings
• 0ecdaf7 ui: Add a component to show the resolutions
• bdd3956 ui: Add a new button size variant "narrow"
• 99a429c ui: Compress the table headers a bit
• 24e5405 ui: Improve details view with resolutions
• 00b4b97 ui: Increase width of content area
• a88b8f2 ui: Show resolutions
• 69d655c ui: Some modifications to the Resolutions component
• d72fa6b ui: Use the word-wrapping component for Package ID fields
• aa3d5e5 workers: Rework GradleInitGenerator

🔧 Chores

• e7b2164 model: Remove unnecessary serializable annotations
• af52ccd Consistenly use named arguments in mappings

🚀 Dependency Updates

• 6a7dac3 update actions/cache digest to 0400d5f
• 34dca91 update actions/checkout action to v4.3.0
• 50537f6 update actions/checkout action to v5
• b987854 update awssdk to v1.5.14
• a644287 update com.azure:azure-identity to v1.17.0
• 43d0046 update com.zaxxer:hikaricp to v7.0.1
• 6fe5184 update dependency @ianvs/prettier-plugin-sort-imports to v4.6.1
• e6a0800 update dependency @types/node to v22.17.1
• a5b0c79 update dependency @vitejs/plugin-react to v5
• f179f93 update dependency lucide-react to ^0.539.0
• c40f5cc update dependency node to v22
• e67cee8 update dependency pnpm to v10
• 9b904e7 update dependency vite to v7.1.0
• 18773ff update dependency vite to v7.1.1
• 9d4e3c7 update dependency vite to v7.1.2
• 22c533f update dependency zod to v4.0.16
• 8ee59da update dependency zod to v4.0.17
• 6746dd5 update flyway to v11.11.0
• 419d77e update node.js to 88f44fb
• fa3752c update org.ossreviewtoolkit:version-catalog to v66.0.2
• fea339f update tanstack-query monorepo to v5.84.2
• 6c15730 update tanstack-router monorepo to v1.131.2
• ebf0897 update tanstack-router monorepo to v1.131.3
• 4bdad1e update typescript-eslint monorepo to v8.39.1

🚜 Refactorings

• 6c76d2b api: Align property order of RuleViolation classes
• aad43e7 api-v1-mapping: Rename Mappings.kt to ApiMappings.kt
• 7db5733 dao: Fix the name of UserDisplayNameDao
• 2a577b0 model: Rename OrtRuleViolation to RuleViolation
• db04f1d Rename RuleViolation.packageId to id

0.23.0

What's Changed

🎉 New Features

• 9cd6ab1 core: Validate plugin configs in products route
• 613389e ui: Add status column to rule violations table
• 624de94 ui: Add status column to run vulnerabilities table
• 8069131 ui: Default the initial selection of items to "Unresolved"
• c9c1f5a ui: Default the initial selection of vulnerabilities to "Unresolved"
• 48d4eaf ui: Extend getResolvedStatus()
• 73fff54 ui: Extend getResolvedStatus()

📖 Documentation

• 67afa18 user-guide: Add Concepts - Structure and External Services

🔧 Chores

• a8fecf3 core: Remove unused helper functions

🚀 Dependency Updates

• 188ef83 update actions/download-artifact action to v5
• 278488c update dependency recharts to v3.1.2
• b4a211c update dependency zod to v4.0.15
• c5214e7 update gradle/actions digest to 017a9ef
• e44fd17 update org.ossreviewtoolkit:version-catalog to v66.0.1

0.22.0

What's Changed

🐞 Bug Fixes

• ef14db8 Adjust timestamp precision for database compatibility

🎉 New Features

• b3c8abe core: Allow keepAliveWorker flag for products only for superusers
• 44a844b ui: Add Status column to Issues table
• a4a8bcf ui: Add a function for coloring resolved status
• e8aea0c ui: Add function to get the resolved status of issues
• 3df9ae1 ui: Add inputs for keepAliveWorker flags
• 461595d ui: Add needed types and schemas for item statuses
• b7b6f9a ui: Default the initial selection of issues to "Unresolved"

✅ Tests

• 09c6bd7 core: Improve test names in ProductsRouteIntegrationTest
• 33e92a6 core: Move plugin related test cases next to each other
• 3e1ff29 core: Use the correct URL for plugin tests in products route

🐘 Build & ⚙️ CI

• 925831f gradle: Remove the Jakarta migration plugin

🚀 Dependency Updates

• e2ba180 azure-blob: Upgrade to Azurite 3.35.0
• 5b984a0 update awssdk to v1.5.9
• da56904 update azure-sdk-for-java monorepo
• d2e6f3e update com.michael-bull.kotlin-result:kotlin-result to v2.1.0
• 7d0179c update com.netflix.nebula.jakartaee-migration to v0.25.0
• 7a28265 update com.squareup.okio:okio to v3.16.0
• 2b4602e update dependency @hookform/resolvers to v5.2.1
• 6890625 update dependency @types/node to v22.17.0
• 2072654 update dependency gradle to v9
• bfa55a3 update dependency lucide-react to ^0.536.0
• 0cd2052 update dependency react-hook-form to v7.62.0
• 5af2a78 update dependency recharts to v3.1.1
• 4b9d9e6 update dependency sonner to v2.0.7
• a6819c2 update dependency typescript to ~5.9.0
• a64bac8 update dependency zod to v4.0.14
• e6c6c9e update dependency zustand to v5.0.7
• ba1ecb1 update docker/login-action digest to 184bdaa
• 3d3a380 update docker/metadata-action digest to c1e5197
• 3edd8d8 update io.ktor:ktor-version-catalog to v3.2.3
• fbd1c77 update ktoropenapi to v5.2.0
• 95fcf6f update org.flywaydb:flyway-core to v11.10.5
• a274389 update org.ossreviewtoolkit:version-catalog to v65
• de9a2d2 update org.ossreviewtoolkit:version-catalog to v66
• 7f23437 update rabbitmq docker tag to v4.1.3
• c16eb71 update schemakenerator to v2.3.0
• 0ed8c12 update tanstack-query monorepo to v5.84.1
• 3182318 update tanstack-router monorepo
• 2086da8 update typescript-eslint monorepo to v8.39.0

🚜 Refactorings

• 7bdb858 api-model: Provide a default value for ErrorResponse.cause
• fdc6d8a core: Simplify check for keepAliveWorker flag

💡 Other Changes

• 33f9e0d style(core): Improve formatting in ProductsRoute

0.21.0

What's Changed

🐞 Bug Fixes

• b56894d logs: Ensure that logs of forked processes set the correct MDC
• fc41551 ui: Add handling for 401 responses
• ce7bdb4 ui: Add handling for errors in the silent token renewal
• b0caffc ui: Fix updating the state on the admin plugins page

🎉 New Features

• be3f6bf core: Validate plugin configs in repositories route
• a30a16e reporter: Ignore trailing slash in download link prefix
• b5e3bd8 ui: Add logger for oidc-client-ts
• e58b587 ui: Add retry login button to failed login screen
• 8805f87 ui: Load available plugins for create ORT run form
• 0917d3e ui: Remove obsolete descriptions for infrastructure services
• 25ab037 ui: Show the descriptions for advisor and reporter plugins

🔧 Chores

• 1c2e587 docker: Set linux/amd64 platform for images that install ScanCode

🚀 Dependency Updates

• 7bd37b0 analyzer: Upgrade python-inspector to 0.14.3
• c12c946 scanner: Upgrade ScanCode to 32.4.1
• 2675e6e update awssdk to v1.5.4
• d81326d update com.zaxxer:hikaricp to v6.3.2
• 94bbeda update com.zaxxer:hikaricp to v7
• 1fa5f03 update dependency @hookform/resolvers to v5.2.0
• 45b174f update dependency lucide-react to ^0.526.0
• 66c9745 update dependency react-hook-form to v7.61.0
• 1f7253c update dependency react-hook-form to v7.61.1
• 4768a58 update dependency tw-animate-css to v1.3.6
• 6e3ac7c update dependency vite to v7.0.6
• d7c1beb update dependency zod to v4.0.10
• 932a016 update dependency zod to v4.0.11
• 9daab8f update dependency zod to v4.0.13
• d040206 update dependency zod to v4.0.8
• 166fbe2 update flyway to v11.10.4
• b95eb7e update node.js to 2fa754a
• 414ae07 update org.apache.commons:commons-text to v1.14.0
• e1407ee update org.ossreviewtoolkit:version-catalog to v64
• 60b6ea6 update org.ossreviewtoolkit:version-catalog to v64.1.0
• 9909770 update quay.io/keycloak/keycloak docker tag to v26.3.2
• 0fe847c update tanstack-router monorepo to v1.130.2

0.20.0

What's Changed

🐞 Bug Fixes

• 3a5166d config: Handle directory paths in GitConfigFileProvider
• 9209390 config: Handle directory paths in GitHubConfigFileProvider
• 67d33f5 config: Handle directory paths in LocalConfigFileProvider
• 778da13 ui: Migrate to comply with zod version 4
• b6c2b85 workers: Disable caching of authentication results
• 2889beb workers: Handle authentication of infrastructure more strictly

🎉 New Features

• cfc59ae config: Add a helper function to get URLs from config
• 9a11d97 config: Rework authentication in GitConfigFileProvider
• 3939d66 core: Add a function to extract plugin configs from CreateOrtRun
• 69b14b1 core: Configure examples for the OpenAPI plugin
• 4ac5a83 plugin-manager: Add a route to get the plugins for a repository
• 7008d02 workers: Introduce UserInfoSecretAuthenticator
• 57cd432 workers: Use UserInfoSecretAuthenticator for authentication

✅ Tests

• 64d027e Consistently use shouldHaveStatus to assert HTTP responses

🐘 Build & ⚙️ CI

• 066a0f6 Make the CLI command used to build containers configurable

📖 Documentation

• becb89a config: Improve the documentation of the contains function
• 91ba3ce Assign example value using the value property
• 2dbe820 Avoid multiline JSON string in example values
• 1eaa34f Replace body with jsonBody in OpenAPI docs
• 47e1143 Replace model classes with API model classes
• 3bb0914 Set all OptionalValue properties explicitly in examples

🔧 Chores

• 2f71bc7 compose: Adjust exposed debug port for advisor worker
• 8d197e7 compose: Configure debugging options for all workers
• c068d62 dev: Add remote debugging run configurations for all components
• c8c5e3f github: Replace @mmurto with @sschuberth as a UI code owner
• 1a13f7f ui: Make zod enum from autogenerated enum definition
• 0883579 ui: Replace deprecated zod params
• a151c76 workers: Move auth tests to correct package

🚀 Dependency Updates

• 35d0e71 update awssdk to v1.4.125
• 5a4e7b9 update com.charleskorn.kaml:kaml to v0.85.0
• 0e4884c update com.fasterxml.jackson.module:jackson-module-kotlin to v2.19.2
• ea898be update com.rabbitmq:amqp-client to v5.26.0
• 16fa01c update com.sksamuel.aedile:aedile-core to v3
• cdf7d24 update com.zaxxer:hikaricp to v6.3.1
• e8e9405 update dependency @easyops-cn/docusaurus-search-local to ^0.52.0
• 2f0f26f update dependency @easyops-cn/docusaurus-search-local to v0.52.1
• 971c8f6 update dependency @types/node to v22.16.5
• 55b66f4 update dependency @vitejs/plugin-react to v4.7.0
• 48f9456 update dependency vite to v7.0.5
• 21fe9f3 update dependency zod to v4
• d486fa2 update dependency zod to v4.0.5
• 07af42f update eclipse-temurin:21.0.7_6-jdk-jammy docker digest to 746ad71
• f1261a7 update eclipse-temurin:21.0.7_6-jdk-jammy docker digest to c99563e
• 8e60392 update eclipse-temurin:21.0.7_6-jdk-jammy docker digest to d19563c
• 997650f update io.mockk:mockk to v1.14.5
• 76bc3ed update nginx:1.29-alpine docker digest to 186168f
• b50ddb3 update nginx:1.29-alpine docker digest to 5380ec1
• 5248d5b update nginx:1.29-alpine docker digest to 6054a84
• 3482994 update nginx:1.29-alpine docker digest to d67ea0d
• d71a0f1 update nginx:1.29-alpine docker digest to f741b7f
• 9afa657 update node.js to c26e3d8
• 98c7825 update org.flywaydb:flyway-core to v11.10.3
• cd2e866 update org.ossreviewtoolkit:version-catalog to v63
• 770167d update org.ossreviewtoolkit:version-catalog to v63.1.0
• 5850ca6 update org.ossreviewtoolkit:version-catalog to v63.1.1
• 93309a7 update tanstack-router monorepo to v1.129.0
• 055c92b update typescript-eslint monorepo to v8.38.0

🚜 Refactorings

• b5bcdda plugin-manager: Rename endpoints package to routes
• 85c3e67 workers: Extract logic to find best-matching service
• b91be60 workers: Move setup of environment to fork helper
• 4e69400 workers: Simplify resolveSecretByName()

💡 Other Changes

• 1d110c7 feat(): Add a secret resolver function using ConfigManager
• 25d9abf style(gradle): Consistenly prefer = over set()
• 41bab7c style(plugin-manager): Fix indentation
• 07db0d0 style: Remove superfluous whitespaces

0.19.0

What's Changed

🎉 New Features

• 65d0d4f api: Add resolved parameter for vulnerabilities endpoint
• a015c36 api: Add applicable resolutions to list of vulnerabilities
• 499a0bf orchestrator: Store information about failed jobs

✅ Tests

• 7585e30 components: Add helper classes to reduce boilerplate

🐘 Build & ⚙️ CI

• aa73d26 github: Allow configuration caching when publishing

🔧 Chores

• 58d98b0 common: Migrate generator tests to use blocks for expected lines

🚀 Dependency Updates

• b0c56c3 update awssdk to v1.4.120
• d590274 update com.typesafe:config to v1.4.4
• 6e79274 update com.vanniktech:gradle-maven-publish-plugin to v0.34.0
• 94059ee update dependency @ianvs/prettier-plugin-sort-imports to v4.5.0
• e9429cf update dependency @ianvs/prettier-plugin-sort-imports to v4.5.1
• 04c0783 update dependency @types/node to v22.16.1
• 79a23b6 update dependency @types/node to v22.16.2
• 2780a59 update dependency @types/node to v22.16.3
• f366590 update dependency @types/node to v22.16.4
• d6f765d update dependency prettier-plugin-tailwindcss to v0.6.14
• 7ac60dd update dependency recharts to v3.1.0
• 611c936 update dependency vite to v7.0.4
• f712dc9 update dependency zod to v3.25.76
• 0c4ef19 update flyway to v11.10.2
• 34c3612 update io.ktor:ktor-version-catalog to v3.2.2
• ba49c8e update io.micrometer:micrometer-registry-graphite to v1.15.2
• 342c03d update node.js to b04ce4a
• cf56061 update org.apache.logging.log4j:log4j-to-slf4j to v2.25.1
• 68c59a3 update org.ossreviewtoolkit:version-catalog to v62.2.0
• bf78089 update quay.io/keycloak/keycloak docker tag to v26.3.1
• 20a333b update tanstack-query monorepo to v5.83.0
• c2159b6 update tanstack-router monorepo
• 926626b update typescript-eslint monorepo to v8.37.0

🚜 Refactorings

• 4bddd88 services: Use OrtRunService to retrieve vulnerabilities
• a2e1927 Align names of component submodules
• 2cb5398 Move VulnerabilityService to ORT run service module