sw360-18.1.0-M1
sw360-18.1.0-M1
This tag includes important corrections and fixes following the 18.0 pre-release. It is also the final tag with Liferay, as SW360 will use the SW360-frontend project (https://github.com/eclipse-sw360/sw360-frontend) starting from the next release.
Migrations
For existing installations, a data migration is required with PR 1963. Please go to the readme file in scripts/migrations to see more information:
https://github.com/eclipse/sw360/blob/master/scripts/migrations/README.md
Note: For running the migrations scripts, you will need python and the couchdb package. Please note that you will need to change manually in the python file: the DRYRUN variable and the couchdb URL (if that is not on localhost or requires password or both).
SW360 18.1 Native Install Deployment
https://eclipse.dev/sw360/docs/deployment/legacy/nativeinstall/native-install-sw360-version-18.1.0/
Credits
The following github users have contributed to the source code since the last release (in alphabetical order):
> Afsah Syeda <afsah.syeda@siemens-healthineers.com>
> Aftab, Farooq Fateh (ext) <farooq-fateh.aftab.ext@siemens-energy.com>
> Anupam Ghosh <anupam.ghosh@siemens.com>
> Akshit Joshi <akshit.joshi@siemens-healthineers.com>
> Eldrin <eldrin.sanctis@siemens.com>
> Gaurav Mishra <gmishx@gmail.com>
> Helio Chissini de Castro <heliocastro@gmail.com>
> Jens Viebig <jens.viebig@vitec.com>
> hoangnt2 <hoang2.nguyenthai@toshiba.co.jp>
> Keerthi B L <keerthi.bl@siemens.com>
> Nikesh kumar <kumar.nikesh@simens.com>
> rudra-superrr <rudra.chopra@siemens.com>
> sameed.ahmad <sameed.ahmad@siemens-healthineers.com>
> tuannn2 <tuan2.nguyennhu@toshiba.co.jp>
Please note that also many other persons usually contribute to the project with reviews, testing, documentations, conversations or presentations.
Features
4bfabe486feat(rest) : Remove mail-request parameter and read from config file96863d14cfeat(REST): Search package by purl and version684d90117feat(REST): Create clearing request for a project and move the preferred clearing date limit field out of Liferay"fe044d00feat(project): Added release field for licenseObligation get endpoint70837b27feat(rest): filter attachment usages in projectea94202bfeat(license): Update Whitelistaf155858feat(CR): Update clearing request state from AWAITING RESPONSE to PENDING INPUT2bd2b2fdfeat(vscode): Add workspace java settings8ceba8fbfeat(docker): Add test build using docker944a7164feat(rest): added pagination for vulnerability tracking status page.70391d07feat(rest): add license obligations to a project.4f65386ffeat(obligation): endpoint to list license obligation table data5fcb3533feat(rest) : endpoint to list license obligations from license database.240c73f3feat(CR): Create a new Clearing Request state Sanity Check to perform sanity check before accepting a project4bc56326Revert "feat(CR): Disable Clearing Request creation for the projects which have linked releases without SRC type attachment"71d3a470Feat(User): Create new endpoints to Create/Revoke/List rest api tokend4820efcfeat(Rest) : Download license clearing report end point.14fda713feat(api): new endpoint /mySubmissionscec7f4b7feat(docker): Improve output of check_image script.d7699485feat(docker): Revamp docker build setup2ddf76f0feat(user): Enable API user endpoint by default36a41ceffeat(Obligation): adding obligation type data in license obligation table.44219a39feat(rest) : Pagination for vulnerability tracking statusb925c0abRevert "feat(UI): enhanced date filter for open and closed clearing requests tab"a3038447feat(UI): enhanced date filter for open and closed clearing requests tab9f9a1ffa1feat(UI): Add an info button in the create CR pageb98d346a4feat(UI): Add clearing type column in closed clearing request tabb6aa50650feat(Project): - Extract license from all releases in dependency network when download license information of a project - Generate source code bundle from all releases in dependency network when download Generate source code bundle for a project49f5486fafeat(rest): endpoint to link sourceProject to list of projects.1ab14350bfeat(CR): Disable Clearing Request creation for the projects which have linked releases without SRC type attachmentbcd600c26feat(User): Add new endpoints to get/update requesting user profile3cb73c19ffeat(rest): Create new endpoint to unschedule all services.83a2b3a28feat(license): Listing obligations by license8a9c407e8feat(license): Fix Update License isChecked89a75f815feat(project): Update ghactions workflows deps849e10a0cfeat(obligation): Add api listing obligations by ObligationLevel3ec2cb129feat(rest) : Rest end point for releases by lucene search7ccba71d5feat(project): Setup Sonatype publishingc0fb731c4feat(license): Create API Export License141e24babfeat(Release):Upload Source Code Attachment to Releases through a Scheduled Servicec7c33c78ffeat(rest): adding pagination for listing vendors endpoint.c805ff90ffeat(rest) : Adding or Modifying fields to project summaryadminastration page6a89beabcfeat(Script): Delete MR's for a specific useradc862038feat(license): Create new api update license
Corrections
dfabecd2cfix(importCDX) : Fix package's linked release updation when an SBOM is imported3de514387fix(project): adding project owner field in project get endpoint.c31464972fix(api): throw 409 if last moderator219792b1fix(importCDX): Resolve incorrect package/release count in import summary6d9f3620fix(rest): Create a new endpoint for dataBaseSanitation.ae997be2fix(project): Update outdated Github actionscb02b200fix(sw360): changing mkdocs version0c9523fbfix(REST): Improve error message handling for CycloneDX sbom import using REST APIdf735e9bfix(Release): Updating the license overview in the summary pagee5ac9278fix(SRCUploadService): Source upload should work for release versions having alphanumeric charactersfa42d204fix(api): provide typeMasks name as Optional type6e36abbbfix(api): check project modifier before embedding3beff049fix(Project): Fix bug Expand Next Level and Collapse All button are hidden when click on sort icon5112980ffix(urlEncoding): url encoding.fe0a4408fix(Release): Add embedded other licenses in release responsed4a8be84fix(importCDX): Packages without VCS in SBOM having VCS in SW360 are not getting linked to project8af9bd5efix(importCDX): Add check for existing comps and package using case-insensitive comparison of vcs and purlee3ed068fix(Liferay): Fix bug cannot access oauth client page when import lar fileedc9320cfix(rest) : attachment usage type fix in response49be7428fix(importSBOM): Remove the invalid characters appearing in import summary message for invalid packages list5a726764fix(rest): create endpoint for search by userName using lucene search.ff068133fix(rest): Added releaseId in recentRelease and release mySubscription.87a14f7afix(Rest): Added status for mysubsciption in component.d28843c2fix(docker): Fix broken binaries context inclusion16475d70fix(rest) : create new endpoint for cleanup attachment.0950a2cafix(script): update modifiedBy/modifiedOn project fields.67696a9ffix(department): Division by zero caused by bad default value for interval9703661dfix(rest): Added primaryRole and secondaryDepartmentRoles fields for user endpoint.fba0d8e5fix(rest): Added modifiedBy field in project search by id.178813e5ffix(docker): Adjust local naming for docker imagesb55372562fix(thrift): Add proper version to build34765dd80fix(thrift): Follow link download stepef5cc0142fix(database): Restore reading environment database vars8aaf95734fix(UI) : Issue fix for vulnerability not displaying for projectc63023c4dfix(release): modify the externalId query parsing6a6cb33b5fix(docker): We have been using wrong Java version625ffcfa1fix(release): revert external id query parsing222879a9efix(rest): error handling when user dont have sufficient import permissiond619c5121fix(Table): Fix error of hiding attachment table content when clicking sortef83441dffix(moderator): show message when only moderator choose remove me option.590a2b3adfix(docker): Remove deletion that invalidate image2fe147f09fix(rest): create new enpoint to check server connection.47d14b158fix(script): Fix migration script not working with python30d535c386fix(config): Correct file number0f9d9b85afix(rest): create a new endpoint for fossology in admin tab.5b9f10921fix(script): Fix incorrect numbering for migration scripts0f9d31974fix(couchdb): Add config entry to disable couchdb cache451948a79fix(javadoc): Remove invalid link reference05c2445fafix(lib): Add meta information to enable publishb5f6cb469fix(importCDX): Update failed component creation error message6e1964a40fix(rest-fossology): applied changes for upload endpoint5a83fe2c9fix(RequestsPortlet): Unable to reopen CR, Open Components to display open releases, clearing progress to show percentage2fdd5f4c5fix(Rest): Allowing search for releases using externalIdsd9fce216fFix(package): Fix issues api for package - Cannot unlink orphan packages from the project - Cannot link a package to a release without any package - Handle message when package with same purl already exists02d84be81fix (rest) : rest api created for component search by lucene search
Infrastructure
e71c5e53fRevert "build(deps): bump org.apache.commons:commons-compress"42ed65eechore(deps): Update json to version 20240303cd53eed2refactor(deps): Update new codebase library8fca0929chore(license): Ignore checks under templates73ea0cf3chore(templates): Second batch of bug report template updatesf375af4fchore(templates): Update outdated bug/issue templatesa28f3ce3build(deps): bump idna in /.github/actions/clean_up_package_registry2d907549build(deps): bump org.apache.commons:commons-compress4d87a2bbbuild(deps): bump org.bitbucket.b_c:jose4j in /rest/resource-server7ee06367build(deps): bump org.springframework.security:spring-security-core737a1320ci(docker): Use external action to reduce maintenanced9341ee28chore(package-portlet): package-portlet enabled for default installationecb30a34dUpdate build status7d3511146build(deps): bump com.jayway.jsonpath:json-path from 2.8.0 to 2.9.08b5428d92docs(api): add OpenAPI docs for /vulnerabilities27dc3d8bbdocs(api): add OpenAPI docs for releases72a99c897docs(project): response codes DELETE /projects1c3f70f8echore(javadoc): Fix javadoc entries as requirements to publish in sonatype