sw360-14.0.0-M1

sw360-14.0.0-M1

This tag covers many corrections/bug fixes after the 13.4 release.

This release provides features, muliple bug fixes for release 13.4, for example, new REST endpoints, new functions in the UI and changelog enable/disable from sw360.properties.

Migrations

For existing installations, a data migration is required. Please go to the readme file in scripts/migrations to see more information:

https://github.com/eclipse/sw360/blob/master/scripts/migrations/README.md

For running the migrations scripts, you will need python and the couchdb package. Please note that you will need to change manually in the python file: the DRYRUN variable and the couchdb URL (if that is not on localhost or requires password or both).

Credits

The following github users have contributed to the source code since the last release (in alphabetical order):

Abdul Kapti <abdul.kapti@siemens-healthineers.com>
Anupam Ghosh <anupam.ghosh@siemens.com>
Jaideep Palit <jaideep.palit@siemens.com>
Kouki Hama <kouki1.hama@toshiba.co.jp>
Michael C. Jaeger <michael.c.jaeger@siemens.com>
ravi110336 <kumar.ravindra@siemens.com>
Shi Qiu <shi1.qiu@toshiba.co.jp>
Smruti Prakash Sahoo <smruti.sahoo@siemens.com>
Tran Vu Quan <quan1.tranvu@toshiba.co.jp>

Please note that also many other persons usually contribute to the project with reviews, testing, documentations, conversations or presentations.

Features

• e1923ac3 feat(UI): import OSADL obligation information and update screen of Adding new obligation
• 2b6b9a9d feat(UI): CLI file clean up assistant
• 3702de56 feat(rest): Added rest api to create duplicate of project
• 8ff2748f feat(RestAPI):Update the attachment status with the approver/rejecter Name and Group.
• e3d8122a feat(ProjectUI): Add new values to Obligation status
• 3bab5e99 feat(ui): Display,update vulnerability for linked projects in project details view
• 8d1f96ff feat(log): Added output processing of the change log
• a873ad83 feat(ReleaseUI): License to SourceFile Mapping
• 533ace69 feat(rest): Add Rest API for linking release to release

Corrections

• ea72ce63 fix(ui): Fixed redirect page from Release Edit page to Release Details page
• ce9d9550 fix(changelog):Fixed the file permission issue for sw360 changelog.
• 9ef38314 fix(rest): Change base url of health api from /actuator to /
• 843f1f8d fix(rest): Get component by name case insensitive
• 96a59335 fix(rest): Create duplicate project clearing state should always be open and not copied
• fc1f1e39 fix(sw360ChangeLog):Configure the sw360ChangeLog path.
• d27527d3 fix(docker): Fixed cannot upload attachment more than 1 MB by Rest Api
• 46e6eb18 fix(views): Optimize views for components
• 2e8a9cc8 fix(views): Optimize views for releases
• 21682a3a fix(views): Optimize views to load large projects
• 65719867 fix(rest): Fixed hateoas link not showing correct protocol
• 0ed91d75 fix(ui): Links in ReadmeOss as HTMl are not rendered properly
• edeb13d2 fix(ui): fix the bug that attachments usages in project cannot show other line
• 5bff785f fix(rest): Update project vulnerabilities
• 0202f9df fix(rest): Fixed projects loading issue in REST
• 62d8887b fix(UI):Component details not shown for the Security Admin Role.
• 1db9afda fix(rest): Added new parameter luceneSearch to Get Project List Api, to get project list based on lucene search
• 3305fc6b fix(Japanese) : Update and modify Japanese translations
• 2f85cf70 fix(projects): Fixed thrift timeout by optimizing projects loading
• aa8574eb fix(upgradeVersion): Updated resource server properties for Spring 2.X
• a0f1861b fix(upgrade version): fixed the test cases failure issue when generating the rest docs.
• 033d912a fix(upgradeVersion): Fixed Test case for authorization server with spring boot version upgrade * Refactored code and removed commented lines
• 71bf74bc fix(upgradeVersion):Upgrade version.
• 2e98d07d fix(RestAPI):500 Internal server error from releases API.
• eb6192bc fix(ui): Cleanup moderation request on deleting project/release/component
• 57e08173 fix(ui): Changes in External urls in Project are not registered in Moderation Request. Closed Moderation Request doesnot show Proposed changes
• 8b5ffecc fix(Rest):make SW360 REST API Get Releases by Name Case-Insensitive.
• 97a72951 fix(DBTestsFail): Migrating databasetest.properties to couchdb-test.properties.
• 6c3c51ec fix(log): Fix indentation issue in source code.
• 4ab50904 fix(MyProjectErrorMessage):update the error message in UI for the project which is not accessible.
• d2f22b80 fix(ui): Fixed js error while merge component/release with null additional data
• 9c4d2f0d fix(rest): Added exception processing for authorization
• af443442 fix(script): add password and user in couchdb-lucene.ini
• 318d0923 fix(docker):Update couchdb3.1 ubuntu20.04 liferay7.3.4 postgresql12
• 5ec1df6a fix(ci) added new files to license check script
• 26dc7333 fix(ui): Fixed create/update users with uppercase email or externalid
• db1c1a97 fix(ui): User should be able to edit group of project

sw360-13.4.0-M1

This tag covers many corrections and bug fixes after the 13.3 release. Th eproductive use of 13.3 has revealed a number of issues resulting from the big persistence layer switch.

This release provides also features, however, some smaller news are there, for example, new REST endpoints or new functions in the UI.

Migrations

For this version, no database migration is necessary.

Credits

The following github users have contributed to the source code since the last release (in alphabetical order):

abdul.kapti@siemens-healthineers.com
jaideep.palit@siemens.com
kumar.ravindra@siemens.com
michael.c.jaeger@siemens.com
nam1.nguyenphuong@toshiba.co.jp
smruti.sahoo@siemens.com
yosuke.yamada.no@hitachi.com

Please note that also many other persons usually contribute to the project with reviews, testing, documentations, conversations or presentations.

Features

• 3089008c feat(rest): Support map of release id to usage as request body in addition to previous array of release id for
• df2f6dad feat(VirusScanSchedulerService): Scheduler Service for deletion of attachment from local FS
• 276650a9 feat(ObligationHelpTextforProject): Provide the different obligation help text from the Projects Screen
• ec37c480 feat(moderations): Pagination in requests tab for moderations
• 0d739556 feat(obligationlevelhelptext):Provide info text for different obligation Level
• 83282112 feat(ProjectUI): feature to add License Info to linked releases from License Clearing tab
• afdac6f5 feat(ProjectVersion): Added the project version in the search Project filter
• 4b1a1b3f feat(ProjectUI): Fixed copy of projects removes linked subprojects
• d44b63ba feat(ProjectGroupFilter):Filter the projects in Advanced Search based on Projects Group
• 4140a8ad feat(rest): Added new endpoints to update attachment info of Project, Component, Release
• 96443359 feat(rest): Added rest endpoint to update project-release-relationship information of linked releases in a project
• 756190b4 feat(ProjectUI): feature to display the source files linked with the licenses

Corrections

• ef27ad5d fix(rest): Auto-set release clearing state
• debfe70d Fix: Rest interface can not handle licenses which do not exist in the database #534
• 2d56d0b4 fix: Wrong error handling when deleting multiple components #851 nam1.nguyenphuong@toshiba.co.jp
• 9a31049d fix(script): Build failure of sw360dev.Dockerfile and compileWithDocker.sh
• 9f32b882 fix(readmeossdownload): Null pointer while downloading readme_oss
• f0aa5cbf fix(ui/rest): Issue fetching releases by external ids and null value in external id breaks the release view
• baaa9f42 fix(search): search releases while linking to project
• 00083ea8 fix(backend): Issues with boolean and timestamp field deserialization and get attachment info REST

sw360-13.3.0-M1

This tag is applied to have the migration from cloudant to ektorp in one single step. Ektorp is a Java library which provides an object oriented interface to the (REST-based) access to couchdb. It has been used in sw360 from day 1. Now we concluded to replace ektorp: it does not support paging; having our server growing larger and lager and serving more and more users, receiving results sets from a couchdb view without paging is a pain. And it did not look like it will be supported, because the ektorp project looks calm now (last commit to master in 2017). Among the available options for replacing ektorp, we choose the java-client from the open source project cloudant (version 2.19.1, see https://github.com/cloudant/java-cloudant). It supports paging and offers potentially other interesting features (caching, compatibility with MongoDB, etc.).

Migrations

For this version, no database migration is necessary.

Credits

The following github users have contributed to the source code since the last release (in alphabetical order):

smruti.sahoo@siemens.com

Please note that also many other persons usually contribute to the project with reviews, testing, documentations, conversations or presentations.

Infrastructure

• 0e22d55e feat(components-pagination): paginated view response for components
• fd95a2cf feat(cloudant): Migrating from ektorp to cloudant java client

sw360-13.2.0-M1

The reason for this tag is to have the last release before the ektorp framework to the new cloudant framework for access to the couchdb. This upcoming change will touch a large number of places in the code and thus a last release before this larger change will be merged.

As per notable feature there is the new UI in the admin area to issue the OAuth client credentials for the OAuth legacy workflow for the REST API. Another feature is the storing of all attachments (at upload) also to a configurable location in the file system. This helps anti virus software to scan these instead of requesting them from the couchdb. Note that files are stored at the configured path with user_mail/document_id folder structure to quickly track down origin of viruses and malware.

This milestone tag also chovers changes to the build infrastructure on the eclipse servers to prepare future releases.

Migrations

For this version, no database migration is necessary.

Credits

The following github users have contributed to the source code since the last release (in alphabetical order):

abdul.kapti@siemens-healthineers.com
jaideep.palit@siemens.com
kumar.ravindra@siemens.com
kouki1.hama@toshiba.co.jp
lars.geyer-blaumeiser@bosch.io
michael.c.jaeger@siemens.com
smruti.sahoo@siemens.com

Please note that other persons do contribute to the SW360 as well in the form of reporting issues, giving presentations and much more.

Features Summary

• d8021733 feat(AttachmentVirusScan): Store attachment to File System asynchronously, handle saving of large multi-part attachments. Fix test cases
• 5c77743f feat(AttachmentVirusScan):Store the attachment to local file system for virus scan.
• d97146a3 feat(REST): Added new Rest API endpoint for reading clearing request
• 50f576a2 feat(OAuthClient): Create, update, delete OAuthClient from UI
• d4017345 feat(PredefinedTags):Predefined tags per group in the Projects Tag field.
• 0c7fc59a feat(UI): added button for copying document id to clipboard

Corrections

• d19d08d0 fix(rest): Added support for pagination and retrival using multi value projectRelevance param
• 3419b4a6 fix(search): Removing support for _fti hook based lucene search for couchdb 1.x
• f783240a fix(rest): Fix status code when moderation request is created as a part of an API call
• 4f2c2121 fix(moderaion):add CommonUtils.addAll(moderators, dbcomponent.getModerators());
• 8b867c19 fix(build): Fix issue with overwriting of patchlevel variable in pom.xml
• b9a38744 fix(test): Use test databases in maven test phase
• c68b4d4a fix(OrtIntegration): Fix client to perform case insensitive search of component.
• 784fbafc fix(script): Utility script to recompute clearing state of release
• ce69b3bd bug(eclipse): Quickfix for maven flatten pom problem

Infrastructure, Docs and Refactorings

• 958a8a77 chore(tag) changing back pom.xml shapshot version tag

sw360-13.1.0-M1

This time: client libraries. This release among other things brings the client libraries taken over from the sw360antenna project and moved them into the sw360 code base. The client libraries enable Java applications to communicate with a sw360 server via REST calls. Other notable contributions include:

• Support for CouchDB 3.x
• Massive speedup of SPDX import by switching to streaming based parsing for license information for large files
• Single container setup (see Dockerfile in project root) for super easy deployment of sw360
• More UI improvement on sorting and filtering in list views
• Supporting multiple templates for the project clearing reports
• REST: Manage used attachments for license info generation and better querying of vulnerabilities

Migrations

For this version, no database migration is necessary.

Credits

The following github users have contributed to the source code since the last release (in alphabetical order):

abdul.kapti@siemens-healthineers.com
jaideep.palit@siemens.com
kumar.ravindra@siemens.com
kouki1.hama@toshiba.co.jp
lars.geyer-blaumeiser@bosch.io
michael.c.jaeger@siemens.com
smruti.sahoo@siemens.com
Stephanie.Neubauer@bosch.io

Features Summary

• 0b7818de feat(MyProjectsUI):Add additional filter to MY PROJECTS homepage based on clearing state
• 9e98dd3f feat(ChangeLog): Highlight changes between old and new revision of Document
• eef05a1b feat(ProjectUI): Sort & Filter for ClearingStatus TreeView table
• b6cd9df7 feat(Issue Template):Update issue templates for bug and feature
• fb15708c feat(ui):Rename and Re-arrange the Tabs under Projects section
• 98aa0859 feat(ProjectUI): Release Filter based on attachment availability
• 29308987 feat(clearingreport): Feature to select template for Project Clearing report
• fc024b45 feat(ReleaseUi): Add other / detected license in release
• 04139347 feat(ui-rest): Provide option in attachment usage to include/exclude concluded licenses during LicenseInfo Generation
• 1f995bfa feat(rest): Filter for get project vulnerabilities endpoint
• 1d771d30 feat(rest): Added endpoint to get changel og by document id
• 68ce3cf8 feat(ui): Display Id in summary page of project, component and release
• 5f2a4089 feat(http-support): add http support library for sw360
• 502d9087 feat(sw360Docker): Single container Docker for SW360
• 948924f0 client(test): add failsafe plugin

Corrections

• 7091c4b6 fix(spdxtools):Use toArray(new Node[0]) for shorter code and better performance
• 8b4ebc00 fix(version): Increase minor version to ensure proper version sequence
• 31909cce fix(pom): Fix indentation of profile
• eefcf17f fix(excelexport): Projects with linked releases excel export error
• 2ed2ad80 fix(LicenseInfo): Optimized loading of license info, source code download, Clearing report page
• 034f291c fix(mergeComponentRelease): Attachments not linked properly from source component/Release
• c3830559 fix(spdx): import large spdx rdf files
• b08d2f44 fix(datahandler): Modified ektorp queryView call to support CouchDB 3
• d9756e6a fix(Rest): Create/Update Release with name same as component name

Infrastructure, Docs and Refactorings

• 306c2080 chore(eclipse): Change Jenkinsfile to run release or commit count builds
• 948c7bac chore(eclipse): Build on eclipse ci for deployment of java artifacts
• ba666266 refactor(client): missing license headers
• 867372bd refactor(http): Change http mockito to same version
• ba72cb7d test(client): fix mockito dependency
• cfa8d512 refactor(pom): move version of purl to parent pom
• 31a239eb doc(client): add documentation of the sw360 data model
• cd3ac486 doc(http-support): Add site to http support
• 4670fffe refactor(client): Remove all antenna mentions
• b89e04ce refactor(client): remove antenna http support and switch to sw360
• 834c1c79 refactor(client): Refactor package name
• 7a6f295c refactor(client): Add dependencies to poms

sw360-13.0.0-M1

Tagged this release was necessary, because there are persons testing the current master and not seeing the migration script on the database required. The migration on the database came in because of changes on the obligations. After the major work on the obligations data model in the previous release, more work on the UI made a migration script necessary (number 042). Please note that per our versioning convention, the database migration script makes the tag 13.0 not 12.1.

Migrations

For existing installations, a data migration is required. Please go to the readme file in scripts/migrations to see more information:

https://github.com/eclipse/sw360/blob/master/scripts/migrations/README.md

For running the migrations scripts, you will need python and the couchdb package. Please note that you will need to change manually in the python file: the DRYRUN variable and the couchdb URL (if that is not on localhost or requires password or both).

Credits

The following github users have contributed to the source code since the last release (in reverse order of commit appearance):

smruti.sahoo@siemens.com
jaideep.palit@siemens.com
abdul.mannankapti@siemens-healthineers.com
michael.c.jaeger@siemens.com
external.Martin.Idel@bosch.io

Features Summary

• 1246c023 feat(SplitComponent): Add tooltip for releases of component with SourceCodeDownloadUrl and BinaryDownloadUrl during split feature
• 2eafe3d5 feat(rest): Accept 'downloadurl' in request body as 'sourceCodeDownloadurl' as an alternative to original value 'sourceCodeDownloadurl' for Create and update Release APIs
• ccf05247 feat(ChangeLogs): Fixed issue related to null to empty string or collection conversion
• 20be42db fix(rest): Fixed update Project API issue - unexpected changes in some fields like moderators, contributors, etc
• cf4bdcfa feat(UtilityScript): Script for couchdb 2.x to update a field(String) in project document to a new value
• ea009aed feat(Obligation): Add License Obligation from License Database based on licenses found in accepted attachments in Release and its LicenseInfo attachmentUsage in Project
• a6cf31a3 feat(projectEdit): Project creators and moderators can edit few fields in a closed project
• 2496f037 feat(ClearingReport): Added hyperlink to release document in project clearing report, Changed Font Style (Arial) and Font Size (9) for table content
• bd07d53e feat(CR-UI): Added Advaced filter for CR & fix # of components count

Corections

• c18b42b9 fix(clearingreport): Error while downloading clearing report
• 3ff60a09 fix(ExportSpreadSheet): Fixed ClassNotFoundException while export Spreadsheet
• 431e1673 fix(ClearingReport): Fixed null pointer issue for replace text in Clearing report
• 3ff60a09 fix(ExportSpreadSheet): Fixed ClassNotFoundException while export Spreadsheet
• 431e1673 fix(ClearingReport): Fixed null pointer issue for replace text in Clearing report

Infrastructure

• 71348b4f chore(deps): Upgrade dependencies (LibreOffice et al)

sw360-12.0.0-M1

This release something special because it brings a lot, really a lot of changes in the database model, more specifically it is a refactoring of the licenses and obligation objects. Following corrections:

• Risks are dropped and migrated to obligations
• Term "todo" is eliminated and we aim at consistently use "obligation"

Then there are two new dimensions of obligations, first obligation level

• Organisation obligations: obligations that apply for all projects of the sw360 instance.
• Project obligations: obligations that apply for a specific project, for example, obligations need to be applied to software which is delivered on a device without display.
• Component obligations: obligations that apply to a release to be more precise, for example IP issues coming when using a particular release.
• License obligations: obligations which come from using software under a license.

Second, the obligations have types:

• Permissions
• Restrictions
• Obligations (finally)
• Risks (for example patent litigation clauses)
• Exceptions (for example classpath exception with GPL)

So that involves a lot of changes to the data model, and resulting a lot of migrations. We apologize in advance for the 18 migrations scripts to execute. But it will be easier to have individual migration scripts for particular changes instead of having a large one. Please refer to scripts/migrations/README.md for further details. Please note that in general, all scripts have a DRYRUN variable which is set to True by default and needs to be set to False to apply actually changes to the database.

Besides, this release has also some other changes, including:

• changing download URL into two attributes: binary download URL and source code download URL
• New REST Endpoint: Search!
• if you ant to write clients using REST: Pagination for some of the major listings!

Migrations

For existing installations, a data migration is required. Please go to the readme file in scripts/migrations to see more information:

https://github.com/eclipse/sw360/blob/master/scripts/migrations/README.md

For running the migrations scripts, you will need python and the couchdb package. Please note that you will need to change manually in the python file: the DRYRUN variable and the couchdb URL (if that is not on localhost or requires password or both).

Credits

The following github users have contributed to the source code since the last release (in order of appearance):

<abdul.mannankapti@siemens.com>
github dependabot ;-)
<jaideep.palit@siemens.com>
<michael.c.jaeger@siemens.com>
<smruti.sahoo@siemens.com>
<Stephanie.Neubauer@bosch.io>

Features Summary

• 596ed7bb feat(ProjectListUI): Added clearing state filter in Project List
• 693dc596 feat(rest): New search resource endpoint and get releases for multiple projects
• a2577cf0 feat(rest/ui): Project vulnerability enpoint update & added new projectrating in UI
• c1b1e33b feat(ui-rest): Changes in Release information, change title "Download URL" to "Source Code Download URL", add new data filed "Binary Download URL", added new field in excel sheet
• 99b3f816 feat(ProjectTodo): Remove ProjectTodo and UI changes for Obligation and ProjectTodo
• 7b9b73a7 feat(projecttodo): Migration Scripts
• cb890218 feat(ProjectTodo): Renamed type to obligationType ,Changed required licenseIds to optional, Added optional ObligationLevel obligationLevel in ObligationStatusInfo
• 04020bef feat(CR-UI): Enhancement & Bug fixes
• 1d6d2b32 feat(licensemodel): Drop Risk and Risk category and merge it with Obligation
• 3ac3ba23 feat(ProjectObligation): Changes in Project Obligation Data Model, renamed linkedObligations to linkedObligationStatus in ProjectObligation struct, renamed struct ProjectObligation to struct ObligationList
• c009f2c8 feat(obligation): Rename product obligation to project obligation
• fcfec496 feat(LicenseDataModel): Merge LiceneObligation with Obligation
• c5e4e1e6 feat(ui): Allow access to merge/split of component and release based on user role configured in properties
• af625d7b feat(ProjectUI): Added 2 new fields in Project Obligation
• 5b837649 feat(Project-UI): Added new field in Advanced Search for Projets
• ff4a9af4 feat(LicenseInfoObligation): Rename Obligation in LicenseInfo.thrift to ObligationAtProject, added null check in change log for merge release
• 6c13cc93 feat(ObligationDataModel): Changes in Obligation data model, Renamed struct Obligations to struct Obligation in License.thrift, Renamed existing obligationType to obligationLevel, Created new obligationType field which has Permission,Risk,Exception,Restriction as options, Fixed adding obligation in licenses tab
• 067b731f feat(rest): Adding pagination while listing projects and listing project releases

Corections

• a2dd35de fix(lucene): fix parameter allow leading wildcard to true
• 9ac6e93e fix(ModerationRequest): Fixed Moderation Request not opening when associated attachment deleted
• 51ab6e0b fix(ProjectListUI): Fixed sorting of project clearing state in Project List page
• 0d525531 fix(Report): Fixed Clearing report to show project, component, organisation obligation
• 92d00ab1 fix(Obligation): Expand/Collapse all columns including comment using single leftmost toggle button for a row, Remove truncate for Obligation Text, Added expand collapse column feature for comments
• 5a1422e6 fix(obligations):cover null pointer case if file with obligations is missing
• 51860a0f fix(moderation): Project moderation fix
• 2f9a6879 fix(UserSearch): Fixed search user functionality

Infrastructure

• d04911b8 chore(deps-dev): Bump junit in /backend/src/src-attachments
• 4a3e8904 chore(deps-dev): Bump junit in /backend/src/src-licenseinfo
• 4f3c3ea8 chore(deps): Bump junit from 4.12 to 4.13.1
• ca348628 typo(rest): fix patchComponent in releasecontroller is patchRelease

sw360-11.0.0-M1

The changes for this release incorporate a larger jump from the previous release, because it changes the sw360 infrastructure to the following versions:

• From Couchdb 1.X to Couchdb 2.X and Couchdb Lucene 2.1
• From Java 8 to Java 11 - tested with the OpenJDK
• From Liferay Community Edition 7.2.1 to 7.3.3
• From thrift 0.11 to 0.13

Accordingly, also the vagrant project has changed: the current latest master of sw360/sw360vagrant builds with Java-11-based versions of sw360 (onwards from commit 0269392 at https://github.com/sw360/sw360vagrant).

Apart from the changes to the infrastructure, a number of nice new features are introduced, including:

• A Japanese language file for SW360
• Multiple values for external ids for the same keys
• A completely new health check service for better monitoring of an sw360 installation
• Improvements on project handling

For corrections and further changes on the infrastructure, please refer to the listed commits below.

Migrations

For existing installations, a data migration is required. Please go to the readme file in scripts/migrations to see more information:

https://github.com/eclipse/sw360/blob/master/scripts/migrations/README.md

For running the migrations scripts, you will need python and the couchdb package.

Credits

The following users have contributed to the source code since the last release (in order of appearance):

albert.he@sap.com
smruti.sahoo@siemens.com
michael.c.jaeger@siemens.com
kouki1.hama@toshiba.co.jp
oliver.heger@bosch.io
Stephanie.Neubauer@bosch.io
jaideep.palit@siemens.com
kouki1.hama@toshiba.co.jp
nam1.nguyenphuong@toshiba.co.jp
abdul.mannankapti@siemens.com

And many thanks to all the other contributions in presentation, issues, discussions!

Features

• 60f82182 feat(ProjectReleaseRelation): Added new Field comment, createdOn, createdBy in ProjectReleaseRelation
• c4342f38 feat(ui): Added link to project button from project detail view
• 137b46a7 feat(language): add Japanese properties
• 4d4184d3 feat(ProjectUI):Added Expand/Collapse All and Search in AttachmentUsageTable
• 1b4f2362 feat(project-report): Layout and content update in project report
• 1ee05b59 feat(ComponentUI): Added new filters in Advance search
• 30ce4db1 feat(ExternalIds): Change file permission
• 2442e1f2 feat(ExternalIds): Change file permission and fix typo of special character
• 753d3889 feat(ExternalIds): Add comments to Component, Release and Project rest APIs
• 0049dd3b feat(ExternalIds): Add byExternalIds views migration scripts, and upgrade to new version 11.0.0-SNAPSHOT
• bb2f2950 feat(ExternalIds): 1. Handle EscapeXml for external id value, 2. Fix "Upon update of existing project or Component or Release without any change in External IDs"
• 6ec67338 feat(REST): Whitelisting field in REST API response
• 5ee02f75 feat(EditProjectUI): Release table in edit project page should be sorted and omit vendor name
• c0bf7132 feat(CRView): Clearing Request Comments enhancements

Corrections

• 73894c08 fix(resource-server): Resolve logback conflict
• 40f4a3aa fix(ui): Prevent resubmission of form for Project, Component, Vendor, Moderation inorder to prevent loss of data.
• 6b484677 fix(ui): Fixed download license disclosure error upon selection of corrupted attachment
• b8446dc1 fix(license): Fixed the NullPointerException and addressed code duplication
• a92d2677 fix(byExternalIdView): Fixed the byExternalIds view not working if the value is number
• f62a685f fix(Language_ja): change datatables.lang's URL
• d65be244 fix(ImportSPDXBOM): Set Default value[Default_Category] to categories field of Component if found null or empty
• fda56f18 Fix: 'Download license archive' button in Admin>'import & Export' page is not working #906
• 56eb7074 Fix: import spdx information #927 #915 and change quotes
• 538b1aa7 fix(license): Fixed the license loading issue

Infrastructure

• c0685187 chore(script): Added support to uninstall the current thrift version
• 14b1a4af chore(deps): Bump jackson-databind in /backend/src/src-fossology
• 4f7234cc chore(java): Support for Liferay 7.3.3 GA4
• d4c6983c chore(java): Fixed Deployment issues
• 5d484ee1 chore(java): Updated Spring version
• d247a0ff chore(java): updating test deps for java 11
• 3a5958b6 chore(java): migrating to openjdk java version 11
• c5f82e0e chore(logging): Added a library containing the log4j2 classes
• aa6d5ae0 chore(logging): Fixed test failures caused by NoClassDefFound errors
• fe659050 chore(logging): Updated OSGi package imports
• 68b91bcc chore(logging): More tweaks of logging dependencies
• e4060da6 chore(logging): Switched logging configuration to log4j2 format
• ebc8f852 chore(logging): Upgraded from log4j 1 to log4j 2
• 7866a852 chore(logging): Removed unused dependency to logback
• 465fc5fa chore(couchdb): Support CouchDb Lucene 2.1.0 with CouchDb 2.1.2 and backward compatibility
• bbabafd7 chore(Portlet): Rename Moderation portlet to Requests
• f512b867 chore(changelog): fixing formatting
• a6d07505 chore(release): changing pom file for 10.0.0-SNAPSHOT

sw360-10.0.0-M1

Again, another data model change, new major version. Please see the script 018_remove_unwanted_field_from_clearing_request.py in the directory scripts/migrations to change the data model accordingly. The script is necessary for existing clearing request records; not executing the script will lead to malfunction of the sw360 application.

The update improves also runtime stability, because the escaping when displaying quotes has been improved: previously, special characters such as quotes have compromised the rendering of the page. Now, the content is rendered in a correct way.

Further improvements include:

• The ability to split releases from a component and assign this release to another component. This is the opposite case of merging components. On one hand it can undo mistaken component merges. On the other hand, user input, creating a release at the wrong component, can be corrected now.
• a new REST endpoint to request all details from a larger list in one REST call.
• a new REST endpoint to delete attachments from the REST API

More features include the ability to search for IDs when linking releases to projects or enhancements to the clearing request structures.

Features

• ef6170e1 feat(attachments): Evaluate check status before deletion.
• ea6d31ad feat(CRUI): Modifications in Clearing Request table in moderation tab.
• 90dbdb52 feat(attachments): Updated REST documentation.
• 220f991f feat(attachments): ComponentController can now delete attachments.
• 5f504aef feat(attachments): ReleaseController now supports deleting attachments.
• 2930cea5 feat(attachments): Added function to prepare deleting attachments.
• 8adb9147 feat(attachments): Implemented ThriftAttachmentServiceProvider.
• daa3b3fb feat(attachments): Introduced ThriftServiceProvider interface.
• 5783cc3b feat(rest): Whitelisting project 'state' and 'phaseOutSince' field.
• fc0c7e43 feat(ui/search): Search using rel. id and added link to the release in the search result.
• 2ec0e6d9 feat(REST): Added new allDetails Parameter to List Projects and List Releases API to fetch records with all details.
• c0bf7132 feat(CRView): Clearing Request Comments enhancements.
• 8528ecfe feat(SplitComponentUI): Move Component data like releases and attachments from Source Component to Target Component.

Corrections

• 9c01170b fix(escapeXML): Added missing escapeXML, to prevent js script execution and rendering break due to single or double quotes, Added missing escapeXml to merge-split Component, merge releases, license details view, list-details-edit view of project, component and release.
• 887533ba fix(ProjectModeration): Fixed isWriteActionAllowedOnProject check for project update, Fixed incorrect value for Visibility in Edit Project view which has existing moderation request.

sw360-9.0.0-M1

This release brings new features which also change the data model. Therefore, a major version step is justified. Major new features are:

• Support for custom field layout using the referring Liferay mechanism, fully transparent with the REST API using additional data fields
• Changelog for changed data for projects, components and releases
• Reordered sections in detail view
• A completely new view Clearing Status offering tree and list view

Besides bug fixes and features correct bugs so far. In order to fix a bug with the REST API, note that a migration script should be executed. It corrects a missing value for the status of the release which is also now automatically set when creating releases using the REST API (and not only in the Web user interface).

Features

• a2e65103 feat(PreferenceUI): Enabled Email notification for CR
• 49311164 feat(ProjectUI): Custom Field for Additional data in Project
• 1d3423cb feat(ReadmeOss): Filter linked project from ReadmeOss based on selection
• 03000401 feat(ProjectUI): Unified view of Linked Project and Releases, Clearing status, Linked Release Hierarchy. View includes tree view and list view
• 89714248 feat: Support custom fields in additionalData group in Component and Release page
• 04b57fd1 feat(ChangeLogs): Revision history of Document

Corrections

• fb09ccee fix(MigrationScript): Update releases with empty clearingState to default value - NEW_CLEARING
• 7bbd4235 fix(ClearingStatus): Tree View Release name getting truncated, Sort for Project mainline state and Clearing State in List View fixed , added search filter
• 4c7b0e72 fix(ClearingStatusView): Fixed uneven button height, console error related to createVulnerabilityTable, takes lot of time to load Clearing status list view for large dataset.
• d1c3731f fix(ChangelogBasicInfoUI): Applied generic style and reordered the metadatas for Basic Info.
• 78bff1ba fix(UI): Clearing Request and Obligations fixes
• 79f5c9d4 fix(mergeComponent): Prevent multiple releases with same name and version for a component, which may occur during merge component
• a4b44107 fix: Resolve conflict
• cd4cba10 fix(Changelog): Fixed missing fields like componentType in Changelog history
• 3ee65c9b fix(REST): Added default value(NEW_CLEARING) for Clearing status while create and update Release
• 67875856 fix(spreadsheet-export): Project spreadsheet export returns blank spreadsheet
• b91b9e2d fix(ui): Release overview from component details
• cd29922a fix(UI): Clearing Request bug fix and improvements

Infrastructure

• 79850290 chore(deps): Bump spring-security-core in /frontend/sw360-portlet
• e1aabab1 chore(deps-dev): Bump dom4j in /backend/src/src-licenseinfo