v3.9.26

• Reports: Add includeCopyrightList to JSON attribution report request. This will ensure that all copyrights are included in the JSON attribution report once the FOSSA API starts including them. All other formats of attribution reports will receive all copyrights without needing to add this query param. #1450
• Resolves an issue where git projects cloned with an url including a username were unable to be found when running fossa test. #1451

v3.9.25

• Update jar-callgraph version #1447

v3.9.24

• Container Scanning: Attempt to find JAR files in container images and report them as dependencies (#1442, #1444).
  • To enable on-premise, FOSSA must be updated to the latest configuration.

v3.9.23

• Reachability: For organizations that don't have reachability turned on suppress messages about it. (#1440)

v3.9.22

• Fixes release group flags for fossa analyze and fossa container analyze (#1439)

v3.9.21

• Add support for analyzing SBOM files (#1435)
• License Scanning: Add the Llama-3-community license (No PR)
• Yarn: Don't fail analysis if a dependency cannot be found. (#1436)

v3.9.20

• Fixes file matches for license scans (#1434).

v3.9.19

v3.9.19

• Release a Mac arm64 binary. (#1426)
• Updated the license to CPAL, an OSI-approved license similar to MPL (#1431).

v3.9.18

Resolves an issue where vendored-dependencies were rescanned locally, but not in the FOSSA service, when forceRescans was set to true (#1423).

v3.9.17

Poetry: Adds partial support for dependency groups. (#1420).