v2.19.4

What's Changed

Improvements 🌱

• Add frogbot-config.yml content to log by @omerzi in #594

Bug Fixes 🛠

• Fix - scan SCA recursive only when workingDirs not provided by @attiasas in jfrog/jfrog-cli-core#1057

Full Changelog: v2...v2.19.4

v2.19.3

What's Changed

Improvements 🌱

• Incorporate maven-dep-tree plugin by @omerzi in #576
• Applying auto-install modifications on a new 'fix' branch + restricting Frogbot's auto-install feature for Yarn by @eranturgeman in #565
• Add informative errors for the unmarshaling processes in the MavenPackageHandler by @omerzi in #588
• Deprecate auto-install by @eranturgeman in #581

Bug Fixes 🛠

• Fix false positive golangci-linter typecheck error by @eranturgeman in #589

Full Changelog: v2...v2.19.3

v2.19.2

What's Changed

Improvements 🌱

• Scan repository - show license violation on Github security issues by @attiasas in #575
• Refine gradle projects indicators by @omerzi in jfrog/jfrog-cli-core#1027

Bug Fixes 🛠

• Fix CheckConnection race condition by @omerzi in #577
• Fix frogbot-config.yml unread in the scan repository commands by @omerzi in #578

Full Changelog: v2...v2.19.2

v2.19.1

Improvements 🌱

• Add .git to audit default exclusions by @yahavi in jfrog/jfrog-cli-core#1022

Bug Fixes 🛠

• Xray SCA scan - always show results with location on Sarif output by @attiasas in jfrog/jfrog-cli-core#1021
• Audit - ignore config file when needed + add releaserepo for maven by @omerzi in jfrog/jfrog-cli-core#1024

Full Changelog: v2...v2.19.1

v2.19.0

What's Changed

Exciting New Features 🎉

• Audit SCA recursive scan by @attiasas in #555

Improvements 🌱

• Blocking NPM auto-install in frogbot + Passing forward install command args by @eranturgeman in #561
• Improve banner and content options by @attiasas in #560

Bug Fixes 🛠

• NPM scan repository pushes node_modules into PR fix by @eranturgeman in #551
• Avoid broken linked images at scan result by @attiasas in #567

New Contributors

• @Parsifal-M made their first contribution in #566

Full Changelog: v2...v2.19.0

v2.18.0

What's Changed

Exciting New Features 🎉

• New variable for adding pull request comment title by @omerzi in #556.
• New variable for skipping extra messages by @omerzi in #549

Bug Fixes 🛠

• Nuget multi-project support added + fixing assets files push bug by @eranturgeman in #525
• PR Scanning - Prevent Frogbot from failing when comment removal fails by @omerzi in #547

Full Changelog: v2...v2.18.0

v2.17.1

What's Changed

Bug Fixes 🛠

• Add licenses to aggregateScanResults by @omerzi in #543
• Yarn V1 - consider filtering yarn list via environment variable by @omerzi in jfrog/build-info-go#205

Full Changelog: v2...v2.17.1

v2.17.0

What's Changed

Exciting New Features 🎉

• Avoid the deletion of existing PR comments by @attiasas in #537

Bug Fixes 🛠

• Bug fix in Gradle dependency regexp creation by @eranturgeman in #532

Full Changelog: v2...v2.17.0

v2.16.0

What's Changed

Exciting New Features 🎉

• Gradle support for scan repository by @eranturgeman in #478

Improvements 🌱

• Trim Git API endpoint slash suffix if exists by @sverdlov93 in #521
• Aggregate Fixes per branch by @EyalDelarea in #522

Bug Fixes 🛠

• Add error on usage when no repositories provided by @attiasas in #512
• Remove research details section if empty by @attiasas in #518
• Fix custom templates misplacement by @EyalDelarea in #526
• Fix advance scans markdown description by @attiasas in #528

Other Changes 📚

• Fix maven gav reader output issue by @sverdlov93 in #517

Full Changelog: v2...v2.16.0

v2.15.1

What's Changed

Bug Fixes 🛠

• Fix Multi Repository Scanning by @EyalDelarea in #510

Full Changelog: v2...v2.15.1