Skip to content

Releases: MaibornWolff/SecObserve

1.27.0

30 Jan 17:56
cf9c63c
Compare
Choose a tag to compare

Features

  • feat: show only relevant branch names and purl types as filters by @StefanFl in #2460
  • feat: JSON schema for license policy exports by @StefanFl in #2465
  • feat: aliases for vulnerability id by @StefanFl in #2497
  • feat: bulk delete functionality for own assessments by @dervoeti in #2487
  • feat: basic service to scan vulnerabilities from OSV [experimental] by @StefanFl in #2483

Fixes

  • fix: license policies without parents cannot be edited by @StefanFl in #2466
  • fix: problems with paging in expand in license component overview by @StefanFl in #2467
  • fix: handle OIDC groups passed as string by @dervoeti in #2486
  • fix: optimize extracting dependencies from CycloneDX by @StefanFl in #2508
  • fix: order license components by component_name_version_type by @StefanFl in #2512
  • fix: make rendering of dependencies more robust by @StefanFl in #2513

Chores

Dependencies

  • fix(deps): update dependency django to v5.1.5 by @renovate in #2456
  • chore(deps): update traefik docker tag to v3.3.2 by @renovate in #2457
  • fix(deps): update dependency django-stubs to v5.1.2 by @renovate in #2458
  • chore(deps): update keycloak/keycloak docker tag to v26.1.0 by @renovate in #2459
  • chore(deps): update docker/build-push-action action to v6.12.0 by @renovate in #2461
  • fix(deps): update dependency psycopg to v3.2.4 by @renovate in #2463
  • chore(deps): update dependency @types/node to v22.10.7 by @renovate in #2464
  • chore(deps): update dependency mkdocs-material to v9.5.50 by @renovate in #2468
  • fix(deps): update dependency semver to v3.0.3 by @renovate in #2469
  • chore(deps): update dependency vite to v6.0.9 by @renovate in #2471
  • fix(deps): update react-admin monorepo to v5.5.0 by @renovate in #2473
  • chore(deps): update to react 19 by @StefanFl in #2474
  • chore(deps): update json-viewer to 4.0.1 and downgrade react to 18.3.1 by @StefanFl in #2475
  • chore(deps): update typescript-eslint monorepo to v8.21.0 by @renovate in #2476
  • chore(deps): update dependency vite to v6.0.11 by @renovate in #2477
  • fix(deps): update dependency tss-react to v4.9.15 by @renovate in #2479
  • fix(deps): update material-ui monorepo to v6.4.1 by @renovate in #2480
  • chore(deps): update github/codeql-action action to v3.28.2 by @renovate in #2481
  • chore(deps): update mysql docker tag to v8.4.4 by @renovate in #2482
  • chore(deps): update node.js to v22.13.1 by @renovate in #2485
  • chore(deps): update github/codeql-action action to v3.28.3 by @renovate in #2488
  • chore(deps): update node.js to e2b39f7 by @renovate in #2489
  • chore(deps): update dependency @types/node to v22.10.8 by @renovate in #2490
  • chore(deps): update dependency @types/node to v22.10.9 by @renovate in #2491
  • chore(deps): update github/codeql-action action to v3.28.4 by @renovate in #2495
  • chore(deps): update dependency @types/node to v22.10.10 by @renovate in #2494
  • chore(deps): update mcr.microsoft.com/playwright docker tag to v1.50.0 by @renovate in #2493
  • chore(deps): remove unused pre-commit dependency by @StefanFl in #2499
  • chore(deps): update docker/build-push-action action to v6.13.0 by @renovate in #2498
  • fix(deps): update dependency semver to v3.0.4 by @renovate in #2500
  • fix(deps): update react-admin monorepo to v5.5.2 by @renovate in #2501
  • chore(deps): update python:3.12.8-alpine docker digest to ba13ef9 by @renovate in #2502
  • chore(deps): update github/codeql-action action to v3.28.5 by @renovate in #2503
  • chore(deps): update eslint monorepo to v9.19.0 by @renovate in #2504
  • chore(deps): update actions/setup-node action to v4.2.0 by @renovate in #2505
  • chore(deps): update typescript-eslint monorepo to v8.22.0 by @renovate in #2507
  • chore(deps): update github/codeql-action action to v3.28.6 by @renovate in #2509
  • chore(deps): update dependency @types/node to v22.12.0 by @renovate in #2510
  • chore(deps): update actions/setup-python action to v5.4.0 by @renovate in #2511
  • chore(deps): update dependency @trivago/prettier-plugin-sort-imports to v5.2.2 by @renovate in #2514
  • fix(deps): update dependency pylint to v3.3.4 by @renovate in #2515
  • fix(deps): update material-ui monorepo to v6.4.2 by @renovate in #2519
  • chore(deps): update github/codeql-action action to v3.28.8 by @renovate in #2517
  • fix(deps): update dependency flake8-isort to v6.1.2 by @renovate in #2518
  • fix(deps): update dependency black to v25 by @renovate in #2516
  • chore(deps): lock file maintenance by @renovate in #2470

Full Changelog: v1.26.0...v1.27.0

1.26.0

14 Jan 09:23
bc50a8a
Compare
Choose a tag to compare

Breaking changes

  • The attribute unknown_license in License Components and License Policies has been renamed to non_spdx_license. This was necessary to avoid confusion with the License Policy evaluation result Unknown.
  • Additionally the attributes name, version, name_version, dependencies, purl, purl_type and cpe in License Components have been renamed to component_name, component_version, component_name_version, component_dependencies, component_purl, component_purl_type and component_cpe respectively. This brings it more in line with the component information in Observations.

Noteable change

  • The parser does not need to specified anymore when importing observations from files via the API or the UI. The parser is detected automatically by the content of the imported file. If the parser is still in the attributes of the API call, it will be ignored.

Features

  • feat: filters for list of vulnerability checks by @StefanFl in #2428
  • feat: check license expression in license policy items by @StefanFl in #2431
  • feat: evaluate more complex license expressions by @StefanFl in #2432
  • feat: automatic selection of parser by file content by @StefanFl in #2440
  • feat: improvements for import and upload dialogs by @StefanFl in #2443

Fixes

  • fix: export license components throws server error by @StefanFl in #2421

Chores

Dependencies

  • chore(deps): update node.js to fce322c by @renovate in #2418
  • chore(deps): update docker/build-push-action action to v6.11.0 by @renovate in #2419
  • chore(deps): update docker/setup-qemu-action action to v3.3.0 by @renovate in #2420
  • chore(deps): update nginx:stable-alpine-slim docker digest to 8a86ded by @renovate in #2422
  • chore(deps): update node.js to 784a600 by @renovate in #2423
  • chore(deps): update python:3.12.8-alpine docker digest to 8d48752 by @renovate in #2424
  • chore(deps): update dependency typescript to v5.7.3 by @renovate in #2425
  • chore(deps): update nginx:stable-alpine-slim docker digest to 1d541dc by @renovate in #2426
  • chore(deps): update node.js to f2dc6ee by @renovate in #2427
  • chore(deps): update python:3.12.8-alpine docker digest to 54bec49 by @renovate in #2429
  • chore(deps): update dependency @eslint/compat to v1.2.5 by @renovate in #2433
  • fix(deps): update react-admin monorepo to v5.4.4 by @renovate in #2434
  • chore(deps): update actions/upload-artifact action to v4.6.0 by @renovate in #2435
  • chore(deps): update github/codeql-action action to v3.28.1 by @renovate in #2436
  • chore(deps): update eslint monorepo to v9.18.0 by @renovate in #2437
  • chore(deps): update stefanzweifel/git-auto-commit-action digest to e348103 by @renovate in #2438
  • chore(deps): update dependency poetry to v2.0.1 by @renovate in #2439
  • chore(deps): update dependency eslint-plugin-react to v7.37.4 by @renovate in #2442
  • chore(deps): update dependency @types/node to v22.10.6 by @renovate in #2447
  • chore(deps): update keycloak/keycloak docker tag to v26.0.8 by @renovate in #2448
  • fix(deps): update dependency license-expression to v30.4.1 by @renovate in #2449
  • chore(deps): update typescript-eslint monorepo to v8.20.0 by @renovate in #2450
  • fix(deps): update dependency django-environ to v0.12.0 by @renovate in #2451
  • chore(deps): lock file maintenance by @renovate in #2441

Full Changelog: v1.25.0...v1.26.0

1.25.0

08 Jan 06:48
986e6a7
Compare
Choose a tag to compare

Features

  • feat: users can view license policies and license groups for products they have access to by @StefanFl in #2380
  • feat: cvss4 by @StefanFl in #2391

Chores

Dependencies

  • chore(config): migrate renovate config by @renovate in #2378
  • chore(deps): update dependency vite to v6.0.6 by @renovate in #2379
  • fix(deps): update dependency coverage to v7.6.10 by @renovate in #2382
  • fix(deps): update dependency inflect to v7.5.0 by @renovate in #2386
  • chore(deps): update typescript-eslint monorepo to v8.19.0 by @renovate in #2389
  • fix(deps): update dependency mypy to v1.14.1 by @renovate in #2388
  • chore(deps): update dependency yaml to v2.7.0 by @renovate in #2390
  • chore(deps): update dependency @types/node to v22.10.3 by @renovate in #2393
  • fix(deps): update dependency react-chartjs-2 to v5.3.0 by @renovate in #2395
  • chore(deps): update dependency @trivago/prettier-plugin-sort-imports to v5.2.1 by @renovate in #2396
  • chore(deps): update python and node by @StefanFl in #2397
  • chore(deps): update dependency vite to v6.0.7 by @renovate in #2399
  • chore(deps): update dependency @types/node to v22.10.5 by @renovate in #2398
  • chore(deps): update dependency poetry to v2 by @renovate in #2400
  • chore(deps): update maibornwolff/secobserve_actions_templates digest to a8344da by @renovate in #2402
  • chore(deps): update nginx:stable-alpine-slim docker digest to 56ff063 by @renovate in #2403
  • chore(deps): update typescript-eslint monorepo to v8.19.1 by @renovate in #2404
  • fix(deps): update dependency markdown-to-jsx to v7.7.3 by @renovate in #2405
  • chore(deps): update traefik docker tag to v3.3.0 by @renovate in #2406
  • chore(deps): update node.js to 4a5468a by @renovate in #2407
  • chore(deps): update nginx:stable-alpine-slim docker digest to f996b47 by @renovate in #2408
  • chore(deps): update python:3.12.8-alpine docker digest to 03a1c26 by @renovate in #2409
  • chore(deps): update node.js to b09589d by @renovate in #2410
  • chore(deps): lock file maintenance by @renovate in #2387
  • chore(deps): update python:3.12.8-alpine docker digest to c157bce by @renovate in #2413
  • chore(deps): update traefik docker tag to v3.3.1 by @renovate in #2414
  • chore(deps): update node.js to v22.13.0 by @renovate in #2415

Full Changelog: v1.24.0...v1.25.0

1.24.0

24 Dec 10:28
dfbecda
Compare
Choose a tag to compare

Features

Fixes

  • fix: show zero observations if no licenses by @StefanFl in #2347
  • fix: observations / license components with invalid purls can't be shown by @StefanFl in #2368

Chores

Dependencies

  • chore(deps): update github/codeql-action action to v3.27.9 by @renovate in #2343
  • chore(deps): update eslint monorepo to v9.17.0 by @renovate in #2344
  • fix(deps): update dependency jsonpickle to v4.0.1 by @renovate in #2346
  • fix(deps): update dependency djangorestframework-stubs to v3.15.2 by @renovate in #2345
  • chore(deps): update dependency @types/react to v18.3.17 by @renovate in #2350
  • chore(deps): update dependency mkdocs-material to v9.5.49 by @renovate in #2351
  • chore(deps): update docker/setup-buildx-action action to v3.8.0 by @renovate in #2352
  • chore(deps): update typescript-eslint monorepo to v8.18.1 by @renovate in #2353
  • chore(deps): update traefik docker tag to v3.2.3 by @renovate in #2354
  • fix(deps): update font awesome to v6.7.2 by @renovate in #2355
  • chore(deps): update actions/upload-artifact action to v4.5.0 by @renovate in #2357
  • fix(deps): update dependency markdown-to-jsx to v7.7.2 by @renovate in #2358
  • fix(deps): update react-admin monorepo to v5.4.3 by @renovate in #2360
  • chore(deps): update dependency globals to v15.14.0 by @renovate in #2359
  • chore(deps): update dependency @types/react to v18.3.18 by @renovate in #2363
  • chore(deps): update github/codeql-action action to v3.28.0 by @renovate in #2364
  • fix(deps): update dependency mypy to v1.14.0 by @renovate in #2365
  • chore(deps): update dependency vite to v6 by @renovate in #2272
  • chore(deps): lock file maintenance by @renovate in #2348
  • chore(deps): update typescript-eslint monorepo to v8.18.2 by @renovate in #2370
  • chore(deps): update maibornwolff/secobserve_actions_templates digest to e2d75f0 by @renovate in #2369
  • chore(deps): update dependency eslint-plugin-react to v7.37.3 by @renovate in #2371
  • fix(deps): update dependency pylint to v3.3.3 by @renovate in #2372

Full Changelog: v1.23.0...v1.24.0

1.23.0

12 Dec 10:53
a8dcf4a
Compare
Choose a tag to compare

Features

  • feat: show observation on side of observation log by @StefanFl in #2291
  • feat: allow lists for CORS_ALLOWED_ORIGINS and ALLOWED_HOSTS by @StefanFl in #2313
  • feat: bulk reviews and separate reviews listing by @dervoeti in #2280
  • feat: top level observation review list by @StefanFl in #2337

Fixes

  • fix: release to be sca scanned by @StefanFl in #2286
  • fix: prev/next button for license component show coming from overview list by @StefanFl in #2289
  • fix: do not change risk acceptance date inadvertently by @StefanFl in #2302

Chores

Dependencies

  • chore(deps): update eslint monorepo to v9.16.0 by @renovate in #2287
  • fix(deps): update dependency drf-spectacular to v0.28.0 by @renovate in #2288
  • chore(deps): update dependency mkdocs-material to v9.5.47 by @renovate in #2290
  • fix(deps): update dependency drf-spectacular-sidecar to v2024.12.1 by @renovate in #2292
  • fix(deps): update dependency chart.js to v4.4.7 by @renovate in #2293
  • fix(deps): update dependency pylint to v3.3.2 by @renovate in #2294
  • chore(deps): update dependency globals to v15.13.0 by @renovate in #2295
  • fix(deps): update react-admin monorepo to v5.4.1 by @renovate in #2297
  • chore(deps): update typescript-eslint monorepo to v8.17.0 by @renovate in #2298
  • chore(deps): update nginx:stable-alpine-slim docker digest to c13d84b by @renovate in #2299
  • chore(deps): update keycloak/keycloak docker tag to v26.0.7 by @renovate in #2300
  • chore(deps): update github/codeql-action action to v3.27.6 by @renovate in #2301
  • chore(deps): update node.js to v22.12.0 by @renovate in #2303
  • chore(deps): update dependency prettier to v3.4.2 by @renovate in #2304
  • fix(deps): update dependency axios to v1.7.9 by @renovate in #2305
  • fix(deps): update dependency markdown-to-jsx to v7.7.1 by @renovate in #2306
  • chore(deps): update node.js to 96cc832 by @renovate in #2308
  • fix(deps): update dependency django to v5.1.4 by @renovate in #2309
  • chore(deps): update dependency @types/react to v18.3.13 by @renovate in #2311
  • chore(deps): update dependency @eslint/compat to v1.2.4 by @renovate in #2312
  • chore(deps): update actions/cache action to v4.2.0 by @renovate in #2316
  • chore(deps): update dependency @types/prop-types to v15.7.14 by @renovate in #2318
  • chore(deps): update react monorepo by @renovate in #2319
  • fix(deps): update dependency coverage to v7.6.9 by @renovate in #2321
  • chore(deps): update dependency poetry to v1.8.5 by @renovate in #2322
  • chore(deps): update dependency mkdocs-material to v9.5.48 by @renovate in #2323
  • fix(deps): update dependency tss-react to v4.9.14 by @renovate in #2324
  • fix(deps): update emotion monorepo to v11.14.0 by @renovate in #2325
  • chore(deps): update dependency @trivago/prettier-plugin-sort-imports to v5 by @renovate in #2315
  • fix(deps): update react-admin monorepo to v5.4.2 by @renovate in #2326
  • chore(deps): update typescript-eslint monorepo to v8.18.0 by @renovate in #2327
  • chore(deps): update dependency @types/react-dom to v18.3.3 by @renovate in #2328
  • chore(deps): update dependency @playwright/test to v1.49.1 by @renovate in #2329
  • chore(deps): update mcr.microsoft.com/playwright docker tag to v1.49.1 by @renovate in #2330
  • chore(deps): update github/codeql-action action to v3.27.7 by @renovate in #2332
  • chore(deps): update react monorepo by @renovate in #2334
  • chore(deps): update traefik docker tag to v3.2.2 by @renovate in #2335
  • chore(deps): update dependency @types/node to v22.10.2 by @renovate in #2336
  • chore(deps): lock file maintenance by @renovate in #2296

Full Changelog: v1.22.5...v1.23.0

1.22.5

28 Nov 20:42
2bcb821
Compare
Choose a tag to compare

Features

Fixes

  • fix: migration didn't update all license components by @StefanFl in #2282

Chores

Dependencies

  • chore(deps): update dependency typescript to v5.7.2 by @renovate in #2254
  • chore(deps): update maibornwolff/secobserve_actions_templates digest to 5476f0d by @renovate in #2253
  • chore(deps): update postgres docker tag to v15.10 by @renovate in #2256
  • chore(deps): update dependency @types/node to v22.9.3 by @renovate in #2257
  • fix(deps): update dependency coverage to v7.6.8 by @renovate in #2258
  • chore(deps): update dependency mkdocs-material to v9.5.46 by @renovate in #2263
  • chore(deps): lock file maintenance by @renovate in #2261
  • chore(deps): update typescript-eslint monorepo to v8.16.0 by @renovate in #2225
  • chore(deps): update dependency @types/node to v22.10.0 by @renovate in #2266
  • fix(deps): update dependency axios to v1.7.8 by @renovate in #2267
  • chore(deps): update dependency prettier to v3.4.0 by @renovate in #2268
  • chore(deps): update dependency prettier to v3.4.1 by @renovate in #2274
  • chore(deps): update dependency @vitejs/plugin-react to v4.3.4 by @renovate in #2270
  • chore(deps): update docker/build-push-action action to v6.10.0 by @renovate in #2271
  • fix(deps): update dependency mermaid to v11.4.1 by @renovate in #2276
  • fix(deps): update dependency pyjwt to v2.10.1 by @renovate in #2279
  • chore(deps): update dependency @types/node to v22.10.1 by @renovate in #2278

Full Changelog: v1.22.4...v1.22.5

1.22.4

22 Nov 13:18
fcbe63d
Compare
Choose a tag to compare

Features

  • feat: import license groups from ScanCode LicenseDB data by @StefanFl in #2244

Fixes

  • fix: update access and refresh token if necessary by @StefanFl in #2243
  • fix: don't delete license groups which are in license policies by @StefanFl in #2245
  • fix: avoid license duplicates for a component by @StefanFl in #2247
  • fix: reintroduce filtering license policies by license and license group by @StefanFl in #2248

Chores

Dependencies

  • fix(deps): update dependency markdown-to-jsx to v7.7.0 by @renovate in #2235
  • chore(deps): update dependency mkdocs-material to v9.5.45 by @renovate in #2236
  • fix(deps): update emotion monorepo to v11.13.5 by @renovate in #2237
  • fix(deps): update font awesome to v6.7.1 by @renovate in #2239
  • chore(deps): update maibornwolff/secobserve_actions_templates digest to d15c240 by @renovate in #2213
  • chore(deps): update github/codeql-action action to v3.27.5 by @renovate in #2238
  • chore(deps): update traefik docker tag to v3.2.1 by @renovate in #2241
  • fix(deps): update react-admin monorepo to v5.4.0 by @renovate in #2242
  • chore(deps): update keycloak/keycloak docker tag to v26.0.6 by @renovate in #2246

Full Changelog: v1.22.3...v1.22.4

1.22.3

19 Nov 20:46
38b4bed
Compare
Choose a tag to compare

Features

Fixes

  • fix: use both license ids and license names from SBOM by @StefanFl in #2231

Chores

Dependencies

  • fix(deps): update dependency pyjwt to v2.10.0 by @renovate in #2214
  • chore(deps): update eslint monorepo to v9.15.0 by @renovate in #2211
  • fix(deps): update font awesome to v6.7.0 by @renovate in #2227
  • chore(deps): update mcr.microsoft.com/playwright docker tag to v1.49.0 by @renovate in #2226
  • chore(deps): update dependency @types/node to v22.9.1 by @renovate in #2229
  • chore(deps): lock file maintenance by @renovate in #2183

Full Changelog: v1.22.2...v1.22.3

1.22.2

17 Nov 19:16
6366445
Compare
Choose a tag to compare

Features

Fixes

Chores

Dependencies

  • chore(deps): update dependency vite to v5.4.11 by @renovate in #2184
  • chore(deps): update typescript-eslint monorepo to v8.14.0 by @renovate in #2185
  • fix(deps): update dependency jsonpickle to v4 by @renovate in #2186
  • chore(deps): update nginx:stable-alpine-slim docker digest to 68ae142 by @renovate in #2187
  • chore(deps): update python:3.12.7-alpine docker digest to 93bb17f by @renovate in #2188
  • fix(deps): update dependency markdown-to-jsx to v7.6.0 by @renovate in #2189
  • chore(deps): update node.js to dc8ba2f by @renovate in #2191
  • chore(deps): update python:3.12.7-alpine docker digest to edd1d85 by @renovate in #2192
  • chore(deps): update maibornwolff/secobserve_actions_templates digest to 5606a84 by @renovate in #2190
  • chore(deps): update github/codeql-action action to v3.27.2 by @renovate in #2193
  • chore(deps): update node.js to f8c7230 by @renovate in #2194
  • chore(deps): update python:3.12.7-alpine docker digest to 18e32de by @renovate in #2196
  • chore(deps): update python:3.12.7-alpine docker digest to 72d7e22 by @renovate in #2198
  • chore(deps): update node.js to b64ced2 by @renovate in #2197
  • fix(deps): update dependency markdown-to-jsx to v7.6.1 by @renovate in #2200
  • chore(deps): update github/codeql-action action to v3.27.3 by @renovate in #2199
  • chore(deps): update python:3.12.7-alpine docker digest to 5049c05 by @renovate in #2201
  • fix(deps): update dependency markdown-to-jsx to v7.6.2 by @renovate in #2204
  • chore(deps): update dependency @eslint/compat to v1.2.3 by @renovate in #2205
  • chore(deps): update github/codeql-action action to v3.27.4 by @renovate in #2206
  • fix(deps): update dependency coverage to v7.6.7 by @renovate in #2207
  • chore(deps): update postgres docker tag to v15.9 by @renovate in #2208
  • fix(deps): update react-admin monorepo to v5.3.4 by @renovate in #2209
  • chore(deps): update dependency @eslint/eslintrc to v3.2.0 by @renovate in #2210

Full Changelog: v1.22.1...v1.22.2

1.22.1

10 Nov 08:53
24b8fa1
Compare
Choose a tag to compare

Notable changes

Features

Fixes

  • fix: clip fields of license components before save by @StefanFl in #2171

Chores

  • chore: performance optimization for product, product_group and branch references by @StefanFl in #2170
  • chore: performance optimizations for observations and licenses by @StefanFl in #2172
  • chore: documentation for SO_SUPPRESS_LICENSES by @StefanFl in #2179
  • chore: prepare for release 1.22.1 by @StefanFl in #2180
  • chore: merge to main for release 1.22.1 by @StefanFl in #2181

Dependencies

  • fix(deps): update react-admin monorepo to v5.3.3 by @renovate in #2173
  • fix(deps): update dependency werkzeug to v3.1.3 by @renovate in #2174
  • chore(deps): update github/codeql-action action to v3.27.1 by @renovate in #2175
  • fix(deps): update dependency react-hook-form to v7.53.2 by @renovate in #2176
  • chore(deps): update maibornwolff/secobserve_actions_templates digest to bf9f432 by @renovate in #2178

Full Changelog: v1.22.0...v1.22.1