1.21.0

Breaking changes

• There was a typo in severities, where there was a missing "n" in "Unknown". This has been fixed in the code as well as in the data. If you use the severity Unknown in API calls, you need to change it from Unkown to Unknown.

Notable changes

• This release introduces license management. Licenses of components can be imported via CycloneDX SBOMs and evaluated with flexible license policies. For more information see https://maibornwolff.github.io/SecObserve/usage/license_management

Features

• feat: license management by @StefanFl in #2068
• feat: ui improvements for license management by @StefanFl in #2092
• feat: apply license policy to its products by @StefanFl in #2093
• feat: component types can be ignored in license policies by @StefanFl in #2095
• feat: export of license components by @StefanFl in #2103
• feat: more ui improvements for license management by @StefanFl in #2105
• feat: set default branch as default for list of license components by @StefanFl in #2110
• feat: created, last_seen, last_change dates for license components by @StefanFl in #2121

Fixes

• fix: internal users are allowed to copy license groups and policies by @StefanFl in #2073
• fix: internal users can copy public groups and policies by @StefanFl in #2075
• fix: change "unkown" to "unknown" in code and data by @StefanFl in #2088
• fix: URL for deps.dev for components with namespace by @StefanFl in #2097
• fix: show correct resource in empty embedded lists by @StefanFl in #2099
• fix: ignore observation logs with just comments for CSAF/OpenVEX by @dervoeti in #2122
• fix: compare CSAF components based on id by @dervoeti in #2124
• fix: add all component relationships in CSAF document by @dervoeti in #2125

Chores:

• chore: use AWS ECR for Trivy by @StefanFl in #2071
• chore: authentication and authorization tests for license management by @StefanFl in #2077
• chore: more unittests for license management by @StefanFl in #2085
• chore: documentation for license management by @StefanFl in #2087
• chore: scan licenses for dev by @StefanFl in #2106
• chore: prepare for release 1.21.0 by @StefanFl in #2130
• chore: merge to main for release 1.21.0 by @StefanFl in #2131

##Dependencies

• chore(deps): update dependency poetry to v1.8.4 by @renovate in #2043
• chore(deps): update dependency vite to v5.4.9 by @renovate in #2044
• chore(deps): update github/codeql-action action to v3.26.13 by @renovate in #2045
• chore(deps): update typescript-eslint monorepo to v8.9.0 by @renovate in #2046
• chore(deps): update dependency mkdocs-material to v9.5.41 by @renovate in #2048
• chore(deps): update mysql docker tag to v8.4.3 by @renovate in #2050
• fix(deps): update dependency chart.js to v4.4.5 by @renovate in #2049
• chore(deps): update dependency @types/node to v20.16.12 by @renovate in #2053
• chore(deps): update keycloak/keycloak docker tag to v26.0.1 by @renovate in #2054
• chore(deps): update typescript-eslint monorepo to v8.10.0 by @renovate in #2056
• chore(deps): update dependency @types/node to v20.16.13 by @renovate in #2061
• chore(deps): update python:3.12.7-alpine docker digest to 38e179a by @renovate in #2060
• fix(deps): update dependency react-hook-form to v7.53.1 by @renovate in #2059
• chore(deps): update eslint monorepo to v9.13.0 by @renovate in #2058
• chore(deps): update dependency @eslint/compat to v1.2.1 by @renovate in #2057
• chore(deps): update dependency @vitejs/plugin-react to v4.3.3 by @renovate in #2062
• chore(deps): update dependency mkdocs-material to v9.5.42 by @renovate in #2064
• fix(deps): update dependency coverage to v7.6.4 by @renovate in #2065
• chore(deps): update typescript-eslint monorepo to v8.11.0 by @renovate in #2067
• chore(deps): update dependency @types/node to v20.16.14 by @renovate in #2069
• chore(deps): update dependency @playwright/test to v1.48.1 by @renovate in #2051
• chore(deps): update mcr.microsoft.com/playwright docker tag to v1.48.1 by @renovate in #2052
• fix(deps): update dependency packageurl-python to v0.16.0 by @renovate in #2070
• fix(deps): update react-admin monorepo to v5.3.0 by @renovate in #2055
• chore(deps): update github/codeql-action action to v3.27.0 by @renovate in #2076
• chore(deps): update actions/cache action to v4.1.2 by @renovate in #2074
• chore(deps): update dependency eslint-plugin-react to v7.37.2 by @renovate in #2078
• chore(deps): update actions/checkout action to v4.2.2 by @renovate in #2084
• chore(deps): update dependency vite to v5.4.10 by @renovate in #2083
• chore(deps): update dependency @types/react to v18.3.12 by @renovate in #2082
• chore(deps): update dependency @types/node to v20.17.0 by @renovate in #2081
• chore(deps): remove jest from dev dependencies by @StefanFl in #2086
• chore(deps): update actions/setup-python action to v5.3.0 by @renovate in #2091
• chore(deps): update actions/setup-node action to v4.1.0 by @renovate in #2090
• chore(deps): update keycloak/keycloak docker tag to v26.0.2 by @renovate in #2089
• fix(deps): update dependency werkzeug to v3.0.5 by @renovate in #2094
• fix(deps): update react-admin monorepo to v5.3.1 by @renovate in #2098
• chore(deps): update dependency @types/node to v20.17.1 by @renovate in #2096
• chore(deps): update dependency @playwright/test to v1.48.2 by @renovate in #2100
• chore(deps): update mcr.microsoft.com/playwright docker tag to v1.48.2 by @renovate in #2102
• fix(deps): update dependency werkzeug to v3.0.6 by @renovate in #2101
• chore(deps): update maibornwolff/secobserve_actions_templates digest to 6eefe40 by @renovate in #2072
• fix(deps): update dependency django-stubs to v5.1.1 by @renovate in #2104
• chore(deps): update actions/setup-node action to v4.1.0 by @renovate in #2109
• chore(deps): update actions/checkout action to v4.2.2 by @renovate in #2108
• chore(deps): update maibornwolff/secobserve_actions_templates digest to 6eefe40 by @renovate in #2107
• chore(deps): lock file maintenance by @renovate in #2066
• fix(deps): update dependency whitenoise to v6.8.0 by @renovate in #2112
• fix(deps): update dependency whitenoise to v6.8.1 by @renovate in #2113
• fix(deps): update dependency chart.js to v4.4.6 by @renovate in #2111
• chore(deps): update dependency @eslint/compat to v1.2.2 by @renovate in #2114
• chore(deps): update traefik docker tag to v3.2.0 by @renovate in #2115
• chore(deps): update typescript-eslint monorepo to v8.12.0 by @renovate in #2116
• chore(deps): update dependency @types/node to v20.17.2 by @renovate in #2117
• chore(deps): update to Node 22 by @StefanFl in #2120
• chore(deps): update typescript-eslint monorepo to v8.12.1 by @renovate in #2118
• chore(deps): update dependency @types/node to v22.8.4 by @renovate in #2119
• fix(deps): update dependency django-cors-headers to v4.6.0 by @renovate in #2123
• chore(deps): update typescript-eslint monorepo to v8.12.2 by @renovate in #2126
• fix(deps): update dependency whitenoise to v6.8.2 by @renovate in #2127
• chore(deps): update node.js to v22.11.0 by @renovate in #2128

Full Changelog: v1.20.0...v1.21.0