v0.2.4

• Updated dependency-check-core to v3.1.2, see Dependency Check Release Notes for details

v0.2.3

Updated dependency-check-core to v3.1.1, PR #35 by @mrtnrdl.

• The update introduces the new configuration setting dependencyCheckCpeStartsWith. See README for details.

v0.2.2

• Updated dependency-check-core to version 3.1.0, see Dependency Check release notes for details.

v0.2.1

Updated dependency-check-core to v3.0.2, PR #31 by @ktham

• This update fixes issues with connection to maven central

v0.2.0

• Updated dependency-check-core to v3.0.1, PR #28 by @ktham
  • See dependency-check-core v2.1.1, v3.0.0 and v3.0.1 for details of the changes
  • Noteworthy changes: DC was optimized to have fewer false-negatives. You might see a few more false positives though as well.

v0.1.10

• Cross build sbt-dependency-check for sbt 0.13.16 and 1.0.0-RC3 #23
• Updated Dependency Check core to v2.1.0 #21 Noteworthy changes:
  • New setting dependencyCheckScanSets to add directories/files to the scan. Defaults to src/main/resources
  • Ruby Bundle Audit Analyzer was promoted to not being experimental anymore
• Reintroduced setting dependencyCheckSuppressionFile which was removed in last release. Setting is merged with dependencyCheckSuppressionFiles when both are set.
• Added missing setting for dependencyCheckNSPAnalyzerUrl to configure a custom URL to the Node Security Platform from DC core update to v2.0.0
• Updated the dependencyCheckListSettingstask to print new settings since update to DC core v2.0.0 #24

v0.1.9

• Updated Dependency Check Core to v2.0.1 #16 , see Dependency Check v2.0.0 release notes for details. Noteworthy changes:
  • New Analyzer for the Node Security Platform
  • New report formats: CSV and JSON
  • Support for multiple suppression files
• Bumped several dependencies and plugin versions #18 #17

Important: Breaking changes

• dependencyCheckSuppressionFile setting was changed from Option[File] to Seq[File] and renamed to dependencyCheckSuppressionFiles to support multiple files
• dependencyCheckFormat has had it's default value changed from ALL to HTML.

v0.1.8

• Fix for multi-project builds that depend on meta-projects #14

v0.1.7

• Added new configuration options - #12
  • dependencyCheckHintsFile - The file path to the XML hints file - used to resolve false negatives.
  • dependencyCheckCocoapodsEnabled - Sets whether or not the experimental Cocoapods Analyzer should be used.
  • dependencyCheckSwiftEnabled - Sets whether or not the experimental Swift Package Manager Analyzer should be used.
  • dependencyCheckBundleAuditEnabled - Sets whether or not the experimental Ruby Bundle Audit Analyzer should be used.
  • dependencyCheckPathToBundleAudit - The path to bundle audit.

v0.1.6

• Updated dependency-check-core to v1.4.5