Skip to content

Releases: eclipse-apoapsis/ort-server

0.1.0-RC14

18 Feb 09:56
Compare
Choose a tag to compare
0.1.0-RC14 Pre-release
Pre-release

What's Changed

🐞 Bug Fixes

  • 3a452f4 ui: Align edit and delete buttons for secrets
  • 3f27d49 ui: Fix inadvertent paste error
  • 0553ae0 ui: Use correct query keys

🎉 New Features

  • a386f55 analyzer: Remove analyzer job configuration recursiveCheckout
  • 57d126a database: Create maintenance task for orphan deletion
  • 2539eda ui: Add proper validation for repository URL
  • ffc09a6 ui: Improve validation for item creation and editing
  • 35185a3 workers: Parallelize file list downloads

🔧 Chores

  • 3572fcf ui: Upgrade TailwindCSS to v4
  • 0fca160 workers: Slightly simplify code to get file lists

🚀 Dependency Updates

  • f41323c update awssdk to v1.4.22
  • 7a5c73f update com.azure:azure-identity to v1.15.2
  • d492460 update com.charleskorn.kaml:kaml to v0.72.0
  • c80eac9 update com.google.devtools.ksp to v2.1.10-1.0.30
  • 27d54d6 update dependency @hookform/resolvers to v4.1.0
  • b829c18 update dependency @tanstack/react-table to v8.21.2
  • 3b29513 update dependency @types/node to v22.13.2
  • 797f928 update dependency @types/node to v22.13.4
  • bdfe857 update dependency @types/react to v19.0.9
  • 00c3f8d update dependency docusaurus-plugin-openapi-docs to v4.3.4
  • a83ce21 update dependency docusaurus-theme-openapi-docs to v4.3.4
  • 42a0d90 update dependency prettier to v3.5.1
  • e77ca30 update dependency tailwindcss to v4.0.6
  • 987c4a1 update dependency zod to v3.24.2
  • ef7776e update flyway to v11.3.2
  • a5e15fc update ktor monorepo to v3.1.0
  • b4bc514 update nginx:1.27-alpine docker digest to 4ff102c
  • fc78c18 update nginx:1.27-alpine docker digest to a3a3e69
  • c1ac859 update nginx:1.27-alpine docker digest to e4efffc
  • 8682df7 update node.js to 91be66f
  • 812f505 update ort to v51.1.0
  • 0864826 update rabbitmq docker tag to v4.0.6
  • 3b1cb7b update react monorepo to v19.0.10
  • a57db52 update schemakenerator to v1.6.5
  • 7516030 update tanstack-query monorepo to v5.66.3
  • 2f2df3f update tanstack-router monorepo to v1.105.0
  • ef0bdfe update typescript-eslint monorepo to v8.24.1

0.1.0-RC13

11 Feb 16:50
Compare
Choose a tag to compare
0.1.0-RC13 Pre-release
Pre-release

What's Changed

🐞 Bug Fixes

  • 8211860 loki: Fix log level filter

🔧 Chores

🚀 Dependency Updates

  • 794f381 update dependency @7nohe/openapi-react-query-codegen to v1.6.2
  • 58acbd0 update quay.io/keycloak/keycloak docker tag to v26.1.2

0.1.0-RC12

11 Feb 08:15
Compare
Choose a tag to compare
0.1.0-RC12 Pre-release
Pre-release

What's Changed

🐞 Bug Fixes

  • afff676 analyzer: Use the latest version of corepack
  • 903589f cli: Use the correct file permissions for the auth.yml file
  • 8890485 core: Use OrtPrincipal instead of Application for logging
  • 2a55739 reporter: Add missing VCS packages to the base image
  • c8c56a9 ui: Fix DOM errors in DeleteDialog component
  • 60f288f ui: Provide default values to non-optional form fields

🎉 New Features

  • 54c9225 auth: Add "offline_access" scope for long-lived refresh tokens
  • bbd5170 database: Remove entities orphaned with removing ORT run
  • bb874d3 logging: Add new logger for Exposed SQL queries
  • ec1f017 reporter: Make source code origin priority configurable
  • 6421dfd ui: Add dependency tree deduplication option to WebApp reports
  • 8c46552 ui: Component for inputting optional values to forms
  • ce8a36d ui: Create a store for page size preferences
  • e332489 ui: Handle optional parameters in user creation
  • 6fdb6e0 ui: Hide secret values by default
  • 9dc6e28 ui: Save and persist ORT run data table's page size
  • 230f756 ui: Save and persist organization data table's page size
  • 44b34a0 ui: Save and persist product data table's page size
  • 4956fa4 ui: Save and persist repository data table's page size
  • 856052e ui: Use PasswordInput for creating a new user

✅ Tests

  • e856330 analyzer: Fix a locally failing test case

🐘 Build & ⚙️ CI

  • 502504f github: Fix getting commits from PR
  • f632b20 github: Fix printing referenced issues
  • ea3ccd5 release: Do not try to publish to Maven Central in forks
  • 19becb5 website: Do not try to publish the website in forks

🔧 Chores

  • 4c74c67 EnvironmentConfigLoader: Align generation of log messages
  • c32dd55 EnvironmentConfigLoader: Make failure logging more compact
  • c2af877 EnvironmentConfigLoader: Return early on no failures
  • 3a03367 dao: Add indexes to speed up statistics queries
  • 8c39aa1 ui: Install Zustand

🚀 Dependency Updates

  • cae3a15 update awssdk to v1.4.16
  • c9a2126 update com.autonomousapps:dependency-analysis-gradle-plugin to v2.8.2
  • 9b0b152 update com.azure:azure-identity to v1.15.1
  • 9ee1f7f update com.charleskorn.kaml:kaml to v0.71.0
  • 51cc6b6 update com.github.ajalt.clikt:clikt to v5.0.3
  • 0e3bba5 update com.rabbitmq:amqp-client to v5.25.0
  • 7866d26 update dependency @easyops-cn/docusaurus-search-local to v0.48.5
  • 1e91d09 update dependency @hookform/resolvers to v4
  • 6cf6de6 update dependency @types/node to v22.13.1
  • 1016d2a update dependency eslint-plugin-react-refresh to v0.4.19
  • 0fab785 update dependency lucide-react to ^0.475.0
  • cb7ab2b update dependency postcss to v8.5.2
  • 28aff51 update dependency prettier to v3.5.0
  • c61a723 update dependency vite to v6.1.0
  • 6ff2c21 update docker/setup-buildx-action digest to f7ce87c
  • 43e55d7 update exposed to v0.59.0
  • e30d7b3 update flyway to v11.3.1
  • b48ce21 update io.micrometer:micrometer-registry-graphite to v1.14.4
  • c0f83c3 update nginx:1.27-alpine docker digest to 848dc68
  • 247f1e1 update nginx:1.27-alpine docker digest to b471bb6
  • 06ceafc update node.js to 83fdfa2
  • 894e057 update org.jetbrains.kotlinx:kotlinx-datetime to v0.6.2
  • 5d38596 update ort to v50
  • 291788f update ort to v51
  • 0e2ac2d update pnpm/action-setup action to v4.1.0
  • 6ee284c update quay.io/keycloak/keycloak docker tag to v26.1.1
  • 7c66170 update radix-ui-primitives monorepo
  • 988e29e update tanstack-router monorepo to v1.102.1
  • c7c9180 update typescript-eslint monorepo to v8.23.0
  • 22b6f6a update typescript-eslint monorepo to v8.24.0

🚜 Refactorings

  • afade29 EnvironmentConfigLoader: Filter earlier for failures
  • 61312aa config: Change DatabaseConfig name
  • a994838 ui: Make the delete confirmation dialog less verbose
  • 34da7a3 ui: Remove duplicate type definition
  • d57850f ui: Utility function to validate optional parameters

0.1.0-RC11

04 Feb 12:25
Compare
Choose a tag to compare
0.1.0-RC11 Pre-release
Pre-release

What's Changed

🛠 Breaking Changes

  • efadae7 feat(cli)!: Accept CreateOrtRun object in run command

🐞 Bug Fixes

  • e53580a analyzer: Pin the PNPM to version 9.15.4
  • ac93757 cli: Properly close an input stream
  • e7735cc cli: Set the cause for the AuthenticationException
  • 398d3f0 cli: Update authentication details on token refresh
  • 48d90e0 cli: Use the correct subdirectory when XDG_CONFIG_HOME is set
  • 785c364 dao: Add missing index on the scan_summaries_issues table
  • 219ec0b github: Check issue links in the context of the base of the PR
  • d7fa030 github: Do not assume PR heads to come from origin
  • af12294 github: Ensure to have the latest PR base available
  • ca856ea github: Fix pull_request limitations to use plural "branches"
  • 8d39b06 mapping: Fix mapping of environment variable declarations
  • 686eacf ui: Fix validation of Analyzer environment variables
  • 832f3d2 ui: Only remove Keycloak state after successful login

🎉 New Features

  • aadda6f cli: Add auth login command
  • daa3b9e cli: Add auth logout command
  • d7f9517 cli: Add completion scripts for bash, fish and zsh
  • 24c80aa cli: Add help texts for all commands
  • c6f96b9 compose: Extract job duration graphs to a separate dashboard
  • 9a24e37 core: Add more duration-related metrics
  • 96a082d dao: Add a hash property to scan summaries
  • 08ee325 scanner: Do not return issues from OrtServerScanResultStorage
  • a72e7a8 scanner: Generate .gitconfig file with URL insteadOf sections
  • e072f7c scanner: Keep track on issues in OrtServerScanResultStorage
  • e71a30b scanner: Optimize read operations in OrtServerScanResultStorage
  • d91bd62 scanner: Rework processing of issues
  • 41b526b scanner: Use hashes to speed up deduplication of scan summaries
  • 8cfa8ee ui: Add Zod schema for marking items
  • 2ff0ffb ui: Add Zod schemas
  • bedfd06 ui: Add a component for copying links to items
  • 1f99091 ui: Add copy-to-clipboard component to issues table
  • a0fc4e6 ui: Add environment variables to Analyzer job details
  • 665b326 ui: Add environment variables to the form
  • 80fda4b ui: Add issue category to the table of issues
  • c6a76ba ui: Add mustRunAfter to Analyzer job details
  • eab1ccd ui: Add support for environment variables in the create run form
  • f1d807f ui: Categorize issues
  • 7c021a6 ui: Introduce a component for inline code formatting
  • 8efd9be Return overall vulnerability rating for vulnerabilities of a run

🐘 Build & ⚙️ CI

  • a691913 ui: Pin the PNPM version to 9.15.4
  • 2ad69b2 github: Add a workflow to check issue links of PRs

📖 Documentation

  • 4a10639 ui: Improve config context information
  • 0bf272b ui: Improve the config parameters description
  • 0e834ea ui: Improve the context parameter description
  • d625c13 ui: Improve the description for labels
  • 6fccb4e ui: Improve the environment variable description

🔧 Chores

  • 70a9d7a api: Allow setting the cause for the AuthenticationException
  • 7cbc55f cli: Add Clikt's completion option
  • 0381b93 cli: Improve docs for start command parameters
  • 1181a63 cli: Remove "CLI" from the version string
  • 345dd1f detekt: Enable autoCorrect for ORT's import order rule
  • 9025fec github: Do not comment on PRs when issue references are in sync
  • 17e7b1a github: Simplify accessing an environment variable
  • 531d02e github: Trim trailing spaces from a workflow file
  • 9d52a5f scanner: Log execution time for reading and writing scan results
  • 3176331 ui: Remove the note about the analyzer job being mandatory
  • 8beb0d1 ui: Remove unused hooks
  • 7191a3a ui: Use inline code to make the example path stand out

🚀 Dependency Updates

  • 869899a update actions/setup-node action to v4.2.0
  • 1cdf68c update actions/setup-node digest to 1d0ff46
  • 5de77a8 update awssdk to v1.4.11
  • 25fe6f4 update awssdk to v1.4.6
  • bef932e update com.autonomousapps:dependency-analysis-gradle-plugin to v2.8.0
  • f8e7a3b update com.azure:azure-security-keyvault-secrets to v4.9.2
  • eb9692a update com.charleskorn.kaml:kaml to v0.67.1
  • bfe4572 update com.charleskorn.kaml:kaml to v0.70.0
  • a4e2eac update com.github.ben-manes.versions to v0.52.0
  • 36d7d52 update com.github.jmongard.git-semver-plugin to v0.15.0
  • 8cd9695 update com.google.devtools.ksp to v2.1.10-1.0.29
  • 179033a update dependency @t3-oss/env-core to ^0.12.0
  • fb18469 update dependency @types/node to v22.10.10
  • 871c280 update dependency @types/node to v22.10.8
  • cb2a47b update dependency @types/node to v22.10.9
  • d29de32 update dependency @types/node to v22.12.0
  • a12efd4 update dependency @types/node to v22.13.0
  • e4b2c97 update dependency @types/react to v19.0.8
  • 51798dd update dependency docusaurus-plugin-openapi-docs to v4.3.2
  • 8d73090 update dependency docusaurus-plugin-openapi-docs to v4.3.3
  • b30a947 update dependency docusaurus-theme-openapi-docs to v4.3.2
  • a57b8b1 update dependency docusaurus-theme-openapi-docs to v4.3.3
  • 1045094 update dependency gradle to v8.12.1
  • e75d779 update dependency lucide-react to ^0.474.0
  • ba43324 update dependency prettier-plugin-tailwindcss to v0.6.11
  • fbbfa4a update dependency sonner to v1.7.3
  • 531ecfa update dependency sonner to v1.7.4
  • 35fe5e6 update dependency tailwind-merge to v3
  • 0afcf17 update dependency tailwind-merge to v3.0.1
  • c2f15c1 update dependency vitest to v3.0.4
  • 2e89f71 update dependency vitest to v3.0.5
  • 2dd1516 update docker/build-push-action digest to ca877d9
  • e0235be update flyway to v11.3.0
  • 89cb8b1 update gradle/actions digest to 94baf22
  • 7bc5d2d update io.github.smiley4:ktor-swagger-ui to v4.1.6
  • 007d049 update node.js to d6d1b3a
  • aff0919 update org.jetbrains.kotlin:kotlin-gradle-plugin to v2.1.10
  • 5b8b4ff update ort to v47
  • e469584 update ort to v48
  • bf68f78 update ort to v49
  • 23f0e6e update radix-ui-primitives monorepo
  • 64d5315 update schemakenerator to v1.6.4
  • fae61a2 update tanstack-query monorepo to v5.66.0
  • 8099431 update tanstack-router monorepo
  • 2a60012 update tanstack-router monorepo to v1.97.23
  • 080338a update typescript-eslint monorepo to v8.22.0

🚜 Refactorings

  • 2310a70 cli: Align on using OSC as prefix for all env vars
  • aa00e95 dao: Extract a function to query issues
  • f60209f ui: Delete the unneeded function
  • c080593 ui: Refactor getIssueCategory()
  • 3a646df ui: Use vulnerability rating from API

0.1.0-RC10

22 Jan 16:43
Compare
Choose a tag to compare
0.1.0-RC10 Pre-release
Pre-release

What's Changed

🎉 New Features

  • 1fd93c9 core: Add metrics for job durations
  • ae3b74b ui: Make the Package ID in issues table filterable

✅ Tests

  • 63deaae dao: Add missing metadata for projects and packages
  • 4c0173e dao: Add tests for empty projects and packages

🚀 Dependency Updates

  • 600fce9 update docker/dockerfile docker tag to v1.13

🚜 Refactorings

  • 811c138 dao: Compare packages in a single query
  • 744ce12 dao: Compare projects in a single query

0.1.0-RC9

21 Jan 16:17
Compare
Choose a tag to compare
0.1.0-RC9 Pre-release
Pre-release

What's Changed

🛠 Breaking Changes

  • 23514f7 feat(cli)!: Change the name of the ORT Server CLI executable

🐞 Bug Fixes

  • 54d7816 logaccess: Do not include empty log files in the log archive
  • 406f0b6 s3: Provide a checksum when uploading data
  • c340c26 ui: Fix CycloneDX icon variant

🎉 New Features

  • c901b83 analyzer: Introduce new JobConfiguration parameter for submodules
  • 80414ee cli: Add CLI command to download reports of an ORT run
  • d1fdd0f cli: Add download logs subcommand for runs command
  • f7f84fa cli: Add descriptive help text to the top level osc command
  • 504de0d dao: Rework the function to find ORT runs finished before a time
  • 6c37701 tasks: Add DeleteOldOrtRunsTask to the task runner
  • fb6a87e tasks: Add a task to delete old ORT runs
  • 80360b0 tasks: Implement task execution
  • 40ce4d6 tasks: Introduce a new module for tasks
  • 7e546e4 ui: Add FilterText component
  • d69f427 ui: Add mustRunAfter to analyzer configuration
  • c5dc080 ui: Add text filter for package in rule violations table
  • ab1c378 ui: Left-align the "Items per page" text on table pagination
  • b17c9cb ui: Replace ORT run ID with total number of items
  • 8f4a52d ui: Streamline filtering into column headers
  • 508e497 ui: Tune the descriptions of the item pages

🐘 Build & ⚙️ CI

  • 8967701 gradle: Make detektAll only run tasks with type resolution
  • 37936ee tasks: Create a container image for maintenance tasks
  • c946976 docker: Build and push the CLI Docker image
  • 3fc4d87 docker: Build the image for maintenance tasks

📖 Documentation

  • 07e67f2 website: Add a local search plugin

🔧 Chores

  • 329e098 cli: Add SLF4J NOP dependency
  • b779920 services: Add more logging for deleting old ORT runs
  • cb76ac7 ui: Move columns array inside the component
  • cd5be57 ui: Remove the title from the SBOM page

🚀 Dependency Updates

  • 2227ba9 update awssdk to v1.4.2
  • 30e847b update com.github.dasniko:testcontainers-keycloak to v3.6.0
  • 9d77d1a update dependency @easyops-cn/docusaurus-search-local to v0.48.2
  • 67c7e1a update dependency @easyops-cn/docusaurus-search-local to v0.48.3
  • f00d2c1 update dependency @easyops-cn/docusaurus-search-local to v0.48.4
  • b9ac860 update dependency @types/node to v22.10.7
  • 66b33c6 update dependency lucide-react to ^0.473.0
  • 563e0c3 update dependency postcss to v8.5.1
  • 6d2a18e update dependency prettier-plugin-tailwindcss to v0.6.10
  • 1d2eac5 update dependency sonner to v1.7.2
  • 05757af update dependency vite to v6.0.10
  • c30de20 update dependency vite to v6.0.11
  • d835fd4 update dependency vite to v6.0.8
  • f4be88a update dependency vite to v6.0.9
  • ab04cc0 update dependency vitest to v3
  • 29d22ef update dependency vitest to v3.0.1
  • 3e7edee update dependency vitest to v3.0.2
  • 9618c1d update dependency vitest to v3.0.3
  • 3878aac update docker/build-push-action digest to 67a2d40
  • cf5d12d update flyway to v11.2.0
  • 1935b81 update io.github.smiley4:ktor-swagger-ui to v4.1.5
  • 31c3abe update koin to v4.1.0-beta5
  • b203cc3 update node.js to f5a0871
  • 1d02dc6 update org.postgresql:postgresql to v42.7.5
  • a35cadf update ort to v46
  • 382c895 update quay.io/keycloak/keycloak docker tag to v26.1.0
  • 3c1171c update tanstack-query monorepo to v5.64.2
  • 4a7c13e update tanstack-router monorepo to v1.97.3
  • 50ed134 update typescript-eslint monorepo to v8.21.0
  • 179c39c update wagoid/commitlint-github-action digest to b948419

🚜 Refactorings

  • d8b13f0 logaccess: Move LogLevel and LogSource to the model module
  • 603bb6e ui: Edit showing search input for select filter
  • c50b402 ui: Extend ColumnMeta interface
  • 418eb32 ui: Set enableColumnFilter for table columns

💡 Other Changes

  • f53aa08 style(cli): Sort subcommands alphabetically

0.1.0-RC8

14 Jan 11:29
Compare
Choose a tag to compare
0.1.0-RC8 Pre-release
Pre-release

What's Changed

🐞 Bug Fixes

  • c170ebf compose: Change the Graphite step to 30s
  • 20e91be core: Add MDC component to job metrics
  • 5d11805 ui: Fix CycloneDX report format casing
  • 40fe0e1 ui: Make the favicon path relative

🎉 New Features

  • 3047cf4 cli: Add a --version option to show the used CLI version
  • d1137d3 compose: Add Graphite as a data source to Grafana
  • b42d3f6 compose: Add a dashboard to find logs without MDC
  • e70ba05 compose: Add a run and job status dashboard
  • f78d098 compose: Add a volume mount for the Graphite storage
  • 5c98e90 core: Add a function to delete finished runs older than a timestamp
  • 37fba51 core: Make Graphite step configurable
  • bd081d7 ui: Add icons for CycloneDX and SPDX
  • 30ed0fc ui: Add page for SBOM download
  • 1cfac67 ui: Configure output of CycloneDX, SPDX and NOTICE file reports
  • 3a7962a ui: Remove SBOM documents from downloads in Reports page
  • fc74a90 ui: Tune the explanation for CycloneDX and SPDX reports
  • 18e46bc workers: Add a function to validate jobs before processing

🐘 Build & ⚙️ CI

  • 0eb197d Add multiplatform module sources as detekt sources

📖 Documentation

  • 7766c3d ui: Add section headers to create run utils

🔧 Chores

  • 2418dc5 api: Ensure the baseUrl always ends with a trailing slash
  • 713b6ad api: Remove unused parameter from constructor
  • 991e2c3 reuse: Use the default "precedence" of "closest"
  • 82ad713 ui: Capitalize "Format" on the SBOM download page
  • c6e66c1 ui: Use plural "SBOMs" in the menu entry

🚀 Dependency Updates

  • 14bf529 docker: Upgrade to the latest ScanCode version 32.3.1
  • c59af3d update actions/upload-artifact digest to 65c4c4a
  • 85446c4 update awssdk to v1.3.110
  • 98f683f update com.autonomousapps:dependency-analysis-gradle-plugin to v2.7.0
  • f07dba1 update com.azure:azure-identity to v1.15.0
  • 7ef51da update com.github.jmongard.git-semver-plugin to v0.14.0
  • 0161da1 update dependency @ianvs/prettier-plugin-sort-imports to v4.4.1
  • 2807312 update dependency @tailwindcss/typography to v0.5.16
  • 86954d5 update dependency @types/node to v22.10.6
  • 70b7b58 update dependency @types/react to v19.0.4
  • 8f0f7c1 update dependency @types/react to v19.0.6
  • 47436cb update dependency @types/react to v19.0.7
  • a642d04 update dependency eslint-plugin-react-refresh to v0.4.18
  • b35c396 update dependency lucide-react to ^0.471.0
  • e2c7f52 update dependency postcss to v8.5.0
  • 1d06ebe update dependency typescript to v5.7.3
  • 36b035b update docker/build-push-action digest to b32b51a
  • 0faf298 update flyway to v11.1.1
  • 692b36a update io.github.smiley4:ktor-swagger-ui to v4.1.3
  • 2bf7f20 update io.github.smiley4:ktor-swagger-ui to v4.1.4
  • 2286253 update io.micrometer:micrometer-registry-graphite to v1.14.3
  • d456b33 update io.mockk:mockk to v1.13.16
  • e5f0362 update koin to v4.1.0-beta4
  • bd8d087 update nginx:1.27-alpine docker digest to 17c3d34
  • 640f18f update nginx:1.27-alpine docker digest to 4efa432
  • def593c update nginx:1.27-alpine docker digest to 814a8e8
  • ab6afaa update nginx:1.27-alpine docker digest to 827bcaf
  • 296b940 update nginx:1.27-alpine docker digest to 8339b5a
  • ceef4b3 update nginx:1.27-alpine docker digest to 9b460c5
  • 34364f7 update nginx:1.27-alpine docker digest to c57a926
  • aa0e333 update node.js to fe64023
  • b1ef207 update org.jetbrains.exposed:exposed-core to v0.58.0
  • 9eb8834 update ort to v45
  • bf3d0a0 update quay.io/keycloak/keycloak docker tag to v26.0.8
  • 3a5fbdb update react monorepo to v19.0.5
  • 0ef86ee update schemakenerator to v1.6.3
  • e251b4b update tanstack-query monorepo to v5.64.0
  • fc47c44 update tanstack-router monorepo to v1.95.5
  • cf20e94 update typescript-eslint monorepo to v8.20.0

🚜 Refactorings

  • e973394 workers: Use the new validation function in all workers

💡 Other Changes

  • 66bcf21 style: Fix missing empty lines in imports

0.1.0-RC7

07 Jan 10:29
Compare
Choose a tag to compare
0.1.0-RC7 Pre-release
Pre-release

What's Changed

🐞 Bug Fixes

  • b9ed3c0 client: Add OkHttp dependency to jvmMain source set
  • b6e7b05 compose: Remove explicit admin credentials
  • 37fbb3a core: Add dedicated permissions for managing groups
  • 00bdc28 dao: Avoid unnecessary loading of entities
  • 419a4df kubernetes: Handle empty trace IDs in KubernetesMessageSender
  • 2c366e3 reporter: Add ScanCode license texts to reporter docker image
  • e4df926 ui: Convert Tailwind CSS config to ESM
  • 9873cca ui: Fix one redirect to a typesafe version
  • 88373a0 ui: Fix statistics card's layout
  • 5f8dd52 ui: Fix the statistics card status information
  • e1c7821 ui: Show error toast when downloading fails
  • 1182ba2 ui: Truncate long report filename
  • fffd446 workers: Fix the handling of file lists

🎉 New Features

  • dc1da1b Orchestrator: Handle lost schedules
  • 274721f analyzer: Use all available credentials for repository download
  • e7da561 cli: Add InfoCommand to retrieve details of an OrtRun
  • f90259e cli: Add command to create an OrtRun
  • bd0004f client: Implement OrtServerClient with authentication support
  • b42457b client: Introduce RepositoriesApi for repository-related operations
  • 61f8784 client: Introduce RunsApi for runs-related operations
  • 0062328 compose: Add a Grafana log dashboard
  • 59e0e48 compose: Add a namespace label
  • 97ee1ff compose: Configure logstash to add a label component
  • 79315e9 compose: Configure the Loki log file provider
  • 64f8eb7 core: Add endpoint to get vulnerabilities for a product
  • 191805a core: Add run statistics endpoint for organizations
  • 2c7c227 core: Add run statistics endpoint for products
  • faf560f core: Delete ORT runs before deleting the repository
  • 33b2893 core: Delete repositories before deleting the product
  • d670d41 dao: Add a function to query active ORT runs
  • a7802dc dao: Add list function that allows custom ordering
  • 1285cc3 dao: List infrastructure services for a hierarchy
  • 99d8fae gradle: Extend artifact filter to also match io.atlassian.fugue
  • bfd6062 kubernetes: Detect lost schedules
  • b63d6d9 kubernetes: Support sending LostJobs messages
  • e7767c9 logging: Add a custom logback converter for the MDC
  • 469c06b loki: Update the query to make use of the MDC entries
  • f474050 model: Add project descriptions
  • 5e3b6e6 reporter: Add a specialized LicenseTextProvider implementation
  • dd049c8 reporter: Integrate CustomLicenseTextProvider
  • 97e403e secrets: Add support for Azure Key Vault
  • 67f0fca services: Add function to count issues by severity
  • ce382ed services: Add function to count rule violations by severity
  • ab75df2 services: Add function to count vulnerabilities by rating
  • e0b344a services: Add function to get repository IDs for a product
  • 202c592 services: Add function to get repository IDs for an organization
  • 07f670f services: Add function to list vulnerabilities for multiple runs
  • 4d23673 services: Add functions for getting run ID in various cases
  • 3436da7 storage: Add support for the Azure Blob storage
  • 82a524c ui: Add colored bars for item counts to run statistics cards
  • 21843b2 ui: Add function to handle multisorting of columns
  • 361e4ba ui: Add multisorting to all sortable tables
  • cc99815 ui: Initial organization dashboard
  • a0380b5 ui: Make it explicit is a package is metadata-only
  • 69caafe ui: Modify and clean up the run results overview page
  • 3c6e2b1 ui: Require manual confirmation for repository deletion
  • 2db64b2 ui: Set page titles
  • fe9da04 ui: Statistics cards for organization overview page
  • e047d5a workers: Populate file lists of ORT result
  • c9cf061 Change the log pattern to use only key value pairs
  • 65aa59d Log timestamps according to ISO 8601

✅ Tests

  • 381d887 core: Add a status code assertion according to the test title
  • 02adf04 core: Use a helper function in test
  • 3021bd5 dao: Enable query logging for database tests
  • 7d4a59d services: Refactor creating test issues
  • be360dc services: Refactor package service test
  • 9e99a4a workers: Simplify OrtRunServiceTest

🐘 Build & ⚙️ CI

  • 374d536 gradle: Fix applying the dependency analysis plugin
  • 066e8d8 gradle: Remove an unneeded artifact version filter
  • d69c7ba website: Fail on broken anchors
  • 1824448 docker: Always load the base images to the local registry
  • 8511119 docker: Do not write to the registry cache in pull requests checks
  • 45ee190 docker: Fix calculating the ORT Server version
  • ef18e0a docker: Fix if condition in Docker workflow
  • f7d7c5e docker: Fix writing to cache
  • 0c660c1 docker: Improve the Docker job names
  • c59d457 docker: Only load the image if required by a later step
  • 3a7dac9 docker: Push the Docker image if no Jib task is configured
  • 2e8d74a docker: Run the Docker build as part of PR checks
  • ca15038 docker: Simplify check if workflow was triggered by PR
  • 808a3fc docker: Use the base images from the local Docker registry

📖 Documentation

  • 4e49699 api: Edit OrtRunStatistics comments
  • 493ffb5 authorization: Convert the authorization docs to Markdown
  • c3e997a helm: Convert the development Helm Chart docs to Markdown
  • fb001d7 website: Add a link to the development Helm Chart
  • 9860ad3 website: Add a note to the tool version docs
  • 8a51fa2 website: Fix a broken anchor link
  • 8efcaeb website: Mention that the developmer Helm Chart is outdated
  • 6b55c60 website: Move the authorization docs to the website
  • d40c1b0 website: Move the config docs to the website
  • efc28af website: Move the development Helm Chart docs to the website
  • 748b6b5 website: Move tool version docs to website
  • f411172 Convert the config docs to Markdown
  • 9067130 Convert tool version docs to Markdown
  • 8a01604 Remove outdated database docs

🔧 Chores

  • c71e83f TestUtils: Correctly group imports
  • abe531e client: Use SuspendingNoOpCliktCommand to support suspending runs
  • f3e30cf compose: Recreate the master realm file with Keycloak 26.0.7
  • a262720 compose: Update the health check script
  • e0fc56e core: Use lists defined in JobStatus class instead of set
  • 7a05ec2 dao: Remove obsolete listForRepositoryUrl function
  • 24a78ae dao: Remove unnecessary suppression of DEPRECATION
  • 7adf35a docker: Align casing in Dockerfiles
  • b5686d7 model: Remove explicit types where not required for constants
  • 9ee6d2b services: Handle exception when deleting non-empty organizations
  • 14d3964 Move function to fixtures
  • bf90b69 Remove redundant qualifier names for innerJoin

🚀 Dependency Updates

Read more

0.1.0-RC6

03 Dec 12:36
Compare
Choose a tag to compare
0.1.0-RC6 Pre-release
Pre-release

What's Changed

Bug Fixes 🐞

  • 8945c6f docker: Ensure correct user for the cache directory
  • 14ea046 reporter: Filter out scan results outside the VCS path
  • bc510f3 ui: Align the height of delete button
  • c02640a ui: Fix invalidation of secrets query cache
  • 3d1d1b2 ui: Fix missing link
  • 1314766 ui: Remove backticks from code elements
  • 09a2dce ui: Render code blocks properly

New Features 🎉

  • 2696a26 core: Add REST API endpoints to delete ORT run
  • c25ebd7 core: Delete reports in storage
  • ccb38bd dao: Add a migration script to delete obsolete scan summaries
  • 95effa1 dao: Deduplicate scan results
  • 57daf64 scanner: Add functionality to compare scan summaries
  • 8b41d58 scanner: Prevent storing duplicate scan results
  • 478b8ca scanner: Reuse matching scan summaries when storing scan results
  • a75d3a9 ui: Add "delete ORT run" button
  • cdf4fad ui: Add a page and table for product vulnerabilities
  • f2f77ae ui: Add color classes to ecosystems
  • d3d8655 ui: Add custom query hooks for a product
  • d8fb7c9 ui: Add manual confirmation to some item deletion dialogs
  • 5e6145a ui: Add optional indicator bar to StatisticsCard component
  • 864a85e ui: Add product security dashboard
  • 71f34b3 ui: Link to all runs from breadcrumb's repository url
  • 9d7e2b7 ui: Remove the titles from actions to only have icons
  • fc0c953 ui: Statistics cards for product items

Chores 🔧

  • 85afc6f github: Add Johanna to the list of UI code owners
  • 5a5e9c0 model: Address another Konform deprecation
  • 2aaaaa5 ui: Say "the run" instead of "a run" in deletion confirmation

Dependency Updates 🚀

  • d44c464 gradle: Upgrade KSP to version 2.1.0-1.0.29
  • 37dd4c7 update awssdk to v1.3.84
  • 5f00354 update com.fasterxml.jackson.module:jackson-module-kotlin to v2.18.2
  • c5892c8 update com.github.ajalt.clikt:clikt to v5.0.2
  • 9212c04 update dependency @types/node to v22.10.1
  • a89b849 update dependency @vitejs/plugin-react to v4.3.4
  • f4b45be update dependency lucide-react to ^0.462.0
  • 0b4db40 update dependency prettier to v3.4.1
  • bb2e619 update dependency vite to v6
  • e98a2e9 update dependency vite to v6.0.1
  • f931691 update dependency vite to v6.0.2
  • 146fba8 update dependency vitest to v2.1.6
  • 13ad433 update dependency vitest to v2.1.7
  • ae733c1 update dependency vitest to v2.1.8
  • e9bee6c update docker/build-push-action digest to 48aba3b
  • 26b6bd5 update docker/dockerfile docker tag to v1.12
  • 28e90d7 update nginx:1.27-alpine docker digest to 4152318
  • af6b84c update nginx:1.27-alpine docker digest to 5acf10c
  • 7c1da39 update org.gradle.toolchains.foojay-resolver-convention to v0.9.0
  • 70d3644 update org.jetbrains.kotlin.plugin.serialization to v2.1.0
  • 70c3a10 update ort to v42
  • 16b90d7 update quay.io/keycloak/keycloak docker tag to v26
  • 3279377 update tanstack-query monorepo to v5.62.0
  • 7d1d8c8 update tanstack-router monorepo
  • 5cddbb1 update typescript-eslint monorepo to v8.17.0

Refactorings 🚜

  • a47adf0 dao: Improve a dependency on the Exposed transform function
  • c91f8f3 dao: Move repository implementations into their own packages
  • 0181f9d dao: Move tables next to the responsible repositories
  • d1377c7 ui: Move application wide layout to root layout file
  • ea18763 ui: Move repositories view to a sidebar option
  • b8fe149 ui: Move repository table to product main page
  • 9076637 ui: Remove dialog state and pending from delete dialog props
  • 8e606e6 ui: Remove superfluous route layout directory
  • ad3d182 ui: Rename plain page files to index.tsx
  • 527fa7b ui: Simplify delete dialog props
  • 351f1e0 ui: Use JSON search params for table sorting state

Tests ✅

  • 6521426 dao: Remove dependencies between tests
  • e010971 scanner: Extract a fixtures object for scan results

0.1.0-RC5

26 Nov 11:08
Compare
Choose a tag to compare
0.1.0-RC5 Pre-release
Pre-release

What's Changed

Bug Fixes 🐞

  • 8c503e7 scanner: Add missing configuration properties for S3 storage
  • d26d4d3 ui: Fix layouts of run results tables
  • ac77ddb ui: Fix router getting stuck when redirecting to latest run
  • cc63102 ui: Replace URL in history when redirecting to latest run
  • 07abf7f ui: Use correct query key on repository settings page

New Features 🎉

  • a72813c ui: Move deleting and editing repo to a separate settings page
  • aa31b4b ui: Redirect to latest run from repository page

Build 🐘 & CI ⚙️

  • 5a4739e gradle: Exclude generated code from Detekt checks
  • d233bd3 ui: Forbid unchecked indexed access with TypeScript
  • e93ea9f Stop publishing Maven artifacts to GitHub packages

Chores 🔧

  • f165294 api: Address depecrations of the Konform library
  • bf91ab3 ui: Remove superfluous type annotation

Dependency Updates 🚀

  • a8586cb update awssdk to v1.3.81
  • f41613d update com.autonomousapps.dependency-analysis to v2.5.0
  • e3fa686 update com.charleskorn.kaml:kaml to v0.66.0
  • 93d0763 update com.rabbitmq:amqp-client to v5.23.0
  • adb7c5b update dependency @types/node to v22.10.0
  • 50e5089 update dependency @types/node to v22.9.1
  • e27f25c update dependency @types/node to v22.9.2
  • 33d703d update dependency @types/node to v22.9.3
  • 62415a0 update dependency @types/node to v22.9.4
  • 94b75aa update dependency class-variance-authority to v0.7.1
  • 1e154b9 update dependency gradle to v8.11.1
  • 6813b37 update dependency prettier to v3.4.0
  • abd776c update dependency prettier-plugin-tailwindcss to v0.6.9
  • 4f3c276 update dependency tailwind-merge to v2.5.5
  • 042c1f5 update dependency typescript to v5.7.2
  • e0dd2ea update dependency typescript to ~5.7.0
  • b00c911 update docker/metadata-action digest to 359e915
  • 1c8ae47 update docker/metadata-action digest to 369eb59
  • ac20695 update flyway to v10.22.0
  • ea59cd3 update flyway to v11
  • f6f8bfc update ktor monorepo to v2.3.13
  • b27e544 update org.apache.logging.log4j:log4j-to-slf4j to v2.24.2
  • 38d6f36 update ort to v40
  • 9411a44 update ort to v41
  • 8a3dc44 update rabbitmq docker tag to v4.0.4
  • 4538b73 update tanstack-query monorepo to v5.61.3
  • 383f077 update tanstack-router monorepo to v1.82.8
  • 68416c6 update testcontainers-java monorepo to v1.20.4
  • 54f5ecf update typescript-eslint monorepo to v8.16.0

Documentation 📖

  • 7db21a6 Move Gradle module docs to website

Refactorings 🚜

  • 122d55e config: Deduplicate database configuration
  • bfc1c3b config: Deduplicate secrets provider configuration
  • 46aec01 config: Split the configuration of secret providers
  • e80a219 services: Trivially extract some common code
  • fbc9267 ui: Allow using custom button for delete dialog
  • 327e95b ui: Extract runs table to separate component
  • c2e905d ui: Make the page contents wider
  • d0efc3e ui: Remove unnecessary layout directory
  • 4c63288 ui: Replace a generic query hook with a generated one
  • 3673d0e ui: Use file based layout for repo layout
  • 6a00a63 ui: Use prefetch instead of ensureQueryData on settings page

Tests ✅

  • c35b59d reporter: Avoid creating unnecessary temporary files
  • 3baf31a reporter: Improve creating reporter mocks
  • ea0cfb7 reporter: Simplify creating reporter mocks