Skip to content

Commit

Permalink
Update changelog and version for v1.3.0 (#316)
Browse files Browse the repository at this point in the history
  • Loading branch information
another-rex committed Mar 28, 2023
1 parent 466e5ea commit cfe6d75
Show file tree
Hide file tree
Showing 3 changed files with 28 additions and 2 deletions.
26 changes: 26 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,29 @@
v1.3.0:
===

### Major Features:

- [Feature #198](https://github.com/google/osv-scanner/pull/198) GoVulnCheck integration! Try it out when scanning go code by adding the `--experimental-call-analysis` flag.
- [Feature #260](https://github.com/google/osv-scanner/pull/198) Support `-r` flag in `requirements.txt` files.
- [Feature #300](https://github.com/google/osv-scanner/pull/300) Make `IgnoredVulns` also ignore aliases.
- [Feature #304](https://github.com/google/osv-scanner/pull/304) OSV-Scanner now runs faster when there's multiple vulnerabilities.

### Fixes
- [Bug #249](https://github.com/google/osv-scanner/issues/249) Support yarn locks with quoted properties.
- [Bug #232](https://github.com/google/osv-scanner/issues/232) Parse nested CycloneDX components correctly.
- [Bug #257](https://github.com/google/osv-scanner/issues/257) More specific cyclone dx parsing.
- [Bug #256](https://github.com/google/osv-scanner/issues/256) Avoid panic when parsing `file:` dependencies in `pnpm` lockfiles.
- [Bug #261](https://github.com/google/osv-scanner/issues/261) Deduplicate packages that appear multiple times in `Pipenv.lock` files.
- [Bug #267](https://github.com/google/osv-scanner/issues/267) Properly handle comparing zero versions in Maven.
- [Bug #279](https://github.com/google/osv-scanner/issues/279) Trim leading zeros off when comparing numerical components in Maven versions.
- [Bug #291](https://github.com/google/osv-scanner/issues/291) Check if PURL is valid before adding it to queries.
- [Bug #293](https://github.com/google/osv-scanner/issues/293) Avoid infinite loops parsing Maven poms with syntax errors
- [Bug #295](https://github.com/google/osv-scanner/issues/295) Set version in the source code, this allows version to be displayed in most package managers.
- [Bug #297](https://github.com/google/osv-scanner/issues/297) Support Pipenv develop packages without versions.

#### API Features
- [Feature #310](https://github.com/google/osv-scanner/pull/310) Improve the OSV models to allow for 3rd party use of the library.

v1.2.0:
===

Expand Down
2 changes: 1 addition & 1 deletion cmd/osv-scanner/main.go
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ import (

var (
// Update this variable when doing a release
version = "1.2.0"
version = "1.3.0"
commit = "n/a"
date = "n/a"
)
Expand Down
2 changes: 1 addition & 1 deletion cmd/osv-scanner/main_test.go
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,7 @@ func TestRun(t *testing.T) {
args: []string{"", "--version"},
wantExitCode: 0,
wantStdout: `
osv-scanner version: 1.2.0
osv-scanner version: 1.3.0
commit: n/a
built at: n/a
`,
Expand Down

0 comments on commit cfe6d75

Please sign in to comment.