Releases: microsoft/component-detection
Releases · microsoft/component-detection
v7.0.10
⚙️ Changes
- More maven parsing fix for experiment detector by @zhenghao104 (#1724)
- Bump werkzeug from 3.1.5 to 3.1.6 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv by @dependabot[bot] (#1682)
🧰 Maintenance
- Bump release-drafter/release-drafter from 6.4.0 to 7.0.0 by @dependabot[bot] (#1720)
- Bump step-security/harden-runner from 2.15.1 to 2.16.0 by @dependabot[bot] (#1725)
- Bump shogo82148/actions-upload-release-asset from 1.9.2 to 1.10.0 by @dependabot[bot] (#1726)
- Bump github/codeql-action from 4.32.6 to 4.33.0 by @dependabot[bot] (#1727)
- Bump mshick/add-pr-comment from 2.8.2 to 3.9.0 by @dependabot[bot] (#1728)
v7.0.9
⚙️ Changes
- Allow prerelease dependency in Contracts NuGet package by @JamieMagee (#1731)
v7.0.8
⚙️ Changes
- Update packageurl-dotnet to 2.0.0-rc.2 by @JamieMagee (#1730)
- [WIP] Fix NPM detector to differentiate packages by namespace by @copilot-swe-agent[bot] (#1713)
v7.0.7
⚙️ Changes
- Fix maven detector race conditions by @zhenghao104 (#1719)
- Revert "Add OCI image support to Linux scanner (#1708)" by @jasonpaulos (#1716)
- Revert "Add Docker archive support to Linux scanner (#1711)" by @jasonpaulos (#1715)
v7.0.6
⚙️ Changes
- Add Docker archive support to Linux scanner by @jasonpaulos (#1711)
- Add OCI image support to Linux scanner by @jasonpaulos (#1708)
🧰 Maintenance
- Bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by @dependabot[bot] (#1706)
v7.0.5
⚙️ Changes
- Fix submodule bug in MavenFallbackDetector by @zhenghao104 (#1685)
- Enable nullable types in Linux detector files by @jasonpaulos (#1709)
v7.0.4
⚙️ Changes
- Mark detectors as public by @JamieMagee (#1707)
v7.0.3
⚙️ Changes
- Revert some internal changes by @JamieMagee (#1705)
v7.0.2
⚙️ Changes
- chore(deps): update release-drafter/release-drafter digest to 6a93d82 by @renovate[bot] (#1701)
- Fix SwiftComponent.PackageUrl JSON property name collision on .NET 10 by @JamieMagee (#1704)
- Detect self-contained projects in DotNetComponentDetector by @ericstj (#1689)
- Run snapshot publish on a schedule by @JamieMagee (#1700)
- refactor: make Orchestrator implementation details internal by @JamieMagee (#1696)
- refactor: make Common implementation details internal by @JamieMagee (#1695)
- refactor: make detector implementation details internal by @JamieMagee (#1694)
- refactor: standardize InternalsVisibleTo in csproj files by @JamieMagee (#1690)
- [MSTest.Sdk] Cleanup property by @Evangelink (#1697)
🧰 Maintenance
- Bump release-drafter/release-drafter from 6.2.0 to 6.3.0 by @dependabot[bot] (#1699)
v7.0.1
⚙️ Changes
- Add LicenseConcluded and Suppliers to ScannedComponent by @pauld-msft (#1684)
- Use MSTest.Sdk and opt-in to MTP by @Evangelink (#1680)
- Update dependency Polly to 8.6.6 by @renovate[bot] (#1691)
🧰 Maintenance
- Bump step-security/harden-runner from 2.14.2 to 2.15.1 by @dependabot[bot] (#1688)
- Bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] (#1676)
- Bump github/codeql-action from 4.32.3 to 4.32.6 by @dependabot[bot] (#1686)
- Bump actions/setup-dotnet from 5.1.0 to 5.2.0 by @dependabot[bot] (#1687)