sw360-18.0.0-M1
Pre-releasesw360-18.0.0-M1
This tag covers many corrections/bug after the 17.0 release and multiple new endpoints to support sw360 UI project.
Migrations
For existing installations, a data migration is required with PR 1963. Please go to the readme file in scripts/migrations to see more information:
https://github.com/eclipse/sw360/blob/master/scripts/migrations/README.md
For running the migrations scripts, you will need python and the couchdb package. Please note that you will need to change manually in the python file: the DRYRUN variable and the couchdb URL (if that is not on localhost or requires password or both).
Credits
The following github users have contributed to the source code since the last release (in alphabetical order):
> Abdul Kapti <[email protected]>
> afsahsyeda <[email protected]>
> Anupam Ghosh <[email protected]>
> Dinesh Ravi <[email protected]>
> Eldrin Sanctis <[email protected]>
> Gaurav Mishra <[email protected]>
> Helio Chissini de Castro <[email protected]>
> hoangnt2 <[email protected]>
> Keerthi B L <[email protected]>
> Kouki Hama <[email protected]>
> Le Tien <[email protected]>
> Muhammad Ali <[email protected]>
> Nguyen Nhu Tuan <[email protected]>
> Nikesh kumar <[email protected]>
> rudra-superrr <[email protected]>
> Shi Qiu <[email protected]>
> Smruti Prakash Sahoo <[email protected]>
> Tien Le <[email protected]>
> tuannn2 <[email protected]>
Please note that also many other persons usually contribute to the project with reviews, testing, documentations, conversations or presentations.
Features
e9a9f308b
feat(rest): Adding pagination for ecc info of releases for a project.c0db06a68
feat(rest) : Adding pagination for listing users endpoint.acc553b14
feat(rest): endpoint to get attachmentUsages for a project.bb0d01fd5
feat(rest): endpoint to get license clearing count for a project.bc5ae7d1b
feat(rest) : Add enableSvm field in response to projects api130ed2585
feat(importCDX): enhanced sw360 CDX importer754ba96a7
feat(CreateCRandRequestsPortlet):Added new field Clearing Type for CR and Additional columns in Open CR tableb89bde7b9
feat(Rest): Modifying the document for search endpointec750b824
feat(bug) : Download release attachment fail issue fixf629a0d3f
feat(rest) : End point for export vendor spreadsheet930ef1d13
feat(docker): Add option to specify cvesearch.host at build timef4febd954
feat(release): Fix response api get single release with costDetails70141590c
feat(rest): API to get vulnerability tracking status03aaa6985
feat(Rest): New endpoint allow load assessment summary information of release8c2e71b85
feat(ui):enable to bulk delete component/releases for admin SW360266aeac3d
feat(REST): Add restricted project counter for component and release usedBy APIca0ef31f2
feat(rest):Update API Create Release with Cost Detail1974005e2
feat(ui): Added collapse and expand icon for all the tabs16dae1a4a
feat(rest): API to get vulnerability tracking statusafe118d96
feat(Rest): New endpoint allow load SPDX license info from attachment of release (ISR, CLX, CLI)a330fde1e
feat(rest): Update release with attachment infoba6c743f5
feat(ui) : Add changelogs for license pagesd369c73e3
feat(rest): Update API create Release with Moderator, Contributor, CpeIdc9c37b94d
feat(rest): Update API create Release with LinkedReleased7b52f53e
feat(rest): Add Information Vendor to response Get release detail4449e6017
feat(liferay): Export private pages include package portlet7c57b8081
feat(rest): Add information user change status attachment when edit component by APId25d35ce3
feat(Project): New configuration make project and releases relationship more flexiblede4125bb4
feat(debug): Add Tomcat manager to dockerfd13d1943
feat(rest): listing license clearing info of a project.cc9291d68
feat(CycloneDX): support CPE in import and export42f44107f
feat(rest): Update Component with attachmentd8c594628
feat(REST): New endpoint to write SPDX license info into released356bc022
feat(UI): Package Portlet Signed-off-by: akapti [email protected]6aa0b8d7e
feat(rest) : asynchronous end point for report download4d4c863ad
feat(RequestsPortlet): Added On Hold value for request status and Next/Last 15 days filterfd159f302
feat(Components): Add a new field VCS/Repository URL for componentsbe9e5f5bb
feat(rest): New Endpoint create attachment34e2d9e77
feat(Rest): Rest API allow to re-generate fossology reportf4432c98b
feat(rest):Adding new fields to get list of project vulnerabilityefbe761f5
feat(ExportSpreadsheet): Add project and release ID to the exported excelb7740902b
feat(ProjectObligationsEdit): Save comment and status fields on edita7bc2969c
feat(rest):New end point for my componentsa4e7f6808
feat(REST): New endpoint split components447143b8e
feat(rest): To list linked projects of sub-projects.ed7f4e237
feat(Department): New function for Department Management662a05977
feat(rest): new endpoint merge component1bf157600
feat(UI/REST): CycloneDX SBOM Importer & Exportere8f6e6b26
feat(rest): update response API Get a single release57b02aa29
feat(REST): Update response endpoint get attachments by release410184928
feat(ECC):Added pagination to ECC release listb6d58b979
feat(ui): add note filed in license pagef14f9b0e4
feat(rest): update response API Listing usersc27a2fe35
feat(rest): update response API Listing vendors9bd7869f4
feat(update): update response api get single component90c59acb4
feat(rest): modify moderation requests8e71c959c
feat(ci): Use actions java setup instead of standard packages037acd41b
feat(ci): Use actions java setup instead of standard packagesa7af308fa
feat(ci): Update build and test to accept dispatch669d6f98b
feat(rest) : api to get count of projects1c4b223f8
feat(update):update response api get attachment by componente6374e820
feat(api): create new endpoint import bom for component462675325
feat(api): create new endpoint update vulnerabilities of a release4dbc8705a
feat(api): create new endpoint update vulnerabilities of a componentbc368f203
feat(REST): Endpoint for Download Attachment Bundle of Release764a24c6c
feat(api): Endpoint get release overview by component391c006e6
feat(REST): Endpoint for Download Attachment Bundle of Component96a032814
feat(api): endpoint get vulnerabilities of a componentd10048956
feat(rest): new endpoint/moderationrequest
e682a50fa
feat(spdx): Added support for pasring of SPDX-2.3 (ISR) generated via fossologyb7710e630
feat(lucene): Modify pom to generate proper war from couchdb lucene53236b590
feat(libs): Add couchdb-lucene as third party84e098774
feat(project): Prepare to introduce thirdparty librariesc80f75908
feat(rest):Components with all details Rest Api doc updatedb32e90154
feat(REST):Endpoint for sbom import249f48f49
feat(SPDX): Making new tab in component release pages for showing SPDX/SPDX Lite data #12409d566af03
feat(rest):New end point for my components53c8d85da
feat(clearing): Improved cloud backend clearing2e0732a2b
feat(rest): Added basic username and password based authentication4f171a659
feat(rest): optimize fetch project729207997
feat(EditCR): Admin will be able to reassign/edit the Requesting User of CR56096f24a
feat(ProjectUI):ExternalIds and Additional Data fields in Export Excel7b84b0e4f
feat(api): get vulnerabilities from relase by apiaafc95808
feat(rest) : Update data without moderation request And This features' a configurable setting73ba7012d
feat(docker): Use main Maven docker imaged6555a370
feat(rest): endpoint for linked projects.e20d7bf06
feat(rest): new endpoint /releases/recentReleasesc5aea6f4e
feat(rest): newendpoint /components/recentComponents.d707d7b53
feat(rest): new endpoint/projects/myprojects
0f95fd368
feat(project): Added Email functionality for individual project spreadsheet exportff92cd956
feat(ProjectUi): Enable Release with only one non-approved CLI for 'Adding License Infor To Release' and 'Displaying Obligations' (#1764)f5daadb6e
feat(Search): Added restricted search (#1797)df0a6a123
feat(ui): Add banner to broadcast messages (#1830)d4cd90f67
feat(Project): Added Vulnerability Summary Tab in Projects.ca1da16fe
feat(ProjectsUI):Changed Expand All To Expand Next Level and added alert messageb682060ae
feat(Advance Search): Provided an 'Exact Match' checkbox in Advance Search that inserts (") around search keywordb0ccdc480
feat(ci): Add thrift binary to cache95009d35f
feat(project): Add pre-commit and spotlesseabbb0053
feat(svm): Publish SVM codes to Community
Corrections
5e48f83b2
fix(importCDX): Remove view BY_VCS_LOWERCASE and BY_PURL_LOWERCASEe94d9c729
fix(Moderation): Fix bug could not open Release and Component moderation request45b317d86
fix(rest): adding additional fields to rest response for linked projects.4e329b464
fix(license): Update Response api for single license and Add rest-docs api create licensed261f70e5
fix(rest): Added new endpoint for LicenseType in admin tab41d735f9a
fix(package): Can't link project to package1debd1e2c
fix(REST):Get Component failing for names with space521835e38
fix(UI) : Added code to import the upload license in admin tabf748c7cba
fix(package): Create package by API can't link releaseeb7efb3f9
fix(rest): create new endpoint for import OSADL information in admin tab.23242daaf
fix(importCDX): Resolved unnecessary update of component fields976f0ffeb
fix(rest): Added new rest endpoint for upload license in admin tab.fbd924cdd
fix(Package): Can't create a new Package by API08962f93c
fix(rest): New endpoint to download archive files in admin pagef49e6d372
fix(db): clean-up closed moderation requests.c0dbccfd5
fix(lar): Remove old lar files that are usable only for old releases67f8d9f5a
fix(OAuthClient): Fix Can't show OAuth Client pagede67119ae
fix(rest): create new endpoint for import spdx information in admin tabc2a9ee24a
fix(GUI): Fix edit dependency network GUI broken91b768595
fix(rest): Removed the copyright text from RESTAPI docs9d37c4993
fix(rest) : Modifications to improve GET result speed3bf53a1a3
fix(docker): Use the recommend fix fro Liferay x Java5a1ba6145
fix(UI): Added code to load moderation documents in request tab5fcb2b303
fix(sw360Build): build failing because of invalid CEN header7c8f8d24b
fix(rest):new endpoint to delete all license information in admin tab9f7859184
fix(lucene): Use old javax.servlet5f1e3d0ce
fix(OSADL): Add missing obligation rulesb70be52a6
fix(rest): API create component's businessUnit is always set as the user's departmentec4c39e06
fix(doc): remove merge conflict notation7b0938a6b
fix(Export): component.visibility.restriction.enabled option works incorrectly with the Export feature in Cyclone DXc0df9334d
fix(Rest): Allowing search for components without encoding475b4b437
fix(UI):word correction of Initial use scan in attachment typef29de2b1c
fix(rest): show linked project in project summay tabf237ecdb6
fix(Rest): Allowing search for externalIds without encoding5cdd364eb
fix(rest): fix test rest api of componentded850d7c
fix(UI): Sorting release verions in drop down menu when inspecting component.c4079d9a0
fix(Rest): Add clearing information in release response04c64a580
fix(rest): Missing moderators field when creating component using API9d79b2896
fix(rest): Added endpoint url for summary and administration page info81b6ca3a7
fix(readme): Add Information of python2 to python3 change when running file migration scriptsb02f90ec2
fix(update): Update the migration readme file3f7349f78
fix(db): Data Quality and reduction of storage.42ffce89d
fix(test): Add missing test depsb6303eccc
fix(deps): Normalize spring-web and spring-boot versionsbada732d8
fix(rest): Add Description field for myProjects and myComponents in homepage.19325b333
fix(lucene): Restore original portlet naming and configse3df30e53
fix(docker): Restore document_properties volumeed87dde0b
fix(docker): Enable cache deps downloads in volume5ce0d0788
fix(license): Fix attachment type when importing SBOM262d0cad6
fix(EditCR): Not able to edit CR2bcb6185e
fix(docker): Remove clucene buildbd39f4fa5
fix(sw360): Add sw360 adapt patch by default53236b590
feat(libs): Add couchdb-lucene as third party9811edf59
fix(update): Updating sw360.propertiy file is missing when using SPDX Document Tabe1dd33f43
fix(rest): added endpoint for release subscriptions6479d8894
fix(libs): Normalize json versionsc2844e30c
fix(deps): Revert httpcore and fix httpcore and spring-bootd4e4ac764
fix(deps): Update to current httpcore5 release96387f9c7
fix(cache): Key was invalid due file not exists and hash attempt fail43a07df64
fix(ci): Cache now use the right namingb42ea4fd3
fix(versions): Normalize javax.activation version61c0a1b7c
fix(docker): Remove couchdb-clucene from the slim jarsfdbc8c360
fix(docker): Adjust config defaultsc923fa847
fix(component_gui): Can not load component detail page with long additional data textd8b9d77f6
fix(UserSearch) : Modified the user search operation (#1858)b54169f09
fix(projectExporter): Added Project visibility in project exporter spreadsheet8c454efb6
fix(config): Couchdb configs not like double commasb7d2f7a46
fix(docker): Update docker-compose.yml470b70788
fix(docker): Move to the new Github org2a9bffa4f
fix(rest): componentType field will show when allDetails true in release59ebfdcf0
fix(UI): Attachments tab not loading in UIf81243c40
fix(docker): Fix couchdb default setting48f688e1b
fix(docker): Change maven version from 3.8.7 to 3.8.8cd4293f97
fix(api): deletion project returns 500 error and API doc of link release to release makes ambiguousdd6f60218
fix(rest): disable URI encoding in search by external ids in releaseaecc19141
fix(rest): endpoint api/projects does not return all projects5514b4e38
fix(language): Fix the properties file and add some other needed files for Chinese language support3ff6f65bd
fix(rest): Added endpoint for mysubscriptions for componentd6da8a919
fix(rest): Added endpoint for release subscriptions2a0395256
fix(ProjectUI):External Id not visible in Vulnerability Tracking Statusc596d6094
fix(vulnerability): apache commons-text vulnerability CVE-2022-42889 #1864949288618
fix(project): Update Apache commons-text27d5fc011
fix(db): Deactivate email notification of user not belonging to a domain.1af7ecb1a
fix(LiferaySetup):Website not loading after removing BannerMessage Field63e2fef1d
fix(rest): Api endpoint /components/usedBy returns 500 when component not have any release.e66363183
fix(UI): Error when creating/editing duplicate project/component/releasec28bac8e8
fix(ui): support Vietnamese language in Obligation page2d20226e7
fix(Script): Modified script such that it removes trailing and leading whitespaces of components and releases and additonally link releases of duplicate components3b7269f6d
fix(vulnerability): Script to repair release vulnearability relations92b18eaaf
fix(UI): Added EnableSVM field in project exportspreadsheet9f277825b
fix(attachmentUploadModal):Progress bar will be visible only after clicking on the upload button0a59109e9
fix(rest): Reuse centrally created thrift client92f3c42f0
fix(pre-commit): Do not run clean/build3cc8b6293
fix(ci) : Change maven version from 3.8.7 to 3.8.727e14e70b
fix(UI) : Added Created on in project export799d2f789
fix(UI): ISR which will make the SW360 Release status as Scan Available09c126967
fix(UI): unset few field while create a duplicate in project and component5d9c3024b
fix(UI):remove deactivated users from moderators list790c7ae9d
Fix(REST): Add COTS details information when fetch a single release that has component type COTS3cd88e009
Fix(Search): Fix bug can not show result with special character and can not search Obligation776c9b3ff
Fix(Rest): Add more information in get components response (support New GUI)ce6f9e616
Fix(Project): Can't disable CR based on Japanese groupd80822818
Fix(Project GUI): Fix bug missing obligation text when change status or comment of component, project, organisation obligation in project edit67dff9e27
Fix (REST): Fix bug do not set businessUnit automatically when create component. Get all components always return visibility EVERYONE.b6bfa4258
Fix(REST): Fix bug update project without vendor information will remove vendor of project
Infrastructure
265fb1953
ci(fix): Ignore requirements.txt files in testForLicenseHeaders6be2c6f79
build(deps): bump org.json:json from 20230227 to 20231013d630785b1
ci(fix): Missing code checkout on clean workflow0b713d8af
refactor(docker): Improve docker build and deployment9f71e11a7
docs(openapi): add OpenAPI doc for Obligation, Package and Reportc315c0b7a
docs(openapi): add OpenAPI doc for License and Moderation8194286af
docs(openapi): add OpenAPI doc for ComponentController05a27600a
Update build_and_test.yml5410eefc5
Update README.md606d9b353
Update README_DOCKER.md1a534db4d
docs(openapi): add docs for attachment98e10d47f
docs(openapi): add docs for vendor, user, searchac8e9d10f
docs(rest): generate OpenAPI docs for Project561687678
chore(docker): update maven versionc3492c322
chore(deps): bump guava from 31.1-jre to 32.0.0-jrea9821a634
chore(thrift): Prevent datahandler recompile all the times1d15e7741
chore(deps): Update thrift versionf5c86b9d9
chore(deps): bump jose4j from 0.7.9 to 0.9.3 in /rest/resource-server1d3cd248b
chore(rest): Making endpoints configurablecd6d5cfed
ci(cache): Give GH_ACTIONS permissions to reach cache21833c85c
ci(cache): Give GH_ACTIONS permissions to reach cachebaaa882f8
ci(docker): Improve cache mechanismae2b667f7
ci(secrets): Fix the new secrets loading mechanism651c67680
ci(cache): Fix thrift cache missf6d40b3e6
ci(project): Update pre-commit and ci hooks5081686ca
chore(action): Cache maven dependencies8937ec88b
Update(Vulnerability): Improve the function of API to delete vulnerability and relation of vulnerability with releaseb41273dec
chore(migration) Avoid null pointer on script 048_add_component_businessunit.pya49191fb7
upd(ci): Reduce the intermediary docker builds for Midnight daily