Skip to content

Releases: jeremylong/DependencyCheck

Version 6.2.1

08 Jun 12:17
Compare
Choose a tag to compare

Changes in this Release

  • Resolved issue with database connections introduced in 6.2.0 (see #3416).
  • See the full listing of changes.

Version 6.2.0

29 May 12:24
Compare
Choose a tag to compare

Changes in this Release

  • Added an experimental Perl CPAN analyzer #3378
  • Improved database performance #3206
  • The archive analyzer now extracts files from RPM archives #3226
  • Ensure ordered output in reports #3243
  • Several minor bug fixes and updates to reduce false positives
  • See the full listing of changes.

Version 6.1.6

29 Apr 10:25
Compare
Choose a tag to compare

Changes in this Release

  • Resolved issue with Sarif report (#3243)
  • Resolved issue with Ruby Bundle Audit (#3256)
  • Several minor bug fixes and updates to reduce false positives
  • See the full listing of changes.

Version 6.1.5

31 Mar 12:11
Compare
Choose a tag to compare

Changes in this Release

  • Fixed a second NPE introduced in 6.1.3 (see #3246)
  • See the full listing of changes.

Version 6.1.4

30 Mar 12:48
Compare
Choose a tag to compare

Changes in this Release

  • Fixed an NPE introduced in 6.1.3 (see #3212)
  • See the full listing of changes.

Version 6.1.3

22 Mar 11:57
Compare
Choose a tag to compare

Changes in this Release

  • Modified the new CPE matching strategy to be more performant (#3207)
  • Upgraded a vulnerable dependency (velocity-engine-core/CVE-2020-13936) (#3205)
  • See the full listing of changes.

Version 6.1.2

08 Mar 12:15
Compare
Choose a tag to compare

Changes in this Release

  • Fixed a bug in the Sarif report generation.
  • Fixed a bug with the Ant task not being able to read the dependency-check properties file in 6.1.1.
  • Added a new CPE matching strategy to reduce false negatives.
  • CLI and Ant task will no longer be published to bintray.
  • Several minor bug fixes.
  • See the full listing of changes.

Version 6.1.1

13 Feb 12:29
Compare
Choose a tag to compare

Changes in this Release

  • Added missing configuration options for yarn and msbuild.
  • Several bug fixes.
  • See the full listing of changes.

Version 6.1.0

27 Jan 12:06
Compare
Choose a tag to compare

Changes in this Release

  • Added SARIF file format per #3081.
  • Added support for Yarn per #3063.
  • False positive reduction and minor bug fixes.
  • See the full listing of changes.

Version 6.0.5

07 Jan 11:21
Compare
Choose a tag to compare

Changes in this Release

  • Added missing command line arguments per #3028 and #3035.
  • False positive reduction and minor bug fixes.
  • See the full listing of changes.