Releases: git-pkgs/git-pkgs
Releases · git-pkgs/git-pkgs
Release list
v0.19.0
Changelog
- 277fe1e Add --kind flag to diff for filtering by manifest/lockfile (#301)
- 6bcf8d5 Bump Go to 1.26.5 (#315)
- 99a2f7a Bump actions/checkout from 7.0.0 to 7.0.1 (#295)
- a2ec4a2 Bump git-pkgs dependencies (#324)
- 5ab721d Bump github.com/git-pkgs/manifests to v0.7.0 (#302)
- 11e97db Bump github.com/git-pkgs/manifests to v0.7.1 (#319)
- 115e7e6 Bump github.com/go-git/go-billy/v5 from 5.9.0 to 5.9.1 (#296)
- 584bca5 Bump modernc.org/sqlite from 1.54.0 to 1.55.0 (#297)
- 3a48401 Bump outdated dependencies (#316)
- 6cc7d76 Fix example cmd to scan for vulns in README (#320)
- 08bf434 Fix vulnerability ref resolution (#300)
- 28cea76 Normalize cached license metadata (#323)
- dfed9ef Record parser-reported manifest kind in on-demand snapshots (#318)
- aeb17d4 Refactor licenses command (#321)
- 890970c Refactor where command (#322)
- 2a49764 diff: report declared license changes (#314)
- 71306cd sbom: populate root component license from manifests (#310)
v0.18.2
v0.18.1
v0.18.0
Changelog
- 2a373da Add configurable ecosystem allow/deny filters (#262)
- eba05e3 Add offline license metadata caching support (#273)
- 9f0effa Add provenance metadata command (#244)
- 1072fd6 Add replace command for dependency redirects (#236)
- 7b0b698 Bump actions/setup-go from 6.4.0 to 6.5.0 (#264)
- 36745b4 Bump dependencies before release (#282)
- 72a8b84 Bump github.com/git-pkgs/enrichment from 0.4.1 to 0.5.0 (#278)
- 400dca3 Bump github.com/git-pkgs/managers from 0.10.0 to 0.10.1 (#266)
- 31a7a86 Bump github.com/git-pkgs/manifests from 0.5.1 to 0.6.0 (#267)
- a970a7a Bump github.com/git-pkgs/purl from 0.1.13 to 0.1.14 (#279)
- 83783ae Bump github.com/git-pkgs/sbom from 0.1.2 to 0.1.3 (#280)
- 7193a0f Bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#269)
- 193c850 Bump golang.org/x/net from 0.54.0 to 0.55.0 (#270)
- 6805bef Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#268)
- c77a83b Fix schema SQL index output (#265)
- ea95e7f Use SARIF module for vulns output (#271)
- 0b14403 feat: cache registry integrity lookups (#274)
- 53acfbf fix: handle unsupported OSV ecosystems (#277)
- 80b4b46 fix: preserve json output for empty results (#257)
- 4ad0012 fix: preserve where context line numbers (#263)
- a30ca52 fix: reject unsupported output formats (#251)
v0.17.0
Changelog
- d116b5f Add --exclude-bots filtering (#211)
- 693e53e Add JSON help output (#237)
- b9235b4 Add dependency freshness metrics (#212)
- 9a7da00 Add dependency funding info command (#214)
- 9549f0c Add dependency maintainer data command (#215)
- e4f93b1 Add deprecated dependency warnings (#213)
- 564e354 Add diff summary stat mode (#216)
- 552e906 Add ecosyste.ms identity options and friendlier lookup errors (#245)
- 88af619 Add ecosystem matching mode for dependency diff (#230)
- 76bb7b1 Add license drift detection (#220)
- c98db00 Add maintenance health scores (#221)
- faaab47 Add notes import command (#229)
- 1282e92 Bump actions/checkout from 6.0.2 to 6.0.3 (#232)
- f21cd00 Bump actions/checkout from 6.0.3 to 7.0.0 (#249)
- dcad319 Bump git-pkgs and third-party dependencies (#255)
- cb317b4 Bump github.com/git-pkgs/manifests from 0.4.3 to 0.5.0 (#227)
- 49bdd97 Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 (#219)
- 6606163 Bump modernc.org/sqlite from 1.50.1 to 1.51.0 (#228)
- 2429ac3 Bump modernc.org/sqlite from 1.51.0 to 1.52.0 (#238)
- 7174987 Centralize user agent string in cmd.userAgent (#225)
- ea8f727 Fix urls command using version ranges and wrong name from db lookup (#240)
- 633d302 Recover from panics in library goroutines (#235)
- 36a6072 Set git-pkgs user agent on registries calls (#224)
- 8117f79 Skip reindex during rebase and add post-rewrite hook (#210)
- 2abff90 Sort diff-driver output by scope as final tiebreaker (#218)
- 5c511c7 Treat Maven manifest versions as resolved (#226)
- ef45ca2 fix(list): emit [] instead of null for empty JSON list results (#208)
- 04f5ad0 fix: avoid partial package matches in where (#246)
- ff56085 fix: group SearchDependencies CTEs by ecosystem (#250)
- 76063f7 fix: include all schema tables in info counts (#247)
- cd00b9a fix: preserve json output for empty results (#248)
- 3b0e527 refactor: optimize first_added sqlite query (#252)
v0.16.2
v0.16.1
Changelog
- c92f2c1 Bump git-pkgs deps for v0.16.1 (#204)
- 33f5ba5 Bump git-pkgs/registries to v0.6.0 (#198)
- 5ac11fe Bump github.com/git-pkgs/sbom from 0.1.1 to 0.1.2 (#202)
- 3104e84 Bump github.com/git-pkgs/vers from 0.2.5 to 0.2.6 (#201)
- 1bb2c77 Bump modernc.org/sqlite from 1.50.0 to 1.50.1 (#200)
- 64927d1 Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#199)
- 3dcb58e Set goconst to ignore test files (#203)
v0.16.0
Changelog
- a5843fd Bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22 (#192)
- 85f4907 Bump go-git to v5.19.0 and go-billy to v5.9.0 (#197)
- f187c2f Bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 (#191)
- 970917f Fall back to git rev-parse when go-git cannot resolve a revision (#193)
- d2731eb Include dependency type in diff driver and show output (#166)
- 08425d3 Read alternate object stores when opening a repository (#194)
- 7cfaa99 Read refs and objects from linked worktrees (#196)
- 0edfa26 Update diff-driver README example to include scope
v0.15.4
Changelog
- 3eb8925 Bump git-pkgs deps to latest patch releases
- 85b954d Bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0
- 4690408 Bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0
- fc24f9d Bump modernc.org/sqlite from 1.48.2 to 1.49.1
- 4bf5074 Bump sigstore/cosign-installer from 3.10.0 to 4.1.1
- 5b1a216 Prevent where command from following symlinks out of repo (#188)
- a969d90 Strip control characters from externally sourced strings before TTY output (#189)
- cff4bda Use cosign v4 bundle format for release signing
- 3e37b25 sbom: emit via github.com/git-pkgs/sbom
v0.15.3
Changelog
- c68837c Bump actions/setup-go from 6.3.0 to 6.4.0
- ee16ee0 Bump direct dependencies before release
- e8aa834 Bump github.com/git-pkgs/enrichment from 0.2.1 to 0.2.2
- 1de0e0d Bump github.com/git-pkgs/gitignore from 1.1.0 to 1.1.1
- 37920b4 Bump github.com/go-git/go-git/v5 from 5.17.0 to 5.17.2
- b70ecc1 Bump modernc.org/sqlite from 1.47.0 to 1.48.0
- 9d7f3ba Scope working-dir manifest reads with os.Root
- 0a82984 Sign release checksums with cosign keyless