You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Nuget Inspector now supports the exclusion of user-specified dependency types from the Bill of Materials (BOM) via the [company_name][solution_name] property --detect.nuget.dependency.types.excluded. See the [detect.nuget.dependency.types.excluded](properties/detectors/nuget.md#nuget-dependency-types-excluded) property for more information.
8
-
* A new detector for Python packages has been added. The PIP Requirements File Parse is a buildless detector that acts as a LOW accuracy fallback for the PIP Native Inspector. This detector is triggered for PIP projects that contain one or more requirements.txt files if [company_name][solution_name] does not have access to a PIP executable in the environment where the scan is run.
9
-
* See [PIP Requirements File Parse](packagemgrs/python.md).
10
-
* To improve Yarn detector performance a new parameter is now available. The `--detect.yarn.ignore.all.workspaces` parameter enables the Yarn detector to build the dependency graph without analysis of workspaces. The default setting for this parameter is false and must be set to true to be enabled. This property ignores other Yarn detector properties if set.
11
-
* See [Yarn support](packagemgrs/yarn.md).
12
-
* Support for BitBake is now extended to 2.6 (Yocto 4.3.2).
13
-
* Support for Yarn extended to include Yarn 3 and Yarn 4.
7
+
*
14
8
15
9
### Changed features
16
10
17
-
*Key-value pairs specified as part of the `detect.blackduck.signature.scanner.arguments` property will now replace the values specified elsewhere, rather than act as additions.
11
+
*
18
12
19
13
### Resolved issues
20
14
21
-
* (IDETECT-4155) Improved input validation in Component Location Analysis.
22
-
* (IDETECT-4187) Removed references to 'murex' from test resources.
23
-
* (IDETECT-4207) Fixed Nuget Inspector IndexOutofRangeException for cases of multiple `Directory.Packages.props` files.
24
-
* (IDETECT-3909) Resolved an issue causing ASM8 Error when running Vulnerability Impact Analysis.
15
+
*
25
16
26
17
### Dependency updates
27
18
28
-
* Released and Upgraded Nuget Inspector to version 1.3.0.
29
-
* Released and Upgraded Detect Docker Inspector to version 10.1.1.
Copy file name to clipboardexpand all lines: documentation/src/main/markdown/previousreleasenotes.md
+28
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,34 @@
1
1
<!-- Check the support matrix to determine supported, non-current major version releases -->
2
2
# Release notes for previous supported versions
3
3
4
+
## Version 9.4.0
5
+
6
+
### New features
7
+
8
+
* Nuget Inspector now supports the exclusion of user-specified dependency types from the Bill of Materials (BOM) via the [solution_name] property --detect.nuget.dependency.types.excluded. See the [detect.nuget.dependency.types.excluded](properties/detectors/nuget.md#nuget-dependency-types-excluded) property for more information.
9
+
* A new detector for Python packages has been added. The PIP Requirements File Parse is a buildless detector that acts as a LOW accuracy fallback for the PIP Native Inspector. This detector is triggered for PIP projects that contain one or more requirements.txt files if [solution_name] does not have access to a PIP executable in the environment where the scan is run.
10
+
* See [PIP Requirements File Parse](packagemgrs/python.md).
11
+
* To improve Yarn detector performance a new parameter is now available. The `--detect.yarn.ignore.all.workspaces` parameter enables the Yarn detector to build the dependency graph without analysis of workspaces. The default setting for this parameter is false and must be set to true to be enabled. This property ignores other Yarn detector properties if set.
12
+
* See [Yarn support](packagemgrs/yarn.md).
13
+
* Support for BitBake is now extended to 2.6 (Yocto 4.3.2).
14
+
* Support for Yarn extended to include Yarn 3 and Yarn 4.
15
+
16
+
### Changed features
17
+
18
+
* Key-value pairs specified as part of the `detect.blackduck.signature.scanner.arguments` property will now replace the values specified elsewhere, rather than act as additions.
19
+
20
+
### Resolved issues
21
+
22
+
* (IDETECT-4155) Improved input validation in Component Location Analysis.
23
+
* (IDETECT-4187) Removed references to 'murex' from test resources.
24
+
* (IDETECT-4207) Fixed Nuget Inspector IndexOutofRangeException for cases of multiple `Directory.Packages.props` files.
25
+
* (IDETECT-3909) Resolved an issue causing ASM8 Error when running Vulnerability Impact Analysis.
26
+
27
+
### Dependency updates
28
+
29
+
* Released and Upgraded Nuget Inspector to version 1.3.0.
30
+
* Released and Upgraded Detect Docker Inspector to version 10.1.1.
0 commit comments