v0.4.0-alpha.1

✨ Features

• LFX: Extend use-case of detecting deprecated Kubernetes API usage by @Parthiba-Hazra in #441
• Refactor generic-external-provider by @pranavgaikwad in #512
• Adding ability to output spec data by @shawn-hurley in #516
• stop building the project when we don't need anything else by @shawn-hurley in #534
• adding ability to run dep command during analysis command by @shawn-hurley in #531
• Don't use full file paths for violations by @eemcmullan in #548
• dotnet external provider by @djzager in #539
• Adding output/template context to open api spec. by @shawn-hurley in #549
• Java provider as external provider by @eemcmullan in #572
• Add dockerfiles for providers and run the demo using the external providers in a Pod by @pranavgaikwad in #579
• adding reflection client to determine what provider provides by @shawn-hurley in #586
• make analyzer-lsp available in windows container by @djzager in #590

🐛 Bug Fixes

• recover from panic in xml query by @pranavgaikwad in #456
• Use window of correct size in presence of newlines to grab content from xml files by @pranavgaikwad in #461
• Try pom packaging if jar packaging fails by @jmle in #483
• respect match-all label values by @pranavgaikwad in #499
• log yaml parsing errors when parsing rules by @Vickysomtee in #509
• Fix empty code snippet in XML when the match is a key of the node, not an inner value by @pranavgaikwad in #504
• Fix duplicated conditions when AS exists by @jmle in #515
• Write errors to stderr by @eemcmullan in #505
• exit after showing help by @Vickysomtee in #468
• return code locations in generic provider by @pranavgaikwad in #522
• fixing logs with new command format, adding new format to dep command by @shawn-hurley in #523
• improve logs in parser by @pranavgaikwad in #524
• improve decompile performance by @pranavgaikwad in #530
• Retrieval of dependencies in analysis, is for all deps by @shawn-hurley in #536
• Fix file URI prefix for JARs and do not move found JARs so dependency CLI can still find them by @pranavgaikwad in #543
• handle correct structs for protobof init calls by @shawn-hurley in #541
• Update more errors to stderr by @eemcmullan in #546
• Adding parsing of non WEB-INF classes as dependencies by @shawn-hurley in #553
• Fixing location of provided programs in the base image by @shawn-hurley in #556
• Update indirect Dependency location by @aufi in #557
• fix demo output by @pranavgaikwad in #560
• Don't use full konveyor.Dep for dependency Extras by @eemcmullan in #566
• Filename() panics when non-file URI is passed by @pranavgaikwad in #575
• remove json marshaling that's not working by @pranavgaikwad in #577
• when no dependencies are found do not return an error by @pranavgaikwad in #583
• fixing up makefile and builds to always use in tree analyzer-ls… by @shawn-hurley in #589
• fix a panic when dep resolver returns nil by @pranavgaikwad in #595
• explain volume mount labeling for podman by @djzager in #596

New Contributors

• @jmontleon made their first contribution in #473
• @UtkarshUmre made their first contribution in #493
• @Vickysomtee made their first contribution in #509
• @NeerajNagure made their first contribution in #585

Full Changelog: v0.3.2...v0.4.0-alpha.1

v0.3.2

🐛 Bug Fixes

• Filename() panics when non-file URI is passed (#575) by @konveyor-ci-bot in #576
• remove json marshaling that's not working (#577) by @konveyor-ci-bot in #578
• when no dependencies are found do not return an error (#583) by @pranavgaikwad in #584

New Contributors

• @konveyor-ci-bot made their first contribution in #576

Full Changelog: v0.3.1...v0.3.2

v0.3.1

✨ Features

• Cherry-pick - Don't use full file paths for violations by @eemcmullan in #558

🐛 Bug Fixes

• respect match-all label values (#499) by @github-actions in #502
• CP 505: Write errors to stderr by @eemcmullan in #518
• MTA-2243: Update indirect Dependency location by @pranavgaikwad in #571

Full Changelog: v0.3.0...v0.3.1

v0.3.0

🐛 Bug Fixes

• recover from panic in xml query (#456) by @github-actions in #458
• Use window of correct size in presence of newlines to grab content from xml files (#461) by @github-actions in #462

New Contributors

• @github-actions made their first contribution in #458

Full Changelog: v0.3.0-rc.3...v0.3.0

v0.3.0-rc.4

🐛 Bug Fixes

• recover from panic in xml query (#456) by @github-actions in #458
• Use window of correct size in presence of newlines to grab content from xml files (#461) by @github-actions in #462

New Contributors

• @github-actions made their first contribution in #458

Full Changelog: v0.3.0-rc.3...v0.3.0-rc.4

v0.3.0-rc.3

🐛 Bug Fixes

• Handle exact package match in incident selector by @fabianvf in #454

Full Changelog: v0.3.0-rc.2...v0.3.0-rc.3

v0.3.0-rc.2

✨ Features

• Add XMLPublicID condition to builtin provider by @aufi in #306

🐛 Bug Fixes

• fixing up multimodule pom in examples by @shawn-hurley in #447
• Adding internal provider to provide the package for a given match. by @shawn-hurley in #448
• Fix up the demo output with the package output by @shawn-hurley in #449
• Handle cases when copyright and license are at top of file by @shawn-hurley in #451

New Contributors

• @aufi made their first contribution in #306

Full Changelog: v0.3.0-rc.1...v0.3.0-rc.2

v0.3.0-rc.1

✨ Features

• adding incident label selector CLI option by @shawn-hurley in #445

🐛 Bug Fixes

• using golang for filecontent searching" by @shawn-hurley in #443
• fixing panic when the deferenced slice variable is nil by @shawn-hurley in #444

Full Changelog: v0.3.0-beta.3...v0.3.0-rc.1

v0.3.0-beta.3

✨ Features

• add dependency location resolver and get code locations for XML, JSON files by @pranavgaikwad in #412

🐛 Bug Fixes

• Fix source decompilation by @jmle in #409
• Also download deps prior to downloading sources by @pranavgaikwad in #414
• Update generic + golang provider deps by @dymurray in #415
• Fix golang provider build by @dymurray in #417
• Use qaware's dependency plugin to avoid all issues related to maven dependency plugin by @jmle in #426
• #390 Workaround to prevent SEGV when POM file has no properties by @ascheman in #425
• Only analyze dependencies if running on source-only mode by @jmle in #429
• using golang for filecontent searching by @shawn-hurley in #430
• Implement sorting on structs when marshaling by @JonahSussman in #431
• Analyze all (yet known) formats of Maven dependency graph elements by @ascheman in #437
• Keep rule total in output logging by @eemcmullan in #435
• Test cases for #390 by @ascheman in #427
• Do not create tags for filtered out incidents by @pranavgaikwad in #438

New Contributors

• @dymurray made their first contribution in #415
• @ascheman made their first contribution in #425

Full Changelog: v0.3.0-beta.2...v0.3.0-beta.3

v0.3.0-beta.2

🐛 Bug Fixes

• Set xmx value on JVM to avoid OOMKilled by @pranavgaikwad in #388
• Fix dependency handling by @jmle in #385
• Fix compile step by @jmle in #397
• Fix test output by @jmle in #402

Full Changelog: v0.3.0-beta.1.2...v0.3.0-beta.2