Skip to content

Releases: advanced-security/component-detection-dependency-submission-action

v0.1.3

09 Mar 18:35
b876b8c

Choose a tag to compare

v0.1.3 Pre-release
Pre-release

What's Changed

  • Update component detection action version to 0.1.1 by @felickz in #156
  • Bump lodash from 4.17.21 to 4.17.23 in /test/nested in the npm_and_yarn group across 1 directory by @dependabot[bot] in #157
  • Bump tar from 7.5.4 to 7.5.6 in the npm-dependencies group by @dependabot[bot] in #158
  • Fix ESM compatibility for @actions/core v3 and @actions/github v9 by @Copilot in #163
  • Bump the npm-dependencies group with 4 updates by @dependabot[bot] in #162
  • Bump tar from 7.5.4 to 7.5.7 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #159
  • Revise README for workflows and detector options that are EnableIfDefaultOff by @felickz in #161
  • Bump the npm-dependencies group across 1 directory with 4 updates by @dependabot[bot] in #165
  • Bump tar from 7.5.7 to 7.5.8 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #167
  • Bump tar from 7.5.9 to 7.5.10 by @dependabot[bot] in #174
  • Bump actions/upload-artifact from 6 to 7 in the actions-dependencies group by @dependabot[bot] in #172
  • Bump eslint from 10.0.0 to 10.0.2 in the npm-dependencies group by @dependabot[bot] in #173
  • Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in #170
  • Bump minimatch from 3.1.2 to 3.1.5 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #171
  • Bump tar from 7.5.8 to 7.5.10 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #177
  • Bump actions/setup-node from 6.2.0 to 6.3.0 in the actions-dependencies group by @dependabot[bot] in #175
  • Bump the npm-dependencies group with 2 updates by @dependabot[bot] in #176

Full Changelog: v0.1.1...v0.1.3

v0.1.2

06 Mar 18:34
48ae137

Choose a tag to compare

v0.1.2 Pre-release
Pre-release

What's Changed

  • Update component detection action version to 0.1.1 by @felickz in #156
  • Bump lodash from 4.17.21 to 4.17.23 in /test/nested in the npm_and_yarn group across 1 directory by @dependabot[bot] in #157
  • Bump tar from 7.5.4 to 7.5.6 in the npm-dependencies group by @dependabot[bot] in #158
  • Fix ESM compatibility for @actions/core v3 and @actions/github v9 by @Copilot in #163
  • Bump the npm-dependencies group with 4 updates by @dependabot[bot] in #162
  • Bump tar from 7.5.4 to 7.5.7 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #159
  • Revise README for workflows and detector options that are EnableIfDefaultOff by @felickz in #161
  • Bump the npm-dependencies group across 1 directory with 4 updates by @dependabot[bot] in #165
  • Bump tar from 7.5.7 to 7.5.8 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #167
  • Bump tar from 7.5.9 to 7.5.10 by @dependabot[bot] in #174
  • Bump actions/upload-artifact from 6 to 7 in the actions-dependencies group by @dependabot[bot] in #172
  • Bump eslint from 10.0.0 to 10.0.2 in the npm-dependencies group by @dependabot[bot] in #173
  • Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in #170
  • Bump minimatch from 3.1.2 to 3.1.5 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #171

Full Changelog: v0.1.1...v0.1.2

v0.1.1

21 Jan 21:23
9c110eb

Choose a tag to compare

What's Changed

  • Update README to have latest version by @GeekMasher in #131
  • Bump js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #141
  • Bump js-yaml from 3.14.1 to 3.14.2 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #142
  • Bump brace-expansion from 1.1.11 to 1.1.12 by @dependabot[bot] in #140
  • Unescape the locationsFoundAt paths by @lxop in #137
  • Bump the actions-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #138
  • Bump the npm-dependencies group across 1 directory with 13 updates by @dependabot[bot] in #139
  • Fix build failure from deprecated @types/glob package by @Copilot in #149
  • Bump the npm-dependencies group across 1 directory with 6 updates by @dependabot[bot] in #148
  • Bump tar from 6.2.1 to 7.5.3 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #150
  • Bump tar from 7.5.2 to 7.5.3 by @dependabot[bot] in #151
  • Bump @babel/preset-env from 7.28.5 to 7.28.6 in the npm-dependencies group by @dependabot[bot] in #153
  • Bump the actions-dependencies group with 2 updates by @dependabot[bot] in #152
  • Bump tar from 7.5.3 to 7.5.4 by @dependabot[bot] in #154
  • Bump tar from 7.5.3 to 7.5.4 in /test in the npm_and_yarn group across 1 directory by @dependabot[bot] in #155

New Contributors

  • @GeekMasher made their first contribution in #131
  • @lxop made their first contribution in #137
  • @Copilot made their first contribution in #149

Full Changelog: v0.1.0...v0.1.1

v0.1.0

09 Jul 13:47
d433c2f

Choose a tag to compare

What's Changed

Full Changelog: v0.0.7...v0.1.0

v0.0.7

02 Jul 20:10
64db6d9

Choose a tag to compare

What's Changed

  • Add DetectorCategories input So we can run by ecosystem by @ljones140 in #117
  • Add Snapshot inputs by @ljones140 in #118
  • Fix Direct Dependencies Marked as Indirect by @ljones140 in #120
  • Use explicitlyReferencedComponentIds to determine which packages are direct by @juxtin in #121
  • Exclude self from referrers in transitive path calculation by @juxtin in #121

New Contributors

Full Changelog: v0.0.6...v0.0.7

v0.0.6

14 May 19:29
1874d0f

Choose a tag to compare

  • Handle failure scenario for recent component detection updates with DotNet detector not reporting a package url for all dependencies see: #107

  • Maintenance update to newer dependency versions - fixes unit tests and linter after node 20 upgrade.

What's Changed

  • Bump the npm-dependencies group across 1 directory with 9 updates by @dependabot in #111
  • Potential fix for alerts: Workflow does not contain permissions by @felickz in #112
  • Bump actions/setup-node from 4.2.0 to 4.4.0 in the actions-dependencies group by @dependabot in #105
  • Improve missing package URL handling by @felickz in #109

Full Changelog: v0.0.5...v0.0.6

Updated to node20 and newer versions of dependencies

07 Apr 16:21
7f8a022

Choose a tag to compare

Maintenance update, to Node 20 and newer dependency versions.

Added snapshot correlator Action input.

What's Changed

  • Bump the actions-dependencies group with 4 updates by @dependabot in #73
  • Remove CodeQL config since we use Default Setup by @brrygrdn in #100
  • Remove the workflow not the config by @brrygrdn in #101
  • Add snapshot correlator action input by @gitulisca in #102
  • Bump the npm-dependencies group across 1 directory with 13 updates by @dependabot in #98
  • Bump actions/setup-node from 4.1.0 to 4.2.0 in the actions-dependencies group by @dependabot in #95
  • Bump the npm_and_yarn group with 2 updates by @dependabot in #93
  • Bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot in #92
  • Bump the npm_and_yarn group across 1 directory with 5 updates by @dependabot in #103

New Contributors

Full Changelog: v0.0.4...v0.0.5

v0.0.4

27 Nov 13:52
bcc5ca8

Choose a tag to compare

What's Changed

  • Update README.md for v0.0.3 by @juxtin in #71
  • Fix dependabot config and CODEOWNERS by @lseppala in #72
  • Upgrade dependency-submission-toolkit to 2.0.4 by @hmaurer in #82

New Contributors

Full Changelog: v0.0.3...v0.0.4

v0.0.3

30 Sep 18:07
d7bc998

Choose a tag to compare

This is primarily a bugfix release that allows this action to work properly on GHES 3.13.

What's Changed

New Contributors

Full Changelog: v0.0.2...v0.0.3

v0.0.2

11 May 20:58
5a8ce4a

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.0.1...v0.0.2