What's Changed
Enhancements 🚀
- Show Badge For Inactive Projects by @sahibamittal in #106
- Permission deconstruction by @zprebosnyak-lm in #103
- Port : Add tag management view by @sahibamittal in #107
- Port : Add ability to delete tags and untag projects by @sahibamittal in #112
- Port: Add EPSS score policy condition by @nscuro in #114
- Port : Add
BOM_VALIDATION_FAILED
To Notification Group by @sahibamittal in #116 - Teams Column by @jmayer-lm in #120
- Enable server-side pagination for "Affected Projects" view by @nscuro in #126
- Add maintenance configuration by @nscuro in #129
- Port : Feat/customizable login page by @sahibamittal in #133
- Port : Support inclusion/exclusion of projects from BOM validation with tags by @sahibamittal in #134
- Port : Add "limit to tags" option for alerts by @sahibamittal in #143
- Port : Add ability to test notification publishers by @sahibamittal in #147
- Port : functionality to download component table data as CSV by @sahibamittal in #158
- Port : Rename label for badge enabling switch by @sahibamittal in #155
- Port : Feat/add team selection in create project button by @sahibamittal in #168
- Port :
isLatest
project flag by @sahibamittal in #157 - Port : Confirmation prompt for project deletion by @sahibamittal in #173
- Port : Feat - Systemwide Default Language by @sahibamittal in #172
- Feature : support tagged vulnerabilities in tags tab by @sahibamittal in #195
- Add project inactiveSince timestamp by @sahibamittal in #207
- Port : Improve russian translation by @sahibamittal in #223
- Port: Add support for serving from custom path by @nscuro in #202
- Port : Global Audit View: Policy Violations by @sahibamittal in #171
- Port : Add buttons to add/delete/edit Affected Components of internal vulnerabilities by @sahibamittal in #228
- Remove snapshot notification modal by @nscuro in #235
- Issue 1600 : Add configuration for project retention maintenance by @sahibamittal in #236
- Mirror container images to Docker Hub by @nscuro in #241
- Add occurrences to project components view by @nscuro in #252
- Port: Handle new API key format and generation process by @nscuro in #273
- Update dashboard metrics endpoints for user-selectable timespan by @sahibamittal in #272
- Add roles support by @ashearin in #283
- Issue-1798 : Update pagination type for
teams
by @sahibamittal in #303 - Disable project sorting on metrics fields by @nscuro in #312
Bug Fixes 🐛
- Fix outdated warning when
latestVersion
is empty string by @nscuro in #102 - Fix "affected projects" table not showing all items by @nscuro in #128
- Align permissions of tag views with API server by @nscuro in #149
- Fix invalid
v-permission:or
check by @nscuro in #148 - Quick fix : tags update for internal vulnerabilities by @sahibamittal in #187
- Remove NVD config options that are no longer relevant by @nscuro in #190
- Port: Fix creation of multiple projects without reloading page by @nscuro in #200
- Port: Fix state of sidebar not being saved for non-
SNAPSHOT
versions by @nscuro in #198 - Port: Always display project nodes in dependency graph using name and version by @nscuro in #201
- Port: Fix OIDC users not being displayed in Team view by @nscuro in #199
- Port : Fix breadcrumbs navigation being broken for non-english languages by @sahibamittal in #218
- Port : Fix missing URI encoding of tag names by @sahibamittal in #217
- Port : Fix: "Add Version" Create Button Should Be Inactive Until Version Provided by @sahibamittal in #216
- Port : Fix config update for welcome message by @sahibamittal in #215
- Port : Fix caching issues upon upgrade by @sahibamittal in #220
- Port : Fix tags with special characters breaking the tags table by @sahibamittal in #221
- Port : Fix missing URI encoding for vulnerability IDs by @sahibamittal in #222
- Port : Prefill Team input in Create Project dialog by @sahibamittal in #226
- Port : Fix affected projects tab when switching between vulnerability aliases + Bump dompurify version by @sahibamittal in #227
- Fix loss of permission selection for managed users when switching pages by @nscuro in #230
- Port : Fix NGINX ipv6 listening by @sahibamittal in #233
- Port : Show component properties to users with
VIEW_PORTFOLIO
permission by @sahibamittal in #234 - Fix pagination of teams in portfolio access control view by @nscuro in #306
- Fix multiple error toasts on login without permissions by @sahibamittal in #308
Dependency Updates 🤖
- build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by @dependabot[bot] in #99
- build(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by @dependabot[bot] in #98
- build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0 by @dependabot[bot] in #97
- build(deps): bump docker/login-action from 3.2.0 to 3.3.0 by @dependabot[bot] in #96
- build(deps): bump nginxinc/nginx-unprivileged from
8f14986
tocc042f5
in /docker by @dependabot[bot] in #95 - build(deps): bump nginxinc/nginx-unprivileged from
cc042f5
to050a2d7
in /docker by @dependabot[bot] in #104 - build(deps): bump docker/setup-buildx-action from 3.5.0 to 3.6.1 by @dependabot[bot] in #105
- build(deps): bump nginxinc/nginx-unprivileged from
050a2d7
tobb3225a
in /docker by @dependabot[bot] in #109 - build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot[bot] in #108
- Bump
@cyclonedx/cyclonedx-library
to 6.11.0 by @nscuro in #110 - build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot[bot] in #111
- build(deps): bump docker/build-push-action from 6.5.0 to 6.6.1 by @dependabot[bot] in #115
- build(deps): bump nginxinc/nginx-unprivileged from
bb3225a
tof9abf2e
in /docker by @dependabot[bot] in #117 - build(deps): bump docker/build-push-action from 6.6.1 to 6.7.0 by @dependabot[bot] in #118
- build(deps): bump axios from 1.6.8 to 1.7.4 by @dependabot[bot] in #119
- build(deps): bump nginxinc/nginx-unprivileged from 1.27.0-alpine to 1.27.1-alpine in /docker by @dependabot[bot] in #121
- build(deps): bump nginxinc/nginx-unprivileged from
746a97c
to0065303
in /docker by @dependabot[bot] in #122 - build(deps): bump nginxinc/nginx-unprivileged from
0065303
to313aa05
in /docker by @dependabot[bot] in #125 - build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot[bot] in #124
- build(deps): bump nginxinc/nginx-unprivileged from
313aa05
to16f6d3e
in /docker by @dependabot[bot] in #130 - build(deps): bump nginxinc/nginx-unprivileged from
16f6d3e
toa0e2ed3
in /docker by @dependabot[bot] in #132 - build(deps): bump actions/setup-node from 4.0.3 to 4.0.4 by @dependabot[bot] in #135
- build(deps): bump nginxinc/nginx-unprivileged from
a0e2ed3
tobbfac53
in /docker by @dependabot[bot] in #144 - build(deps): bump nginxinc/nginx-unprivileged from
bbfac53
to5d7b7ca
in /docker by @dependabot[bot] in #145 - build(deps): bump docker/build-push-action from 6.7.0 to 6.9.0 by @dependabot[bot] in #153
- build(deps): bump nginxinc/nginx-unprivileged from
5d7b7ca
toc149247
in /docker by @dependabot[bot] in #154 - build(deps): bump docker/setup-buildx-action from 3.6.1 to 3.7.1 by @dependabot[bot] in #160
- build(deps): bump nginxinc/nginx-unprivileged from 1.27.1-alpine to 1.27.2-alpine in /docker by @dependabot[bot] in #159
- build(deps): bump nginxinc/nginx-unprivileged from
5423958
tocf998f0
in /docker by @dependabot[bot] in #164 - build(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.25.0 by @dependabot[bot] in #163
- build(deps): bump actions/checkout from 4.1.7 to 4.2.1 by @dependabot[bot] in #162
- build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.1 by @dependabot[bot] in #161
- build(deps): bump aquasecurity/trivy-action from 0.25.0 to 0.26.0 by @dependabot[bot] in #167
- build(deps): bump actions/upload-artifact from 4.4.1 to 4.4.2 by @dependabot[bot] in #166
- build(deps): bump aquasecurity/trivy-action from 0.26.0 to 0.28.0 by @dependabot[bot] in #176
- build(deps): bump nginxinc/nginx-unprivileged from
cf998f0
to3377b22
in /docker by @dependabot[bot] in #175 - build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot[bot] in #179
- build(deps): bump nginxinc/nginx-unprivileged from
3377b22
to8096c72
in /docker by @dependabot[bot] in #177 - build(deps): bump actions/upload-artifact from 4.4.2 to 4.4.3 by @dependabot[bot] in #170
- build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0 by @dependabot[bot] in #191
- build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 by @dependabot[bot] in #189
- build(deps): bump actions/setup-node from 4.0.4 to 4.1.0 by @dependabot[bot] in #180
- build(deps): bump nginxinc/nginx-unprivileged from 1.27.2-alpine to 1.27.3-alpine in /docker by @dependabot[bot] in #192
- build(deps): bump docker/build-push-action from 6.10.0 to 6.12.0 by @dependabot[bot] in #213
- build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by @dependabot[bot] in #211
- build(deps): bump docker/setup-qemu-action from 3.2.0 to 3.3.0 by @dependabot[bot] in #208
- build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0 by @dependabot[bot] in #205
- build(deps): bump docker/build-push-action from 6.12.0 to 6.13.0 by @dependabot[bot] in #219
- build(deps): bump actions/setup-node from 4.1.0 to 4.2.0 by @dependabot[bot] in #225
- build(deps): bump nginxinc/nginx-unprivileged from
8d20086
to6097fa6
in /docker by @dependabot[bot] in #194 - build(deps): bump nginxinc/nginx-unprivileged from
6097fa6
to9e7238f
in /docker by @dependabot[bot] in #229 - build(deps): bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @dependabot[bot] in #237
- build(deps): bump docker/setup-qemu-action from 3.3.0 to 3.4.0 by @dependabot[bot] in #238
- build(deps): bump docker/build-push-action from 6.13.0 to 6.14.0 by @dependabot[bot] in #242
- build(deps): bump nginxinc/nginx-unprivileged from 1.27.3-alpine to 1.27.4-alpine in /docker by @dependabot[bot] in #239
- build(deps): bump nginxinc/nginx-unprivileged from
c0b9a4e
to6c45695
in /docker by @dependabot[bot] in #244 - build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @dependabot[bot] in #243
- build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @dependabot[bot] in #250
- build(deps): bump docker/build-push-action from 6.14.0 to 6.15.0 by @dependabot[bot] in #249
- build(deps): bump docker/setup-qemu-action from 3.4.0 to 3.5.0 by @dependabot[bot] in #248
- build(deps): bump actions/download-artifact from 4.1.8 to 4.1.9 by @dependabot[bot] in #246
- build(deps): bump nginxinc/nginx-unprivileged from
6c45695
to3578209
in /docker by @dependabot[bot] in #245 - build(deps): bump docker/setup-qemu-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #251
- build(deps): bump nginxinc/nginx-unprivileged from
3578209
toe17fc0d
in /docker by @dependabot[bot] in #253 - build(deps): bump nginxinc/nginx-unprivileged from
e17fc0d
to73ee335
in /docker by @dependabot[bot] in #254 - build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by @dependabot[bot] in #256
- build(deps): bump docker/login-action from 3.3.0 to 3.4.0 by @dependabot[bot] in #255
- build(deps): bump axios from 1.7.4 to 1.8.3 by @dependabot[bot] in #257
- build(deps): bump nginxinc/nginx-unprivileged from
73ee335
to40f9fdd
in /docker by @dependabot[bot] in #259 - build(deps): bump actions/setup-node from 4.2.0 to 4.3.0 by @dependabot[bot] in #258
- build(deps): bump actions/download-artifact from 4.1.9 to 4.2.0 by @dependabot[bot] in #260
- build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @dependabot[bot] in #262
- build(deps): bump actions/download-artifact from 4.2.0 to 4.2.1 by @dependabot[bot] in #261
- build(deps): bump nginxinc/nginx-unprivileged from
40f9fdd
toe234d4f
in /docker by @dependabot[bot] in #263 - build(deps): bump nginxinc/nginx-unprivileged from
e234d4f
toe246f83
in /docker by @dependabot[bot] in #264 - build(deps): bump nginxinc/nginx-unprivileged from
e246f83
tod07336b
in /docker by @dependabot[bot] in #265 - build(deps): bump nginxinc/nginx-unprivileged from
d07336b
tod43566a
in /docker by @dependabot[bot] in #269 - build(deps): bump nginxinc/nginx-unprivileged from
d43566a
toa1b807b
in /docker by @dependabot[bot] in #270 - build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in #271
- build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in #276
- build(deps): bump nginxinc/nginx-unprivileged from 1.27.4-alpine@sha256:a1b807b9dd454a969fbb4c3efc8d3e579e13f109e8de0690065758a0e27f7c89 to sha256:1c1d30bc587c2351abb5457f3bbb2567074738cffafccf0603c7934cca574b1f in /docker by @dependabot[bot] in #278
- build(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 by @dependabot[bot] in #275
- build(deps): bump nginxinc/nginx-unprivileged from
2d0a116
to9d092c1
in /docker by @dependabot[bot] in #280 - build(deps): bump nginxinc/nginx-unprivileged from
9d092c1
tob16a09b
in /docker by @dependabot[bot] in #281 - build(deps): bump nginxinc/nginx-unprivileged from
b16a09b
to82a240b
in /docker by @dependabot[bot] in #284 - build(deps): bump docker/build-push-action from 6.16.0 to 6.17.0 by @dependabot[bot] in #286
- build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by @dependabot[bot] in #292
- build(deps): bump docker/build-push-action from 6.17.0 to 6.18.0 by @dependabot[bot] in #290
- build(deps): bump nginxinc/nginx-unprivileged from
82a240b
to45c56ad
in /docker by @dependabot[bot] in #287 - build(deps): bump nginxinc/nginx-unprivileged from
45c56ad
to34cf5a3
in /docker by @dependabot[bot] in #293 - build(deps): bump nginxinc/nginx-unprivileged from
34cf5a3
to12b7750
in /docker by @dependabot[bot] in #294 - build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @dependabot[bot] in #298
- build(deps): bump nginxinc/nginx-unprivileged from
12b7750
to1e20a2a
in /docker by @dependabot[bot] in #295 - build(deps): bump nginxinc/nginx-unprivileged from
1e20a2a
to79a788b
in /docker by @dependabot[bot] in #300 - build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @dependabot[bot] in #305
- build(deps): bump nginxinc/nginx-unprivileged from 1.27.5-alpine to 1.29.0-alpine in /docker by @dependabot[bot] in #304
- build(deps-dev): bump pbkdf2 from 3.1.2 to 3.1.3 by @dependabot[bot] in #302
- build(deps): bump nginxinc/nginx-unprivileged from
7d08b59
to7ee77c5
in /docker by @dependabot[bot] in #307 - build(deps): bump nginxinc/nginx-unprivileged from
7ee77c5
to5550e0c
in /docker by @dependabot[bot] in #309 - build(deps): bump nginxinc/nginx-unprivileged from
5550e0c
toab9ff73
in /docker by @dependabot[bot] in #314 - build(deps): bump nginxinc/nginx-unprivileged from
ab9ff73
to43e46e2
in /docker by @dependabot[bot] in #316
Other Changes
- Port : Add ability to untag policies from tags view by @sahibamittal in #113
- Fix : Update deprecated endpoint usage by @sahibamittal in #131
- Port: Add
.gitattributes
to fix prettier behavior on Windows by @nscuro in #197
New Contributors
- @zprebosnyak-lm made their first contribution in #103
- @jmayer-lm made their first contribution in #120
- @ashearin made their first contribution in #283
Full Changelog: v5.5.0...5.6.0