sw360-19.0.0
sw360-19.0.0
This tag covers many corrections, bug fixes and features after the 18.1 release. Version 19.0.0 is also the first release without the Front-end integrated, but as a separate sw360-frontend project.
Major changes in the release includes:
- Removal of Liferay and related libraries, OSGi framework
- Unification of various backend packages from src and svd
- Support for Java 21 and Apache Tomcat 11.0.0
- Replace couchdb-lucene with couchdb-nouveau
Credits
The following GitHub users have contributed to the source code since the last release (in alphabetical order):
> afsahsyeda <[email protected]>
> Akshit Joshi <[email protected]>
> Gaurav Mishra <[email protected]>
> Helio Chissini de Castro <[email protected]>
> hoangnt2 <[email protected]>
> Keerthi B L <[email protected]>
> Nikesh Kumar <[email protected]>
> Rudra Chopra <[email protected]>
> Sameed <[email protected]>
> Smruti Prakash Sahoo <[email protected]>
> tuannn2 <[email protected]>
Please note that also many other persons usually contribute to the project with reviews, testing, documentations, conversations or presentations.
Features
c167bcca9feat(rest): Endpoint to add comment on a clearing requestcd97b6154feat(rest): Create new endpoint for schedule CVE and schedule attachment deletion.00d70bcc5feat(rest): get releases used by vendor31b720b9efeat(rest) : Rest end point for generate source code bundle062a89290feat(rest): saveUsages in project page9751a2e1afeat(Project): Add new endpoint for project's license clearing tree view (New GUI)546d35b73feat(Project): Import SPDX as dependency networka18b053f5feat(rest): Create new endpoint to download component template in csv format.144ea5b81feat(rest) : Move GenerateLicenseInfoFile rest end point to SW360reportcontroller61ec9ac39feat(REST): Exclude release version from license info295f1cbfffeat(rest): fetch group list in project add and edit page.e9ec8d8a7feat: Make Java 21 defaultcb99fc678feat(ImportSBOM):Change naming convention of imported components441fa7d85feat(Project): Create new endpoint to serve list view of dependency network (New GUI)7b4c534e3feat(cloudant): use IBM SDK09586fad6feat(ektorp): remove ektorp from search handlersaf0262112feat(lucene): nouveau integrationa019b468bfeat(keycloak-spis): Added the custom keycloak SPIs3c453670dfeat(couchdb): Enable use of latest CouchDB with nouveau8fdd93c86feat(rest): endpoint to update a vendor.bff430140feat: Add CODEOWNERS to the repository90ad3ea1cfeat(rest): Add additional fields in get clearingrequest endpoints.771b965b2feat(ComponentPortletandImportCDX): Validate VCS URL and sanitize GitHub Repo URLs during CDX import99d0c80edfeat(api): postpone moderation request actionaf15a09e3feat(rest): includeAllAttachments parameter in licenseInfo endpoint66cac90c6feat(CycloneDX): Make methods compatible with cyclonedx upgrade and update jackson version9a15832c0feat(rest): Endpoint to get comments of a Clearing Request.ffbf1b183feat(project): endpoint for vulnerabilitySummary page.0d6908ab2feat(project): Add necessary library dependencies required by rest codeacb1e54eafeat(vscode): Add base Eclipse java formatter config filea29d5b0c2feat: Generate provenance and SBOMs on Docker images8b6aa42cffeat(docs): Remove old asciidocs supportfd0546244feat: Update to Ubuntu 24.04 (Noble)8f971f765feat(rest): new endpoint for releases of linked projects.5bd4cae83feat(obligation): rest endpoint to update license obligations of the project.3c40f09f2feat(License): Add API Listing LicenseType and Add pageble for licenses, obligations204ce2f02feat: Add scorecard
Corrections
9452b2b89fix(cloudant): fix attachment creation5bdef6d51fix(pom): fixed the java version in kc module pom.xml48e0f6c8cfix(ImportCDX): VCS sanitization failing on characters like colondc18109b8fix(Project): Fix project handler test with dependency network feature5702dc595fix(clearingState): making fossology report download configurable.3f10b6856fix(build): add the missing excludeReleaseVersion69fcc6c9ffix(servlet): complete migration javax to jakarta3cad1c4aafix(UI): Add lang attribute to ReadmeOSS.html for generated license info.77b801825fix(keycloak-spi): Added the README.mde43c3422afix(nouveau): fix nouveau query result442ac94c7fix(test): fix test cases with cloudant SDK41e3d4605fix(nouveau): extend nouveau connector as cloudantcbcffd979fix(cloudant): fix query buildersced70a0e4fix(cloudant): fix views57f5b6908fix(REST): Patch Release is causing the clearing state to be updated to NEW even if a Clearing is existing5c4810a56fix(backend): fix dependency for backend coref0719b97afix(rest): Resolved null value returning for svm tracking status.fe05d9f29fix(rest): Update search API to return 200 status with empty results array when no match foundb0c11a1fbfix(GenerateLicenseInfo): Generate License Info failing for releases having the same CLXd6f630021fix(rest): Ensure visibility field is case-insensitive6a1408f50fix(doc): fix OpenAPI doc for Search endpoint83796a935fix(rest): add requestClosedOn field in get clearingRequest_by_id endpoint45a8137f3fix: Update docker documentation to reflect current status9dc2d6835fix(rest): Enable back authorization and resource server with up to dat springbootc493d83bffix(couchdb): Move setup data for single file and update compose to use as read onlyc15e36cd8fix(docker): Use Tomcat with Ubuntu 24.04 (Noble)d655adc64fix(rest): Add null check for linkedProject field if it is empty77bdbf7f6fix(rest): Add null check for linkedProject field to prevent Internal Server Error on GET request to fetch the linked projects of a project5943127c6fix(rest): Add code to update user details when creating a moderation request.9777923f8fix(docker): Reinstate docker builds0265205b0fix(docker): Update docker build to fit Ubuntu Noble and improved caching293e025cffix(rest): Added JWT token convert to fix the issue with authorities540f9baf1fix(rest): Added the Oidc user info customizer and token customizer1fb7bcf97fix(rest): Add null check for linkedProject field to prevent Internal Server Error on GET request to fetch the linked projects of a project3f6ae983bfix(importCDX):Improve error message when PURL is invalid3dfbb5538fix(rest): Fix internal server error with 500 status code for link project to projects endpointf0e149422fix(rest): Fixing pagination for endpoint '/packages'.0d88cacc7fix(rest) : Non uniform link format in attachmentUsage end pointfea2d4edafix(rest): Fixed the swagger issue01218278dfix(backend) : Product clearing report generated has strange numbering issue fixda95be6e7fix(rest): Added modifiedBy field in get package_by_id endpoint.82ad83e70Revert "fix(rest): Fixed the swagger issue"cc38d07dffix(rest): Fixed the swagger issue51fabdfc2fix(rest):Added code to resolve the server error while fetching a summaryAdministraion endpoint.b262c4c82fix(rest): Fixing the rest test cases308ce540bfix(rest): Added a missed field in package endpoint for allDetails.8f0560c04fix: Only publish test report on failuresf48e6d27bfix: Thrift cache locationb69720c91fix: Update thrift build to fix github caching89f47fe05fix(test): Proper build tests now without jump folders4dd4f8aa7fix: Remove wrong placed copyrights on commit templatef8dcd79f2fix(test): Disable rest test to avoid chicken and egg integration7ce112133fix(github): restore pull_request_template.md
Infrastructure
4e883a5a1chore(deps): bump org.springframework:spring-context7dd44a5fdchore: Add maven validation on buildd086e9a71chore(deps): bump org.keycloak:keycloak-core2d90a9a00chore(deps): bump org.keycloak:keycloak-corebfd296052chore(maven): deploy keycloak listenersc71b0d5c4chore(maven): segregate war and jar deploy dirsd9b3edf25chore: Add Tomcat 11 default for Docker872c74ef1chore(nouveau): catch exception for nouveau query824504564chore(docker): update compose with dockerhub image3fc2e0976chore(couchdb-lucene): remove third-party/couchdb-lucene111a0fe88chore(refactor): Refactored the models by adding Lomboke3dccf3eechore: Reduce couchdb log level on docker composee3f3dab7echore: Update the license header checkfor CODEOWNERSaf056ef15chore: Properly set components servlet as war file27fddd182refactor: Use the correct thrift image56b63f065refactor: Remove dead code comments7b3fe9233chore: CouchDB setup can't be read only442970d4cchore: Add color coding for sw360 project30b6114f8refactor(backend): Adjust component test call9a09353afrefactor(backend): Disable ComponentImportTestUtilsa0369e0a3refactor(backend): Allow test properties be configurableb7d9941ddrefactor(backend): Fix licenseinfo test2f24d0b3echore: Disable logging on disk for couchdb and configure authorization serverbc759edb4refactor(backend): Restore webapps installa9cff25eachore: Fix version dependenciesa81fe91dcrefactor(backend): Remove invalid recursive add-build-configuration processa973a70f4refactor(backend): Disable usage of Handlers by importer2019328a3refactor(backend): Adjust dependencies for subprojectsa5df30cbbrefactor(backend): Move svc-common to service-core2e9b67182refactor(backend): Create licenses-core shared libraryd1f88af5crefactor(backend): Move vulnerabilities shared classes to coreeaeb4e0e8refactor(backend): Unify source treeeec9f1557chore(vscode): Increase memory requirements for language server9dbbaf958chore: Update README_DOCKER with proper commands1bb1ce228chore: Update couchdb user and password for scripts86be40d49chore: Ignore vscode directoryd1e1269b2chore: Remove dead codee8d6398ccchore(docker): Fix syntax warnings09517affcci(docker): Use correct thrift docker contextf10c1b0bbrefactor(docker): Adjust CouchDB configurations714e16eacci: Minor quality control fixes406b2eec2chore: Remove pom duplicates828c05a63build(deps): bump urllib3 in /.github/actions/clean_up_package_registry612bce6b7refactor: Remove liferay deploy dir0462eec98refactor(project): Remove OSGI bundle plugin51af9238frefactor(libraries): Remove OSGI bundle from importersd66d6f6dbrefactor(libraries): Remove OSGI bundle from exportersa305f5f08refactor(libraries): Remove OSGI bundle from CommonIO0507602barefactor(datahandler): Remove OSGI bundle063c294e1refactor(project): Remove log4j-osgi-support8505587a3chore: Remove unused buildnumber plugin1eb27eb2crefactor: Remove liferay build references41e6951eachore: Remove unused spotless plugine2719816bchore: Remove unused flatten plugin2e04e949dchore: Place enforcer plugin in correct place712f7c057refactor: Versioning update474323658chore: Update gitignore and ide settings8d493bcd3build(deps): bump requests in /.github/actions/clean_up_package_registryf754535e4chore: Ignore templates to check license02824ef71chore(project): Minor clenaups8b68eff39refactor(docker): Modernize docker without liferay447c89c68refactor(project): Adjust dependencies for Java 17 and Liferay removalf7dc1d0f9build(deps): bump certifi in /.github/actions/clean_up_package_registryf8b201838build(deps): bump org.springframework:spring-web from 6.1.5 to 6.1.683da48abcchore(upgrade): skipped rest auth server test cases until its fixedd31c5bd60chore(upgrade): Resolving src-licenseinfo module test cases.8a2688883chore(upgrade): Added a patch for the java 17 related changes w.r.t couchdb-luceneaa9422126chore(upgrade): Authorization upgradea2a30f552chore(upgrade): Upgrade to Java 17d8d8ef585chore(upgrade): Remove liferay62829f44crefactor(java): Disable some tests to easy migration0cfdeada8ci(java): Update to Java 17 as default and enforce it