Releases: NodeSecure/scanner
Releases · NodeSecure/scanner
v6.0.0
What's Changed
- docs: add kishore881 as a contributor for code by @allcontributors in #205
- chore: make tests to pass by @PierreDemailly in #217
- [WIP] Make a deep comparison of two payloads by @jean-michelet in #211
- chore: update copyright by @fabnguess in #212
- chore: use dependabot groups by @fraxken in #218
- chore(deps): bump the github-actions group with 5 updates by @dependabot in #219
- chore(deps-dev): bump the development-dependencies group with 2 updates by @dependabot in #221
- chore(deps): bump the dependencies group with 1 update by @dependabot in #220
- refactor: init workspaces & migrate tarball by @fraxken in #195
- chore(deps): bump the github-actions group with 4 updates by @dependabot in #235
- refactor: migrate npm walker to tree-walker workspace by @fraxken in #236
- refactor: migrate everything to typescript & workspaces by @fraxken in #240
- chore(deps): bump the github-actions group across 1 directory with 4 updates by @dependabot in #249
- chore(deps): bump tar from 6.1.13 to 6.2.1 by @dependabot in #248
- chore(deps-dev): bump the development-dependencies group across 1 directory with 6 updates by @dependabot in #250
- docs: complete workspaces README & review some interfaces by @fraxken in #251
- feat: add npm-types workspace by @fraxken in #254
- refactor: decouple tree-walker & scanner by removing Dependency class by @fraxken in #252
- Reconfigure workspaces & replace @slimio/lock with @openally/mutex by @fraxken in #255
- refactor(npm-walker): re-implement walker with a class and DI by @fraxken in #256
- refactor(scanner)!: migrate to npm-registry-sdk V3 and enhance types by @fraxken in #259
- refactor!: migrate ntlp into new conformance workspace by @fraxken in #261
- Implement Manifest Manager by @fraxken in #262
- fix: use object-hash & expose utils from mama for Scanner by @fraxken in #263
- chore(deps-dev): bump the development-dependencies group with 2 updates by @dependabot in #267
- feat: implement Contact to replace @nodesecure/authors by @fraxken in #266
- chore(deps-dev): bump the development-dependencies group with 2 updates by @dependabot in #269
- chore: update to latest JS-X-Ray major by @fraxken in #272
- docs: fix version badge and workspaces list by @fraxken in #273
- chore(deps-dev): bump the development-dependencies group across 1 directory with 3 updates by @dependabot in #274
- chore(deps): bump the dependencies group across 1 directory with 4 updates by @dependabot in #275
- chore: use eslint v9 by @PierreDemailly in #277
- refactor(tree-walker): remove max-depth limitation & start writing UT/FT by @fraxken in #276
- refactor(tree-walker): optimize local relationsMap & use npm-pick-manifest by @fraxken in #278
- chore(deps): bump fast-xml-parser from 4.3.2 to 4.4.1 by @dependabot in #280
- chore(deps-dev): bump @types/node from 20.14.12 to 22.0.0 in the development-dependencies group by @dependabot in #279
- refactor(compare): migrate to V6 & fix some TS issues by @fraxken in #281
- feat: implement @nodesecure/rc to highlight contacts by @fraxken in #282
- chore(npm-types): v1.1.0 by @fraxken in #283
New Contributors
- @jean-michelet made their first contribution in #211
Full Changelog: v5.3.0...scanner-v6.0.0
v5.3.0
What's Changed
- Adding NpmAvatar by @kishore881 in #201
New Contributors
- @kishore881 made their first contribution in #201
Full Changelog: v5.2.1...v5.3.0
v5.2.1
v5.2.0
What's Changed
- fix(integrity): verify if script startsWith node_modules/.bin/ by @fraxken in #186
- feat: add new empty-package ver & global warning by @fraxken in #187
- chore(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #170
- chore: update @nodesecure/js-x-ray (6.2.0 to 6.2.1) by @fraxken in #188
- feat: links by @PierreDemailly in #190
- refactor(test): remove snapshots by @PierreDemailly in #192
- docs: add PierreDemailly as a contributor for code, review, and 2 more by @allcontributors in #193
- fix: add missing deprecated check in packageMetadata by @fraxken in #191
- chore: update @nodesecure/npm-registry-sdk (1.6.1 to 2.0.0) by @fraxken in #194
- chore: update @nodesecure/js-x-ray (6.2.1 to 6.3.0) by @fraxken in #196
- chore: update @nodesecure/i18n (3.4.0 to 3.5.0) by @fraxken in #197
Full Changelog: v5.1.0...v5.2.0
v5.1.0
What's Changed
- feat: add integrity/validation check for tarball/manifest diff by @fraxken in #166
- chore(deps): bump @npmcli/arborist from 6.3.0 to 7.1.0 by @dependabot in #163
- chore(deps-dev): bump sinon from 15.2.0 to 16.0.0 by @dependabot in #167
- chore(deps): bump pacote from 15.2.0 to 17.0.4 by @dependabot in #160
- drop support for Node 16 by @fabnguess in #179
- fix: add missing top-level await for i18n by @fraxken in #181
- chore: update dependencies & workflows by @fraxken in #182
- Add warning source by @fraxken in #183
Full Changelog: v5.0.1...v5.1.0
v5.0.1
What's Changed
- fix(dependency): properly increment dependencyCount by @fraxken in #165
- fix(package): add missing i18n folder by @PierreDemailly in #168
Full Changelog: v5.0.0...v5.0.1
v5.0.0
What's Changed
- fix: commit activity link by @PierreDemailly in #122
- feat: migrate to node native test runner by @PierreDemailly in #121
- fix(d.ts): add missing extractedAuthors interface by @fraxken in #129
- chore: update license badge by @fabnguess in #143
- Implement SAST warnings for semver by @fabnguess in #139
- refactor: implement local i18n translations by @fraxken in #144
- refactor!: enhance author parsing & type defs by @fraxken in #162
Full Changelog: v4.0.0...v5.0.0
v4.0.0
What's Changed
- chore: update @nodesecure/js-x-ray (5.1.0 to 6.0.0) by @fraxken in #92
- Updating security policy and badges by @fabnguess in #93
- Adding and configuring the dependabot.yml file by @fabnguess in #94
- chore(deps): bump ossf/scorecard-action from 2.0.6 to 2.1.2 by @dependabot in #99
- chore(deps): bump actions/setup-node from 2 to 3 by @dependabot in #98
- chore(deps): bump actions/checkout from 2 to 3 by @dependabot in #97
- chore(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by @dependabot in #96
- chore(deps): bump github/codeql-action from 2.1.27 to 2.1.39 by @dependabot in #95
- ci: update nsci to install node_modules and add Node.js 18.x by @fraxken in #100
- chore: Apply security best practices (StepSecurity) by @step-security-bot in #102
- feat: add @nodesecure/authors by @Kawacrepe in #62
- docs: add Kawacrepe as a contributor for code by @allcontributors in #109
- chore: update dependencies by @fraxken in #108
- chore(deps): bump github/codeql-action from 2.1.39 to 2.2.3 by @dependabot in #107
- chore(deps): bump step-security/harden-runner from 2.1.0 to 2.2.0 by @dependabot in #112
- chore(deps): bump github/codeql-action from 2.2.3 to 2.2.4 by @dependabot in #110
- Update i18n (use Async API) by @fraxken in #111
- Update dependabot frequency by @fabnguess in #115
- docs: add fabnguess as a contributor for maintenance by @allcontributors in #116
- docs: start documenting from API by @fraxken in #35
- chore(deps): bump github/codeql-action from 2.2.4 to 2.2.5 by @dependabot in #117
- Updated Readme by @Nikhilj007 in #119
- fix(security): add missing workflow top level permissions by @fraxken in #120
New Contributors
- @dependabot made their first contribution in #99
- @step-security-bot made their first contribution in #102
- @Kawacrepe made their first contribution in #62
- @Nikhilj007 made their first contribution in #119
Full Changelog: v3.8.2...v4.0.0
v3.8.2
v3.8.1
What's Changed
- [Snyk] Upgrade @nodesecure/i18n from 2.0.0 to 2.1.1 by @snyk-bot in #81
- [Snyk] Upgrade @npmcli/arborist from 6.1.1 to 6.1.2 by @snyk-bot in #80
- Updating build badge and adding badge scorecards by @fabnguess in #84
- chore: add Security policy by @fraxken in #85
- [Snyk] Upgrade @npmcli/arborist from 6.1.2 to 6.1.3 by @fraxken in #82
- [Snyk] Upgrade pacote from 15.0.6 to 15.0.7 by @snyk-bot in #83
- fix: add missing extension to import and remove Flags type by @fraxken in #88
- Update dependencies by @fraxken in #89
New Contributors
- @fabnguess made their first contribution in #84
Full Changelog: v3.8.0...v3.8.1