sw360-3.2.0

This release is build because thrift API change PR #808.
Also this version is tagged for an initial contribution for the eclipse repository.

Enhancements

• d324747 feat: make SSOAutoLogin actually work
• 4fc3300 dev(components): hide inaccessible projects in component summary
• ed1d290 feat(release): automatically update ecc information if download url is set
• ff70154 dev(rest): add missing rest properties for components and projects
• 051a6d9 feat(licenseinfo): allows velocity to load templates from etc/sw360
• 62f0299 feat(rest): new endpoints to upload and download attachments
• fbb75f9 feat(ui): added clearing state to dropdown
• fa05a60 feat(release): make release names not editable
• eb71cf2 feat(licenseinfo): Added license todos to DOCX template generation
• c0ac597 feat(ui): improve handling of country fields
• 949ac38 feat(licenseinfo): harmonize of disclosure documents (docx)
• 0ad21e9 feat(rest): add request parameter name, type and transitive to documentation
• 44a4f0b feat(rest): list all transitive releases for a specific project
• 9a36683 feat(licenseinfo): make licenseinfo generation more robust
• ea2bfde feat(rest): add new endpoints for REST: search, vulnerabilities, ...
• a3cfbde feat(vulnerabilities): Allow editing of multiple vulnerabilities concurrently in the ...
• 1885a9c feat(rest): add rest docs to resource server
• 5ff8423 feat(rest): add admin privilege verification to the authorization server
• 05a6838 feat(ui): extend external ids for projects and components
• 716b6f1 feat(projects,components): add new field owner country to data model

Infrastructure

• 3b90fe7 chore(datahandler): remove assertion for couchdb test (lib-datahandler)
• 2b023cb chore(rest): harmonize rest fields and documentation
• 73416a3 chore(ui): add pattern format to all input datepicker
• f01a624 chore(ui): remove bracket at the end of a component name
• 01bb442 chore(rest): add search by type for projects and components
• 3d73ce1 chore(ui): add reset button in user search dialog
• ee230a8 chore(rest): Update for REST API documentation
• 921e722 chore(rest): show delivery date (deliverystart) for projects
• 52ce732 chore(rest): minor changes regarding the rest pom files and code review
• 41d8278 chore(license): Change risk text to No license risks analysis available
• 5edc183 test(datahandler): add assertion for couchdb test (lib-datahandler)

Corrections

• 5a6e993 fix(docker): Change thrift url to working link
• 3d7747e fix(license): validate license id and short name
• 62c0351 fix(rest): seperate creation of rest fatjars to maven profile
• 3676801 fix(ui): delete button colors
• 9187bd5 fix(ui):component merge wizzard check that components' ids are not same
• 7b47aa0 fix(release): remove contact person and department and add ecc comment
• e944e3f fix(moderation): set all using project count to merge pages
• f7e5d06 fix(rest): change maven plugin order to generate the documentation correctly
• 9a738ef fix(rest): show all linked releases with project relationship information
• 1f8c681 fix(projects): security monitoring checkbox behavior
• 59116d3 fix(licenseinfo): fix saving the selection of attachments for license info
• e8ed405 fix(frontend): protect double quotes that were breaking the GUI
• 81da48f fix(thrift): change thrift id for external ids

sw360-3.1.0

This release was created because of a thrift API change in PR #680, which adds different return types incorporating status information in the response.

Enhancements

• 818fc47 feat(components): review merge functionality for components
• 332a45b feat(components): add merge functionality for components
• 512a17f feat(rest): initial commit
• dc2d820 feat(projectImport): Renamed BDP Import to Project Import and removed references for BDP in main repository
• e1d043c feat(bdpImport): Use of proper error message when importing projects
• a1fc428 feat(bdpimport): Allow user to search for BDP projects instead of loading them all
• 42f0f64 feat(project): add ECC status information to projects
• 764d48e feat(vulnerability): Limit the size of the related vulnerability tables for project/component/release feat(vulnerability): Allow for choose the size of tables of related vulnerabilities feat(vulnerability): limit db requests to vulnerabilities feat(vulnerability): limit db requests to component and releases feat(vulnerability): make linked release presentation consistent with the rest of the portal
• 894eb9a feat(vulnerabilities): Make CVE search configurable
• 6df3726 feat(ui): Make session expire after 30 minutes
• 7addd52 feat(licenseinfo): clean license texts in license info generation
• da134c9 feat(ui): Define new LAR files to remove BDP Import from default configuration
• 2f44328 feat(lics): also import and export external IDs
• c80c4cd feat(travis): test that all files contain license headers
• 456f7ec feat(licenseinfo): allow users to edit the license info header text
• c116fd0 feat(licenseinfo): store selection and display usage
• 71b11f4 feat(ui): add tooltips to sw360 enum values
• e7efbcc feat(attachments): Prevent deletion of approved attachments
• 1368eb7 feat(releases): add support for COTS clearing add component type to clearing status tav of project details view. add new fields (cotsResponsible, clearingDeadline, containsOSS) to COTSDetails for supporting COTS clearing reorganize Commercial Details into two tables

Infrastructure

• b437c9d chore(repositories): refactor and cleanup
• ecfe478 chore(moderation): remove z character for project moderation requests
• 5b6eca0 chore(components): Show moderation request warning when updating ECC data
• 76c787e chore(licensing): fix headers of some files

Corrections

• 169f2ce perf(ComponentSummary): only load necessary releases
• 742b405 fix(components): component merge wizard fix display of component types in merge wizard fix setting reference from release to component after move fix jquery-confirm loading error remove aggregate fields from component merge wizard
• 195d031 fix(projects): fix NullPointerException when preparing LicenseInfo generation page
• e4453cf fix(ui): execute javascript on Liferay event instead of window load
• 8f095a0 fix(pom): remove some unused dependencies
• 0a23634 fix(ui): hide scrollbar in tab menu and resize moderation table while zooming
• 00712b8 fix(projects): duplicating project does not copy linked projects or releases
• 58e341f bug(ui): No component/vulnerability is loaded for new user
• e7ae922 fix(homepage): Escape description value for title attributes on homepage
• c4c2fff fix(moderation): No HTML tags in moderations request for license info headers of projects
• d26f2b3 fix(javascript): use requirejs if needed

Refactorings

• 9251f8b refactor(backend): introduce VendorDatabaseHandler.java

sw360-3.0.0

Semantic versioning reason was PR #529 which has added a new structure for moderation requests (comments, issuer, etc.)

Enhancements

• 6acac74 feat(notifications): send email notifications to users on updates of objects they take part in
• cb794b8 feat(ui): Added component type to the listing of moderation requests
• 8603910 feat(ui): provide friendly URLs in liferay
• dc299e0 feat(ui): Added ability to comment on moderation requests
• 3e21652 feat(component): on blur of new component name, show dialog of components with similar name
• 0670ebd feat(svm): add a flag field to projects to explicitly enable SVM
• 5357cdf feat(exports): add component type to release row in spreadsheet exports

Infrastructure

• 85caa32 chore(ui): clean up JSTL expressions

Corrections

• 9b7ecda fix(projects): "Update Project" button is working again
• 4064adb fix(moderation): fix moderation of bool and i32 fields

Refactorings

n.a.

sw360-2.2.0

Enhancements

• 69e9dba feat(ui): More information for releases search - Added clearing state and mainline state to the release search - Changed the structure of the release search table to DataTable, therefore improved the layout and made the columns sortable - Merged the first two search buttons (search by name prefix and search by vendor) into a single one, but the last button (Releases of linked projects) is kept. - Changed the structure of the projects search table to DataTable and added project (clearing) state as rows. - Included the updated release search also to the release edit page
• bebe527 feat(quickfilter): fix quickfilter issue on browser back
• 6293868 feat(ui): Added the project clearing state to the listing of projects. Display project state and project clearing state by coloured boxes. Added the project state to the listings of linked projects and releases.
• ca094ec feat(clearing export): add project origin and component type to exported data
• f74693c feat(components): restructure components view to show only latest components for performance reasons
• 0a03f23 feat(releases): Just show approved reports for download
• 0de3c14 feat(projects): add possibility to filter project list for versions
• e77d990 feat(ui): add spinners at long running requests
• f41aa32 feat(migrationRunner): save and load docker image

Infrastructure

• 9d87441 chore(ui): add release name and version in remove link confirmation
• a2b86dd chore(ui): rename all mainline state columns in UI
• 089429d chore(header): replace minimal headers with the epl related option
• f699a7c chore(components): reduce page size by restructuring generated data js code
• efbd3da chore(tables): replace unnecessary hiding of control elements with proper datatables api usage
• ce0082d chore(header): add SPDX Identifiers

Corrections

• 5e2ba62 fix(chore): fix outdated liferay-plugin-package.properties files
• a3a78f9 fix(release): fix delete release button in edit view
• 1b8da29 fix(search): use sw360users db for user search
• 42f302d fix(ui): adding sort functionality to usingProjects table,
• e6cfbfc fix(ui): Corrected clearing state display in projects list. The clearing state is now loaded directly (not by an ajax call).
• fc9757f fix(projects): Links to linked releases from project details page didn't work. Links to main licenses were missing entirely.
• c4c88b4 fix(ui): Preventing release from linking to itself,
• dcf74e0 fix(ui): Showing vendor short name rather than vendor long name in component table,
• 01bc22e fix(license): make search for licenses case insensitive fix(license): add license short names to search
• 16db1e6 style(ui): Changed text colour for filter values. This fixes issue #423
• 656e06d fix(export): spreadsheet export couldn't auto-size columns
• 4705370 fix(project): LicenseInfo Generation page doesn't show any attachments
• 53bf43e fix(migrations): do not add scripts to docker image
• 30db136 fix(projects): improve project details and project edit pages' performance
• 1d9db06 fix(travis): start couchdb explicitly

Refactorings

• 7eafcc4 refactor(attachments list): new look of list view for attachments

sw360-2.0.1

Enhancements

• e5799e6 feat(use webjars): bend paths to webjars
• 7ad573a feat(use webjars): migrate jquery-confirm to v3
• 207a0e4 feat(webjars): use webjars to obtain JS dependencies
• d87d6b4 feat(use webjars): add webjars to pom file

Infrastructure

• 2f7033f doc(readme) fixes maven deploy commands
• ada05f3 chore(mvn): update dependency versions in poms
• 40d11b9 chore(performance): improve page loading by skipping DB lookups for users
• 0c85a4c dev(releases): add some more release relationship types
• 38bdab0 chore(travis): add test which checks the maven dependency situation
• 859a9d1 chore(db): add script to repair missing attachment sha1 hashes

Corrections

• 14614f0 fix(utils): handle empty resourceFilePath in CommonUtils.loadResource()
• 21575de fix(export): improve performance of spreadsheet export and fix simultaneous exports
• c09b262 fix(travis): add missing test explicitly to matrix
• 74a2754 fix(projectportlet): fix issue #417
• 14a123c fix(moderation): fix NullPointerException in moderation when attempting to display project changes
• 53887e0 fix(releases): fix too strict duplicate check for releases that matches prefixes of existing release names rename confusingly named method in thrift api to match its function

Refactorings

n.a.

sw360-2.0.0

This release was created mainly because of a major datamodel change in PR #395, which adds project to release enums. few pull requests, resulting from semantic versioning.

Enhancements

• #395 feat(projects): convert project to release relationship from string
• #381 feat(license): make compability flags ternary
• #404 feat(security): SW360 admin and security admin added

Infrastructure

n.a.

Corrections

n.a.

Refactorings

n.a.

sw360-1.7.1

This release was created because of a thrift API change in PR #404 (sw360admin) and #381 (ternary value), which adds changes to the thrift API

Enhancements

• 5de9f2a feat(attachment security): initial commit
• ae29334 feat(cve-search): convert old cpe on demand
• 590892b feat(security): SW360 admin and security admin added
• ae5a68e feat(license): make compability flags ternary
• d99f8e9 feat(ui): projectinport: optional use select instead of free text for host
• 89e8fe6 feat(ui): in detail and edit.jsp pages: error handling for useBeans
• ec95520 feat(export): make lists and maps in spreadsheet export machine-readable by exporting as JSON

Infrastructure

• d00d18a chore(properties): use default values from java not the properties file
• d2da288 chore(git): add eclipse and backup to .gitignore
• 269e3e2 chore(cve-search): remove old/unused code
• 1c01a1a test(licenseinfo): add tests for SPDX1.1 and SPDX1.2
• f469dda chore(export): clean up the code merged with PR #398
• 27f70c2 chore(mvn): Allows to deploy backend via webapps

Corrections

• 332b135 fix(spdx): copyrights from SPDX files were ignored
• 8db94d6 fix(groupId): The file DisplayMapOfEmailStringSets.java was added under the wrong groupId
• 01fbb67 fix(ui): remove backticks from JS code to eliminate Liferay's minifier errors

Refactorings

n.a.

sw360-1.7.0

This release was created because of a data model change in PR #371, which adds a map data structure for project roles to the project.

Enhancements

• feat(admin): allow to import all SPDX licenses
• feat(components): add component owner, owner accounting unit, and owner group fields. Reorganize display and edit pages for component
• feat(components): add component types INNER_SOURCE and SERVICE. Shorten display names of the existing component types
• feat(licenseInfo): added manual unescaping of license texts &Co to work around the improperly escaped data
• feat(licenseInfo): added parser for combined CLI files
• feat(licenseInfo): relax uniqueness constraint on external ids
• feat(projects): add buttons also to bottom of edit page
• feat(projects): add project owner, owner accounting unit, and owner group fields. Reorganize display and edit pages for project
• feat(projects): deferred calculation of release clearing state summaries for project list display disabled loading of user names in project list view for performance reasons
• feat(projects): projects with clearing state CLOSED are locked for editing for all except Clearing Admins and higher
• feat(ui): added custom role map to project, component and release
• feat(ui): update default roles of role map

Infrastructure

• chore(db migration): add dockerized script
• chore(ektorp): update used ektorp to 1.4.4
• chore(licenseInfo): incorporate code review comments
• chore(migration): add migration readme
• chore(permissions): incorporate review commments
• chore(projects): cleanup unused code
• chore(rake): use the maven-alipne base image

Corrections

• fix(components): correct the field label for component owner
• fix(export): add prefixes to duplicate column headers in spreadsheet exports extended by releases
• fix(moderation): fix display of project clearing details in project moderation
• fix(poms): replace groupId org.eclipse with org.eclipse.sw360
• fix(projects): fixed broken linked projects and linked releases of a duplicated project. reset clearing state of a duplicated project to OPEN. fixed a minor Maven warning.
• fix(projects): restrict project editing to clearing admins of the project group
• fix(releases): stop creating a release moderation request to ECC_ADMINs when a release has some ECC fields already set
• fix(spdx): getAllLicenseTexts was not called due to merge failure
• fix(ui): attachment detail list was corrupted
• fix(UI): do not always offer to download all attachments

sw360-1.6.0

Increasing the release because of changes in the API in

#345

Enhancements:

• added version info to sw360 theme template
• Lock projects with clearing state CLOSED for editing
• Improved Loading Time of the Project List Page
• Added Download Spreadsheet button to project's Clearing Status tab
• Links To Moderation Requests In MyTask
• Added Security Responsibles To Projects
• Change ECC Fields by Authorized Users Only
• Download Source Code Bundle for a Project
• Show Hierarchy Level at LicenseInfo Generation Page
• Acknowledgements from CLI in License Info
• Make license generation sources selectable

Corrections:

• Issues With Project Duplication
• Adding Permission Checks In License Service
• Unified sorting of releases in different views and license info files
• Deleted Obsolete File ReleaseImporter.java
• Fix ECC coverage of moderation requests
• Fix ECC Admin Deployment
• Handling Closed Moderation Requests
• Display non-existing user with email
• Improved License Portlet error handling
• ProjectSummaryTest broken
• Small fix in folder structure of tests in src-common
• CveSearch: only allow matches that have consumed something
• Correctly load using components and projects for component editing
• Fix permission problem in uploadFromSW360 script
• Improvements At Linked Projects And LicenseInfo Generation
• Support couchdb scurity settings for restricting view access
• Improved display of external links
• License Entries removal feature at Admin portal
• Removes unused Import Projects button on project page
• Reuse detail display jsp code when displaying moderation requests
• Stop CveSearch tests from failing behind proxy
• Fixed Problems With Datatables Handling
• Fixed escaping projects' description for javascript

sw360-1.5.0

Release 1.5 bascially contains the changes necessary for the initial contribution to the Eclipse Foundation. This includes the following pull requests:

• Contrib/rename packages #291
• Dev/ini contrib related p rs #290
• fix(documentation) updating licensing info for 1.5 release #288

Further Enhancements (w Issue Links)

• Improving links of projects to other projects or to releases #210
• Names for search fields improved #212
• Linked releases -adding clearing status #177
• Session message on error should be red (instead of green) #49
• Adding product version in the overview listing #220
• Delete confirmation dialog #156
• Table export of projects (which the one the user can download) #223
• Adding date picker for missing date fields enhancement #171
• Excel Export should consider filter set in the UI enhancement #43

Bug Fixes (w Issue Links)

• Export crashes bug #209
• Duplicate names of projects and components can be added bug #203
• Downloading attachments unreliable due to connection leak #217
• Project list: filter use results in lists limited to 25 entries bug #221
• moderation request zombie bug #114
• Sticky filter for projects by Organisation bug #147
• Checksum field for attachments is too small #151
• Change default project visibility enhancement #211
• Long-Term Fix PortalProperties #67