Skip to content

Commit

Permalink
Merge pull request #2203 from siemens/chore/release-18
Browse files Browse the repository at this point in the history
chore(rel-18): changing files for tagging 18.0

Reviewed by:  [email protected]
  • Loading branch information
ag4ums authored Nov 20, 2023
2 parents bfed265 + 1d02925 commit 609f42c
Show file tree
Hide file tree
Showing 3 changed files with 285 additions and 2 deletions.
279 changes: 279 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,285 @@ This is the changelog file of the sw360 project. It starts with the first releas

https://github.com/sw360/sw360portal/releases

## sw360-18.0.0-M1
This tag covers many corrections/bug after the 17.0 release and multiple new endpoints to support sw360 UI project.

### Migrations

For existing installations, a data migration is required with PR 1963. Please go to the readme file in scripts/migrations to see more information:

https://github.com/eclipse/sw360/blob/master/scripts/migrations/README.md

For running the migrations scripts, you will need python and the couchdb package. Please note that you will need to change manually in the python file: the DRYRUN variable and the couchdb URL (if that is not on localhost or requires password or both).

### Credits

The following github users have contributed to the source code since the last release (in alphabetical order):

```
> Abdul Kapti <[email protected]>
> afsahsyeda <[email protected]>
> Anupam Ghosh <[email protected]>
> Dinesh Ravi <[email protected]>
> Eldrin Sanctis <[email protected]>
> Gaurav Mishra <[email protected]>
> Helio Chissini de Castro <[email protected]>
> hoangnt2 <[email protected]>
> Keerthi B L <[email protected]>
> Kouki Hama <[email protected]>
> Le Tien <[email protected]>
> Muhammad Ali <[email protected]>
> Nguyen Nhu Tuan <[email protected]>
> Nikesh kumar <[email protected]>
> rudra-superrr <[email protected]>
> Shi Qiu <[email protected]>
> Smruti Prakash Sahoo <[email protected]>
> Tien Le <[email protected]>
> tuannn2 <[email protected]>
```

Please note that also many other persons usually contribute to the project with reviews, testing, documentations, conversations or presentations.

### Features
* `e9a9f308b` feat(rest): Adding pagination for ecc info of releases for a project.
* `c0db06a68` feat(rest) : Adding pagination for listing users endpoint.
* `acc553b14` feat(rest): endpoint to get attachmentUsages for a project.
* `bb0d01fd5` feat(rest): endpoint to get license clearing count for a project.
* `bc5ae7d1b` feat(rest) : Add enableSvm field in response to projects api
* `130ed2585` feat(importCDX): enhanced sw360 CDX importer
* `754ba96a7` feat(CreateCRandRequestsPortlet):Added new field Clearing Type for CR and Additional columns in Open CR table
* `b89bde7b9` feat(Rest): Modifying the document for search endpoint
* `ec750b824` feat(bug) : Download release attachment fail issue fix
* `f629a0d3f` feat(rest) : End point for export vendor spreadsheet
* `930ef1d13` feat(docker): Add option to specify cvesearch.host at build time
* `f4febd954` feat(release): Fix response api get single release with costDetails
* `70141590c` feat(rest): API to get vulnerability tracking status
* `03aaa6985` feat(Rest): New endpoint allow load assessment summary information of release
* `8c2e71b85` feat(ui):enable to bulk delete component/releases for admin SW360
* `266aeac3d` feat(REST): Add restricted project counter for component and release usedBy API
* `ca0ef31f2` feat(rest):Update API Create Release with Cost Detail
* `1974005e2` feat(ui): Added collapse and expand icon for all the tabs
* `16dae1a4a` feat(rest): API to get vulnerability tracking status
* `afe118d96` feat(Rest): New endpoint allow load SPDX license info from attachment of release (ISR, CLX, CLI)
* `a330fde1e` feat(rest): Update release with attachment info
* `ba6c743f5` feat(ui) : Add changelogs for license pages
* `d369c73e3` feat(rest): Update API create Release with Moderator, Contributor, CpeId
* `c9c37b94d` feat(rest): Update API create Release with LinkedRelease
* `d7b52f53e` feat(rest): Add Information Vendor to response Get release detail
* `4449e6017` feat(liferay): Export private pages include package portlet
* `7c57b8081` feat(rest): Add information user change status attachment when edit component by API
* `d25d35ce3` feat(Project): New configuration make project and releases relationship more flexible
* `de4125bb4` feat(debug): Add Tomcat manager to docker
* `fd13d1943` feat(rest): listing license clearing info of a project.
* `cc9291d68` feat(CycloneDX): support CPE in import and export
* `42f44107f` feat(rest): Update Component with attachment
* `d8c594628` feat(REST): New endpoint to write SPDX license info into release
* `d356bc022` feat(UI): Package Portlet Signed-off-by: akapti <[email protected]>
* `6aa0b8d7e` feat(rest) : asynchronous end point for report download
* `4d4c863ad` feat(RequestsPortlet): Added On Hold value for request status and Next/Last 15 days filter
* `fd159f302` feat(Components): Add a new field VCS/Repository URL for components
* `be9e5f5bb` feat(rest): New Endpoint create attachment
* `34e2d9e77` feat(Rest): Rest API allow to re-generate fossology report
* `f4432c98b` feat(rest):Adding new fields to get list of project vulnerability
* `efbe761f5` feat(ExportSpreadsheet): Add project and release ID to the exported excel
* `b7740902b` feat(ProjectObligationsEdit): Save comment and status fields on edit
* `a7bc2969c` feat(rest):New end point for my components
* `a4e7f6808` feat(REST): New endpoint split components
* `447143b8e` feat(rest): To list linked projects of sub-projects.
* `ed7f4e237` feat(Department): New function for Department Management
* `662a05977` feat(rest): new endpoint merge component
* `1bf157600` feat(UI/REST): CycloneDX SBOM Importer & Exporter
* `e8f6e6b26` feat(rest): update response API Get a single release
* `57b02aa29` feat(REST): Update response endpoint get attachments by release
* `410184928` feat(ECC):Added pagination to ECC release list
* `b6d58b979` feat(ui): add note filed in license page
* `f14f9b0e4` feat(rest): update response API Listing users
* `c27a2fe35` feat(rest): update response API Listing vendors
* `9bd7869f4` feat(update): update response api get single component
* `90c59acb4` feat(rest): modify moderation requests
* `8e71c959c` feat(ci): Use actions java setup instead of standard packages
* `037acd41b` feat(ci): Use actions java setup instead of standard packages
* `a7af308fa` feat(ci): Update build and test to accept dispatch
* `669d6f98b` feat(rest) : api to get count of projects
* `1c4b223f8` feat(update):update response api get attachment by component
* `e6374e820` feat(api): create new endpoint import bom for component
* `462675325` feat(api): create new endpoint update vulnerabilities of a release
* `4dbc8705a` feat(api): create new endpoint update vulnerabilities of a component
* `bc368f203` feat(REST): Endpoint for Download Attachment Bundle of Release
* `764a24c6c` feat(api): Endpoint get release overview by component
* `391c006e6` feat(REST): Endpoint for Download Attachment Bundle of Component
* `96a032814` feat(api): endpoint get vulnerabilities of a component
* `d10048956` feat(rest): new endpoint `/moderationrequest`
* `e682a50fa` feat(spdx): Added support for pasring of SPDX-2.3 (ISR) generated via fossology
* `b7710e630` feat(lucene): Modify pom to generate proper war from couchdb lucene
* `53236b590` feat(libs): Add couchdb-lucene as third party
* `84e098774` feat(project): Prepare to introduce thirdparty libraries
* `c80f75908` feat(rest):Components with all details Rest Api doc updated
* `b32e90154` feat(REST):Endpoint for sbom import
* `249f48f49` feat(SPDX): Making new tab in component release pages for showing SPDX/SPDX Lite data #1240
* `9d566af03` feat(rest):New end point for my components
* `53c8d85da` feat(clearing): Improved cloud backend clearing
* `2e0732a2b` feat(rest): Added basic username and password based authentication
* `4f171a659` feat(rest): optimize fetch project
* `729207997` feat(EditCR): Admin will be able to reassign/edit the Requesting User of CR
* `56096f24a` feat(ProjectUI):ExternalIds and Additional Data fields in Export Excel
* `7b84b0e4f` feat(api): get vulnerabilities from relase by api
* `aafc95808` feat(rest) : Update data without moderation request And This features' a configurable setting
* `73ba7012d` feat(docker): Use main Maven docker image
* `d6555a370` feat(rest): endpoint for linked projects.
* `e20d7bf06` feat(rest): new endpoint /releases/recentReleases
* `c5aea6f4e` feat(rest): newendpoint /components/recentComponents.
* `d707d7b53` feat(rest): new endpoint `/projects/myprojects`
* `0f95fd368` feat(project): Added Email functionality for individual project spreadsheet export
* `ff92cd956` feat(ProjectUi): Enable Release with only one non-approved CLI for 'Adding License Infor To Release' and 'Displaying Obligations' (#1764)
* `f5daadb6e` feat(Search): Added restricted search (#1797)
* `df0a6a123` feat(ui): Add banner to broadcast messages (#1830)
* `d4cd90f67` feat(Project): Added Vulnerability Summary Tab in Projects.
* `ca1da16fe` feat(ProjectsUI):Changed Expand All To Expand Next Level and added alert message
* `b682060ae` feat(Advance Search): Provided an 'Exact Match' checkbox in Advance Search that inserts (") around search keyword
* `b0ccdc480` feat(ci): Add thrift binary to cache
* `95009d35f` feat(project): Add pre-commit and spotless
* `eabbb0053` feat(svm): Publish SVM codes to Community

### Corrections
* `5e48f83b2` fix(importCDX): Remove view BY_VCS_LOWERCASE and BY_PURL_LOWERCASE
* `e94d9c729` fix(Moderation): Fix bug could not open Release and Component moderation request
* `45b317d86` fix(rest): adding additional fields to rest response for linked projects.
* `4e329b464` fix(license): Update Response api for single license and Add rest-docs api create license
* `d261f70e5` fix(rest): Added new endpoint for LicenseType in admin tab
* `41d735f9a` fix(package): Can't link project to package
* `1debd1e2c` fix(REST):Get Component failing for names with space
* `521835e38` fix(UI) : Added code to import the upload license in admin tab
* `f748c7cba` fix(package): Create package by API can't link release
* `eb7efb3f9` fix(rest): create new endpoint for import OSADL information in admin tab.
* `23242daaf` fix(importCDX): Resolved unnecessary update of component fields
* `976f0ffeb` fix(rest): Added new rest endpoint for upload license in admin tab.
* `fbd924cdd` fix(Package): Can't create a new Package by API
* `08962f93c` fix(rest): New endpoint to download archive files in admin page
* `f49e6d372` fix(db): clean-up closed moderation requests.
* `c0dbccfd5` fix(lar): Remove old lar files that are usable only for old releases
* `67f8d9f5a` fix(OAuthClient): Fix Can't show OAuth Client page
* `de67119ae` fix(rest): create new endpoint for import spdx information in admin tab
* `c2a9ee24a` fix(GUI): Fix edit dependency network GUI broken
* `91b768595` fix(rest): Removed the copyright text from RESTAPI docs
* `9d37c4993` fix(rest) : Modifications to improve GET result speed
* `3bf53a1a3` fix(docker): Use the recommend fix fro Liferay x Java
* `5a1ba6145` fix(UI): Added code to load moderation documents in request tab
* `5fcb2b303` fix(sw360Build): build failing because of invalid CEN header
* `7c8f8d24b` fix(rest):new endpoint to delete all license information in admin tab
* `9f7859184` fix(lucene): Use old javax.servlet
* `5f1e3d0ce` fix(OSADL): Add missing obligation rules
* `b70be52a6` fix(rest): API create component's businessUnit is always set as the user's department
* `ec4c39e06` fix(doc): remove merge conflict notation
* `7b0938a6b` fix(Export): component.visibility.restriction.enabled option works incorrectly with the Export feature in Cyclone DX
* `c0df9334d` fix(Rest): Allowing search for components without encoding
* `475b4b437` fix(UI):word correction of Initial use scan in attachment type
* `f29de2b1c` fix(rest): show linked project in project summay tab
* `f237ecdb6` fix(Rest): Allowing search for externalIds without encoding
* `5cdd364eb` fix(rest): fix test rest api of component
* `ded850d7c` fix(UI): Sorting release verions in drop down menu when inspecting component.
* `c4079d9a0` fix(Rest): Add clearing information in release response
* `04c64a580` fix(rest): Missing moderators field when creating component using API
* `9d79b2896` fix(rest): Added endpoint url for summary and administration page info
* `81b6ca3a7` fix(readme): Add Information of python2 to python3 change when running file migration scripts
* `b02f90ec2` fix(update): Update the migration readme file
* `3f7349f78` fix(db): Data Quality and reduction of storage.
* `42ffce89d` fix(test): Add missing test deps
* `b6303eccc` fix(deps): Normalize spring-web and spring-boot versions
* `bada732d8` fix(rest): Add Description field for myProjects and myComponents in homepage.
* `19325b333` fix(lucene): Restore original portlet naming and configs
* `e3df30e53` fix(docker): Restore document_properties volume
* `ed87dde0b` fix(docker): Enable cache deps downloads in volume
* `5ce0d0788` fix(license): Fix attachment type when importing SBOM
* `262d0cad6` fix(EditCR): Not able to edit CR
* `2bcb6185e` fix(docker): Remove clucene build
* `bd39f4fa5` fix(sw360): Add sw360 adapt patch by default
* `53236b590` feat(libs): Add couchdb-lucene as third party
* `9811edf59` fix(update): Updating sw360.propertiy file is missing when using SPDX Document Tab
* `e1dd33f43` fix(rest): added endpoint for release subscriptions
* `6479d8894` fix(libs): Normalize json versions
* `c2844e30c` fix(deps): Revert httpcore and fix httpcore and spring-boot
* `d4e4ac764` fix(deps): Update to current httpcore5 release
* `96387f9c7` fix(cache): Key was invalid due file not exists and hash attempt fail
* `43a07df64` fix(ci): Cache now use the right naming
* `b42ea4fd3` fix(versions): Normalize javax.activation version
* `61c0a1b7c` fix(docker): Remove couchdb-clucene from the slim jars
* `fdbc8c360` fix(docker): Adjust config defaults
* `c923fa847` fix(component_gui): Can not load component detail page with long additional data text
* `d8b9d77f6` fix(UserSearch) : Modified the user search operation (#1858)
* `b54169f09` fix(projectExporter): Added Project visibility in project exporter spreadsheet
* `8c454efb6` fix(config): Couchdb configs not like double commas
* `b7d2f7a46` fix(docker): Update docker-compose.yml
* `470b70788` fix(docker): Move to the new Github org
* `2a9bffa4f` fix(rest): componentType field will show when allDetails true in release
* `59ebfdcf0` fix(UI): Attachments tab not loading in UI
* `f81243c40` fix(docker): Fix couchdb default setting
* `48f688e1b` fix(docker): Change maven version from 3.8.7 to 3.8.8
* `cd4293f97` fix(api): deletion project returns 500 error and API doc of link release to release makes ambiguous
* `dd6f60218` fix(rest): disable URI encoding in search by external ids in release
* `aecc19141` fix(rest): endpoint api/projects does not return all projects
* `5514b4e38` fix(language): Fix the properties file and add some other needed files for Chinese language support
* `3ff6f65bd` fix(rest): Added endpoint for mysubscriptions for component
* `d6da8a919` fix(rest): Added endpoint for release subscriptions
* `2a0395256` fix(ProjectUI):External Id not visible in Vulnerability Tracking Status
* `c596d6094` fix(vulnerability): apache commons-text vulnerability CVE-2022-42889 #1864
* `949288618` fix(project): Update Apache commons-text
* `27d5fc011` fix(db): Deactivate email notification of user not belonging to a domain.
* `1af7ecb1a` fix(LiferaySetup):Website not loading after removing BannerMessage Field
* `63e2fef1d` fix(rest): Api endpoint /components/usedBy returns 500 when component not have any release.
* `e66363183` fix(UI): Error when creating/editing duplicate project/component/release
* `c28bac8e8` fix(ui): support Vietnamese language in Obligation page
* `2d20226e7` fix(Script): Modified script such that it removes trailing and leading whitespaces of components and releases and additonally link releases of duplicate components
* `3b7269f6d` fix(vulnerability): Script to repair release vulnearability relations
* `92b18eaaf` fix(UI): Added EnableSVM field in project exportspreadsheet
* `9f277825b` fix(attachmentUploadModal):Progress bar will be visible only after clicking on the upload button
* `0a59109e9` fix(rest): Reuse centrally created thrift client
* `92f3c42f0` fix(pre-commit): Do not run clean/build
* `3cc8b6293` fix(ci) : Change maven version from 3.8.7 to 3.8.7
* `27e14e70b` fix(UI) : Added Created on in project export
* `799d2f789` fix(UI): ISR which will make the SW360 Release status as Scan Available
* `09c126967` fix(UI): unset few field while create a duplicate in project and component
* `5d9c3024b` fix(UI):remove deactivated users from moderators list
* `790c7ae9d` Fix(REST): Add COTS details information when fetch a single release that has component type COTS
* `3cd88e009` Fix(Search): Fix bug can not show result with special character and can not search Obligation
* `776c9b3ff` Fix(Rest): Add more information in get components response (support New GUI)
* `ce6f9e616` Fix(Project): Can't disable CR based on Japanese group
* `d80822818` Fix(Project GUI): Fix bug missing obligation text when change status or comment of component, project, organisation obligation in project edit
* `67dff9e27` Fix (REST): Fix bug do not set businessUnit automatically when create component. Get all components always return visibility EVERYONE.
* `b6bfa4258` Fix(REST): Fix bug update project without vendor information will remove vendor of project

### Infrastructure
* `265fb1953` ci(fix): Ignore requirements.txt files in testForLicenseHeaders
* `6be2c6f79` build(deps): bump org.json:json from 20230227 to 20231013
* `d630785b1` ci(fix): Missing code checkout on clean workflow
* `0b713d8af` refactor(docker): Improve docker build and deployment
* `9f71e11a7` docs(openapi): add OpenAPI doc for Obligation, Package and Report
* `c315c0b7a` docs(openapi): add OpenAPI doc for License and Moderation
* `8194286af` docs(openapi): add OpenAPI doc for ComponentController
* `05a27600a` Update build_and_test.yml
* `5410eefc5` Update README.md
* `606d9b353` Update README_DOCKER.md
* `1a534db4d` docs(openapi): add docs for attachment
* `98e10d47f` docs(openapi): add docs for vendor, user, search
* `ac8e9d10f` docs(rest): generate OpenAPI docs for Project
* `561687678` chore(docker): update maven version
* `c3492c322` chore(deps): bump guava from 31.1-jre to 32.0.0-jre
* `a9821a634` chore(thrift): Prevent datahandler recompile all the times
* `1d15e7741` chore(deps): Update thrift version
* `f5c86b9d9` chore(deps): bump jose4j from 0.7.9 to 0.9.3 in /rest/resource-server
* `1d3cd248b` chore(rest): Making endpoints configurable
* `cd6d5cfed` ci(cache): Give GH_ACTIONS permissions to reach cache
* `21833c85c` ci(cache): Give GH_ACTIONS permissions to reach cache
* `baaa882f8` ci(docker): Improve cache mechanism
* `ae2b667f7` ci(secrets): Fix the new secrets loading mechanism
* `651c67680` ci(cache): Fix thrift cache miss
* `f6d40b3e6` ci(project): Update pre-commit and ci hooks
* `5081686ca` chore(action): Cache maven dependencies
* `8937ec88b` Update(Vulnerability): Improve the function of API to delete vulnerability and relation of vulnerability with release
* `b41273dec` chore(migration) Avoid null pointer on script 048_add_component_businessunit.py
* `a49191fb7` upd(ci): Reduce the intermediary docker builds for Midnight daily


## sw360-17.0.0-M1
This tag covers many corrections/bug fixes after the 16.0 release.

Expand Down
4 changes: 2 additions & 2 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -49,8 +49,8 @@
</distributionManagement>

<properties>
<revision>17.0.${patchlevel}</revision>
<patchlevel>0-SNAPSHOT</patchlevel>
<revision>18.0.${patchlevel}</revision>
<patchlevel>0</patchlevel>
<rest.version>1.0.0</rest.version>

<!-- Build version properties -->
Expand Down
4 changes: 4 additions & 0 deletions scripts/migrations/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -110,6 +110,10 @@ To migrate it is recommended to do this in the following order:

- `054_repair_broken_releasevulnerability.py`

### 17.0.1 -> 18.0.0

- `056_migrate_project_dependency_network.py`

## Optional usage
- `009_overwrite_release_name_with_component_name.py`
- `010_repair_missing_vendorId_links_in_releases.py`
Expand Down

0 comments on commit 609f42c

Please sign in to comment.