Skip to content

Latest commit

 

History

History
74 lines (62 loc) · 8.03 KB

CHANGELOG.md

File metadata and controls

74 lines (62 loc) · 8.03 KB
Raw

Change Log

0.1.0 (July 14th, 2020)

  • enhancement - Integration with Snyk Intel Vulnerability DB, it is the most advanced and accurate open source vulnerability database in the industry. That adds value with the latest, fastest and more number of vulnerabilities derived from numerous sources and also includes Snyk curated unique and pre-published security advisories that come with early stage of vulnerability detection.
  • enhancement - Updated fabric8-analytics-lsp-server to latest version (v0.2.1): See #381
    • Different Underline color scheme for commonly known vulnerabilities and vulnerability unique to snyk. See #118
    • Updated Diagnostic Message: See #118
      • Number of Known Security Vulnerabilities and Security Advisories for each dependency.
      • Highest Severity of vulnerabilities for each affected Dependency. (Low/Medium/High/Critical)
      • Recommended version for dependencies having Known Security Vulnerabilities.
      • Added Snyk attribution “Powered by Snyk” in the source of the Diagnostic. See #121
      • Removed CVE-IDs from message.
  • enhancement - Upadated Stack Report UI: See #142
    • Updated Security Issue Card content: See #142
      • New headers for Security Issue.
      • Added Transitives as a sub-tab in the particular Direct Dependency.
      • Separate tabs for Commonly Known Vulnerabilities and Vulnerabilities Unique to Snyk.
      • Added Snyk Vulnerability ID in place of CVE-ID.
      • Added Vulnerability Titles with Severity (Low/Medium/High/Critical) and removed Tags.
      • Added hyperlink to package name, Snyk Vulnerability ID, and Vulnerability Titles.
    • Dependency Details card rearranged in order of preference.
    • Attribution to Snyk “Powered by Snyk” with a Sign UP/Sign In Hyperlink to Snyk Login page.
  • fixes - Upgraded typescript to fix tsc-watch misbehave. See #373
  • fixes - Upgraded node version to 14.x LTS. See #377
  • fixes - Quick fixes on hover don't show associated code actions however click on version does. See #297
  • fixes - A direct dependency included in manifest should not be shown as transitive dependency. See #337
  • fixes - CVE IDs should be hyperlinks to NVD. See #318
  • fixes - Visual artifact seen after taking corrective action from lsp. See #357
  • fixes - Opening manifest file does not show the scanned results. See #365

0.0.13 (September 12th, 2019)

  • enhancement - Add python support. See #308
  • enhancement - Enable transitive(indirect) dependency report by default. See #330
  • enhancement - Show welcome message after upgrading to latest version. See #334
  • enhancement - Resolved dependencies are stored in target in workspace root. See #302
  • fixes - Dependency Analytics Report not generated if triggered via file explorer. See #299
  • fixes - Stop polling for stack-report if it takes any longer than 120 secs. See #304 #338 #352
  • fixes - Issue with running manifest file without having a workspace. See #314

0.0.12 (April 25th, 2019)

  • enhancement - Replace priview-html with VSCode webView APIs. See #257
  • enhancement - Shows error(STDOUT/ERR) in output channel. See #284
  • enhancement - Support for Eclipse che/theia.
  • enhancement - codeAction returns command which does seems to be supported by all LSP implementations. See #95
  • fixes - Issue with Dependency analytics report, if triggered via file explorer. #279
  • fixes - Unable to update dependency version. See #274
  • fixes - Unable to generate stack report for Maven pom.xml. See #272
  • fixes - Experiencing 504 Gateway Time-out for component-analyses. See #270
  • fixes - Switching to report page is slow. See #89
  • fixes - Generate application stack report for manifest file is throwing unable to parse error for package.json. See #216
  • fixes - Recommended version shown in component analyses and stack analyses are not Same. See #292
  • improvements - Improved latency numbers to analyze your application dependencies.
  • improvements - Optimized resolving application dependencies.

0.0.11 (December 14th, 2018)

  • enhancement - add support for muti-root workspaces. See #4496
  • fixes - removes usage of depreciated rootpath APIs.
  • fixes - Show info status messge only first time manifest is open and then show if any CVEs are detected along with minor bug fixes and updates READMEs

0.0.10 (November 5th, 2018)

  • enhancement - add support for Quickfixes for any CVEs flagged with codeaction. See #4516
  • enhancement - provide one to command to trigger Dependency Analytics Report for a particular manifest/Application level. See 4518
  • enhancement - add support to show progress along with Info toast when lsp calls complete.

0.0.9 (October 27th, 2018)

  • enhancement - add support to show progress when language Server is in action. See #4487.
  • enhancement - Show proper status messages for progress for stack report generation, currently it just shows "Generate Application Stack Report". See #4487.
  • Increases test coverage