licensed/CHANGELOG.md

24 KiB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Unreleased

5.0.0

Breaking change

  • Only supports Ruby 3.0+ due to nokogiri upgrade

Changed

  • Ensure homepage string is not too long in cabal.rb to avoid DOS attack
  • Update dependencies

4.5.0

Changed

  • Bumped a number of dependencies for security fixes

4.4.0

Added

4.3.1

Changed

4.3.0

Added

4.2.0

Added

Fixed

4.1.0

Added

4.0.4

Changed

4.0.3

Changed

Fixed

4.0.2

Fixed

4.0.1

Fixed

4.0.0

Added

Fixed

Changed

3.9.1

Fixed

3.9.0

Added

3.8.0

Added

3.7.5

Fixed

3.7.4

Fixed

3.7.3

Fixed

3.7.2

Fixed

Changed

3.7.1

Fixed

3.7.0

Changed

3.6.0

2022-03-17

Added

Changed

Fixed

3.5.0

2022-02-24

Added

3.4.4

2022-02-07

Fixed

3.4.3

2022-01-31

Added

3.4.2

2022-01-17

Fixed

3.4.1

2022-01-07

Fixed

3.4.0

2021-12-14

Added

Fixed

Changed

3.3.1

2021-10-07

Fixed

Changed

3.3.0

2021-09-18

Added

Changed

3.2.3

2021-09-14

Fixed

3.2.2

2021-09-09

Fixed

3.2.1

2021-09-06

Changed

Fixed

3.2.0

2021-08-19

Added

Changed

Fixed

3.1.0

2021-06-16

Added

Changed

Fixed

3.0.1

2021-05-17

Fixed

3.0.0

2021-04-27

This is a major release and includes potentially breaking changes to bundler dependency enumeration.

Changed

  • The bundler source will return an error when run from an executable. Please install licensed as a gem to continue using the bundler source. Please see the v3 migration document for full details and migration strategies.

2.15.2

2021-04-06

Fixed

2.15.1

2021-03-29

Changed

2.15.0

2021-03-24

Added

Fixed

2.14.4

2021-02-09

Added

2.14.3

2020-12-11

Fixed

2.14.2

2020-11-20

Fixed

2.14.1

2020-10-09

Fixed

2.14.0

2020-10-04

Added

Fixed

2.13.0

2020-09-23

Added

Fixed

2.12.2

2020-07-07

Changed

2.12.1

2020-06-30

Fixed

2.12.0

2020-06-19

Added

Fixed

2.11.1

2020-06-09

Fixed

2.11.0

2020-06-02

Added

Fixed

2.10.0

2020-05-15

Changed

Added

2.9.2

2020-04-28

Changed

2.9.1

2020-03-24

Changed

2.9.0

2020-03-19

Added

Fixed

Changed

2.8.0

2020-01-03

Added

Fixed

2.7.0

2019-11-10

Added

Changed

2.6.2

2019-11-03

Changed

  • A number of improvements to the go dependency enumerator
    • use go env GOPATH as a default if no other GOPATH is found
    • better compatibility with go modules when finding license content
    • better compatibility with vendored go modules
    • use a packages godoc.org page as it's homepage
    • better checks for standard packages, reducing the amount of cached content

2.6.1

2019-10-26

Changed

2.6.0

2019-10-22

Added

2.5.0

2019-09-26

Added

Changed

2.4.0

2019-09-15

Added

2.3.2

2019-08-26

Fixed

  • Bundler with/without array settings are properly handled for bundler 1.15.x

2.3.1

2019-08-20

Changed

2.3.0

2019-05-19

Added

2.2.0

2019-05-11

Added

Fixed

2.1.0

2019-04-16

Added

Changes

Fixed

2.0.1

2019-02-14

Changes

  • Dependency paths that don't exist on the local disk are reported as warnings
  • Cache, status and list output is sorted by app name, source type and dependency name
  • Bumped licensee gem requirement

2.0.0

2019-02-09

This is a major release and includes breaking changes to the configuration and cached record file formats

Added

  • New migrate command to automatically update configuration and cached record file formats
  • New extensible reporting infrastructure
  • New base command and source classes to abstract away implementation details

Changes

  • Cached dependency metadata files are now stored entirely as YAML, with .dep.yml extension
  • The Bundler dependency source is now identified in configuration files and output as bundler instead of rubygem
  • Refactored sources for better consistency between classes
  • Refactored commands for better consistency between classes
  • Command outputs have changed for better consistency
  • Updated Dependency classes for better integration with licensee

Fixed

  • Licensed no longer exits on errors when evaluating dependency sources or finding dependencies
  • The Bundler dependency source correctly finds the bundler gem as a dependency in more cases

1.5.2

2018-12-27

Changes

Fixed

1.5.1

2018-10-30

Fixed

1.5.0

2018-10-24

Added

Fixed

1.4.0

2018-10-20

Added

  • Git Submodules dependency source 🎉
  • Configuration option to explicitly set a root absolute path

Changes

  • COPYING file is no longer matched as a legal file

Fixed

  • NPM source will enumerate multiple versions of the same dependency
  • Running Licensed outside of a Git repository no longer raises an error
  • Packaging scripts will correctly return to the previous branch when the script is finished

1.3.4

2018-09-20

Changes

  • Bundler source will avoid looking for a gemspec file when possible

1.3.3

2018-09-07

Fixed

  • Manifest source configuration globs correctly enumerates files from within submodules
  • The manifest source no longer errors when getting version information from submodules

1.3.2

2018-08-15

Fixed

  • Fixed issue when multiple versions of a cabal package are found

1.3.1

2018-08-01

Fixed

  • Fixed regression finding ruby gems by path

1.3.0

2018-07-25

Added

  • Manifests for the manifest dependency source can be specified using glob patterns in the configuration
  • Paths to licenses for dependencies from the manifest dependency source can be specified in the configuration
  • Manifest dependency source looks for license content in C-style comments if a license file isn't found

Changes

  • GitHub is no longer queried to find remote license information
  • Removed custom logic around determining whether to use the license key from licensee
  • NPM dependency enumeration doesn't use npm list
  • Licensed now tracks content from multiple license files when available

Fixed

  • Fixed regression finding platform-specific ruby gems

1.2.0

2018-06-22

Added

  • Building and packaging distributable exes for licensed releases
  • Can now configure which Gemfile groups are excluded from dependency enumeration

Fixed

  • Bundler is no longer always reported as a dependency
  • Set the minimum required ruby version for licensed

1.1.0

2018-06-04

Added

  • Pip dependency source 🎉
  • Go Dep dependency source 🎉

Changed

  • Changed how sources configuration property affects which sources are enabled
  • Raise informative error messages when shell commands fail

Fixed

  • Don't reuse cached license when cached version metadata is missing
  • Disable dependency sources when dependent tools are not available
  • Vendored packages from the go std library are properly excluded
  • Cabal dependency enumeration properly includes executable targets

1.0.1

2018-04-26

Added

  • GOPATH settable in configuration file

Changed

  • Reuse "license" metadata property when license text has not changed

Fixed

  • Path expansion for cabal "ghc_package_db" configuration setting occurs from repository root
  • Local Gemfile(.lock) files correctly used in enumerating Bundler source dependencies

1.0.0

2018-02-20

Initial release 🎉