v2.44.0

What's Changed

Exciting New Features 🎉

• Support Platform Access Token by @RobiNino in #938

Improvements 🌱

• Transfer - Send chunks if they are bigger than GiB by @yahavi in #966
• Support JFrog Apps Config file by @yahavi in #943
• Improve npm logs and error handling by @sverdlov93 in #977
• Build flat dependency trees while auditing Gradle projects by @asafgabai in #976
• Support curation npm tree calc by package-lock only by @asafambar in #951
• Transfer - Add 1 minute timeout to all requests by @yahavi in #983

Bug Fixes 🛠

• Show findings in Sast by @attiasas in #970
• Transfer - Fix handling delayed files condition by @RobiNino in #973
• Fix Sarif output driver issues and Xray Sca locations by @attiasas in #968

Full Changelog: v2.43.3...v2.44.0

v2.43.3

What's Changed

Bug Fixes 🛠

• Update analyzer manager version and fix scanner timeout issue by @sverdlov93 in #969

Full Changelog: v2.43.2...v2.43.3

v2.43.2

What's Changed

Improvements 🌱

• Audit - licenses and build impact paths refactor by @omerzi in #927

Full Changelog: v2.43.1...v2.43.2

v2.43.1

What's Changed

Improvements 🌱

• Transfer files - Remove redundant lock in snapshot by @yahavi in #956

Bug Fixes 🛠

• Transfer - pom.xml files should also be delayed by @yahavi in #963
• Update Analyzer manager (1.3.2.2006984) to fix Java Contextual analysis issues by @sverdlov93 in #964
• Fix Analyzer manager exit error log by @sverdlov93 in #962

Full Changelog: v2.43.0...v2.43.1

v2.43.0

What's Changed

Exciting New Features 🎉

• Sast advance scan by @attiasas in #954

Improvements 🌱

• Third party dependencies contextual analysis for npm by @EyalDelarea in #941

Bug Fixes 🛠

• Fix panic in Analyzer Manager execution by @yahavi in #952
• Don't send Xray usage until available for all users by @attiasas in #953

Other Changes 📚

• Improve applicability fields calculation by @sverdlov93 in #957

Full Changelog: v2.42.0...v2.42.1

v2.42.0

What's Changed

Exciting New Features 🎉

• Audit - Sast advance scan by @attiasas in #954

Bug Fixes 🛠

• Fix panic in Analyzer Manager execution by @yahavi in #952
• Don't send Xray usage until available for all users by @attiasas in #953

Full Changelog: v2.41.7...v2.42.0

v2.41.7

What's Changed

Improvements 🌱

• Improve Golang audit logs by @sverdlov93 in #948

Bug Fixes 🛠

• Set permissions to scanners and Fix empty Analyzer version Env issue by @sverdlov93 in #950

Other Changes 📚

• Improve pip audit logs by @sverdlov93 in #949

Full Changelog: v2.41.6...v2.41.7

v2.41.6

jfrog-cli-core

Improvements 🌱

• Add advanced security fields to audit simple-json struct by @attiasas in #944

Bug Fixes 🛠

• Add missing applicability fields from JSON by @sverdlov93 in #945

Full Changelog: v2.41.5...v2.41.6

v2.41.5

What's Changed

Improvements 🌱

• Improve Audit and Scan performance for large projects by @sverdlov93 in #917
• Set analyzer manager version by environment variable by @sverdlov93 in #935
• Improve python audit logs by @sverdlov93 in #939
• Improve audit data handling by @attiasas in #936
• Add Xray Source Control Service by @EyalDelarea in #940

Bug Fixes 🛠

• Fix severity level mapping by @attiasas in #921
• Fix excluding locally generated refresh tokens by @RobiNino in #934
• NuGet audit bug fix - can't identify dependencies without assets files (V5.0+, .NET Core) by @eranturgeman in #925

Other Changes 📚

• Restructure Audit & Advanced security code by @sverdlov93 in #928

Full Changelog: v2.41.4...v2.41.5

v2.41.4

What's Changed

Improvements 🌱

• Update build-info-go dependency by @attiasas in #920

Full Changelog: v2.41.3...v2.41.4