v6.5.0

Changed

• Parse *.csproj files with msbuild parser by default

v6.5.0-rc1

Changed

• Parse *.csproj files with msbuild parser by default

v6.4.0

Added

• PNPM v9 lockfile support
• Support for parsing go.mod files with a Go directive of version 1.17 and higher

Changed

• Improved go.sum file parsing to prevent the parser from listing unused packages

Fixed

• Sandboxed processes sticking around after CLI is killed with a signal
• Lockfiles with local versions breaking the pip parser
• Lockfile generation not emitting errors for tools writing them to STDOUT

v6.4.0-rc1

Added

• PNPM v9 lockfile support
• Support for parsing go.mod files with a Go directive of version 1.17 and higher

Changed

• Improved go.sum file parsing to prevent the parser from listing unused packages

Fixed

• Sandboxed processes sticking around after CLI is killed with a signal
• Lockfiles with local versions breaking the pip parser

v6.3.0

Fixed

• Improve parsing of non-UTF-8 encoded pom.xml files
• SPDX SBOM registry determination from downloadLocation
• SPDX parsing adding the described package as a dependency
• SPDX parsing certain text files with optional package fields

v6.2.0

Fixed

• Crashes when parsing invalid lockfiles

Removed

• phylum group transfer subcommand
• Owner email from phylum group list results

v6.1.2

Fixed

• Improved sandboxing error message for unsupported kernel versions

v6.1.1

Fixed

• Python lockfile generation with pip in ~/.local
• Python lockfile generation with pyenv

v6.1.1-rc1

Fixed

• Python lockfile generation with pip in ~/.local
• Python lockfile generation with pyenv

v6.1.0

Added

• Parse manifest files with non-standard names