From d560ca927e0733b56652f9c13942d65b9090c1e3 Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Sun, 19 Nov 2017 07:50:03 -0500 Subject: [PATCH] added per request #948 --- RELEASE_NOTES.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 RELEASE_NOTES.md diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md new file mode 100644 index 000000000..381d61373 --- /dev/null +++ b/RELEASE_NOTES.md @@ -0,0 +1,28 @@ +# Release Notes + +Please see the [dependency-check google group](https://groups.google.com/forum/#!forum/dependency-check) for the release notes on versions not listed below. + +## [Version 3.0.2](https://github.com/jeremylong/DependencyCheck/releases/tag/v3.0.2) (2017-11-13) + +### Bug fixes + +- Updated the query format for the CentralAnalyzer; the old format caused the CentralAnalyzer to fail + +## [Version 3.0.1](https://github.com/jeremylong/DependencyCheck/releases/tag/v3.0.1) (2017-10-20) + +### Bug fixes + +- Fixed a database connection issue that affected some usages. + +## [Version 3.0.0](https://github.com/jeremylong/DependencyCheck/releases/tag/v3.0.0) (2017-10-16) + +- Several bug fixes and false positive reduction + - The 2.x branch introduced several new false positives – but also reduced the false negatives +- Java 9 compatibility update +- Stability issues with the Central Analyzer resolved + - This comes at a cost of a longer analysis time +- The CSV report now includes the GAV and CPE +- The Hint Analyzer now supports regular expressions +- If show summary is disabled and vulnerable libraries are found that fail the build details are no longer displayed in the console – only that vulnerable libraries were identified +- Resolved issues with threading and multiple connections to the embedded H2 database + - This allows the Jenkins pipeline, Maven Plugin, etc. to safely run parallel executions of dependency-check \ No newline at end of file