Release notes - 25.1
Changelog (FossID 24.3.2 - 25.1)
-
Toolbox (0.5.2) - Future replacement for fossid-cli, currently included as Beta release. It can be enabled from fossid.conf.
- CLI (3.5.8 - 3.5.11)
- Bugfix: Fix issue related to response compression
- Shinobi (1.5.1 - 1.5.5)
- Improvement: Add linux/arm64 support
- Improvement: Remove parentheses from license IDs
- Bugfix: Wrong copyright detected if using brackets and/or quotations
- Bugfix: Notice generation includes path information
- Bugfix: Separating copyright statements with comma does not work
Release notes - 24.3
Changelog (FossID 24.3.1 - 24.3.2)
- CLI (3.5.6 - 3.5.8)
- Improvement: Add size to signatures by default
- Improvement: Do not report “skipping empty file” for empty files
- Shinobi (1.5.0 - 1.5.1)
- Bugfix: Invalid copyright detected for obfuscated javascript file
- Bugfix: Updated certain license categories to align with new license categorisation framework, replacing those previously classified under outdated categories to ensure better clarity and compliance.
Changelog (FossID 24.3 - 24.3.1)
- Shinobi (1.4.5 - 1.5.0)
- Improvement: Add support for SPDX Licenses list v3.26
- Improvement: Add T-License
Changelog (FossID 24.2.1 -> 24.3)
- CLI (3.5.3 - 3.5.6)
- Improvement: Clarify in help that is displayed the oldest identified version of a component
- Bugfix: Comma in CPE causes issues to CLI –cpe command
- Shinobi (1.3.10 - 1.4.5)
- Improvement: Include SPDX 3.25 license list
- Improvement: Update licenses to use the new license categories
- Improvement: Add “isSpdx” flag to licenses reported to Workbench with -print
- Improvement: Deprecate -omakase and -copyright (default on)
Release Notes - 24.2
Please note that from version 3.5.0 there will no longer be support for shinobi-related options in CLI. You cannot run notice generation, or collect license + copyright for signatures. (Shinobi needs to be invoked separately)
Changelog (FossID 24.2 -> 24.2.1)
- CLI (3.5.1 - 3.5.3)
- Improvement: Add support for ‘CURLSSLOPT_REVOKE_BEST_EFFORT’ for Windows users
- Shinobi (1.3.5 - 1.3.10)
- Bugfix: Pattern classifier should use “Zlib” and not “zlib” as license identifier
- Bugfix: Artistic-dist license is not detected
- Bugfix: Minor fixes to LGPL licenses
CHANGELOG (FossID 24.1 -> 24.2)
- CLI (3.4.16 - 3.5.1)
- Improvement: Allow controlling alfred scoring from the CLI
- Deprecation: Disable Shinobi support in CLI (In favor of running Shinobi Standalone)
- Shinobi (1.3.3 - 1.3.5)
- Improvement: Include Toppers licenses
- Improvement: Use SPDX-compliant license identifiers
Release Notes - 24.1
CHANGELOG (FossID 23.3 -> 24.1)
- CLI (3.4.14 - 3.4.16)
- Improvement: Improve error message for incompatible Shinobi
- Bugfix: Handle JDK output “Picked up _JAVA_OPTIONS” when verifying Java installation
- Bugfix: Fix error message “locale::facet::_S_create_c_locale name not valid”
- Bugfix: Timeout bug on Ubuntu 23.10
- Shinobi (1.2.7 - 1.3.3)
- Improvement: Implement a new text-only output for notice file generation
- Bugfix: GPL-2.0 license displayed instead of GPL-2.0-only
- Bugfix: Fix Kryo warnings when starting on java 11
Release Notes - 23.3
Please note that with the next future major release (24.1), we will be discontinuing support for older Linux distributions including Debian 10, CentOS 7, and RHEL 7. This aligns with the approaching end-of-life (EOL) phase of these distributions in 2024.
CHANGELOG (FossID 23.1 -> 23.3)
- CLI (3.4.9 - 3.4.14)
- Improvement: Validate host and token for –stdin-file
- Improvement: Add support for –stdin-file P (send file contents over stdin)
- Improvement: Improvements in –help section
- Bugfix: JSON exception when collecting fingerprints on Windows
- Shinobi (1.1.8 - 1.2.7)
- Improvement: Add -stats for showing the statistics
- Improvement: Add more runtime information at end of run
- Improvement: Add Broadcom BSD-like license to License Extractor
- Improvement: Logging what file shinobi-le is about to scan.
- Improvement: Bundle data.bin in license-extractor jar
- Bugfix: Shinobi does not obey the -threads parameter
- Bugfix: Improve the Pattern for QNX license
Release Notes - 23.1
CHANGELOG (FossID CLI-TOOLS 22.1 -> FossID CLI-TOOLS 23.1)
- CLI (3.4.6 -> 3.4.7)
- Improvement: Add support for more dependency manifests in fossid-cli ( –dependency-analysis option )
- Bugfix: Wrong highlighting in some match results
Release Notes - 22.1
CHANGELOG (FossID CLI-TOOLS 21.2 -> FossID CLI-TOOLS 22.1)
- CLI (3.4.5 -> 3.4.6)
-
Bugfix: Time out handling improvements
- Shinobi (1.1.1 -> 1.1.3)
- Bugfix: Time out handling improvements
- Bugfix: Copyright detection issue
- Improvement: Added Microsoft Distributed License
Release Notes - 21.2
CHANGELOG (FossID CLI-TOOLS 20.2 -> FossID CLI-TOOLS 21.2)
- CLI (3.2.6 -> 3.4.5)
- New feature: add cli_retry option
- New feature: –timeout / cli_timeout now supports decimal value
- New feature: add cli_timeout option
- New feature: add –retry-wait and cli_retry_wait option
- Improvement: Remove –kb flag
- Improvement: Improve the documentation to explain how KB component version selection works
- Improvement: Improve the highlighting help
- Shinobi (0.9.50 -> 1.0.8)
- Improvement: improve performance of humongous shell scripts and other files
- Bugfix: Generated notice text is lowercase
- Bugfix: I want Shinobi to find LGPL-2.1 instead of LGPL for URL in MANIFEST.MF file
- Bugfix: Wrong URL for “Proprietary License”
- Bugfix: Shinobi not capturing copyrights with keywords ‘Group’ and ‘IS’ using auto-identification options.
- Bugfix: Webapp captures incorrect copyrights using ‘Auto-identification options’
- Bugfix: Incorrectly identified copyright statement
CHANGELOG (FossID CLI-TOOLS 20.1 -> FossID CLI-TOOLS 20.2)
- CLI (3.1.17 -> 3.2.5)
- New feature: Add match format 2 support
- New feature: Support for get component details
- New feature: Add shinobi-timeout parameter to CLI
- New feature: Add –test-scan support
- Improvement: Improve CLI error messages
- Improvement: Change the default KB for VSF to 2
- Improvement: Remove and hide some deprecated options
- Improvement: Add Match Format Documentation
- Improvement: Add SHA1 support for signatures (default OFF)
- Bugfix: Support older Linux distributions
- Shinobi (0.9.7.6.6 -> 0.9.50)
- Improvement: Optimize performance
- Improvement: Shinobi not extracting licenses and copyrights from min.js files.
- Improvement: Improve memory utilization
- Improvement: Improve performance when dealing with larger files
- Bugfix: Shinobi does not detect BSD-3-Clause license
- Bugfix: Shinobi does not detect Apache-2.0 License
- Bugfix: Shinobi does not detect BSD-2-Clause license
- Bugfix: Shinobi detects GPL-3.0 on GPL-2.0 file
- Bugfix: Shinobi fails to detect reference
- Bugfix: Shinobi does not detect MIT License
CHANGELOG (FossID CLI-TOOLS 1912 -> FossID CLI-TOOLS 20.1)
- CLI (3.1.10 -> 3.1.17)
- New feature: Support for getting mirror and local file in UTF-8
- New feature: KB 2 support
- New feature: Add User Contribution Scan (–uc)
- New feature: set default kb version to 2
- New feature: remove –signature-format option
- New feature: support Shinobi notice file generation
- Improvement: remove .patch support
- Improvement: remove -h as shortcut to –help
- Improvement: reduce the size of the CLI
- Improvement: wait (sleep) before retry
- Improvement: lower default retries from 3 to 2
- Improvement: add cli_shinobi_path parameter for fossid-cli
- Bugfix: Scan fails with “Too many levels of symbolic links” error regardless of the setting ‘cli_follow_symlinks = 0’
- Bugfix: fix patch file transformation
- Bugfix: Local file and matched file highlight content is different
- Bugfix: scanning empty signatures reports invalid signature
- Bugfix: permission errors trying to access the signature path
- Bugfix: fix Shinobi timeout too low for some big files
- Bugfix: fix error code when mirror fails
- Bugfix: improve shinobi integration
- Bugfix: workaround for invalid signature: invalid number of line hashes
- Bugfix: lower glibc dependency requirement
- Shinobi (0.9.5 -> 0.9.7.6.6)
- Bugfix: Shinobi detects AGPL for LGPL-2.1 header