What's Changed
Enhancements 🚀
- v4-migrator: Add completion logs and annotate row-count diffs in verify phase by @nscuro in #6261
- Include isLatest flag in nested versions object of /api/v1/project responses by @nscuro in #6263
- Support component hash mismatch policy conditions by @nscuro in #6266
- Make latest version publish timestamp available to CEL policy engine by @nscuro in #6267
Bug Fixes 🐛
- v4-migrator: Explicitly cast ID columns to BIGINT during extract phase by @nscuro in #6253
- Fix missing allowed permission for /api/v2/projects/{uuid}/clone by @nscuro in #6262
- Fix missing fields from GET /api/v1/project response by @nscuro in #6275
- Fix EPSS < and <= policy conditions matching when vuln has no EPSS score by @nscuro in #6274
- Improve escaping of quoted strings for CEL policy inputs by @nscuro in #6276
- Restore legacy behavior of LICENSE and LICENSE_GROUP policy conditions by @nscuro in #6273
- v4-migrator: Fix scheduled notification rules not being migrated by @nscuro in #6277
Dependency Updates 🤖
- chore(deps-dev): Bump io.swagger.parser.v3:swagger-parser from 2.1.42 to 2.1.43 by @dependabot[bot] in #6254
- chore(deps): Bump lib.logback.version from 1.5.32 to 1.5.33 by @dependabot[bot] in #6255
- chore(deps): Bump net.javacrumbs.json-unit:json-unit-assertj from 5.1.1 to 5.1.2 by @dependabot[bot] in #6270
- chore(deps): Bump com.github.kagkarlsson:db-scheduler from 16.10.0 to 16.11.0 by @dependabot[bot] in #6269
Documentation 📃
- Add community meeting reference to README by @nscuro in #6265
- Update ADR-011 with follow-up about Kafka removal by @nscuro in #6278
- Document expected ADR format and writing style by @nscuro in #6279
Other Changes
- Always run manifest generation for DN plugin, even when restoring from cache by @nscuro in #6264
- Streamline responses of API v1 project list endpoints by @nscuro in #6280
Full Changelog: 5.0.0-rc.4...5.0.0-rc.5