Updated dependency-check-core to v7.0.0. See release notes of DependencyCheck of v7.0.0 for details
Breaking changes
- The H2 database version has been upgraded to a new major version. If you use the
dependencyCheckDataDirectory
setting you will need to rundependencyCheckPurge
after upgrading. - Upgraded to dotnet core 6.0. If analyzing dotnet assemblies the system will need to have the dotnet core 6.0.x runtime available.
Noteworthy changes
- The Sarif report format has been fixed and can now be imported into GitHub if desired.
- When analyzing Scala projects ODC now includes data from the developers section.
- This will likely cause false positives on things like Apache James, please report the FP upstream at https://github.com/jeremylong/DependencyCheck and they will fix these quickly.