What's Changed
fossa analyze --x-workflow(experimental) no longer takes a path to the analyzer. ficus downloads the workflow analyzer itself, so the path was validated and then discarded; the flag is now a switch, and a path following it is read as the scan target. (#1781)- NuGet: project files (
.csproj,.fsproj,.vbproj, ...) containing<PackageReference>items that name no package (e.g.<PackageReference Remove="..." />) no longer fail analysis withMissing attribute at [Project.ItemGroup.PackageReference]; attrName: Update; such items are skipped. (#1780) - Swift:
Package.swiftmanifests declaring package-registry dependencies (.package(id: "scope.name", from: "1.0.0")and the otherid:forms introduced in SwiftPM 5.7) no longer fail analysis withunexpected "id: "" expecting "name:", "path:", or "url:"; the dependency is reported under its registry identifier. (#1773)
Full Changelog: v3.18.4...v3.19.0