Changes The maven plugin now includes pnpm and yarn lock files in the scan by default (#4753). If a suppression rule is no longer used a log entry will be written (#4685). Several bug fixes made and suppression rules added. See the full listing of changes.