v1.2.0

Changelog

• 61180cc Merge branch 'main' into feature/ossindex-url-configuration
• a317202 Merge pull request #285 from sonatype-nexus-community/feature/ossindex-url-configuration
• 143e32c chore(doc): Corrected contributor username
• 2d4ac18 feat: add configurable OSS Index URL support

v1.1.1

Changelog

• 337a577 chore(ci): Run Release after Sonatype Lifecycle scan
• 2583e9d chore(ci): Use GH PAT during relase

v1.1.0

Changelog

• 6b2c8c6 Bump github.com/spf13/cobra to avoid any license ambiguity
• ea77512 Merge pull request #287 from sonatype-nexus-community/feat/align-to-community-standards
• 7824e57 chore(ci): Disabled some integration tests for now
• 05e7467 chore(ci): Update for GitHub Actions
• e6d6375 chore(ci): Updated action version for release
• 0e5128d feat: Align to latest Sonatype Community Stanadards
• 45fa30d fix: Bump github.com/sirupsen/logrus to v1.8.3 due to CVE
• 3b3494b fix: Bump golang.org/x/crypto to v0.45.0 due to CVE
• ec850bb fix: Supply OSSI auth during integration tests
• f2bd814 re-added header.txt

v1.0.52

Changelog

• c487064 fix: CVE-2025-58058 in github.com/ulikunitz/xz v0.5.9 via update to v0.5.15 (#283)

v1.0.51

Changelog

• f3d25c8 fix: address vulnerabilities and ignore vulnerabilities from golang/golang.org/x/image in integration tests

v1.0.50

Changelog

• 176e21f fix: CVE-2022-21235 in github.com/Masterminds/vcs v1.13.1

v1.0.49

Changelog

• 6acf860 attempt to fix Jenkins build error: go.mod:3: invalid go version '1.23.0': must match format 1.23
• 879ed65 fix: CVE-2022-27191 in golang.org/x/crypto, CVE-2025-22870 in golang.org/x/net
• 2e7896b fix: CVE-2022-41717 in golang.org/x/net v0.0.0-20190620200207-3b0461eec859
• 4324eb9 fix: unit test error
• 64835c4 revert attempt to fix Jenkins build error: go.mod:3: invalid go version '1.23.0': must match format 1.23
• 0427e1f update deprecated goreleaser configs

v1.0.48

Changelog

• ed40113 goreleaser config updated for version 2

v1.0.46

Changelog

• ffce449 Update README.md (#277) [skip ci]
• d05e7bc doco: CI: remove obsolete --job argument for local CI build
• 485bfd3 fix integration test failure due to CVE-2023-45142 in dev dependency
• 394cda0 fix: resolve CVE-2024-24786 in google.golang.org/protobuf v1.25.0
• 24d858b remove githubStatusUpdate() calls from Jenkinsfile

v1.0.45

Changelog

• 6ec844a fix: build failure during login