v2.16.7

2.16.7 (2024-12-03)

Bug Fixes

• build: upgrade eslint (fe58362)

v2.16.6

2.16.6 (2024-11-11)

Bug Fixes

• snyk: resolutions not respected when running license check (492879d)

v2.16.5

2.16.5 (2024-11-08)

Bug Fixes

• deps: force resolution - version bump (9ea4801)

v2.16.4

2.16.4 (2024-11-07)

Bug Fixes

• package.json & yarn.lock to reduce vulnerabilities (328289a)

v2.16.3

2.16.3 (2024-09-13)

Bug Fixes

• error: dir structure check (801c2ba)
• exemption: loader issue (4690f99)
• Resolve TypeScript error in isPathInside function (62544f2)
• Validate input used to build paths (7a17db4)

v2.16.2

2.16.2 (2024-09-13)

Bug Fixes

• errors: directory structure base fix, and some logic issues in error handling (e89d783)

v2.16.1

2.16.1 (2024-09-13)

Bug Fixes

• package.json & yarn.lock to reduce vulnerabilities (8e9bc8e)

v2.16.0

2.16.0 (2024-09-10)

Bug Fixes

• Add null checks for child.stdout and child.stderr in collectYarnDependencies function (cd3f271)
• add type assertion to resolve TypeScript error (aeb4c52)
• cast util.promisify to unknown before mocking (f8c5069)
• collect Yarn dependencies when yarn.lock exists (48c50d1)
• Collect Yarn dependencies when yarn.lock exists (2e159f0)
• Handle error types in dependency collection functions (1711cb1)
• increase Jest timeout for repoDependencyFacts.test.ts (05185d9)
• Mock child_process.exec to return a mock function (ebba176)
• promisechain: avoid skipped files (0cdf825)
• Refactor runEngineOnFiles to use synchronous approach (77c259e)
• resolve TypeScript error in repoDependencyFacts.test.ts (075e884)
• resolve TypeScript error in repoDependencyFacts.test.ts (6c4870e)
• Resolve TypeScript errors in repoDependencyFacts.test.ts (bd47c66)
• update analyzer.test.ts to use expect.any(Number) for fileCount, totalIssues, and warningCount (66bbd47)
• update minimum dependency version comparison (3373646)
• Update mocking of util.promisify and fs.existsSync in repoDependencyFacts.test.ts (fa81048)
• Update mocking of util.promisify in repoDependencyFacts.test.ts (8e6a18d)
• Update repoDependencyFacts to fix test issues (8d4bfc1)
• Update runEngineOnFiles function to handle asynchronous engine.run() call (01ec5b0)
• Update test expectations for analyzeCodebase (524f0d3)
• Update test expectations for error handling in analyzer (a986892)
• Update test expectations for handling errors during analysis (6a9c1b9)
• update unit tests for loading npm and yarn dependencies (4faf703)
• Use exec instead of spawn for collecting yarn dependencies (b6bd17c)

Features

• Replace execSync with spawned child process for dependency collection (bd4b38e)
• Update analyzer.test.ts with more precise expectations (7376191)
• update repoDependencyFacts tests to match implementation (9514c3a)

v2.15.0

2.15.0 (2024-09-08)

Bug Fixes

• execution: fact functions and cleanup (8bd2cfa)
• Implement more robust error handling and logging (f391052)
• Implement safe handling of circular JSON references in repoDependencyFacts.ts (49d95da)
• loading: consistency with archetype (47f52e4)
• Update import statement in repoFilesystemFacts.ts (903326c)

Features

• Add JSON schema validation for .xfi-config.json file (a7d0a75)
• Add rule to check for 'nuit' and 'elevate' package imports in the same file (70d0994)
• Add support for .xfi-config.json file (e9b60d3)
• Add support for .xfi-config.json file with sensitiveFileFalsePositives (5eda4f4)
• Add XFIConfig to ResultMetadata and define FileData and ValidationResult types (ce71d90)
• Centralize loading of .xfi-config.json and add it as a fact (2cca682)
• create 'bats' subdirectory and move BATS-related content (1cc0bff)
• improve and modernize the bats test (586b546)
• Improve repoDependencyAnalysis function (a5638ca)
• Rename XFIConfig to RepoXFIConfig (f91574d)
• repoconfig: support for local control of false positive sensitive values (db0b09a)
• testing: cli blackbox testing (a634258)

v2.14.0

2.14.0 (2024-08-29)

Bug Fixes

• exemptions: exclude repos that do not have a remote configured (c49c4c7)

Features

• Add exemptions feature to manage rule exceptions (0a91ad8)