v0.37.1

Fix

• More container tools broken when home-less (#337) (403eb7d)

v0.37.0

Feature

• Add Python 3.12 support and drop Python 3.8 support (#335) (feb3502)
• Enforce strict engine control for npm (#336) (4e69e3e)

Breaking

• Support for Python 3.8 was removed due to the change in CONTRIBUTING policy to support only the current/latest release plus the previous three minor versions of Python. (feb3502)

v0.36.0

Feature

• Account for dependency file types (#324) (918902d)
• Replace lockfile detection with phylum status (#322) (224e3a6)
• Add lockfile generation support (#318) (f96ff48)

Fix

• Container tools broken when home-less (#329) (f951e3c)

Breaking

• The phylum-ci docker image created from the default Dockerfile is much larger, containing all the required tools for lockfile generation across all supported ecosystems. To retain the previous functionality, a new slim tag is offered for those instances where no manifest files are present and/or only lockfiles are used. (f96ff48)

Documentation

• Add more detail for manifest file support (#328) (3241d2d)

v0.35.2

Fix

• Integrations should check for previous comments (#305) (12e7445)

v0.35.1

Fix

• Incorrect new dependency logic (#304) (b447b46)

v0.35.0

Feature

• Add CycloneDX lockfile support (#297) (3897879)

Breaking

• CLI installs prior to v5.7.0 are no longer supported. A Phylum CLI version with ability to parse CycloneDX lockfiles is needed. (3897879)

v0.34.0

Feature

• Improve GitLab integration for partial checkouts (#291) (ca33672)

v0.33.0

Feature

• Add packages.*.lock.json lockfile detection (#287) (00e1d57)

v0.32.1

What's Changed

• chore: add lockfile to PackageDescriptor by @ejortega in #282

New Contributors

• @ejortega made their first contribution in #282

Full Changelog: v0.32.0...v0.32.1

v0.32.0

Feature

• Add pnpm-lock.yaml and packages.lock.json lockfile support (#277) (a24b2c2)

Breaking

• CLI installs prior to v5.5.0 are no longer supported. A Phylum CLI version with ability to parse pnpm-lock.yaml and packages.lock.json lockfiles is needed. (a24b2c2)