Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release v4.5.0 #2782

Merged
merged 1 commit into from
Feb 10, 2024
Merged

Release v4.5.0 #2782

merged 1 commit into from
Feb 10, 2024

Conversation

shaopeng-gh
Copy link
Collaborator

**v4.5.0 Sdk | Driver | Converters | Multitool | Multitool Library

  • DEP: Downgrade System.Text.Encoding.CodePages from 8.0.0 to 4.3.0 in Sarif.
  • DEP: Remove explicit versioning for System.Memory and System.Runtime.CompilerServices.Unsafe.
  • DEP: Remove spurious references to System.Collections.Immutable.
  • DEP: Update Microsoft.Data.SqlClient reference from 2.1.2 to 2.1.7 in WorkItems and Sarif.Multitool.Library to resolve CVE-2024-0056.
  • DEP: Update System.Data.SqlClient reference from 4.8.5 to 4.8.6 in WorkItems to resolve CVE-2024-0056.
  • BUG: Improve FileEncoding.IsTextualData method for detecting binary files.
  • BUG: Update Stack.Create method to populate missing PhysicalLocation instances when stack frames reference relative file paths.
  • BUG: Fix UnsupportedOperationException in ZipArchiveArtifact.
  • BUG: Fix MultithreadedAnalyzeCommandBase to return rich return code with the --rich-return-code option.
  • NEW: Add IsBinary property to IEnumeratedArtifact and implement the property in ZipArchiveArtifact.
  • NEW: Switch to content-based IsBinary categorization for ZipArchiveArtifacts.
  • PRF: Change default max-file-size-in-kb parameter to 10 megabytes.
  • PRF: Add support for efficiently peeking into non-seekable streams for binary/text categorization.
  • NEW: Add a new --timeout-in-seconds parameter to AnalyzeOptionsBase, which will override the TimeoutInMilliseconds property in AnalyzeContextBase.
  • NEW: --post-uri will skip sending the SARIF log to the configured endpoint if the file contains no results or fatal execution errors.
  • NEW: Add the following rules:
    ADO1011.ReferenceFinalSchema,
    ADO1013.ProvideRequiredSarifLogProperties,
    ADO1014.ProvideRequiredRunProperties,
    ADO1015.ProvideRequiredResultProperties,
    ADO1016.ProvideRequiredLocationProperties,
    ADO1017.ProvideRequiredPhysicalLocationProperties,
    ADO1018.ProvideRequiredToolProperties,
    ADO2012.ProvideRequiredReportingDescriptorProperties,
    GH1011.ReferenceFinalSchema,
    GH1013.ProvideRequiredSarifLogProperties,
    GH1014.ProvideRequiredRunProperties,
    GH1015.ProvideRequiredResultProperties,
    GH1016.ProvideRequiredLocationProperties,
    GH1017.ProvideRequiredPhysicalLocationProperties,
    GH1018.ProvideRequiredToolProperties,
    GH2012.ProvideRequiredReportingDescriptorProperties.
  • NEW: Add a new --rule-kind parameter to AnalyzeOptionsBase, which specifies rule kinds to run (Sarif, Ghas, Ado). Example: --rule-kind Ado;Sarif.

Copy link
Collaborator

@EasyRhinoMSFT EasyRhinoMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@EasyRhinoMSFT EasyRhinoMSFT merged commit 84f83c8 into main Feb 10, 2024
8 checks passed
@EasyRhinoMSFT EasyRhinoMSFT deleted the nuget-release-4.5.0 branch February 10, 2024 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants