diff --git a/CHANGELOG.md b/CHANGELOG.md index 4e615ae143a..51cfc4815b1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,13 @@ # Change Log +## [Version 9.0.0](https://github.com/jeremylong/DependencyCheck/releases/tag/v9.0.0) (2023-11-22) + +- feat: Utilize NVD API (#5978) +- feat: gitlab dependency scanner report format #5919 (#5920) +- fix: Use ASCII apostrophe for console message (#6076) + +See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/68?closed=1). + ## [Version 8.4.3](https://github.com/jeremylong/DependencyCheck/releases/tag/v8.4.3) (2023-11-15) - fix: bump jcs3 (#6047) diff --git a/README.md b/README.md index 9f035e17e94..2437a6358eb 100644 --- a/README.md +++ b/README.md @@ -10,6 +10,10 @@ Documentation and links to production binary releases can be found on the [githu ## 9.0.0 Upgrade Notice +**Upgrading to 9.0.0 or later is mandatory**; previous versions of dependency-check +utilize the NVD data feeds which will be deprecated on Dec 15th, 2023. Versions +earlier then 9.0.0 are no longer supported and could fail to work after Dec 15th, 2023. + ### NVD API Key Highly Recommended With 9.0.0 dependency-check has moved from using the NVD data-feed to the NVD API. diff --git a/SECURITY.md b/SECURITY.md index ffc5f225656..a1b9d65547e 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -4,8 +4,8 @@ | Version | Supported | | ---------|--------------------| -| 8.0.0+ | :white_check_mark: | -| <= 7.4.4 | :x: | +| 9.0.0+ | :white_check_mark: | +| <= 8.4.3 | :x: | ## Reporting a Vulnerability diff --git a/ant/pom.xml b/ant/pom.xml index a975bebfaa4..214b626e982 100644 --- a/ant/pom.xml +++ b/ant/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 9.0.0-SNAPSHOT + 9.0.1-SNAPSHOT dependency-check-ant diff --git a/archetype/pom.xml b/archetype/pom.xml index 74938e08934..08425e9b72e 100644 --- a/archetype/pom.xml +++ b/archetype/pom.xml @@ -20,14 +20,14 @@ Copyright (c) 2017 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 9.0.0-SNAPSHOT + 9.0.1-SNAPSHOT dependency-check-plugin Dependency-Check Plugin Archetype jar - 2023-11-15T10:23:34Z + 2023-11-22T10:52:29Z scm:git:https://github.com/jeremylong/DependencyCheck.git diff --git a/cli/pom.xml b/cli/pom.xml index 60508c9b68f..bbb5641308e 100644 --- a/cli/pom.xml +++ b/cli/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 9.0.0-SNAPSHOT + 9.0.1-SNAPSHOT dependency-check-cli diff --git a/core/pom.xml b/core/pom.xml index 4cb89ef9cf1..4657a209301 100644 --- a/core/pom.xml +++ b/core/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 9.0.0-SNAPSHOT + 9.0.1-SNAPSHOT dependency-check-core diff --git a/maven/pom.xml b/maven/pom.xml index 882fd551337..ad9bf8e681a 100644 --- a/maven/pom.xml +++ b/maven/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 9.0.0-SNAPSHOT + 9.0.1-SNAPSHOT dependency-check-maven maven-plugin diff --git a/pom.xml b/pom.xml index c6e7fd04b3e..bc36ca9aedf 100644 --- a/pom.xml +++ b/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2012 - Jeremy Long org.owasp dependency-check-parent - 9.0.0-SNAPSHOT + 9.0.1-SNAPSHOT pom @@ -112,7 +112,7 @@ Copyright (c) 2012 - Jeremy Long - 2023-11-15T10:23:34Z + 2023-11-22T10:52:29Z UTF-8 UTF-8 github diff --git a/utils/pom.xml b/utils/pom.xml index daf1aae7ae6..a4d8e484863 100644 --- a/utils/pom.xml +++ b/utils/pom.xml @@ -20,7 +20,7 @@ Copyright (c) 2014 - Jeremy Long. All Rights Reserved. org.owasp dependency-check-parent - 9.0.0-SNAPSHOT + 9.0.1-SNAPSHOT dependency-check-utils