Release 1.17 - Milestone M8
·
13559 commits
to master
since this release
Main features
- Security auditing
- Layer is now capable to run tools on the final cross-compiled image. This enables tools like lynis for security auditing.
- Full support for PHP
- Further tools for python and C
- All classes from this layer have appropriate SPDX-license information set (see #329)
Important Changes
- shellcheck cannot be build on mips, mipsel or powerpc build hosts as the support for these architectures has been removed from the module. If you really need this support, feel free to create an issue
- SCA_VERBOSE_OUTPUT=0 is now the default, so you won't see any parsing output when running the build console. See #349
- oelint-adv support for python2 was removed, as this tool does support only python3 (See #384)
New
- #30 - lynis
- #96 - cspell supports user dictionaries
- #110 - wotan
- #121 - cbmc
- #139 - looong
- #232 - yara
- #273 - progpilot
- #274 - phpstan
- #275 - phpcodefixer
- #334 - flawfinder
- #354 - tiger
- #356 - upc
- #366 - flake8 includes now python-cohesion
- #370 - flake8 includes now flake8-2020
Updates
- #315, #350, #374 - Update phan to 2.3.0
- #316 - Update python-flake8-bugbear to 19.8.0
- #317 - Update kconfig-hardened-check to latest
- #318 - Update shellcheck to 0.60.0-1
- #320, #341, #345 - Update eslint to 6.5.1
- #322, #371 - Update stylelint to 11.1.1
- #324 - Update phpstan to 0.11.16
- #325 - Update python-packaging to 19.2
- #327, #342, #355 - Update python-pytest to 5.2.1
- #335, #343, #367 - Update python-anytree to 2.7.2
- #337 - Update creack/pty to 1.1.9
- #339, #384 - Update oelint-adv to 1.7.0
- #340, #382 - Update python-flake8-eradicate to 0.2.3
- #344 - Update github.com-fatih-structtag to 1.1.0
- #347 - Update python-attrs to 19.2.0
- #351 - Update python-jinja to 2.10.3
- #362 - Update python-configargparse to 0.15.1
- #365 - Update gosec to 2.1.0
- #375 - Update textlint to 11.4.0
- #376, #386 - Update textlint-rule-terminology to 2.0.1
- #377 - Update PhpCodeFixer to 2.0.20
- #383 - Update python-networkx to 2.4
Bugfixes
- #208 - All tool statistics are recalculated from buildstats information
- #328 - Replace nodejs by pure native variant
- #331 - file finding fixed when probing without an file extension
- #346 - fixed typo in packaging of golang.org-x
- #358, #360 - Fixed several issues in README
- #364 - Fixed naming scheme in recipe names/versions
- #372 - Fixed issue that let to steady rebuilding of packages
- #379 - Fixed several issues with typos in protocol-option at git fetcher
- dictionary paths when using cspell
- fix wrong LICENSE in python-typing-extension
- standard tool does require online access