v2.4.2

Resolve: fossa vps would not function correctly due to a build process issue.

v2.4.1

• Fix an issue where the title option was not being sent to FOSSA. (#155)

v2.4.0

v2.4.0

Major change

As of this release, vpscli and its functionality is no longer a separate binary from the normal fossa tool. The same functionality is accessed by a subcommand, namely fossa vps. There are a few changes in the command-line arguments, and an example of the change is shown below. Please check the --help output for more info.

Notable differences (only relavant to previous vpscli usage):

• vpscli scan has changed to fossa vps analyze. This matches the analyze/test/report convention from the normal dependency scanner.
• vpscli ninja-graph has changed to fossa vps ninja-graph.
• -d/--basedir PATH is now a positional argument, same as fossa analyze. You can use -- before an argument to force it to be treated as a positional argument. Default value is the string ".", which represents the current working directory.
• --project-name NAME is no longer required, and has been renamed to --project. If omitted, we use the same inference rules as the normal dependency scanner.
• --fossa-url has been renamed to --endpoint. This allows us to re-use the same argument for multiple commands.
• --debug is required to see the trace logs from fossa vps analyze. This is a result of switching vpscli's internals to use our standard logger.

# Original invocation
vpscli scan -d path/to/project/ --project-name 'quick' --fossa-url 'https://app.vps.fossa.team' --fossa-api-key <key>
# New invocation
fossa vps analyze --endpoint 'https://app.vps.fossa.team' --fossa-api-key <key> path/to/project

Full Changelog

• Integrates vpscli scan as fossa vps analyze (#148)
• Removes vpscli binary (#148)
• Adds support for --team and other metadata flags to vps analysis (#149)
• Adds fossa vps test command, analogous to fossa test for vps projects (#150)
• Adds fossa vps report command, analogous to fossa report for vps projects (#150)
• Adds support for unpacking of gzipped RPMs (#154)

v2.3.5

Updates binary dependencies in vpscli to resolve the following issues:

• Issues checking some files in the project for first-party licenses should no longer prevent a scan from completing.
• The special case when scanning zip archives with duplicate file names should no longer prevent the scan from completing.

v2.3.4

• Fix the contributor upload URL (#146)

v2.3.3

Small bugfix release for 2.3.2. 2.3.2 release notes below:

v2.3.2

• Adds fossa list-targets to list "analysis-targets" (projects and subprojects) available for analysis (#140)
• Adds --filter TARGET option to fossa analyze (#140)
• Merges the dependencies of *req*.txt and setup.py files we find (#140)
• Improves maven project discovery (#140)
• Fixes gradle wrapper integration (#140)
• Adds support for "detached HEAD" state in git and svn (#141)

---

vpscli

• Use at on-premise customers now requires FOSSA 3.0.5 or later, and Scotland Yard 2020-10-06-b1ba307 or later.
• supports uploading first-party IPR data in smaller chunks. (#99)
• supports unified scan file filters with the FOSSA UI. (#143)

v2.3.2

v2.3.2

• Adds fossa list-targets to list "analysis-targets" (projects and subprojects) available for analysis (#140)
• Adds --filter TARGET option to fossa analyze (#140)
• Merges the dependencies of *req*.txt and setup.py files we find (#140)
• Improves maven project discovery (#140)
• Fixes gradle wrapper integration (#140)
• Adds support for "detached HEAD" state in git and svn (#141)

---

vpscli

• Use at on-premise customers now requires FOSSA 3.0.5 or later, and Scotland Yard 2020-10-06-b1ba307 or later.
• supports uploading first-party IPR data in smaller chunks. (#99)
• supports unified scan file filters with the FOSSA UI. (#143)

v2.3.1

• RPM: Merge spec file results in the analyzer. (#138)
• Erlang: Resolve rebar3 aliased packages to their true names. (#139)
• Gradle: Accept and tag all build configuration names. (#134)

v2.3.0

• Adds a user guide
• Fixes bug where the rebar3 strategy would incorrectly find dependencies as top-level projects (#119)
• Fixes various issues in the setup.py parser (#119)
• Adds an analyzer for haskell projects using cabal-install and stack (#122) (#126)
• Adds an analyzer for PHP projects via composer (#121)

v2.2.7

Update vpscli to upload an empty IPR result set to FOSSA if IPR scanning is skipped.