Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Sep 1, 2025

Bumps github.com/scanoss/papi from 0.11.0 to 0.17.0.

Release notes

Sourced from github.com/scanoss/papi's releases.

v0.17.0

What's changed

Added

  • Added json_name to protobuf to keep compatibility between REST and gRPC protocol

v0.16.0

What's new

Added

  • Enhanced swagger documentation with examples for dependencies protobuf
  • Added request/response examples to transitive dependencies API

Changed

  • Updated REST endpoint paths: removed /api/ prefix from vulnerability and dependency endpoints (now /v2/... instead of /api/v2/...)
  • Changed Component Echo endpoints from GET to POST

v0.15.0

What's Changed

Added

  • Added CVSS to vulnerability response
  • Added gRPC GetComponentCpes and REST endpoint GET /api/v2/vulnerabilities/cpes/component
  • Added gRPC GetComponentsCpes and REST endpoint POST /api/v2/vulnerabilities/cpes/components
  • Added gRPC GetComponentVulnerabilities and REST endpoint GET /api/v2/vulnerabilities/component
  • Added gRPC GetComponentsVulnerabilities and REST endpoint POST /api/v2/vulnerabilities/components
  • Improved documentation for vulnerability protobuf definition

Changed

  • Deprecated gRPC GetVulnerabilities
  • Deprecated gRPC GetCpes

Full Changelog: scanoss/papi@v0.14.0...v0.15.0

v0.14.0

No release notes provided.

v0.12.0

What's Changed

  • Update dependencies and replace deprecated tools

Full Changelog: scanoss/papi@v0.11.0...v0.12.0

Changelog

Sourced from github.com/scanoss/papi's changelog.

[0.17.0] - 2025-08-29

Added

  • Added json_name to protobuf to keep compatibility between REST and gRPC protocol

[0.16.0] - 2025-08-29

Added

  • Enhanced swagger documentation with examples for dependencies protobuf
  • Added request/response examples to transitive dependencies API

Changed

  • Updated REST endpoint paths: removed /api/ prefix from vulnerability and dependency endpoints (now /v2/... instead of /api/v2/...)
  • Changed Component Echo endpoints from GET to POST

[0.15.0] - 2025-08-26

Added

  • Added gRPC GetComponentCpes and REST endpoint GET /api/v2/vulnerabilities/cpes/component
  • Added gRPC GetComponentsCpes and REST endpoint POST /api/v2/vulnerabilities/cpes/components
  • Added gRPC GetComponentVulnerabilities and REST endpoint GET /api/v2/vulnerabilities/component
  • Added gRPC GetComponentsVulnerabilities and REST endpoint POST /api/v2/vulnerabilities/components
  • Added vulnerability API documentation

[0.14.0] - 2025-08-18

Added

  • Added version to component response

[0.13.0] - 2025-08-13

Added

  • Added License API v2 service

Changed

  • Deprecated PurlRequest, replaced by ComponentsRequest

[0.12.0] - 2025-07-11

Changed

  • gRPC-Gateway v2 migration completed
  • Upgraded Python base image

Fixed

  • Replace protoc-gen-swagger with protoc-gen-openapiv2 for Python
Commits
  • c07a8d5 chore:SP-3133 Adds 'json_name' to protobuf definitions to keep compatibility ...
  • 6d16a39 chore: Adds missing 0.14.0 version to CHANGELOG.md file
  • 025147c chore:SP-3127 Removes '/api' prefix from vulnerability and dependency endpoints
  • a567727 chore:SP-3101 Fixes vulnerability protobuf documentation
  • 83e0d1d chore:SP-3095 Adds CVSS to vulnerability response protobuf definition
  • ea12cc8 chore:SP-3063 Refactor vulnerability protobuf definition
  • d57aa53 [SP-3080] feat: add date field to component version response, change componen...
  • dc4405e chore(changelog): backfill missing releases v0.8.0-v0.12.0 and add v0.13.0
  • 753be35 chore(proto): switch license details and obligations methods to GET
  • 51e6c3d feat(proto): expand license API doc
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/scanoss/papi](https://github.com/scanoss/papi) from 0.11.0 to 0.17.0.
- [Release notes](https://github.com/scanoss/papi/releases)
- [Changelog](https://github.com/scanoss/papi/blob/main/CHANGELOG.md)
- [Commits](scanoss/papi@v0.11.0...v0.17.0)

---
updated-dependencies:
- dependency-name: github.com/scanoss/papi
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 1, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 1, 2025

Superseded by #23.

@dependabot dependabot bot closed this Oct 1, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/scanoss/papi-0.17.0 branch October 1, 2025 04:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant