Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps github.com/scanoss/papi from 0.11.0 to 0.24.0.

Release notes

Sourced from github.com/scanoss/papi's releases.

v0.24.0

What's New

Added

  • Added gRPC GetComponentsIssues and REST endpoint POST /v2/semgrep/issues/components for Semgrep security analysis
  • Added gRPC GetComponentIssues and REST endpoint GET /v2/semgrep/issues/component for single component Semgrep analysis
  • Added new response message types ComponentsIssueResponse and ComponentIssueResponse for enhanced component handling
  • Added ComponentIssueInfo message with component-specific security analysis information
  • Added requirement field to Semgrep component information for version requirement specifications
  • Added JSON schema examples to Semgrep response messages for improved API documentation

Changed

  • Enhanced Semgrep protobuf definitions with comprehensive service and message documentation
  • Refactored Semgrep protobuf structure by extracting Issue and File messages as top-level messages
  • Updated OpenAPI schema with realistic JSON response examples for Semgrep endpoints

Deprecated

  • Deprecated gRPC GetIssues method (use GetComponentsIssues instead)
  • Deprecated SemgrepResponse message type (use ComponentsIssueResponse or ComponentIssueResponse instead)

v0.23.0

What's New

Added

  • Added gRPC GetCountryContributorsByComponents and REST endpoint POST /v2/geoprovenance/countries/components
  • Added gRPC GetCountryContributorsByComponent and REST endpoint GET /v2/geoprovenance/countries/component
  • Added gRPC GetOriginByComponents and REST endpoint POST /v2/geoprovenance/origin/components
  • Added gRPC GetOriginByComponent and REST endpoint GET /v2/geoprovenance/origin/component
  • Added comprehensive documentation to geo-provenance protobuf service
  • Added geo-provenance API documentation (README.md)
  • Added JSON schema examples to geo-provenance response messages
  • Added new response message types ComponentsContributorResponse and ComponentsOriginResponse for enhanced component handling

Changed

  • Enhanced geo-provenance protobuf definitions with comprehensive service and message documentation
  • Updated OpenAPI schema with realistic JSON response examples for geo-provenance endpoints
  • Enhanced field documentation across all geo-provenance message types

Deprecated

  • Deprecated gRPC GetComponentContributors method (use GetCountryContributorsByComponents instead)
  • Deprecated gRPC GetComponentOrigin method (use GetOriginByComponents instead)
  • Deprecated ContributorResponse and OriginResponse message types (use new component-based response types instead)

v0.22.0

No release notes provided.

v0.21.0

What's New

Added

  • Added README.md documentation for Components Service API v2
  • Added JSON schema examples to components protobuf definitions for improved API documentation

... (truncated)

Changelog

Sourced from github.com/scanoss/papi's changelog.

[0.24.0] - 2025-09-24

Added

  • Added gRPC GetComponentsIssues and REST endpoint POST /v2/semgrep/issues/components for Semgrep security analysis
  • Added gRPC GetComponentIssues and REST endpoint GET /v2/semgrep/issues/component for single component Semgrep analysis
  • Added new response message types ComponentsIssueResponse and ComponentIssueResponse for enhanced component handling
  • Added ComponentIssueInfo message with component-specific security analysis information
  • Added requirement field to Semgrep component information for version requirement specifications
  • Added JSON schema examples to Semgrep response messages for improved API documentation

Changed

  • Enhanced Semgrep protobuf definitions with comprehensive service and message documentation
  • Refactored Semgrep protobuf structure by extracting Issue and File messages as top-level messages
  • Updated OpenAPI schema with realistic JSON response examples for Semgrep endpoints

Deprecated

  • Deprecated gRPC GetIssues method (use GetComponentsIssues instead)
  • Deprecated SemgrepResponse message type (use ComponentsIssueResponse or ComponentIssueResponse instead)

[0.23.0] - 2025-09-22

Added

  • Added gRPC GetCountryContributorsByComponents and REST endpoint POST /v2/geoprovenance/countries/components
  • Added gRPC GetCountryContributorsByComponent and REST endpoint GET /v2/geoprovenance/countries/component
  • Added gRPC GetOriginByComponents and REST endpoint POST /v2/geoprovenance/origin/components
  • Added gRPC GetOriginByComponent and REST endpoint GET /v2/geoprovenance/origin/component
  • Added comprehensive documentation to geo-provenance protobuf service
  • Added geo-provenance API documentation (README.md)
  • Added JSON schema examples to geo-provenance response messages
  • Added new response message types ComponentsContributorResponse and ComponentsOriginResponse for enhanced component handling

Changed

  • Enhanced geo-provenance protobuf definitions with comprehensive service and message documentation
  • Updated OpenAPI schema with realistic JSON response examples for geo-provenance endpoints
  • Enhanced field documentation across all geo-provenance message types

Deprecated

  • Deprecated gRPC GetComponentContributors method (use GetCountryContributorsByComponents instead)
  • Deprecated gRPC GetComponentOrigin method (use GetOriginByComponents instead)
  • Deprecated ContributorResponse and OriginResponse message types (use new component-based response types instead)

[0.22.0] - 2025-09-22

[0.21.0] - 2025-09-18

Added

  • Added README.md documentation for Components Service API v2
  • Added JSON schema examples to components protobuf definitions for improved API documentation

Changed

  • Updated components protobuf message structure with proper field naming consistency
  • Enhanced components response messages with JSON schema examples for OpenAPI generation

[0.20.1] - 2025-09-15

Fixed

  • Fixed TransitiveDependencyRequest protobuf definition

... (truncated)

Commits
  • ca69991 chore:SP-3325 refactor semgrep protobuf definition
  • 6cbd71b Update changelog-check.yml
  • d02cf98 chore: Enhances changelog-check.yml prompt
  • 6bd33dc chore:fixes changelog-check workflow file
  • bf47617 chore:implements changelog check workflow
  • 551a68e chore:SP-3289 refactor on geoprovenance protobuf definition
  • 87fcda5 [SP-2992] chore: update go generated code
  • 5b85eed [SP-2992] chore: rename min_cutoff_threshold to recursive_threshold, add min_...
  • d274041 [SP-2992] feat: update go definition
  • 0d4f881 [SP-2992] feat: add min_cuttof_threshold to HfhRequest definition
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 1, 2025
@coderabbitai
Copy link

coderabbitai bot commented Oct 1, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/scanoss/papi-0.24.0 branch from 803bf38 to 2c55543 Compare October 8, 2025 16:33
Bumps [github.com/scanoss/papi](https://github.com/scanoss/papi) from 0.11.0 to 0.24.0.
- [Release notes](https://github.com/scanoss/papi/releases)
- [Changelog](https://github.com/scanoss/papi/blob/main/CHANGELOG.md)
- [Commits](scanoss/papi@v0.11.0...v0.24.0)

---
updated-dependencies:
- dependency-name: github.com/scanoss/papi
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/scanoss/papi-0.24.0 branch from 2c55543 to 775c830 Compare October 15, 2025 06:50
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Nov 1, 2025

Superseded by #33.

@dependabot dependabot bot closed this Nov 1, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/scanoss/papi-0.24.0 branch November 1, 2025 04:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant