Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

Bumps github.com/scanoss/papi from 0.22.0 to 0.25.1.

Release notes

Sourced from github.com/scanoss/papi's releases.

v0.25.1

What's New

Changed

  • Moved ErrorCode enum to common protobuf definition

v0.25.0

What's New

Added

  • Added error_message and error_code fields to all cryptography component response messages for enhanced error handling
  • Added ErrorCode enum with standardized error codes: INVALID_PURL, COMPONENT_NOT_FOUND, NO_INFO, INVALID_SEMVER
  • Added error handling documentation section to cryptography API README.md
  • Added error response examples to cryptography API documentation demonstrating error field usage

Changed

  • Enhanced cryptography API documentation with comprehensive error handling examples and field descriptions
  • Updated JSON schema examples in ComponentsAlgorithmsResponse and ComponentAlgorithmsResponse to demonstrate error scenarios
  • Updated cryptography README.md with error codes reference table and usage notes

v0.24.0

What's New

Added

  • Added gRPC GetComponentsIssues and REST endpoint POST /v2/semgrep/issues/components for Semgrep security analysis
  • Added gRPC GetComponentIssues and REST endpoint GET /v2/semgrep/issues/component for single component Semgrep analysis
  • Added new response message types ComponentsIssueResponse and ComponentIssueResponse for enhanced component handling
  • Added ComponentIssueInfo message with component-specific security analysis information
  • Added requirement field to Semgrep component information for version requirement specifications
  • Added JSON schema examples to Semgrep response messages for improved API documentation

Changed

  • Enhanced Semgrep protobuf definitions with comprehensive service and message documentation
  • Refactored Semgrep protobuf structure by extracting Issue and File messages as top-level messages
  • Updated OpenAPI schema with realistic JSON response examples for Semgrep endpoints

Deprecated

  • Deprecated gRPC GetIssues method (use GetComponentsIssues instead)
  • Deprecated SemgrepResponse message type (use ComponentsIssueResponse or ComponentIssueResponse instead)

v0.23.0

What's New

Added

  • Added gRPC GetCountryContributorsByComponents and REST endpoint POST /v2/geoprovenance/countries/components
  • Added gRPC GetCountryContributorsByComponent and REST endpoint GET /v2/geoprovenance/countries/component
  • Added gRPC GetOriginByComponents and REST endpoint POST /v2/geoprovenance/origin/components
  • Added gRPC GetOriginByComponent and REST endpoint GET /v2/geoprovenance/origin/component
  • Added comprehensive documentation to geo-provenance protobuf service
  • Added geo-provenance API documentation (README.md)

... (truncated)

Changelog

Sourced from github.com/scanoss/papi's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

  • Upcoming changes...

[0.25.0] - 2025-10-13

Added

  • Added error_message and error_code fields to all cryptography component response messages for enhanced error handling
  • Added ErrorCode enum with standardized error codes: INVALID_PURL, COMPONENT_NOT_FOUND, NO_INFO, INVALID_SEMVER
  • Added error handling documentation section to cryptography API README.md
  • Added error response examples to cryptography API documentation demonstrating error field usage

Changed

  • Enhanced cryptography API documentation with comprehensive error handling examples and field descriptions
  • Updated JSON schema examples in ComponentsAlgorithmsResponse and ComponentAlgorithmsResponse to demonstrate error scenarios
  • Updated cryptography README.md with error codes reference table and usage notes

[0.24.0] - 2025-09-24

Added

  • Added gRPC GetComponentsIssues and REST endpoint POST /v2/semgrep/issues/components for Semgrep security analysis
  • Added gRPC GetComponentIssues and REST endpoint GET /v2/semgrep/issues/component for single component Semgrep analysis
  • Added new response message types ComponentsIssueResponse and ComponentIssueResponse for enhanced component handling
  • Added ComponentIssueInfo message with component-specific security analysis information
  • Added requirement field to Semgrep component information for version requirement specifications
  • Added JSON schema examples to Semgrep response messages for improved API documentation

Changed

  • Enhanced Semgrep protobuf definitions with comprehensive service and message documentation
  • Refactored Semgrep protobuf structure by extracting Issue and File messages as top-level messages
  • Updated OpenAPI schema with realistic JSON response examples for Semgrep endpoints

Deprecated

  • Deprecated gRPC GetIssues method (use GetComponentsIssues instead)
  • Deprecated SemgrepResponse message type (use ComponentsIssueResponse or ComponentIssueResponse instead)

[0.23.0] - 2025-09-22

Added

  • Added gRPC GetCountryContributorsByComponents and REST endpoint POST /v2/geoprovenance/countries/components
  • Added gRPC GetCountryContributorsByComponent and REST endpoint GET /v2/geoprovenance/countries/component
  • Added gRPC GetOriginByComponents and REST endpoint POST /v2/geoprovenance/origin/components
  • Added gRPC GetOriginByComponent and REST endpoint GET /v2/geoprovenance/origin/component
  • Added comprehensive documentation to geo-provenance protobuf service
  • Added geo-provenance API documentation (README.md)
  • Added JSON schema examples to geo-provenance response messages

... (truncated)

Commits
  • 9ee17c1 chore:Add error code enum into common protobuf definition
  • c63908a chore:SP-3466 includes error message and status on cryptography block responses
  • 028b45b chore(docs): update README with license file links and clarified analysis exa...
  • 01918d1 fix(proto): scanoss-component.proto throws error when importing into postman
  • ca69991 chore:SP-3325 refactor semgrep protobuf definition
  • 6cbd71b Update changelog-check.yml
  • d02cf98 chore: Enhances changelog-check.yml prompt
  • 6bd33dc chore:fixes changelog-check workflow file
  • bf47617 chore:implements changelog check workflow
  • 551a68e chore:SP-3289 refactor on geoprovenance protobuf definition
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/scanoss/papi](https://github.com/scanoss/papi) from 0.22.0 to 0.25.1.
- [Release notes](https://github.com/scanoss/papi/releases)
- [Changelog](https://github.com/scanoss/papi/blob/main/CHANGELOG.md)
- [Commits](scanoss/papi@v0.22.0...v0.25.1)

---
updated-dependencies:
- dependency-name: github.com/scanoss/papi
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 1, 2025
@coderabbitai
Copy link

coderabbitai bot commented Nov 1, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant