0.2.0

Changelog

v0.2.0 (2025-01-17)

⚠ BREAKING-CHANGE

• This changes the prefix of the API from/api/v1 to /api/v2 as this is the successor API of trustification (v1).

Features

• show relationships in response from /api/v1/purl/{key} (efc9394), closes
  #1131
• add some OSV examples to DS3 (0d08059)
• add two example entries fro GHSA data (e08aacb)
• create GeneratedFrom relationship from CycloneDX dependencies (88fa55c),
  closes #1131
• add average_severity to PurlStatus (4a7ae84)
• allow disabling the request logging (88c8632)
• allow start year and years filtering for osv (74fa0e6)
• reimplament vulnerability endpoint logic and api so we can retrieve purls
  for affected sboms (7c2c140)

Fixes

• improve product version range migration (ddfde89)
• urlencode purl qualifier values in the db (dc0cc84)
• use predictable ids for product related entities and additionally speed up
  csaf ingestion (80c6d09)
• optimize import of product related entities during csaf ingestion (678284e)
• improve sbom to vunerabilities correlation both in performance and accuracy
  (a98d468)