v1.3.0

Release Highlights

Release tag: v1.3.0

There is one change of interest:

• Conda was added as a package manager source. Details on usage are provided below under the Add Conda support section.

Upgrade Notes

No Action Required. Optionally, you can start requesting harvests for Conda packages. See details below.

What’s changed

Changes: v1.2.0...v1.3.0

Minor Changes

Add Conda support

There is one significant change in this release to add support for Conda package manager. It is classified as minor because it is additive. It does not impact the functioning of previously supported package managers.

• Add Conda Support (#1019) (@lamarrr)

Coordinates syntax:

• type (required) - identifies to use the Conda provider (values: conda | condasource)
• provider (required) - channel on which the package will be crawled. (values: conda-forge | anaconda-main | anaconda-r)
• namespace (optional) - architecture and OS of the package to be crawled (e.g. win64, linux-aarch64). If no architecture is specified, any architecture is chosen.
• package name (required): name of the package
• revision (optional): package version and optional build version (format: (${version} | )-(${buildversion} | )) (e.g. 0.3.0, 0.3.0-py36hffe2fc). If it is a conda coordinate type, the build version of the package is usually a conda-specific representation of the build tools and environment configuration, and build iteration of the package (e.g. for a Python 3.9 environment, buildversion is py39H443E). If none is specified, the latest one will be selected using the package's timestamp.

Examples:

• conda/conda-forge/linux-aarch64/numpy/1.13.0
• condasource/conda-forge/linux-aarch64/numpy/1.13.0
• conda/conda-forge/-/numpy/1.13.0/
• conda/conda-forge/linux-aarch64/numpy/-py36

You can find additional information in the crawler v1.1.0 release notes.

Bug Fixes and Patches

Development related

• Update license mapping with latest ScanCode LicenseDB data (#1049) (@lumaxis)
• Add source location in definitions for sourcearchive packages (#1108) (@qtomlinson)
• Fix originConda route (#1113) (@qtomlinson)
• [conda] fixed service component bug (#1112) (@lamarrr, @lumaxis)

DevOps

• Update test workflow (#1114) (@lumaxis)
• use shared dev deploy workflow in operations (#1092) (@elrayle)
• Add now-required env vars to docs and minimal.env.json (#1083) (@lumaxis)
• Improve formatting and linting setup (#1058) (@lumaxis)

Dependencies

• Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (#1110) (@dependabot[bot])
• Bump the docker-actions group with 2 updates (#1105) (@dependabot[bot])
• Bump the azure-actions group with 2 updates (#1104) (@dependabot[bot])
• Bump peter-evans/create-pull-request from 6.0.1 to 6.0.4 (#1102) (@dependabot[bot])
• Bump azure/login from 1.6.1 to 2.0.0 (#1071) (@dependabot[bot])
• Bump docker/build-push-action from 5.1.0 to 5.2.0 (#1070) (@dependabot[bot])
• Add groups to Dependabot config (#1086) (@lumaxis, @github-actions[bot])