• v1.5.10 70b8c37396

    v1.5.10 Stable

    Ghost released this 2026-05-14 18:10:35 +02:00 | 292 commits to main since this release

    What's Changed

    • chore: format PATH variable construction in SBOM upload test (4acc21e)
      Remove unnecessary line breaks from PATH environment variable formatting in dependency_track_upload_uses_the_repo_default_server_when_url_is_unset test.

    • ci: use default Dependency-Track server URL in SBOM upload workflows (9ba349a)
      Remove DTRACK_URL environment variable from SBOM and release workflows. Add DTRACK_DEFAULT_URL fallback to upload script with hardcoded repo default (https://dtrack.wuastbude.de). Make DTRACK_URL optional in upload script, falling back to default when unset. Add test for default URL behavior with fake curl wrapper. Update workflow tests to verify DTRACK_URL is not set in env blocks.

    • ci: add CycloneDX SBOM generation and Dependency-Track upload (7ba8675)
      Add cargo-cyclonedx for native Rust SBOM generation. Create dedicated SBOM workflow triggered on pull requests, pushes to main, and manual dispatch. Generate CycloneDX 1.5 JSON SBOMs and upload to Dependency-Track only on non-PR events. Integrate SBOM generation and upload into release workflow after Docker build succeeds.

      Add scripts/generate-sbom.sh to install and run cargo-cyclonedx with version pinning via scripts/sbom-tools.env

    • ci: add dependency-track sbom integration (6a87832)

    Downloads