Release Notes
Interlynk's Platform release notes.
v3.1.9
April 17th 2025
Interlynk Platform Release v3.1.9 📦
Release Highlights ✨
This release introduces several improvements to the Interlynk Platform, focusing on enhanced filtering capabilities, better label management, and improved user experience across various components. Key highlights include:
🏷️ Bitbucket Project Label Support - Integration of Bitbucket project information as labels
🔄 Product Lifestage Filtering - New filtering options at version level
🛠️ SBOM Download Improvements - Added support status parameters
📊 Health Score Calculations - Refactored to handle "NA" values properly
🧹 UI/UX Improvements - Multiple usability and interface enhancements
New Features 🚀
Label Management
🏷️ Added Bitbucket label handling to repository service and data migration (#2173, #6118)
🔄 Refactored global label filter for improved performance (#6154)
✉️ Enhanced label delete flow with a toast message for better feedback (#6172)
Filtering & Export
🏁 Added lifestage filter at version level (#2165)
🏁 Enabled product lifestage filter throughout the application (#6053)
📊 Added include_support_status argument to SBOM download (#2179, #5977)
📋 Updated Component CSV Export with correct data and missing fields (#6113)
📋 Added Part column to vulnerability CSV export (#6165)
UI Enhancements
📝 Made product description expandable for large content (#6128)
🎨 Implemented row highlight on hover for better table navigation (#6110)
🔄 Updated organization activity cards layout (#6140)
📊 Fixed component insights preview (#6171)
Bug Fixes 🐛
UI Fixes
🔧 Fixed graphql warnings (#2181)
🔧 Fixed global vulnerability sorting issues (#2192)
🔧 Fixed Jira users listing (#2193)
🔧 Fixed Product Group Breadcrumb Duplicates (#6108)
🔧 Fixed Vulnerability Links UI Jump and Button Disable Logic (#6114)
🔧 Fixed CWE list to display 'N/A' when invalid CWE values are present (#6115)
🔧 Fixed username preview (#6120)
🔧 Fixed component health score issue (#6152)
🔧 Fixed shared component table with part details (#6161)
🔧 Fixed SBOM actions spacing (#6167)
🔧 Added null check to prevent crash in expandable text component (#6149)
Functional Fixes
🔧 Refactored health score calculations to handle "NA" values (#2188)
🔧 Fixed custom vulnerability create function (#6138)
🔧 Fixed assessment expire field (#6153)
🔧 Fixed global vulnerability edit permission for non-admin users (#6162)
🔧 Fixed Export to only include Part name in Vulnerability CSV Export (#6176)
Code Improvements 🧰
Component Refactoring
🧰 Improved connection card component code (#6112)
🧰 Made Delete Button reusable and consistent across app (#6100)
🧰 Cleaned up Config modal component and improved code structure (#6123)
🧰 Refactored support and users data export mapping for improved clarity (#6130)
🧰 Improved SBOM support card component code (#6136)
🧰 Refactored Edit Button Component for reusability and consistency (#6129)
🧰 Refactored SBOM alternatives drawer (#6139)
🧰 Refactored global policy table (#6150)
Testing Improvements
🧪 Fixed Labels E2E tests (#6119)
🧪 Optimized Security Token CRUD E2E Test Time (#6124)
🧪 Fixed role E2E test (#6125)
🧪 Fixed product label E2E test (#6126)
🧪 Updated GitHub actions schedule timing for playwright tests (#6145)
Security & Dependencies
🔒 Bumped serialize-javascript from 6.0.1 to 6.0.2 (#6117)
📦 Updated all patch-level dependencies to latest versions (#6104)
v3.1.7
April 10th 2025
🚀 Highlights
Interlynk Platform v3.1.7 brings significant improvements to the user interface, vulnerability management, and SBOM functionality. This release focuses on enhancing the overall user experience with the introduction of LynkSelect components across multiple features, improved CSV export capabilities, and several critical bug fixes.
✨ New Features
UI Enhancements
LynkSelect Implementation 🎨
Replaced standard select components with LynkSelect in multiple areas:
Vulnerability Edit Links (#6038)
Support Status Bulk Edit (#6040)
Relationship Drawer (#6024)
Automation Rule Conditions (#6056)
Enhanced CSV Export with Add/Remove All Columns functionality (#6059)
Updated action buttons in Component Links and Relationships Edit (#6058)
Vulnerability Management
Advisory System Improvements 📋
Added new drawer for vulnerability advisory list (#6065)
Updated vulnerability expand view with advisory list (#6107)
Fixed advisory link issues (#6083)
Updated vulnerability information for non-CVE entries (#2170)
SBOM Enhancements
Component Information Access 📦
Added SBOM Component PURL and CPE Modals in Customer View (#6079)
Implemented copy to clipboard functionality for CPE and PURL (#6095)
Improved Archived SBOM list drawer component and query (#6063)
Refactored SBOM details component for better performance (#6077)
Support Status Management
Support Status Workflow 🔄
Updated component support status system (#2166)
Fixed support status update logic (#6066)
Added conditional preview for product label filter (#6075)
Backend Improvements
Security Updates 🔒
Updated OSV client (#2169)
Fixed policy failures (#2175)
Updated vulnerability information query (#2176)
🐛 Bug Fixes
UI Fixes
Fixed layout issues in policy conditions section (#6057)
Resolved CVSS Vector display issues in main view (#6061) and customer view (#6078)
Fixed UI breaking issue in customer view vulnerabilities (#6076)
Corrected version data display in support status expanded component (#6067)
Fixed incorrect rendering of policy condition fields (#6096)
Removed accessibility warnings for improved compliance (#6097)
Functional Fixes
Fixed validation for community count thresholds (#6062)
Corrected support status drawer with required changes (#6060)
Fixed support status preview (#6074)
Resolved component link and relationship CRUD functionality E2E tests (#6082)
Fixed support expand view (#6084)
Corrected License Expression in SBOM License CSV Export (#6085)
Fixed Support Level data in SBOM Support Status CSV Export (#6087)
Fixed UI break in Vulnerability CWEs List when no data is present (#6103)
Corrected typo in email connections description (#6109)
Fixed rendering issues in policy and automation fields (#6111)
Fixed CWE link in vulnerability expand view (#6088)
Fixed vulnerability advisory link preview (#6094)
🔧 Other Improvements
Refactored Bitbucket Config Modal for optimizations (#6064)
Removed support action and filters from component table (#6081)
Updated seed data (#2171)
Updated CSV export fields and headers for Support Status (#6102)
v3.1.6
April 4th 2025
Release Highlights ✨
Enhanced Vulnerability Management: Added support for CWE & Advisories persistence, improved NVD client implementation, and custom vulnerability handling
Improved UI Components: Integrated LynkSelect across multiple platform areas for better user experience
Lifecycle Support: Implemented SBOM lifecycle for dashboard based on project and enabled lifecycle support at the version level
Performance Optimizations: Refactored package lookup and storage logic to use normalized PURL format
New Features 🆕
Backend Improvements
✅ Added NVD client implementation
✅ Added support for webhook secrets
✅ Implemented bulk create and update capabilities for support levels
✅ Added SBOM lifecycle for dashboard based on project
✅ Implemented license notification on license components
✅ Refactored package lookup and storage to use normalized PURL format
UI Enhancements
✅ Refactored SBOM vulnerability table
✅ Integrated LynkSelect across multiple UI components:
Support Checks
Upload Modal
Life Stage Modal
Component Support
Component Relations
Request Accept Modal
Role Deletion
Links Edit
Policy Rule Modal
PURL Editor
Switch Environment Modal
Custom Vulnerability Modal
License Status Drawer
Pagination Select
✅ Updated support status check form
✅ Updated assessment expiration field
✅ Enhanced product and version tables
✅ Added dashboard card for version lifestage
✅ Improved component links preview
Bug Fixes 🐛
Backend Fixes
✅ Fixed NVD client issues
✅ Fixed rubocop job
✅ Fixed EPSS KEV job
✅ Fixed vulnerability metrics to consider environment
✅ Fixed issues with custom vulnerabilities
✅ Removed bad data affecting system performance
UI Fixes
✅ Fixed component links preview
✅ Fixed automation, license and health permissions
✅ Fixed version breadcrumb
✅ Fixed request table actions
✅ Fixed CSV download bug - properly handling comma in strings
✅ Fixed version lifestage API call
✅ Fixed component relationship E2E tests
✅ Fixed breadcrumbs layout issue for product and version name
✅ Fixed SBOM license update issue
✅ Fixed bulk VEX update with required validation
✅ Fixed user details modal
✅ Fixed vulnerability severity graph
Other Improvements 🔧
✅ Updated Ruby gems
✅ Added new test for organization score settings
✅ Added new test for component support status
✅ Added conditional preview for product label card
✅ Truncated long descriptions from vulnerability info page
✅ Added retries and updated timeout for E2E tests
✅ Disabled CSV download when no columns are selected
v3.1.5
March 27th 2025
Interlynk Platform Release v3.1.5
🌟 Highlights
Enhanced Component Management: Improved SBOM vulnerability component code and refactored component links for better performance
Enrich Java Packages: Enrich java components from maven central.
Bitbucket: Support Searching & Pagination.
Security Enhancements: Added KEV details for CSV exports from Vulnerabilities
Performance Optimizations: Optimized E2E tests by reusing authentication state
Backend Improvements: Added cron job for cleaning up webhook events
🚀 New Features
Backend Enhancements
✨ Add cron job for cleaning up webhook_events (#2104)
✨ Feature/enrich maven (#2128)
✨ Add pagination support for bitbucket repositories (#5908)
✨ Update age score limit (#5936)
✨ Add KEV details for CSV Export from Vulnerabilities (#5955)
UI/UX Improvements
✨ Create Reusable ToggleVisibilityButton for Password Fields (#5921)
✨ Integrate LynkSelect in Config Modal (#5926)
✨ Integrate LynkSelect in Invite User Modal (#5927)
✨ Integrate LynkSelect in License Modal (#5932)
✨ Add loading indicator for license creation and update process (#5937)
✨ Integrate LynkSelect in Edit Custom Vulnerability Drawer (#5966)
✨ Integrate LynkSelect in Change Role Modal (#5967)
✨ Integrate LynkSelect in Vulnerability Custom Field Modal (#5968)
✨ Update bitbucket icon (#5947)
🐛 Bug Fixes
Security Fixes
🔒 Support deprecated flag for cpe & remove from CPE autocomplete (#2137)
🔒 Remove token create permission from user level (#5956)
🔒 Fixed viewer role permissions (#5976)
Component Management
🛠️ Improve SBOM Vulnerability Component Code (#5917)
🛠️ Fixed component tag in SBOM license table (#5930)
🛠️ Update the logic for previewing End-of-Support field (#5928)
🛠️ Refactor SBOM archived check logic for reusability (#5933)
🛠️ Fixed component actions preview (#5952)
🛠️ Refactor Component Links (#5957)
🛠️ Refactor SBOM component table (#5961)
🛠️ Fixed component relation preview logic (#5979)
User Interface
🎨 Hide Component Support Filter for Free Tier and Customer View (#5918)
🎨 Fix Policy CRUD E2E tests (#5920)
🎨 Fixed routes flag hook (#5941)
🎨 Update toast message for component creation (#5943)
🎨 Fix License Modal Bug and Refactor Code (#5946)
🎨 Fixed ENV filter styling on vulnerability page (#5962)
🎨 Remove version search field from SBOM details page (#5964)
🎨 Update column sizing in custom vulnerability table (#5975)
🎨 Fixed misc styling issue (#5980)
Performance & Optimization
⚡ Handle exceptions with specific error logging (#2139)
⚡ Refactor RepositoryConnection code to get value of total_count (#2126)
⚡ Remove unused components (#5923)
⚡ Remove org connection API call from customer view (#5929)
⚡ Cleanup unused queries (#5931)
⚡ Refactor request modal (#5938)
⚡ Remove licenseAutoComplete API call from customer view (#5939)
⚡ Add conditional preview for global vuln filters (#5940)
⚡ Refactor vuln product drawer (#5942)
⚡ Refactor component links tab (#5944)
⚡ Cleanup Unused Utility Functions (#5950)
⚡ Optimize E2E Tests by Reusing Auth State (#5948)
⚡ Update Patch Dependencies (#5958)
⚡ Optimize SBOM Request E2E Test (#5959)
⚡ Optimize Policy CRUD E2E Test (#5960)
⚡ Optimize Support CRUD E2E Test (#5970)
⚡ Fix and Optimize License E2E Test (#5971)
v3.1.3
March 20th 2025
🎯 Highlights
React 18 Upgrade: Major frontend framework upgrade from React 17.0.2 to React 18.3.1
UI Enhancements: LynkSelect integration across multiple components
Improved Component Management: Bulk edit support status across versions/parts
Enhanced Analytics: Executive dashboard improvements
BitBucket: New webhook events now supported.
✨ New Features
User Interface Improvements
📊 Added Executive Dashboard card for number of SBOMs in specific lifecycle
🔍 Implemented search functionality to RepositoriesConnection and updated query type
⌨️ Added Kbar shortcut from Policy Details page and improved navigation
🔄 Integrated LynkSelect in multiple components:
Component Add Modal and related fields
Build version drawer
Vulnerability status component
VEX modal component
Policy modal dropdowns
Repository Management
🗑️ Implemented Bitbucket repository deletion service
🔄 Support for PullRequestMerged event with environment and version generation
Component Management
✅ Added ability to bulk edit component support status across versions/parts
🏷️ Added internal tag to the support status drawer
🔄 Refactored component relationship drawer with reusable component
🐛 Bug Fixes
UI and User Experience
📋 Fixed header alignment in vulnerability table
🎭 Fixed VEX custom field validation
🛑 Fixed UI crash on User Role Delete modal
⬛ Updated dark mode color for regex highlighter
📅 Fixed incorrect theme for calendar field
📏 Adjusted column widths in license table to improve readability
📊 Fixed System Log visibility issue
✅ Added loader to Role Delete Modal
📊 Fixed pagination item count in Global Vulnerability Affected Products
Data Management
📤 Fixed export functionality for searched users and user lists
🧩 Fixed support level with NA disappearing when sorting
📧 Fixed email retention issue on login
📊 Updated support CSV export with part information
🔄 Enabled filters during user export
📊 Updated column order for support status export
🔄 Added sorting for support end date and support level
📉 Fixed analytics to zero-out data when not available
🚫 Removed assessment expiration when no longer maintained
🛑 Removed assessment expiration from support bulk edit
Backend Improvements
🔧 Refactored Packages processor for improved PURL handling
🛠️ Fixed GitHub update job
🔄 Updated repositories job
🗃️ Fixed migration issues
📊 Fixed project vulnerability metrics
📑 Fixed indexes on component support override
E2E Tests
🧪 Fixed SBOM E2E tests
🧪 Fixed SBOM General tab Author E2E tests
🧪 Fixed SBOM Components E2E tests
🧪 Fixed SBOM Vulnerabilities E2E tests
Technical Debt & Maintenance
🧹 Removed unused components
🔄 Updated patch versions for dependencies
🔄 Updated minor versions for dependencies
📚 Added ESLint rule to prevent direct drawer imports
🔄 Refactored Configuration Modal and removed redundant code
📜 Updated jspdf to the latest version
🔄 Updated apollo-upload-client to the latest version
🔧 Improved SBOM Components code
v3.1.2
March 12th 2025
Minor release to fix crashing job process.
v3.1.1
March 11th 2025
🚀 Highlights
This release brings significant improvements to component support management, enhanced SBOM capabilities, and new integrations with source code management tools. We've also made the user interface more intuitive and fixed several important bugs to ensure a smoother experience.
🎁 New Features
📊 Component Support Management
✅ Bulk Update Support Status - Update multiple components at once to save time
📥 CSV Export with Support Details - Export all your component support data including parts support level
🗓️ Assessment Expiration Dates - Assessment expiration days now converted to specific dates for clarity
🏷️ Improved Support Status UI - Clearer icons, tooltips, and visual indicators
🔄 Source Code Integrations
🧩 Bitbucket Integration - Full Bitbucket configuration interface with webhook support
🔗 Enhanced Repository Connections - Improved GitHub connection handling
🔁 Webhook Improvements - More reliable event handling for source code changes
👥 User Management
📋 User CSV Export - Export user information to CSV for external reporting
⏱️ Improved Invitation Flow - Added loading indicators when managing user invitations
📄 Enhanced User Table - Fixed display issues in the user management interface
📱 Organization User Pagination - Better handling of large user lists with pagination
📑 SBOM Enhancements
🔍 Comparison Layout Improvements - Clearer visualization when comparing SBOMs
🖱️ Drag and Drop Upload - Enhanced SBOM upload with full-screen drag and drop support
🏁 Auto-Archive for Ready Status - Automatic archiving when SBOM reaches ready state
🧰 Updated SBOM Info Card - Clearer information display on the tools page
🔧 Enhancements
💫 User Interface Improvements
🎨 Standardized Table Layouts - Consistent design across product details and changelog views
🔍 Refactored Filter Components - More intuitive filtering across all tables
📏 Fixed Text Cropping - No more cut-off text in version tables
🏷️ Required Field Indicators - Clear marking of required PURL fields
🔢 Better Pagination - Hide controls when not needed and show total item counts
🛡️ Vulnerability Management
🎯 Direct Only Filtering - New filter option for component and vulnerability tables
🔗 Impacted Products View - See all affected products in Global Vulnerability View
📊 Dashboard Status Counts - Fixed vulnerability severity status counts on dashboard
🔍 Expanded View Improvements - Integrated detail components for better information display
⚡ Performance Optimizations
🚀 Lazy Loading in Dropdowns - Faster loading in Tools Product List
⚙️ License Loading Optimization - More efficient license processing
📈 Improved Memory Management - Better application performance and stability
🔌 Enhanced Database Connections - More reliable database operations
🐞 Bug Fixes
🛠️ SBOM Status Issues - Fixed SBOM not ready state when vulnerability scan is disabled
🔄 SBOM Comparison - Resolved runtime errors in comparison functionality
🔍 Search Shortcut - Fixed disappearing search shortcut bug
📝 VEX Status History - Fixed data display issues in vulnerability status history
🏷️ Component Support Tags - Fixed run status indicators
✉️ Email Configuration - Improved validation for email settings
👤 Author Creation - Fixed issues with creating new authors
🔗 Repository Connections - Resolved issues with Bitbucket integration
🔒 System Improvements
📋 Enhanced Logging - Better system logging capabilities
🔍 Code Quality - Added ESLint rules to restrict console logs
✉️ Email Security - Updated email validation for better security
📊 Monitoring Enhancements - Improved error handling and system monitoring
v3.1.0
Release Error
v3.0.9
Feb 27th 2025
🔥 Highlights
🚀 Dependent Auto-Completion in CPE Editor – Improves accuracy and efficiency.
🛠 Major Refactoring – Multiple drawers now use LynkDrawer for a more consistent UI.
🔍 Enhanced Analytics & Metrics – Process execution time, Patch Velocity updates, and improved component expand view.
🎨 UI/UX Improvements – New severity & EPSS styling, input field theme updates, and better support for different viewports.
🔐 Security & Compliance – Fixes to login notification handling, email verification, and product lifecycle tracking.
📢 Notifications & Reports – Improvements in product notifications and report notification cleanup.
✨ New Features & Enhancements
✅ CPE Editor Auto-Completion – Dependent fields now auto-complete based on previous values. [#5660]
✅ System Logs with Execution Time – Added process execution time tracking. [#5668]
✅ Product Auto-Archive Feature – New settings introduced for auto-archiving inactive products. [#5686, #2012]
✅ Enhanced Rule Import – Drag and drop works across the entire screen with improved stability. [#5679]
✅ Kbar Navigation Enhancements – New route flags added from the Vulnerability Details page. [#5683]
✅ Support Tab Updates – Now includes required information for better insights. [#5698]
🛠 UI & UX Improvements
✅ LynkDrawer Refactor – Standardized UI for multiple drawers,.
✅ Analytics Page Optimization – Improved layout for different viewports. [#5687]
✅ Severity & EPSS Styling Updates – Better visual cues for security issues. [#5688]
✅ Scrollbar Hidden in LynkDrawer – Provides a cleaner look. [#5674]
✅ Updated Component Expand View – Now includes support details. [#5670]
✅ Reordered Product Settings Tags – Improves accessibility. [#5707]
✅ Support Status Drawer Enhanced – Additional details added. [#5725]
✅ Compliance Card Styling Fixes – Ensures consistent appearance. [#5694]
✅ Updated Component Version Column – Added required spacing for better readability. [#5696]
🐞 Bug Fixes
✅ Forgot Password Link Alignment – UI fix for better visibility. [#5661]
✅ Fix PURL and CPE Preview Tag Issues – Ensures correct tag rendering. [#5671]
✅ Fix UI Breaking in Component Support Modal – Prevents layout issues. [#5672]
✅ Fix Security Tokens, Roles & Internal Components Alignment – Ensures proper display. [#5723]
✅ Fix Patch Velocity Metrics – Now zeroed out like other metrics. [#5708]
✅ Fix Support CSV Export – Resolves incorrect exports. [#5709]
✅ Fix Login Notifications – Now triggers only for actual user logins. [#2027]
✅ Fix Filter for Multiple Fields in Labels – Improves accuracy. [#2015]
✅ Prevent Forgot Password Email Bombing – Strengthened security. [#1996]
✅ Fix Disabled Products in Lifecycle Calculations – Improves lifecycle tracking. [#2014]
v3.0.8
Feb 20th 2025
🚀 Highlights
Performance Improvements: Optimized various API queries, reducing redundant calls and improving dashboard performance.
Enhanced SBOM Actions: Added support for SBOM actions mutation and refined SBOM upload and comparison.
Component Support Level: Full Support for component level support.
Policy & Compliance Updates: New filters for policy details and global policy lists.
GitHub Integration: Improved GitHub client functionality and token handling.
🆕 New Features
License Status Update: Added the ability to update
license_statuson components. (#1945, #5564)Global Policy Filters: Introduced filters to refine policy searches. (#1962, #5574)
SBOM Actions Mutation: Added mutation support for SBOM actions. (#1988)
Support Level Download API: Implemented an API for downloading support levels. (#1974, #5618)
Re-run Support Analysis: Added a new action for rerunning support analysis. (#5642)
🛠️ Bug Fixes
SBOM Upload & Processing:
Fixed end-to-end (E2E) test issues with SBOM uploads. (#5593, #5644)
Corrected repository lookup logic. (#1984)
Fixed invalid SBOM notification update count. (#1986)
Dashboard & Vulnerability Fixes:
Resolved double vulnerability severity counting. (#1980)
Fixed vulnerability lookup form and styling. (#5603, #5612)
Optimized vulnerability query execution. (#5598, #5605)
UI & UX Improvements:
Standardized combo-box styling. (#5650)
Improved component insights and support preview. (#5610, #5611)
Fixed various layout and styling inconsistencies. (#5612, #5614, #5633, #5655)
Policy & Compliance Fixes:
Fixed typo in policy conditions component. (#5607)
Refactored policy creation modal. (#5604)
Updated policy result queries for efficiency. (#5599)
📈 Performance Improvements
Optimized API Calls:
Reduced product stage API calls from 7 to 1. (#5588)
Optimized vulnerability severity API calls from 5 to 1. (#5589)
Streamlined environment total counts API. (#5651)
Improved SBOM comparison query execution. (#5649)
Refactoring & Cleanup:
Removed unused imports, hooks, and components. (#5594, #5656, #5657)
Introduced a reusable
fetchNodesutility function. (#5638)Enhanced vendor root path validation with regex matching. (#5634)
v3.0.7
Feb 13th 2025
🚀 Highlights
Major refactoring and optimizations across SBOM components and compliance modules.
Enhanced UI components with improved styling and usability.
Introduced new policy violation page and lifecycle stage updates.
Improved support for free-tier users with updated dashboards and feature restrictions.
✨ New Features
Reusable UI Components: Created reusable divider, drawer, and label components for better UI consistency. (#5507, #5540, #5541)
Policy Violation Page: Added a dedicated policy violation page with required details. (#5518)
Executive Dashboard Enhancements: Introduced new filters for better dashboard analytics. (#5539)
Improved Component Notes Drawer: Implemented the Components Notes Drawer using
LynkDrawer. (#5554)Global Variables: Added global lists for severity levels and VEX types. (#5567, #5572)
New Lifecycle Stage: Added a new product lifecycle stage for better categorization. (#5552)
🛠️ Bug Fixes
Fixed crash when API returns null for license autocomplete. (#5517)
Fixed UI crash when switching tabs after expanding policy table. (#5521)
Fixed incorrect count of products in 'None' lifecycle stage. (#1960)
Fixed failing SBOM build and changelog E2E tests. (#5551, #5553)
Fixed error 500 on re-running automation. (#1956)
Fixed organization and product E2E tests. (#5550, #5569)
Fixed empty graphs, updated formulas, and stylistic changes. (#5581)
Fixed regular expression logic for better accuracy. (#5528)
Fixed incorrect parts checkbox logic in SBOM download dialog. (#5583)
Fixed CPE and PURL editor issues. (#5584, #5585)
Fixed PURL version check. (#5547)
Fixed layout issues in SBOM download menu. (#5555)
Fixed changelog table styling for dark mode. (#5542)
🔄 Refactoring & Improvements
SBOM Compare Code: Refactored SBOM comparison logic in tools and version lists. (#5144)
Compliance Tab Update: Refactored SBOM compliance tab for improved performance. (#5520)
Free Tier Enhancements:
Hide compliance and parts checkbox in SBOM download. (#5548)
Hide product by label for free-tier users. (#5546)
Update dashboard by removing restricted metrics. (#5563)
Remove label select in import status for free tier. (#5565)
Centralized free-tier check logic. (#5577)
Performance Optimizations:
Removed unused components, variables, and mutations. (#5509, #5510, #5578, #5576)
Improved default checkbox styling in tables. (#5523)
Updated SBOM reprocess function for better efficiency. (#5516)
Updated vulnerability graphs API with paginated queries. (#5586)
Optimized routing logic for global vulnerability access. (#5545)
Refactored customer check logic in
useProjectGroup. (#5575)Centralized route checks logic in a dedicated hook. (#5571)
v3.0.6
Feb 5th 2025
Highlights
Interlynk Platform v3.0.6 introduces enhanced filtering, model validation improvements, and multiple UI/UX refinements to improve overall user experience. This release also includes essential bug fixes and performance optimizations.
New Features
Improvements
Bug Fixes
v3.0.5
January 27th 2025
Highlights of New Features and Improvements
SBOM Lifecycle Management
Introduced a feature to seamlessly manage and update SBOM lifecycles. (#5410)
Executive Dashboard Enhancements
Dashboard now populates with key data to improve high-level decision-making. (#5415)
Severity and CVSS Metrics
Added Severity and CVSS Scores to the Vulnerability View Page for better risk assessment. (#5418)
Improved Dashboard UI
Updated the dashboard with new graphs and data for better insights. (#5362, #5419)
Streamlined Component Lookup
Enhanced the UX for faster and easier component search. (#5383)
Contribution Suppression
Added the ability to suppress specific contribution types. (#1922)
Validation and Modal Enhancements
Manufacturer and component add modals updated with required validations and new changes. (#5398, #5408)
Health Scoring Updates
Stylistic and functional updates made to health scoring for improved usability. (#5387, #5405)
Bug Fixes
Fixed alignment issues in component notes. (#5396)
Resolved inconsistencies in component insight data. (#5390)
Fixed issues with the Vulnerability Info View and included Known Exploited Vulnerabilities (KEV) in the expanded view. (#5407)
Removed unnecessary component warnings. (#5404)
Addressed multiple entries in metric aggregation reports. (#5420)
Other Improvements
Updated description tags with icons for better visual clarity. (#5389)
Implemented UI improvements across the platform for a more cohesive experience. (#5409)
Improved tools loading view for better user feedback. (#5406)
Added an end-to-end test for organization creation and switching workflows. (#4752)
v3.0.4
January 23rd 2025
Highlights of the Release
The v3.0.4 release introduces significant enhancements to platform usability, performance, and compliance workflows. With additional features such as improved filtering, enriched SBOM operations, and a variety of bug fixes, this update reinforces our commitment to delivering a robust and user-friendly experience.
New Features
Annotate Gem Initialization: Enhanced annotation capabilities with the addition of the annotate gem to streamline development workflows. [#1905]
Attach Existing Custom Vulnerabilities to SBOMs: Simplified vulnerability management by allowing custom vulnerabilities to be linked directly to SBOMs. [#1902]
Package Lookup Functionality: Added the ability to perform detailed package lookups, leveraging Package URLs (PURLs) for precision. [#1907, #1913]
Score Settings in Command Bar: Easily access and adjust score settings via the command bar for a more seamless experience. [#5369]
Enhancements
Policy Rule Violations Finder: Extended filtering options for more granular policy rule violation analysis. [#1870]
Weight Control for Package Health Logic: Enabled fine-tuned control over package health calculations to improve reporting accuracy. [#1898, #5029]
Updated Plan Details View: Improved clarity and accessibility in the plan details interface. [#5341]
Refactored Components: Significant refactoring of components, including CVSS, CPE, and PURL info cards for better maintainability and performance. [#5342, #5365]
Improved SBOM Operations:
Fixed SBOM creation tool tests. [#5351]
Enhanced SBOM general tab functionality. [#5375]
Updated SBOM end-to-end tests for increased coverage. [#5366, #5384]
Compliance and Vulnerability Management:
Removed compliance selector and custom vulnerability actions for free-tier users, streamlining operations. [#5349, #5350]
Improved vulnerability table preview for customer view. [#5370]
Bug Fixes
Health Score Calculations:
Resolved issues with health score bugs and null breakdowns. [#1912, #1919]
Fixed health score fields validation. [#5382]
Concurrency Control: Controlled the concurrency of workflows and jobs to prevent resource contention. [#1908]
Date Filter: Fixed a bug with date filtering for component vulnerabilities. [#1909]
Custom Vulnerability Operations: Addressed issues with custom vulnerability creation and operation support. [#1915, #5380]
General Fixes:
Fixed typos, calculation errors, and stylistic changes in various areas. [#1919, #5360]
Resolved modal auto-closing issues in SBOM tabs. [#5375]
Fixed missing brace errors. [#5367]
Corrected end-to-end test failures across SBOM and components. [#5359, #5376, #5384]
Fixed color code validation issues. [#5353]
Performance Improvements
Refactoring and Cleanup:
Refactored utility functions for better code reuse and readability. [#5336, #5356, #5357]
Removed unused global states and redundant functions. [#5345, #5355]
Cleaned up policy table and automation column components. [#5363, #5364]
Loading Feedback: Added feedback for the refresh button to enhance user experience during data updates. [#5372]
Security Updates
X-Permitted-Cross-Domain-Policies: Implemented additional security headers to ensure stricter domain access controls. [#5378]
v3.0.3
January 14th 2025
📋 Highlights
Introduced Defect Density Calculation Service to provide deeper insights into project health.
Added Reconcile Service to ensure vulnerability data remains consistent across the platform.
Enhanced custom fields for workflow integration, supporting more personalized workflows.
✨ New Features
Defect Density Calculation: Introduced the DefectDensityService to calculate defect density for projects, offering better visibility into overall project health.
Reconcile Service: Implemented a reconciliation service to prevent mismatches in vulnerability data across different sections of the platform.
Custom Fields for Workflow Integration: Enhanced workflow integrations by allowing custom fields, making it easier to tailor workflows to specific needs in tools like Jira.
🛠 Improvements
Annotatable Support in Changelogs: Replaced the term annotation with annotatable to improve consistency in changelogs.
Global Vulnerability Table Refactor: Refactored the Global Vulnerability Table for better performance and a cleaner interface.
System Logs Update: Updated system logs to support new scan types, improving traceability.
SBOM Selection Issue Fixed: Resolved various SBOM selection issues, ensuring a smoother experience across workflows.
Email Styling Enhancements: Improved the styling of email templates for better readability and consistency.
🐞 Bug Fixes
Compliance Bug in SBOM Score Report: Fixed an issue where compliance reports failed when the report format was present but not selected.
Vulnerability Status History Fix: Resolved an issue where vulnerability status history did not display imported statuses correctly.
Vendor Page Redirection: Fixed a redirection issue on the vendor page.
404 Page Setup: Implemented a 404 error page for better user experience when navigating invalid links.
Component Description Preview Update: Updated component previews to improve readability.
Invalid Expressions Handling: Improved error handling to manage invalid expressions, preventing crashes.
Dashboard Redirection Issue: Fixed redirection issues when navigating through the dashboard.
🔧 Other Fixes and Enhancements
Issue
Description
Fixed email styling
Improved email template readability
Compliance list preview update
Updated compliance lists with new styling
Fixed analytics filter issue
Resolved issues with filtering analytics data
Product delete modal verification
Added input verification to the product delete modal
Update policy expand view
Enhanced policy expand view for better UX
Fixed SBOM checks test
Fixed end-to-end test issues related to SBOM checks
Data license modal fix
Resolved issues with data license modal
Handle invalid CVSS expressions
Fixed handling of invalid CVSS vector expressions
✅ Quality of Life Changes
Updated the default sort order for Global Vulnerabilities to improve relevance.
Fixed various navigation bugs, ensuring sort orders are retained across pages.
Enhanced Custom Vulnerability Form with input validation to avoid submission errors.
Improved the SBOM General Tab Styling for consistency across the platform.
Added delete checks to the Product Table for easier record management.
⚙️ Technical Enhancements
Refactored external navigation URLs into reusable components for better maintainability.
Updated node options in staging deployment to improve performance.
Updated CVSS Info Modal with conditional previews to improve flexibility.
v3.0.2
January 7th, 2025
🆕 New Features & Highlights
Project Filtering by Name
Easily filter projects by their name to quickly find what you’re looking for, especially in large environments.
Defect Density Graph in Analytics
Visualize vulnerabilities across your components with the new Defect Density Graph, helping you track defect trends over time.
Custom Vulnerability Tab
Manage organization-specific vulnerabilities more effectively with the new Custom Vulnerability Tab.
SBOM Quality Metrics Enhancements
The SBOM Quality Score preview and calculation have been improved, offering more accurate insights into your SBOM health.
🛠️ Improvements & Fixes
Added detailed Activity Logs for Annotations to track changes and updates.
Resolved issues with Component Relationship Preview to display accurate relationships between components.
Fixed SBOM Download Issue when the quality score was blank.
Improved Manufacturer URL Navigation to ensure all links work as expected.
Updated Email Styling for cleaner, more professional email templates in production.
Environment Selector is now disabled after selection to prevent accidental changes.
Multiple Analytics Page Enhancements, including updated icons, filters, and default values for a better user experience.
🐞 Bug Fixes
Fixed SQL Error in the project metrics finder to ensure smoother performance.
Resolved Compliance Score Lookup issues that always defaulted to NTIA.
Fixed SBOM Quality Score Calculation to ensure consistency across reports.
Corrected a Typo in Project Vulnerability Metrics for more accurate reporting.
Fixed Graph Styling in Dark Mode to improve readability.
📈 Analytics & Metrics Improvements
Added Vulnerability Status Counts to the Analytics dashboard for a clearer overview of your vulnerabilities.
Updated the Patch Velocity Metric to improve tracking of remediation efforts.
Enhanced SBOM Statistics for more accurate and actionable data.
Automatically Reset Analytics Filters when changing environments to ensure fresh data views.
✅ Security Enhancements
Implemented Organization Name Validation to prevent potential code injection risks.
Fixed issues with Activity Logs to ensure accurate tracking of actions and changes.
v3.0.1
January 3rd, 2025
🚀 New Features
SBOM Automation Rules Saving Across Environments
Automation rules can now persist across different environments, providing better flexibility in managing your SBOM processes. [#5211, #5234]
Conditional Preview for Organizational Lists
Users can now preview organizational lists based on specific conditions, improving user experience and navigation. [#5213]
Component Annotation Support
Added support for component-level annotations, allowing users to add custom notes and metadata for better tracking. [#5206, #5221]
System Log Functionality
Implemented system logging to provide better visibility into platform actions and audit trails. [#5232, #1851]
SBOM Vulnerability Statistics
Added a detailed vulnerability statistics view for each SBOM, giving users quick insights into their SBOM’s security posture. [#5230]
✨ Enhancements
SBOM Compliance View Loading Screen
A loading screen has been added to the SBOM compliance view to improve user experience during data fetches. [#5231]
ShareLynk Drawer Refactor
The ShareLynk drawer has been updated with a new form layout for a more intuitive user experience. [#5228]
User Update Validation
Improved user update validation to handle various scenarios accurately and securely. [#5249]
Email Notifications Styling
Fixed styling issues in email notifications to render correctly across different devices and platforms. [#1792]
Global Icon Style Update
Updated icon styles globally for a more consistent and polished look across the platform. [#5246]
Annotation Type Updates
Annotations now include timestamps for better tracking of updates and creation dates. [#1848]
SBOM Activity Logs
Updated SBOM activity logs to include additional details, making it easier to track changes and activities. [#5243]
UI and Analytics Improvements
Improved the overall UI consistency and made enhancements to the analytics page for a better user experience. [#5220, #1847]
🐛 Bug Fixes
Fixed SBOM Download Issues in ShareLynk
Resolved missing code for SBOM download options, ensuring a smoother download experience. [#5136, #5261]
Fixed Vulnerability Badge Alignment
Addressed misalignment issues with vulnerability badges for better visibility. [#5256]
Fixed SBOM Checks Rescan
Resolved an issue causing errors when re-running SBOM checks. [#5241, #5240]
Fixed Daily Metrics Collection
Fixed errors in the daily metrics collection job and optimized it to use upserts. [#1845, #1853]
Fixed Missing Component Vulnerabilities
Resolved issues with missing component vulnerabilities from certain parts of the platform. [#1838]
Fixed SBOM Download Authorization Issue
Addressed an issue where ShareLynk SBOM downloads failed due to missing authorization checks. [#1843]
User Name Sanitization
Implemented user name sanitization to avoid potential code injection vulnerabilities. [#5245]
Fixed Organization Name Update Validation
Ensured proper validation when updating organization names to prevent invalid entries. [#5247]
Fixed Search Query Trimming
Resolved an issue with untrimmed search queries causing mismatches. [#1840]
Fixed Vulnerability Statuses Globally
Standardized the vulnerability status column across the platform for consistency. [#5242]
Fixed Repo Crashes
Addressed crashes occurring in specific repo configurations. [#1844]
v3.0.0
December 23, 2024
🚀 New Features
Hide SBOM Quality Score Added the ability to hide SBOM quality scores for enhanced flexibility in compliance workflows. [#1715]
Unignore SBOM Checks Users can now “Unignore” checks, providing greater control over ignored items. [#5160]
Component Search in Relationship Form Implemented a robust search functionality for components within the relationship form. [#5175]
✨ Enhancements
FDA Component Support Updated support levels for FDA components, ensuring up-to-date compliance. [#1808]
Default and Manual Scan Organization Moved default and manual scans to more intuitive facets for better user experience. [#1829]
Optimized SBOM PDF Export Refactored and optimized SBOM PDF exports for smaller, more efficient files. [#5170, #5178]
Tooltip and Label Updates Improved tooltips for Version Health Score and SBOM Quality Score for better clarity. [#5188, #5198]
Improved Vulnerability Feeds Cleaned up and optimized vulnerability/exploitability feed listings. [#5158]
UI Consistency Enhanced component side-drawer consistency and updated the compliance drawer for a cohesive UI. [#5161, #5121]
API Call Optimization Reduced unnecessary API calls for better performance. [#5130]
Updated SBOM Defaults Adjusted SBOM export defaults for user convenience. [#5190]
🐛 Bug Fixes
Nil Panic Error Resolved issues causing nil panic errors for users. [#1814]
SBOM Checks Filter Fixed filter reset issue in SBOM checks. [#5159]
Tooltip Mismatch Fixed incorrect tooltips on Version Health Score. [#5188]
Vulnerability Badge Styling Adjusted styling for vulnerability badges for better visibility. [#5194]
Vulnerability Count Display Updated SBOM details to show
-for vulnerability count when scans are pending. [#5192]Component Update Fixed component update functionality with required changes. [#5187]
Relationship Updates Addressed issues in primary relationship previews and updates. [#5173, #5195]
Search Query Trimming Fixed issues with untrimmed search queries causing mismatches. [#5199]
PDF Export Issues Resolved missing data hashes and fixed descriptions from products in PDFs. [#5189, #5191]
License Table Display Fixed SBOM license table in customer views. [#5197]
Compliance List Addressed inconsistencies in the compliance list. [#5208]
⚙️ Technical Improvements
Sidekiq Configurations Added configurations for Sidekiq, improving job management. [#1830]
Job Scheduling Changes Updated job scheduling for improved reliability. [#1833]
Removed Debug Code Cleaned up unnecessary debug code to streamline performance. [#1824]
Removed New Relic Eliminated unused New Relic and Solid Errors to reduce overhead. [#1811]
v2.9.9
December 17th, 2024
Added API to retrieve a single custom vulnerability within the current organization
Introduced support for Level CSV download option
Enabled SBOM export as FDA specific Excel
Dynamic addition of custom fields to vulnerability CSV Export
Improved validation for vulnerability ID uniqueness
Enhanced SBOM build drawer with supplier fields
Refined SBOM general tab
Updated vulnerability card layout
Implemented context-sensitive label menu
Updated product settings tooltip
Improved SBOM actions and components
Refined product details and ShareLynk table components
Added vulnerability indicator to components
Enabled delete feature for dependency_of relationships
Fixed crash when component vulnerability is null in component VEX update API
Resolved timeout issues in organization vulnerability queries
Corrected severity filter functionality
Fixed crash in daily metrics job
Resolved issues with SBOM download options
Corrected custom field bugs in CSV export
Fixed vulnerability count display before scanning
Resolved key prop and React ref warnings
Fixed progress bar overflow issue
Corrected inconsistencies in global and product vulnerability views
Addressed ShareLynk SVG link preview issues
Fixed SBOM modal and drawer inconsistencies
v2.9.8
December 5th, 2024
Enhanced Vulnerability Management: Introduced features to identify and manage vulnerabilities, including custom vulnerability additions and updates.
Improved User Interface: Multiple UI enhancements across SBOM components, license management, and analytics.
PDF Export Improvements: Fixed critical PDF export issues and added dynamic custom fields for export.
Performance Optimization: Removal of unused libraries, variables, and static media to streamline builds and improve performance.
Custom Vulnerability Addition: Add and manage custom vulnerabilities for SBOMs (#4996).
Label Filtering: Added label-based filtering for analytics and part selection (#5021, #5053).
CSV Export: Enabled CSV export for the support tab (#5040).
SBOM PDF Enhancements: Dynamic custom fields added to SBOM PDF exports (#5064).
Vulnerability Scanning: Auto vulnerability scan triggered upon adding or updating custom vulnerabilities (#1763).
Order-by Search Support: Added support for ordering search results (#1751).
Component Management: Updated the component tree, state, info modal, and expand views for a more streamlined experience (#4983, #4979, #5033, #5059).
UI Updates: Improved styling for tools page, license expand views, and editors (#5062, #5060, #5037).
Improved Validation: Enhanced error handling for invalid CPE checks and custom vulnerabilities (#4999, #5050).
Analytics Page: Added new environment filters and updated analytics components (#5034).
Automation Rules: Introduced a toast notification for rule generation and added “contains” to automation rules (#5012, #1762).
Search Functionality: Fixed SBOM search field and duplicate SBOM transfer issues (#4997, #1773).
License Modal: Addressed UI and error handling issues (#4990).
PDF Export: Resolved issues in PDF export, including vulnerability and parts details (#5041, #5063).
PURL and CPE Editors: Fixed styling, validation, and search options for better usability (#5037, #5017).
Component Validation: Fixed issues with component supplier validation and other vulnerabilities (#5004, #5051).
SBOM Reprocessing: Automatically reprocess SBOMs upon updates to primary (#1767).
Code Refactoring: Updated global styles, removed unused components, and replaced tooltips for consistency (#4986, #5014, #5015).
Library Updates: Bumped dependencies for cross-spawn, http-proxy-middleware, and rollup for security and compatibility (#4940, #4673, #4476).
Error Handling: Improved error messages and validation for various operations (#5032, #5054).
Build Optimization: Improved build times by removing unwanted media files and unused variables (#5025, #5036).
v2.9.7
November 27, 2024
🚀 Improved User Experience: Enhanced workflows in component creation, SBOM management, and vulnerability analysis.
🔒 Advanced Security Features: Added safeguards and improvements to ensure compliance and data integrity.
📄 SBOM Enhancements: Seamless SBOM transfer between environments and new export fixes.
Custom Vulnerabilities: Add and manage vulnerabilities tailored to your specific needs.
SBOM Management: Transfer SBOMs between environments and streamline SBOM list interactions.
Enhanced License Handling: Custom license transformations and text display improvements.
Component Tree Updates: Added primary paths, dependency tagging, and action enhancements.
Accessibility Improvements: Fixed button and image accessibility issues.
Fixed validation errors in component creation and updates.
Corrected user permission issues for Viewer roles.
Resolved analytics bugs for environment selections.
Fixed parts navigation and dependency linking issues.
Addressed deadlock issues and optimized PURL normalization.
Updated SBOM author tags with tooltips and reordered columns for better usability.
Fixed alignment and modal display inconsistencies.
Removed unused code and integrated consistent Chakra components.
v2.9.6
November 19, 2024
Enhanced Usability: Improved support for large SBOM files, reducing UI freezing and enhancing download/edit functionality
Advanced Graph Support: Added directional support for the relationship graph view, making visualization more intuitive.
Improved Validation: Introduced license expression validation and refined product and vulnerability input handling.
Streamlined Error Management: Fixed upload error handling and enhanced modal behaviors for better error visibility.
Directional Relationship Graph View: Graph views now support directional visualization for better clarity.
License Expression Validator: A new feature to validate license expressions during uploads.
Trace View for E2E Tests: Trace view support added for end-to-end tests on CI, aiding debugging and performance insights.
Vulnerability & Component Matching: Enhanced logic for matching vulnerabilities and components by intersecting names.
EPSS Score: Null values are now allowed, ensuring flexibility in data input.
Status Field: Made optional to accommodate partial inputs.
Vulnerability Field: Can now be left blank if applicable.
Fixed edit and download button issues for large SBOMs.
Reduced chances of UI freezing with large files.
Error Handling Enhancements: Improved error handling during upload and reprocess actions. • Fixed issues with reset and indication in the VEX update flow.
Enhanced VEX import table and history drawer with custom fields.
Relationship Graph and Table Refinements:
Resolved issues with vulnerability link forms and table action buttons.
Addressed bugs in relationship deletion modals.
Updated component linking in the vulnerabilities tab. • Improved import vulnerability status UI.
Resolved e2e test issues, including product deletion and label validation.
Updated SBOM files and product creation validation for tests.
v2.9.5
November 14, 2024
Custom VEX Fields: Easily manage and add customized VEX (Vulnerability Exploitability Exchange) fields for better vulnerability tracking.
License Notifications: Receive notifications related to software license compliance and updates.
Enhanced Export Options: Seamlessly export and import End of Support (EOS) data, along with improved SBOM PDF layouts.
Component Dependency Tree: Visualize and analyze component dependencies within the platform to understand the structure and potential vulnerabilities better.
SBOM PDF Enhancements: Added missing labels, data mappings, and refined layout for better readability and compliance with export needs.
UI/UX Refinements
Updated mailer font styling, component subheaders, and the integration tab name for improved navigation.
Enhanced search functionality for better score filtering.
New tooltip and styling across lists, modals, and menus for a more consistent experience.
Updated dashboard header and increased search bar width for quicker data access.
Policy and Automation
New SB-HC-25 checks implemented for enhanced policy adherence.
Automated validation added to streamline creating and managing automation rules.
Data Handling
Filtering for unknown ecosystem entries and handling of null values to enhance data integrity.
Improved CSV and PDF exports, ensuring only relevant data is included.
Notifications:
Refined notification settings, including adherence to personal settings for targeted updates.
Component and Vulnerability Updates
Resolved issues in the component update process, including null strings and prefix issues.
Fixed vulnerabilities and licensing data in the global vulnerability table.
Enhanced form validation across VEX forms and vulnerability tables to ensure data accuracy.
SBOM and Export Refinements
Fixed issues with CSV filter and export, ensuring reliable downloads.
Improved logic for filtering out disabled products and maintaining format consistency.
UI Bug Fixes
Corrected layout bugs, icon placements, and button spacing across several views.
Addressed vulnerabilities in navigation and vulnerability status indication.
v2.9.4
November 4, 2024
SBOM Enhancements
Added SPDX Lite export support
Implemented PDF export functionality
Enhanced SBOM phases management
Added flag to indicate SBOM reprocess status
Authentication & Security
Added unauthenticated access support for organization requests
Improved request workflow for public APIs
Enhanced password security mechanisms
User Experience
Redesigned email templates and footer
Updated SBOM upload request UI
Improved organization selector interface
Optimized policy count logic
Enhanced SBOM request flow
Fixed component health score calculations
Resolved policy matching for SPDX ID
Fixed CPE error in component support
Addressed SBOM level policy result metrics
Fixed license search and validation issues
Resolved multiple clicks on upload SBOM button
Added comprehensive E2E tests for core functionalities
Enhanced validation for SBOM phases
Improved error handling and user feedback
v2.9.3
October 24, 2024
Added support for CPE 2.2
Introduced SBOM lifecycle management
Improved SBOM export functionality with exclude parts option
New upload request UI for SBOM
Implemented automation rules for internal component checking
Enhanced CPE finder with improved exact match and prefix search prioritization
Added internal Slack monitoring system
Fixed component evaluator for less_than, more_than, and range operations
Comprehensive CSV export functionality for multiple views
Updated organization and environment selectors
Refined label management system
Enhanced dashboard filters and analytics
v2.9.1
October 17, 2024
SBOM Lifecycle Support (UI Pending): Added functionality to manage SBOM lifecycles phases, streamlining compliance workflows. (#1634)
SBOMs Count Availability: SBOMs count is now accessible through Sharelynk for easier tracking. (#1625)
Notification for Manual Policy Scans: Implemented a notification system for manual policy scan results, keeping you informed. (#1611)
Email Template Overhaul: Introduced a new email template as part of a unified email strategy. (#1624)
CSV Export for Enhanced Reporting: Now export data from the Global Vulnerability Detail View and SBOM Components View. (#4599)
Loader for Policy Violation Counts: Displays a loader instead of zero when a policy scan is in progress, providing a more accurate view. (#4530)
Product Permission Renaming: Updated "Archive Product" permission to "Delete Product" for better clarity. (#1631)
Async Scroll for Product Breadcrumbs: Improved user experience with a new asynchronous scrolling component. (#4576)
End-to-End Testing Improvements: Expanded E2E tests to cover more features, such as internal component CRUD. (#4607)
Custom Mobile Warnings and Device View Updates: Added custom warnings for mobile users and refined the device warning views. (#4591, #4610)
Logout After Email Confirmation: Users will be logged out upon confirming their email if they are already logged in, enhancing security. (#1626)
SPDX Export and Import Issues: Resolved crashes during SPDX export and fixed duplicate component imports. (#1633)
Policy Scan Fixes: Addressed an issue where policy scans would not complete when using certain parts. (#4586)
Ribbon Badge Count Accuracy: Corrected the display of policy counts on ribbon badges. (#1632)
Automation File Naming: Fixed export file names for automation, ensuring consistency. (#4572)
Modal and UI Enhancements: Resolved issues with modals, such as the archive automation modal close button. (#4577)
Playwright and Test Fixes: Updated playwright report issues and SBOM delete tests. (#4605, #4612)
UI Consistency: Addressed alignment, color scheme, and height issues in various components. (#4564, #4595, #4597)
v2.8.8-HotFix
October 17, 2024
v2.8.8
October 10, 2024
Component Insights: Added component insights for better visibility into usage and vulnerabilities (#4496, #4552).
SPDX 2.3 Export: Added export functionality for SPDX 2.3 specification (#1615).
SBOM Download: You can now download the original SBOM.
Slack Notifications: Notifications for failed E2E tests now sent to Slack, with log URLs included (#4547, #4557).
Vulnerability Actions: Updated vulnerability actions for improved workflow (#4561).
JIRA Validation Rule: Added a validation rule for JIRA ticket creation (#4553).
Products Enable/Disable E2E Tests: Added E2E tests for product enable/disable actions (#4556).
UI Updates: Improved component and vulnerabilities layout, insights preview, and VEX status (#4523, #4552, #4527).
Component License Tag: Updated license tag for better component identification (#4565).
SBOM Support Status: Added visibility for SBOM-related activities (#1586).
JIRA Link, Component Card, Sidebar, and Search: Fixed issues with JIRA link, component card display, responsive sidebar, and changelog search (#4541, #4555, #4563, #1563).
SPDX Validation and Repo Key: Resolved SPDX export validation and repo key issues (#1618, #1610).
Miscellaneous Fixes: Addressed sign-up button, E2E label tests, and unit test failures (#4562, #4551, #4549, #4569).
Code Clean-up: Various clean-ups to improve codebase (#4560).
Export and Test Updates: Fixed export issues and updated specs test actions (#1616, #4571).
v2.8.7
October 4, 2024
Refactored the version table and product modal for better structure and performance (#4466, #4475).
Updated the SBOM vulnerability table and optimized API calls like
GetOrgNamefor faster performance (#4463, #4467).Several user interface improvements, including:
Refactor of PURL and CPE card (#4500).
Updated settings header and sidebar with documentation links (#4499, #4529).
Improved component edit drawer, modal, and search functionality (#4489, #4516).
Added ShareLynk validation and updated validation messages (#4494, #4513).
Updated column identifiers and fixed alignment issues in the user table (#4485, #4497).
Enhanced vulnerability state handling and validation, including vulnerability filters and link validation (#4486, #4515, #4540).
Fixed multiple UI bugs related to dark color schemes, product updates, and component state issues (#4490, #4491, #4537, #4539).
Other minor performance improvements and refactors, including E2E tests switched to Linux and improved cron job handling (#4487, #4526).
Fixed vulnerability scanning failures and PURL validation issues (#1599, #4506).
Resolved bugs like vulnerability expand view, NVD link, and missing dependencies in the version table (#4490, #4524, #4507).
Fixed issues related to FDA compliance support level and security token initialization (#1575, #4525).
Several fixes related to Docker and workflow configurations (#1587, #1588, #1589).
Improved license handling, including case-insensitive search and removed VEX completed check (#1596, #1600).
v2.8.6
September 26, 2024
Component Library[BETA/NOUI]: Introduced a new component library to streamline UI elements across the platform, enhancing consistency and maintainability.
SBOM Support Enhancements: Updates to the SBOM support query, expanding compatibility and improving query accuracy.
Global Custom Date Input: A custom date input field was introduced for global use, standardizing date selection across multiple features.
Manufacturer Modal Improvements: Added a confirmation modal for archiving manufacturers, improving user interaction with sensitive actions.
Error Messaging: Enhanced error messages for SVG link issues and unexpected errors during automation rule imports.
Component Support Updates: Fixed issues with support updates, including renaming fields and adding new validation checks to prevent errors.
Vulnerability Page Fixes: Adjustments to vulnerability displays, including showing low severity counts and fixing breadcrumb navigation.
Playwright Test Fixes: Multiple fixes and optimizations for Playwright tests to ensure better CI/CD integration and reduce timeouts.
User Interface Updates: Refined UI in several areas, including the general tab, component type fields, and policy violation counts.
Dockerfile and Workflow Optimizations: Updates to Dockerfile and GitHub Actions workflows for better efficiency, including enabling Docker BuildKit.
Search Functionality: Removed prefix search in favor of substring search for better accuracy in results.
Policy and Parts Modal Refactoring: The policy modal and parts modal were refactored for improved usability and performance.
v2.8.5
September 19th, 2024
Archive Version Preview: Enabled preview of archived versions with necessary changes (
#4319).Automation Import/Export: Implemented automation import/export feature (
#4403).Component Author: Added support for displaying component author information (
#1539).Component PURL & CPE: Added missing PURL and CPE data for components (
#4374).Docker Image Versioning: Created
Image-version.ymlto track Docker image versions (#1543).
Search Functionality: Resolved issue where search for check ID was not working (
#1531).Expired Invitations: Fixed handling of expired invitations (
#1538).Internal Component Tagging: Fixed component tagging issues (
#1503,#4269).Supplier Check: Addressed supplier check issue in SBOM (
#4392).Component Version Validation: Resolved validation issues for component versions (
#4361,#4398).Reset Password Page: Fixed reset password link issue (
#4397).Policy View Alignment: Corrected alignment of the policy view (
#4356).SBOM Fixes: Fixed issues in SBOM support table, CPE validation, supplier modal, and details page in customer view (
#4372,#4371,#4408,#4393).Invitation Handling: Resolved additional invitation handling issues (
#4395).Dark Mode Styling: Fixed styling issues in dark mode and license field validation (
#4400).Checks Preview: Fixed logic for previewing checks (
#4399).
Restart Policy: Updated Docker container restart policy to "always" (
#1534).License Updates: Added updated licenses (
#1540).Progress Bar Styling: Enhanced progress bar styling (
#4340).Component Relation Drawer: Added expand action to the component relation drawer (
#4364).General Styling Updates: Updated styling for the general tab, login/register page, and success messages (
#4367,#4346,#4390).Consolidation & Workflow: Consolidated files and updated workflows accordingly (
#1544).Modal Enhancements: Refined modal consistency and styling (
#4410,#4414).Product Status Modal: Enhanced product status modal functionality (
#4421).
v2.8.4
September 12, 2024
Added violation count functionality
Implementation of component unsaved warning
Update to VEX status view and global vulnerability UI
Addition of component support tooltip
Update to authentication UI
Enhanced SBOM (Software Bill of Materials) features:
Fixed SBOM table spacing
Updated SBOM general tab layout and styling
Added info tooltip in SBOM general tab
Improved SBOM data license modal
Refined component management:
Updated component end-of-support field
Refactored component identifier fields
Enhanced component health score view
Improved component fields validation
Enhanced product features:
Fixed product search issue
Updated product actions preview
Upgraded policy management:
Updated policy stats color
Fixed policy count display
Fixed SVG link issues
Resolved EOL (End of Life) finder problems
Addressed staging errors from demo data
Fixed null copyright value on component creation
Corrected valid expression showing as custom license
Resolved components create function issues
Fixed license update problems
Addressed VEX status modal issues
Various styling improvements across the application
Fixed compliance card alignment and styling
Refined dashboard stats alignment
Updated progress bar functionality
Implemented dark mode color corrections
Updated security tokens with required validation
Upgraded various dependencies for improved security and performance
Removed SBOM reprocess option from customer view
Removed label option from free tier accounts
Updated free tier limits
Various settings and modal fixes
Environment configuration updates for staging and production
Product Vuln tab "set status" crashes
In the component Edit tab, if you click save on a component, even if no changes are made, it throws a no-component error.
Ctrl-K search has settings navigations not working correctly.
2.8.0
September 4, 2024
Added SSO support (Google & Github)
Introduced request functionality for plan upgrades.
Enabled component-level support information and exposed it on the SBOM support page.
Added new fields and updated views like compliance warning for disabled checks, component copyright field, connection tab renaming, and vulnerability info page redesign.
Improved UI for the SBOM upload modal, label filter dropdown, and compliance drawer.
Fixed various UI issues, including compliance tab, select styling, component drawer, vex completed filter, SBOM parts UI, policy violation drawer, organization register modal, breadcrumb fetching, product filter in global vulnerability page, component update function, import wizard, overflow issue in component drawer, and more.
Fixed modal behaviors including Add/Edit License, Create Role, Create Token, and settings modals.
Fixed policy stats and SBOM download modal.
Fixed config not saving issue, errors, and orphaned dependencies.
Ensured consistency in documentation.
Enhanced support delete modal, SBOM build drawer, organization table, product label filter, compliance tab design, login page (privacy policy and terms of services), compliance description, and compliance tab with new design.
Improved component dependency view, label dropdown, label filter instructions, product page, and label size.
Refined styling and layout consistency for various UI components.
Added a flag for invalidating entries in the CPE info table.
Updated the demo name and description.
Refactored component vulnerability scope in the resolver.
Updated staging environment settings and hostnames.
Made modal fixes and other general settings changes.
2.7.9
August 27, 2024
Labels [GA]
Free Tier [Beta]
Demo account seed data
Compliance Tab
Component Library alpha (No user-facing data as yet)
AWS marketplace integration alpha
Limit server log files to 100MB
Various fixes for notifications.
Sanitize and remove bad data from SBOMs.
Refetch refactor in UI, for consistent performance.
Modal consistency fixes.
Tons for additional fixes and consistency improvements.
2.7.8
August 15th, 2024
Version Archive Support - Individual versions can now be archived. Archival removes the version from all metrics, vulnerabilities & policies.
Notification Support - We support personal & organization level notification support. Notifications are supported over Email/Slack & Teams. This is an early release; currently we support only Sbom upload/failures & Vuln report scans. More notifications will be added on an ongoing basis.
Labels Support: Products can now be labelled for easy management.
Permanent fix for Delete Role crash.
Checks does not flag an sbom with a single component with relationship failure.
Text alignment for SBOM Card.
Product Listing fixes a bunch of them.
Version Compare fixes.
Toast bar notification consistency.
2.7.7
August 1st, 2024
PURL & CPE vulnerabilities are merged, producing a single list of vulnerabilities by component.
Product Progress Graph [ Demo account only ]
Compliance score fixes
Other identifiers now take into account either CPE or PURL
Comp suppliers accounting issue.
Migration to remove old roles
Fixed permissions wipe out
Invalid PURL crash fix
Updated info tooltips
Google Analytics fixes
Last updated