Skip to content

Releases: phylum-dev/cli

v7.0.0

17 Sep 18:42
@github-actions github-actions
v7.0.0
This tag was signed with the committer’s verified signature. The key has expired.
kylewillmon Kyle Willmon
GPG key ID: C59FE3EE765E3DD0
Expired
Learn about vigilant mode.
6967382
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v7.0.0

Added

  • Organization management under the phylum org subcommand
  • Organization support for existing subcommands
  • phylum project update --default-label option to set a project's default label
  • phylum project list --no-group flag to only show personal projects
  • Full sandbox write access to project directory for building with yarn extension

Fixed

  • Lockfile parsing of bun-generated yarn lockfiles
  • Maven lockfile generation on Windows

Removed

  • phylum batch subcommand
Assets 11
Loading

v6.6.6

12 Jul 19:35
@github-actions github-actions
v6.6.6
This tag was signed with the committer’s verified signature.
maxrake Charles Coggins
GPG key ID: 39672059E0E43F0D
Learn about vigilant mode.
7b5531d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v6.6.6

Added

  • phylum init will infer the repository URL from git

Fixed

  • msbuild parser ignoring uppercase Version fields on PackageReference
Assets 10
Loading

v6.6.5

09 Jul 16:47
@github-actions github-actions
v6.6.5
This tag was signed with the committer’s verified signature.
maxrake Charles Coggins
GPG key ID: 39672059E0E43F0D
Learn about vigilant mode.
ba1e10c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v6.6.5

Fixed

  • package-lock.json parsing failing for dependencies without resolved field
Assets 10
Loading

v6.6.5-rc1

08 Jul 21:01
@github-actions github-actions
v6.6.5-rc1
This tag was signed with the committer’s verified signature.
maxrake Charles Coggins
GPG key ID: 39672059E0E43F0D
Learn about vigilant mode.
62b0367
Compare
Choose a tag to compare
v6.6.5-rc1 Pre-release
Pre-release

Fixed

  • package-lock.json parsing failing for dependencies without resolved field
Assets 10
Loading

v6.6.4

27 Jun 18:31
@github-actions github-actions
v6.6.4
This tag was signed with the committer’s verified signature.
maxrake Charles Coggins
GPG key ID: 39672059E0E43F0D
Learn about vigilant mode.
3b858ae
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v6.6.4

Fixed

  • Legacy Gradle lockfiles not overriding manifest files in the same project
Assets 10
Loading

v6.6.4-rc1

27 Jun 17:15
@github-actions github-actions
v6.6.4-rc1
This tag was signed with the committer’s verified signature.
maxrake Charles Coggins
GPG key ID: 39672059E0E43F0D
Learn about vigilant mode.
4509464
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v6.6.4-rc1 Pre-release
Pre-release

Fixed

  • Gradle 5 lockfiles not overriding manifest files in the same project
Assets 10
Loading

v6.6.3

26 Jun 21:06
@github-actions github-actions
v6.6.3
This tag was signed with the committer’s verified signature.
maxrake Charles Coggins
GPG key ID: 39672059E0E43F0D
Learn about vigilant mode.
979ee4b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v6.6.3

Fixed

  • Support for gradle lockfiles in gradle/dependency-locks/
Assets 10
Loading

v6.6.2

25 Jun 19:17
@github-actions github-actions
v6.6.2
This tag was signed with the committer’s verified signature.
maxrake Charles Coggins
GPG key ID: 39672059E0E43F0D
Learn about vigilant mode.
98924f0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v6.6.2

Fixed

  • Gradle not generating lockfiles without dependencyLocking in the manifest
Assets 10
Loading

v6.6.1

18 Jun 21:00
@github-actions github-actions
v6.6.1
This tag was signed with the committer’s verified signature.
maxrake Charles Coggins
GPG key ID: 39672059E0E43F0D
Learn about vigilant mode.
7fd83a5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v6.6.1

Fixed

  • Sandbox exceptions for maven when installed via apt
  • Log output leaking into effective-pom.xml during lockfile generation
Assets 10
Loading

v6.6.1-rc5

18 Jun 20:01
@github-actions github-actions
v6.6.1-rc5
This tag was signed with the committer’s verified signature.
maxrake Charles Coggins
GPG key ID: 39672059E0E43F0D
Learn about vigilant mode.
1c1ed6a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v6.6.1-rc5 Pre-release
Pre-release

Fixed

  • Sandbox exceptions for maven when installed via apt
  • Log output leaking into effective-pom.xml during lockfile generation
Assets 10
Loading