Releases: phylum-dev/cli
Releases · phylum-dev/cli
v5.9.0
Added
- Show project ID after project creation
skip-sandbox
option forparse
/analyze
to generate lockfiles without sandbox protectionno-generation
option forparse
/analyze
to disable lockfile generation- Optional
--project
and--group
arguments forphylum project status
Fixed
- Aliased dependency names in
package-lock.json
- Aliased dependency names in
yarn.lock
v5.9.0-rc3
Added
- Show project ID after project creation
skip-sandbox
option forparse
/analyze
to generate lockfiles without sandbox protectionno-generation
option forparse
/analyze
to disable lockfile generation- Optional
--project
and--group
arguments forphylum project status
Fixed
- Aliased dependency names in
package-lock.json
- Aliased dependency names in
yarn.lock
v5.9.0-rc2
Added
- Show project ID after project creation
skip-sandbox
option forparse
/analyze
to generate lockfiles without sandbox protectionno-generation
option forparse
/analyze
to disable lockfile generation- Optional
--project
and--group
arguments forphylum project status
Fixed
- Aliased dependency names in
package-lock.json
v5.9.0-rc1
Added
- Show project ID after project creation
no-generation
option forparse
/analyze
to disable lockfile generation
Fixed
- Aliased dependency names in
package-lock.json
v5.8.1
Fixed
- Gradle lockfile generation with
build.gradle.kts
manifests - Lockfile generation for non-workspace pnpm projects
- Fixed issue parsing BOM files containing unsupported ecosystems
v5.8.1-rc1
Fixed
- Fixed issue parsing BOM files containing unsupported ecosystems
v5.8.0
Added
- Support for the upcoming repository URL feature for
init
/project create
- New
phylum project update
command to update project name and repository URL - New
phylum project status
command to print current project information
Fixed
- Path dependencies for pnpm lockfiles
v5.7.3
Fixed
- Pip requirements.txt parser failing with third-party registries
v5.7.2
Fixed
- Workspace lockfile generation for cargo, npm, yarn, and pnpm
- Go lockfile generation
- Ignored manifests with a different ecosystem's lockfile in a parent directory
v5.7.1
Fixed
- Package header printed even when all issues were suppressed
- Parsing fails for extraneous npm packages in package-lock.json