v1.0.0-rc.1

v1.0.0-rc.1

This is a first release candidate for SW360-Frontend in the line of next major release version 1.0.0 of SW360-Frontend project. The candidate includes numerous features, corrections, and improvements over the previous beta-release v0.30.0-beta

This release candidate serves as a preview of the upcoming major version 1.0.0 for testing and should not be used in production environments.

Major highlights since last release:

• Role based access to routes
• Fixed sign outs at component detail page
• Complete feature of Merge Releases
• Provided container setup for running SW360 frontend and backend
• Lot of code refactor and unifications

Credits

The following GitHub users have contributed to the source code since the last release (in alphabetical order):

> aaryan359 <aaryanmeena96@gmail.com>
> Akshit Joshi <akshit.joshi@siemens-healthineers.com>
> Amrit Kumar Verma <er.akverma8@gmail.com>
> Arnav Sharma <2006arnavsharma@gmail.com>
> Bibhuti Bhusan Dash <bibhuti230185@gmail.com>
> Dearsh Oberoi <oberoidearsh@gmail.com>
> dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
> developharsh <harsh237hk@gmail.com>
> Farooq Fateh Aftab <farooq-fateh.aftab@siemens.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Keerthi B L <keerthi.bl@siemens.com>
> Nikesh Kumar <kumar.nikesh@siemens.com>
> Rohan-Saxena644 <rohsax83@gmail.com>
> rudra-superrr <prabhuchopra@gmail.com>
> Sahilpreet Singh <147434046+sps1001@users.noreply.github.com>
> Sandip Mandal <sandipmandal02.sm@gmail.com>
> StepSecurity Bot <bot@stepsecurity.io>
> Suhas N <suhas.n@siemens-healthineers.com>
> Taanvi Khevaria <taanvikhevaria@gmail.com>

Please note that also many other persons usually contribute to the project with reviews, testing, documentations, conversations or presentations.

Features

• 007a897a feat(cd): Sign Docker images with GitHub OIDC
• 41762c2c [StepSecurity] Apply security best practices (#1595)
• 34823b11 feat(docker): Update container setup and docs
• e2233e01 feat(UI): Unify link releases modal components
• efe0518a feat(Release): Completes the Merge Release functionality (Part-3) (#1530)
• a3385a4b feat(Project): Add SW360 backend configuration context and update project report handling (#1522)
• 0080ca78 feat(release): Implement Linked Packages in Edit Release page (#1231)
• 481189c4 feat(home): Add delete functionality at MyTaskSubmissionsWidget

Corrections

• 4788ca60 fix(components): handle empty response in release overview
• d7ea6a9d fix(modals): Reset pagination on search in modals
• 70f7e30f fix(clearingdetails): Exclude rejected cli files from clearing details tab
• 21f7aef7 fix(cd): Docker build does not need node
• 30d5ac3b fix(cd): Fix docker build
• 41762c2c [StepSecurity] Apply security best practices (#1595)
• f1b9ef8d fix(Vul): Fixed release detail url at vul tracking tab (#1589)
• fcf850c6 fix(UI): fix pagination and sorting in search vendor modal (#1545)
• a6e6aa09 fix(ProjectDetailTab): Enhance breadcrumb to include project version if available
• 50b4a2db fix(projects): Fix error response on patch request to project
• 51779264 fix(Component): Implement clipboard functionality for component ID
• 38e2ccc4 fix(Project): Enable security vulnerability monitoring options in project page
• dfce4f2c fix(Project): Fixed clear button at roles of edit project (#1574)
• e7fbc81c Revert "fix(header): Restricting CSP header values"
• 21415dbf fix(UI): Added code to resolve merge release (#1565)
• e6341c6e fix(header): Restricting CSP header values
• 4114291c fix(header): Disable deprecated XSS protection header
• 048d3001 fix(error): show fallback message when error.message is empty
• 79ff64ac fix(UI): Show linked packages and enable comments in project page (#1556)
• efe0518a feat(Release): Completes the Merge Release functionality (Part-3) (#1530)
• 909c8fb0 fix: Replace console.error with ApiUtils.reportError in clearing request components
• 03d6ad33 fix(version): Use new VersionInfo class
• e0bd7e6a fix(clearingteam): Correctly render clearing team in project pages
• 8f51a4a5 fix(sw360admin): Add role based access to sw360 admin to admin tab
• db184aaf fix(release): Fixed missing data at release edit and detail page
• 4b53f26c fix(editRelease): Fix bugs in update release
• 42202cad fix(signout): Fix signout in component detail page
• 0080ca78 feat(release): Implement Linked Packages in Edit Release page (#1231)
• 6e5ea8b6 fix(UI): Add logic to delete open clearing requests from request tab, when the project has deleted
• 00d4ea8d fix(UI): Rename Group name ambiguity in component attachment page
• 24e34a2f fix(requests): Show error message on edit Clearing Request failure
• 0f248acf fix(UI): Vendor name not displayed in Components list
• d6639029 fix(UI): Applied UI correction for Actions Column
• b683e3e6 fix(access): Add role based access to routes
• 474a5f00 fix(projects): Fix broken link and missing translation

Infrastructure

• 6338f0cb chore(deps-dev): bump @types/node from 25.3.0 to 25.6.0
• 23f75bf0 chore(deps): bump library/nginx from 1.29.7-trixie to 1.29.8-trixie
• 3843d66e chore(deps): bump next-intl from 4.8.3 to 4.9.1
• bf0cb5a3 chore(deps-dev): bump react-icons from 5.5.0 to 5.6.0
• b4faf6a4 chore(deps-dev): bump cypress from 15.13.0 to 15.13.1
• 796b0298 chore(deps): bump react from 19.2.4 to 19.2.5
• 184b3862 chore(deps): bump docker/build-push-action from 7.0.0 to 7.1.0
• 86a18f85 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
• a53bf43e chore(deps): bump step-security/harden-runner from 2.16.1 to 2.17.0
• ee2797bf chore(deps): bump next from 16.2.2 to 16.2.3
• 299a1493 chore(deps): bump react-cookie from 8.0.1 to 8.1.0
• 00ec5759 chore(lint): Fixed lints with new biomejs
• 2b7f8404 chore(deps-dev): bump @biomejs/biome from 2.4.4 to 2.4.10
• bc048fbf chore(deps): bump next from 16.1.7 to 16.2.2
• eeb8cb55 chore(deps-dev): bump @commitlint/cli from 20.4.2 to 20.5.0
• dae36b9a chore(deps-dev): bump cypress from 15.11.0 to 15.13.0
• f32a503b chore(deps): bump actions/setup-node from 6.0.0 to 6.3.0
• 5a4563dc chore(deps): bump library/nginx from 1.29.6-trixie to 1.29.7-trixie
• 9f58cde1 chore(cii): Add cii best practices badge (#1603)
• a3e58d1e chore(deps): bump next from 16.1.6 to 16.1.7
• 1c9589ca chore(lodash): Fixed vulnerable lodash version for cypress (#1591)
• deaeee45 chore(nouveau): Override nouveau for h2c connect
• 172c3a3f refactor(attachments): Refactor edit attachments table to tanstack
• 2141ddfb chore(Clipboard): Unified copy to clipboard for pckg, release (#1585)
• 02bb1811 chore(deps): bump step-security/harden-runner from 2.16.0 to 2.16.1
• 1b0cbc59 chore(deps): bump docker/login-action from 4.0.0 to 4.1.0
• 86357772 chore(deps): bump github/codeql-action from 4.34.1 to 4.35.1
• 7ca2e9fd chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0
• f3555353 chore(deps): bump github/codeql-action from 4.32.6 to 4.34.1
• 42189b9d refactor(sidebar): Use bootstrap tab for add sidebars
• f2a98775 chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0
• c1838f7b chore(deps): bump pnpm/action-setup from 4.2.0 to 4.4.0
• 0ff2bd9d chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1
• 46723662 chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0
• 9b09b4ec chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6
• 63aba6c1 chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0
• c42518a4 chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1
• acbf873d chore(deps): bump docker/login-action from 3.7.0 to 4.0.0
• ce624cbb chore(deps): bump docker/metadata-action from 5.10.0 to 6.0.0
• 40fcf6da refactor(css): Refactor and remove redundant css
• 3cd57992 refactor(vendor): Remove unused code
• 8311f4bb chore(deps): bump step-security/harden-runner from 2.14.2 to 2.15.0
• 2bde099a chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
• dfc1c8e3 chore(deps): bump preact from 10.28.3 to 10.28.4
• b5037064 chore(deps-dev): bump @biomejs/biome from 2.4.0 to 2.4.4
• ed9774af chore(deps-dev): bump cypress from 15.10.0 to 15.11.0
• 816cb445 chore(deps-dev): bump systeminformation from 5.31.0 to 5.31.1
• 2a60f9cf chore(deps-dev): bump lint-staged from 16.2.7 to 16.3.1
• 325bad98 chore(sw360Comp): Deleted unused Filter Search file
• c2f6edae chore(deps): bump react and @types/react
• 3e72331b Revise commit header format to 'type(scope): message'
• 3743b210 Update CONTRIBUTING.md
• 1237da3c Update CONTRIBUTING.md
• 81396d47 Update README.md
• 202315d6 docs(contributing): fix small typos in README and CONTRIBUTING
• d97085f3 chore(deps-dev): bump @types/node from 25.2.3 to 25.3.0
• ccdc923c chore(deps-dev): bump @commitlint/cli from 20.3.1 to 20.4.2
• 200da208 chore(deps): bump dotenv from 17.2.4 to 17.3.1
• 64b68c01 chore(deps): bump next-intl from 4.8.2 to 4.8.3
• 12ce9dd0 chore(deps): bump github/codeql-action from 4.32.3 to 4.32.4
• 4bc1d2e3 chore(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3
• cd904b34 revert: Restore to 'Delete linked project'

Full Changelog: v0.30.0-beta...v1.0.0-rc.1

v0.30.0-beta

v0.30.0-beta

This is a beta release for the next major version 1.0.0 of SW360-Frontend. The release includes numerous features, corrections, and improvements over the previous release v0.20.0-beta.

This release serves as a preview of the upcoming major version 1.0.0 for testing and should not be used in production environments.

Highlight of the changes includes:

• Various vulnerabilities and security fixes.
• Complete page implementation
• Introduced biomejs for linting
• Moved table framework from gridjs to tanstack table

Credits

The following GitHub users have contributed to the source code since the last release (in alphabetical order):

> aaryan359 <aaryanmeena96@gmail.com>
> Aashish Jha <aashishjha1107@gmail.com>
> afsahsyeda <afsah.syeda@siemens-healthineers.com>
> Akshit Joshi <akshit.joshi@siemens-healthineers.com>
> amritkv <er.akverma8@gmail.com>
> Anushree Bondia <anushreebondia@gmail.com>
> Bibhuti Bhusan Dash <bibhuti230185@gmail.com>
> chauhan-varun <varunchauhan097@gmail.com>
> Dearsh Oberoi <oberoidearsh@gmail.com>
> dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
> Farooq Fateh Aftab <farooq-fateh.aftab@siemens.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> Helio Chissini de Castro <dev@heliocastro.info>
> Keerthi B L <keerthi.bl@siemens.com>
> MANOJ KUMAR KUMMARI <umanhuu@gmail.com>
> Mateusz Los <mateusz.los@extern.wenovate.de>
> nikkuma7 <49710817+nikkuma7@users.noreply.github.com>
> rudra-superrr <prabhuchopra@gmail.com>
> sandyp025 <sandipmandal02.sm@gmail.com>
> suhas-SHS <suhas.n@siemens-healthineers.com>
> Taanvi Khevaria <taanvikhevaria@gmail.com>
> Varun chauhan <115783538+chauhan-varun@users.noreply.github.com>
> Vedant5125 <vedantapraj5125@gmail.com>

Please note that also many other persons usually contribute to the project with
reviews, testing, documentations, conversations or presentations.

Features

• 04c3d67b feat(components): Show success notification on export spreadsheet action
• fa7b8c34 feat(home): Add filter dropdown for My Projects widget
• 7206503d feat(codeowners): Remove myself of CODEOWNERS
• b115c6c3 feat(deps): Update next-intl
• 140b470a feat(admin): Add bulk user upload functionality
• 630b96e6 feat(ai): Normalize instructions and remove old ones
• 7e29d897 feat: added toast box
• 3932ca87 feat(auth): Add refresh token support for Keycloak
• 6ace9b02 feat(admin): Add configurable REST API token length property
• b59f167a feat(licenses): Add functionality to ignore licenses
• ef6fa5b7 feat(footer): Use correct version of sw360
• 5f9db508 feat(statuscodes): Replace hardcoded values for readble ones
• cd7d8424 feat: Implement robust API error handling with timeout, retry logic, and a custom ApiError class
• 4586cc5c feat: Add sorting and license file modal to license clearing table
• d37488f7 feat(ai): Add initial AI safeguards
• b19b058f feat(styles): Deduplicate few css entries
• c819b75f feat(admin): Add Dersh as codeowner
• f1f56f48 feat: Add delete icon next to each linked release
• daeaeb74 feat: Add filters for releases without attachment usage set
• a1ed6922 feat: Add search to Obligations tab
• a1927ee1 feat: Add search bar to Obligations tab in License Detail page
• 47731b16 feat(CR): Integrate CR endpoint payload changes
• f4890725 feat(import): Add osadl and spdx import in admin license page
• 7be9f8b5 feat(license-upload): Add params to license upload request
• 5573d64a feat(components): Add autocomplete for Advanced Search fields
• fdab22f6 feat(html): Add proper html decode using a library
• 0697d9d8 feat(attachment-usage): Add release filters, search, CLI badge
• 5614a081 feat(treeview): Add client-side search with filtering
• 11e75da8 feat: Add hsts minimum setup
• 75d936c8 feat(linter): Do not allow linting errors anymore
• 3d2da378 feat(Release): Added additional data section at merge release
• 28b0e572 feat(Release): Added ext ids section at merge release
• 557a9662 feat(Release): Complete general section added at merge release
• 672c0681 feat(Release): Added general section of merge release data check
• 75e26477 feat(Vulnerability): Added svm link for external id
• 40dfde9a feat(css): Add more classes to disabled cursors
• b108fdd5 feat(nextjs): Update to NextJS 16.x series
• c5b54e76 feat(Request): Show open MR to the creator
• f7468f3c feat: Add filtering to linked packages tables
• 6f18a808 feat(Release): Added merge conditions based on attachments
• 5d364e2e feat(Release): Added merge release overview table
• b5690062 feat(Release): Added check for component id to merge release
• 18c76a42 feat(Release): Boiler plate code for merge release
• 912ecde9 feat(CR): Added breadcrumb at edit CR page
• 115475f6 feat(types): Migrate to http-status-codes
• 7242a0da feat(roles): Use additional roles from config
• 22804e59 feat(configs): Use configs at more locations
• 1ef5e7b5 feat(key-value): Use SuggestionBox for keys
• 158d710d feat(svm): Disable SVM sched if SVM disabled
• 7c94a153 feat(component): Use SuggestionBox in pages
• 78657cfb feat(component): SuggestionBox was created
• 76bbf1df feat(config): Use configs from API
• a123638d feat(config): Split configurations in tabs
• efbfca56 feat(config): Add config for UI container
• b80042e7 feat(logo): Add support for custom logo
• c105b07a feat(Breadcrumbs): Update breadcrumbs for request, package and vulnerability tabs
• 19a675f9 feat(biome): Replace Prettier and Eslint with Biome
• 13c958a5 feat(Component): Add breadcrumbs to component and release tabs
• af28a58a feat(releases): Add LinkedPackagesTab to release detail page
• 093ab88a feat(changelog): Migrate changelog tables to tanstack
• 8a7521b9 feat(Project): Feature to add comment in license obligation in edit project
• d6bdeeb2 feat(Project): Integrated APIs to update obligations based on type
• 13c32cf8 feat(TanstackMigration): migrate Add Releases Modal for Packages
• 3719bc91 feat(Project): Added comment for package table in LinkedPakages
• 7a86499b feat(Packages): Migrate from grid.js to tanstack and add release info
• 98afe9cc feat(vuln): Complete the implementation
• 557b5ff2 feat(SW360): Introduced breadcrumb at Project pages
• ee8b6cb9 feat(home): Migrate my projects and my components table
• d503c2fa feat(licenseClearing): Table migration for projects license clearing table
• e7d48497 feat(tanstack): Migrate from gridjs to tanstack table for linked projects modal
• 8fc0d891 feat(tanstack): Migration from gridjs to tanstack table for projects table
• 6cbe68c6 feat(Component): Introduced security user role based accesss to component page
• 250afffc feat(Project): Introduced security user role based accesses to projects page
• 1d2c8999 feat(Vulnerability): Introduced security user role into vulnerabilities page
• 5b41f3f0 feat(Requests): Introduced security user role based access to requests page
• bd1d9d79 feat(Packages): Introduced security user role at packages page
• 10e8cb85 feat(Licenses): Introduced security user role at licenses pages
• cf5e2504 feat(ECC): Introduced security user role access to ECC page
• 8bcdf225 feat: Prepare release deployment

Corrections

• 22b20af3 fix: format add proper indentation and formatting
• 4c8cfa5b fix(error): Fix error handling in api calls
• 489a5d6f fix(auth): AuthScreen file changes done for show and hide password
• 8007dd68 fix(UI): Report end point urls updation
• 7b988296 fix(navbar): Hide toggle on auth page
• 02b62689 fix(home): Address PR review feedback for My Projects filter
• 268bfbb9 fix(licensClearing): Use camelCase for license clearing count props
• d6ed2080 fix(translations): Add missing translations
• ccb9535a fix: Resolve merge conflicts
• 9bb39580 fix(license-table): Handle empty shortName and fix license detail link
• f7a07d38 fix(search): double encoding for search parameters
• 72e97113 fix(actions): do not build docker cron
• 778c8828 Revert "fix: Resolve license clearing table issues"
• d29e23d9 fix: Resolve SelectUsersDialog selection issues
• f54005c5 fix: Resolve license clearing table issues
• 322ea59c fix(downloadlicenseinfo): Fix options in download license info modal
• ccfdaba2 fix(loop): Fix render loop in useeffect
• 70ee1678 fix(relation): Add missing release relation for releases of root project
• 3f30aa18 fix(AdvSearch): Fixed luceneSearch param in adv search
• 8e6e5130 fix: Format code with biome
• 784b8814 fix: Use batch API for license clearing count to prevent 502 error
• f5337454 fix(repo): fix CODEOWNERS de002 to deo002 (#1399)
• 32308dec fix(generatelicenseinfo): Optimize logic to reduce api calls
• 99f05839 fix(UI): Vendor field shows empty on project edit page even when vendor data exists (#1393)
• 5b83cb95 fix(Config): Fixed error message on update config
• 242cd6d2 fix: Keep obligation pill always red
• 14a2fcc6 fix: merged main branch into feature branch
• 6cf1e295 fix:project relations added
• f1a1f35d fix:added Missing Fields in Components Detail Summary Tab
• bb96b61c Revert "fix(projects): Use batch API for license clearing count to prevent 502 errors"
• faa55a59 fix(projects): Use batch API for license clearing count to prevent 502 errors
• cc3411ae fix: Add loading spinner to project edit page
• 1510b4d2 fix: Add Enable SVM checkbox and delete icon to Linked Projects
• 8eaf0e0a fix(biome): Prevent to install wrong biome on dev dependencies
• 783b7ca0 fix(CR): Add tag field in CR tables
• a9e40bdb fix(aborterrors): Fix abort errors
• 75b27e8b fix(loop): Fix render loop in use effect hook
• 59179c04 fix(ui): Visually distinguish disabled clearing request icon
• 7a7a2efa fix: Remove vulnerabili...

v0.20.0-beta

feat: Prepare release deployment

Signed-off-by: Helio Chissini de Castro <heliocastro@gmail.com>