Adam Setch

Update dependencies to resolve open vulnerabilities

1

### What version of `astro-icon` are you using? 1.1.5 ### Astro Info ```block Astro v5.8.0 Node v20.19.0 System macOS (arm64) Package Manager npm Output static Adapter none Integrations astro-icon ```...

feat(presets): `@tsconfig/bases` node replacements

5

## Changes Add new replacement preset to help with [@tsconfig/bases](https://github.com/tsconfig/bases) node updates, both within `package.json` and `tsconfig.json` Demo repository: https://github.com/setchy/renovate-tsconfig-bases ## Context ## Documentation (please check one with an [x])...

feat: new toggle to hide/show aliased project vulnerability findings

2

### Description Add a new toggle to the Project Audit Vulnerabilities tab which will show/hide aliased component vulnerabilities within the list. By default the behavior will remain the same, but...

### Current Behavior We have been using the following project tag convention for a while now, primarily programmatically via the Dependency Track REST API - `org:` - `team:` - etc...

### Current Behavior The classifier for a project shows as being mandatory, however there are two observed bugs with the current behavior 1. You can create a project without selecting...

### Current Behavior Currently both the `Vulnerability Audit` and `Policy Violation Audit` modules support a number of dimensions/facets for which you can filter by. ### Proposed Behavior Add the ability...

OCI: Add support for dependencies

6

This ticket is to enhance cdxgen to populate the `dependencies` array for OCI components. This will help with visualizing the Dependency Graph within Dependency Track

[server]: should throw error if no space on device to clone repository

1

We found some silent failures within our sbom pipelines. cdxgen server mode was unable to clone the git repository due to `no space left on device`, but silently continued and...

Add support for fetching license information dynamically via CDXGEN Server as an API argument. The allows the calling workflow to determine if they want license enrichment, or not.