Repository: google/osv-scanner
Pull request #427 (2023-06-28 04:29:15)

Adds changelog for v1.3.5
Prep for release 1.3.5


Patch:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 599035e..807bd99 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,25 @@
-# v1.3.4:
 
-### Fixes
+# v1.3.5:
+
+### Features
+- [Feature #409](https://github.com/google/osv-scanner/pull/409) 
+  Adds an additional column to the table output which shows the severity if available.
+
+### API Features
+
+- [Feature #424](https://github.com/google/osv-scanner/pull/424)
+- [Feature #417](https://github.com/google/osv-scanner/pull/417)
+- [Feature #417](https://github.com/google/osv-scanner/pull/417)
+  - Update the models package to better reflect the osv schema, including:
+    - Add the withdrawn field
+    - Improve timestamp serialization
+    - Add related field
+    - Add additional ecosystem constants
+    - Add new reference types
+    - Add YAML tags
+
+
+# v1.3.4:
 
 ### Minor Updates
 
diff --git a/cmd/osv-scanner/main.go b/cmd/osv-scanner/main.go
index daee1d9..7468250 100644
--- a/cmd/osv-scanner/main.go
+++ b/cmd/osv-scanner/main.go
@@ -15,7 +15,7 @@ import (
 
 var (
 	// Update this variable when doing a release
-	version = "1.3.4"
+	version = "1.3.5"
 	commit  = "n/a"
 	date    = "n/a"
 )


Test patch:
diff --git a/cmd/osv-scanner/main_test.go b/cmd/osv-scanner/main_test.go
index 6d2fa4b..5c24566 100644
--- a/cmd/osv-scanner/main_test.go
+++ b/cmd/osv-scanner/main_test.go
@@ -147,6 +147,7 @@ func TestRun(t *testing.T) {
 				+-------------------------------------+------+-----------+---------+------------------------------------+-------------------------------------------------+
 				| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE | VERSION                            | SOURCE                                          |
 				+-------------------------------------+------+-----------+---------+------------------------------------+-------------------------------------------------+
+				| https://osv.dev/DLA-3022-1          |      | Debian    | dpkg    | 1.18.25                            | fixtures/sbom-insecure/postgres-stretch.cdx.xml |
 				| https://osv.dev/GHSA-v95c-p5hm-xq8f | 6    | Go        | runc    | v1.0.1                             | fixtures/sbom-insecure/postgres-stretch.cdx.xml |
 				| https://osv.dev/GO-2022-0274        |      |           |         |                                    |                                                 |
 				| https://osv.dev/GHSA-f3fp-gc8g-vw66 | 5.9  | Go        | runc    | v1.0.1                             | fixtures/sbom-insecure/postgres-stretch.cdx.xml |
@@ -155,6 +156,9 @@ func TestRun(t *testing.T) {
 				| https://osv.dev/GHSA-vpvm-3wq2-2wvm | 7    | Go        | runc    | v1.0.1                             | fixtures/sbom-insecure/postgres-stretch.cdx.xml |
 				| https://osv.dev/GHSA-p782-xgp4-8hr8 | 5.3  | Go        | sys     | v0.0.0-20210817142637-7d9622a276b7 | fixtures/sbom-insecure/postgres-stretch.cdx.xml |
 				| https://osv.dev/GO-2022-0493        |      |           |         |                                    |                                                 |
+				| https://osv.dev/DLA-3012-1          |      | Debian    | libxml2 | 2.9.4+dfsg1-2.2+deb9u6             | fixtures/sbom-insecure/postgres-stretch.cdx.xml |
+				| https://osv.dev/DLA-3008-1          |      | Debian    | openssl | 1.1.0l-1~deb9u5                    | fixtures/sbom-insecure/postgres-stretch.cdx.xml |
+				| https://osv.dev/DLA-3051-1          |      | Debian    | tzdata  | 2021a-0+deb9u3                     | fixtures/sbom-insecure/postgres-stretch.cdx.xml |
 				+-------------------------------------+------+-----------+---------+------------------------------------+-------------------------------------------------+
 			`,
 			wantStderr: "",