All pull requests

Pull requests

• chore(deps): bump ossf/scorecard-action from 2.4.4 to 2.5.0

  dependenciesgithub_actions
  #4704·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump step-security/harden-runner from 2.22.0 to 2.22.1

  dependenciesgithub_actions
  #4703·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump github/codeql-action/init from 4.38.2 to 4.38.3

  dependenciesgithub_actions
  #4702·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump github/codeql-action/analyze from 4.38.2 to 4.38.3

  dependenciesgithub_actions
  #4701·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2

  dependenciesgithub_actions
  #4700·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump keycloak/keycloak from 26.8.0 to 26.8.1

  dependenciesdocker
  #4699·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

  dependenciesjava
  #4698·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump org.ow2.asm.version from 9.10.1 to 9.11

  dependenciesjava
  #4697·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps-dev): bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.4

  dependenciesjava
  #4696·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump com.google.guava:guava from 33.7.0-jre to 33.7.2-jre

  dependenciesjava
  #4695·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• fix(backend): use valid CPE 2.3 format and handle 404 in cve-search q…

  #4693·5oh4m opened Oct 15, 2026·

  ·

• fix(release): preserve subscribers when editing release or component (#2039)

  #4692·5oh4m opened Oct 14, 2026·

  ·

• Create an endpoint to replace attachment usages of a project

  #4691·deo002 opened Oct 13, 2026Contributor·1 task done·

  ·

• feat(client): updated client adapters and related models as per latest backend API

  #4690·bibhuti230185 opened Oct 12, 2026Contributor·

  ·
  5

• fix(backend): export linked releases in CycloneDxBOMExporter even when no package release overlaps

  #4688·kavya685 opened Oct 10, 2026Contributor·1 task done·

  ·
  1

• docs: rework root README for onboarding and accuracy

  #4685·prateekranganath opened Oct 9, 2026·1 task done·

  ·
  1

• fix(license): initialize obligation search handlers in injectable constructor

  needs code reviewneeds general test
  #4654·Nitish08-08 opened Oct 1, 2026·3 tasks done·

  ·
  1

  2

• fix(licenseinfo): keep license name in dedup key for text-less licenses

  needs code review
  #4647·chiragmalik3553-tech opened Sep 27, 2026·1 task·

  ·
  3

• feat(export): add spreadsheet export functionality with support for C…

  #4646·hetavangle opened Sep 25, 2026·1 task done·

  ·

• fix(Project): Implement literal tag search with non-tokenized matching and implicit wildcard

  #4635·Farooq-Fateh-Aftab opened Sep 24, 2026Contributor·1 task·

  ·
  1

  8

• Fix bulk release deletion rollback snapshots

  #4631·jiteshkhatri11 opened Sep 23, 2026·

  ·
  1

  1

• fix(rest): return full project ECC releases and add searchText lucene filter

  needs code reviewneeds general test
  #4603·nikkuma7 opened Sep 11, 2026Contributor·1 task·

  ·
  17

• feat(Project): Excel export for obligation

  #4586·Farooq-Fateh-Aftab opened Sep 7, 2026Contributor·1 task·

  ·
  1

• refactor: enforce constructor injection architecture rules in Auth and Fossology modules

  has merge conflictsready
  #4579·Nitish08-08 opened Sep 4, 2026·4 of 5 tasks·

  ·
  9

• chore(deps): bump org.cyclonedx:cyclonedx-core-java from 12.2.0 to 13.2.0

  dependenciesjava
  #4569·dependabot[bot] opened Sep 4, 2026Bot·

  ·