From 383baf44e54d5ed10d468c52c89f889a1a8484c1 Mon Sep 17 00:00:00 2001 From: shantyk Date: Tue, 21 Jul 2026 16:46:22 -0600 Subject: [PATCH 1/6] Revert "Revert "Bump CLl to 2.4.3 for 11.5.1 hotfix"" This reverts commit 8d740866731e6cfa0adb4a1a62daff94cc540fe0. --- build.gradle | 4 ++-- documentation/src/main/markdown/currentreleasenotes.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/build.gradle b/build.gradle index 6e46016799..72ce60e8a7 100644 --- a/build.gradle +++ b/build.gradle @@ -22,7 +22,7 @@ buildscript { group = 'com.blackduck.integration' -version = '12.0.0-SIGQA3-SNAPSHOT' +version = '11.5.1-SNAPSHOT' apply plugin: 'com.blackduck.integration.solution' apply plugin: 'org.springframework.boot' @@ -185,7 +185,7 @@ dependencies { implementation "com.blackduck.integration:blackduck-common:${blackDuckCommonVersion}" implementation 'com.blackduck.integration:blackduck-upload-common:4.1.6' implementation 'com.blackducksoftware:method-analyzer-core:1.0.7' - implementation "${locatorGroup}:${locatorModule}:2.4.2" + implementation "${locatorGroup}:${locatorModule}:2.4.3" implementation 'org.apache.maven.shared:maven-invoker:3.3.0' diff --git a/documentation/src/main/markdown/currentreleasenotes.md b/documentation/src/main/markdown/currentreleasenotes.md index cc32fb739c..27d41ab754 100644 --- a/documentation/src/main/markdown/currentreleasenotes.md +++ b/documentation/src/main/markdown/currentreleasenotes.md @@ -43,7 +43,7 @@ * (IDETECT-5118) Fixed UV Lockfile Detector to respect excluded dependency groups for optional‑dependencies. Optional extras specified in exclusion flags are now correctly excluded alongside development dependencies. * (IDETECT‑5126) Fixed a BitBake layer misidentification issue caused by project folder names colliding with layer names. The detector now resolves layers deterministically, preferring the deepest valid match and falling back to the first valid layer when necessary. * (IDETECT-5071) Fixed an issue with Simple Build Tool (sbt) evictions being included in the BOM. Dependencies that requested an evicted version are now reported with the version that replaced it. - +* (IDETECT-5207) Fixed an IndexOutOfBoundsException in component location analysis that was due to space characters within a version string. ### Dependency Updates * Updated Project Inspector to version 2026.6.0 ensuring continued security compliance. \ No newline at end of file From 79ebbef2e831ea73e0eaecdb40aac87819c9639b Mon Sep 17 00:00:00 2001 From: shantyk Date: Tue, 21 Jul 2026 16:51:54 -0600 Subject: [PATCH 2/6] Fix release notes --- .../src/main/markdown/currentreleasenotes.md | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/documentation/src/main/markdown/currentreleasenotes.md b/documentation/src/main/markdown/currentreleasenotes.md index 27d41ab754..eef5034a7e 100644 --- a/documentation/src/main/markdown/currentreleasenotes.md +++ b/documentation/src/main/markdown/currentreleasenotes.md @@ -18,6 +18,14 @@ * **Deprecation of Java 8 support** - In alignment with EU Cyber Resilience Act (CRA) requirements and compliance timelines, Java 8 support will be deprecated in the anticipated 2026 Q3 Detect 12.0.0 release. +## Version 11.5.1 + +### Resolved issues +* (IDETECT-5207) Fixed an IndexOutOfBoundsException in component location analysis that was due to space characters within a version string. + +### Dependency Updates +* Updated Component Locator Library to version 2.4.3. + ## Version 11.5.0 ### Changed features @@ -26,6 +34,7 @@ * CentOS support in Detect Docker Inspector has been deprecated and will be removed in 12.0.0. For more details, please see [Docker Inspector Release Notes](packagemgrs/docker/releasenotes.md). * imageinspector.service.port.centos has been deprecated and will be removed in 12.0.0. * Clarified documentation for `--detect.uv.dependency.groups.excluded`. Optional is not a dependency group in uv but a section defining extras, therefor supplying `optional` as a value has no effect and exclusions must reference the extra name directly (e.g., postgres, redis). + ### Resolved issues * (IDETECT-5125) Fixed failure during Python scans when the `requirements.txt` file contains Python extras syntax using square brackets, e.g.: `kopf[dev]>=1.3` * (IDETECT-5090) Fixed PIP Native Inspector failure to parse `requirements.txt` lines that contain [PEP 508 environment markers](https://peps.python.org/pep-0508/). @@ -43,7 +52,6 @@ * (IDETECT-5118) Fixed UV Lockfile Detector to respect excluded dependency groups for optional‑dependencies. Optional extras specified in exclusion flags are now correctly excluded alongside development dependencies. * (IDETECT‑5126) Fixed a BitBake layer misidentification issue caused by project folder names colliding with layer names. The detector now resolves layers deterministically, preferring the deepest valid match and falling back to the first valid layer when necessary. * (IDETECT-5071) Fixed an issue with Simple Build Tool (sbt) evictions being included in the BOM. Dependencies that requested an evicted version are now reported with the version that replaced it. -* (IDETECT-5207) Fixed an IndexOutOfBoundsException in component location analysis that was due to space characters within a version string. -### Dependency Updates +### Dependency Updates * Updated Project Inspector to version 2026.6.0 ensuring continued security compliance. \ No newline at end of file From 62fae0bd253e92f1f5978606e06b87116fd5963e Mon Sep 17 00:00:00 2001 From: blackduck-serv-builder Date: Wed, 22 Jul 2026 01:11:31 -0400 Subject: [PATCH 3/6] Release 11.5.1-SIGQA1-shanty.IDETECT-5207_11.5.1-hotfix --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 72ce60e8a7..3febe3bb8a 100644 --- a/build.gradle +++ b/build.gradle @@ -22,7 +22,7 @@ buildscript { group = 'com.blackduck.integration' -version = '11.5.1-SNAPSHOT' +version = '11.5.1-SIGQA1-shanty.IDETECT-5207_11.5.1-hotfix' apply plugin: 'com.blackduck.integration.solution' apply plugin: 'org.springframework.boot' From aad658e735229eed38ba341b3c6d30d8983e76c9 Mon Sep 17 00:00:00 2001 From: blackduck-serv-builder Date: Wed, 22 Jul 2026 01:22:12 -0400 Subject: [PATCH 4/6] Using the next snapshot post release 11.5.1-SIGQA2-shanty.IDETECT-5207_11.5.1-hotfix-SNAPSHOT --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 3febe3bb8a..b798274967 100644 --- a/build.gradle +++ b/build.gradle @@ -22,7 +22,7 @@ buildscript { group = 'com.blackduck.integration' -version = '11.5.1-SIGQA1-shanty.IDETECT-5207_11.5.1-hotfix' +version = '11.5.1-SIGQA2-shanty.IDETECT-5207_11.5.1-hotfix-SNAPSHOT' apply plugin: 'com.blackduck.integration.solution' apply plugin: 'org.springframework.boot' From 07b6a2f776dff7c3eb14c11965fcbd702d581b31 Mon Sep 17 00:00:00 2001 From: shantyk Date: Tue, 28 Jul 2026 11:00:08 -0600 Subject: [PATCH 5/6] Bump to 2.4.4 --- build.gradle | 2 +- documentation/src/main/markdown/currentreleasenotes.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/build.gradle b/build.gradle index b798274967..a17aa1b95b 100644 --- a/build.gradle +++ b/build.gradle @@ -185,7 +185,7 @@ dependencies { implementation "com.blackduck.integration:blackduck-common:${blackDuckCommonVersion}" implementation 'com.blackduck.integration:blackduck-upload-common:4.1.6' implementation 'com.blackducksoftware:method-analyzer-core:1.0.7' - implementation "${locatorGroup}:${locatorModule}:2.4.3" + implementation "${locatorGroup}:${locatorModule}:2.4.4" implementation 'org.apache.maven.shared:maven-invoker:3.3.0' diff --git a/documentation/src/main/markdown/currentreleasenotes.md b/documentation/src/main/markdown/currentreleasenotes.md index eef5034a7e..016324c3ce 100644 --- a/documentation/src/main/markdown/currentreleasenotes.md +++ b/documentation/src/main/markdown/currentreleasenotes.md @@ -24,7 +24,7 @@ * (IDETECT-5207) Fixed an IndexOutOfBoundsException in component location analysis that was due to space characters within a version string. ### Dependency Updates -* Updated Component Locator Library to version 2.4.3. +* Updated Component Locator Library to version 2.4.4 ## Version 11.5.0 From fe5f94a79c866eddc5ca610f63b23b6cfec32403 Mon Sep 17 00:00:00 2001 From: shantyk Date: Tue, 28 Jul 2026 11:03:17 -0600 Subject: [PATCH 6/6] Fix version string in build.gradle --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index a17aa1b95b..14a36d0884 100644 --- a/build.gradle +++ b/build.gradle @@ -22,7 +22,7 @@ buildscript { group = 'com.blackduck.integration' -version = '11.5.1-SIGQA2-shanty.IDETECT-5207_11.5.1-hotfix-SNAPSHOT' +version = '11.5.1-SNAPSHOT' apply plugin: 'com.blackduck.integration.solution' apply plugin: 'org.springframework.boot'