Announcing 14.6 Composition Analysis deprecations and behavior changes

The Composition Analysis group announced changes with the 14.6 release on December 22, 2021, which include the deprecation of certain features and a modification in the behavior of a variable to enhance performance. The DS_EXCLUDED_PATHS variable in Dependency Scanning now pre-filters, preventing the analyzer from logging warnings or errors for explicitly excluded dependency files, which can lead to performance improvements. This change is backported to all versions, requiring adjustments for custom tools expecting post-filtering behavior. Additionally, the bundler-audit tool is deprecated and will be removed in version 15.0, with users advised to transition to gemnasium-dependency_scanning to avoid pipeline failures. The License Compliance API deprecated the terms "approved" and "blacklisted," replacing them with "allowed" and "denied," necessitating updates to custom tools before their removal in version 15.0.

No tracked trend matches for this post yet.