# Changelog

All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.

## [Unreleased]
## [0.40.0] (2026-04-28)
### Fixed
- `WfpCalculator` no longer crashes with `RangeError: Invalid array length` when fingerprinting large binary files.
- `scanoss-js wfp` CLI now uses `ScanFilter` instead of `DependencyFilter` when building the file list
### Changed
- `WfpCalculator` now detects binary files via `isBinaryFileSync`. Binary files emit only the `file=` MD5 line.

## [0.39.0] (2026-04-23)
### Added
- `DecompressionManager.decompress()` now returns `skippedByDepth: Array<string>`, a list of supported archive paths encountered beyond `decompressionLevel` and therefore not expanded. Allows callers to report which nested archives were left unexpanded.
### Changed
- **BREAKING:** `DecompressionManager.decompressRecursive()` return type changed from `Array<{path, error}>` to `{ failedFiles: Array<{path, error}>, skippedByDepth: Array<string> }`. Callers consuming this method directly must update to read `.failedFiles`.

## [0.38.1] (2026-04-08)
### Fixed
- Fixed decompression failing on Windows when scanning from UNC network paths (e.g. `\\server\share\...`). The `adm-zip` library internally calls `fs.chmodSync()` after extracting each file, which fails with `ENOENT` on UNC paths. Replaced with manual entry extraction to avoid the unnecessary chmod call.

## [0.38.0] (2026-03-12)
### Added
- Added support for resolving Gradle dependencies from version catalog (`libs.versions.toml`)
- Added support for Gradle Kotlin DSL (`build.gradle.kts`) dependency parsing

## [0.37.0] (2026-03-02)
### Added
- Added `skip_headers` and `skip_headers_limit` support in `scanoss.json` `file_snippet` settings to filter license headers, comments, and imports before snippet matching
- Added `HeaderFilter` module for detecting and skipping file preambles (license blocks, comments, shebangs, imports) across 20+ programming languages
- Added `proxy`, `http_config` (base_uri, ignore_cert_errors) support in `scanoss.json` `file_snippet` settings
- Added `ScanSettingsBuilder` methods: `withSkipHeaders()`, `withSkipHeadersLimit()`, `withProxy()`, `withBaseUri()`, `withIgnoreCertErrors()`
- Centralized scan settings into `ScannerCfg.SCANOSS_SETTINGS`

## [0.36.0] (2026-02-27)
### Added
- Added support for scoped `requirements.txt` files (`dev-requirements.txt`, `requirements-tox.txt`, etc.) with automatic scope extraction from filename prefix/suffix
### Fixed
- Fixed Poetry `pyproject.toml` parser to set scope `dev` for `[tool.poetry.group.dev.dependencies]` and `[tool.poetry.dev-dependencies]` sections instead of `dependency`

## [0.35.0] (2026-02-26)
### Added
- Implemented scan tuning parameters via CLI options and `scanoss.json` settings file (`file_snippet` section)
- Added `ScanSettingsBuilder` for constructing file snippet scan settings with priority: `scanoss.json` > CLI arguments
- Supported settings: `min_snippet_hits`, `min_snippet_lines`, `ranking_enabled`, `ranking_threshold`, `honour_file_exts`, `dependency_analysis`

## [0.34.0] (2026-02-24)
### Added
- Added support for `pnpm-lock.yaml` dependency parsing (v5, v6, and v9+ lockfile formats with transitive dependency scope resolution)
- Added support for `pip_requirements_lock.txt` (`pip-compile` / `pip-tools` lock file) dependency parsing
- Added support for new archive decompression format: `.mtar`

## [0.33.0] (2026-02-11)
### Added
- Added support for Poetry dependency format in `pyproject.toml` parser (`[tool.poetry.dependencies]`, `[tool.poetry.dev-dependencies]`, `[tool.poetry.group.<name>.dependencies]`)
### Fixed
- Throttled file system operations in `excludeBinariesAndLargeFiles` using `PQueue` (concurrency: 10) to prevent EMFILE errors when processing large file lists
- Switched from async `isBinaryFile` to sync `isBinaryFileSync` for more predictable concurrency behavior

## [0.32.0] (2026-02-09)
### Changed
- Improved decompression error handling: extraction failures are now collected and reported rather than stopping the entire process
- CLI scan command displays warnings for archives that failed to extract while continuing with successful extractions
### Fixed
- Fixed `libarchive.js` compatibility with Electron ASAR archives by resolving module paths through `app.asar.unpacked`
- Used indirect dynamic import to prevent bundlers from converting ESM `import()` to `require()`
- Fixed `libarchive.js` worker initialization for paths containing spaces

## [0.31.2] (2026-02-03)
### Fixed
- Fixed CryptographyScanner hang when processing empty file list

## [0.31.1] (2026-02-02)
### Fixed
- Polyfill global `File` for `libarchive.js` in environments where it is not available

## [0.31.0] (2026-02-02)
### Added
- Added support for new archive decompression formats: `.rar`, `.rpm`, `.tar.bz2`, `.tar.lzma`, `.tar.xz`, `.tbz2`, `.txz`, `.7z` (via `libarchive.js`)
- Added support for single-file `.gz` decompression (via Node.js `zlib`)
### Changed
- Upgraded `tar` dependency from ^6.2.1 to ^7.5.7

## [0.30.1] (2026-01-27)
### Fixed
- Exported missing `License` interface from `IDependencyClient`
- Added missing `requirement` field to `CryptographyResponse` interface

## [0.30.0] (2026-01-14)
### Fixed
- Reset proxy environment variables on each new HttpClient and Dispatcher instance
- Include file path in decompression error messages
- Added missing component URL to the HTML format
### Changed
- Upgraded `form-data` dependency from ^4.0.0 to ^4.0.5
- Upgraded `tar` dependency from ^6.1.11 to ^6.2.1
- Refactored `DependencyTypes.ts` to extend interfaces from `IDependencyClient` instead of duplicating type definitions
- Updated `DependencyScanner` return types to use extended `IDependencyResponse` interface
- Removed unused dependency component extraction logic from `ComponentDataProvider`
- Added URL column to dependencies table in HTML report template

## [0.29.0] (2025-12-22)
### Changed
- Used write and read streams to save scan responses
- Include `requirement` in component crypto algorithm response

## [0.28.1] (2025-12-10)
### Changed
- Deleted zip folders on extraction failure

## [0.28.0] (2025-12-10)
### Added
- Added `requirement` field in dependency response

## [0.27.0] (2025-11-11)
### Added
- Added validation to remove `/scan/direct` path name from api url
### Changed
- Enhanced logger output
- Refactor on Logger. Allowed to pass logger instance to SDK

## [0.26.0] (2025-10-31)
### Added
- Added fh2 opposite line ending hash calculation

## [0.25.0] (2025-10-01)
### Changed
- Replaced `/v2/cryptography/hints/range/components` by `/v2/cryptography/hints/components`

## [0.24.0] (2025-09-23)
### Bug
- Fixed bug on local cryptography hints detection

## [0.23.0] (2025-09-19)
### Bug
- Fixed bug in the cryptography scanner
### Changed
- Enhance http error handling on cryptography client

## [0.22.0] (2025-09-05)
### Added
- Added ComponentsClient SDK with gRPC and HTTP client implementations
- Added components CLI command for component scanning functionality
### Changed
- Removed `api` prefix from dependency and vulnerability API URLs
- Replaced gRPC client by HTTP client on cryptography scanner
- Implemented client config on dependency HTTP client
- Implemented client config on vulnerability HTTP client

## [0.21.1] (2025-09-03)
### Changed
- Keep basic compatability across all the scanners

## [0.21.0] (2025-09-03)
### Added
- Implemented parser for `package-lock.json` v1 files.

## [0.20.0] (2025-09-02)
### Added
- Added vulnerability scanner to SDK with HTTP client support
- Implemented `vulnerabilitiesComponentes` method for batch vulnerability scanning of multiple components
- Implemented `vulnerabilitiesComponent` method for single component vulnerability assessment
### Changed
- switched cryptography scanner over to use cryptography http client

## [0.19.0] (2025-08-29)
### Changed
- Used HTTP protocol for cryptography scanning
- Implemented ´ClientConfig´ on ´VulnerabilityHttpClient.ts´, ´CryptographyHttpClient.ts´ and ´DependencyHttpClient.ts´files
### Added
- Added documentation about deprecated scanner configuration

## [0.18.0] (2025-08-28)
### Added 
- Added REST protocol implementation for SCANOSS dependency service
- Added proxy options to `dep` subcommand
### Fixed
- Improved URL path handling for free vs premium SCANOSS endpoints

## [0.17.3] (2025-06-27)
### Fixed
- Empty winnowing.wfp file now created when scanning empty directories or filtered content

## [0.17.2] (2025-06-25)
### Fixed
-  Fixed dependency scan response concatenation

## [0.17.1] (2025-06-16)
### Changed
- Implemented chunked processing for dependency requests

## [0.17.0] (2025-06-10)
### Fixed
- Fixed ca-certs on gRPC protocol
### Changed
- Improved validation on scanner config

## [0.16.5] (2025-05-28)
### Fixed
- Fixed ca-certs on grpc dependency service

## [0.16.5] (2025-05-28)
### Fixed
- Fixed ca-certs on grpc dependency service

## [0.16.3] (2025-04-30)
### Fixed
- Corrected slash encoding in npm parser for package identifiers
- Fixed cryptographic scanning freezes when processing empty input files

## [0.16.2] (2025-04-25)
### Added
- Added filtering for binary and large files(>2GB) on local cryptography scanning
- Support for new crypto algorithms rules definitions
### Fixed
- Fixed scanoss.json settings file injection

## [0.16.1] (2025-04-24)
### Added
- Added local cryptography library scanning

### 0.1.2 (2021-12-28)
### 0.2.2 (2021-12-30)
### [0.2.4](https://github.com/scanoss/scanoss.js/compare/v0.2.2...v0.2.4) (2022-01-05)
### [0.2.6](https://github.com/scanoss/scanoss.js/compare/v0.2.4...v0.2.6) (2022-01-06)
### [0.2.8](https://github.com/scanoss/scanoss.js/compare/v0.2.6...v0.2.8) (2022-01-10)
### [0.2.10](https://github.com/scanoss/scanoss.js/compare/v0.2.8...v0.2.10) (2022-01-11)
### [0.2.14](https://github.com/scanoss/scanoss.js/compare/v0.2.10...v0.2.14) (2022-02-09)
### [0.2.16](https://github.com/scanoss/scanoss.js/compare/v0.2.14...v0.2.16) (2022-02-14)
### [0.2.18](https://github.com/scanoss/scanoss.js/compare/v0.2.16...v0.2.18) (2022-02-23)
### [0.3.0](https://github.com/scanoss/scanoss.js/compare/v0.2.18...v0.3.0) (2022-07-02)
### [0.4.0-alpha.0](https://github.com/scanoss/scanoss.js/compare/v0.3.0...v0.4.0-alpha.0) (2022-08-19)
### [0.4.0-beta](https://github.com/scanoss/scanoss.js/compare/v0.4.0-alpha.0...v0.4.0-beta) (2022-08-31)
### [0.4.0](https://github.com/scanoss/scanoss.js/compare/v0.4.0-beta...v0.4.0) (2022-09-30)
### [0.7.8](https://github.com/scanoss/scanoss.js/compare/v0.4.0...v0.7.8) (2023-01-25)
### [0.8.0](https://github.com/scanoss/scanoss.js/compare/v0.7.8...v0.8.0) (2023-02-20)
### [0.8.5](https://github.com/scanoss/scanoss.js/compare/v0.8.0...v0.8.5) (2023-03-17)
### [0.8.6](https://github.com/scanoss/scanoss.js/compare/v0.8.5...v0.8.6) (2023-03-28)
### [0.8.7](https://github.com/scanoss/scanoss.js/compare/v0.8.6...v0.8.7) (2023-04-12)
### [0.8.8](https://github.com/scanoss/scanoss.js/compare/v0.8.7...v0.8.8) (2023-04-16)
### [0.9.0](https://github.com/scanoss/scanoss.js/compare/v0.8.7...v0.9.0) (2023-04-19)
### [0.9.1](https://github.com/scanoss/scanoss.js/compare/v0.9.0...v0.9.1) (2023-05-18)
### [0.9.2](https://github.com/scanoss/scanoss.js/compare/v0.9.1...v0.9.2) (2023-10-09)
### [0.9.3](https://github.com/scanoss/scanoss.js/compare/v0.9.2...v0.9.3) (2023-10-20)
### [0.10.0](https://github.com/scanoss/scanoss.js/compare/v0.9.2...v0.10.0) (2023-11-22)
### [0.10.1](https://github.com/scanoss/scanoss.js/compare/v0.10.0...v0.10.1) (2023-11-22)
### [0.10.2](https://github.com/scanoss/scanoss.js/compare/v0.10.1...v0.10.2) (2023-12-19)
### [0.10.3](https://github.com/scanoss/scanoss.js/compare/v0.10.2...v0.10.3) (2023-12-22)
### [0.10.4](https://github.com/scanoss/scanoss.js/compare/v0.10.3...v0.10.4) (2023-12-28)
### [0.10.5](https://github.com/scanoss/scanoss.js/compare/v0.10.4...v0.10.5) (2023-12-29)
### [0.11.0](https://github.com/scanoss/scanoss.js/compare/v0.10.5...v0.11.0) (2024-01-04)
### [0.11.1](https://github.com/scanoss/scanoss.js/compare/v0.11.0...v0.11.1) (2024-01-09)
### [0.11.2](https://github.com/scanoss/scanoss.js/compare/v0.11.1...v0.11.2) (2024-01-09)
### [0.11.3](https://github.com/scanoss/scanoss.js/compare/v0.11.2...v0.11.3) (2024-01-09)
### [0.11.4](https://github.com/scanoss/scanoss.js/compare/v0.11.3...v0.11.4) (2024-04-02)
### [0.11.5](https://github.com/scanoss/scanoss.js/compare/v0.11.4...v0.11.5) (2024-04-19)
### [0.12.0](https://github.com/scanoss/scanoss.js/compare/v0.11.5...v0.12.0) (2024-05-06)
### [0.12.2](https://github.com/scanoss/scanoss.js/compare/v0.12.0...v0.12.2) (2024-05-10)
### [0.13.0](https://github.com/scanoss/scanoss.js/compare/v0.12.2...v0.13.0) (2024-05-13)
### [0.13.1](https://github.com/scanoss/scanoss.js/compare/v0.13.0...v0.13.1) (2024-05-15)
### [0.13.2](https://github.com/scanoss/scanoss.js/compare/v0.13.1...v0.13.2) (2024-05-20)
### [0.14.0](https://github.com/scanoss/scanoss.js/compare/v0.13.2...v0.14.0) (2024-05-23)
### [0.14.1](https://github.com/scanoss/scanoss.js/compare/v0.14.0...v0.14.1) (2024-06-05)
### [0.15.0](https://github.com/scanoss/scanoss.js/compare/v0.14.1...v0.15.0) (2024-07-28)
### [0.15.1](https://github.com/scanoss/scanoss.js/compare/v0.15.0...v0.15.1) (2024-08-27)
### [0.15.2](https://github.com/scanoss/scanoss.js/compare/v0.15.1...v0.15.2) (2024-08-29)
### [0.15.3](https://github.com/scanoss/scanoss.js/compare/v0.15.2...v0.15.3) (2024-11-24)
### [0.15.4](https://github.com/scanoss/scanoss.js/compare/v0.15.3...v0.15.4) (2024-11-27)
### [0.15.5](https://github.com/scanoss/scanoss.js/compare/v0.15.4...v0.15.5) (2024-12-30)
### [0.15.6](https://github.com/scanoss/scanoss.js/compare/v0.15.5...v0.15.6) (2025-01-08)
### [0.15.7](https://github.com/scanoss/scanoss.js/compare/v0.15.6...v0.15.7) (2025-03-05)
### [0.16.1](https://github.com/scanoss/scanoss.js/compare/v0.15.7...v0.16.1) (2025-04-24)
### [0.16.2](https://github.com/scanoss/scanoss.js/compare/v0.16.1...v0.16.2) (2025-04-25)
### [0.16.3](https://github.com/scanoss/scanoss.js/compare/v0.16.2...v0.16.3) (2025-04-30)
### [0.16.5](https://github.com/scanoss/scanoss.js/compare/v0.16.3...v0.16.5) (2025-05-28)
### [0.17.0](https://github.com/scanoss/scanoss.js/compare/v0.16.5...v0.17.0) (2025-06-10)
### [0.17.1](https://github.com/scanoss/scanoss.js/compare/v0.17.0...v0.17.1) (2025-06-16)
### [0.17.2](https://github.com/scanoss/scanoss.js/compare/v0.17.1...v0.17.2) (2025-06-25)
### [0.17.3](https://github.com/scanoss/scanoss.js/compare/v0.17.2...v0.17.3) (2025-06-27)
### [0.18.0](https://github.com/scanoss/scanoss.js/compare/v0.17.3...v0.18.0) (2025-08-28)
### [0.19.0](https://github.com/scanoss/scanoss.js/compare/v0.18.0...v0.19.0) (2025-08-29)
### [0.20.0](https://github.com/scanoss/scanoss.js/compare/v0.18.0...v0.19.0) (2025-09-02)
### [0.21.0](https://github.com/scanoss/scanoss.js/compare/v0.18.0...v0.19.0) (2025-09-03)
### [0.21.1](https://github.com/scanoss/scanoss.js/compare/v0.18.0...v0.19.0) (2025-09-03)
### [0.22.0](https://github.com/scanoss/scanoss.js/compare/v0.18.0...v0.19.0) (2025-09-05)
### [0.23.0](https://github.com/scanoss/scanoss.js/compare/v0.22.0...v0.23.0) (2025-09-19)
### [0.24.0](https://github.com/scanoss/scanoss.js/compare/v0.23.0...v0.24.0) (2025-09-23)
### [0.25.0](https://github.com/scanoss/scanoss.js/compare/v0.24.0...v0.25.0) (2025-10-01)
### [0.26.0](https://github.com/scanoss/scanoss.js/compare/v0.25.0...v0.26.0) (2025-10-30)
### [0.27.0](https://github.com/scanoss/scanoss.js/compare/v0.26.0...v0.26.1) (2025-11-11)
### [0.28.0](https://github.com/scanoss/scanoss.js/compare/v0.27.0...v0.28.1) (2025-12-10)
### [0.28.1](https://github.com/scanoss/scanoss.js/compare/v0.28.0...v0.28.1) (2025-12-10)
### [0.29.0](https://github.com/scanoss/scanoss.js/compare/v0.28.1...v0.29.0) (2025-12-22)
### [0.30.0](https://github.com/scanoss/scanoss.js/compare/v0.29.0...v0.30.0) (2026-01-14)
### [0.30.1](https://github.com/scanoss/scanoss.js/compare/v0.30.0...v0.30.1) (2026-01-27)
### [0.31.0](https://github.com/scanoss/scanoss.js/compare/v0.30.1...v0.31.0) (2026-02-02)
### [0.31.1](https://github.com/scanoss/scanoss.js/compare/v0.31.0...v0.31.1) (2026-02-02)
### [0.31.2](https://github.com/scanoss/scanoss.js/compare/v0.31.1...v0.31.2) (2026-02-03)
### [0.32.0](https://github.com/scanoss/scanoss.js/compare/v0.31.2...v0.32.0) (2026-02-09)
### [0.33.0](https://github.com/scanoss/scanoss.js/compare/v0.32.0...v0.33.0) (2026-02-11)
### [0.34.0](https://github.com/scanoss/scanoss.js/compare/v0.33.0...v0.34.0) (2026-02-24)
### [0.35.0](https://github.com/scanoss/scanoss.js/compare/v0.34.0...v0.35.0) (2026-02-26)
### [0.36.0](https://github.com/scanoss/scanoss.js/compare/v0.35.0...v0.36.0) (2026-02-27)
### [0.37.0](https://github.com/scanoss/scanoss.js/compare/v0.36.0...v0.37.0) (2026-03-02)
### [0.38.0](https://github.com/scanoss/scanoss.js/compare/v0.37.0...v0.38.0) (2026-03-12)
### [0.38.1](https://github.com/scanoss/scanoss.js/compare/v0.38.0...v0.38.1) (2026-04-08)
### [0.39.0](https://github.com/scanoss/scanoss.js/compare/v0.38.1...v0.39.0) (2026-04-23)
### [0.40.0](https://github.com/scanoss/scanoss.js/compare/v0.39.0...v0.40.0) (2026-04-28)