Skip to content
This repository was archived by the owner on Jan 22, 2026. It is now read-only.

CHANGELOG.md

Latest commit

 

History

History
128 lines (103 loc) · 6.43 KB

CHANGELOG.md

File metadata and controls

128 lines (103 loc) · 6.43 KB

[Unreleased]

  • --at flag for outdated command to check what was outdated at a specific date or git ref
  • Auto-upgrade outdated database schemas instead of erroring
  • Fix outdated command suggesting downgrades when current version is newer than registry

[0.9.0] - 2026-01-14

  • git pkgs sbom command to export dependencies as SPDX or CycloneDX
  • git pkgs integrity command to show and verify lockfile integrity hashes
  • Parse go.sum for Go module integrity hashes (no longer ignored)
  • Convert Go h1: hashes (base64) to hex for SBOM compatibility
  • --drift flag to detect packages with different hashes for the same version
  • Registry integrity comparison via ecosyste.ms API
  • Store integrity hashes from lockfiles in dependency_snapshots table
  • SBOM export includes supplier info from ecosyste.ms (owner/maintainer)
  • License commands use version-level license data when available
  • Store supplier_name and supplier_type on packages (schema v5, run git pkgs upgrade)
  • Update ecosystems-bibliothecary to ~> 15.3 (integrity extraction from lockfiles)
  • Update purl to >= 1.7.1 (ecosyste.ms API URL support)

[0.8.0] - 2026-01-14

  • git pkgs outdated command to find dependencies with newer versions available in registries
  • git pkgs licenses command to check dependency licenses with compliance options (--permissive, --allow, --deny)
  • ecosyste.ms client for fetching package metadata (latest versions, licenses)
  • Package and Version models for storing enrichment data
  • Spinner utility for progress feedback during network operations
  • PURL helper for standardized package URLs
  • outdated is no longer an alias for stale (now a separate command)

[0.7.0] - 2026-01-09

  • git pkgs vulns subcommand for vulnerability scanning via OSV API
  • git pkgs vulns scan to scan dependencies for known vulnerabilities
  • git pkgs vulns show to display details for a specific vulnerability
  • git pkgs vulns sync to prefetch vulnerability data for all packages
  • git pkgs vulns exposure to analyze vulnerability exposure over time
  • git pkgs vulns praise to show resolved vulnerabilities with attribution
  • SARIF output format for CI integration (--format=sarif)
  • Docker container support for running git-pkgs without local Ruby installation
  • list command now shows locked versions and manifest kind
  • --stateless flag for list, show, and diff commands (auto-enabled when no database exists)
  • Update ecosystems-bibliothecary to ~> 15.2
  • Fix -f flag conflict in diff command (was defined for both --from and --format)

[0.6.2] - 2026-01-06

  • --format=json support for diff, tree, stale, and why commands
  • Ignore go.sum (checksums only), treat go.mod as lockfile
  • Update ecosystems-bibliothecary to ~> 15.1
  • --manifest filter for list command to filter by manifest path
  • Stateless parsing API for forge integration (Git::Pkgs.parse_file, parse_files, diff_file)

[0.6.1] - 2026-01-05

  • Fix stats command crash on most changed dependencies query
  • Fix search command SQL alias error when displaying results
  • Fix blame and stale commands eager loading error
  • Fix list command returning empty output when ecosystem filter matches nothing

[0.6.0] - 2026-01-05

  • Replace ActiveRecord with Sequel (~3x faster init, ~2x faster queries)
  • git pkgs stats now shows top authors in default output
  • Update ecosystems-bibliothecary to ~> 15.0 (~10x faster lockfile parsing)
  • Fewer runtime dependencies
  • Quieter output from init and update commands

[0.5.0] - 2026-01-04

  • git pkgs init now installs git hooks by default (use --no-hooks to skip)
  • Parallel prefetching of git diffs for ~2x speedup on large repositories (1500+ commits)
  • Performance tuning via environment variables: GIT_PKGS_BATCH_SIZE, GIT_PKGS_SNAPSHOT_INTERVAL, GIT_PKGS_THREADS
  • git pkgs completions command for bash/zsh tab completion
  • Fix N+1 queries in blame, stale, stats, and log commands
  • Configuration via git config: pkgs.ecosystems, pkgs.ignoredDirs, pkgs.ignoredFiles
  • git pkgs info --ecosystems to show available ecosystems and their status
  • -q, --quiet flag to suppress informational messages
  • git pkgs diff now supports commit..commit range syntax
  • --git-dir and --work-tree global options (also respects GIT_WORK_TREE env var)
  • Grouped commands by category in help output
  • Fix crash when parsing manifests that return no dependencies

[0.4.0] - 2026-01-04

  • git pkgs where command to find where a package is declared in manifest files
  • git pkgs diff-driver command for semantic lockfile diffs in git diff
  • Ruby 4.0 support
  • Fix branch name retrieval and final snapshot storage in git pkgs init
  • Fix git pkgs info snapshot coverage output when zero snapshots
  • Fix manifest file pattern matching for wildcard characters
  • Fix co-author name parsing in git pkgs blame

[0.3.0] - 2026-01-03

  • Pager support for long output (respects GIT_PAGER, core.pager, PAGER)
  • --no-pager option for commands with long output
  • Colored output (respects NO_COLOR, color.ui, color.pkgs)
  • GIT_DIR and GIT_PKGS_DB environment variable support
  • git pkgs stats now supports --since and --until date filters
  • Consistent error handling across all commands (JSON errors when --format=json)
  • git pkgs update now uses a transaction for atomicity and better performance
  • Renamed git pkgs outdated to git pkgs stale (outdated remains as alias)
  • git pkgs log command to list commits with dependency changes
  • git pkgs schema command to output database schema in text, SQL, JSON, or markdown
  • git pkgs praise alias for blame
  • git pkgs upgrade command to handle schema upgrades after updating git-pkgs
  • Schema version tracking with automatic detection of outdated databases

[0.2.0] - 2026-01-02

  • git pkgs show command to display dependency changes in a single commit
  • git pkgs history now supports --author, --since, and --until filters
  • git pkgs stats --by-author shows who added the most dependencies
  • git pkgs stats --ecosystem=X filters statistics by ecosystem

[0.1.1] - 2026-01-01

  • git pkgs history now works without a package argument to show all dependency changes
  • git pkgs diff supports git refs (HEAD~10, branch names, tags) not just SHAs
  • git pkgs diff lazily inserts commits not found in the database
  • Expanded manifest file pattern matching for all supported ecosystems
  • Switched to ecosystems-bibliothecary

[0.1.0] - 2026-01-01

  • Initial release