Skip to content

Conversation

@elaine-mattos
Copy link

@elaine-mattos elaine-mattos commented Jul 17, 2025

Overview

This PR introduces several significant updates and improvements to the project, including:

Node.js version upgrades (Dockerfiles, CI, engines)
Dependency updates (major and minor, including security and compatibility)

Changes

Node.js Version Upgrades

  • DevDockerfile and Dockerfile: Upgraded from node:18-bullseye to node:24-bullseye
  • test.yml: Node.js version set to 24

Dependency Updates

  • Major dependency upgrades in Azure SDKs, Babel, ESLint, Express, Chai, Winston, and more;
  • Security and compatibility improvements;
  • Removal of deprecated/unsupported versions.
  • ScanCode: updated from 32.1.0 to 32.3.3
  • Reuse: updated from 3.0.1 to 5.0.2
  • cdConfig.js: Introduced baseFileLocation for consistent file path handling; cd_file now has separate location and attachmentLocation properties
  • file.js: Attachments are now stored in a dedicated attachment directory if attachmentLocation is set; File naming for attachments improved (attachment:KEY → attachmentLocation/KEY.json)
  • Removed deprecated winston-azure-application-insights integration.
  • Upgraded winston and refined local logging.

Miscellaneous

  • Added env.json to .gitignore to prevent local config leakage.

Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
- Refactor _detectVersion to robustly parse version using regex and handle missing versions
- Catch and log version detection errors
- Log detected SCANCODE and aggregated handler versions on initialization

Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
- Enhance error and version logging in fsfeReuse and licensee processors
- Improve error reporting for LICENSES directory access and REUSE execution
- Add attachment path support in file store for  keys
- Minor formatting cleanup

Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
…hment paths

Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
Signed-off-by: ElaineDeMattosSilvaB <elaine.de-mattos-silva-bezerra@deutschebahn.com>
@elaine-mattos elaine-mattos marked this pull request as ready for review July 23, 2025 15:34
@elaine-mattos elaine-mattos marked this pull request as draft August 15, 2025 12:35

# REUSE
RUN pip3 install setuptools
RUN pip3 install reuse==3.0.1
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Whenever you update the PR, consider bumping this version as well. REUSE 6.x has quite interesting performance gains and also fixes potential license/copyright detection issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants