v2.121.0
📦 jfrog-cliView on GitHub →
✨ 20 features🐛 10 fixes🔧 8 symbols
Summary
This release introduces new features for build-info collection, enhanced CLI commands for login and RubyGems support, and various bug fixes across multiple jfrog repositories. Key updates include native RubyGems support, improved token refresh mechanisms, and fixes for dependency resolution and documentation links.
✨ New Features
- Added RubyGems FlexPack for native build-info collection in build-info-go.
- Exposed disable-token-refresh flag on jf login in jfrog-cli.
- Added --legacy flag to jf login and jf c add in jfrog-cli.
- Parsed first User-Agent product segment for product_id and version in jfrog-cli.
- Added --project build-info e2e for agent plugins and skills in jfrog-cli.
- Added jf ruby command for native RubyGems/Bundler support in jfrog-cli.
- Added vscode harness to agent plugins e2e in jfrog-cli.
- Implemented project flag in build info for jfrog-cli-artifactory.
- Added native RubyGems/Bundler command with auth and build-info for jfrog-cli-artifactory.
- Added Agent plugin install VS Code support for jfrog-cli-artifactory.
- Added disableTokenRefresh support to LoginCommand in jfrog-cli-core.
- Added legacy flag to preserve per-service URL config for Artifactory v6.x in jfrog-cli-core.
- Added risky tech callback guard after techs detection in jfrog-cli-security.
- Added proportional refresh threshold for platform access tokens in jfrog-client-go.
- Added user auth tokens for curated AI editor extensions in jfrog-cli.
- Added user auth tokens for curated AI editor extensions in jfrog-cli-artifactory.
- Used proportional refresh threshold for platform access tokens in jfrog-cli-core.
- Added native support for pip, pipenv and poetry (curation-audit) in jfrog-cli-security.
- Applied SAST exclude rules configured by users in jfrog-cli-security.
- Stopped reporting pre-existing SAST findings on every pull request in jfrog-cli-security.
🐛 Bug Fixes
- Fixed npm peer dependency issue in build-info-go.
- Fixed jf api rejecting flags placed after the endpoint path in jfrog-cli.
- Fixed documentation links in jfrog-cli.
- Fixed npm peer dependency issue in jfrog-cli.
- Fixed install & update's --version related issue in jfrog-cli-artifactory.
- Fixed documentation links in jfrog-cli-core.
- Implemented CVS fallback for yarn and pnpm in jfrog-cli-security.
- Ensured sbom-enrich continues running when a vulnerability has no CVE in jfrog-cli-security.
- Ensured each package manager resolves against its own Artifactory repo in jfrog-cli-security.
- Fixed insecure tls flag traversal for maven projects in jfrog-cli-security.