|
CAST Highlight upgrade notes
CAST Highlight 5.5.6
Release Date: November 25th 2023
|
| * Benchmark - Fix on benchmark export where Green metrics were missing on APP (Google) * Code Insights - Export of Top 20 Insights was failing for some large portfolios because of the component vs. app approach (cell limit reached due to long app names) (#44507) * Analyzers - Minor improvements on Ruby analyzers |
|
CAST Highlight upgrade notes
CAST Highlight 5.5.4
Release Date: November 11th 2023
|
| * SCA - Filter portfolio-level CVEs on some filters including KEV information * SCA - Improved reliability of CycloneDX import (error traceability) * Cloud Maturity - Beta tag has been removed from Oracle Cloud recommendations * CLI - Update of CLI's README file * Analyzers - Minor improvement for Ruby analyzer on Nbr_ShortMethodNamesLT (HL2MRI-47) |
|
CAST Highlight upgrade notes
CAST Highlight 5.5.3
Release Date: November 11th 2023
|
| SCA - Generate a configurable Word document with license rulebook for all licenses from a license risk profile SCA - List excluded CVEs in a dedicated tab of the SBOM export Cloud Maturity - Fix on metric values in Cloud Advisor export at the application level (#44033) |
|
CAST Highlight upgrade notes
CAST Highlight 5.5.2
Release Date: November 4th 2023
|
| * TRENDS - Screen rework to address performance of large portfolios * Technical Debt - Fix on Manage Technical Debt Effort screen where priority changes were not reflected in the UI (#44062) * Analyzers - Fix on empty JSON files which were causing analysis issues (#44059) * Analyzers - Fix on JSON files with malformed encoding which were causing analysis issues * Analyzers - C/C++ robustness improvements |
|
CAST Highlight upgrade notes
CAST Highlight 5.5.1
Release Date: October 28th 2023
|
| * Ruby support for Software Health * SCA - CVE false positive removals * "Local Agent" is now named "Code Reader" * Survey campaign incorrectly marked fail (#43909) |
|
CAST Highlight upgrade notes
CAST Highlight 5.5.0
Release Date: October 21st 2023
|
| * Cloud Maturity is replacing CloudReady in the UI * Cloud Maturity - Added a tooltip to explain the CFA (Code, Framework, Architecture) acronyms in results (HLFR-410) * SCA - Added a hint for CVE detection on webpack.js vs. webpack (#43839) * SCA - Business Impact score was missing for some applications in Software Composition > Vulnerabilities view (#43766) * Surveys - Add a new question type that support URLs whose answers will be clickable (e.g., SharePoint page for an application) (HLFR-387) * Added clientRef field on domains and tags for easier API third-party integration |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.107
Release Date: October 14th 2023
|
| * API - New endpoint to create license risk profiles (POST WS2/domains/{domainId}/licenses) (#42611) * Green Impact - Fix - Filters were not working on the Green Impact tab at the portfolio level (#43685, #43777) |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.106
Release Date: October 7th 2023
|
| * CloudReady - Added 27 Cloud blockers for PLS/SQL * Custom Segmentation - Updated labels to clarify the workflow * SCA - Extended support of CycloneDX import (when no <dependencies> part are defined) (#43600, #43589) * Analyzers - TypeScript - Fixed false positives for missing semicolon (Software Health) (#43614) * Analyzers - C++ - Addes method specifiers "override" and "final" (#43586) * Analyzers - JavaScript - In JSX files, short tags with one letter were leading to parse errors (#43589) |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.105
Release Date: September 30th 2023
|
| * Continuous Achievement Tracker - Added Green Impact metrics * SCA - Sort applications and components by CVE criticality instead of total vulnerability count * SCA - Changed license risk label from "Partially Compliant" to "Under Conditions" * Application Results - Added Green Impact metrics, removed Software Resiliency, Agility and Elegance * Benchmark - Fixed some display issues where applications with no scores were visible in the benchmark chart (#43345) * Analyzers (SQL) - Support syntax "create or alter" when declaring procedure (#43347) * Analyzers (Kotlin) - Fix - Do not count violation for an empty routine inside an interface |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.104
Release Date: September 23rd 2023
|
| * Portfolio Management - User view now indicates last login dates and user types (Credential vs. SAML) * Portfolio Management - Portfolio Managers can now invite users as SAML users * Portfolio Management - Portfolio Managers can now decide to restrict user invites to SAML users only * Analyzers - C# - "new" syntax not entirely supported which was causing never ending analyses (#43388) * PPT exports - Changed labels to align with the UI (Code Insights, Improvement Candidates, Contribution) * SCA - Mixing survey/scan campaigns was causing OSS score calculation issues in some cases (#43413) |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.103
Release Date: September 16th 2023
|
|
* Custom Segmentation - Expose technologies as possible criteria of the segmentation
* SCA - Changed the Excel library to manage large documents exports * SCA - Fixed an issue in the SCA Components view on applications, which was not applying filters (#43365)
* CloudReady - For new instances, relabeled two survey questions to make them self-explanatory * CloudReady - For new instances, changed survey questions order (e.g., current state question now comes first) |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.102
Release Date: September 9th 2023
|
|
* Cloud - CloudReady Matrix bubble chart with quadrants (quick-win, core cloud...) and segment information now available from the Portfolio Advisor for Cloud
* PPT report - Fixed overlapping values in the PPT report (#42952) * SCA - Incorrect sign for 100% diff on snapshot compare (app level & component) (#43233) * CLI - Add information in CLI logs to indicate number of files discovered for each technology * CLI/Docker - --analyzerDir option was unavailable given other options on the command line (#43135) |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.100
Release Date: September 4th 2023
|
|
* Green - Added a Green Deficiency pattern to the T-SQL technology (#43137)
* Home - Quick Portfolio Insights now take overridden segmentations into account * SCA - CVE exclusions were temporarily unavailable after adding KEV insights |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.99
Release Date: September 2nd 2023
|
|
* SCA - Enlight CVEs with KEV (Known Exploited Vulnerabilities) information
* SAML/SSO - SAML configuration page for end users * Code Insights - Changed filters to exclude high quality files from the view if they are below 100 LOC (#43165) * Application Detail - Reduce font-size of tabs at application level to not break tabs * User Management - Search for Contributors was not working on Application Edit (#42964) * Home - Quick Portfolio Insights - not showing any apps (#43107) * Analyzers - Manage empty JSON files (#42821) |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.98
Release Date: August 26th 2023
|
|
* CloudReady - Make the Cloud segmentation information available at the application level
* SCA - Allow any user to search for a license within the current license risk profile and display its rulebook * Surveys - Some types of survey questions were not cloneable (#42978) |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.97
Release Date: August 19th 2023
|
|
* CloudReady - Application CloudReady Advisor now filters "Migrate to..." based on Cloud platforms activated for the instance (#42896)
* User Management - Bug fix for editing a user with a Blind Contributor role (#42924) |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.96
Release Date: August 12th 2023
|
| * SCA - Display publish and last modified dates of CVEs * SCA - Component Catalog now searches for components even if not local to the server * SCA - Improvement of the CVEDB search/mapping (project's name is now split by vendor/project) * CLI/Docker - Connection issues catch * CLI/Docker - Temporary files are now removed after the scan |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.95
Release Date: August 5th 2023
|
| * User persona is now captured when a user account is activated (will be used later for role-based dashboards and features) * CloudReady Matrix - The bubble chart was not displaying boundaries (e.g., apps having 0 or 100 for Business Impact) - #42744 |
|
CAST Highlight - SCA Chrome extension 0.0.18
|
|
We just released a new version of our Chrome extension for SCA. It adds the component lifespan information when available, along with some improvements on existing features. It is available from the Chrome web store: https://chrome.google.com/webstore/detail/cast-highlight-sca-chrome/aebkkkbnbopphpfcamakblaghijojich/related?hl=fr&authuser=0
|
|
CAST Highlight upgrade notes (July 29th 2023)
CAST Highlight 5.4.93
Release Date: July 29th 2023
|
| * Analyzers - .inc should not be associated to JCL analyzer (#42642) * CloudReady - Fixed issue that was preventing the display of blocker status (new/fixed) and roadblock variation between the two latest scans |
|
CAST Highlight upgrade notes (July 22nd 2023)
CAST Highlight 5.4.92
Release Date: July 22nd 2023
|
| * SCA - Better detection of inherited versions of Maven dependencies (#42315) * Home - Removed duplicate applications in Quick Portfolio Insights (Cloud / Refactor) (#42462) * API/Tokens - Allow only GET and POST on /authorize service * Analyzers - $@ is always defined (empty string or message). So remove "defined" when testing it. (#42540) * CLI - Reduced overall size of the JAR |
| CAST Highlight upgrade notes (July 15th 2023)
CAST Highlight 5.4.91
Release Date: July 15th 2023
|
| * Commit Azure service recommendation JSON file (Azure App Service when an application has some JavaScript) * Analyzers - Fix KSH technology detection [HL2MRI-36] * Analyzers - Fixed some parsing errors in JavaScript analyzer [HL2MRI-36] * Analyzers - Fixed errors for strings in MFC files + improve HTML detection in JS files [HL2MRI-36] * CLI - Rolled back JAR's size decrease as it was preventing HLAutomation.log to be produced |
|
CAST Highlight upgrade notes (July 8th 2023)
CAST Highlight 5.4.89
Release Date: July 8th 2023
|
| * CloudReady - Added Oracle Cloud Infrastructure (OCI) service recommendations * CLI - Significantly reduced the JAR size (from 37MB to 16MB) * CLI - Fix (integrated retry) to reduce the risk of failing result uploads * API/SAML - Last login date is now returned for previously enrolled SAML users |
|
CAST Highlight upgrade notes (July 4th 2023)
CAST Highlight 5.4.88
Release Date: July 4th 2023
|
| * User Login: Fixed an issue which was preventing users having multiple subdomain accesses to authenticate |
|
CAST Highlight upgrade notes (July 1st 2023)
CAST Highlight 5.4.87
Release Date: July 1st 2023
|
|
* PPT - Green Insights have been added to the portfolio-level PPT export
* PPT - Portfolio Advisors (Cloud, Open Source, Software Maintenance segmentations) have been added to the portfolio-level PPT export * User Login - SSO/SAML users can now use the main login screen to authenticate * API - Last login date is now returned for SAML users (WS2/domains/{domainId}/users) (#42305) * CLI - Prevent CSV upload when there was no analysis * CLI - Some uploads were failing due to a bad CSV sequence order * SCA - Proprietary Component tab is now removed from the Excel BOM when no proprietary components are found * Continuous Improvement Tracking - Fix mismatch on displayed metric values in trends (#42266) |
|
CAST Highlight upgrade notes (June 24th 2023)
CAST Highlight 5.4.86
Release Date: June 24th 2023
|
|
* Green - Application-level Green Insights export
* CloudReady - Added Criticality and Impact columns in the application-level Excel export
* CloudReady - Updated AWS Recommendation JSON file (refined recommendation on RDS for PL/SQL based on SCA components)
* SCA - Exclude dependencies from <dependencyManagement> but keep the version definition (#42076)
* SCA and Snapshot comparison - Sort snapshots on date descending
* Software Health - Fix on score filtering based on SCA results (#42171)
|
| CAST Highlight upgrade notes (June 17th 2023)
CAST Highlight 5.4.85
Release Date: June 17th 2023
|
| * CloudReady - Improved Azure (all services are now exposed) & AWS (RDS for Oracle on PL/SQL apps) Cloud service recommendation JSON * SCA - Word BOM improvement (added the license category - permissive, strong copyleft, etc. to different places of the report) * UI - Documentation links added to recently added features (Portfolio Advisor for Software Maintenance and Green, Application CloudReady Advisor, etc.) * CLI/Docker - Bug fix on Linux (#41790) |
|
CAST Highlight upgrade notes (June 10th 2023)
CAST Highlight 5.4.84
Release Date: June 10th 2023
|
| * Dart support for detection, sizing metrics and SCA (fingerprints only) * SCA - Lifecycle status for components (Active, Immature, Deprecated) is now calculated * CloudReady - Added a question on current state of the application (on-prem, cloud native, hybrid) to impact scores and segmentation * Revisited Home Quick Portfolio Insights (aligned with Portfolio Advisors) * Custom Dashboards - Quick Portfolio Insights now available as a widget of the Custom Dashboards * SCA - Fixed CVE count in application table is inconsistent at portfolio level (#41937) * SCA - Some dependencies were not displayed through the UI when clicking on the magnifying glass icon (#41864) * Application Results - Indicate the app history limit when exporting (#41479) |
|
CAST Highlight upgrade notes (June 3rd 2023)
CAST Highlight 5.4.83
Release Date: June 3rd 2023
|
| * Custom Dashboards - Add milestones (Continuous Improvement Tracker feature) as a possible widget of a custom dashboard * CLI - Docker Image Scanning feature doesn't require to expose daemon on tcp://localhost:2375 without TLS anymore * ASP.Net new model and analyzer bug fixes - This could lead to score differences between two scans |
| CAST Highlight upgrade notes (May 27th 2023)
CAST Highlight 5.4.82
Release Date: May 27th 2023
|
| * SCA - Word BOM now includes a license rulebook overview based on detected licenses (HLFR-276) * CloudReady - Support of Ruby (25+ patterns) - https://doc.casthighlight.com/cloudreadypatterns/ * CloudReady - Azure Spring Apps and Azure Container Apps are now part of the automated Cloud service recommendations for Azure * CLI - Improvement of the CLI and portal for supporting parallel scans (HLFR-294) * SCA - Proprietary Component Governance - Fixed application count for a given component when used in multiple versions (#41688) |
|
CAST Highlight upgrade notes (May 20th 2023)
CAST Highlight 5.4.81
Release Date: May 20th 2023
|
| * CloudReady - Cloud service recommendations can now be manually added to an application result * CloudReady - Improved Cloud Services recommendations for Azure (Azure Spring Apps, Azure SQL for PostreSQL) * XML Export - Fixed Software Health metric (#41666) * SCA - C# - Detected component version should be overriden by HintPath version if present (#39938) * SCA - Fixed issue on component exclusion if it was linked to an archived application (#41573) * SCA - BOM importing - Fixed CycloneDX importing feature when import is done from a subdomain Portfolio Manager |
|
CAST Highlight upgrade notes (May 13th 2023)
CAST Highlight 5.4.80
Release Date: May 13th 2023
|
|
* SCA - Improvement of the BOM Importing feature (in case of dual-licensed component, retain the one from the CycloneDX BOM) * Bug Fix - CSV result export was including all snapshots of applications (#41479) |
|
CAST Highlight upgrade notes (May 6th 2023)
CAST Highlight 5.4.79
Release Date: May 6th 2023
|
| * Define a custom dashboard as the user's homepage * SCA - Support of Swift's package.swift and package.resolved for dependency extraction (HLFR-297) * JavaScript - Support of recent syntaxes to improve accuracy of some Code Insights * JavaScript - Improved code insight on missing semi-colons (#41055) * SCA - Python fix for supporting trailing comments in requirements.txt * SCA - Label update of the BOM Importing feature * Cloud Service Recommendations - Fix on survey answer not displayed when it triggers a recommendation |
|
CAST Highlight upgrade notes
CAST Highlight 5.4.78
Release Date: April 29th 2023
|
|
* CLI and portal modifications to better support simultaneous scan uploads from the same user (#39292) * Bubble charts - Display application names by default (HLFR-286) * Cloud Service recommendations - Now support survey answers by using clientRef attributes * Minor label fixes in the Continuous Improvement Tracker feature |
|
CAST Highlight upgrade notes (all platforms)
CAST Highlight 5.4.77
Release Date: April 25th 2023
|
| * Bug fix of a UI component which was preventing Code Insights and Custom Indicators to display properly (#41366) |
|
CAST Highlight upgrade notes (all platforms)
CAST Highlight 5.4.75
Release Date: April 22nd 2023
|
|
* SCA - SBOM importing capability (beta) - Requires the feature to be turned on by CAST
* ASP.Net technology support for Software Health (C# and VB.Net code insights calculated when applicable)
* CLI - The command line is now able to scan local and distant Docker images * Custom Dashboards - Improvement of business rules related to Custom Dashboards visibility and company sharing based on user role and domains - #41226
* SAML - Bug fix which was preventing a SAML user to activate the user account when SMTP server was not configured (on-prem) - #41211
* Discussion Threads - Bug fix - Email notifications were not sent for notified people
|
|
Visual Studio Code extension for CloudReady (1.0.4)
March 17 2023
|
|
We just released v1.0.4 of the Visual Studio Code extension for 2601_cloud CloudReady. It adds support for Go applications.
----
----
CAST Highlight CloudReady Extension for Visual Studio Code - Visual Studio Marketplace
Extension for Visual Studio Code - CAST Highlight CloudReady Extension for Visual Studio Code
marketplace.visualstudio.com
|
|
CAST Highlight 5.4.73
Release Date: April 15th 2023
|
|
* Continuous Improvement Tracker (feature focus: https://doc.casthighlight.com/feature-focus-continuous-improvement-tracker/)
* Go technology support for CloudReady
* Portfolio Advisor for Software Maintenance: Result export is now available
* Portfolio Management - Legacy screen has been decommissioned (feature focus: https://doc.casthighlight.com/feature-focus-portfolio-management-optimization/)
|
|
Backend:
* SCA - filter results by ignoring "filename" rows from frameworks.validated.csv (component detection based on file names e.g., jquery-1.2.3.min.js)
* CLI - Removed some constraints which were blocking result upload when the CLI version was in older version than the portal (HL-2350)
|
| CAST Highlight 5.4.68 Release Date: March 18th 2023 |
| * Green Software Insights - Added Green Impact scores in the benchmark feature * CloudReady - Cloud details are now available for COBOL (blocker occurrence positions) * Custom Segmentation - Software Maintenance metrics (recorded/recommended) can now be used in custom segmentations |
|
Visual Studio Code extension for Green Impact (1.0.2)
March 11th 2023
|
|
We just released v.1.0.2 of the Visual Studio Code extension for fallingleaf Green Impact. This extension uses the same user authentication than the CloudReady extension for Visual Studio Code, so no need to register again if you already have a user account.
----
Extension Download: https://marketplace.visualstudio.com/items?itemName=casthighlight.cast-highlight-green-vscode
User Registration: https://doc.casthighlight.com/vscodegreen/
|
|
CAST Highlight 5.4.67 Release Date: March 11th 2023 |
|
* SCA - Support of lockFiles v3 for dependency extraction (#40669, #40446, #40005) * SCA - Improvement of Gradle/Kotlin support (some build.gradle.kts syntax were not supported for dependency extraction) (#40428) * SCA - Fixed X-axis on Components > Distinct Versions chart which was not numerically sorted (#39924) * SCA - Removal of CVE false positives (apache solr, commons-net, swagger) (#40563) * SCA/API - Gitlab CVEs were not returned by the API (#40567, #40645) * CloudReady - Bug fix on display of specific containerization blockers (#40574, #40271) * Remove % symbol in Green Impact scores for Snapshot Comparison view * Custom Dashboards - Fix on datatable for Custom Dashboards (#40614) |
|
Backend: * API - Message is returned when trying to create an app above the app limit, when the option is turned on at the company level. (#34055) |
|
CAST Highlight 5.4.66 Release Date: March 4th 2023 |
|
* SCA - Path to dependency files where a component has been detected is now available (for new scans with 5.4.66 or above) (#34847) * SCA - Raw name of popular components is now extracted for better SCA component matching |
|
CAST Highlight 5.4.65 Release Date: February 25th 202 |
|
* Portfolio Advisors - Indicate in the UI when a segment has been manually changed for an application * Platform - Display and enforce max application limit for a given portfolio * SCA - Fix detection of not completed component sync with SCA (#40365) * CloudReady - Fixed documentation URLs for some Google Cloud boosters |
|
CAST Highlight 5.4.64 Release Date: February 18th 2023 |
|
* Portfolio Advisor for Cloud - Revised configuration for Refactor and Rearchitect segments * SCA - Proprietary Components - Added a link to the product article * Command Line - Bug fix on some CSV headers which were not utf8-encoded |
|
Backend: * Green Software - Added PHP and Python Green Effort profiles * Benchmark - Added Open Source Safety metrics in benchmark json export * Migration script for on-prem: Update Metric in database before adding Green Survey & segmentation conf * - Update labels and add link to component proprietary doc - remove old "type" column on application's components EXCEL export - add component proprietary type to BOM export * [CloudReady] Fix bug of editing APPLI SECTION in cloudready csv + add & improve bin/code/Mix views after parsing XML files |
|
CAST Highlight 5.4.63 Release Date: February 11th 2023 |
|
* Green Software - PHP and Python technologies added to support for Green Software insights * SCA - Enhanced features on dependencies at both portfolio and application level * SCA - CycloneDX BOM export is now 1.4 version * SCA - Improved support of build.gradle for specific syntaxes (#39950) * Platform - Allow SCA or Cloud results to be processed without Health results * Trends - Added Component Security to TRENDS dashboard at the portfolio level |
|
CAST Highlight 5.4.62 Release Date: February 4th 2023 |
|
* CLI and Local Agent now run on Perl 5.32.1.1 distribution * Improved performance of JavaScript analyzer for processing "node_modules" dependency filtering * Snapshot Comparison - CVEs now displays 0 instead of N/A (#39952) * Updated Green Impact segmentation configuration (formula adjustment of the Rising Stars segment) * Green Impact - Removed duplicate application data table at the portfolio level |
|
Backend: * Upgraded Docker CLI image to a safer image |
|
CAST Highlight 5.4.61 Release Date: January 28th 2023 |
|
* SCA - Improved component comparison view with CVE detailed information * TypeScript/JavaScript - Support of .tsx and .jsx with HTML (ignored) tags (#39755) * Technical Debt estimate - Revised effort per occurrence for Avoid using "this" for JavaScript and TypeScript (from 15 to 2 minutes) Support Ticket : Issue fixed in bulk import/export excel (#39881) |
|
CAST Highlight 5.4.59 Release Date: January 21st 2023 |
|
* SCA Component Compare at application level - Compare SCA component differences between two application snapshots * VB/VB.Net - Optimization of the analyzer on specific syntaxes for better performance (#39793) * CloudReady - Detailed logs for Visual Studio Code CloudReady extension now include boosters * JavaScript/TypeScript - Improvement of "Avoid this" pattern * Benchmark scores are displayed according to the version of the analyzer model (#39832) |
|
CAST Highlight 5.4.58 Release Date: January 14th 2023 |
|
* Code Insights - Bug fix of preventing code insights to be displayed when the technology score is 0 (#39468) * VB/VB.Net - Bug fix on a specific syntax that was making the analyzer loop (#39710) * Minor changes on Green Impact + label update * Portfolio Management - Fixed issues on user create / delete reinvite * Administrator is now a user role which allows to have multiple administrators with same privileges |
|
CAST Highlight 5.4.57 Release Date: January 11th 2023 |
|
* Discussion Thread - Green Impact added to the list of possible discussion threads * Snapshot Comparison - Bug fix due to Green Impact feature * CLI/Docker - Fixed result CSV headers which was preventing uploads in some cases (#39640) |
|
CAST Highlight 5.4.56 Release Date: January 7th 2023 |
|
* Analyzers - 21 new patterns for estimating the Green Impact of an application * Green Impact - New indicator available when the feature is active for a given company portfolio * Portfolio Advisor for Green - Dedicated configuration for segmenting an application portfolio based on Green Impact insights * Custom Dashboards - Addition of Green Impact insights to some Custom Dashboard elements (tiles, result table, bubble chart) * API - Addition of Green Impact insights to application results (WS2/domains/{domainId}/applications/{applicationId} * Green Impact - Documentation of the Green Deficiencies (i.e. patterns) https://doc.casthighlight.com/greenpatterns |
|
Back-End: * Green Result CSV files are ignored once uploaded if the company hasn't the Green feature option |
Comments