Eclipse SW360 20.1.0

This is the next minor release 20.1.0 of SW360. It includes numerous features, corrections, and improvements over the previous release 20.0.0

Highlight of the changes includes:

  • REST API & Search Enhancements: Added PATCH /ecc/{releaseId} with ECC status filtering, project detail tab-count APIs, moderation-request search support, Lucene score-based search, and search flags for empty BU/tags and attachment-author filters on projects.
  • Security, Auth & Access Control: Unified Bearer authentication, added configurable basic auth, expanded @PreAuthorize protections, introduced multi-issuer JWT support with per-issuer JWK URI overrides, and improved trusted-issuer/token handling across REST flows.
  • Exports, Reports & Obligations: Added CSV/JSON/XML project export formats, improved report download/authentication behavior, enabled all-level obligation updates, and fixed report and attachment-usage handling for sub-project data.
  • Performance & Scalability: Removed expensive query paths (including N+1 and full-scan patterns), added Cloudant connection pooling, and introduced pooled singleton Thrift client usage for improved backend efficiency.
  • Vulnerability, Component & Project Workflows: Enabled vulnerability verification flows for security admins, improved vulnerability payload controls, added nested-release linking controls, made release state editable, and fixed component/project edit and subscription edge cases.
  • Platform, Build & CI Modernization: Upgraded to Spring Boot 4.x and Spring Security 7.x baselines, migrated tests from JUnit 4 to JUnit 6, and continued broad dependency/CI/container refreshes (including Keycloak and Docker workflow updates).
  • Breaking Changes: 80e5f495d (fix(auth)!: associate user with client) and 5476065c9 (chore(script)!: revert input in migration script) introduce behavior changes that must be reviewed during upgrades.

Credits

The following GitHub users have contributed to the source code since the last release (in alphabetical order):

> amritkv <er.akverma8@gmail.com>
> Anushree Bondia <anushreebondia@gmail.com>
> Bibhuti Bhusan Dash <bibhuti230185@gmail.com>
> creocodes <creo572005@gmail.com>
> Dearsh Oberoi <oberoidearsh@gmail.com>
> Farooq Fateh Aftab <farooq-fateh.aftab@siemens.com>
> Gaurav Mishra <mishra.gaurav@siemens.com>
> rudra-superrr <prabhuchopra@gmail.com>
> Shivani Reddy <shivanireddy783@gmail.com>
> suhas-SHS <suhas.n@siemens-healthineers.com>

Please note that also many other persons usually contribute to the project with reviews, testing, documentations, conversations or presentations.

Release Date
Release Type
Major release (API breakage)