dependency-check / dependency-check-gradle

The dependency-check gradle plugin is a Software Composition Analysis (SCA) tool that allows projects to monitor dependent libraries for known, published vulnerabilities.

Home Page:http://jeremylong.github.io/DependencyCheck/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

GitHub releases out of date

ianbrandt opened this issue · comments

It appears the current latest published version of this plugin is 8.2.1, but the latest release tagged in GitHub is 8.1.2. The Current Release badge in the README.md shows 8.2.1, but the Usage section shows 8.1.2. Due to the similarities on the numbers, I initially thought one or the other might be a typo.

It would be nice if the GitHub release tags were kept in sync with the published versions. It would also help those watching this repo for releases.

This is also out of date with the actual dependency check version which is now at 8.3.1. https://github.com/jeremylong/DependencyCheck/releases/tag/v8.3.1

Somehow I missed tagging the last release - sorry about that. 8.3.1 is pending a resolution to #339.

8.3.1 should be released shortly - #345

It looks like 8.3.1 has been published, and tagged, but the latest GitHub release is still 8.1.2. I think a release still needs to be created for the 8.3.1 tag.