Skip to content

Releases: dfetch-org/dfetch

0.12.1

26 Feb 10:48

Choose a tag to compare

Release 0.12.1 (released 2026-02-24)

  • Fix missing unicode data in standalone binaries (#1014)

0.12.0

21 Feb 21:03

Choose a tag to compare

Release 0.12.0 (released 2026-02-21)

  • Internal refactoring: introduce superproject & subproject (#896)
  • Switch from pykwalify to StrictYAML (#922)
  • Show line number when manifest validation fails (#36)
  • Add Fuzzing (#819)
  • Don't allow NULL or control characters in manifest (#114)
  • Allow multiple patches in manifest (#897)
  • Fallback and warn if patch is not UTF-8 encoded (#941)
  • Skip patches outside manifest dir (#942)
  • Make patch path in metadata platform independent (#937)
  • Fix extra newlines in patch for new files (#945)
  • Replace colored-logs and Halo with Rich (#960)
  • Respect NO_COLOR <https://no-color.org/>_ (#960)
  • Group logging under a project name header (#953)
  • Introduce new update-patch command (#614)
  • Introduce new format-patch command (#943)
  • Drop python 3.9 support (#988)

0.11.0

04 Jan 09:02

Choose a tag to compare

Release 0.11.0 (released 2026-01-03)

  • Support python 3.14
  • Drop python 3.7, 3.8 support (#801)
  • Don't show animation when running in CI (#702)
  • Improve logic for creating Purls in SBoM (#780)
  • Add External VCS reference to SBoM if possible (#780)
  • Use CycloneDX schema version 1.6 (#542)
  • Add security policy (#784)
  • Add provenance / release attestation to pypi package (#784)
  • Support multiple licenses per project (#788)
  • Add evidence to sbom report (#788)
  • Let action work outside of dfetch repo (#816)
  • Handle SVN tags with special characters (#811)
  • Don't return non-zero exit code if tool not found during environment (#701)
  • Create standalone binaries for Linux, Mac & Windows (#705)
  • Don't make metadata file part of diff (#267)
  • Fix unneeded project prefix in SVN diffs (#888)
  • Add more tests and documentation for patching (#888)
  • Restrict src to string only in schema (#888)
  • Don't consider ignored files for determining local changes (#350)
  • Avoid waiting for user input in git & svn commands (#570)
  • Extend git ssh command to run in BatchMode (#570)
  • Use native line breaks in dfetch freeze & dfetch import (#327)

0.10.0

13 Mar 08:08

Choose a tag to compare

  • Support python 3.13
  • Fix too strict overlapping path check (#684)
  • Show complete URL of child manifests (#683)
  • Show remote name when using default remote (#445)
  • Select HEAD branch as default in git (#689)

0.9.1

31 Dec 11:21

Choose a tag to compare

  • Fix pypi publishing

0.9.0

30 Dec 21:12

Choose a tag to compare

  • Warn user if the remote does not exist (#185, #171)
  • Report unavailable project version during check (#381)
  • Don't look for update on random branch if only revision is provided in git (#393)
  • Don't report update available if revision on disk matches revision in manifest for git (#393)
  • Report the revision available in git if only revision is in git (#393)
  • Add ignore list to project entries in the manifest (#571)

0.8.0

23 Dec 13:48

Choose a tag to compare

  • Don't break if no suggestion found (#358)
  • Drop python 3.6 support (#386)
  • Fix checking project from svn branch (#383)
  • Move all configuration into single pyproject.toml (#401)
  • Also build for python 3.11, 3.12 in CI
  • Add 3.11, 3.12 classifier to pyproject
  • When importing non-std SVN external, identify src path

0.7.0

22 Jun 17:02

Choose a tag to compare

  • Warn about local changes during check (#286)
  • Add support for Gitlab-CI/Code Climate check reports (#18)
  • Improve Sarif/github messages (#292)
  • Update to CycloneDX spec 1.4 (#296)
  • Never overwrite main project folder and manifest (#302)
  • Add codespell and fix typo's (#303)
  • Add warning to metadata file, not to change it (#170)
  • Fix SBoM report (#337)
  • Suggest a correct project name if not found (#320)
  • Handle relative urls during dfetch import (#339)

0.6.0

31 Jan 22:05

Choose a tag to compare

  • Pin dependencies
  • Recommend child-projects instead of fetching (#242)
  • Show spinner when fetching (#264)
  • Don't allow path traversal for dst path
  • Check for casing issues in dst: path during update (#256)
  • Check for overlapping destinations of projects (#173)
  • Handle invalid metadata file (#280)
  • Update to CycloneDX spec 1.3 (#282)
  • Make it possible to generate jenkins and sarif json report for check (#18)

0.5.0

09 Dec 22:06

Choose a tag to compare

  • Add diff command for svn projects (#24)
  • Also add binary files as part of generated patch (#251)
  • Create diff on working copy instead of current revision (#254)
  • Deprecate dfetch list command for dfetch report command
  • Add Software Bill-of-Materials (sBoM) export to dfetch report command (#154)
  • Guess license for sbom export (#50)
  • Match more licenses (#260)