Release Notes for Azure DevOps Plugin

Black Duck Detect

Version
latest

Version 12.0.0

New features

  • Updated the plugin to use Black Duck® Detect 12.

Resolved issues

  • (DETECTADO-113) Updates to adm-zip, azure-pipelines-task-lib, mocha, types/mocha, brace-expansion, and node.js, third party libraries to resolve vulnerabilities.

Version 11.0.0

New features

  • Updated the plugin to use Black Duck® Detect 11.

Version 10.1.0

New features

  • (DETECTADO-102) Added support for Node.js versions Node16 and Node20_1. Node10 end-of-life warning will no longer be displayed.

Resolved issues

  • (DETECTADO-103) Updated dependencies to resolve their associated security vulnerabilities.

Version 10.0.0

Notice

The Synopsys Software Integrity Group is now Black Duck Software, Inc.

  • As part of this activity, sig-repo.synopsys.com and detect.synopsys.com are being deprecated and will be decomissioned on March 31st, 2025. Please make use of repo.blackduck.com and detect.blackduck.com respectively.

  • Refer to the Black Duck Domain Change FAQ.
    Note: It is recommended that customers add both repo.blackduck.com, and detect.blackduck.com, to their allow list, while also maintaining sig-repo.synopsys.com, and detect.synopsys.com, until March 31st, 2025 when sig-repo.synopsys.com, and detect.synopsys.com, will be fully replaced by repo.blackduck.com and detect.blackduck.com respectively.
  • Synopsys Detect Azure DevOps plugin is now the Black Duck® Detect Azure DevOps plugin.

Migrating from Synopsys Detect plugin to Black Duck® Detect plugin

  • Before moving to the Black Duck® Detect plugin, you must manually uninstall the Synopsys Detect plugin.

    • Installing the Black Duck® Detect plugin will ensure you receive future plugin updates.

  • After uninstalling a previous Synopsys Detect plugin or if you are a new user, you may proceed with installing the Black Duck® Detect plugin available at the following Marketplace location.

New features

  • Plugin updated to support Black Duck® Detect 10.

Version 9.0.1

Notice

For Detect script downloads, detect.synopsys.com is being deprecated in favor of detect.blackduck.com. After March 31st, 2025, only detect.blackduck.com will be available.

Attention: To continuing using the deprecated Synopsys Detect plugin, it is essential to update to version 9.0.1, available at the Previous Marketplace location, before March 31st, 2025.

Changed features

  • Adds logic to fallback between pulling the Detect script from detect.synopys.com and detect.blackduck.com.

Note: It is recommended that customers add both repo.blackduck.com, and detect.blackduck.com, to their allow list, while also maintaining sig-repo.synopsys.com, and detect.synopsys.com, until March 31st, 2025 when sig-repo.synopsys.com, and detect.synopsys.com, will be fully replaced by repo.blackduck.com and detect.blackduck.com respectively.

Version 9.0.0

New features

  • Updated the plugin to use Synopsys Detect 9.

Resolved issues

  • (DETECTADO-92) Pipeline will now fail as expected when invalid proxy details are provided for Linux and Mac Agents.

Version 8.1.0

New features

Version 8.0.0

New features

  • Updated the plugin to use Synopsys Detect 8.

Version 7.0.0

New features

  • Updated the plugin to use Synopsys Detect 7.

  • Added the ability to run Synopsys Detect in air gap mode.

Version 6.0.0

Resolved issues

  • (DETECTADO-68) Improved error messaging when invalid proxy details are used.

  • (DETECTADO-70) Resolved issue wherein passing properties on new lines would cause Detect ADO to fail.

  • (DETECTADO-71) Resolved issue with TLS errors being thrown on Windows hosted agents.

Changed features

  • The plugin versioning was changed to match the major version of Synopsys Detect that it is designed to work with, for example Detect ADO 6.0.0 works with Synopsys Detect major version 6.

Version 3.0.0

New features

  • Added the capability for the script to use the tool directory in the ADO agent to store the Synopsys Detect JAR. It will continue to use this JAR as long as the JAR version matches the version specified in the task configuration.

  • Added support for using Linux and Mac agents.

Changed features

  • Removed support for Polaris.

Version 2.0.0

New features

  • Added support for Polaris.

Changed features

  • Product renamed to Synopsys Detect for Azure DevOps.

Version 1.1.0

Changed features

  • The service endpoint configuration is now optional.

  • Added support for using an API token for user authentication.

Version 1.0.4

Changed features

  • Improved proxy support and handling of supplied proxy arguments.

Resolved issues

  • Resolved an issue that could result in an Access denied error.

Version 1.0.3

Resolved issues

  • Resolved an issue involving the SSL issue casting protocol.

Version 1.0.0

  • First release of product