• install scripts: Surface curl errors and display http status code correctly. (#1456)
• Update jar-callgraph version to 1.0.2 #1454

What's Changed

• Partial distroless container support by @csasarak in #1448
• Remove old feature warnings by @csasarak in #1446

Full Changelog: v3.9.27...v3.9.28

What's Changed

• Switch to new tar library, this should make operations that unpack tar archives work more reliably. by @csasarak in #1452

Full Changelog: v3.9.26...v3.9.27

• Reports: Add includeCopyrightList to JSON attribution report request. This will ensure that all copyrights are included in the JSON attribution report once the FOSSA API starts including them. All other formats of attribution reports will receive all copyrights without needing to add this query param. #1450
• Resolves an issue where git projects cloned with an url including a username were unable to be found when running fossa test. #1451

• Update jar-callgraph version #1447

• Container Scanning: Attempt to find JAR files in container images and report them as dependencies (#1442, #1444).
  • To enable on-premise, FOSSA must be updated to the latest configuration.

• Reachability: For organizations that don't have reachability turned on suppress messages about it. (#1440)

• Fixes release group flags for fossa analyze and fossa container analyze (#1439)

• Add support for analyzing SBOM files (#1435)
• License Scanning: Add the Llama-3-community license (No PR)
• Yarn: Don't fail analysis if a dependency cannot be found. (#1436)

• Fixes file matches for license scans (#1434).