v4.0.0

Updated dependency-check-core to v7.0.0. See release notes of DependencyCheck of v7.0.0 for details

Breaking changes

• The H2 database version has been upgraded to a new major version. If you use the dependencyCheckDataDirectory setting you will need to run dependencyCheckPurge after upgrading.
• Upgraded to dotnet core 6.0. If analyzing dotnet assemblies the system will need to have the dotnet core 6.0.x runtime available.

Noteworthy changes

• The Sarif report format has been fixed and can now be imported into GitHub if desired.
• When analyzing Scala projects ODC now includes data from the developers section.
  • This will likely cause false positives on things like Apache James, please report the FP upstream at https://github.com/jeremylong/DependencyCheck and they will fix these quickly.