Next major (v3)

[G-Rath]

This is a list of things we're considering doing for the next major, though not everything listed will necessarily be done in this major:

• Remove deprecated flags
  • --sbom (feat: remove deprecated sbom flag #2452)
  • --output
  • --gh-annotations
• Decide what experimental flags / actions to promote
  • plugins (--plugins, --disable-plugins, --no-default-plugins
  • http client
  • deprecated packages (--flag-deprecated-packages)
  • config updating (pending feat: add experimental support for updating config files #2534)
• Remove interactive mode
• Remove deprecated GH workflows
  • osv-scanner-reusable-pr.yml
  • osv-scanner-reusable.yml
• Review names of public types and functions
  • Rename models.VulnerabilityFlattened
  • Rename models.PackageVulns
• Use or remove ErrAPIFailed
• Add context to osvscanner.makeVulnRequestWithMatcher (and maybe osvscanner.Scan?)
• Move ScanResults.ScanParameters field
• Change JSON output
• Disable unsafe plugins by default (Add a flag to allow plugins that could bring security risk #2633)