Releases: CycloneDX/cyclonedx-buildroot
v2.0.1
Pull in package bumps
What's Changed
- tests: fix python detection for
toxby @jkowalleck in #81 - tests: SCA with bandit by @jkowalleck in #64
- chore: dont have lockfile in VCS by @jkowalleck in #76
- chore(deps): bump cyclonedx-python-lib from 8.0.0 to 9.1.0 by @dependabot[bot] in #69
- chore(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #93
- chore: GH workflow permissions by @jkowalleck in #92
- chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #94
- chore(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in #95
Full Changelog: v2.0.0...v2.0.1
v2.0.0
BREAKING changes
- Outputs CycloneDX v1.6, was 1.4
What's Changed
- chore: restructure project, fix packaging, add python CT for entry point by @jkowalleck in #52
- docs: fix package name by @jkowalleck in #57
- ci: run tests by @jkowalleck in #58
- Handle empty cpe value by @ptdropper in #60
- chore: add dependabot by @jkowalleck in #62
- tests: SCA with mypy by @jkowalleck in #63
- build: release process by @jkowalleck in #65
- Support user provided value manufacture and manufacturer by @ptdropper in #59
- chore(deps-dev): bump tox from 4.24.1 to 4.25.0 by @dependabot in #73
- chore: remove codeQL workflow by @jkowalleck in #72
- chore(deps): bump packageurl-python from 0.14.0 to 0.16.0 by @dependabot in #70
- chore(deps): allow a wider range of dependency versions by @jkowalleck in #61
- Support CycloneDX 1.6 by @ptdropper in #74
- docs: readme - remove duplicates by @jkowalleck in #82
- version value by @ptdropper in #85
- Update pyproject.toml version 2.0.0 by @ptdropper in #86
- cleanup: prepare for release 2.0.0 by @ptdropper in #89
New Contributors
- @dependabot made their first contribution in #73
Full Changelog: v1.1.1...v2.0.0
v2.0.0-rc1
Support CycloneDX specification 1.6
breaking release to add support for this specification.
What's Changed
- chore: restructure project, fix packaging, add python CT for entry point by @jkowalleck in #52
- docs: fix package name by @jkowalleck in #57
- ci: run tests by @jkowalleck in #58
- Handle empty cpe value by @ptdropper in #60
- chore: add dependabot by @jkowalleck in #62
- tests: SCA with mypy by @jkowalleck in #63
- build: release process by @jkowalleck in #65
- Support user provided value manufacture and manufacturer by @ptdropper in #59
- chore(deps-dev): bump tox from 4.24.1 to 4.25.0 by @dependabot in #73
- chore: remove codeQL workflow by @jkowalleck in #72
- chore(deps): bump packageurl-python from 0.14.0 to 0.16.0 by @dependabot in #70
- chore(deps): allow a wider range of dependency versions by @jkowalleck in #61
- Support CycloneDX 1.6 by @ptdropper in #74
- docs: readme - remove duplicates by @jkowalleck in #82
New Contributors
- @dependabot made their first contribution in #73
Full Changelog: v1.1.1...v2.0.0-rc1
v1.2.0b1
bild: upload to default registry Signed-off-by: Jan Kowalleck <[email protected]>
Synchronize with pypi
Synchronize the version with pypi distribution site
What's Changed
- Removed support for Manufacturer name due to a known issue. by @ptdropper in #50
Full Changelog: v1.1.0...v1.1.1
v1.1.0
What's Changed
- Document pypi instructions by @ptdropper in #44
- Support emtpy CPE value by @ptdropper in #48
- Licenses object correction by @ptdropper in #49
Use cyclonedx-python-lib version 8.0.0 which declares breaking changes. Used the library to create Licenses in a new way.
Full Changelog: v1.0.12...v1.1.0
Parse licenses that contain lists of individual licenses
Add support for software component Licenses that contain a list of comma separated license names.
Corrected installation dependencies
Hard coded the pypi and poetry installation configuration to the operational dependencies.
What's Changed
- Fixed value of known working cyclonedx-python-lib. by @ptdropper in #39
Full Changelog: v1.0.8...1.0.11
v1.0.8
What's Changed
- Process flow description by @ptdropper in #19
- 21 purl links seems wrong missing slash between site and filename by @ptdropper in #24
- 25 improper encapsulation of the license object by @ptdropper in #27
- 20 remove the unnecessary file xonexml by @ptdropper in #29
- 30 define appropriate dependencies for python distribution package by @ptdropper in #31
- 32-pypi-packaging-and-distribution by @ptdropper in #33
- 32-pypi-packaging-and-distribution by @ptdropper in #34
Full Changelog: v1.0.4...v1.0.8
URL corrections
Buildroot project members found the URL's in the output SBOM had a typo.
README.md had a separate URL typo.
What's Changed
- Process flow description by @ptdropper in #19
- 21 purl links seems wrong missing slash between site and filename by @ptdropper in #24
Full Changelog: v1.0.4...v1.0.6