10.0.2

Update semver.txt

Signed-off-by: Patrick Dwyer <[email protected]>

10.0.1

What's Changed

• fix(spdx): adds support for reading ReferenceCategories with hyphens by @andreas-hilti in #396
• Fix deserializing ToolChoices with empty xml elements by @andreas-hilti in #397
• Fix empty lists in xml deserialization by @andreas-hilti in #395

Full Changelog: v10.0.0...v10.0.1

10.0.0

What's Changed

• Add support for SPDX v2.3 by @CarolinaOliiveira in #353

New Contributors

• @CarolinaOliiveira made their first contribution in #353

Full Changelog: v9.0.3...v10.0.0

9.0.3

What's Changed

• Improve merge performance by @andreas-hilti in #393

Full Changelog: v9.0.2...v9.0.3

9.0.2

Update semver.txt

Signed-off-by: Michael Tsfoni <[email protected]>

9.0.1

Update semver.txt

Signed-off-by: Michael Tsfoni <[email protected]>

9.0.0 (CycloneDX v1.6.1)

What's Changed

• BREAKING CHANGE: Support for CycloneDX 1.6.1 by @andreas-hilti in #370
  The library has been updated to align with the CycloneDX 1.6.1 specification. This version includes refinements over 1.6.0 and may introduce changes to BOM serialization and validation behavior. Please review the 1.6.1 spec for detailed impact.
• Fix sensitiveData handling (now correctly an array) by @andreas-hilti in #379
• Fix vulnerability.status enum mapping by @andreas-hilti in #381
• Expose SerializerOptions for JSON customization by @mtsfoni in #386

Full Changelog: v8.0.3...v9.0.0

8.0.3

Fix Protobuf test snapshot (#369)

Signed-off-by: andreas hilti <[email protected]>

8.0.2

What's Changed

• chore(deps): bump System.Text.Json from 8.0.4 to 8.0.5 in /src/CycloneDX.Core and CycloneDX.Spdx by @dependabot in #362

Full Changelog: v8.0.0...v8.0.2

8.0.0 (CycloneDX v1.6)

What's Changed

• IMPORTANT - BREAKING PROTOBUF SERIALIZATION BUGFIX: The previous version of this library contained an issue in the serialization and deserialization of timestamps with protobuf, resulting in an incorrect offset being applied to all timestamps. This has been resolved in the current release. However, deserializing a protobuf file that was serialized with the prior version of the library will now reveal the actual offset.
• BREAKING CHANGE: Support for CycloneDX 1.6 by @andreas-hilti & @mtsfoni in #288
  • The update for version 1.6 includes multiple fixes for smaller, previously unreported issues that cannot be listed individually. If you experienced problems with earlier versions, they may now be resolved.
  • The model has been updated in accordance with CycloneDX 1.6. For a detailed breakdown of the changes, please refer to the CycloneDX 1.6 standard documentation.
• Fix xml deserialization of licenses with namespace prefix by @andreas-hilti in #350
• Add net 7 and make STJ conditional by @thompson-tomo in #283
• Fix AccessMode such that it is optional by @andreas-hilti in #358

New Contributors

• @thompson-tomo made their first contribution in #283

Full Changelog: v7.1.0...v8.0.0