[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=trunk 2022-09-18T11:53:56Z 2022-09-18T11:53:56Z wiz wiz@pkgsrc.org 2022-09-18T11:53:56Z urn:sha1:90252e5514ac1132abdf9d8353608f1227800eb2 v3.1.0 Feature Out-factor SPDX compound detection (fd4d537, 2b69925) License factories (033bad2) Note: There was no 3.0.0 release officially, but due to CI publishing issues, an unexpected 3.0.0 release was publiched to PyPi and subsequently yanked from PyPi. There are NO breaking changes between 2.7.1 and 3.1.0. 2022-08-07T07:54:58Z wiz wiz@pkgsrc.org 2022-08-07T07:54:58Z urn:sha1:6842a8eb55b6af19d1c3416e6d6c3d6f35e9e876 What's Changed chore(deps-dev): bump flake8-isort from 4.1.1 to 4.1.2.post0 by @dependabot in #280 fix: BOM validation fails when Components or Services are nested by @madpah in #276 2022-07-24T10:55:02Z wiz wiz@pkgsrc.org 2022-07-24T10:55:02Z urn:sha1:d94436055db908f84d0bb8d0f660ffc330dc1c80 What's Changed feature: support for CycloneDX schema 1.4.2 - adds vulnerability.properties to the schema by @madpah in #273 2022-07-03T10:38:09Z wiz wiz@pkgsrc.org 2022-07-03T10:38:09Z urn:sha1:0b1bb9cdbf795597cf4a14115a64b14760c5b277 2.6.0 Reduce unnessessarry type casting of set/SortedSet (#203) 2.5.1 Add expected lower-than comparators for OrganizationalEntity and VulnerabilityCredits (#248) 2022-06-13T09:59:01Z wiz wiz@pkgsrc.org 2022-06-13T09:59:01Z urn:sha1:4433aec6c3af012d3c81c55356fc2123419da911 2.5.1 Fix Add missing Vulnerability comparator for sorting (#246) (c3f3d0d) 2.5.0 Feature Use SortedSet in model to improve reproducibility - this will provide predictable ordering of various items in generated CycloneDX documents - thanks to @RodneyRichardson (8a1c404) Documentation Fix typo "This is out" -> "This is our" (ef0278a) 2.4.0 Feature deps: Remove unused typing-extensions constraints (2ce358a) 2022-04-20T21:29:08Z wiz wiz@pkgsrc.org 2022-04-20T21:29:08Z urn:sha1:d294c31c93478b85ebb279cad88d2b505d83239d 2.3.0 Feature Add support for Dependency Graph in Model and output serialisation (ea34513) 2.2.0 Feature Bump XML schemas to latest fix version for 1.2-1.4 - see: (bd2e756) Bump JSON schemas to latest fix verison for 1.2 and 1.3 - see: (bd6a088) 2.1.1 Fix Prevent error if version not set (b9a84b5) version being optional in JSON output can raise error (ba0c82f) 2.1.0 Feature Output errors are verbose (bfe8fb1) 2022-03-08T09:08:29Z wiz wiz@pkgsrc.org 2022-03-08T09:08:29Z urn:sha1:987b1820c502de969eaa78632aa6458c7e6ae2a8 Feature Bump dependencies (da3f0ca) Completed work on #155 (#172) (a926b34) Support complete model for bom.metadata (#162) (2938a6c) Support for bom.externalReferences in JSON and XML #124 (1b733d7) Complete support for bom.components (#155) (32c0139) Support services in XML BOMs (9edf6c9) Fix license_url not serialised in XML output #179 (#180) (f014d7c) Component.bom_ref is not Optional in our model implementation (in the schema it is) - we generate a UUID if bom_ref is not supplied explicitly (5c954d1) Temporary fix for __hash__ of Component with properties #153 (a51766d) Further fix for #150 (1f55f3e) Regression introduced by first fix for #150 (c09e396) Components with no version (optional since 1.4) produce invalid BOM output in XML #150 (70d25c8) expression not supported in Component Licsnes for version 1.0 (15b081b) Breaking Adopt PEP-3102 (da3f0ca) Optional Lists are now non-optional Sets (da3f0ca) Remove concept of DEFAULT schema version - replaced with LATEST schema version (da3f0ca) Added BomRef data type (da3f0ca) 2022-02-20T21:23:44Z wiz wiz@pkgsrc.org 2022-02-20T21:23:44Z urn:sha1:325ebdc1bbfb02bdbc71ea6cc887530a3ee40963 1.3.0 (2022-01-24) Feature bom-ref for Component and Vulnerability default to a UUID (#142) (3953bb6) 1.2.0 (2022-01-24) Feature Add CPE to component (#138) (269ee15) 1.1.1 (2022-01-19) Fix Bump dependencies (#136) (18ec498) 1.1.0 (2022-01-13) Feature Add support for bom.metadata.component (#118) (1ac31f4) 1.0.0 (2022-01-13) Support for CycloneDX schema version 1.4 (#108) Breaking Changes Support for CycloneDX 1.4. This includes: Support for tools having externalReferences Allowing version for a Component to be optional in 1.4 Support for releaseNotes per Component Support for the core schema implementation of Vulnerabilities (VEX) Features $schema is now included in JSON BOMs Concrete Parsers how now been moved into downstream projects to keep this libraries focus on modelling and outputting CycloneDX - see https://github.com/CycloneDX/cyclonedx-python Fixes Unit tests now include schema validation (we've left schema validation out of the core library due to dependency bloat) Ensure schema is adhered to in 1.0 URIs are now used throughout the library through a new XsUri class to provide URI validation Other Documentation is now hosted on readthedocs.org (https://cyclonedx-python-library.readthedocs.io/) Added reference to release of this library on Anaconda 0.12.3 (2021-12-15) Fix Removed requirements-parser as dependency (temp) as not available for Python 3 as Wheel (#98) (3677d9f) 0.12.2 (2021-12-09) Fix Tightened dependency packageurl-python (#95) (eb4ae5c) 0.12.1 (2021-12-09) Fix Further loosened dependency definitions (8bef6ec) 0.12.0 (2021-12-09) Feature Loosed dependency versions to make this library more consumable (55f10fb) 2022-01-04T20:53:26Z wiz wiz@pkgsrc.org 2022-01-04T20:53:26Z urn:sha1:c7c6245bef7e5ca621e710024a67808158545477 They now have a tool dependency on py-setuptools instead of a DEPENDS 2021-12-17T10:18:23Z wiz wiz@pkgsrc.org 2021-12-17T10:18:23Z urn:sha1:9f7c2805a31854c53776ce745008a8a816b1dedf