| Age | Commit message (Collapse) | Author | Files | Lines |
|
v3.1.0
Feature
Out-factor SPDX compound detection (fd4d537, 2b69925)
License factories (033bad2)
Note: There was no 3.0.0 release officially, but due to CI publishing
issues, an unexpected 3.0.0 release was publiched to PyPi and
subsequently yanked from PyPi. There are NO breaking changes between
2.7.1 and 3.1.0.
|
|
What's Changed
chore(deps-dev): bump flake8-isort from 4.1.1 to 4.1.2.post0 by @dependabot in #280
fix: BOM validation fails when Components or Services are nested by @madpah in #276
|
|
What's Changed
feature: support for CycloneDX schema 1.4.2 - adds
vulnerability.properties to the schema by @madpah in #273
|
|
2.6.0
Reduce unnessessarry type casting of set/SortedSet (#203)
2.5.1
Add expected lower-than comparators for OrganizationalEntity
and VulnerabilityCredits (#248)
|
|
2.5.1
Fix
Add missing Vulnerability comparator for sorting (#246) (c3f3d0d)
2.5.0
Feature
Use SortedSet in model to improve reproducibility - this will provide predictable ordering of various items in generated CycloneDX documents - thanks to @RodneyRichardson (8a1c404)
Documentation
Fix typo "This is out" -> "This is our" (ef0278a)
2.4.0
Feature
deps: Remove unused typing-extensions constraints (2ce358a)
|
|
2.3.0
Feature
Add support for Dependency Graph in Model and output serialisation (ea34513)
2.2.0
Feature
Bump XML schemas to latest fix version for 1.2-1.4 - see: (bd2e756)
Bump JSON schemas to latest fix verison for 1.2 and 1.3 - see: (bd6a088)
2.1.1
Fix
Prevent error if version not set (b9a84b5)
version being optional in JSON output can raise error (ba0c82f)
2.1.0
Feature
Output errors are verbose (bfe8fb1)
|
|
Feature
Bump dependencies (da3f0ca)
Completed work on #155 (#172) (a926b34)
Support complete model for bom.metadata (#162) (2938a6c)
Support for bom.externalReferences in JSON and XML #124 (1b733d7)
Complete support for bom.components (#155) (32c0139)
Support services in XML BOMs (9edf6c9)
Fix
license_url not serialised in XML output #179 (#180) (f014d7c)
Component.bom_ref is not Optional in our model implementation (in the schema it is) - we generate a UUID if bom_ref is not supplied explicitly (5c954d1)
Temporary fix for __hash__ of Component with properties #153 (a51766d)
Further fix for #150 (1f55f3e)
Regression introduced by first fix for #150 (c09e396)
Components with no version (optional since 1.4) produce invalid BOM output in XML #150 (70d25c8)
expression not supported in Component Licsnes for version 1.0 (15b081b)
Breaking
Adopt PEP-3102 (da3f0ca)
Optional Lists are now non-optional Sets (da3f0ca)
Remove concept of DEFAULT schema version - replaced with LATEST schema version (da3f0ca)
Added BomRef data type (da3f0ca)
|
|
1.3.0 (2022-01-24)
Feature
bom-ref for Component and Vulnerability default to a UUID (#142) (3953bb6)
1.2.0 (2022-01-24)
Feature
Add CPE to component (#138) (269ee15)
1.1.1 (2022-01-19)
Fix
Bump dependencies (#136) (18ec498)
1.1.0 (2022-01-13)
Feature
Add support for bom.metadata.component (#118) (1ac31f4)
1.0.0 (2022-01-13)
Support for CycloneDX schema version 1.4 (#108)
Breaking Changes
Support for CycloneDX 1.4. This includes:
Support for tools having externalReferences
Allowing version for a Component to be optional in 1.4
Support for releaseNotes per Component
Support for the core schema implementation of Vulnerabilities (VEX)
Features
$schema is now included in JSON BOMs
Concrete Parsers how now been moved into downstream projects to keep this libraries focus on modelling and outputting CycloneDX - see https://github.com/CycloneDX/cyclonedx-python
Fixes
Unit tests now include schema validation (we've left schema validation out of the core library due to dependency bloat)
Ensure schema is adhered to in 1.0
URIs are now used throughout the library through a new XsUri class to provide URI validation
Other
Documentation is now hosted on readthedocs.org (https://cyclonedx-python-library.readthedocs.io/)
Added reference to release of this library on Anaconda
0.12.3 (2021-12-15)
Fix
Removed requirements-parser as dependency (temp) as not available for Python 3 as Wheel (#98) (3677d9f)
0.12.2 (2021-12-09)
Fix
Tightened dependency packageurl-python (#95) (eb4ae5c)
0.12.1 (2021-12-09)
Fix
Further loosened dependency definitions (8bef6ec)
0.12.0 (2021-12-09)
Feature
Loosed dependency versions to make this library more consumable (55f10fb)
|
|
They now have a tool dependency on py-setuptools instead of a DEPENDS
|
|
|
|
This CycloneDX module for Python can generate valid CycloneDX
bill-of-material document containing an aggregate of all project
dependencies.
This module is not designed for standalone use.
|