summaryrefslogtreecommitdiff
path: root/security/py-cyclonedx-python-lib
AgeCommit message (Collapse)AuthorFilesLines
2022-09-18py-cyclonedx-python-lib: update to 3.1.0.wiz3-7/+19
v3.1.0 Feature Out-factor SPDX compound detection (fd4d537, 2b69925) License factories (033bad2) Note: There was no 3.0.0 release officially, but due to CI publishing issues, an unexpected 3.0.0 release was publiched to PyPi and subsequently yanked from PyPi. There are NO breaking changes between 2.7.1 and 3.1.0.
2022-08-07py-cyclonedx-python-lib: update to 2.7.1.wiz2-6/+6
What's Changed chore(deps-dev): bump flake8-isort from 4.1.1 to 4.1.2.post0 by @dependabot in #280 fix: BOM validation fails when Components or Services are nested by @madpah in #276
2022-07-24py-cyclonedx-python-lib: update to 2.7.0.wiz2-6/+6
What's Changed feature: support for CycloneDX schema 1.4.2 - adds vulnerability.properties to the schema by @madpah in #273
2022-07-03py-cyclonedx-python-lib: update to 2.6.0.wiz2-6/+6
2.6.0 Reduce unnessessarry type casting of set/SortedSet (#203) 2.5.1 Add expected lower-than comparators for OrganizationalEntity and VulnerabilityCredits (#248)
2022-06-13py-cyclonedx-python-lib: update to 2.5.1.wiz3-20/+15
2.5.1 Fix Add missing Vulnerability comparator for sorting (#246) (c3f3d0d) 2.5.0 Feature Use SortedSet in model to improve reproducibility - this will provide predictable ordering of various items in generated CycloneDX documents - thanks to @RodneyRichardson (8a1c404) Documentation Fix typo "This is out" -> "This is our" (ef0278a) 2.4.0 Feature deps: Remove unused typing-extensions constraints (2ce358a)
2022-04-20py-cyclonedx-python-lib: update to 2.3.0.wiz3-7/+12
2.3.0 Feature Add support for Dependency Graph in Model and output serialisation (ea34513) 2.2.0 Feature Bump XML schemas to latest fix version for 1.2-1.4 - see: (bd2e756) Bump JSON schemas to latest fix verison for 1.2 and 1.3 - see: (bd6a088) 2.1.1 Fix Prevent error if version not set (b9a84b5) version being optional in JSON output can raise error (ba0c82f) 2.1.0 Feature Output errors are verbose (bfe8fb1)
2022-03-08py-cyclonedx-python-lib: update to 2.0.0.wiz3-7/+13
Feature Bump dependencies (da3f0ca) Completed work on #155 (#172) (a926b34) Support complete model for bom.metadata (#162) (2938a6c) Support for bom.externalReferences in JSON and XML #124 (1b733d7) Complete support for bom.components (#155) (32c0139) Support services in XML BOMs (9edf6c9) Fix license_url not serialised in XML output #179 (#180) (f014d7c) Component.bom_ref is not Optional in our model implementation (in the schema it is) - we generate a UUID if bom_ref is not supplied explicitly (5c954d1) Temporary fix for __hash__ of Component with properties #153 (a51766d) Further fix for #150 (1f55f3e) Regression introduced by first fix for #150 (c09e396) Components with no version (optional since 1.4) produce invalid BOM output in XML #150 (70d25c8) expression not supported in Component Licsnes for version 1.0 (15b081b) Breaking Adopt PEP-3102 (da3f0ca) Optional Lists are now non-optional Sets (da3f0ca) Remove concept of DEFAULT schema version - replaced with LATEST schema version (da3f0ca) Added BomRef data type (da3f0ca)
2022-02-20py-cyclonedx-python-lib: update to 1.3.0.wiz4-57/+54
1.3.0 (2022-01-24) Feature bom-ref for Component and Vulnerability default to a UUID (#142) (3953bb6) 1.2.0 (2022-01-24) Feature Add CPE to component (#138) (269ee15) 1.1.1 (2022-01-19) Fix Bump dependencies (#136) (18ec498) 1.1.0 (2022-01-13) Feature Add support for bom.metadata.component (#118) (1ac31f4) 1.0.0 (2022-01-13) Support for CycloneDX schema version 1.4 (#108) Breaking Changes Support for CycloneDX 1.4. This includes: Support for tools having externalReferences Allowing version for a Component to be optional in 1.4 Support for releaseNotes per Component Support for the core schema implementation of Vulnerabilities (VEX) Features $schema is now included in JSON BOMs Concrete Parsers how now been moved into downstream projects to keep this libraries focus on modelling and outputting CycloneDX - see https://github.com/CycloneDX/cyclonedx-python Fixes Unit tests now include schema validation (we've left schema validation out of the core library due to dependency bloat) Ensure schema is adhered to in 1.0 URIs are now used throughout the library through a new XsUri class to provide URI validation Other Documentation is now hosted on readthedocs.org (https://cyclonedx-python-library.readthedocs.io/) Added reference to release of this library on Anaconda 0.12.3 (2021-12-15) Fix Removed requirements-parser as dependency (temp) as not available for Python 3 as Wheel (#98) (3677d9f) 0.12.2 (2021-12-09) Fix Tightened dependency packageurl-python (#95) (eb4ae5c) 0.12.1 (2021-12-09) Fix Further loosened dependency definitions (8bef6ec) 0.12.0 (2021-12-09) Feature Loosed dependency versions to make this library more consumable (55f10fb)
2022-01-04*: bump PKGREVISION for egg.mk userswiz1-1/+2
They now have a tool dependency on py-setuptools instead of a DEPENDS
2021-12-17py-cyclonedx-*: mark as not for python 2.7wiz1-1/+3
2021-12-07security/py-cyclonedx-python-lib: import py-cyclonedx-python-lib-0.11.1wiz5-0/+138
This CycloneDX module for Python can generate valid CycloneDX bill-of-material document containing an aggregate of all project dependencies. This module is not designed for standalone use.