2022-09-18 13:53:56 by Thomas Klausner | Files touched by this commit (3) | |
Log message:
py-cyclonedx-python-lib: update to 3.1.0.
v3.1.0
Feature
Out-factor SPDX compound detection (fd4d537, 2b69925)
License factories (033bad2)
Note: There was no 3.0.0 release officially, but due to CI publishing
issues, an unexpected 3.0.0 release was publiched to PyPi and
subsequently yanked from PyPi. There are NO breaking changes between
2.7.1 and 3.1.0.
|
2022-08-07 09:54:58 by Thomas Klausner | Files touched by this commit (2) | |
Log message:
py-cyclonedx-python-lib: update to 2.7.1.
What's Changed
chore(deps-dev): bump flake8-isort from 4.1.1 to 4.1.2.post0 by @dependabot \
in #280
fix: BOM validation fails when Components or Services are nested by @madpah \
in #276
|
2022-07-24 12:55:03 by Thomas Klausner | Files touched by this commit (2) | |
Log message:
py-cyclonedx-python-lib: update to 2.7.0.
What's Changed
feature: support for CycloneDX schema 1.4.2 - adds
vulnerability.properties to the schema by @madpah in #273
|
2022-07-03 12:38:09 by Thomas Klausner | Files touched by this commit (2) | |
Log message:
py-cyclonedx-python-lib: update to 2.6.0.
2.6.0
Reduce unnessessarry type casting of set/SortedSet (#203)
2.5.1
Add expected lower-than comparators for OrganizationalEntity
and VulnerabilityCredits (#248)
|
2022-06-13 11:59:01 by Thomas Klausner | Files touched by this commit (3) | |
Log message:
py-cyclonedx-python-lib: update to 2.5.1.
2.5.1
Fix
Add missing Vulnerability comparator for sorting (#246) (c3f3d0d)
2.5.0
Feature
Use SortedSet in model to improve reproducibility - this will provide \
predictable ordering of various items in generated CycloneDX documents - thanks \
to @RodneyRichardson (8a1c404)
Documentation
Fix typo "This is out" -> "This is our" (ef0278a)
2.4.0
Feature
deps: Remove unused typing-extensions constraints (2ce358a)
|
2022-04-20 23:29:08 by Thomas Klausner | Files touched by this commit (3) | |
Log message:
py-cyclonedx-python-lib: update to 2.3.0.
2.3.0
Feature
Add support for Dependency Graph in Model and output serialisation (ea34513)
2.2.0
Feature
Bump XML schemas to latest fix version for 1.2-1.4 - see: (bd2e756)
Bump JSON schemas to latest fix verison for 1.2 and 1.3 - see: (bd6a088)
2.1.1
Fix
Prevent error if version not set (b9a84b5)
version being optional in JSON output can raise error (ba0c82f)
2.1.0
Feature
Output errors are verbose (bfe8fb1)
|
2022-03-08 10:08:29 by Thomas Klausner | Files touched by this commit (3) | |
Log message:
py-cyclonedx-python-lib: update to 2.0.0.
Feature
Bump dependencies (da3f0ca)
Completed work on #155 (#172) (a926b34)
Support complete model for bom.metadata (#162) (2938a6c)
Support for bom.externalReferences in JSON and XML #124 (1b733d7)
Complete support for bom.components (#155) (32c0139)
Support services in XML BOMs (9edf6c9)
Fix
license_url not serialised in XML output #179 (#180) (f014d7c)
Component.bom_ref is not Optional in our model implementation (in the schema \
it is) - we generate a UUID if bom_ref is not supplied explicitly (5c954d1)
Temporary fix for __hash__ of Component with properties #153 (a51766d)
Further fix for #150 (1f55f3e)
Regression introduced by first fix for #150 (c09e396)
Components with no version (optional since 1.4) produce invalid BOM output \
in XML #150 (70d25c8)
expression not supported in Component Licsnes for version 1.0 (15b081b)
Breaking
Adopt PEP-3102 (da3f0ca)
Optional Lists are now non-optional Sets (da3f0ca)
Remove concept of DEFAULT schema version - replaced with LATEST schema \
version (da3f0ca)
Added BomRef data type (da3f0ca)
|
2022-02-20 22:23:44 by Thomas Klausner | Files touched by this commit (4) | |
Log message:
py-cyclonedx-python-lib: update to 1.3.0.
1.3.0 (2022-01-24)
Feature
bom-ref for Component and Vulnerability default to a UUID (#142) (3953bb6)
1.2.0 (2022-01-24)
Feature
Add CPE to component (#138) (269ee15)
1.1.1 (2022-01-19)
Fix
Bump dependencies (#136) (18ec498)
1.1.0 (2022-01-13)
Feature
Add support for bom.metadata.component (#118) (1ac31f4)
1.0.0 (2022-01-13)
Support for CycloneDX schema version 1.4 (#108)
Breaking Changes
Support for CycloneDX 1.4. This includes:
Support for tools having externalReferences
Allowing version for a Component to be optional in 1.4
Support for releaseNotes per Component
Support for the core schema implementation of Vulnerabilities (VEX)
Features
$schema is now included in JSON BOMs
Concrete Parsers how now been moved into downstream projects to keep this \
libraries focus on modelling and outputting CycloneDX - see \
https://github.com/CycloneDX/cyclonedx-python
Fixes
Unit tests now include schema validation (we've left schema validation out \
of the core library due to dependency bloat)
Ensure schema is adhered to in 1.0
URIs are now used throughout the library through a new XsUri class to \
provide URI validation
Other
Documentation is now hosted on readthedocs.org \
(https://cyclonedx-python-library.readthedocs.io/)
Added reference to release of this library on Anaconda
0.12.3 (2021-12-15)
Fix
Removed requirements-parser as dependency (temp) as not available for Python \
3 as Wheel (#98) (3677d9f)
0.12.2 (2021-12-09)
Fix
Tightened dependency packageurl-python (#95) (eb4ae5c)
0.12.1 (2021-12-09)
Fix
Further loosened dependency definitions (8bef6ec)
0.12.0 (2021-12-09)
Feature
Loosed dependency versions to make this library more consumable (55f10fb)
|
2022-01-04 21:55:40 by Thomas Klausner | Files touched by this commit (1595) |
Log message:
*: bump PKGREVISION for egg.mk users
They now have a tool dependency on py-setuptools instead of a DEPENDS
|
2021-12-17 11:18:24 by Thomas Klausner | Files touched by this commit (2) |
Log message:
py-cyclonedx-*: mark as not for python 2.7
|