./security/py-cyclonedx-python-lib, Python library for generating CycloneDX SBOMs

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 9.1.0, Package name: py312-cyclonedx-python-lib-9.1.0, Maintainer: pkgsrc-users

This CycloneDX module for Python can generate valid CycloneDX
bill-of-material document containing an aggregate of all project
dependencies.

This module is not designed for standalone use.


Master sites:

Filesize: 1024.155 KB

Version history: (Expand)


CVS history: (Expand)


   2025-03-02 21:21:10 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 9.1.0.

9.1.0

What's Changed

    feat: VulnerabilityAnalysis properties for issued/updated datetime by \ 
@indiVar0508 in #794
    fix: improved comparison functionality of model.VulnerabilityAnalysis by \ 
@jkowalleck in #795

## v9.0.0 (2025-02-26)

### Breaking

* feat!: 9.0.1 (#777)

### BREAKING Changes

* Fix: `model.vulnerability.VulnerabilityReference`'s properties are all
mandatory ([#790] via [#792]
* Refactor: Rename `spdx.is_compund_expression` -> `spdx.is_expression`
([#779]
* Behavior: `BomRef` affects comparison/hashing ([#754] [#780]
  This is only a breaking change if you relied on ordering of elements.
* Behavior: streamline comparison/hashing functions ([#755]
  This is only a breaking change if you relied on ordering of elements.
* Dependency: bump dependency `py-serializable >=2 <3`, was `>=1.1.1 \ 
<2` ([#775]
This is only a breaking change if you have other packages depend on that
specific version.

## v8.9.0 (2025-02-25)

### Documentation

* docs:  extended instructions for &#34;contributing&#34; (#783)

supersedes
https://github.com/CycloneDX/cyclonedx-python-lib/pull/773/files#r1954324461

### Feature

* feat: avoid raising `NoPropertiesProvidedException` for optional parameters (#786)

the following classes&#39; init no longer raise `NoPropertiesProvidedException`:
* `cyclonedx.model.IdentifiableAction`
* `cyclonedx.model.component.Commit`
* `cyclonedx.model.component.ComponentEvidence`
* `cyclonedx.model.component.Diff`
* `cyclonedx.model.component.Pedigree`
* `cyclonedx.model.issue.IssueTypeSource`
* `cyclonedx.model.vulnerability.VulnerabilityAnalysis`
* `cyclonedx.model.vulnerability.VulnerabilityCredits`
* `cyclonedx.model.vulnerability.VulnerabilityRating`
* `cyclonedx.model.vulnerability.VulnerabilitySource`
   2025-02-18 11:43:48 by Thomas Klausner | Files touched by this commit (1)
Log message:
py-cyclonedx-python-lib: adapt for py-serializable 2 and depend on it
   2025-02-13 11:58:53 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: updated to 8.8.0

v8.8.0 (2025-02-12)

Feature
feat: add cyclonedx.model.crypto.ProtocolProperties.crypto_refs
   2025-02-09 15:28:49 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 8.7.0.

8.7.0

Feature

    feat: allow empty OrganizationalContact object (#772)

What's Changed

    feat: allow empty OrganizationalContact object by @Churro in #772

8.6.0

Feature

    feat: expand the capabilities of models.definition.Standard (#713)
    feat: allow empty OrganizationalEntity object (#768)

What's Changed

    feat: allow empty OrganizationalEntity object by @Churro in #768
    chore: tools shebang by @jkowalleck in #770
    feat: add extended support for Definitions by @hakandilek in #713
   2025-02-02 16:57:00 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 8.5.1.

Documentation

    docs: responsibilities & capabilities (#763)
    docs: Fix typos in conda-forge.md and remove unused reference in README (#762)
    docs: modernize docstrings for CDX1.6 (#759)

Feature

    feat: couple classes and their serializes (#757)
    Deprecates .serialization.BomRefHelper and \ 
.serialization.LicenseRepositoryHelper.
    (stealth-release of this feature, as it is almost only used internally)
   2024-11-24 11:22:16 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 8.5.0.

Documentation

    docs: remove invalid docsting note about auto-assigned bom-ref values (#733) \ 
(5aa5787)

Feature

    feat: support CycloneDX 1.6.1 (#742)

What's Changed

    docs: remove invalid docsting note about auto-assigned bom-ref values by \ 
@jkowalleck in #733
    chore(deps-dev): update flake8-bugbear requirement from 24.8.19 to 24.10.31 \ 
by @dependabot in #734
    chore(deps-dev): update tomli requirement from 2.0.2 to 2.1.0 by @dependabot \ 
in #739
    feat: support CycloneDX 1.6.1 by @jkowalleck in #742
   2024-10-30 15:35:34 by Thomas Klausner | Files touched by this commit (3) | Package updated
Log message:
py-cyclonedx-python-lib: update to 8.4.0.

8.4.0

Feature

    feat: add factory method XsUri.make_bom_link() (#728)

Fix

    fix: no warning for missing dependencies if no component exists (#720)

Docs

    docs: fix Definitions docstring (#731)

## v8.3.0 (2024-10-26)

### Documentation

* docs: revisit examples readme (#725)

### Feature

* feat: add basic support for Definitions  (#701)

## v8.2.1 (2024-10-24)

### Fix

* fix: encode quotation mark in URL (#724)

## v8.2.0 (2024-10-22)

### Feature

* feat: Add Python 3.13 support (#718)

## v8.1.0 (2024-10-21)

### Documentation

* docs: fix code examples regarding outputting (#709)

### Feature

* feat: add support for Lifecycles in BOM metadata (#698)
   2024-10-22 09:55:51 by Thomas Klausner | Files touched by this commit (3) | Package updated
Log message:
py-cyclonedx-python-lib: update to 8.0.0.

### Documentation

* docs(chaneglog): omit chore/ci/refactor/style/test/build (#703)
* docs: rephrase migration paths

### Unknown

* rework tools xml deserializer (#700)