./security/py-cyclonedx-python-lib, Python library for generating CycloneDX SBOMs

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 10.1.0, Package name: py312-cyclonedx-python-lib-10.1.0, Maintainer: pkgsrc-users

This CycloneDX module for Python can generate valid CycloneDX
bill-of-material document containing an aggregate of all project
dependencies.

This module is not designed for standalone use.

Master sites:

Filesize: 1006.804 KB

Version history: (Expand)

CVS history: (Expand)


   2025-06-10 07:12:27 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 10.1.0.

## v10.1.0 (2025-06-05)

### Features

- Pulled SPDX license IDs v1.0-3.26.0

## v10.0.2 (2025-06-02)

### Bug Fixes

- `model.bommetadata.component` setter typehint
   2025-05-11 12:25:33 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 10.0.1.

## v10.0.1 (2025-05-10)

### Bug Fixes

- Add missing comparator for VulnerabilityAnalysis

When trying to generate a CycloneDX BOM that has two vulnerabilities that only \ 
differ in their
  analysis, you get ``` TypeError: '<' not supported between instances of \ 
'VulnerabilityAnalysis'
  and 'VulnerabilityAnalysis' ```

This PR adds the `__lt__` method for the VulnerabilityAnalysis model to fix \ 
sorting and also
  includes a test case to verify the fix.

### Documentation

- **fix**: Mdformat
   2025-04-28 12:41:12 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 10.0.0.

## v10.0.0 (2025-04-23)

### Features

- Drop support for Python <3.9

Python 3.8 is end-of-life.
   2025-03-02 21:21:10 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 9.1.0.

9.1.0

What's Changed

    feat: VulnerabilityAnalysis properties for issued/updated datetime by \ 
@indiVar0508 in #794
    fix: improved comparison functionality of model.VulnerabilityAnalysis by \ 
@jkowalleck in #795

## v9.0.0 (2025-02-26)

### Breaking

* feat!: 9.0.1 (#777)

### BREAKING Changes

* Fix: `model.vulnerability.VulnerabilityReference`&#39;s properties are all
mandatory ([#790] via [#792]
* Refactor: Rename `spdx.is_compund_expression` -> `spdx.is_expression`
([#779]
* Behavior: `BomRef` affects comparison/hashing ([#754] [#780]
  This is only a breaking change if you relied on ordering of elements.
* Behavior: streamline comparison/hashing functions ([#755]
  This is only a breaking change if you relied on ordering of elements.
* Dependency: bump dependency `py-serializable >=2 <3`, was `>=1.1.1 \ 
<2` ([#775]
This is only a breaking change if you have other packages depend on that
specific version.

## v8.9.0 (2025-02-25)

### Documentation

* docs:  extended instructions for &#34;contributing&#34; (#783)

supersedes
https://github.com/CycloneDX/cyclonedx-python-lib/pull/773/files#r1954324461

### Feature

* feat: avoid raising `NoPropertiesProvidedException` for optional parameters (#786)

the following classes&#39; init no longer raise `NoPropertiesProvidedException`:
* `cyclonedx.model.IdentifiableAction`
* `cyclonedx.model.component.Commit`
* `cyclonedx.model.component.ComponentEvidence`
* `cyclonedx.model.component.Diff`
* `cyclonedx.model.component.Pedigree`
* `cyclonedx.model.issue.IssueTypeSource`
* `cyclonedx.model.vulnerability.VulnerabilityAnalysis`
* `cyclonedx.model.vulnerability.VulnerabilityCredits`
* `cyclonedx.model.vulnerability.VulnerabilityRating`
* `cyclonedx.model.vulnerability.VulnerabilitySource`
   2025-02-18 11:43:48 by Thomas Klausner | Files touched by this commit (1) 
Log message:
py-cyclonedx-python-lib: adapt for py-serializable 2 and depend on it
   2025-02-13 11:58:53 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: updated to 8.8.0

v8.8.0 (2025-02-12)

Feature
feat: add cyclonedx.model.crypto.ProtocolProperties.crypto_refs
   2025-02-09 15:28:49 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 8.7.0.

8.7.0

Feature

    feat: allow empty OrganizationalContact object (#772)

What's Changed

    feat: allow empty OrganizationalContact object by @Churro in #772

8.6.0

Feature

    feat: expand the capabilities of models.definition.Standard (#713)
    feat: allow empty OrganizationalEntity object (#768)

What's Changed

    feat: allow empty OrganizationalEntity object by @Churro in #768
    chore: tools shebang by @jkowalleck in #770
    feat: add extended support for Definitions by @hakandilek in #713
   2025-02-02 16:57:00 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cyclonedx-python-lib: update to 8.5.1.

Documentation

    docs: responsibilities & capabilities (#763)
    docs: Fix typos in conda-forge.md and remove unused reference in README (#762)
    docs: modernize docstrings for CDX1.6 (#759)

Feature

    feat: couple classes and their serializes (#757)
    Deprecates .serialization.BomRefHelper and \ 
.serialization.LicenseRepositoryHelper.
    (stealth-release of this feature, as it is almost only used internally)