5.0.1

Maintenance release.

Style

• Applied latest PHP Coding Standards (via #451, #459)

---

What's Changed

• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.40.0 to v3.41.0 in /tools/php-cs-fixer by @dependabot in #443
• tools(deps-dev): Update ergebnis/composer-normalize requirement from 2.39.0 to 2.40.0 in /tools/composer-normalize by @dependabot in #444
• tools(deps-dev): Update phpunit/phpunit requirement from 10.5.1 to 10.5.2 in /tools/phpunit by @dependabot in #445
• tools(deps-dev): Update phpunit/phpunit requirement from 10.5.2 to 10.5.3 in /tools/phpunit by @dependabot in #448
• tools(deps-dev): Update ergebnis/composer-normalize requirement from 2.40.0 to 2.41.1 in /tools/composer-normalize by @dependabot in #447
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.41.0 to v3.41.1 in /tools/php-cs-fixer by @dependabot in #446
• tools(deps-dev): Update phpunit/phpunit requirement from 10.5.3 to 10.5.5 in /tools/phpunit by @dependabot in #452
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.41.1 to v3.45.0 in /tools/php-cs-fixer by @dependabot in #451
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.45.0 to v3.46.0 in /tools/php-cs-fixer by @dependabot in #453
• tools(deps-dev): Update phpunit/phpunit requirement from 10.5.5 to 10.5.6 in /tools/phpunit by @dependabot in #454
• gh-actions(deps): Bump actions/cache from 3 to 4 by @dependabot in #455
• tools(deps-dev): Update phpunit/phpunit requirement from 10.5.6 to 10.5.8 in /tools/phpunit by @dependabot in #456
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.46.0 to v3.48.0 in /tools/php-cs-fixer by @dependabot in #457
• tools(deps-dev): Update phpunit/phpunit requirement from 10.5.8 to 10.5.9 in /tools/phpunit by @dependabot in #458
• tools(deps-dev): Update ergebnis/composer-normalize requirement from 2.41.1 to 2.42.0 in /tools/composer-normalize by @dependabot in #460
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.48.0 to v3.49.0 in /tools/php-cs-fixer by @dependabot in #459

Full Changelog: v5.0.0...v5.0.1

5.0.0

BREAKING changes

• CLI switch --spec-version defaults to 1.5, was 1.4 (#442 via #441)

Dependencies

• Raised dependency cyclonedx/cyclonedx-library:^3.1, was :^2.3 || ^3.0 (via #441)

---

What's Changed

• chore: prevent type confusion by @jkowalleck in #438
• feat!: default to CDX1.5 by @jkowalleck in #441
• tools(deps-dev): Update phpunit/phpunit requirement from 10.4.2 to 10.5.1 in /tools/phpunit by @dependabot in #440
• tools(deps-dev): Update icanhazstring/composer-unused requirement from 0.8.10 to 0.8.11 in /tools/composer-unused by @dependabot in #439

Full Changelog: v4.2.3...v5.0.0

4.2.3

Misc

• Officially support PHP 8.3 (via #342)

---

What's Changed

• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.37.1 to v3.38.0 in /tools/php-cs-fixer by @dependabot in #433
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.38.0 to v3.38.2 in /tools/php-cs-fixer by @dependabot in #436
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.38.2 to v3.39.1 in /tools/php-cs-fixer by @dependabot in #437
• support php8.3 by @jkowalleck in #342

Full Changelog: v4.2.2...v4.2.3

4.2.2

Added

• SBOM results might have the externalReferences[].comment populated (via #432)

Fixed

• SBOM results might have the externalReferences[].hashes populated (#430 via #432)
  The hashes might have wrongly appeared as components[].hashes before.

---

What's Changed

• tools(deps-dev): Update phpunit/phpunit requirement from 10.4.1 to 10.4.2 in /tools/phpunit by @dependabot in #429
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.35.1 to v3.37.0 in /tools/php-cs-fixer by @dependabot in #428
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.37.0 to v3.37.1 in /tools/php-cs-fixer by @dependabot in #431
• fix: component hash scope by @jkowalleck in #432

Full Changelog: v4.2.1...v4.2.2

4.2.1

Maintenance release

Docs

• Moved all non-public API into a sub-namespace called _internal, so that its reliability is obvious. (via #427)

---

What's Changed

• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.25.0 to v3.26.1 in /tools/php-cs-fixer by @dependabot in #406
• tools(deps-dev): Update phpunit/phpunit requirement from 10.3.2 to 10.3.3 in /tools/phpunit by @dependabot in #407
• gh-actions(deps): Bump actions/checkout from 3 to 4 by @dependabot in #408
• tools(deps-dev): Update phpunit/phpunit requirement from 10.3.3 to 10.3.4 in /tools/phpunit by @dependabot in #409
• tools(deps-dev): Update maglnet/composer-require-checker requirement from 4.6.0 to 4.7.0 in /tools/composer-require-checker by @dependabot in #410
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.26.1 to v3.28.0 in /tools/php-cs-fixer by @dependabot in #411
• tools(deps-dev): Update phpunit/phpunit requirement from 10.3.4 to 10.3.5 in /tools/phpunit by @dependabot in #412
• ci: lax dependency installer by @jkowalleck in #415
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.28.0 to v3.34.0 in /tools/php-cs-fixer by @dependabot in #414
• tools(deps-dev): Update maglnet/composer-require-checker requirement from 4.7.0 to 4.7.1 in /tools/composer-require-checker by @dependabot in #413
• Update CONTRIBUTING.md by @jkowalleck in #416
• tools(deps-dev): Update phpunit/phpunit requirement from 10.3.5 to 10.4.0 in /tools/phpunit by @dependabot in #417
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.34.0 to v3.34.1 in /tools/php-cs-fixer by @dependabot in #418
• tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from v3.34.1 to v3.35.1 in /tools/php-cs-fixer by @dependabot in #420
• tools(deps-dev): Update phpunit/phpunit requirement from 10.4.0 to 10.4.1 in /tools/phpunit by @dependabot in #419
• docs: add OpenSSF Best Practices link/badge by @jkowalleck in #421
• docs: publish code coverage by @jkowalleck in #422
• Tests: init integration tests by @jkowalleck in #423
• refactor: move non-public API into a sub-namespace called _internal by @jkowalleck in #427

Full Changelog: v4.2.0...v4.2.1

4.2.0

Added

• SBOM result might have additional items in metadata.tools populated (#402 via #403; #404 via #405)

---

Full Changelog: v4.1.1...v4.2.0

4.1.1

Maintenance release

Dependencies

• Requires cyclonedx/cyclonedx-library:^2.3||^3.0, was :^2.3 (via #398)

Style

• Applied latest PHP Coding Standards (via #395)

---

Full Changelog: v4.1.0...v4.1.1

4.1.0

Added support for CycloneDX Specification-1.5.

Changed

• This tool supports CycloneDX Specification-1.5 now (#380 via #383)

Added

• CLI switch --spec-version now supports value 1.5 to reflect CycloneDX Specification-1.5 (#380 via #383)
  Default value for that switch is unchanged – still 1.4.

Dependencies

• Requires cyclonedx/cyclonedx-library:^2.3, was :^2.1 (#380 via #383)

---

Full Changelog: v4.0.2...v4.1.0

4.0.2

Fixed

• Typo: "compoer" -> "composer" (#367 via #368)

---

Full Changelog: v4.0.1...v4.0.2

4.0.1

Fixed

• Improved error reporting in case an invalid BOM would be created (via #363)

---

Full Changelog: v4.0.0...v4.0.1