|
2 | 2 |
|
3 | 3 |
|
4 | 4 |
|
| 5 | +## v6.0.0-rc.2 (2023-12-05) |
| 6 | + |
| 7 | +### Breaking |
| 8 | + |
| 9 | +* feat!: v6.0.0 RC2 |
| 10 | + |
| 11 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`3c3ebd7`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/3c3ebd74de72bf35831c7710047cfeee27840e91)) |
| 12 | + |
| 13 | +### Chore |
| 14 | + |
| 15 | +* chore(deps): update sphinx-rtd-theme requirement (#499) |
| 16 | + |
| 17 | +Updates the requirements on [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) to permit the latest version. |
| 18 | +- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst) |
| 19 | +- [Commits](https://github.com/readthedocs/sphinx_rtd_theme/compare/1.3.0...2.0.0) |
| 20 | + |
| 21 | +--- |
| 22 | +updated-dependencies: |
| 23 | +- dependency-name: sphinx-rtd-theme |
| 24 | + dependency-type: direct:production |
| 25 | +... |
| 26 | + |
| 27 | +Signed-off-by: dependabot [bot ] <[email protected]> |
| 28 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 29 | +Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> ([`5d6dd41`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/5d6dd417e0c13e596dab6c76b610788bbbb96093)) |
| 30 | + |
| 31 | +* chore(deps-dev): update flake8-bugbear requirement (#500) |
| 32 | + |
| 33 | +Updates the requirements on [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) to permit the latest version. |
| 34 | +- [Release notes](https://github.com/PyCQA/flake8-bugbear/releases) |
| 35 | +- [Commits](https://github.com/PyCQA/flake8-bugbear/compare/23.9.16...23.11.28) |
| 36 | + |
| 37 | +--- |
| 38 | +updated-dependencies: |
| 39 | +- dependency-name: flake8-bugbear |
| 40 | + dependency-type: direct:development |
| 41 | +... |
| 42 | + |
| 43 | +Signed-off-by: dependabot [bot ] <[email protected]> |
| 44 | +Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> ([`e9a12b9`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/e9a12b93a9866dcb6d9a48396a7c5378d5c5f5e5)) |
| 45 | + |
| 46 | +* chore(deps): update py-serializable requirement (#501) |
| 47 | + |
| 48 | +Updates the requirements on [py-serializable](https://github.com/madpah/serializable) to permit the latest version. |
| 49 | +- [Release notes](https://github.com/madpah/serializable/releases) |
| 50 | +- [Changelog](https://github.com/madpah/serializable/blob/main/CHANGELOG.md) |
| 51 | +- [Commits](https://github.com/madpah/serializable/compare/v0.15.0...v0.16.0) |
| 52 | + |
| 53 | +--- |
| 54 | +updated-dependencies: |
| 55 | +- dependency-name: py-serializable |
| 56 | + dependency-type: direct:production |
| 57 | +... |
| 58 | + |
| 59 | +Signed-off-by: dependabot [bot ] <[email protected]> |
| 60 | +Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> ([`04435ab`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/04435abe926b6fa877bd0194733ae87b3bad9610)) |
| 61 | + |
| 62 | +* chore(deps-dev): update tox requirement from 4.11.3 to 4.11.4 (#502) |
| 63 | + |
| 64 | +Updates the requirements on [tox](https://github.com/tox-dev/tox) to permit the latest version. |
| 65 | +- [Release notes](https://github.com/tox-dev/tox/releases) |
| 66 | +- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) |
| 67 | +- [Commits](https://github.com/tox-dev/tox/compare/4.11.3...4.11.4) |
| 68 | + |
| 69 | +--- |
| 70 | +updated-dependencies: |
| 71 | +- dependency-name: tox |
| 72 | + dependency-type: direct:development |
| 73 | +... |
| 74 | + |
| 75 | +Signed-off-by: dependabot [bot ] <[email protected]> |
| 76 | +Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> ([`8bf0e39`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/8bf0e39f62c57c8afb6b7c152156e7af1f02bd5d)) |
| 77 | + |
| 78 | +### Refactor |
| 79 | + |
| 80 | +* refactor: revisit `type:ignore` (#507) |
| 81 | + |
| 82 | +* refactor: remove uspecific type-ignores |
| 83 | + |
| 84 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 85 | + |
| 86 | +* refactor: revisi all type ignores |
| 87 | + |
| 88 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 89 | + |
| 90 | +--------- |
| 91 | + |
| 92 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`690646c`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/690646c5929cdd7054db81be559b5794a4484ec7)) |
| 93 | + |
| 94 | +### Unknown |
| 95 | + |
| 96 | +* revisit `BomRef` |
| 97 | + |
| 98 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`1fe7cae`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/1fe7cae990ec475db54abc4f08b79a761eb45d3f)) |
| 99 | + |
| 100 | +* docs |
| 101 | + |
| 102 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`8eb7786`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/8eb778679a99e3e75e36883268acf266a7ef1de6)) |
| 103 | + |
| 104 | +* BC: Helpes internal (#506) |
| 105 | + |
| 106 | +fixes https://github.com/CycloneDX/cyclonedx-python-lib/issues/503 |
| 107 | + |
| 108 | +removes the following symbols from public API: |
| 109 | +- `models.ComparableTuple` |
| 110 | +- `model.sha1sum` |
| 111 | +- `model.get_now_utc` |
| 112 | +- `model.dependency.DependencyDependencies` |
| 113 | + |
| 114 | +--------- |
| 115 | + |
| 116 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`7c669be`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/7c669be5814851958569e2c70019ba887b284573)) |
| 117 | + |
| 118 | +* `BomRef.value` default `None` (#505) |
| 119 | + |
| 120 | + |
| 121 | +--------- |
| 122 | + |
| 123 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`b9193a2`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/b9193a20cc8cb741e41986dbe44a7222fdd505fd)) |
| 124 | + |
| 125 | +* Merge remote-tracking branch 'origin/main' into 6.0.0-dev ([`ef76c49`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/ef76c49e96bf8bd2003f1b75fac422ea940943ef)) |
| 126 | + |
| 127 | +* tests: add test snapshots |
| 128 | + |
| 129 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`d1dc14b`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/d1dc14bfe73c300319ab1eb31a68326f68001446)) |
| 130 | + |
| 131 | + |
5 | 132 | ## v5.2.0 (2023-12-02)
|
6 | 133 |
|
| 134 | +### Feature |
| 135 | + |
| 136 | +* feat: `model.XsUri` migrate control characters according to spec (#498) |
| 137 | + |
| 138 | +fixes https://github.com/CycloneDX/cyclonedx-python-lib/issues/497 |
| 139 | + |
| 140 | +--------- |
| 141 | + |
| 142 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`e490429`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/e49042976f8577af4061c34394db270612488cdf)) |
| 143 | + |
| 144 | +### Style |
| 145 | + |
| 146 | +* style: comments/reformat |
| 147 | + |
| 148 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`1627280`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/162728059366ac217cb6f00e1a4bfec85ec66175)) |
| 149 | + |
| 150 | +### Unknown |
| 151 | + |
| 152 | +* Merge branch 'main' into 6.0.0-dev ([`a82d88e`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/a82d88e8140f27a27ea333fa7d0fbb7c0dec39d7)) |
| 153 | + |
| 154 | +* revert RC chaneglog |
| 155 | + |
| 156 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`9b9edcd`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/9b9edcd8d3597f6fbce54e4fe1a135d1cbcdec66)) |
| 157 | + |
| 158 | + |
| 159 | +## v6.0.0-rc.1 (2023-11-30) |
| 160 | + |
| 161 | +### Breaking |
| 162 | + |
| 163 | +* feat!: v6.0.0 RC1 |
| 164 | + |
| 165 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`dada5d7`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/dada5d72680701c65608b88e0f739341accf854f)) |
| 166 | + |
7 | 167 | ### Chore
|
8 | 168 |
|
9 | 169 | * chore(deps-dev): update mypy requirement from 1.7.0 to 1.7.1 (#487)
|
@@ -80,13 +240,154 @@ Signed-off-by: Jan Kowalleck < [email protected]> ([`3189e59`](https:
|
80 | 240 |
|
81 | 241 | ### Feature
|
82 | 242 |
|
83 |
| -* feat: `model.XsUri` migrate control characters according to spec (#498) |
| 243 | +* feat: add basic support for CDX 1.5 (#488) |
84 | 244 |
|
85 |
| -fixes https://github.com/CycloneDX/cyclonedx-python-lib/issues/497 |
| 245 | +This PR introduces basic support for CDX 1.5. |
| 246 | + |
| 247 | +Ref: |
| 248 | +- #404 |
| 249 | + |
| 250 | +**Schema:** |
| 251 | + |
| 252 | +- Extended schema-downloader and added specification files, |
| 253 | +- Adapted `README` and `SchemaVersion` for 1.5 |
| 254 | + |
| 255 | +**Model:** |
| 256 | + |
| 257 | +- Added `SchemaVersion1Dot5`, serializable annotations, |
| 258 | +- Extended `ComponentType` and `ExternalReferenceType` enums |
| 259 | + |
| 260 | +**Tests:** |
| 261 | + |
| 262 | +- Generated snapshots for 1.5. |
| 263 | +- In some existing tests `bom-ref` changed, since 1.5 is now listed before 1.4 |
| 264 | + |
| 265 | +**Chore:** |
| 266 | + |
| 267 | +- Added `newline = '\n'` to schema-downloader and `writeSnapshot` for cross-platform support |
| 268 | + |
| 269 | +---- |
| 270 | + |
| 271 | +* feat: add basic support for CDX 1.5 |
| 272 | + |
| 273 | +Signed-off-by: Johannes Feichtner <[email protected]> |
| 274 | + |
| 275 | +* docs: note minversions of `HashAlgorithm` cases |
| 276 | + |
| 277 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 278 | + |
| 279 | +* docs: set ref after schema download |
| 280 | + |
| 281 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 282 | + |
| 283 | +* refactor: add the newly missing/TODO elements |
| 284 | + |
| 285 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 286 | + |
| 287 | +* docs: note minversions of `ComponentType` cases |
| 288 | + |
| 289 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 290 | + |
| 291 | +* refactor: adjust xml child order for CDX1.5 |
| 292 | + |
| 293 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 294 | + |
| 295 | +* refactor: adjust xml child order for CDX1.5 |
| 296 | + |
| 297 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 298 | + |
| 299 | +* docs: update to latest CDX meta |
| 300 | + |
| 301 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 302 | + |
| 303 | +* refactor: adjust xml child order for CDX1.5 |
| 304 | + |
| 305 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 306 | + |
| 307 | +* feat: new enum cases fr VulnerabilityScoreSource |
| 308 | + |
| 309 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 310 | + |
| 311 | +* refactor: adjust xml child order for CDX1.5 |
| 312 | + |
| 313 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 314 | + |
| 315 | +* tests: adjust to latest implementation |
| 316 | + |
| 317 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 318 | + |
| 319 | +* revert deletion by accident |
| 320 | + |
| 321 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 322 | + |
| 323 | +--------- |
| 324 | + |
| 325 | +Signed-off-by: Johannes Feichtner <[email protected]> |
| 326 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 327 | +Co-authored-by: Jan Kowalleck <[email protected]> |
| 328 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`0546677`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/0546677f7ea82ab176836b4d4432a7e3dc6db230)) |
| 329 | + |
| 330 | +### Unknown |
| 331 | + |
| 332 | +* Feat: prevent unknwon enums from rendering (#496) |
| 333 | + |
| 334 | +- fixes #490 |
| 335 | +- BC: Component serialization may throw `cyclonedx.exception.serialization.SerializationOfUnsupportedComponentTypeException` |
| 336 | +- feat: serialization have own exceptions of `cyclonedx.exception.serialization.*` |
| 337 | +- tests: lots of (functional) tests related to enums and serialization |
| 338 | +- misc: bump `py-serializable@^0.15` -> `@^0.16` |
| 339 | + |
| 340 | + |
| 341 | +details & progress: |
| 342 | + |
| 343 | +- [x] `DataFlow` |
| 344 | +- [x] `Encoding` |
| 345 | +- [x] `HashAlgorithm` |
| 346 | +- [x] `ExternalReferenceType` |
| 347 | + convert "unknown" to `other` |
| 348 | +- [x] `component.ComponentScope` |
| 349 | +- [x] `component.ComponentType`. > tests done, migrator open |
| 350 | + Unclear how to proceed. dropping the info is a bad idea here. |
| 351 | + Best would be to throw an exception and abort the rendering. |
| 352 | +- [x] `component.PatchClassification` |
| 353 | +- [x] `impact_analysis.ImpactAnalysisAffectedStatus` |
| 354 | +- [x] `impact_analysis.ImpactAnalysisJustification` |
| 355 | +- [x] `impact_analysis.ImpactAnalysisResponse` |
| 356 | +- [x] `impact_analysis.ImpactAnalysisState` |
| 357 | +- [x] `issue.IssueClassification` |
| 358 | +- [x] `vulnerability.VulnerabilityScoreSource` |
| 359 | + convert "unknown" to `other` |
| 360 | +- [x] `vulnerability.VulnerabilitySeverity` |
86 | 361 |
|
87 | 362 | ---------
|
88 | 363 |
|
89 |
| -Signed-off-by: Jan Kowalleck <[email protected]> ( [`e490429`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/e49042976f8577af4061c34394db270612488cdf)) |
| 364 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`6c204f7`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/6c204f7f6afbc49fe936931c6188380a8072f650)) |
| 365 | + |
| 366 | +* bc: remove parser API (#495) |
| 367 | + |
| 368 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`ac1f48a`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/ac1f48afae06f16f2375398658dd86076758a84a)) |
| 369 | + |
| 370 | +* bc: remove const `output.LATEST_SUPPORTED_SCHEMA_VERSION` (#494) |
| 371 | + |
| 372 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`b10dc83`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/b10dc83f1036d22693342ef8711502a899a3f5bb)) |
| 373 | + |
| 374 | +* Remove deprecated 6.0.0 (#493) |
| 375 | + |
| 376 | +* bc: remove deprecated functionality |
| 377 | + |
| 378 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 379 | + |
| 380 | +* tests: remove unused/outdated tests |
| 381 | + |
| 382 | +Signed-off-by: Jan Kowalleck <[email protected]> |
| 383 | + |
| 384 | +--------- |
| 385 | + |
| 386 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`e9cc5ee`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/e9cc5ee75ccf466040c2c4d6f5e8b5de8e24a666)) |
| 387 | + |
| 388 | +* tests: remove unused test snapshots |
| 389 | + |
| 390 | +Signed-off-by: Jan Kowalleck <[email protected]> ( [`cb0d5b6`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/cb0d5b6a455ca6aef3070b4f473fec18202b3a2b)) |
90 | 391 |
|
91 | 392 |
|
92 | 393 | ## v5.1.1 (2023-11-02)
|
|
0 commit comments