v4.4.0

v4.4.0 (2024-04-21)

Chore

• chore: semantic-release git commit/sign valid email address

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (692b8ea)

Feature

• feat: publish to GHCR (#724)

Tee container image version of the app is also available on GitHubContainerRegistry: <https://github.com/orgs/CycloneDX/packages/container/package/cyclonedx-python>

---

Signed-off-by: jxdv <virgoj@protonmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: semantic-release <semantic-release@bot.local>
Co-authored-by: jxdv <virgoj@protonmail.com>
Co-authored-by: semantic-release <semantic-release@bot.local> (8c18484)

---

What's Changed

• feat: publish to GHCR by @jkowalleck & @jxdv in #724

Full Changelog: v4.3.0...v4.4.0

v4.3.4-alpha.1

v4.3.4-alpha.1 (2024-04-21)

Unknown

• Update release.yml

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (c48096b)

v4.3.3-alpha.1

v4.3.3-alpha.1 (2024-04-21)

Unknown

• Update release.yml

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (f1c6136)

v4.3.2-alpha.1

v4.3.2-alpha.1 (2024-04-21)

Unknown

• Update release.yml

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (44608d0)

• Update docker.yml

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (3c9428f)

• Update release.yml

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (fba87d9)

• Update release.yml

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (43a3dad)

v4.3.1-alpha.1

v4.3.1-alpha.1 (2024-04-20)

Chore

• chore: semantic-release git commit/sign valid email address

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (692b8ea)

Ci

• ci: release to GitHub registry (#721)

Closes #695. (87218e6)

Feature

• feat: improve declared licenses detection (#722)

• Add declared licenses from License Troves if not mapped to SPDX
  license ID
• CycloneDX 1.6 mark licenses as "declared"

fixes #718

---

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: jxdv <virgoj@protonmail.com> (d47640b)

Unknown

• Update release.yml

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (bfce1d1)

• prep ghcr release

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (6644556)

• docker build label org.opencontainers.image.source

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (3d6a7ce)

• docker build label org.opencontainers.image.source

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (aefd5a6)

• container image label 'org.opencontainers.image.source'

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (f8ff29e)

• Merge branch 'main' into ghcr-publish (46f7ada)

• Merge branch 'main' into ghcr-publish (1cb7a5f)

• docs

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: jxdv <virgoj@protonmail.com> (b7975ea)

• tidy and docs

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: jxdv <virgoj@protonmail.com> (b8b9409)

• rename job and description

Signed-off-by: jxdv <virgoj@protonmail.com> (da572de)

• update release-DockerHub job

Signed-off-by: jxdv <virgoj@protonmail.com> (25d2449)

• remove redundant job & fix typo

Signed-off-by: jxdv <virgoj@protonmail.com> (2e9d2fc)

• add release-GHCR job

Signed-off-by: jxdv <virgoj@protonmail.com> (9508cd0)

v4.3.0

v4.3.0 (2024-04-20)

Feature

• feat: improve declared licenses detection (#722)

• Add declared licenses from License Troves if not mapped to SPDX
  license ID
• CycloneDX 1.6 mark licenses as "declared"

fixes #718

---

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (b0ae453)

v4.2.0

v4.2.0 (2024-04-18)

Feature

• feat: support CycloneDX 1.6 output (#720)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (639b35a)

---

What's Changed

• feat: support CycloneDX 1.6 output by @jkowalleck in #720

Full Changelog: v4.1.6...v4.2.0

v4.1.6

v4.1.6 (2024-04-15)

Fix

• fix: more resilent PEP610 parsing (#716)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (93f0184)

---

What's Changed

• fix: more resilent PEP610 parsing by @jkowalleck in #716

Full Changelog: v4.1.5...v4.1.6

v4.1.5

v4.1.5 (2024-04-11)

Fix

• fix: docs for default of CLI switch --mc-type (#710)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (a218b40)

---

What's Changed

• fix: docs for default of CLI switch --mc-type by @jkowalleck in #710

Full Changelog: v4.1.4...v4.1.5

v4.1.4

v4.1.4 (2024-03-28)

Chore

• chore(deps-dev): Update autopep8 requirement from 2.0.4 to 2.1.0 (#699)

Updates the requirements on autopep8 to permit the latest version.

• Release notes
• Commits

---

updated-dependencies:

• dependency-name: autopep8
  dependency-type: direct:development
  ...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (59f07c1)

• chore(deps-dev): Update flake8-logging requirement from 1.5.0 to 1.6.0 (#701)

Updates the requirements on flake8-logging to permit the latest version.

• Changelog
• Commits

---

updated-dependencies:

• dependency-name: flake8-logging
  dependency-type: direct:development
  ...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (dfc63b6)

• chore(deps-dev): Update tox requirement from 4.14.1 to 4.14.2 (#700)

Updates the requirements on tox to permit the latest version.

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: tox
  dependency-type: direct:development
  ...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (7ae2145)

• chore(deps): Update packaging requirement || ^24 (#697)

---

updated-dependencies:

• dependency-name: packaging
  dependency-type: direct:production
  ...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (bd3f232)

• chore(deps-dev): Update coverage requirement from 7.4.3 to 7.4.4 (#696)

Updates the requirements on coverage to permit the latest version.

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: coverage
  dependency-type: direct:development
  ...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (8181ce9)

Fix

• fix: poetry analyzer crashed with certain optional package's version constraints (#703)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (8ade6e1)

---

What's Changed

• chore(deps-dev): Update coverage requirement from 7.4.3 to 7.4.4 by @dependabot in #696
• chore(deps): Update packaging requirement from ^22||^23 to ^22||^23 || ^24 by @dependabot in #697
• chore(deps-dev): Update tox requirement from 4.14.1 to 4.14.2 by @dependabot in #700
• chore(deps-dev): Update flake8-logging requirement from 1.5.0 to 1.6.0 by @dependabot in #701
• chore(deps-dev): Update autopep8 requirement from 2.0.4 to 2.1.0 by @dependabot in #699
• fix: poetry analyzer crashed with certain optional package's version constraints by @jkowalleck in #703

Full Changelog: v4.1.3...v4.1.4