You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: cargo-cyclonedx/CHANGELOG.md
+6-3Lines changed: 6 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,11 +9,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
9
9
10
10
### Added
11
11
12
-
- Added `--output-pattern=binary` for outputting a separate SBOM for each individual resulting binary in a package, and `--output-pattern=cargo-target` for a SBOM for each Cargo target including rlibs that do not produce executable artifacts. ([#619]) ([#630])
12
+
- Added `--describe` flag to control what is described by the SBOM: the crate as a whole in a single SBOM file, a separate SBOM file for every binary (executable or cdylib), or a separate SBOM file for every [Cargo target](https://doc.rust-lang.org/cargo/reference/cargo-targets.html) including rlibs and other kinds that do not produce executable artifacts. ([#619]) ([#630]) ([#634])
13
+
- Added an option to output CycloneDX v1.4 with `--spec-version=1.4`. The recorded data are the same between v1.3 and v1.4 outputs. ([#634])
13
14
- When using Rust 1.77 and later, the package hashes for crates originating from package registries are now recorded. ([#620])
14
15
15
16
### Changed
16
-
- The `.cdx` suffix is now always added to the end of the filename in all cases when the filename isn't literally "bom", to comply with the CycloneDX specification ([#602])
17
+
-`cargo cyclonedx` now displays the progress information for Cargo operations, such as updating the crates.io index. This can be suppressed with the `-q` flag. `-qq` is now required to suppress warnings. ([#634])
18
+
- Introduced the `--override-filename` flag replacing the `--output-prefix` and `--output-pattern` flags. ([#634])
19
+
- The `.cdx` suffix is now always added to the end of the filename in all cases when the filename isn't manually overridden, to comply with the CycloneDX specification. The `--output-cdx` flag that previously controlled this behavior is removed. ([#602]) ([#634])
17
20
18
21
## 0.4.1 - 2023-11-23
19
22
@@ -64,7 +67,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
64
67
65
68
- Removed the configuration through `Cargo.toml`. This is a fundamentally wrong place to record it. ([#520]) If you have use cases for a configuration file, please let us know by [filing an issue](https://github.com/CycloneDX/cyclonedx-rust-cargo/issues).
0 commit comments